New resource aws_secretsmanager_resource_policy

[ribeiroh]

Community Note

• Please vote on this issue by adding a 👍 reaction to the original issue to help the community and maintainers prioritize this request
• Please do not leave "+1" or other comments that do not add relevant new information or questions, they generate extra noise for issue followers and do not help prioritize the request
• If you are interested in working on this issue or have submitted a pull request, please leave a comment

Description

It would be interesting to have the ability to decouple the creation of a Secrets Manager from the definition of its resource policy. This is useful if you need to "inject" the policy from a separate module, especially when that happens after the secret already exists.

New or Affected Resource(s)

• aws_secretsmanager_resource_policy

Potential Terraform Configuration

resource "aws_secretsmanager_secret" "example" {
  name = "example"
}

resource "aws_secretsmanager_resource_policy" "example_policy {
  secret_arn = aws_secretsmanager_secret.example.arn
  block_public_policy = true
  policy = <JSON policy>
}

References

• PutResourcePolicy
• DeleteResourcePolicy

[DrFaust92]

will be added in #14468

ill add block_public_policy argument as well

[ghost]

I'm going to lock this issue because it has been closed for 30 days ⏳. This helps our maintainers find and focus on the active issues.

If you feel this issue should be reopened, we encourage creating a new issue linking back to this one for added context. Thanks!