internal/sweep: additional skippable errors (#43657)

Author: jar-b

internal/sweep/awsv2/skip.go

@@ -94,6 +94,10 @@ func SkipSweepError(err error) bool {
 	if tfawserr.ErrMessageContains(err, "InvalidParameterValueException", "Access Denied to API Version") {
 		return true
 	}
+	// Example (GovCloud): InvalidParameterException: The DATA_PROTECTION_POLICY policy type is not supported in this region
+	if tfawserr.ErrMessageContains(err, "InvalidParameterException", "DATA_PROTECTION_POLICY policy type is not supported in this region") {
+		return true
+	}
 	// Example (GovCloud): The AppStream 2.0 user pool feature is not supported in the us-gov-west-1 AWS Region
 	if tfawserr.ErrMessageContains(err, "InvalidParameterValueException", "feature is not supported") {
 		return true
@@ -102,6 +106,10 @@ func SkipSweepError(err error) bool {
 	if tfawserr.ErrMessageContains(err, "InvalidParameterValueException", "This API operation is currently unavailable") {
 		return true
 	}
+	// Example (GovCloud): InvalidSignatureException: Credential should be scoped to a valid region
+	if tfawserr.ErrMessageContains(err, "InvalidSignatureException", "Credential should be scoped to a valid region") {
+		return true
+	}
 	// For example from us-west-2 Route53 zone
 	if tfawserr.ErrMessageContains(err, "KeySigningKeyInParentDSRecord", "Due to DNS lookup failure") {
 		return true
@@ -114,6 +122,10 @@ func SkipSweepError(err error) bool {
 	if tfawserr.ErrMessageContains(err, "ResourceNotFoundException", "The subscription does not exist") {
 		return true
 	}
+	// Example (GovCloud): SignatureDoesNotMatch: Credential should be scoped to a valid region
+	if tfawserr.ErrMessageContains(err, "SignatureDoesNotMatch", "Credential should be scoped to a valid region") {
+		return true
+	}
 	// For example from us-gov-east-1 IoT domain configuration
 	if tfawserr.ErrMessageContains(err, "UnauthorizedException", "API is not available in") {
 		return true