New resource: r/aws_cloudfront_distribution_tenant: Added new distribution tenant resource as part of Cloudfront's SaaS Manager feature

[gahykiamzn]

Rollback Plan

If a change needs to be reverted, we will publish an updated version of the library.

Changes to Security Controls

N/A

Description

Summary of changes:

• Reimplemented new Distribution Tenant resource using the Terraform framework as pointed out in
  [Enhancement] r/aws_cloudfront_distribution: Added SaaS Manager configuration support for distributions #44034
• Merged data source code changes into this PR to keep Distribution Tenant resource changes together

Relations

Relates #44885, #44034, #42409

Closes #44181

References

Connection Group CDK Docs
General SaaS information
SaaS unsupported features

Output from Acceptance Testing

important to note that this needs to be filled with your root domain: ACM_CERTIFICATE_ROOT_DOMAIN
and an ACM certificate with the domain *.tf.<YOUR_ROOT_DOMAIN> must exist as well

gahyki@bcd074487ec1 terraform-provider-aws % export ACM_CERTIFICATE_ROOT_DOMAIN=<YOUR_ROOT_DOMAIN>
gahyki@bcd074487ec1 terraform-provider-aws % make testacc PKG=cloudfront TESTS=TestAccCloudFrontDistributionTenant          
make: Verifying source code with gofmt...
==> Checking that code complies with gofmt requirements...
make: Running acceptance tests on branch: 🌿 backup-tenant 🌿...
TF_ACC=1 go1.24.8 test ./internal/service/cloudfront/... -v -count 1 -parallel 20 -run='TestAccCloudFrontDistributionTenant'  -timeout 360m -vet=off
2025/11/14 12:15:19 Creating Terraform AWS Provider (SDKv2-style)...
2025/11/14 12:15:19 Initializing Terraform AWS Provider (SDKv2-style)...
=== RUN   TestAccCloudFrontDistributionTenantDataSource_basic
=== PAUSE TestAccCloudFrontDistributionTenantDataSource_basic
=== RUN   TestAccCloudFrontDistributionTenantDataSource_byARN
=== PAUSE TestAccCloudFrontDistributionTenantDataSource_byARN
=== RUN   TestAccCloudFrontDistributionTenantDataSource_byName
=== PAUSE TestAccCloudFrontDistributionTenantDataSource_byName
=== RUN   TestAccCloudFrontDistributionTenantDataSource_byDomain
=== PAUSE TestAccCloudFrontDistributionTenantDataSource_byDomain
=== RUN   TestAccCloudFrontDistributionTenant_basic
=== PAUSE TestAccCloudFrontDistributionTenant_basic
=== RUN   TestAccCloudFrontDistributionTenant_disappears
=== PAUSE TestAccCloudFrontDistributionTenant_disappears
=== RUN   TestAccCloudFrontDistributionTenant_customCertificate
=== PAUSE TestAccCloudFrontDistributionTenant_customCertificate
=== RUN   TestAccCloudFrontDistributionTenant_customCertificateWithWebACL
=== PAUSE TestAccCloudFrontDistributionTenant_customCertificateWithWebACL
=== RUN   TestAccCloudFrontDistributionTenant_parameters
=== PAUSE TestAccCloudFrontDistributionTenant_parameters
=== RUN   TestAccCloudFrontDistributionTenant_tags
=== PAUSE TestAccCloudFrontDistributionTenant_tags
=== CONT  TestAccCloudFrontDistributionTenantDataSource_basic
=== CONT  TestAccCloudFrontDistributionTenant_disappears
=== CONT  TestAccCloudFrontDistributionTenant_basic
=== CONT  TestAccCloudFrontDistributionTenant_parameters
=== CONT  TestAccCloudFrontDistributionTenant_customCertificateWithWebACL
=== CONT  TestAccCloudFrontDistributionTenant_customCertificate
=== CONT  TestAccCloudFrontDistributionTenantDataSource_byName
=== CONT  TestAccCloudFrontDistributionTenantDataSource_byARN
=== CONT  TestAccCloudFrontDistributionTenant_tags
=== CONT  TestAccCloudFrontDistributionTenantDataSource_byDomain
--- PASS: TestAccCloudFrontDistributionTenantDataSource_byName (643.21s)
--- PASS: TestAccCloudFrontDistributionTenantDataSource_byDomain (643.81s)
--- PASS: TestAccCloudFrontDistributionTenant_basic (666.29s)
--- PASS: TestAccCloudFrontDistributionTenantDataSource_basic (666.55s)
--- PASS: TestAccCloudFrontDistributionTenant_parameters (668.42s)
--- PASS: TestAccCloudFrontDistributionTenant_disappears (670.68s)
--- PASS: TestAccCloudFrontDistributionTenant_customCertificate (671.35s)
--- PASS: TestAccCloudFrontDistributionTenantDataSource_byARN (673.91s)
--- PASS: TestAccCloudFrontDistributionTenant_customCertificateWithWebACL (696.52s)
--- PASS: TestAccCloudFrontDistributionTenant_tags (1079.55s)
PASS
ok      github.com/hashicorp/terraform-provider-aws/internal/service/cloudfront 1086.436s

[github-actions]

Community Guidelines

This comment is added to every new Pull Request to provide quick reference to how the Terraform AWS Provider is maintained. Please review the information below, and thank you for contributing to the community that keeps the provider thriving! 🚀

Voting for Prioritization

• Please vote on this Pull Request by adding a 👍 reaction to the original post to help the community and maintainers prioritize it.
• Please see our prioritization guide for additional information on how the maintainers handle prioritization.
• Please do not leave +1 or other comments that do not add relevant new information or questions; they generate extra noise for others following the Pull Request and do not help prioritize the request.

Pull Request Authors

• Review the contribution guide relating to the type of change you are making to ensure all of the necessary steps have been taken.
• Whether or not the branch has been rebased will not impact prioritization, but doing so is always a welcome surprise.