add api dest

Author: matteopasa

sysdig/data_source_sysdig_secure_onboarding.go

@@ -375,45 +375,84 @@ func dataSourceSysdigSecureCloudIngestionAssets() *schema.Resource {
 
 // Retrieves the information of a resource form the file and loads it in Terraform
 func dataSourceSysdigSecureCloudIngestionAssetsRead(ctx context.Context, d *schema.ResourceData, meta interface{}) diag.Diagnostics {
+	var assets map[string]any
+	var err error
+
 	client, err := getSecureOnboardingClient(meta.(SysdigClients))
 	if err != nil {
 		return diag.FromErr(err)
 	}
 
-	assets, err := client.GetCloudIngestionAssetsSecure(ctx, d.Get("cloud_provider").(string), d.Get("cloud_provider_id").(string))
-	if err != nil {
-		return diag.FromErr(err)
+	cloudProvider, ok := d.GetOk("cloud_provider")
+	if !ok {
+		// GCP case
+		assets, err = client.GetCloudIngestionAssetsSecure(ctx, "", "", "")
+		if err != nil {
+			return diag.FromErr(err)
+		}
+		assetsGcp, _ := assets["gcp"].(map[string]interface{})
+		err = d.Set("gcp_routing_key", assetsGcp["routingKey"])
+		if err != nil {
+			return diag.FromErr(err)
+		}
+
+		err = d.Set("gcp_metadata", assetsGcp["metadata"])
+		if err != nil {
+			return diag.FromErr(err)
+		}
+		return nil
 	}
 
-	assetsAws, _ := assets["aws"].(map[string]interface{})
-	assetsGcp, _ := assets["gcp"].(map[string]interface{})
+	componentType, ok := d.GetOk("component_type")
+	if !ok {
+		// AWS SNS case
+		assets, err = client.GetCloudIngestionAssetsSecure(ctx, cloudProvider.(string), d.Get("cloud_provider_id").(string), "")
+		if err != nil {
+			return diag.FromErr(err)
+		}
+		assetsAws, _ := assets["aws"].(map[string]interface{})
 
-	var ingestionURL string
-	if assetsAws["snsMetadata"] != nil {
-		ingestionURL = assetsAws["snsMetadata"].(map[string]interface{})["ingestionURL"].(string)
-	}
+		var ingestionURL string
+		if assetsAws["snsMetadata"] != nil {
+			ingestionURL = assetsAws["snsMetadata"].(map[string]interface{})["ingestionURL"].(string)
+		}
 
-	d.SetId("cloudIngestionAssets")
-	err = d.Set("aws", map[string]interface{}{
-		"eventBusARN":     assetsAws["eventBusARN"],
-		"eventBusARNGov":  assetsAws["eventBusARNGov"],
-		"sns_routing_key": assetsAws["snsRoutingKey"],
-		"sns_routing_url": ingestionURL,
-	})
-	if err != nil {
-		return diag.FromErr(err)
-	}
+		d.SetId("cloudIngestionAssets")
+		err = d.Set("aws", map[string]interface{}{
+			"eventBusARN":     assetsAws["eventBusARN"],
+			"eventBusARNGov":  assetsAws["eventBusARNGov"],
+			"sns_routing_key": assetsAws["snsRoutingKey"],
+			"sns_routing_url": ingestionURL,
+		})
+		if err != nil {
+			return diag.FromErr(err)
+		}
+	} else {
+		// AWS Api Destination case
+		assets, err = client.GetCloudIngestionAssetsSecure(ctx, d.Get("cloud_provider").(string), d.Get("cloud_provider_id").(string), componentType.(string))
+		if err != nil {
+			return diag.FromErr(err)
+		}
 
-	err = d.Set("gcp_routing_key", assetsGcp["routingKey"])
-	if err != nil {
-		return diag.FromErr(err)
-	}
+		assetsAws, _ := assets["aws"].(map[string]interface{})
 
-	err = d.Set("gcp_metadata", assetsGcp["metadata"])
-	if err != nil {
-		return diag.FromErr(err)
-	}
+		var ingestionURL string
+		if assetsAws["apiDestMetadata"] != nil {
+			ingestionURL = assetsAws["apiDestMetadata"].(map[string]interface{})["ingestionURL"].(string)
+		}
 
+		d.SetId("cloudIngestionAssets")
+		err = d.Set("aws", map[string]interface{}{
+			"eventBusARN":          assetsAws["eventBusARN"],
+			"eventBusARNGov":       assetsAws["eventBusARNGov"],
+			"api_dest_routing_key": assetsAws["apiDestRoutingKey"],
+			"api_dest_routing_url": ingestionURL,
+			"api_dest_token":       assetsAws["apiDestToken"],
+		})
+		if err != nil {
+			return diag.FromErr(err)
+		}
+	}
 	return nil
 }
 

sysdig/data_source_sysdig_secure_onboarding_test.go

@@ -205,6 +205,18 @@ func TestAccCloudIngestionAssetsDataSource(t *testing.T) {
 					resource.TestCheckResourceAttrSet("data.sysdig_secure_cloud_ingestion_assets.assets", "aws.sns_routing_url"),
 				),
 			},
+			{
+				Config: `data "sysdig_secure_cloud_ingestion_assets" "assets" {
+						cloud_provider = "aws" 
+						cloud_provider_id = "012345678901"
+						component_type = "COMPONENT_WEBHOOK_DATASOURCE"
+				}`,
+				Check: resource.ComposeTestCheckFunc(
+					resource.TestCheckResourceAttrSet("data.sysdig_secure_cloud_ingestion_assets.assets", "aws.api_dest_routing_key"),
+					resource.TestCheckResourceAttrSet("data.sysdig_secure_cloud_ingestion_assets.assets", "aws.api_dest_routing_url"),
+					resource.TestCheckResourceAttrSet("data.sysdig_secure_cloud_ingestion_assets.assets", "aws.api_dest_token"),
+				),
+			},
 		},
 	})
 }

sysdig/internal/client/v2/onboarding.go

@@ -11,7 +11,7 @@ const (
 	onboardingTrustedAzureAppPath         = "%s/api/secure/onboarding/v2/trustedAzureApp?app=%s"
 	onboardingTenantExternaIDPath         = "%s/api/secure/onboarding/v2/externalID"
 	onboardingAgentlessScanningAssetsPath = "%s/api/secure/onboarding/v2/agentlessScanningAssets"
-	onboardingCloudIngestionAssetsPath    = "%s/api/secure/onboarding/v2/cloudIngestionAssets?provider=%s&providerID=%s"
+	onboardingCloudIngestionAssetsPath    = "%s/api/secure/onboarding/v2/cloudIngestionAssets?provider=%s&providerID=%s&componentType=%s"
 	onboardingTrustedRegulationAssetsPath = "%s/api/secure/onboarding/v2/trustedRegulationAssets?provider=%s"
 	onboardingTrustedOracleAppPath        = "%s/api/secure/onboarding/v2/trustedOracleApp?app=%s"
 )
@@ -22,7 +22,7 @@ type OnboardingSecureInterface interface {
 	GetTrustedAzureAppSecure(ctx context.Context, app string) (map[string]string, error)
 	GetTenantExternalIDSecure(ctx context.Context) (string, error)
 	GetAgentlessScanningAssetsSecure(ctx context.Context) (map[string]any, error)
-	GetCloudIngestionAssetsSecure(ctx context.Context, provider, providerID string) (map[string]any, error)
+	GetCloudIngestionAssetsSecure(ctx context.Context, provider, providerID, componentType string) (map[string]any, error)
 	GetTrustedCloudRegulationAssetsSecure(ctx context.Context, provider string) (map[string]string, error)
 	GetTrustedOracleAppSecure(ctx context.Context, app string) (map[string]string, error)
 }
@@ -83,8 +83,8 @@ func (client *Client) GetAgentlessScanningAssetsSecure(ctx context.Context) (map
 	return Unmarshal[map[string]interface{}](response.Body)
 }
 
-func (client *Client) GetCloudIngestionAssetsSecure(ctx context.Context, provider, providerID string) (map[string]interface{}, error) {
-	response, err := client.requester.Request(ctx, http.MethodGet, fmt.Sprintf(onboardingCloudIngestionAssetsPath, client.config.url, provider, providerID), nil)
+func (client *Client) GetCloudIngestionAssetsSecure(ctx context.Context, provider, providerID, componentType string) (map[string]interface{}, error) {
+	response, err := client.requester.Request(ctx, http.MethodGet, fmt.Sprintf(onboardingCloudIngestionAssetsPath, client.config.url, provider, providerID, componentType), nil)
 	if err != nil {
 		return nil, err
 	}