[New Resource]: `aws_ssoadmin_application_grant`

[jar-b]

Description

Manage AWS Identity Center application grants with Terraform.

Requested Resource(s) and/or Data Source(s)

• aws_ssoadmin_application_grant

Potential Terraform Configuration

resource "aws_ssoadmin_application_grant" "example" {
  application_arn = aws_ssoadmin_application.example.application_arn
  grant_type      = "authorization_code"

  grant {
    authorization_code {
       redirect_uris = [""]
    }

    # only one grant type may be configured within a block, but
    # all available types should be supported.
    #
    # jwt_bearer {}
    # refresh_token {}
    # token_exchange {}
  }
}

References

• https://docs.aws.amazon.com/singlesignon/latest/APIReference/API_PutApplicationGrant.html
• https://docs.aws.amazon.com/singlesignon/latest/APIReference/API_GetApplicationGrant.html
• https://docs.aws.amazon.com/singlesignon/latest/APIReference/API_DeleteApplicationGrant.html
• Relates r/aws_ssoadmin_application: new resource #34723

Would you like to implement a fix?

None

[github-actions]

Community Note

Voting for Prioritization

• Please vote on this issue by adding a 👍 reaction to the original post to help the community and maintainers prioritize this request.
• Please see our prioritization guide for information on how we prioritize.
• Please do not leave "+1" or other comments that do not add relevant new information or questions, they generate extra noise for issue followers and do not help prioritize the request.

Volunteering to Work on This Issue

• If you are interested in working on this issue, please leave a comment.
• If this would be your first contribution, please review the contribution guide.

[DanielRieske]

👋 I'll gladly pick this issue up, we are however blocked till #34839 is merged.

The JwtBearerGrant requires down the line a TrustedTokenIssuerArn and to create a full test-suite I'd need the resource in the PR above.

[shannonrdunn]

Heya @DanielRieske was just looking into this resource, and found this issue. Was there anything blocking from continuing now that #34839 was merged? I can take a look into implementing this, just wanted to know if you ran into an issue before I did!

[DanielRieske]

Hi @shannonrdunn 👋,

Seems I worked on this resource back in April 2024 (DanielRieske@e108ef8#diff-3047089b4a5988f7e3010617d25396a363d0a9f1ce56511723d912910a824a7d) but the migration of the aws-sdk took priority and I put this one on the back burner.

It seems I implemented the majority of it, I would be happy to take a look at this resource again.

[alexoughton]

Hello @DanielRieske ,

Do you think this is something which may get picked up soon?

Thanks!