Merge pull request #34460 from hashicorp/f-elasticache-auth_token_upd…

…ate_strategy r/aws_elasticache_replication_group: add auth_token_update_strategy argument
hashicorp · Nov 21, 2023 · 940196f · 940196f
2 parents 8ae0507 + 4ef3c76
commit 940196f
Show file tree

Hide file tree

Showing 4 changed files with 185 additions and 41 deletions.
diff --git a/.changelog/34460.txt b/.changelog/34460.txt
@@ -0,0 +1,3 @@
+```release-note:enhancement
+resource/aws_elaticache_replication_group: Add `auth_token_update_strategy` argument
+```
diff --git a/internal/service/elasticache/replication_group.go b/internal/service/elasticache/replication_group.go
@@ -68,6 +68,13 @@ func ResourceReplicationGroup() *schema.Resource {
 				ValidateFunc:  validReplicationGroupAuthToken,
 				ConflictsWith: []string{"user_group_ids"},
 			},
+			"auth_token_update_strategy": {
+				Type:         schema.TypeString,
+				Optional:     true,
+				ValidateFunc: validation.StringInSlice(elasticache.AuthTokenUpdateStrategyType_Values(), true),
+				Default:      elasticache.AuthTokenUpdateStrategyTypeRotate,
+				RequiredWith: []string{"auth_token"},
+			},
 			"auto_minor_version_upgrade": {
 				Type:         nullable.TypeNullableBool,
 				Optional:     true,
@@ -855,11 +862,11 @@ func resourceReplicationGroupUpdate(ctx context.Context, d *schema.ResourceData,
 			}
 		}
 
-		if d.HasChange("auth_token") {
+		if d.HasChanges("auth_token", "auth_token_update_strategy") {
 			params := &elasticache.ModifyReplicationGroupInput{
 				ApplyImmediately:        aws.Bool(true),
 				ReplicationGroupId:      aws.String(d.Id()),
-				AuthTokenUpdateStrategy: aws.String("ROTATE"),
+				AuthTokenUpdateStrategy: aws.String(d.Get("auth_token_update_strategy").(string)),
 				AuthToken:               aws.String(d.Get("auth_token").(string)),
 			}