New Resource: aws_organizations_organization

aws/config.go

@@ -54,6 +54,7 @@ import (
 	"github.com/aws/aws-sdk-go/service/lambda"
 	"github.com/aws/aws-sdk-go/service/lightsail"
 	"github.com/aws/aws-sdk-go/service/opsworks"
+	"github.com/aws/aws-sdk-go/service/organizations"
 	"github.com/aws/aws-sdk-go/service/rds"
 	"github.com/aws/aws-sdk-go/service/redshift"
 	"github.com/aws/aws-sdk-go/service/route53"
@@ -165,6 +166,7 @@ type AWSClient struct {
 	lambdaconn            *lambda.Lambda
 	lightsailconn         *lightsail.Lightsail
 	opsworksconn          *opsworks.OpsWorks
+	orgsconn              *organizations.Organizations
 	glacierconn           *glacier.Glacier
 	codebuildconn         *codebuild.CodeBuild
 	codedeployconn        *codedeploy.CodeDeploy
@@ -369,6 +371,7 @@ func (c *Config) Client() (interface{}, error) {
 	client.lambdaconn = lambda.New(sess)
 	client.lightsailconn = lightsail.New(sess)
 	client.opsworksconn = opsworks.New(sess)
+	client.orgsconn = organizations.New(sess)
 	client.r53conn = route53.New(r53Sess)
 	client.rdsconn = rds.New(awsRdsSess)
 	client.redshiftconn = redshift.New(sess)

aws/provider.go

@@ -393,6 +393,7 @@ func Provider() terraform.ResourceProvider {
 			"aws_opsworks_user_profile":                    resourceAwsOpsworksUserProfile(),
 			"aws_opsworks_permission":                      resourceAwsOpsworksPermission(),
 			"aws_opsworks_rds_db_instance":                 resourceAwsOpsworksRdsDbInstance(),
+			"aws_organization":                             resourceAwsOrganization(),
 			"aws_placement_group":                          resourceAwsPlacementGroup(),
 			"aws_proxy_protocol_policy":                    resourceAwsProxyProtocolPolicy(),
 			"aws_rds_cluster":                              resourceAwsRDSCluster(),

aws/resource_aws_organization.go

@@ -0,0 +1,104 @@
+package aws
+
+import (
+	"fmt"
+	"github.com/aws/aws-sdk-go/aws"
+	"github.com/aws/aws-sdk-go/aws/awserr"
+	"github.com/aws/aws-sdk-go/service/organizations"
+	"github.com/hashicorp/terraform/helper/schema"
+	"github.com/hashicorp/terraform/helper/validation"
+	"log"
+)
+
+func resourceAwsOrganization() *schema.Resource {
+	return &schema.Resource{
+		Create: resourceAwsOrganizationCreate,
+		Read:   resourceAwsOrganizationRead,
+		Update: resourceAwsOrganizationUpdate,
+		Delete: resourceAwsOrganizationDelete,
+		Importer: &schema.ResourceImporter{
+			State: schema.ImportStatePassthrough,
+		},
+
+		Schema: map[string]*schema.Schema{
+			"arn": &schema.Schema{
+				Type:     schema.TypeString,
+				Computed: true,
+			},
+			"master_account_arn": &schema.Schema{
+				Type:     schema.TypeString,
+				Computed: true,
+			},
+			"master_account_email": &schema.Schema{
+				Type:     schema.TypeString,
+				Computed: true,
+			},
+			"master_account_id": &schema.Schema{
+				Type:     schema.TypeString,
+				Computed: true,
+			},
+			"feature_set": {
+				Type:         schema.TypeString,
+				Optional:     true,
+				Default:      "ALL",
+				ValidateFunc: validation.StringInSlice([]string{"ALL", "CONSOLIDATED_BILLING"}, true),
+			},
+		},
+	}
+}
+
+func resourceAwsOrganizationCreate(d *schema.ResourceData, meta interface{}) error {
+	conn := meta.(*AWSClient).orgsconn
+
+	// Create the organization
+	createOpts := &organizations.CreateOrganizationInput{
+		FeatureSet: aws.String(d.Get("feature_set").(string)),
+	}
+	log.Printf("[DEBUG] Organization create config: %#v", createOpts)
+
+	resp, err := conn.CreateOrganization(createOpts)
+	if err != nil {
+		return fmt.Errorf("Error creating organization: %s", err)
+	}
+
+	// Get the ID and store it
+	org := resp.Organization
+	d.SetId(*org.Id)
+	log.Printf("[INFO] Organization ID: %s", d.Id())
+
+	return resourceAwsOrganizationUpdate(d, meta)
+}
+
+func resourceAwsOrganizationRead(d *schema.ResourceData, meta interface{}) error {
+	conn := meta.(*AWSClient).orgsconn
+	org, err := conn.DescribeOrganization(&organizations.DescribeOrganizationInput{})
+	if err != nil {
+		if orgerr, ok := err.(awserr.Error); ok && orgerr.Code() == "AWSOrganizationsNotInUseException" {
+			d.SetId("")
+			return nil
+		}
+		return err
+	}
+
+	d.Set("arn", org.Organization.Arn)
+	d.Set("feature_set", org.Organization.FeatureSet)
+	d.Set("master_account_arn", org.Organization.MasterAccountArn)
+	d.Set("master_account_email", org.Organization.MasterAccountEmail)
+	d.Set("master_account_id", org.Organization.MasterAccountId)
+	return nil
+}
+
+func resourceAwsOrganizationUpdate(d *schema.ResourceData, meta interface{}) error {
+	return resourceAwsOrganizationRead(d, meta)
+}
+
+func resourceAwsOrganizationDelete(d *schema.ResourceData, meta interface{}) error {
+	conn := meta.(*AWSClient).orgsconn
+	_, err := conn.DeleteOrganization(&organizations.DeleteOrganizationInput{})
+	if err != nil {
+		return err
+	}
+
+	return nil
+
+}

aws/resource_aws_organization_test.go

@@ -0,0 +1,89 @@
+package aws
+
+import (
+	"fmt"
+	"testing"
+
+	"github.com/aws/aws-sdk-go/service/organizations"
+	"github.com/hashicorp/terraform/helper/resource"
+	"github.com/hashicorp/terraform/terraform"
+)
+
+func TestAccAWSOrganization_basic(t *testing.T) {
+	var organization organizations.Organization
+
+	feature_set := "CONSOLIDATED_BILLING"
+
+	resource.Test(t, resource.TestCase{
+		PreCheck:     func() { testAccPreCheck(t) },
+		Providers:    testAccProviders,
+		CheckDestroy: testAccCheckAWSOrganizationDestroy,
+		Steps: []resource.TestStep{
+			{
+				Config: testAccAWSOrganizationConfig(feature_set),
+				Check: resource.ComposeTestCheckFunc(
+					testAccCheckAWSOrganizationExists("aws_organization.test", &organization),
+				),
+			},
+		},
+	})
+}
+
+func testAccCheckAWSOrganizationDestroy(s *terraform.State) error {
+	conn := testAccProvider.Meta().(*AWSClient).orgsconn
+
+	for _, rs := range s.RootModule().Resources {
+		if rs.Type != "aws_organization" {
+			continue
+		}
+
+		params := &organizations.DescribeOrganizationInput{}
+
+		resp, err := conn.DescribeOrganization(params)
+
+		if err != nil || resp == nil {
+			return nil
+		}
+
+		if resp.Organization != nil {
+			return fmt.Errorf("Bad: Organization still exists: %q", rs.Primary.ID)
+		}
+	}
+
+	return nil
+
+}
+
+func testAccCheckAWSOrganizationExists(n string, a *organizations.Organization) resource.TestCheckFunc {
+	return func(s *terraform.State) error {
+		rs, ok := s.RootModule().Resources[n]
+		if !ok {
+			return fmt.Errorf("Not found: %s", n)
+		}
+
+		conn := testAccProvider.Meta().(*AWSClient).orgsconn
+		params := &organizations.DescribeOrganizationInput{}
+
+		resp, err := conn.DescribeOrganization(params)
+
+		if err != nil || resp == nil {
+			return nil
+		}
+
+		if resp.Organization == nil {
+			return fmt.Errorf("Bad: Organization %q does not exist", rs.Primary.ID)
+		}
+
+		a = resp.Organization
+
+		return nil
+	}
+}
+
+func testAccAWSOrganizationConfig(feature_set string) string {
+	return fmt.Sprintf(`
+resource "aws_organization" "test" {
+  feature_set = "%s"
+}
+`, feature_set)
+}