New AWS Workspaces Cross Region Redirection Support

[dthvt]

Community Note

• Please vote on this issue by adding a 👍 reaction to the original issue to help the community and maintainers prioritize this request
• Please do not leave "+1" or other comments that do not add relevant new information or questions, they generate extra noise for issue followers and do not help prioritize the request
• If you are interested in working on this issue or have submitted a pull request, please leave a comment

Description

AWS Workspaces has added cross-region redirection support for disaster recovery. Propose adding one or more new resources to enable support in terraform.

New or Affected Resource(s)

• aws_workspaces_connection_alias
• aws_workspaces_connection_alias_association

Potential Terraform Configuration

# Copy-paste your Terraform configurations here - for large Terraform configs,
# please use a service like Dropbox and share a link to the ZIP file. For
# security, you can also encrypt the files using our GPG public key.

References

• https://aws.amazon.com/about-aws/whats-new/2020/09/amazon-workspaces-introduces-support-cross-region-redirection/
• https://docs.aws.amazon.com/workspaces/latest/adminguide/cross-region-redirection.html
• https://docs.aws.amazon.com/cli/latest/reference/workspaces/create-connection-alias.html
• https://docs.aws.amazon.com/cli/latest/reference/workspaces/associate-connection-alias.html
• https://docs.aws.amazon.com/cli/latest/reference/workspaces/disassociate-connection-alias.html
• https://docs.aws.amazon.com/cli/latest/reference/workspaces/delete-connection-alias.html
• https://docs.aws.amazon.com/cli/latest/reference/workspaces/describe-connection-aliases.html
• https://docs.aws.amazon.com/cli/latest/reference/workspaces/update-connection-alias-permission.html
• https://docs.aws.amazon.com/cli/latest/reference/workspaces/describe-connection-alias-permissions.html

[brittandeyoung]

To add some context here. With looking at the APIs for this, there will likely need to be three additional terraform resources:

• aws_workspaces_connection_alias
• aws_workspaces_workspace_connection_alias_permissions
• aws_workspaces_workspace_connection_alias_association

Here is some example code.

resource "aws_workspaces_connection_alias" "this" {
  connection_string = "this.is.test"
  tags = {
    tag1 = "TagValue"
  }
}

resource "aws_workspaces_connection_alias_permission" "this" {
  alias_id = aws_workspaces_workspace_connection_alias.this.id
  allow_association = true
  share_account_id  = "111111111111"
}

resource "aws_workspaces_connection_alias_association" "this" {
  alias_id    = aws_workspaces_workspace_connection_alias.this.id
  resource_id = aws_workspaces_directory.this.id
}