Add Data Source for EBS default encryption

aws/data_source_aws_ebs_encryption_by_default.go

@@ -0,0 +1,35 @@
+package aws
+
+import (
+	"fmt"
+	"time"
+
+	"github.com/aws/aws-sdk-go/service/ec2"
+	"github.com/hashicorp/terraform/helper/schema"
+)
+
+func dataSourceAwsEbsEncryptionByDefault() *schema.Resource {
+	return &schema.Resource{
+		Read: dataSourceAwsEbsEncryptionByDefaultRead,
+
+		Schema: map[string]*schema.Schema{
+			"enabled": {
+				Type:     schema.TypeBool,
+				Computed: true,
+			},
+		},
+	}
+}
+func dataSourceAwsEbsEncryptionByDefaultRead(d *schema.ResourceData, meta interface{}) error {
+	conn := meta.(*AWSClient).ec2conn
+
+	res, err := conn.GetEbsEncryptionByDefault(&ec2.GetEbsEncryptionByDefaultInput{})
+	if err != nil {
+		return fmt.Errorf("Error reading default EBS encryption toggle: %q", err)
+	}
+
+	d.SetId(time.Now().UTC().String())
+	d.Set("enabled", res.EbsEncryptionByDefault)
+
+	return nil
+}

aws/data_source_aws_ebs_encryption_by_default_test.go

@@ -0,0 +1,57 @@
+package aws
+
+import (
+	"fmt"
+	"github.com/aws/aws-sdk-go/service/ec2"
+	"github.com/hashicorp/terraform/helper/resource"
+	"github.com/hashicorp/terraform/terraform"
+	"strconv"
+	"testing"
+)
+
+func TestAccDataSourceAwsEBSEncryptionByDefault_basic(t *testing.T) {
+	resource.ParallelTest(t, resource.TestCase{
+		PreCheck:  func() { testAccPreCheck(t) },
+		Providers: testAccProviders,
+		Steps: []resource.TestStep{
+			{
+				Config: testAccDataSourceAwsEBSEncryptionByDefaultConfig,
+				Check: resource.ComposeTestCheckFunc(
+					testAccCheckDataSourceAwsEBSEncryptionByDefault("data.aws_ebs_encryption_by_default.current"),
+				),
+			},
+		},
+	})
+}
+
+func testAccCheckDataSourceAwsEBSEncryptionByDefault(n string) resource.TestCheckFunc {
+	return func(s *terraform.State) error {
+		conn := testAccProvider.Meta().(*AWSClient).ec2conn
+
+		rs, ok := s.RootModule().Resources[n]
+		if !ok {
+			return fmt.Errorf("Not found: %s", n)
+		}
+
+		if rs.Primary.ID == "" {
+			return fmt.Errorf("No ID is set")
+		}
+
+		actual, err := conn.GetEbsEncryptionByDefault(&ec2.GetEbsEncryptionByDefaultInput{})
+		if err != nil {
+			return fmt.Errorf("Error reading default EBS encryption toggle: %q", err)
+		}
+
+		attr, _ := strconv.ParseBool(rs.Primary.Attributes["enabled"])
+
+		if attr != *actual.EbsEncryptionByDefault {
+			return fmt.Errorf("EBS encryption by default is not in expected state (%t)", *actual.EbsEncryptionByDefault)
+		}
+
+		return nil
+	}
+}
+
+const testAccDataSourceAwsEBSEncryptionByDefaultConfig = `
+data "aws_ebs_encryption_by_default" "current" { }
+`

aws/provider.go

@@ -173,6 +173,7 @@ func Provider() terraform.ResourceProvider {
 			"aws_db_snapshot":                               dataSourceAwsDbSnapshot(),
 			"aws_dx_gateway":                                dataSourceAwsDxGateway(),
 			"aws_dynamodb_table":                            dataSourceAwsDynamoDbTable(),
+			"aws_ebs_encryption_by_default":                 dataSourceAwsEbsEncryptionByDefault(),
 			"aws_ebs_snapshot":                              dataSourceAwsEbsSnapshot(),
 			"aws_ebs_snapshot_ids":                          dataSourceAwsEbsSnapshotIds(),
 			"aws_ebs_volume":                                dataSourceAwsEbsVolume(),