add support for SQS-managed SSE

[rmorris1218]

Community Note

• Please vote on this pull request by adding a 👍 reaction to the original pull request comment to help the community and maintainers prioritize this request
• Please do not leave "+1" or other comments that do not add relevant new information or questions, they generate extra noise for pull request followers and do not help prioritize the request

Closes #21948 -- add support for SSE-SQS for the aws_sqs_queue resource.

Output from acceptance testing:

$ make testacc TESTS=TestAccSQSQueue_encryption PKG=sqs
==> Checking that code complies with gofmt requirements...
TF_ACC=1 go test ./internal/service/sqs/... -v -count 1 -parallel 20 -run='TestAccSQSQueue_encryption' -timeout 180m
=== RUN   TestAccSQSQueue_encryption
=== PAUSE TestAccSQSQueue_encryption
=== CONT  TestAccSQSQueue_encryption
--- PASS: TestAccSQSQueue_encryption (116.59s)
PASS
ok  	github.com/hashicorp/terraform-provider-aws/internal/service/sqs	119.555s
...

[github-actions]

Thank you for your contribution! 🚀

Please note that typically Go dependency changes are handled in this repository by dependabot or the maintainers. This is to prevent pull request merge conflicts and further delay reviews of contributions. Remove any changes to the go.mod or go.sum files and commit them into this pull request.

Additional details:

• Check open pull requests with the dependencies label to view other dependency updates.
• If this pull request includes an update the AWS Go SDK (or any other dependency) version, only updates submitted via dependabot will be merged. This pull request will need to remove these changes and will need to be rebased after the existing dependency update via dependabot has been merged for this pull request to be reviewed.
• If this pull request is for supporting a new AWS service:
  • Ensure the new AWS service changes are following the Contributing Guide section on new services, in particular that the dependency addition and initial provider support are in a separate pull request from other changes (e.g. new resources). Contributions not following this item will not be reviewed until the changes are split.
  • If this pull request is already a separate pull request from the above item, you can ignore this message.

[rmorris1218]

This is contingent on the #21939 aws-sdk-go bump to at least v1.42.11 (see here)

[ktham]

What will happen if sqs_managed_sse_enabled is set to true and kms_master_key_id is not empty?

[rmorris1218]

If they are both set, received: InvalidAttributeName: You can use one type of server-side encryption (SSE) at one time. You can either enable KMS SSE or SQS SSE. .. I added ConflictsWith constraints for both of those to avoid the error.

[ewbankkit]

LGTM 🚀.

% make testacc TESTS=TestAccSQSQueue_ PKG=sqs          
==> Checking that code complies with gofmt requirements...
TF_ACC=1 go test ./internal/service/sqs/... -v -count 1 -parallel 20 -run='TestAccSQSQueue_' -timeout 180m
=== RUN   TestAccSQSQueue_basic
=== PAUSE TestAccSQSQueue_basic
=== RUN   TestAccSQSQueue_disappears
=== PAUSE TestAccSQSQueue_disappears
=== RUN   TestAccSQSQueue_Name_generated
=== PAUSE TestAccSQSQueue_Name_generated
=== RUN   TestAccSQSQueue_NameGenerated_fifoQueue
=== PAUSE TestAccSQSQueue_NameGenerated_fifoQueue
=== RUN   TestAccSQSQueue_namePrefix
=== PAUSE TestAccSQSQueue_namePrefix
=== RUN   TestAccSQSQueue_NamePrefix_fifoQueue
=== PAUSE TestAccSQSQueue_NamePrefix_fifoQueue
=== RUN   TestAccSQSQueue_tags
=== PAUSE TestAccSQSQueue_tags
=== RUN   TestAccSQSQueue_update
=== PAUSE TestAccSQSQueue_update
=== RUN   TestAccSQSQueue_policy
=== PAUSE TestAccSQSQueue_policy
=== RUN   TestAccSQSQueue_recentlyDeleted
=== PAUSE TestAccSQSQueue_recentlyDeleted
=== RUN   TestAccSQSQueue_redrivePolicy
=== PAUSE TestAccSQSQueue_redrivePolicy
=== RUN   TestAccSQSQueue_fifoQueue
=== PAUSE TestAccSQSQueue_fifoQueue
=== RUN   TestAccSQSQueue_FIFOQueue_expectNameError
=== PAUSE TestAccSQSQueue_FIFOQueue_expectNameError
=== RUN   TestAccSQSQueue_FIFOQueue_contentBasedDeduplication
=== PAUSE TestAccSQSQueue_FIFOQueue_contentBasedDeduplication
=== RUN   TestAccSQSQueue_FIFOQueue_highThroughputMode
=== PAUSE TestAccSQSQueue_FIFOQueue_highThroughputMode
=== RUN   TestAccSQSQueue_StandardQueue_expectContentBasedDeduplicationError
=== PAUSE TestAccSQSQueue_StandardQueue_expectContentBasedDeduplicationError
=== RUN   TestAccSQSQueue_encryption
=== PAUSE TestAccSQSQueue_encryption
=== RUN   TestAccSQSQueue_zeroVisibilityTimeoutSeconds
=== PAUSE TestAccSQSQueue_zeroVisibilityTimeoutSeconds
=== RUN   TestAccSQSQueue_defaultKMSDataKeyReusePeriodSeconds
=== PAUSE TestAccSQSQueue_defaultKMSDataKeyReusePeriodSeconds
=== CONT  TestAccSQSQueue_basic
=== CONT  TestAccSQSQueue_redrivePolicy
=== CONT  TestAccSQSQueue_NamePrefix_fifoQueue
=== CONT  TestAccSQSQueue_Name_generated
=== CONT  TestAccSQSQueue_namePrefix
=== CONT  TestAccSQSQueue_tags
=== CONT  TestAccSQSQueue_disappears
=== CONT  TestAccSQSQueue_defaultKMSDataKeyReusePeriodSeconds
=== CONT  TestAccSQSQueue_zeroVisibilityTimeoutSeconds
=== CONT  TestAccSQSQueue_encryption
=== CONT  TestAccSQSQueue_StandardQueue_expectContentBasedDeduplicationError
=== CONT  TestAccSQSQueue_FIFOQueue_highThroughputMode
=== CONT  TestAccSQSQueue_FIFOQueue_contentBasedDeduplication
=== CONT  TestAccSQSQueue_FIFOQueue_expectNameError
=== CONT  TestAccSQSQueue_NameGenerated_fifoQueue
=== CONT  TestAccSQSQueue_fifoQueue
=== CONT  TestAccSQSQueue_policy
=== CONT  TestAccSQSQueue_recentlyDeleted
=== CONT  TestAccSQSQueue_update
--- PASS: TestAccSQSQueue_StandardQueue_expectContentBasedDeduplicationError (7.27s)
--- PASS: TestAccSQSQueue_FIFOQueue_expectNameError (7.88s)
--- PASS: TestAccSQSQueue_disappears (30.97s)
--- PASS: TestAccSQSQueue_basic (42.31s)
--- PASS: TestAccSQSQueue_zeroVisibilityTimeoutSeconds (42.70s)
--- PASS: TestAccSQSQueue_namePrefix (42.87s)
--- PASS: TestAccSQSQueue_defaultKMSDataKeyReusePeriodSeconds (43.04s)
--- PASS: TestAccSQSQueue_NameGenerated_fifoQueue (43.04s)
--- PASS: TestAccSQSQueue_Name_generated (43.04s)
--- PASS: TestAccSQSQueue_fifoQueue (43.25s)
--- PASS: TestAccSQSQueue_NamePrefix_fifoQueue (43.35s)
--- PASS: TestAccSQSQueue_FIFOQueue_contentBasedDeduplication (43.35s)
--- PASS: TestAccSQSQueue_redrivePolicy (45.12s)
--- PASS: TestAccSQSQueue_FIFOQueue_highThroughputMode (55.73s)
--- PASS: TestAccSQSQueue_update (56.09s)
--- PASS: TestAccSQSQueue_tags (64.29s)
--- PASS: TestAccSQSQueue_encryption (66.22s)
--- PASS: TestAccSQSQueue_policy (80.43s)
--- PASS: TestAccSQSQueue_recentlyDeleted (88.25s)
PASS
ok  	github.com/hashicorp/terraform-provider-aws/internal/service/sqs	92.055s

[ewbankkit]

@rmorris1218 Thanks for the contribution 🎉 👏.

[github-actions]

This functionality has been released in v3.69.0 of the Terraform AWS Provider. Please see the Terraform documentation on provider versioning or reach out if you need any assistance upgrading.

For further feature requests or bug reports with this functionality, please create a new GitHub issue following the template. Thank you!

[github-actions]

I'm going to lock this pull request because it has been closed for 30 days ⏳. This helps our maintainers find and focus on the active issues.
If you have found a problem that seems related to this change, please open a new issue and complete the issue template so we can capture all the details necessary to investigate further.