Terraform-provider-aws: Add support for 'redirect' and 'fixed-response' into lb_listener_rule action type

I'm interested to work on this feature.

The aws_lb_listener resource would be affected as well.

As for the potential Terraform configuration, I propose the following:

Redirect

resource "aws_lb_listener" "web_port80" {
  load_balancer_arn = "${aws_lb.web_alb.arn}"
  port              = 80
  protocol          = "HTTP"

  default_action {
    type = "redirect"
    host = "#{host}"
    path = "/#{path}"
    port = "#{port}"
    protocol = "#{protocol}"
    query = "#{query}"
    status_code = "301"
  }
}

Fixed response

resource "aws_lb_listener" "web_port80" {
  load_balancer_arn = "${aws_lb.web_alb.arn}"
  port              = 80
  protocol          = "HTTP"

  default_action {
    type = "fixed-response"
    content_type = "text/plain"
    message_body = "Hello"
    status_code = "200"
  }
}

Config for aws_lb_listener_rule would be similar.

Caution: setting these types of rules outside Terraform will cause the AWS provider to crash in all versions up through the latest (version 1.29.0 as of this writing): #5357

I will be submitting a pull request today to prevent this type of crash across all ALB/NLB resources and we should probably wait on those fixes before adding this feature.

Crash prevention pull request submitted: #5367

The crash fix has been merged into master so it should be okay to work with the code for this on top of those changes. 👍

We now have 3 different types of actions: "fixed-response", "forward" and "redirect", each with different sets of parameters.

Would it be better if the action config for selected action type is grouped in a block instead of flattening them at the top level?

Examples:

resource "aws_lb_listener_rule" "static" {
  action {
    type = "forward"
    forward {
      target_group_arn = "..."
    }
  }
}

resource "aws_lb_listener_rule" "static" {
  action {
    type = "fixed-response"
    fixed_response {
      content_type = "text/plain"
      message_body = "Hello"
      status_code = "200"
    }
  }
}

resource "aws_lb_listener_rule" "static" {
  action {
    type = "redirect"
    redirect {
      host = "#{host}"
      path = "/#{path}"
      port = "#{port}"
      protocol = "#{protocol}"
      query = "#{query}"
      status_code = "HTTP_301"
    }
  }
}

The Action datatype now groups action type-specific config in a nested object, so doing it this way would be (almost) a 1:1 mapping: https://docs.aws.amazon.com/elasticloadbalancing/latest/APIReference/API_Action.html

Also, I noticed that the status_code for redirect action is prefixed by HTTP_ whereas that for fixed-response action is not:

• https://docs.aws.amazon.com/elasticloadbalancing/latest/APIReference/API_RedirectActionConfig.html (Valid Values: HTTP_301 | HTTP_302)
• https://docs.aws.amazon.com/elasticloadbalancing/latest/APIReference/API_FixedResponseActionConfig.html (Pattern: ^(2|4|5)dd$)

If this status_code config were to be shared, we must do some kind of validation depending on the action type, or do some kind of value translation in the Terraform provider.

We recommend following the SDK structure in most cases, so separate blocks in this case would be appropriate. This allows us to easily add the argument validation as well as keep the code simpler.

Since the scope of this includes fixed-response can we update the title? I was interested in that specifically and took me a bit to find this issue and saw it was already being worked on. Thx.

Additionally, I didn't see anything about adding headers in the API links above so not clear how I'd set something like an HSTS header in a response -- because the ALB in forward mode leaves that to the backing app.

Are there any plans to add authentication too?

@sklemmer feature requests for authentication can be found at #4707 and #4711 😄

I'm hoping to review the open pull request for fixed-response/redirect (#5430) sometime this week.

Support for fixed-response and redirect actions has been merged into master via #5430 and will release with version 1.33.0 of the AWS provider, later this week. 🚀

This has been released in version 1.33.0 of the AWS provider. Please see the Terraform documentation on provider versioning or reach out if you need any assistance upgrading.

I'm going to lock this issue because it has been closed for _30 days_ ⏳. This helps our maintainers find and focus on the active issues.

If you feel this issue should be reopened, we encourage creating a new issue linking back to this one for added context. Thanks!