[Enhancement]: Apply IAM Access Analyzer archive rules to existing findings

[Dave-Snigier]

Description

When updating or creating IAM Access Analyzer archive rules we should have a way to apply these to existing findings when the resource is created or updated.

Currently, the rules are only applied to new findings, and we must manually run the apply function outside of Terraform when the rules are created or updated.

When updating the rules through the AWS web console, they provide this option so it should be in line with user expectations.

The default option for this should probably be False, as this is the current behavior.

Affected Resource(s) and/or Data Source(s)

• aws_accessanalyzer_archive_rule

Potential Terraform Configuration

resource "aws_accessanalyzer_archive_rule" "example" {
  apply_to_existing = True

  analyzer_name = "example-analyzer"
  rule_name     = "example-rule"

  filter {
    criteria = "condition.aws:UserId"
    eq       = ["userid"]
  }
}

References

AWS API Documentation | ApplyArchiveRule

Would you like to implement a fix?

No

[github-actions]

Community Note

Voting for Prioritization

• Please vote on this issue by adding a 👍 reaction to the original post to help the community and maintainers prioritize this request.
• Please see our prioritization guide for information on how we prioritize.
• Please do not leave "+1" or other comments that do not add relevant new information or questions, they generate extra noise for issue followers and do not help prioritize the request.

Volunteering to Work on This Issue

• If you are interested in working on this issue, please leave a comment.
• If this would be your first contribution, please review the contribution guide.