New resource: aws_bedrockagentcore_consent_portal

[templier2]

Rollback Plan

If a change needs to be reverted, we will publish an updated version of the library.

Changes to Security Controls

Are there any changes to security controls (access controls, encryption, logging) in this pull request?

No.

Description

Adds the aws_bedrockagentcore_consent_portal resource and data source to manage consent portals and look up existing portals by ID or ARN.

Includes identity provider and gateway source configuration, execution role updates, tagging, import support, and configurable timeouts. Handles IAM role propagation during creation and updates, waits for asynchronous operations, and clears optional description and audience values when removed from configuration.

Adds documentation, acceptance tests, unit tests, and sweeper support.

AI disclosure: Codex assisted with implementation, documentation, test generation, and fixes based on manually executed acceptance test results.

Relations

Closes #49882

References

Output from Acceptance Testing

% make testacc \
  PKG=bedrockagentcore \                     
  TESTS='TestAccBedrockAgentCoreConsentPortal_*'                                                           
make: Verifying source code with gofmt...
==> Checking that code complies with gofmt requirements...
make: Validating schemas
ok      github.com/hashicorp/terraform-provider-aws/internal/provider/sdkv2     4.931s
ok      github.com/hashicorp/terraform-provider-aws/internal/provider/framework 4.843s
make: Running acceptance tests on branch: 🌿 f-aws_bedrockagentcore_consent_portal-creation 🌿...
TF_ACC=1 go1.26.6 test ./internal/service/bedrockagentcore/... -v -count 1 -parallel 20 -run='TestAccBedrockAgentCoreConsentPortal_*'  -timeout 360m -vet=off -buildvcs=false
2026/09/10 13:36:37 Creating Terraform AWS Provider (SDKv2-style)...
2026/09/10 13:36:37 Initializing Terraform AWS Provider (SDKv2-style)...
=== RUN   TestAccBedrockAgentCoreConsentPortalDataSource_tags
=== PAUSE TestAccBedrockAgentCoreConsentPortalDataSource_tags
=== RUN   TestAccBedrockAgentCoreConsentPortalDataSource_Tags_nullMap
=== PAUSE TestAccBedrockAgentCoreConsentPortalDataSource_Tags_nullMap
=== RUN   TestAccBedrockAgentCoreConsentPortalDataSource_Tags_emptyMap
=== PAUSE TestAccBedrockAgentCoreConsentPortalDataSource_Tags_emptyMap
=== RUN   TestAccBedrockAgentCoreConsentPortalDataSource_Tags_DefaultTags_nonOverlapping
=== PAUSE TestAccBedrockAgentCoreConsentPortalDataSource_Tags_DefaultTags_nonOverlapping
=== RUN   TestAccBedrockAgentCoreConsentPortalDataSource_Tags_IgnoreTags_Overlap_defaultTag
=== PAUSE TestAccBedrockAgentCoreConsentPortalDataSource_Tags_IgnoreTags_Overlap_defaultTag
=== RUN   TestAccBedrockAgentCoreConsentPortalDataSource_Tags_IgnoreTags_Overlap_resourceTag
=== PAUSE TestAccBedrockAgentCoreConsentPortalDataSource_Tags_IgnoreTags_Overlap_resourceTag
=== RUN   TestAccBedrockAgentCoreConsentPortalDataSource_basic
=== PAUSE TestAccBedrockAgentCoreConsentPortalDataSource_basic
=== RUN   TestAccBedrockAgentCoreConsentPortal_Identity_basic
=== PAUSE TestAccBedrockAgentCoreConsentPortal_Identity_basic
=== RUN   TestAccBedrockAgentCoreConsentPortal_Identity_regionOverride
=== PAUSE TestAccBedrockAgentCoreConsentPortal_Identity_regionOverride
=== RUN   TestAccBedrockAgentCoreConsentPortal_tags
=== PAUSE TestAccBedrockAgentCoreConsentPortal_tags
=== RUN   TestAccBedrockAgentCoreConsentPortal_Tags_null
=== PAUSE TestAccBedrockAgentCoreConsentPortal_Tags_null
=== RUN   TestAccBedrockAgentCoreConsentPortal_Tags_emptyMap
=== PAUSE TestAccBedrockAgentCoreConsentPortal_Tags_emptyMap
=== RUN   TestAccBedrockAgentCoreConsentPortal_Tags_addOnUpdate
=== PAUSE TestAccBedrockAgentCoreConsentPortal_Tags_addOnUpdate
=== RUN   TestAccBedrockAgentCoreConsentPortal_Tags_EmptyTag_onCreate
=== PAUSE TestAccBedrockAgentCoreConsentPortal_Tags_EmptyTag_onCreate
=== RUN   TestAccBedrockAgentCoreConsentPortal_Tags_EmptyTag_OnUpdate_add
=== PAUSE TestAccBedrockAgentCoreConsentPortal_Tags_EmptyTag_OnUpdate_add
=== RUN   TestAccBedrockAgentCoreConsentPortal_Tags_EmptyTag_OnUpdate_replace
=== PAUSE TestAccBedrockAgentCoreConsentPortal_Tags_EmptyTag_OnUpdate_replace
=== RUN   TestAccBedrockAgentCoreConsentPortal_Tags_DefaultTags_providerOnly
=== PAUSE TestAccBedrockAgentCoreConsentPortal_Tags_DefaultTags_providerOnly
=== RUN   TestAccBedrockAgentCoreConsentPortal_Tags_DefaultTags_nonOverlapping
=== PAUSE TestAccBedrockAgentCoreConsentPortal_Tags_DefaultTags_nonOverlapping
=== RUN   TestAccBedrockAgentCoreConsentPortal_Tags_DefaultTags_overlapping
=== PAUSE TestAccBedrockAgentCoreConsentPortal_Tags_DefaultTags_overlapping
=== RUN   TestAccBedrockAgentCoreConsentPortal_Tags_DefaultTags_updateToProviderOnly
=== PAUSE TestAccBedrockAgentCoreConsentPortal_Tags_DefaultTags_updateToProviderOnly
=== RUN   TestAccBedrockAgentCoreConsentPortal_Tags_DefaultTags_updateToResourceOnly
=== PAUSE TestAccBedrockAgentCoreConsentPortal_Tags_DefaultTags_updateToResourceOnly
=== RUN   TestAccBedrockAgentCoreConsentPortal_Tags_DefaultTags_emptyResourceTag
=== PAUSE TestAccBedrockAgentCoreConsentPortal_Tags_DefaultTags_emptyResourceTag
=== RUN   TestAccBedrockAgentCoreConsentPortal_Tags_DefaultTags_emptyProviderOnlyTag
=== PAUSE TestAccBedrockAgentCoreConsentPortal_Tags_DefaultTags_emptyProviderOnlyTag
=== RUN   TestAccBedrockAgentCoreConsentPortal_Tags_DefaultTags_nullOverlappingResourceTag
=== PAUSE TestAccBedrockAgentCoreConsentPortal_Tags_DefaultTags_nullOverlappingResourceTag
=== RUN   TestAccBedrockAgentCoreConsentPortal_Tags_DefaultTags_nullNonOverlappingResourceTag
=== PAUSE TestAccBedrockAgentCoreConsentPortal_Tags_DefaultTags_nullNonOverlappingResourceTag
=== RUN   TestAccBedrockAgentCoreConsentPortal_Tags_ComputedTag_onCreate
=== PAUSE TestAccBedrockAgentCoreConsentPortal_Tags_ComputedTag_onCreate
=== RUN   TestAccBedrockAgentCoreConsentPortal_Tags_ComputedTag_OnUpdate_add
=== PAUSE TestAccBedrockAgentCoreConsentPortal_Tags_ComputedTag_OnUpdate_add
=== RUN   TestAccBedrockAgentCoreConsentPortal_Tags_ComputedTag_OnUpdate_replace
=== PAUSE TestAccBedrockAgentCoreConsentPortal_Tags_ComputedTag_OnUpdate_replace
=== RUN   TestAccBedrockAgentCoreConsentPortal_Tags_IgnoreTags_Overlap_defaultTag
=== PAUSE TestAccBedrockAgentCoreConsentPortal_Tags_IgnoreTags_Overlap_defaultTag
=== RUN   TestAccBedrockAgentCoreConsentPortal_Tags_IgnoreTags_Overlap_resourceTag
=== PAUSE TestAccBedrockAgentCoreConsentPortal_Tags_IgnoreTags_Overlap_resourceTag
=== RUN   TestAccBedrockAgentCoreConsentPortal_basic
=== PAUSE TestAccBedrockAgentCoreConsentPortal_basic
=== RUN   TestAccBedrockAgentCoreConsentPortal_disappears
=== PAUSE TestAccBedrockAgentCoreConsentPortal_disappears
=== RUN   TestAccBedrockAgentCoreConsentPortal_update
=== PAUSE TestAccBedrockAgentCoreConsentPortal_update
=== CONT  TestAccBedrockAgentCoreConsentPortalDataSource_tags
=== CONT  TestAccBedrockAgentCoreConsentPortal_Tags_DefaultTags_nonOverlapping
=== CONT  TestAccBedrockAgentCoreConsentPortal_Tags_ComputedTag_onCreate
=== CONT  TestAccBedrockAgentCoreConsentPortal_Tags_IgnoreTags_Overlap_resourceTag
=== CONT  TestAccBedrockAgentCoreConsentPortal_Tags_DefaultTags_emptyResourceTag
=== CONT  TestAccBedrockAgentCoreConsentPortal_tags
=== CONT  TestAccBedrockAgentCoreConsentPortalDataSource_Tags_IgnoreTags_Overlap_resourceTag
=== CONT  TestAccBedrockAgentCoreConsentPortal_disappears
=== CONT  TestAccBedrockAgentCoreConsentPortalDataSource_basic
=== CONT  TestAccBedrockAgentCoreConsentPortal_update
=== CONT  TestAccBedrockAgentCoreConsentPortal_Tags_EmptyTag_onCreate
=== CONT  TestAccBedrockAgentCoreConsentPortal_Tags_DefaultTags_providerOnly
=== CONT  TestAccBedrockAgentCoreConsentPortal_Tags_EmptyTag_OnUpdate_replace
=== CONT  TestAccBedrockAgentCoreConsentPortal_Tags_EmptyTag_OnUpdate_add
=== CONT  TestAccBedrockAgentCoreConsentPortal_Tags_ComputedTag_OnUpdate_replace
=== CONT  TestAccBedrockAgentCoreConsentPortal_Tags_IgnoreTags_Overlap_defaultTag
=== CONT  TestAccBedrockAgentCoreConsentPortal_Identity_basic
=== CONT  TestAccBedrockAgentCoreConsentPortal_Identity_regionOverride
=== CONT  TestAccBedrockAgentCoreConsentPortalDataSource_Tags_DefaultTags_nonOverlapping
=== CONT  TestAccBedrockAgentCoreConsentPortalDataSource_Tags_IgnoreTags_Overlap_defaultTag
--- PASS: TestAccBedrockAgentCoreConsentPortalDataSource_Tags_IgnoreTags_Overlap_resourceTag (61.11s)
=== CONT  TestAccBedrockAgentCoreConsentPortal_Tags_DefaultTags_nullOverlappingResourceTag
--- PASS: TestAccBedrockAgentCoreConsentPortalDataSource_Tags_IgnoreTags_Overlap_defaultTag (65.00s)
=== CONT  TestAccBedrockAgentCoreConsentPortal_Tags_DefaultTags_nullNonOverlappingResourceTag
--- PASS: TestAccBedrockAgentCoreConsentPortalDataSource_Tags_DefaultTags_nonOverlapping (65.45s)
=== CONT  TestAccBedrockAgentCoreConsentPortal_Tags_DefaultTags_updateToProviderOnly
--- PASS: TestAccBedrockAgentCoreConsentPortalDataSource_basic (65.78s)
=== CONT  TestAccBedrockAgentCoreConsentPortal_Tags_DefaultTags_updateToResourceOnly
--- PASS: TestAccBedrockAgentCoreConsentPortal_disappears (72.75s)
=== CONT  TestAccBedrockAgentCoreConsentPortal_Tags_DefaultTags_emptyProviderOnlyTag
--- PASS: TestAccBedrockAgentCoreConsentPortal_Tags_DefaultTags_emptyResourceTag (92.79s)
=== CONT  TestAccBedrockAgentCoreConsentPortalDataSource_Tags_emptyMap
--- PASS: TestAccBedrockAgentCoreConsentPortal_Tags_ComputedTag_onCreate (94.66s)
=== CONT  TestAccBedrockAgentCoreConsentPortal_Tags_emptyMap
--- PASS: TestAccBedrockAgentCoreConsentPortalDataSource_tags (105.29s)
=== CONT  TestAccBedrockAgentCoreConsentPortal_Tags_addOnUpdate
--- PASS: TestAccBedrockAgentCoreConsentPortal_Identity_regionOverride (123.80s)
=== CONT  TestAccBedrockAgentCoreConsentPortal_Tags_ComputedTag_OnUpdate_add
--- PASS: TestAccBedrockAgentCoreConsentPortal_Identity_basic (132.64s)
=== CONT  TestAccBedrockAgentCoreConsentPortal_Tags_DefaultTags_overlapping
--- PASS: TestAccBedrockAgentCoreConsentPortal_Tags_ComputedTag_OnUpdate_replace (152.97s)
=== CONT  TestAccBedrockAgentCoreConsentPortalDataSource_Tags_nullMap
--- PASS: TestAccBedrockAgentCoreConsentPortal_Tags_EmptyTag_OnUpdate_replace (153.19s)
=== CONT  TestAccBedrockAgentCoreConsentPortal_basic
--- PASS: TestAccBedrockAgentCoreConsentPortal_Tags_DefaultTags_nullOverlappingResourceTag (97.66s)
=== CONT  TestAccBedrockAgentCoreConsentPortal_Tags_null
--- PASS: TestAccBedrockAgentCoreConsentPortal_Tags_DefaultTags_nullNonOverlappingResourceTag (105.59s)
--- PASS: TestAccBedrockAgentCoreConsentPortalDataSource_Tags_emptyMap (92.10s)
--- PASS: TestAccBedrockAgentCoreConsentPortal_Tags_DefaultTags_emptyProviderOnlyTag (113.15s)
--- PASS: TestAccBedrockAgentCoreConsentPortal_Tags_EmptyTag_onCreate (189.49s)
--- PASS: TestAccBedrockAgentCoreConsentPortal_Tags_IgnoreTags_Overlap_defaultTag (201.17s)
--- PASS: TestAccBedrockAgentCoreConsentPortal_update (204.11s)
--- PASS: TestAccBedrockAgentCoreConsentPortal_Tags_emptyMap (109.80s)
--- PASS: TestAccBedrockAgentCoreConsentPortal_Tags_IgnoreTags_Overlap_resourceTag (211.96s)
--- PASS: TestAccBedrockAgentCoreConsentPortalDataSource_Tags_nullMap (73.83s)
--- PASS: TestAccBedrockAgentCoreConsentPortal_Tags_DefaultTags_updateToResourceOnly (161.07s)
--- PASS: TestAccBedrockAgentCoreConsentPortal_Tags_EmptyTag_OnUpdate_add (227.29s)
--- PASS: TestAccBedrockAgentCoreConsentPortal_Tags_DefaultTags_updateToProviderOnly (163.99s)
--- PASS: TestAccBedrockAgentCoreConsentPortal_Tags_DefaultTags_nonOverlapping (233.28s)
--- PASS: TestAccBedrockAgentCoreConsentPortal_basic (80.76s)
--- PASS: TestAccBedrockAgentCoreConsentPortal_Tags_null (79.14s)
--- PASS: TestAccBedrockAgentCoreConsentPortal_Tags_addOnUpdate (136.40s)
--- PASS: TestAccBedrockAgentCoreConsentPortal_Tags_ComputedTag_OnUpdate_add (129.59s)
--- PASS: TestAccBedrockAgentCoreConsentPortal_Tags_DefaultTags_providerOnly (260.85s)
--- PASS: TestAccBedrockAgentCoreConsentPortal_tags (263.69s)
--- PASS: TestAccBedrockAgentCoreConsentPortal_Tags_DefaultTags_overlapping (145.69s)
PASS
ok      github.com/hashicorp/terraform-provider-aws/internal/service/bedrockagentcore   283.158s

...

[github-actions]

Community Guidelines

This comment is added to every new Pull Request to provide quick reference to how the Terraform AWS Provider is maintained. Please review the information below, and thank you for contributing to the community that keeps the provider thriving! 🚀

Voting for Prioritization

• Please vote on this Pull Request by adding a 👍 reaction to the original post to help the community and maintainers prioritize it.
• Please see our prioritization guide for additional information on how the maintainers handle prioritization.
• Please do not leave +1 or other comments that do not add relevant new information or questions; they generate extra noise for others following the Pull Request and do not help prioritize the request.

Pull Request Authors

• Review the contribution guide relating to the type of change you are making to ensure all of the necessary steps have been taken.
• Whether or not the branch has been rebased will not impact prioritization, but doing so is always a welcome surprise.