New Resource: azurerm_cognitive_account_connection_* (#30981)

Co-authored-by: jackofallops <ste@hashicorp.com>
Co-authored-by: Anuj Parashar <11286537+promisinganuj@users.noreply.github.com>

Author: 3 people

internal/services/cognitive/client/client.go

@@ -6,23 +6,32 @@ package client
 import (
 	"fmt"
 
+	"github.com/hashicorp/go-azure-sdk/resource-manager/cognitive/2026-03-01/accountconnectionresource"
 	"github.com/hashicorp/go-azure-sdk/resource-manager/cognitive/2026-03-01/cognitiveservicesaccounts"
 	"github.com/hashicorp/go-azure-sdk/resource-manager/cognitive/2026-03-01/cognitiveservicesprojects"
 	"github.com/hashicorp/go-azure-sdk/resource-manager/cognitive/2026-03-01/deployments"
 	"github.com/hashicorp/go-azure-sdk/resource-manager/cognitive/2026-03-01/raiblocklists"
 	"github.com/hashicorp/go-azure-sdk/resource-manager/cognitive/2026-03-01/raipolicies"
+
 	"github.com/hashicorp/terraform-provider-azurerm/internal/common"
 )
 
 type Client struct {
-	AccountsClient      *cognitiveservicesaccounts.CognitiveServicesAccountsClient
-	DeploymentsClient   *deployments.DeploymentsClient
-	ProjectsClient      *cognitiveservicesprojects.CognitiveServicesProjectsClient
-	RaiBlocklistsClient *raiblocklists.RaiBlocklistsClient
-	RaiPoliciesClient   *raipolicies.RaiPoliciesClient
+	ProjectsClient                  *cognitiveservicesprojects.CognitiveServicesProjectsClient
+	AccountConnectionResourceClient *accountconnectionresource.AccountConnectionResourceClient
+	AccountsClient                  *cognitiveservicesaccounts.CognitiveServicesAccountsClient
+	DeploymentsClient               *deployments.DeploymentsClient
+	RaiBlocklistsClient             *raiblocklists.RaiBlocklistsClient
+	RaiPoliciesClient               *raipolicies.RaiPoliciesClient
 }
 
 func NewClient(o *common.ClientOptions) (*Client, error) {
+	accountConnectionResourceClient, err := accountconnectionresource.NewAccountConnectionResourceClientWithBaseURI(o.Environment.ResourceManager)
+	if err != nil {
+		return nil, fmt.Errorf("building Account Connection client: %+v", err)
+	}
+	o.Configure(accountConnectionResourceClient.Client, o.Authorizers.ResourceManager)
+
 	accountsClient, err := cognitiveservicesaccounts.NewCognitiveServicesAccountsClientWithBaseURI(o.Environment.ResourceManager)
 	if err != nil {
 		return nil, fmt.Errorf("building Accounts client: %+v", err)
@@ -54,10 +63,11 @@ func NewClient(o *common.ClientOptions) (*Client, error) {
 	o.Configure(raiBlobklistsClient.Client, o.Authorizers.ResourceManager)
 
 	return &Client{
-		AccountsClient:      accountsClient,
-		DeploymentsClient:   deploymentsClient,
-		ProjectsClient:      projectsClient,
-		RaiBlocklistsClient: raiBlobklistsClient,
-		RaiPoliciesClient:   raiPoliciesClient,
+		ProjectsClient:                  projectsClient,
+		AccountConnectionResourceClient: accountConnectionResourceClient,
+		AccountsClient:                  accountsClient,
+		DeploymentsClient:               deploymentsClient,
+		RaiBlocklistsClient:             raiBlobklistsClient,
+		RaiPoliciesClient:               raiPoliciesClient,
 	}, nil
 }

internal/services/cognitive/cognitive_account_connection.go

@@ -0,0 +1,60 @@
+package cognitive
+
+import (
+	"context"
+	"fmt"
+	"strings"
+
+	"github.com/hashicorp/go-azure-helpers/lang/pointer"
+	"github.com/hashicorp/go-azure-helpers/lang/response"
+	"github.com/hashicorp/go-azure-sdk/resource-manager/cognitive/2026-03-01/accountconnectionresource"
+	"github.com/hashicorp/terraform-provider-azurerm/internal/sdk"
+)
+
+func cognitiveAccountConnectionImporter(expectedAuthType accountconnectionresource.ConnectionAuthType, resourceType string) sdk.ResourceRunFunc {
+	return func(ctx context.Context, metadata sdk.ResourceMetaData) error {
+		client := metadata.Client.Cognitive.AccountConnectionResourceClient
+
+		id, err := accountconnectionresource.ParseConnectionID(metadata.ResourceData.Id())
+		if err != nil {
+			return err
+		}
+
+		resp, err := client.AccountConnectionsGet(ctx, *id)
+		if err != nil {
+			if response.WasNotFound(resp.HttpResponse) {
+				return metadata.MarkAsGone(id)
+			}
+			return fmt.Errorf("retrieving %s: %+v", *id, err)
+		}
+
+		if model := resp.Model; model != nil && model.Properties != nil {
+			if authType := model.Properties.ConnectionPropertiesV2().AuthType; authType != expectedAuthType {
+				return fmt.Errorf("connection %s has auth type `%s` and cannot be managed by `%s`", *id, authType, resourceType)
+			}
+		}
+
+		return nil
+	}
+}
+
+func flattenAccountConnectionMetadata(priorMetadata map[string]string, apiMetadata *map[string]string) map[string]string {
+	// Some Connection APIs return additional metadata fields beyond those configured (e.g. `ApiVersion`,
+	// `DeploymentApiVersion`). When prior configuration is known (Read/Update) only the configured
+	// keys are surfaced to avoid diffs; otherwise (import or list) all API metadata fields are returned.
+	apiMetadataValues := pointer.From(apiMetadata)
+	if len(priorMetadata) == 0 {
+		return apiMetadataValues
+	}
+
+	filtered := make(map[string]string)
+	for configKey := range priorMetadata {
+		for apiKey, apiValue := range apiMetadataValues {
+			if strings.EqualFold(configKey, apiKey) {
+				filtered[configKey] = apiValue
+				break
+			}
+		}
+	}
+	return filtered
+}