Add CodeArtifact Package Origin Controls

Community Note

• Please vote on this issue by adding a 👍 reaction to the original issue to help the community and maintainers prioritize this request
• Please do not leave "+1" or other comments that do not add relevant new information or questions, they generate extra noise for issue followers and do not help prioritize the request
• If you are interested in working on this issue or have submitted a pull request, please leave a comment

Description

In July Package Origin Controls was introduced in CodeArtifact in order to protect against "dependency confusion" attacks.

I couldn't find any resources related to this feature in the AWS Provider which is why I'm submitting this feature request here.

New or Affected Resource(s)

• aws_codeartifact_package_origin_configuration ?

Potential Terraform Configuration

resource "aws_codeartifact_package_origin_configuration" "my-package" {
  domain     = aws_codeartifact_domain.npm.domain
  repository = aws_codeartifact_repository.test.repository
  format     = "npm"
  package    = "my-package"
  restrictions {
    publish = "ALLOW" # or "BLOCK"
    upstream = "BLOCK" # or "ALLOW"
  }
}

References

• Package Origin Controls
• Package Origin Control Toolkit