From 421b5c0567d789ff2c6adf167ccf57c871c5e623 Mon Sep 17 00:00:00 2001
From: Brett Au <86862761+brett-au@users.noreply.github.com>
Date: Mon, 30 Sep 2024 13:20:56 -0400
Subject: [PATCH] feat: support delete protection for dynamodb (#1118)

---
 modules/dynamodb/README.md    | 1 +
 modules/dynamodb/main.tf      | 2 ++
 modules/dynamodb/variables.tf | 6 ++++++
 3 files changed, 9 insertions(+)

diff --git a/modules/dynamodb/README.md b/modules/dynamodb/README.md
index ff68e2682..df1d3ca2e 100644
--- a/modules/dynamodb/README.md
+++ b/modules/dynamodb/README.md
@@ -77,6 +77,7 @@ No resources.
 | <a name="input_autoscaler_tags"></a> [autoscaler\_tags](#input\_autoscaler\_tags) | Additional resource tags for the autoscaler module | `map(string)` | `{}` | no |
 | <a name="input_billing_mode"></a> [billing\_mode](#input\_billing\_mode) | DynamoDB Billing mode. Can be PROVISIONED or PAY\_PER\_REQUEST | `string` | `"PROVISIONED"` | no |
 | <a name="input_context"></a> [context](#input\_context) | Single object for setting entire context at once.<br>See description of individual variables for details.<br>Leave string and numeric variables as `null` to use default value.<br>Individual variable settings (non-null) override settings in context object,<br>except for attributes, tags, and additional\_tag\_map, which are merged. | `any` | <pre>{<br>  "additional_tag_map": {},<br>  "attributes": [],<br>  "delimiter": null,<br>  "descriptor_formats": {},<br>  "enabled": true,<br>  "environment": null,<br>  "id_length_limit": null,<br>  "label_key_case": null,<br>  "label_order": [],<br>  "label_value_case": null,<br>  "labels_as_tags": [<br>    "unset"<br>  ],<br>  "name": null,<br>  "namespace": null,<br>  "regex_replace_chars": null,<br>  "stage": null,<br>  "tags": {},<br>  "tenant": null<br>}</pre> | no |
+| <a name="input_deletion_protection_enabled"></a> [deletion\_protection\_enabled](#input\_deletion\_protection\_enabled) | Enable/disable DynamoDB table deletion protection | `bool` | `false` | no |
 | <a name="input_delimiter"></a> [delimiter](#input\_delimiter) | Delimiter to be used between ID elements.<br>Defaults to `-` (hyphen). Set to `""` to use no delimiter at all. | `string` | `null` | no |
 | <a name="input_descriptor_formats"></a> [descriptor\_formats](#input\_descriptor\_formats) | Describe additional descriptors to be output in the `descriptors` output map.<br>Map of maps. Keys are names of descriptors. Values are maps of the form<br>`{<br>   format = string<br>   labels = list(string)<br>}`<br>(Type is `any` so the map values can later be enhanced to provide additional options.)<br>`format` is a Terraform format string to be passed to the `format()` function.<br>`labels` is a list of labels, in order, to pass to `format()` function.<br>Label values will be normalized before being passed to `format()` so they will be<br>identical to how they appear in `id`.<br>Default is `{}` (`descriptors` output will be empty). | `any` | `{}` | no |
 | <a name="input_dynamodb_attributes"></a> [dynamodb\_attributes](#input\_dynamodb\_attributes) | Additional DynamoDB attributes in the form of a list of mapped values | <pre>list(object({<br>    name = string<br>    type = string<br>  }))</pre> | `[]` | no |
diff --git a/modules/dynamodb/main.tf b/modules/dynamodb/main.tf
index 979d66b2e..03982fb79 100644
--- a/modules/dynamodb/main.tf
+++ b/modules/dynamodb/main.tf
@@ -43,5 +43,7 @@ module "dynamodb_table" {
 
   enable_point_in_time_recovery = var.point_in_time_recovery_enabled
 
+  deletion_protection_enabled = var.deletion_protection_enabled
+
   context = module.this.context
 }
diff --git a/modules/dynamodb/variables.tf b/modules/dynamodb/variables.tf
index a0e7b593e..a3ea0d22b 100644
--- a/modules/dynamodb/variables.tf
+++ b/modules/dynamodb/variables.tf
@@ -174,6 +174,12 @@ variable "replicas" {
   description = "List of regions to create a replica table in"
 }
 
+variable "deletion_protection_enabled" {
+  type        = bool
+  default     = false
+  description = "Enable/disable DynamoDB table deletion protection"
+}
+
 variable "import_table" {
   type = object({
     # Valid values are GZIP, ZSTD and NONE