SSPROD-57377 - Add extra time to CIEM advanced in order to avoid race condition with CIEM basic

Author: ivanbesinovic-sysdig

modules/integrations/cloud-logs/main.tf

@@ -338,3 +338,17 @@ resource "sysdig_secure_cloud_auth_account_component" "aws_cloud_logs" {
     aws_cloudformation_stack_set_instance.cloudlogs_s3_access_topic
   ]
 }
+
+locals {
+  wait_duration = format("%ds", var.wait_after_basic_seconds)
+}
+
+resource "time_sleep" "wait_after_ciem_basic" {
+  count           = var.wait_after_basic_seconds > 0 ? 1 : 0
+  create_duration = local.wait_duration
+}
+
+output "wait_after_basic" {
+  value       = var.wait_after_basic_seconds > 0 ? time_sleep.wait_after_ciem_basic : null
+  description = "Wait handle to delay downstream operations after basic by the configured seconds."
+}

modules/integrations/cloud-logs/variables.tf

@@ -100,3 +100,9 @@ variable "kms_key_arn" {
   type        = string
   default     = null
 }
+
+variable "wait_after_basic_seconds" {
+  type        = number
+  description = "Number of seconds to wait after CIEM basic before proceeding (set to 0 to disable)."
+  default     = 30
+}

modules/integrations/cloud-logs/versions.tf

@@ -15,5 +15,9 @@ terraform {
       source  = "hashicorp/random"
       version = ">= 3.1"
     }
+    time = {
+      source  = "hashicorp/time"
+      version = ">= 0.9"
+    }
   }
 }

modules/integrations/event-bridge/main.tf

@@ -295,3 +295,17 @@ resource "sysdig_secure_cloud_auth_account_component" "aws_event_bridge" {
     }
   })
 }
+
+locals {
+  wait_duration = format("%ds", var.wait_after_basic_seconds)
+}
+
+resource "time_sleep" "wait_after_ciem_basic" {
+  count           = var.wait_after_basic_seconds > 0 ? 1 : 0
+  create_duration = local.wait_duration
+}
+
+output "wait_after_basic" {
+  value       = var.wait_after_basic_seconds > 0 ? time_sleep.wait_after_ciem_basic : null
+  description = "Wait handle to delay downstream operations after basic (e.g., CIEM) by the configured seconds."
+}

modules/integrations/event-bridge/variables.tf

@@ -131,3 +131,9 @@ variable "api_dest_rate_limit" {
   default     = 300
   description = "Rate limit for API Destinations"
 }
+
+variable "wait_after_basic_seconds" {
+  type        = number
+  description = "Number of seconds to wait after CIEM basic before proceeding (set to 0 to disable)."
+  default     = 30
+}

modules/integrations/event-bridge/versions.tf

@@ -13,5 +13,9 @@ terraform {
       source  = "hashicorp/random"
       version = ">= 3.1"
     }
+    time = {
+      source  = "hashicorp/time"
+      version = ">= 0.9"
+    }
   }
 }