feat: Add privateEndpointHostnames field to Data Federation resource

.changelog/4358.txt

@@ -0,0 +1,11 @@
+```release-note:enhancement
+resource/mongodbatlas_federated_database_instance: Adds `private_endpoint_hostnames` attribute
+```
+
+```release-note:enhancement
+data-source/mongodbatlas_federated_database_instance: Adds `private_endpoint_hostnames` attribute
+```
+
+```release-note:enhancement
+data-source/mongodbatlas_federated_database_instances: Adds `private_endpoint_hostnames` attribute
+```

docs/data-sources/federated_database_instance.md

@@ -58,6 +58,9 @@ In addition to all arguments above, the following attributes are exported:
 
 * `id` - The Terraform's unique identifier used internally for state management.
 * `hostnames` - The list of hostnames assigned to the Federated Database Instance. Each string in the array is a hostname assigned to the Federated Database Instance.
+* `private_endpoint_hostnames` - The list of private endpoint hostnames assigned to the Federated Database Instance.
+  * `private_endpoint_hostnames.#.hostname` -  Human-readable label that identifies the host.
+  * `private_endpoint_hostnames.#.private_endpoint` - Human-readable label that identifies the private endpoint.
 * `state` - Current state of the Federated Database Instance:
   * `ACTIVE` - The Federated Database Instance is active and verified. You can query the data stores associated with the Federated Database Instance.
   * `DELETED` - The Federated Database Instance was deleted.

docs/data-sources/federated_database_instances.md

@@ -34,6 +34,9 @@ In addition to all arguments above, the following attributes are exported:
 
 * `id` - The Terraform's unique identifier used internally for state management.
 * `hostnames` - The list of hostnames assigned to the Federated Database Instance. Each string in the array is a hostname assigned to the Federated Database Instance.
+* `private_endpoint_hostnames` - The list of private endpoint hostnames assigned to the Federated Database Instance.
+  * `private_endpoint_hostnames.#.hostname` -  Human-readable label that identifies the host.
+  * `private_endpoint_hostnames.#.private_endpoint` - Human-readable label that identifies the private endpoint.
 * `state` - Current state of the Federated Database Instance:
   * `ACTIVE` - The Federated Database Instance is active and verified. You can query the data stores associated with the Federated Database Instance.
   * `DELETED` - The Federated Database Instance was deleted.

docs/resources/federated_database_instance.md

@@ -213,6 +213,9 @@ In addition to all arguments above, the following attributes are exported:
 
 * `id` - The Terraform's unique identifier used internally for state management.
 * `hostnames` - The list of hostnames assigned to the Federated Database Instance. Each string in the array is a hostname assigned to the Federated Database Instance.
+* `private_endpoint_hostnames` - The list of private endpoint hostnames assigned to the Federated Database Instance.
+  * `private_endpoint_hostnames.#.hostname` -  Human-readable label that identifies the host.
+  * `private_endpoint_hostnames.#.private_endpoint` - Human-readable label that identifies the private endpoint.
 * `state` - Current state of the Federated Database Instance:
   * `ACTIVE` - The Federated Database Instance is active and verified. You can query the data stores associated with the Federated Database Instance.
   * `DELETED` - The Federated Database Instance was deleted.

internal/service/federateddatabaseinstance/data_source_federated_database_instance.go

@@ -33,6 +33,22 @@ func DataSource() *schema.Resource {
 					Type: schema.TypeString,
 				},
 			},
+			"private_endpoint_hostnames": {
+				Type:     schema.TypeList,
+				Computed: true,
+				Elem: &schema.Resource{
+					Schema: map[string]*schema.Schema{
+						"hostname": {
+							Type:     schema.TypeString,
+							Computed: true,
+						},
+						"private_endpoint": {
+							Type:     schema.TypeString,
+							Computed: true,
+						},
+					},
+				},
+			},
 			"cloud_provider_config": cloudProviderConfig(true),
 			"data_process_region": {
 				Type:     schema.TypeList,
@@ -320,6 +336,10 @@ func dataSourceMongoDBAtlasFederatedDatabaseInstanceRead(ctx context.Context, d
 		return diag.FromErr(fmt.Errorf(errorFederatedDatabaseInstanceSetting, "hostnames", name, err))
 	}
 
+	if err := d.Set("private_endpoint_hostnames", flattenPrivateEndpointHostnames(dataFederationInstance.GetPrivateEndpointHostnames())); err != nil {
+		return diag.FromErr(fmt.Errorf(errorFederatedDatabaseInstanceSetting, "private_endpoint_hostnames", name, err))
+	}
+
 	d.SetId(conversion.EncodeStateID(map[string]string{
 		"project_id": projectID,
 		"name":       dataFederationInstance.GetName(),

internal/service/federateddatabaseinstance/data_source_federated_database_instance_test.go

@@ -39,6 +39,7 @@ func TestAccFederatedDatabaseInstanceDS_s3Bucket(t *testing.T) {
 					checkAttributes(&federatedInstance, name),
 					resource.TestCheckResourceAttrSet(resourceName, "project_id"),
 					resource.TestCheckResourceAttr(resourceName, "name", name),
+					resource.TestCheckResourceAttr(resourceName, "private_endpoint_hostnames.#", "0"),
 				),
 			},
 		},

internal/service/federateddatabaseinstance/data_source_federated_database_instances.go

@@ -45,6 +45,22 @@ func PluralDataSource() *schema.Resource {
 								Type: schema.TypeString,
 							},
 						},
+						"private_endpoint_hostnames": {
+							Type:     schema.TypeList,
+							Computed: true,
+							Elem: &schema.Resource{
+								Schema: map[string]*schema.Schema{
+									"hostname": {
+										Type:     schema.TypeString,
+										Computed: true,
+									},
+									"private_endpoint": {
+										Type:     schema.TypeString,
+										Computed: true,
+									},
+								},
+							},
+						},
 						"cloud_provider_config": cloudProviderConfig(true),
 						"data_process_region": {
 							Type:     schema.TypeList,
@@ -100,14 +116,15 @@ func flattenFederatedDatabaseInstances(d *schema.ResourceData, projectID string,
 
 		for i := range federatedDatabaseInstances {
 			federatedDatabaseInstancesMap[i] = map[string]any{
-				"project_id":            projectID,
-				"name":                  federatedDatabaseInstances[i].GetName(),
-				"state":                 federatedDatabaseInstances[i].GetState(),
-				"hostnames":             federatedDatabaseInstances[i].GetHostnames(),
-				"cloud_provider_config": flattenCloudProviderConfig(d, federatedDatabaseInstances[i].CloudProviderConfig),
-				"data_process_region":   flattenDataProcessRegion(federatedDatabaseInstances[i].DataProcessRegion),
-				"storage_databases":     flattenDataFederationDatabase(federatedDatabaseInstances[i].Storage.GetDatabases()),
-				"storage_stores":        flattenDataFederationStores(federatedDatabaseInstances[i].Storage.GetStores()),
+				"project_id":                 projectID,
+				"name":                       federatedDatabaseInstances[i].GetName(),
+				"state":                      federatedDatabaseInstances[i].GetState(),
+				"hostnames":                  federatedDatabaseInstances[i].GetHostnames(),
+				"cloud_provider_config":      flattenCloudProviderConfig(d, federatedDatabaseInstances[i].CloudProviderConfig),
+				"data_process_region":        flattenDataProcessRegion(federatedDatabaseInstances[i].DataProcessRegion),
+				"storage_databases":          flattenDataFederationDatabase(federatedDatabaseInstances[i].Storage.GetDatabases()),
+				"storage_stores":             flattenDataFederationStores(federatedDatabaseInstances[i].Storage.GetStores()),
+				"private_endpoint_hostnames": flattenPrivateEndpointHostnames(federatedDatabaseInstances[i].GetPrivateEndpointHostnames()),
 			}
 		}
 	}

internal/service/federateddatabaseinstance/data_source_federated_database_instances_test.go

@@ -32,6 +32,7 @@ func TestAccFederatedDatabaseInstanceDSPlural_basic(t *testing.T) {
 				Check: resource.ComposeAggregateTestCheckFunc(
 					resource.TestCheckResourceAttrSet(resourceName, "project_id"),
 					resource.TestCheckResourceAttrSet(resourceName, "results.#"),
+					resource.TestCheckResourceAttr(resourceName, "results.0.private_endpoint_hostnames.#", "0"),
 				),
 			},
 		},

internal/service/federateddatabaseinstance/resource_federated_database_instance.go

@@ -53,6 +53,22 @@ func Resource() *schema.Resource {
 					Type: schema.TypeString,
 				},
 			},
+			"private_endpoint_hostnames": {
+				Type:     schema.TypeList,
+				Computed: true,
+				Elem: &schema.Resource{
+					Schema: map[string]*schema.Schema{
+						"hostname": {
+							Type:     schema.TypeString,
+							Computed: true,
+						},
+						"private_endpoint": {
+							Type:     schema.TypeString,
+							Computed: true,
+						},
+					},
+				},
+			},
 			// Optional-only behavior from the API, but keeping O+C to avoid behavior changes.
 			"cloud_provider_config": cloudProviderConfig(false),
 			"data_process_region": {
@@ -397,6 +413,10 @@ func resourceRead(ctx context.Context, d *schema.ResourceData, meta any) diag.Di
 		return diag.FromErr(fmt.Errorf(errorFederatedDatabaseInstanceSetting, "hostnames", name, err))
 	}
 
+	if err := d.Set("private_endpoint_hostnames", flattenPrivateEndpointHostnames(dataFederationInstance.GetPrivateEndpointHostnames())); err != nil {
+		return diag.FromErr(fmt.Errorf(errorFederatedDatabaseInstanceSetting, "private_endpoint_hostnames", name, err))
+	}
+
 	d.SetId(conversion.EncodeStateID(map[string]string{
 		"project_id": projectID,
 		"name":       name,
@@ -514,6 +534,10 @@ func resourceImport(ctx context.Context, d *schema.ResourceData, meta any) ([]*s
 		return nil, fmt.Errorf(errorFederatedDatabaseInstanceSetting, "hostnames", name, err)
 	}
 
+	if err := d.Set("private_endpoint_hostnames", flattenPrivateEndpointHostnames(dataFederationInstance.GetPrivateEndpointHostnames())); err != nil {
+		return nil, fmt.Errorf(errorFederatedDatabaseInstanceSetting, "private_endpoint_hostnames", name, err)
+	}
+
 	d.SetId(conversion.EncodeStateID(map[string]string{
 		"project_id": projectID,
 		"name":       *dataFederationInstance.Name,
@@ -863,6 +887,17 @@ func flattenDataFederationStores(stores []admin.DataLakeStoreSettings) []map[str
 	return store
 }
 
+func flattenPrivateEndpointHostnames(privateEndpointHostnames []admin.PrivateEndpointHostname) []map[string]any {
+	result := make([]map[string]any, len(privateEndpointHostnames))
+	for i, h := range privateEndpointHostnames {
+		result[i] = map[string]any{
+			"hostname":         h.GetHostname(),
+			"private_endpoint": h.GetPrivateEndpoint(),
+		}
+	}
+	return result
+}
+
 func newReadPreferenceField(atlasReadPreference *admin.DataLakeAtlasStoreReadPreference) []map[string]any {
 	if atlasReadPreference == nil {
 		return nil

internal/service/federateddatabaseinstance/resource_federated_database_instance_test.go

@@ -5,6 +5,7 @@ import (
 	"maps"
 	"os"
 	"testing"
+	"time"
 
 	"github.com/hashicorp/terraform-plugin-testing/helper/resource"
 	"github.com/hashicorp/terraform-plugin-testing/terraform"
@@ -31,6 +32,7 @@ func TestAccFederatedDatabaseInstance_basic(t *testing.T) {
 		"storage_stores.0.read_preference.0.tag_sets.#":             "2",
 		"storage_stores.0.read_preference.0.tag_sets.0.tags.#":      "2",
 		"storage_databases.0.collections.0.data_sources.0.database": "sample_airbnb",
+		"private_endpoint_hostnames.#":                              "0",
 	}
 	setChecks := []string{"project_id", "storage_stores.0.read_preference.0.tag_sets.#"}
 	firstStepChecks := acc.AddAttrChecks(resourceName, nil, valueChecks)
@@ -595,6 +597,92 @@ data "mongodbatlas_federated_database_instance" "test" {
 	`, federatedInstanceName, projectName, orgID)
 }
 
+func TestAccFederatedDatabaseInstance_withPrivateEndpoint(t *testing.T) {
+	var (
+		projectID = acc.ProjectIDExecution(t)
+		name      = acc.RandomName()
+	)
+
+	resource.Test(t, resource.TestCase{
+		PreCheck:                 func() { acc.PreCheckBasic(t); acc.PreCheckAwsEnvBasic(t) },
+		ExternalProviders:        acc.ExternalProvidersOnlyAWS(),
+		ProtoV6ProviderFactories: acc.TestAccProviderV6Factories,
+		CheckDestroy:             acc.CheckDestroyFederatedDatabaseInstance,
+		Steps: []resource.TestStep{
+			{
+				Config: configWithPrivateEndpoint(projectID, name),
+			},
+			{
+				PreConfig:    waitForStatusUpdate,
+				RefreshState: true,
+				Check: resource.ComposeAggregateTestCheckFunc(
+					resource.TestCheckResourceAttr(resourceName, "private_endpoint_hostnames.#", "1"),
+					resource.TestCheckResourceAttrSet(resourceName, "private_endpoint_hostnames.0.hostname"),
+					resource.TestCheckResourceAttrSet(resourceName, "private_endpoint_hostnames.0.private_endpoint"),
+				),
+			},
+		},
+	})
+}
+
+func waitForStatusUpdate() {
+	time.Sleep(2 * time.Minute)
+}
+
+func configWithPrivateEndpoint(projectID, name string) string {
+	return fmt.Sprintf(`
+provider "aws" {
+  region = "us-east-1"
+}
+
+resource "aws_vpc" "test" {
+  cidr_block           = "10.0.0.0/16"
+  enable_dns_hostnames = true
+  enable_dns_support   = true
+}
+
+resource "aws_subnet" "test" {
+  vpc_id            = aws_vpc.test.id
+  cidr_block        = "10.0.1.0/24"
+  availability_zone = "us-east-1a"
+}
+
+data "aws_security_group" "default" {
+  name   = "default"
+  vpc_id = aws_vpc.test.id
+}
+
+resource "aws_vpc_endpoint" "test" {
+  vpc_id              = aws_vpc.test.id
+  service_name        = "com.amazonaws.vpce.us-east-1.vpce-svc-0a7247db33497082e"
+  vpc_endpoint_type   = "Interface"
+  subnet_ids          = [aws_subnet.test.id]
+  security_group_ids  = [data.aws_security_group.default.id]
+}
+
+resource "mongodbatlas_privatelink_endpoint_service_data_federation_online_archive" "test" {
+  project_id                 = %[1]q
+  endpoint_id                = aws_vpc_endpoint.test.id
+  provider_name              = "AWS"
+  comment                    = "Terraform Acceptance Test"
+  customer_endpoint_dns_name = aws_vpc_endpoint.test.dns_entry[0].dns_name
+  region                     = "US_EAST_1"
+}
+
+resource "mongodbatlas_federated_database_instance" "test" {
+  project_id = %[1]q
+  name       = %[2]q
+
+  data_process_region {
+    cloud_provider = "AWS"
+    region         = "VIRGINIA_USA"
+  }
+
+  depends_on = [mongodbatlas_privatelink_endpoint_service_data_federation_online_archive.test]
+}
+`, projectID, name)
+}
+
 func configFirstStepsUpdate(federatedInstanceName, projectName, orgID string) string {
 	return fmt.Sprintf(`