New resource: r/aws_cloudfront_connection_group: Added new connection group resource as part of Cloudfront's SaaS Manager feature with Terraform Framework

[gahykiamzn]

Rollback Plan

If a change needs to be reverted, we will publish an updated version of the library.

Changes to Security Controls

N/A

Description

Summary of changes:

• Reimplemented new Connection Group resource using the Terraform framework as pointed out in [Enhancement] r/aws_cloudfront_distribution: Added SaaS Manager configuration support for distributions #44034
• Merged data source code changes into this PR to keep Connection Group resource changes together

Relations

The previous contributor's dependency graph is slightly wrong. This PR is the first one that must be merged before any other changes.

Relates #44034 , #42409
Closes #44185 , #44184

References

Connection Group CDK Docs
General SaaS information
SaaS unsupported features

Output from Acceptance Testing

% gahyki@bcd074487ec1 terraform-provider-aws % make testacc PKG=cloudfront TESTS="TestAccCloudFrontConnectionGroup|TestAccCloudFrontConnectionGroupDataSource"

make: Verifying source code with gofmt...
==> Checking that code complies with gofmt requirements...
make: Running acceptance tests on branch: 🌿 f-cloudfront-connection-group 🌿...
TF_ACC=1 go1.24.8 test ./internal/service/cloudfront/... -v -count 1 -parallel 20 -run='TestAccCloudFrontConnectionGroup|TestAccCloudFrontConnectionGroupDataSource'  -timeout 360m -vet=off
2025/10/30 16:00:17 Creating Terraform AWS Provider (SDKv2-style)...
2025/10/30 16:00:17 Initializing Terraform AWS Provider (SDKv2-style)...
=== RUN   TestAccCloudFrontConnectionGroupDataSource_basic
=== PAUSE TestAccCloudFrontConnectionGroupDataSource_basic
=== RUN   TestAccCloudFrontConnectionGroupDataSource_byRoutingEndpoint
=== PAUSE TestAccCloudFrontConnectionGroupDataSource_byRoutingEndpoint
=== RUN   TestAccCloudFrontConnectionGroup_basic
=== PAUSE TestAccCloudFrontConnectionGroup_basic
=== RUN   TestAccCloudFrontConnectionGroup_disappears
=== PAUSE TestAccCloudFrontConnectionGroup_disappears
=== RUN   TestAccCloudFrontConnectionGroup_tags
=== PAUSE TestAccCloudFrontConnectionGroup_tags
=== RUN   TestAccCloudFrontConnectionGroup_ipv6
=== PAUSE TestAccCloudFrontConnectionGroup_ipv6
=== CONT  TestAccCloudFrontConnectionGroupDataSource_basic
=== CONT  TestAccCloudFrontConnectionGroup_disappears
=== CONT  TestAccCloudFrontConnectionGroup_ipv6
=== CONT  TestAccCloudFrontConnectionGroup_basic
=== CONT  TestAccCloudFrontConnectionGroup_tags
=== CONT  TestAccCloudFrontConnectionGroupDataSource_byRoutingEndpoint
--- PASS: TestAccCloudFrontConnectionGroup_ipv6 (644.87s)
--- PASS: TestAccCloudFrontConnectionGroup_disappears (645.82s)
--- PASS: TestAccCloudFrontConnectionGroup_basic (649.30s)
--- PASS: TestAccCloudFrontConnectionGroupDataSource_byRoutingEndpoint (650.00s)
--- PASS: TestAccCloudFrontConnectionGroupDataSource_basic (650.00s)
--- PASS: TestAccCloudFrontConnectionGroup_tags (677.08s)
PASS
ok      github.com/hashicorp/terraform-provider-aws/internal/service/cloudfront 684.022s
...

[github-actions]

Community Guidelines

This comment is added to every new Pull Request to provide quick reference to how the Terraform AWS Provider is maintained. Please review the information below, and thank you for contributing to the community that keeps the provider thriving! 🚀

Voting for Prioritization

• Please vote on this Pull Request by adding a 👍 reaction to the original post to help the community and maintainers prioritize it.
• Please see our prioritization guide for additional information on how the maintainers handle prioritization.
• Please do not leave +1 or other comments that do not add relevant new information or questions; they generate extra noise for others following the Pull Request and do not help prioritize the request.

Pull Request Authors

• Review the contribution guide relating to the type of change you are making to ensure all of the necessary steps have been taken.
• Whether or not the branch has been rebased will not impact prioritization, but doing so is always a welcome surprise.