Ability to read cloudflare_api_token R2/S3 equivalent keys

[sjlu]

Current Terraform and Cloudflare provider version

Terraform v1.5.5
on darwin_arm64

• provider registry.terraform.io/cloudflare/cloudflare v4.15.0

Description

Today the API value of the token is produced but the S3 equivalent keys are not. Wondering if there's a way to provide those keys through Terraform so that they can be referenced in other resources.

Use cases

For example, getting the S3 equivalent keys and passing it to an Elastic Beanstalk environment.

Potential Terraform configuration

resource "cloudflare_api_token" "r2" {
  name = "r2"

  policy {
    permission_groups = [
      data.cloudflare_api_token_permission_groups.all.r2["Workers R2 Storage Bucket Item Read"],
      data.cloudflare_api_token_permission_groups.all.r2["Workers R2 Storage Bucket Item Write"]
    ]
    resources = {
      "com.cloudflare.edge.r2.bucket.*" = "*"
    }
  }
}

resource "some_other_resource" "r2" {
  r2_access_key = cloudflare_api_token.r2_access_key
  r2_secret_key = cloudflare_api_token.r2_secret_key
}

References

No response

[github-actions]

Community Note

Voting for Prioritization

• Please vote on this issue by adding a 👍 reaction to the original post to help the community and maintainers prioritize this request.
• Please do not leave "+1" or other comments that do not add relevant new information or questions, they generate extra noise for issue followers and do not help prioritize the request.

Volunteering to Work on This Issue

• If you are interested in working on this issue, please leave a comment.
• If this would be your first contribution, please review the contribution guide.

[jacobbednarz]

duplicate of #2713, specifically #2713 (comment)

[sjlu]

Makes sense, docs would be nice!