r/aws_bedrockagentcore_api_key_credential_provider: add external secret support

[erhancagirici]

Cherry-pick unmerged upstream PR 48629 for supporting customer-managed Secrets Manager secrets in aws_bedrockagentcore_api_key_credential_provider

Test manifest:

apiVersion: bedrockagentcore.aws.upbound.io/v1beta1
kind: APIKeyCredentialProvider
metadata:
  annotations:
    meta.upbound.io/example-id: bedrockagentcore/v1beta1/apikeycredentialprovider
  labels:
    testing.upbound.io/example-name: apikeycredentialprovider-cms
  name: apikeycredentialprovider-cms
spec:
  forProvider:
    region: us-west-2
    apiKeySecretSource: EXTERNAL
    apiKeySecretConfig:
      secretIdSelector:
        matchLabels:
          testing.upbound.io/example-name: apikeycredentialprovider-cms
      jsonKey: test
    tags:
      Environment: Demo
---
apiVersion: secretsmanager.aws.upbound.io/v1beta1
kind: Secret
metadata:
  name: example-cms
  annotations:
    uptest.upbound.io/disable-import: "true"
    meta.upbound.io/example-id: bedrockagentcore/v1beta1/apikeycredentialprovider
  labels:
    testing.upbound.io/example-name: apikeycredentialprovider-cms
spec:
  forProvider:
    name: example-${Rand.RFC1123Subdomain}
    region: us-west-2
    recoveryWindowInDays: 0
---
apiVersion: secretsmanager.aws.upbound.io/v1beta1
kind: SecretVersion
metadata:
  name: example-cms-version
  annotations:
    uptest.upbound.io/disable-import: "true"
    meta.upbound.io/example-id: bedrockagentcore/v1beta1/apikeycredentialprovider
  labels:
    testing.upbound.io/example-name: apikeycredentialprovider-cms
spec:
  forProvider:
    region: us-west-2
    secretIdSelector:
      matchLabels:
        testing.upbound.io/example-name: apikeycredentialprovider-cms
    secretStringSecretRef:
      key: demo
      name: example-secret-version
      namespace: upbound-system
---
apiVersion: v1
kind: Secret
metadata:
  name: example-secret-version
  namespace: upbound-system
type: Opaque
stringData:
  demo: '{"test": "Test12345!"}'

[github-actions]

Community Note

Voting for Prioritization

• Please vote on this pull request by adding a 👍 reaction to the original post to help the community and maintainers prioritize this pull request.
• Please see our prioritization guide for information on how we prioritize.
• Please do not leave "+1" or other comments that do not add relevant new information or questions, they generate extra noise for issue followers and do not help prioritize the request.

For Submitters

• Review the contribution guide relating to the type of change you are making to ensure all of the necessary steps have been taken.
• For new resources and data sources, use skaff to generate scaffolding with comments detailing common expectations.
• Whether or not the branch has been rebased will not impact prioritization, but doing so is always a welcome surprise.

[ulucinar]

Thank you @erhancagirici. Could you please add the Crossplane provider manifest and the provider test image you used to test the implementation to the PR description?