{
    "format_version": "1.2",
    "terraform_version": "1.15.6",
    "planned_values": {
        "root_module": {
            "resources": [
                {
                    "address": "aws_cloudfront_distribution.bad_cf",
                    "mode": "managed",
                    "type": "aws_cloudfront_distribution",
                    "name": "bad_cf",
                    "provider_name": "registry.terraform.io/hashicorp/aws",
                    "schema_version": 1,
                    "values": {
                        "aliases": null,
                        "comment": null,
                        "custom_error_response": [],
                        "default_cache_behavior": [
                            {
                                "allowed_methods": [
                                    "GET",
                                    "HEAD"
                                ],
                                "cache_policy_id": null,
                                "cached_methods": [
                                    "GET",
                                    "HEAD"
                                ],
                                "compress": false,
                                "field_level_encryption_id": null,
                                "forwarded_values": [
                                    {
                                        "cookies": [
                                            {
                                                "forward": "none"
                                            }
                                        ],
                                        "query_string": false
                                    }
                                ],
                                "function_association": [],
                                "lambda_function_association": [],
                                "min_ttl": 0,
                                "origin_request_policy_id": null,
                                "realtime_log_config_arn": null,
                                "response_headers_policy_id": null,
                                "smooth_streaming": null,
                                "target_origin_id": "bad-origin",
                                "viewer_protocol_policy": "redirect-to-https"
                            }
                        ],
                        "default_root_object": null,
                        "enabled": true,
                        "http_version": "http2",
                        "is_ipv6_enabled": false,
                        "logging_config": [],
                        "ordered_cache_behavior": [],
                        "origin": [
                            {
                                "connection_attempts": 3,
                                "connection_timeout": 10,
                                "custom_header": [],
                                "custom_origin_config": [
                                    {
                                        "http_port": 80,
                                        "https_port": 443,
                                        "origin_keepalive_timeout": 5,
                                        "origin_protocol_policy": "https-only",
                                        "origin_read_timeout": 30,
                                        "origin_ssl_protocols": [
                                            "TLSv1.2"
                                        ]
                                    }
                                ],
                                "domain_name": "example.com",
                                "origin_access_control_id": "",
                                "origin_id": "bad-origin",
                                "origin_path": "",
                                "origin_shield": [],
                                "s3_origin_config": [],
                                "vpc_origin_config": []
                            }
                        ],
                        "origin_group": [],
                        "price_class": "PriceClass_All",
                        "restrictions": [
                            {
                                "geo_restriction": [
                                    {
                                        "restriction_type": "none"
                                    }
                                ]
                            }
                        ],
                        "retain_on_delete": false,
                        "staging": false,
                        "tags": null,
                        "viewer_certificate": [
                            {
                                "acm_certificate_arn": null,
                                "cloudfront_default_certificate": true,
                                "iam_certificate_id": null,
                                "minimum_protocol_version": "TLSv1",
                                "ssl_support_method": null
                            }
                        ],
                        "wait_for_deployment": true,
                        "web_acl_id": null
                    },
                    "sensitive_values": {
                        "custom_error_response": [],
                        "default_cache_behavior": [
                            {
                                "allowed_methods": [
                                    false,
                                    false
                                ],
                                "cached_methods": [
                                    false,
                                    false
                                ],
                                "forwarded_values": [
                                    {
                                        "cookies": [
                                            {
                                                "whitelisted_names": []
                                            }
                                        ],
                                        "headers": [],
                                        "query_string_cache_keys": []
                                    }
                                ],
                                "function_association": [],
                                "grpc_config": [],
                                "lambda_function_association": [],
                                "trusted_key_groups": [],
                                "trusted_signers": []
                            }
                        ],
                        "logging_config": [],
                        "ordered_cache_behavior": [],
                        "origin": [
                            {
                                "custom_header": [],
                                "custom_origin_config": [
                                    {
                                        "origin_ssl_protocols": [
                                            false
                                        ]
                                    }
                                ],
                                "origin_shield": [],
                                "s3_origin_config": [],
                                "vpc_origin_config": []
                            }
                        ],
                        "origin_group": [],
                        "restrictions": [
                            {
                                "geo_restriction": [
                                    {
                                        "locations": []
                                    }
                                ]
                            }
                        ],
                        "tags_all": {},
                        "trusted_key_groups": [],
                        "trusted_signers": [],
                        "viewer_certificate": [
                            {}
                        ]
                    }
                },
                {
                    "address": "aws_db_instance.bad_rds",
                    "mode": "managed",
                    "type": "aws_db_instance",
                    "name": "bad_rds",
                    "provider_name": "registry.terraform.io/hashicorp/aws",
                    "schema_version": 2,
                    "values": {
                        "allocated_storage": 20,
                        "allow_major_version_upgrade": null,
                        "apply_immediately": false,
                        "auto_minor_version_upgrade": true,
                        "backup_retention_period": 7,
                        "blue_green_update": [],
                        "copy_tags_to_snapshot": false,
                        "custom_iam_instance_profile": null,
                        "customer_owned_ip_enabled": null,
                        "dedicated_log_volume": false,
                        "delete_automated_backups": true,
                        "deletion_protection": null,
                        "domain": null,
                        "domain_auth_secret_arn": null,
                        "domain_dns_ips": null,
                        "domain_iam_role_name": null,
                        "domain_ou": null,
                        "enabled_cloudwatch_logs_exports": null,
                        "engine": "mysql",
                        "engine_version": "8.0",
                        "final_snapshot_identifier": null,
                        "iam_database_authentication_enabled": null,
                        "identifier": "bad-gac-rds",
                        "instance_class": "db.t3.micro",
                        "manage_master_user_password": null,
                        "max_allocated_storage": null,
                        "monitoring_interval": 0,
                        "password": "Badpassword123",
                        "password_wo": null,
                        "password_wo_version": null,
                        "performance_insights_enabled": false,
                        "publicly_accessible": false,
                        "replicate_source_db": null,
                        "restore_to_point_in_time": [],
                        "s3_import": [],
                        "skip_final_snapshot": true,
                        "storage_encrypted": null,
                        "tags": null,
                        "timeouts": null,
                        "upgrade_storage_config": null,
                        "username": "admin"
                    },
                    "sensitive_values": {
                        "blue_green_update": [],
                        "listener_endpoint": [],
                        "master_user_secret": [],
                        "password": true,
                        "password_wo": true,
                        "replicas": [],
                        "restore_to_point_in_time": [],
                        "s3_import": [],
                        "tags_all": {},
                        "vpc_security_group_ids": []
                    }
                },
                {
                    "address": "aws_eks_cluster.bad_eks",
                    "mode": "managed",
                    "type": "aws_eks_cluster",
                    "name": "bad_eks",
                    "provider_name": "registry.terraform.io/hashicorp/aws",
                    "schema_version": 1,
                    "values": {
                        "bootstrap_self_managed_addons": true,
                        "compute_config": [],
                        "enabled_cluster_log_types": null,
                        "encryption_config": [],
                        "force_update_version": null,
                        "name": "bad-eks",
                        "outpost_config": [],
                        "remote_network_config": [],
                        "role_arn": "arn:aws:iam::123456789012:role/eks-role",
                        "storage_config": [],
                        "tags": null,
                        "timeouts": null,
                        "vpc_config": [
                            {
                                "endpoint_private_access": false,
                                "endpoint_public_access": true,
                                "public_access_cidrs": [
                                    "0.0.0.0/0"
                                ],
                                "security_group_ids": null,
                                "subnet_ids": [
                                    "subnet-12345678"
                                ]
                            }
                        ],
                        "zonal_shift_config": []
                    },
                    "sensitive_values": {
                        "access_config": [],
                        "certificate_authority": [],
                        "compute_config": [],
                        "encryption_config": [],
                        "identity": [],
                        "kubernetes_network_config": [],
                        "outpost_config": [],
                        "remote_network_config": [],
                        "storage_config": [],
                        "tags_all": {},
                        "upgrade_policy": [],
                        "vpc_config": [
                            {
                                "public_access_cidrs": [
                                    false
                                ],
                                "subnet_ids": [
                                    false
                                ]
                            }
                        ],
                        "zonal_shift_config": []
                    }
                },
                {
                    "address": "aws_iam_account_password_policy.bad_password_policy",
                    "mode": "managed",
                    "type": "aws_iam_account_password_policy",
                    "name": "bad_password_policy",
                    "provider_name": "registry.terraform.io/hashicorp/aws",
                    "schema_version": 0,
                    "values": {
                        "allow_users_to_change_password": true,
                        "max_password_age": 180,
                        "minimum_password_length": 8,
                        "password_reuse_prevention": 5,
                        "require_lowercase_characters": false,
                        "require_numbers": false,
                        "require_symbols": false,
                        "require_uppercase_characters": false
                    },
                    "sensitive_values": {}
                },
                {
                    "address": "aws_iam_policy.bad_admin_policy",
                    "mode": "managed",
                    "type": "aws_iam_policy",
                    "name": "bad_admin_policy",
                    "provider_name": "registry.terraform.io/hashicorp/aws",
                    "schema_version": 0,
                    "values": {
                        "description": null,
                        "name": "bad-admin-policy",
                        "path": "/",
                        "policy": "{\"Statement\":[{\"Action\":\"*\",\"Effect\":\"Allow\",\"Resource\":\"*\"}],\"Version\":\"2012-10-17\"}",
                        "tags": null
                    },
                    "sensitive_values": {
                        "tags_all": {}
                    }
                },
                {
                    "address": "aws_iam_role.bad_role",
                    "mode": "managed",
                    "type": "aws_iam_role",
                    "name": "bad_role",
                    "provider_name": "registry.terraform.io/hashicorp/aws",
                    "schema_version": 0,
                    "values": {
                        "assume_role_policy": "{\"Statement\":[{\"Action\":\"sts:AssumeRole\",\"Effect\":\"Allow\",\"Principal\":\"*\"}],\"Version\":\"2012-10-17\"}",
                        "description": null,
                        "force_detach_policies": false,
                        "max_session_duration": 3600,
                        "name": "bad-gac-role",
                        "path": "/",
                        "permissions_boundary": null,
                        "tags": null
                    },
                    "sensitive_values": {
                        "inline_policy": [],
                        "managed_policy_arns": [],
                        "tags_all": {}
                    }
                },
                {
                    "address": "aws_s3_bucket.bad_bucket",
                    "mode": "managed",
                    "type": "aws_s3_bucket",
                    "name": "bad_bucket",
                    "provider_name": "registry.terraform.io/hashicorp/aws",
                    "schema_version": 0,
                    "values": {
                        "bucket": "bad-gac-bucket",
                        "force_destroy": false,
                        "tags": null,
                        "timeouts": null
                    },
                    "sensitive_values": {
                        "cors_rule": [],
                        "grant": [],
                        "lifecycle_rule": [],
                        "logging": [],
                        "object_lock_configuration": [],
                        "replication_configuration": [],
                        "server_side_encryption_configuration": [],
                        "tags_all": {},
                        "versioning": [],
                        "website": []
                    }
                },
                {
                    "address": "aws_s3_bucket_versioning.bad_versioning",
                    "mode": "managed",
                    "type": "aws_s3_bucket_versioning",
                    "name": "bad_versioning",
                    "provider_name": "registry.terraform.io/hashicorp/aws",
                    "schema_version": 0,
                    "values": {
                        "expected_bucket_owner": null,
                        "mfa": null,
                        "versioning_configuration": [
                            {
                                "status": "Suspended"
                            }
                        ]
                    },
                    "sensitive_values": {
                        "versioning_configuration": [
                            {}
                        ]
                    }
                }
            ]
        }
    },
    "resource_changes": [
        {
            "address": "aws_cloudfront_distribution.bad_cf",
            "mode": "managed",
            "type": "aws_cloudfront_distribution",
            "name": "bad_cf",
            "provider_name": "registry.terraform.io/hashicorp/aws",
            "change": {
                "actions": [
                    "create"
                ],
                "before": null,
                "after": {
                    "aliases": null,
                    "comment": null,
                    "custom_error_response": [],
                    "default_cache_behavior": [
                        {
                            "allowed_methods": [
                                "GET",
                                "HEAD"
                            ],
                            "cache_policy_id": null,
                            "cached_methods": [
                                "GET",
                                "HEAD"
                            ],
                            "compress": false,
                            "field_level_encryption_id": null,
                            "forwarded_values": [
                                {
                                    "cookies": [
                                        {
                                            "forward": "none"
                                        }
                                    ],
                                    "query_string": false
                                }
                            ],
                            "function_association": [],
                            "lambda_function_association": [],
                            "min_ttl": 0,
                            "origin_request_policy_id": null,
                            "realtime_log_config_arn": null,
                            "response_headers_policy_id": null,
                            "smooth_streaming": null,
                            "target_origin_id": "bad-origin",
                            "viewer_protocol_policy": "redirect-to-https"
                        }
                    ],
                    "default_root_object": null,
                    "enabled": true,
                    "http_version": "http2",
                    "is_ipv6_enabled": false,
                    "logging_config": [],
                    "ordered_cache_behavior": [],
                    "origin": [
                        {
                            "connection_attempts": 3,
                            "connection_timeout": 10,
                            "custom_header": [],
                            "custom_origin_config": [
                                {
                                    "http_port": 80,
                                    "https_port": 443,
                                    "origin_keepalive_timeout": 5,
                                    "origin_protocol_policy": "https-only",
                                    "origin_read_timeout": 30,
                                    "origin_ssl_protocols": [
                                        "TLSv1.2"
                                    ]
                                }
                            ],
                            "domain_name": "example.com",
                            "origin_access_control_id": "",
                            "origin_id": "bad-origin",
                            "origin_path": "",
                            "origin_shield": [],
                            "s3_origin_config": [],
                            "vpc_origin_config": []
                        }
                    ],
                    "origin_group": [],
                    "price_class": "PriceClass_All",
                    "restrictions": [
                        {
                            "geo_restriction": [
                                {
                                    "restriction_type": "none"
                                }
                            ]
                        }
                    ],
                    "retain_on_delete": false,
                    "staging": false,
                    "tags": null,
                    "viewer_certificate": [
                        {
                            "acm_certificate_arn": null,
                            "cloudfront_default_certificate": true,
                            "iam_certificate_id": null,
                            "minimum_protocol_version": "TLSv1",
                            "ssl_support_method": null
                        }
                    ],
                    "wait_for_deployment": true,
                    "web_acl_id": null
                },
                "after_unknown": {
                    "arn": true,
                    "caller_reference": true,
                    "continuous_deployment_policy_id": true,
                    "custom_error_response": [],
                    "default_cache_behavior": [
                        {
                            "allowed_methods": [
                                false,
                                false
                            ],
                            "cached_methods": [
                                false,
                                false
                            ],
                            "default_ttl": true,
                            "forwarded_values": [
                                {
                                    "cookies": [
                                        {
                                            "whitelisted_names": true
                                        }
                                    ],
                                    "headers": true,
                                    "query_string_cache_keys": true
                                }
                            ],
                            "function_association": [],
                            "grpc_config": true,
                            "lambda_function_association": [],
                            "max_ttl": true,
                            "trusted_key_groups": true,
                            "trusted_signers": true
                        }
                    ],
                    "domain_name": true,
                    "etag": true,
                    "hosted_zone_id": true,
                    "id": true,
                    "in_progress_validation_batches": true,
                    "last_modified_time": true,
                    "logging_config": [],
                    "ordered_cache_behavior": [],
                    "origin": [
                        {
                            "custom_header": [],
                            "custom_origin_config": [
                                {
                                    "origin_ssl_protocols": [
                                        false
                                    ]
                                }
                            ],
                            "origin_shield": [],
                            "s3_origin_config": [],
                            "vpc_origin_config": []
                        }
                    ],
                    "origin_group": [],
                    "restrictions": [
                        {
                            "geo_restriction": [
                                {
                                    "locations": true
                                }
                            ]
                        }
                    ],
                    "status": true,
                    "tags_all": true,
                    "trusted_key_groups": true,
                    "trusted_signers": true,
                    "viewer_certificate": [
                        {}
                    ]
                },
                "before_sensitive": false,
                "after_sensitive": {
                    "custom_error_response": [],
                    "default_cache_behavior": [
                        {
                            "allowed_methods": [
                                false,
                                false
                            ],
                            "cached_methods": [
                                false,
                                false
                            ],
                            "forwarded_values": [
                                {
                                    "cookies": [
                                        {
                                            "whitelisted_names": []
                                        }
                                    ],
                                    "headers": [],
                                    "query_string_cache_keys": []
                                }
                            ],
                            "function_association": [],
                            "grpc_config": [],
                            "lambda_function_association": [],
                            "trusted_key_groups": [],
                            "trusted_signers": []
                        }
                    ],
                    "logging_config": [],
                    "ordered_cache_behavior": [],
                    "origin": [
                        {
                            "custom_header": [],
                            "custom_origin_config": [
                                {
                                    "origin_ssl_protocols": [
                                        false
                                    ]
                                }
                            ],
                            "origin_shield": [],
                            "s3_origin_config": [],
                            "vpc_origin_config": []
                        }
                    ],
                    "origin_group": [],
                    "restrictions": [
                        {
                            "geo_restriction": [
                                {
                                    "locations": []
                                }
                            ]
                        }
                    ],
                    "tags_all": {},
                    "trusted_key_groups": [],
                    "trusted_signers": [],
                    "viewer_certificate": [
                        {}
                    ]
                }
            }
        },
        {
            "address": "aws_db_instance.bad_rds",
            "mode": "managed",
            "type": "aws_db_instance",
            "name": "bad_rds",
            "provider_name": "registry.terraform.io/hashicorp/aws",
            "change": {
                "actions": [
                    "create"
                ],
                "before": null,
                "after": {
                    "allocated_storage": 20,
                    "allow_major_version_upgrade": null,
                    "apply_immediately": false,
                    "auto_minor_version_upgrade": true,
                    "backup_retention_period": 7,
                    "blue_green_update": [],
                    "copy_tags_to_snapshot": false,
                    "custom_iam_instance_profile": null,
                    "customer_owned_ip_enabled": null,
                    "dedicated_log_volume": false,
                    "delete_automated_backups": true,
                    "deletion_protection": null,
                    "domain": null,
                    "domain_auth_secret_arn": null,
                    "domain_dns_ips": null,
                    "domain_iam_role_name": null,
                    "domain_ou": null,
                    "enabled_cloudwatch_logs_exports": null,
                    "engine": "mysql",
                    "engine_version": "8.0",
                    "final_snapshot_identifier": null,
                    "iam_database_authentication_enabled": null,
                    "identifier": "bad-gac-rds",
                    "instance_class": "db.t3.micro",
                    "manage_master_user_password": null,
                    "max_allocated_storage": null,
                    "monitoring_interval": 0,
                    "password": "Badpassword123",
                    "password_wo": null,
                    "password_wo_version": null,
                    "performance_insights_enabled": false,
                    "publicly_accessible": false,
                    "replicate_source_db": null,
                    "restore_to_point_in_time": [],
                    "s3_import": [],
                    "skip_final_snapshot": true,
                    "storage_encrypted": null,
                    "tags": null,
                    "timeouts": null,
                    "upgrade_storage_config": null,
                    "username": "admin"
                },
                "after_unknown": {
                    "address": true,
                    "arn": true,
                    "availability_zone": true,
                    "backup_target": true,
                    "backup_window": true,
                    "blue_green_update": [],
                    "ca_cert_identifier": true,
                    "character_set_name": true,
                    "database_insights_mode": true,
                    "db_name": true,
                    "db_subnet_group_name": true,
                    "domain_fqdn": true,
                    "endpoint": true,
                    "engine_lifecycle_support": true,
                    "engine_version_actual": true,
                    "hosted_zone_id": true,
                    "id": true,
                    "identifier_prefix": true,
                    "iops": true,
                    "kms_key_id": true,
                    "latest_restorable_time": true,
                    "license_model": true,
                    "listener_endpoint": true,
                    "maintenance_window": true,
                    "master_user_secret": true,
                    "master_user_secret_kms_key_id": true,
                    "monitoring_role_arn": true,
                    "multi_az": true,
                    "nchar_character_set_name": true,
                    "network_type": true,
                    "option_group_name": true,
                    "parameter_group_name": true,
                    "performance_insights_kms_key_id": true,
                    "performance_insights_retention_period": true,
                    "port": true,
                    "replica_mode": true,
                    "replicas": true,
                    "resource_id": true,
                    "restore_to_point_in_time": [],
                    "s3_import": [],
                    "snapshot_identifier": true,
                    "status": true,
                    "storage_throughput": true,
                    "storage_type": true,
                    "tags_all": true,
                    "timezone": true,
                    "vpc_security_group_ids": true
                },
                "before_sensitive": false,
                "after_sensitive": {
                    "blue_green_update": [],
                    "listener_endpoint": [],
                    "master_user_secret": [],
                    "password": true,
                    "password_wo": true,
                    "replicas": [],
                    "restore_to_point_in_time": [],
                    "s3_import": [],
                    "tags_all": {},
                    "vpc_security_group_ids": []
                }
            }
        },
        {
            "address": "aws_eks_cluster.bad_eks",
            "mode": "managed",
            "type": "aws_eks_cluster",
            "name": "bad_eks",
            "provider_name": "registry.terraform.io/hashicorp/aws",
            "change": {
                "actions": [
                    "create"
                ],
                "before": null,
                "after": {
                    "bootstrap_self_managed_addons": true,
                    "compute_config": [],
                    "enabled_cluster_log_types": null,
                    "encryption_config": [],
                    "force_update_version": null,
                    "name": "bad-eks",
                    "outpost_config": [],
                    "remote_network_config": [],
                    "role_arn": "arn:aws:iam::123456789012:role/eks-role",
                    "storage_config": [],
                    "tags": null,
                    "timeouts": null,
                    "vpc_config": [
                        {
                            "endpoint_private_access": false,
                            "endpoint_public_access": true,
                            "public_access_cidrs": [
                                "0.0.0.0/0"
                            ],
                            "security_group_ids": null,
                            "subnet_ids": [
                                "subnet-12345678"
                            ]
                        }
                    ],
                    "zonal_shift_config": []
                },
                "after_unknown": {
                    "access_config": true,
                    "arn": true,
                    "certificate_authority": true,
                    "cluster_id": true,
                    "compute_config": [],
                    "created_at": true,
                    "encryption_config": [],
                    "endpoint": true,
                    "id": true,
                    "identity": true,
                    "kubernetes_network_config": true,
                    "outpost_config": [],
                    "platform_version": true,
                    "remote_network_config": [],
                    "status": true,
                    "storage_config": [],
                    "tags_all": true,
                    "upgrade_policy": true,
                    "version": true,
                    "vpc_config": [
                        {
                            "cluster_security_group_id": true,
                            "public_access_cidrs": [
                                false
                            ],
                            "subnet_ids": [
                                false
                            ],
                            "vpc_id": true
                        }
                    ],
                    "zonal_shift_config": []
                },
                "before_sensitive": false,
                "after_sensitive": {
                    "access_config": [],
                    "certificate_authority": [],
                    "compute_config": [],
                    "encryption_config": [],
                    "identity": [],
                    "kubernetes_network_config": [],
                    "outpost_config": [],
                    "remote_network_config": [],
                    "storage_config": [],
                    "tags_all": {},
                    "upgrade_policy": [],
                    "vpc_config": [
                        {
                            "public_access_cidrs": [
                                false
                            ],
                            "subnet_ids": [
                                false
                            ]
                        }
                    ],
                    "zonal_shift_config": []
                }
            }
        },
        {
            "address": "aws_iam_account_password_policy.bad_password_policy",
            "mode": "managed",
            "type": "aws_iam_account_password_policy",
            "name": "bad_password_policy",
            "provider_name": "registry.terraform.io/hashicorp/aws",
            "change": {
                "actions": [
                    "create"
                ],
                "before": null,
                "after": {
                    "allow_users_to_change_password": true,
                    "max_password_age": 180,
                    "minimum_password_length": 8,
                    "password_reuse_prevention": 5,
                    "require_lowercase_characters": false,
                    "require_numbers": false,
                    "require_symbols": false,
                    "require_uppercase_characters": false
                },
                "after_unknown": {
                    "expire_passwords": true,
                    "hard_expiry": true,
                    "id": true
                },
                "before_sensitive": false,
                "after_sensitive": {}
            }
        },
        {
            "address": "aws_iam_policy.bad_admin_policy",
            "mode": "managed",
            "type": "aws_iam_policy",
            "name": "bad_admin_policy",
            "provider_name": "registry.terraform.io/hashicorp/aws",
            "change": {
                "actions": [
                    "create"
                ],
                "before": null,
                "after": {
                    "description": null,
                    "name": "bad-admin-policy",
                    "path": "/",
                    "policy": "{\"Statement\":[{\"Action\":\"*\",\"Effect\":\"Allow\",\"Resource\":\"*\"}],\"Version\":\"2012-10-17\"}",
                    "tags": null
                },
                "after_unknown": {
                    "arn": true,
                    "attachment_count": true,
                    "id": true,
                    "name_prefix": true,
                    "policy_id": true,
                    "tags_all": true
                },
                "before_sensitive": false,
                "after_sensitive": {
                    "tags_all": {}
                }
            }
        },
        {
            "address": "aws_iam_role.bad_role",
            "mode": "managed",
            "type": "aws_iam_role",
            "name": "bad_role",
            "provider_name": "registry.terraform.io/hashicorp/aws",
            "change": {
                "actions": [
                    "create"
                ],
                "before": null,
                "after": {
                    "assume_role_policy": "{\"Statement\":[{\"Action\":\"sts:AssumeRole\",\"Effect\":\"Allow\",\"Principal\":\"*\"}],\"Version\":\"2012-10-17\"}",
                    "description": null,
                    "force_detach_policies": false,
                    "max_session_duration": 3600,
                    "name": "bad-gac-role",
                    "path": "/",
                    "permissions_boundary": null,
                    "tags": null
                },
                "after_unknown": {
                    "arn": true,
                    "create_date": true,
                    "id": true,
                    "inline_policy": true,
                    "managed_policy_arns": true,
                    "name_prefix": true,
                    "tags_all": true,
                    "unique_id": true
                },
                "before_sensitive": false,
                "after_sensitive": {
                    "inline_policy": [],
                    "managed_policy_arns": [],
                    "tags_all": {}
                }
            }
        },
        {
            "address": "aws_s3_bucket.bad_bucket",
            "mode": "managed",
            "type": "aws_s3_bucket",
            "name": "bad_bucket",
            "provider_name": "registry.terraform.io/hashicorp/aws",
            "change": {
                "actions": [
                    "create"
                ],
                "before": null,
                "after": {
                    "bucket": "bad-gac-bucket",
                    "force_destroy": false,
                    "tags": null,
                    "timeouts": null
                },
                "after_unknown": {
                    "acceleration_status": true,
                    "acl": true,
                    "arn": true,
                    "bucket_domain_name": true,
                    "bucket_prefix": true,
                    "bucket_regional_domain_name": true,
                    "cors_rule": true,
                    "grant": true,
                    "hosted_zone_id": true,
                    "id": true,
                    "lifecycle_rule": true,
                    "logging": true,
                    "object_lock_configuration": true,
                    "object_lock_enabled": true,
                    "policy": true,
                    "region": true,
                    "replication_configuration": true,
                    "request_payer": true,
                    "server_side_encryption_configuration": true,
                    "tags_all": true,
                    "versioning": true,
                    "website": true,
                    "website_domain": true,
                    "website_endpoint": true
                },
                "before_sensitive": false,
                "after_sensitive": {
                    "cors_rule": [],
                    "grant": [],
                    "lifecycle_rule": [],
                    "logging": [],
                    "object_lock_configuration": [],
                    "replication_configuration": [],
                    "server_side_encryption_configuration": [],
                    "tags_all": {},
                    "versioning": [],
                    "website": []
                }
            }
        },
        {
            "address": "aws_s3_bucket_versioning.bad_versioning",
            "mode": "managed",
            "type": "aws_s3_bucket_versioning",
            "name": "bad_versioning",
            "provider_name": "registry.terraform.io/hashicorp/aws",
            "change": {
                "actions": [
                    "create"
                ],
                "before": null,
                "after": {
                    "expected_bucket_owner": null,
                    "mfa": null,
                    "versioning_configuration": [
                        {
                            "status": "Suspended"
                        }
                    ]
                },
                "after_unknown": {
                    "bucket": true,
                    "id": true,
                    "versioning_configuration": [
                        {
                            "mfa_delete": true
                        }
                    ]
                },
                "before_sensitive": false,
                "after_sensitive": {
                    "versioning_configuration": [
                        {}
                    ]
                }
            }
        },
        {
            "address": "aws_snapshot_create_volume_permission.bad_snap_perm",
            "mode": "managed",
            "type": "aws_snapshot_create_volume_permission",
            "name": "bad_snap_perm",
            "provider_name": "registry.terraform.io/hashicorp/aws",
            "change": {
                "actions": [
                    "create"
                ],
                "before": null,
                "after": {
                    "account_id": "all",
                    "snapshot_id": "snap-12345678"
                },
                "after_unknown": {},
                "before_sensitive": false,
                "after_sensitive": {}
            }
        },
        {
            "address": "aws_db_snapshot.bad_snapshot",
            "mode": "managed",
            "type": "aws_db_snapshot",
            "name": "bad_snapshot",
            "provider_name": "registry.terraform.io/hashicorp/aws",
            "change": {
                "actions": [
                    "create"
                ],
                "before": null,
                "after": {
                    "db_instance_identifier": "bad-gac-rds",
                    "db_snapshot_identifier": "bad-snapshot",
                    "shared_accounts": [
                        "all"
                    ]
                },
                "after_unknown": {},
                "before_sensitive": false,
                "after_sensitive": {}
            }
        }
    ],
    "configuration": {
        "provider_config": {
            "aws": {
                "name": "aws",
                "full_name": "registry.terraform.io/hashicorp/aws",
                "version_constraint": "~\u003e 5.0",
                "expressions": {
                    "region": {
                        "constant_value": "ap-south-1"
                    }
                }
            }
        },
        "root_module": {
            "resources": [
                {
                    "address": "aws_cloudfront_distribution.bad_cf",
                    "mode": "managed",
                    "type": "aws_cloudfront_distribution",
                    "name": "bad_cf",
                    "provider_config_key": "aws",
                    "expressions": {
                        "default_cache_behavior": [
                            {
                                "allowed_methods": {
                                    "constant_value": [
                                        "GET",
                                        "HEAD"
                                    ]
                                },
                                "cached_methods": {
                                    "constant_value": [
                                        "GET",
                                        "HEAD"
                                    ]
                                },
                                "forwarded_values": [
                                    {
                                        "cookies": [
                                            {
                                                "forward": {
                                                    "constant_value": "none"
                                                }
                                            }
                                        ],
                                        "query_string": {
                                            "constant_value": false
                                        }
                                    }
                                ],
                                "target_origin_id": {
                                    "constant_value": "bad-origin"
                                },
                                "viewer_protocol_policy": {
                                    "constant_value": "redirect-to-https"
                                }
                            }
                        ],
                        "enabled": {
                            "constant_value": true
                        },
                        "origin": [
                            {
                                "custom_origin_config": [
                                    {
                                        "http_port": {
                                            "constant_value": 80
                                        },
                                        "https_port": {
                                            "constant_value": 443
                                        },
                                        "origin_protocol_policy": {
                                            "constant_value": "https-only"
                                        },
                                        "origin_ssl_protocols": {
                                            "constant_value": [
                                                "TLSv1.2"
                                            ]
                                        }
                                    }
                                ],
                                "domain_name": {
                                    "constant_value": "example.com"
                                },
                                "origin_id": {
                                    "constant_value": "bad-origin"
                                }
                            }
                        ],
                        "restrictions": [
                            {
                                "geo_restriction": [
                                    {
                                        "restriction_type": {
                                            "constant_value": "none"
                                        }
                                    }
                                ]
                            }
                        ],
                        "viewer_certificate": [
                            {
                                "cloudfront_default_certificate": {
                                    "constant_value": true
                                },
                                "minimum_protocol_version": {
                                    "constant_value": "TLSv1"
                                }
                            }
                        ]
                    },
                    "schema_version": 1
                },
                {
                    "address": "aws_db_instance.bad_rds",
                    "mode": "managed",
                    "type": "aws_db_instance",
                    "name": "bad_rds",
                    "provider_config_key": "aws",
                    "expressions": {
                        "allocated_storage": {
                            "constant_value": 20
                        },
                        "backup_retention_period": {
                            "constant_value": 7
                        },
                        "engine": {
                            "constant_value": "mysql"
                        },
                        "engine_version": {
                            "constant_value": "8.0"
                        },
                        "identifier": {
                            "constant_value": "bad-gac-rds"
                        },
                        "instance_class": {
                            "constant_value": "db.t3.micro"
                        },
                        "password": {
                            "constant_value": "Badpassword123"
                        },
                        "skip_final_snapshot": {
                            "constant_value": true
                        },
                        "username": {
                            "constant_value": "admin"
                        }
                    },
                    "schema_version": 2
                },
                {
                    "address": "aws_eks_cluster.bad_eks",
                    "mode": "managed",
                    "type": "aws_eks_cluster",
                    "name": "bad_eks",
                    "provider_config_key": "aws",
                    "expressions": {
                        "name": {
                            "constant_value": "bad-eks"
                        },
                        "role_arn": {
                            "constant_value": "arn:aws:iam::123456789012:role/eks-role"
                        },
                        "vpc_config": [
                            {
                                "endpoint_private_access": {
                                    "constant_value": false
                                },
                                "endpoint_public_access": {
                                    "constant_value": true
                                },
                                "public_access_cidrs": {
                                    "constant_value": [
                                        "0.0.0.0/0"
                                    ]
                                },
                                "subnet_ids": {
                                    "constant_value": [
                                        "subnet-12345678"
                                    ]
                                }
                            }
                        ]
                    },
                    "schema_version": 1
                },
                {
                    "address": "aws_iam_account_password_policy.bad_password_policy",
                    "mode": "managed",
                    "type": "aws_iam_account_password_policy",
                    "name": "bad_password_policy",
                    "provider_config_key": "aws",
                    "expressions": {
                        "max_password_age": {
                            "constant_value": 180
                        },
                        "minimum_password_length": {
                            "constant_value": 8
                        },
                        "password_reuse_prevention": {
                            "constant_value": 5
                        },
                        "require_lowercase_characters": {
                            "constant_value": false
                        },
                        "require_numbers": {
                            "constant_value": false
                        },
                        "require_symbols": {
                            "constant_value": false
                        },
                        "require_uppercase_characters": {
                            "constant_value": false
                        }
                    },
                    "schema_version": 0
                },
                {
                    "address": "aws_iam_policy.bad_admin_policy",
                    "mode": "managed",
                    "type": "aws_iam_policy",
                    "name": "bad_admin_policy",
                    "provider_config_key": "aws",
                    "expressions": {
                        "name": {
                            "constant_value": "bad-admin-policy"
                        },
                        "policy": {}
                    },
                    "schema_version": 0
                },
                {
                    "address": "aws_iam_role.bad_role",
                    "mode": "managed",
                    "type": "aws_iam_role",
                    "name": "bad_role",
                    "provider_config_key": "aws",
                    "expressions": {
                        "assume_role_policy": {},
                        "name": {
                            "constant_value": "bad-gac-role"
                        }
                    },
                    "schema_version": 0
                },
                {
                    "address": "aws_s3_bucket.bad_bucket",
                    "mode": "managed",
                    "type": "aws_s3_bucket",
                    "name": "bad_bucket",
                    "provider_config_key": "aws",
                    "expressions": {
                        "bucket": {
                            "constant_value": "bad-gac-bucket"
                        }
                    },
                    "schema_version": 0
                },
                {
                    "address": "aws_s3_bucket_versioning.bad_versioning",
                    "mode": "managed",
                    "type": "aws_s3_bucket_versioning",
                    "name": "bad_versioning",
                    "provider_config_key": "aws",
                    "expressions": {
                        "bucket": {
                            "references": [
                                "aws_s3_bucket.bad_bucket.id",
                                "aws_s3_bucket.bad_bucket"
                            ]
                        },
                        "versioning_configuration": [
                            {
                                "status": {
                                    "constant_value": "Suspended"
                                }
                            }
                        ]
                    },
                    "schema_version": 0
                }
            ]
        }
    },
    "relevant_attributes": [
        {
            "resource": "aws_s3_bucket.bad_bucket",
            "attribute": [
                "id"
            ]
        }
    ],
    "timestamp": "2026-07-27T04:38:34Z",
    "applyable": true,
    "complete": true,
    "errored": false
}