{
    "format_version": "1.2",
    "terraform_version": "1.15.6",
    "planned_values": {
        "root_module": {
            "resources": [
                {
                    "address": "aws_iam_access_key.bad_key",
                    "mode": "managed",
                    "type": "aws_iam_access_key",
                    "name": "bad_key",
                    "provider_name": "registry.terraform.io/hashicorp/aws",
                    "schema_version": 0,
                    "values": {
                        "pgp_key": null,
                        "status": "Active",
                        "user": "bad-user"
                    },
                    "sensitive_values": {
                        "secret": true,
                        "ses_smtp_password_v4": true
                    }
                },
                {
                    "address": "aws_iam_policy.bad_policy",
                    "mode": "managed",
                    "type": "aws_iam_policy",
                    "name": "bad_policy",
                    "provider_name": "registry.terraform.io/hashicorp/aws",
                    "schema_version": 0,
                    "values": {
                        "description": null,
                        "name": "bad-managed-policy",
                        "path": "/",
                        "policy": "{\"Statement\":[{\"Action\":[\"s3:GetObject\"],\"Effect\":\"Allow\",\"Resource\":\"*\"}],\"Version\":\"2012-10-17\"}",
                        "tags": null
                    },
                    "sensitive_values": {
                        "tags_all": {}
                    }
                },
                {
                    "address": "aws_iam_role.app_role",
                    "mode": "managed",
                    "type": "aws_iam_role",
                    "name": "app_role",
                    "provider_name": "registry.terraform.io/hashicorp/aws",
                    "schema_version": 0,
                    "values": {
                        "assume_role_policy": "{\"Statement\":[{\"Action\":\"sts:AssumeRole\",\"Effect\":\"Allow\",\"Principal\":{\"Service\":\"ec2.amazonaws.com\"}}],\"Version\":\"2012-10-17\"}",
                        "description": null,
                        "force_detach_policies": false,
                        "max_session_duration": 3600,
                        "name": "app-role",
                        "path": "/",
                        "permissions_boundary": null,
                        "tags": null
                    },
                    "sensitive_values": {
                        "inline_policy": [],
                        "managed_policy_arns": [],
                        "tags_all": {}
                    }
                },
                {
                    "address": "aws_iam_role.bad_cross_account",
                    "mode": "managed",
                    "type": "aws_iam_role",
                    "name": "bad_cross_account",
                    "provider_name": "registry.terraform.io/hashicorp/aws",
                    "schema_version": 0,
                    "values": {
                        "assume_role_policy": "{\"Statement\":[{\"Action\":\"sts:AssumeRole\",\"Effect\":\"Allow\",\"Principal\":\"*\"}],\"Version\":\"2012-10-17\"}",
                        "description": null,
                        "force_detach_policies": false,
                        "max_session_duration": 3600,
                        "name": "bad-cross-account-role",
                        "path": "/",
                        "permissions_boundary": null,
                        "tags": null
                    },
                    "sensitive_values": {
                        "inline_policy": [],
                        "managed_policy_arns": [],
                        "tags_all": {}
                    }
                },
                {
                    "address": "aws_iam_role_policy.bad_kms",
                    "mode": "managed",
                    "type": "aws_iam_role_policy",
                    "name": "bad_kms",
                    "provider_name": "registry.terraform.io/hashicorp/aws",
                    "schema_version": 0,
                    "values": {
                        "name": "bad-kms-policy",
                        "policy": "{\"Version\":\"2012-10-17\",\"Statement\":[{\"Action\":[\"kms:Decrypt\"],\"Effect\":\"Allow\",\"Resource\":\"*\"}]}",
                        "role": "app-role"
                    },
                    "sensitive_values": {}
                },
                {
                    "address": "aws_iam_user.bad_user",
                    "mode": "managed",
                    "type": "aws_iam_user",
                    "name": "bad_user",
                    "provider_name": "registry.terraform.io/hashicorp/aws",
                    "schema_version": 0,
                    "values": {
                        "force_destroy": false,
                        "name": "bad-user",
                        "path": "/",
                        "permissions_boundary": null,
                        "tags": null
                    },
                    "sensitive_values": {
                        "tags_all": {}
                    }
                },
                {
                    "address": "aws_iam_user_policy.bad_inline",
                    "mode": "managed",
                    "type": "aws_iam_user_policy",
                    "name": "bad_inline",
                    "provider_name": "registry.terraform.io/hashicorp/aws",
                    "schema_version": 0,
                    "values": {
                        "name": "bad-inline-policy",
                        "policy": "{\"Version\":\"2012-10-17\",\"Statement\":[{\"Action\":[\"s3:GetObject\"],\"Effect\":\"Allow\",\"Resource\":\"*\"}]}",
                        "user": "bad-user"
                    },
                    "sensitive_values": {}
                },
                {
                    "address": "aws_iam_user_policy_attachment.bad_attachment",
                    "mode": "managed",
                    "type": "aws_iam_user_policy_attachment",
                    "name": "bad_attachment",
                    "provider_name": "registry.terraform.io/hashicorp/aws",
                    "schema_version": 0,
                    "values": {
                        "user": "bad-user"
                    },
                    "sensitive_values": {}
                }
            ]
        }
    },
    "resource_changes": [
        {
            "address": "aws_iam_access_key.bad_key",
            "mode": "managed",
            "type": "aws_iam_access_key",
            "name": "bad_key",
            "provider_name": "registry.terraform.io/hashicorp/aws",
            "change": {
                "actions": [
                    "create"
                ],
                "before": null,
                "after": {
                    "pgp_key": null,
                    "status": "Active",
                    "user": "bad-user"
                },
                "after_unknown": {
                    "create_date": true,
                    "encrypted_secret": true,
                    "encrypted_ses_smtp_password_v4": true,
                    "id": true,
                    "key_fingerprint": true,
                    "secret": true,
                    "ses_smtp_password_v4": true
                },
                "before_sensitive": false,
                "after_sensitive": {
                    "secret": true,
                    "ses_smtp_password_v4": true
                }
            }
        },
        {
            "address": "aws_iam_policy.bad_policy",
            "mode": "managed",
            "type": "aws_iam_policy",
            "name": "bad_policy",
            "provider_name": "registry.terraform.io/hashicorp/aws",
            "change": {
                "actions": [
                    "create"
                ],
                "before": null,
                "after": {
                    "description": null,
                    "name": "bad-managed-policy",
                    "path": "/",
                    "policy": "{\"Statement\":[{\"Action\":[\"s3:GetObject\"],\"Effect\":\"Allow\",\"Resource\":\"*\"}],\"Version\":\"2012-10-17\"}",
                    "tags": null
                },
                "after_unknown": {
                    "arn": true,
                    "attachment_count": true,
                    "id": true,
                    "name_prefix": true,
                    "policy_id": true,
                    "tags_all": true
                },
                "before_sensitive": false,
                "after_sensitive": {
                    "tags_all": {}
                }
            }
        },
        {
            "address": "aws_iam_role.app_role",
            "mode": "managed",
            "type": "aws_iam_role",
            "name": "app_role",
            "provider_name": "registry.terraform.io/hashicorp/aws",
            "change": {
                "actions": [
                    "create"
                ],
                "before": null,
                "after": {
                    "assume_role_policy": "{\"Statement\":[{\"Action\":\"sts:AssumeRole\",\"Effect\":\"Allow\",\"Principal\":{\"Service\":\"ec2.amazonaws.com\"}}],\"Version\":\"2012-10-17\"}",
                    "description": null,
                    "force_detach_policies": false,
                    "max_session_duration": 3600,
                    "name": "app-role",
                    "path": "/",
                    "permissions_boundary": null,
                    "tags": null
                },
                "after_unknown": {
                    "arn": true,
                    "create_date": true,
                    "id": true,
                    "inline_policy": true,
                    "managed_policy_arns": true,
                    "name_prefix": true,
                    "tags_all": true,
                    "unique_id": true
                },
                "before_sensitive": false,
                "after_sensitive": {
                    "inline_policy": [],
                    "managed_policy_arns": [],
                    "tags_all": {}
                }
            }
        },
        {
            "address": "aws_iam_role.bad_cross_account",
            "mode": "managed",
            "type": "aws_iam_role",
            "name": "bad_cross_account",
            "provider_name": "registry.terraform.io/hashicorp/aws",
            "change": {
                "actions": [
                    "create"
                ],
                "before": null,
                "after": {
                    "assume_role_policy": "{\"Statement\":[{\"Action\":\"sts:AssumeRole\",\"Effect\":\"Allow\",\"Principal\":\"*\"}],\"Version\":\"2012-10-17\"}",
                    "description": null,
                    "force_detach_policies": false,
                    "max_session_duration": 3600,
                    "name": "bad-cross-account-role",
                    "path": "/",
                    "permissions_boundary": null,
                    "tags": null
                },
                "after_unknown": {
                    "arn": true,
                    "create_date": true,
                    "id": true,
                    "inline_policy": true,
                    "managed_policy_arns": true,
                    "name_prefix": true,
                    "tags_all": true,
                    "unique_id": true
                },
                "before_sensitive": false,
                "after_sensitive": {
                    "inline_policy": [],
                    "managed_policy_arns": [],
                    "tags_all": {}
                }
            }
        },
        {
            "address": "aws_iam_role_policy.bad_kms",
            "mode": "managed",
            "type": "aws_iam_role_policy",
            "name": "bad_kms",
            "provider_name": "registry.terraform.io/hashicorp/aws",
            "change": {
                "actions": [
                    "create"
                ],
                "before": null,
                "after": {
                    "name": "bad-kms-policy",
                    "policy": "{\"Version\":\"2012-10-17\",\"Statement\":[{\"Action\":[\"kms:Decrypt\"],\"Effect\":\"Allow\",\"Resource\":\"*\"}]}",
                    "role": "app-role"
                },
                "after_unknown": {
                    "id": true,
                    "name_prefix": true
                },
                "before_sensitive": false,
                "after_sensitive": {}
            }
        },
        {
            "address": "aws_iam_user.bad_user",
            "mode": "managed",
            "type": "aws_iam_user",
            "name": "bad_user",
            "provider_name": "registry.terraform.io/hashicorp/aws",
            "change": {
                "actions": [
                    "create"
                ],
                "before": null,
                "after": {
                    "force_destroy": false,
                    "name": "bad-user",
                    "path": "/",
                    "permissions_boundary": null,
                    "tags": null
                },
                "after_unknown": {
                    "arn": true,
                    "id": true,
                    "tags_all": true,
                    "unique_id": true
                },
                "before_sensitive": false,
                "after_sensitive": {
                    "tags_all": {}
                }
            }
        },
        {
            "address": "aws_iam_user_policy.bad_inline",
            "mode": "managed",
            "type": "aws_iam_user_policy",
            "name": "bad_inline",
            "provider_name": "registry.terraform.io/hashicorp/aws",
            "change": {
                "actions": [
                    "create"
                ],
                "before": null,
                "after": {
                    "name": "bad-inline-policy",
                    "policy": "{\"Version\":\"2012-10-17\",\"Statement\":[{\"Action\":[\"s3:GetObject\"],\"Effect\":\"Allow\",\"Resource\":\"*\"}]}",
                    "user": "bad-user"
                },
                "after_unknown": {
                    "id": true,
                    "name_prefix": true
                },
                "before_sensitive": false,
                "after_sensitive": {}
            }
        },
        {
            "address": "aws_iam_user_policy_attachment.bad_attachment",
            "mode": "managed",
            "type": "aws_iam_user_policy_attachment",
            "name": "bad_attachment",
            "provider_name": "registry.terraform.io/hashicorp/aws",
            "change": {
                "actions": [
                    "create"
                ],
                "before": null,
                "after": {
                    "user": "bad-user"
                },
                "after_unknown": {
                    "id": true,
                    "policy_arn": true
                },
                "before_sensitive": false,
                "after_sensitive": {}
            }
        }
    ],
    "configuration": {
        "provider_config": {
            "aws": {
                "name": "aws",
                "full_name": "registry.terraform.io/hashicorp/aws",
                "version_constraint": "~\u003e 5.0",
                "expressions": {
                    "access_key": {
                        "constant_value": "AKIAIOSFODNN7EXAMPLE"
                    },
                    "region": {
                        "constant_value": "ap-south-1"
                    },
                    "secret_key": {
                        "constant_value": "wJalrXUtnFEMI/K7MDENG/bPxRfiCYEXAMPLEKEY"
                    }
                }
            }
        },
        "root_module": {
            "resources": [
                {
                    "address": "aws_iam_access_key.bad_key",
                    "mode": "managed",
                    "type": "aws_iam_access_key",
                    "name": "bad_key",
                    "provider_config_key": "aws",
                    "expressions": {
                        "user": {
                            "references": [
                                "aws_iam_user.bad_user.name",
                                "aws_iam_user.bad_user"
                            ]
                        }
                    },
                    "schema_version": 0
                },
                {
                    "address": "aws_iam_policy.bad_policy",
                    "mode": "managed",
                    "type": "aws_iam_policy",
                    "name": "bad_policy",
                    "provider_config_key": "aws",
                    "expressions": {
                        "name": {
                            "constant_value": "bad-managed-policy"
                        },
                        "policy": {}
                    },
                    "schema_version": 0
                },
                {
                    "address": "aws_iam_role.app_role",
                    "mode": "managed",
                    "type": "aws_iam_role",
                    "name": "app_role",
                    "provider_config_key": "aws",
                    "expressions": {
                        "assume_role_policy": {},
                        "name": {
                            "constant_value": "app-role"
                        }
                    },
                    "schema_version": 0
                },
                {
                    "address": "aws_iam_role.bad_cross_account",
                    "mode": "managed",
                    "type": "aws_iam_role",
                    "name": "bad_cross_account",
                    "provider_config_key": "aws",
                    "expressions": {
                        "assume_role_policy": {},
                        "name": {
                            "constant_value": "bad-cross-account-role"
                        }
                    },
                    "schema_version": 0
                },
                {
                    "address": "aws_iam_role_policy.bad_kms",
                    "mode": "managed",
                    "type": "aws_iam_role_policy",
                    "name": "bad_kms",
                    "provider_config_key": "aws",
                    "expressions": {
                        "name": {
                            "constant_value": "bad-kms-policy"
                        },
                        "policy": {},
                        "role": {
                            "references": [
                                "aws_iam_role.app_role.name",
                                "aws_iam_role.app_role"
                            ]
                        }
                    },
                    "schema_version": 0
                },
                {
                    "address": "aws_iam_user.bad_user",
                    "mode": "managed",
                    "type": "aws_iam_user",
                    "name": "bad_user",
                    "provider_config_key": "aws",
                    "expressions": {
                        "name": {
                            "constant_value": "bad-user"
                        }
                    },
                    "schema_version": 0
                },
                {
                    "address": "aws_iam_user_policy.bad_inline",
                    "mode": "managed",
                    "type": "aws_iam_user_policy",
                    "name": "bad_inline",
                    "provider_config_key": "aws",
                    "expressions": {
                        "name": {
                            "constant_value": "bad-inline-policy"
                        },
                        "policy": {},
                        "user": {
                            "references": [
                                "aws_iam_user.bad_user.name",
                                "aws_iam_user.bad_user"
                            ]
                        }
                    },
                    "schema_version": 0
                },
                {
                    "address": "aws_iam_user_policy_attachment.bad_attachment",
                    "mode": "managed",
                    "type": "aws_iam_user_policy_attachment",
                    "name": "bad_attachment",
                    "provider_config_key": "aws",
                    "expressions": {
                        "policy_arn": {
                            "references": [
                                "aws_iam_policy.bad_policy.arn",
                                "aws_iam_policy.bad_policy"
                            ]
                        },
                        "user": {
                            "references": [
                                "aws_iam_user.bad_user.name",
                                "aws_iam_user.bad_user"
                            ]
                        }
                    },
                    "schema_version": 0
                }
            ]
        }
    },
    "relevant_attributes": [
        {
            "resource": "aws_iam_policy.bad_policy",
            "attribute": [
                "arn"
            ]
        },
        {
            "resource": "aws_iam_role.app_role",
            "attribute": [
                "name"
            ]
        },
        {
            "resource": "aws_iam_user.bad_user",
            "attribute": [
                "name"
            ]
        }
    ],
    "timestamp": "2026-07-16T08:41:51Z",
    "applyable": true,
    "complete": true,
    "errored": false
}