{
    "format_version": "1.2",
    "terraform_version": "1.15.6",
    "planned_values": {
        "root_module": {
            "resources": [
                {
                    "address": "aws_account_alternate_contact.billing",
                    "mode": "managed",
                    "type": "aws_account_alternate_contact",
                    "name": "billing",
                    "provider_name": "registry.terraform.io/hashicorp/aws",
                    "schema_version": 0,
                    "values": {
                        "account_id": null,
                        "alternate_contact_type": "BILLING",
                        "email_address": "billing@example.com",
                        "name": "Billing Team",
                        "phone_number": "+1-555-0200",
                        "timeouts": null,
                        "title": "Billing"
                    },
                    "sensitive_values": {}
                },
                {
                    "address": "aws_account_alternate_contact.operations",
                    "mode": "managed",
                    "type": "aws_account_alternate_contact",
                    "name": "operations",
                    "provider_name": "registry.terraform.io/hashicorp/aws",
                    "schema_version": 0,
                    "values": {
                        "account_id": null,
                        "alternate_contact_type": "OPERATIONS",
                        "email_address": "operations@example.com",
                        "name": "Operations Team",
                        "phone_number": "+1-555-0300",
                        "timeouts": null,
                        "title": "Operations"
                    },
                    "sensitive_values": {}
                },
                {
                    "address": "aws_account_alternate_contact.security",
                    "mode": "managed",
                    "type": "aws_account_alternate_contact",
                    "name": "security",
                    "provider_name": "registry.terraform.io/hashicorp/aws",
                    "schema_version": 0,
                    "values": {
                        "account_id": null,
                        "alternate_contact_type": "SECURITY",
                        "email_address": "security@example.com",
                        "name": "Security Team",
                        "phone_number": "+1-555-0100",
                        "timeouts": null,
                        "title": "Security"
                    },
                    "sensitive_values": {}
                },
                {
                    "address": "aws_organizations_delegated_administrator.access_analyzer",
                    "mode": "managed",
                    "type": "aws_organizations_delegated_administrator",
                    "name": "access_analyzer",
                    "provider_name": "registry.terraform.io/hashicorp/aws",
                    "schema_version": 0,
                    "values": {
                        "account_id": "123456789012",
                        "service_principal": "access-analyzer.amazonaws.com"
                    },
                    "sensitive_values": {}
                },
                {
                    "address": "aws_organizations_delegated_administrator.config",
                    "mode": "managed",
                    "type": "aws_organizations_delegated_administrator",
                    "name": "config",
                    "provider_name": "registry.terraform.io/hashicorp/aws",
                    "schema_version": 0,
                    "values": {
                        "account_id": "123456789012",
                        "service_principal": "config.amazonaws.com"
                    },
                    "sensitive_values": {}
                },
                {
                    "address": "aws_organizations_delegated_administrator.guardduty",
                    "mode": "managed",
                    "type": "aws_organizations_delegated_administrator",
                    "name": "guardduty",
                    "provider_name": "registry.terraform.io/hashicorp/aws",
                    "schema_version": 0,
                    "values": {
                        "account_id": "123456789012",
                        "service_principal": "guardduty.amazonaws.com"
                    },
                    "sensitive_values": {}
                },
                {
                    "address": "aws_organizations_delegated_administrator.securityhub",
                    "mode": "managed",
                    "type": "aws_organizations_delegated_administrator",
                    "name": "securityhub",
                    "provider_name": "registry.terraform.io/hashicorp/aws",
                    "schema_version": 0,
                    "values": {
                        "account_id": "123456789012",
                        "service_principal": "securityhub.amazonaws.com"
                    },
                    "sensitive_values": {}
                },
                {
                    "address": "aws_organizations_organization.good_org",
                    "mode": "managed",
                    "type": "aws_organizations_organization",
                    "name": "good_org",
                    "provider_name": "registry.terraform.io/hashicorp/aws",
                    "schema_version": 0,
                    "values": {
                        "aws_service_access_principals": [
                            "access-analyzer.amazonaws.com",
                            "cloudtrail.amazonaws.com",
                            "config.amazonaws.com",
                            "guardduty.amazonaws.com",
                            "ram.amazonaws.com",
                            "securityhub.amazonaws.com"
                        ],
                        "enabled_policy_types": [
                            "AISERVICES_OPT_OUT_POLICY",
                            "BACKUP_POLICY",
                            "TAG_POLICY"
                        ],
                        "feature_set": "ALL"
                    },
                    "sensitive_values": {
                        "accounts": [],
                        "aws_service_access_principals": [
                            false,
                            false,
                            false,
                            false,
                            false,
                            false
                        ],
                        "enabled_policy_types": [
                            false,
                            false,
                            false
                        ],
                        "non_master_accounts": [],
                        "roots": []
                    }
                },
                {
                    "address": "aws_organizations_organizational_unit.sandbox",
                    "mode": "managed",
                    "type": "aws_organizations_organizational_unit",
                    "name": "sandbox",
                    "provider_name": "registry.terraform.io/hashicorp/aws",
                    "schema_version": 0,
                    "values": {
                        "name": "Sandbox",
                        "tags": null,
                        "tags_all": {
                            "CostCenter": "CC-1234",
                            "Environment": "prod",
                            "Owner": "platform-team"
                        }
                    },
                    "sensitive_values": {
                        "accounts": [],
                        "tags_all": {}
                    }
                },
                {
                    "address": "aws_organizations_organizational_unit.security",
                    "mode": "managed",
                    "type": "aws_organizations_organizational_unit",
                    "name": "security",
                    "provider_name": "registry.terraform.io/hashicorp/aws",
                    "schema_version": 0,
                    "values": {
                        "name": "Security",
                        "tags": null,
                        "tags_all": {
                            "CostCenter": "CC-1234",
                            "Environment": "prod",
                            "Owner": "platform-team"
                        }
                    },
                    "sensitive_values": {
                        "accounts": [],
                        "tags_all": {}
                    }
                },
                {
                    "address": "aws_organizations_organizational_unit.workloads",
                    "mode": "managed",
                    "type": "aws_organizations_organizational_unit",
                    "name": "workloads",
                    "provider_name": "registry.terraform.io/hashicorp/aws",
                    "schema_version": 0,
                    "values": {
                        "name": "Workloads",
                        "tags": null,
                        "tags_all": {
                            "CostCenter": "CC-1234",
                            "Environment": "prod",
                            "Owner": "platform-team"
                        }
                    },
                    "sensitive_values": {
                        "accounts": [],
                        "tags_all": {}
                    }
                },
                {
                    "address": "aws_organizations_policy.good_backup_policy",
                    "mode": "managed",
                    "type": "aws_organizations_policy",
                    "name": "good_backup_policy",
                    "provider_name": "registry.terraform.io/hashicorp/aws",
                    "schema_version": 0,
                    "values": {
                        "content": "{\"plans\":{\"daily_backup\":{\"regions\":{\"@@assign\":[\"ap-south-1\"]},\"rules\":{\"daily_rule\":{\"lifecycle\":{\"delete_after_days\":{\"@@assign\":35}},\"schedule_expression\":{\"@@assign\":\"cron(0 3 * * ? *)\"},\"target_backup_vault_name\":{\"@@assign\":\"Default\"}}},\"selections\":{\"all_resources\":{\"iam_role_arn\":{\"@@assign\":\"arn:aws:iam::$account:role/AWSBackupDefaultServiceRole\"},\"resources\":{\"@@assign\":[\"*\"]}}}}}}",
                        "description": null,
                        "name": "good-backup-policy",
                        "skip_destroy": null,
                        "tags": null,
                        "tags_all": {
                            "CostCenter": "CC-1234",
                            "Environment": "prod",
                            "Owner": "platform-team"
                        },
                        "type": "BACKUP_POLICY"
                    },
                    "sensitive_values": {
                        "tags_all": {}
                    }
                },
                {
                    "address": "aws_organizations_policy.good_tag_policy",
                    "mode": "managed",
                    "type": "aws_organizations_policy",
                    "name": "good_tag_policy",
                    "provider_name": "registry.terraform.io/hashicorp/aws",
                    "schema_version": 0,
                    "values": {
                        "content": "{\"tags\":{\"CostCenter\":{\"tag_value\":{\"@@assign\":[\"*\"]}},\"Environment\":{\"tag_value\":{\"@@assign\":[\"prod\",\"dev\",\"staging\"]}},\"Owner\":{\"tag_value\":{\"@@assign\":[\"*\"]}}}}",
                        "description": null,
                        "name": "good-tag-policy",
                        "skip_destroy": null,
                        "tags": null,
                        "tags_all": {
                            "CostCenter": "CC-1234",
                            "Environment": "prod",
                            "Owner": "platform-team"
                        },
                        "type": "TAG_POLICY"
                    },
                    "sensitive_values": {
                        "tags_all": {}
                    }
                },
                {
                    "address": "aws_organizations_policy_attachment.backup_policy_attachment",
                    "mode": "managed",
                    "type": "aws_organizations_policy_attachment",
                    "name": "backup_policy_attachment",
                    "provider_name": "registry.terraform.io/hashicorp/aws",
                    "schema_version": 0,
                    "values": {
                        "skip_destroy": null
                    },
                    "sensitive_values": {}
                },
                {
                    "address": "aws_organizations_policy_attachment.tag_policy_attachment",
                    "mode": "managed",
                    "type": "aws_organizations_policy_attachment",
                    "name": "tag_policy_attachment",
                    "provider_name": "registry.terraform.io/hashicorp/aws",
                    "schema_version": 0,
                    "values": {
                        "skip_destroy": null
                    },
                    "sensitive_values": {}
                }
            ]
        }
    },
    "resource_changes": [
        {
            "address": "aws_account_alternate_contact.billing",
            "mode": "managed",
            "type": "aws_account_alternate_contact",
            "name": "billing",
            "provider_name": "registry.terraform.io/hashicorp/aws",
            "change": {
                "actions": [
                    "create"
                ],
                "before": null,
                "after": {
                    "account_id": null,
                    "alternate_contact_type": "BILLING",
                    "email_address": "billing@example.com",
                    "name": "Billing Team",
                    "phone_number": "+1-555-0200",
                    "timeouts": null,
                    "title": "Billing"
                },
                "after_unknown": {
                    "id": true
                },
                "before_sensitive": false,
                "after_sensitive": {}
            }
        },
        {
            "address": "aws_account_alternate_contact.operations",
            "mode": "managed",
            "type": "aws_account_alternate_contact",
            "name": "operations",
            "provider_name": "registry.terraform.io/hashicorp/aws",
            "change": {
                "actions": [
                    "create"
                ],
                "before": null,
                "after": {
                    "account_id": null,
                    "alternate_contact_type": "OPERATIONS",
                    "email_address": "operations@example.com",
                    "name": "Operations Team",
                    "phone_number": "+1-555-0300",
                    "timeouts": null,
                    "title": "Operations"
                },
                "after_unknown": {
                    "id": true
                },
                "before_sensitive": false,
                "after_sensitive": {}
            }
        },
        {
            "address": "aws_account_alternate_contact.security",
            "mode": "managed",
            "type": "aws_account_alternate_contact",
            "name": "security",
            "provider_name": "registry.terraform.io/hashicorp/aws",
            "change": {
                "actions": [
                    "create"
                ],
                "before": null,
                "after": {
                    "account_id": null,
                    "alternate_contact_type": "SECURITY",
                    "email_address": "security@example.com",
                    "name": "Security Team",
                    "phone_number": "+1-555-0100",
                    "timeouts": null,
                    "title": "Security"
                },
                "after_unknown": {
                    "id": true
                },
                "before_sensitive": false,
                "after_sensitive": {}
            }
        },
        {
            "address": "aws_organizations_delegated_administrator.access_analyzer",
            "mode": "managed",
            "type": "aws_organizations_delegated_administrator",
            "name": "access_analyzer",
            "provider_name": "registry.terraform.io/hashicorp/aws",
            "change": {
                "actions": [
                    "create"
                ],
                "before": null,
                "after": {
                    "account_id": "123456789012",
                    "service_principal": "access-analyzer.amazonaws.com"
                },
                "after_unknown": {
                    "arn": true,
                    "delegation_enabled_date": true,
                    "email": true,
                    "id": true,
                    "joined_method": true,
                    "joined_timestamp": true,
                    "name": true,
                    "status": true
                },
                "before_sensitive": false,
                "after_sensitive": {}
            }
        },
        {
            "address": "aws_organizations_delegated_administrator.config",
            "mode": "managed",
            "type": "aws_organizations_delegated_administrator",
            "name": "config",
            "provider_name": "registry.terraform.io/hashicorp/aws",
            "change": {
                "actions": [
                    "create"
                ],
                "before": null,
                "after": {
                    "account_id": "123456789012",
                    "service_principal": "config.amazonaws.com"
                },
                "after_unknown": {
                    "arn": true,
                    "delegation_enabled_date": true,
                    "email": true,
                    "id": true,
                    "joined_method": true,
                    "joined_timestamp": true,
                    "name": true,
                    "status": true
                },
                "before_sensitive": false,
                "after_sensitive": {}
            }
        },
        {
            "address": "aws_organizations_delegated_administrator.guardduty",
            "mode": "managed",
            "type": "aws_organizations_delegated_administrator",
            "name": "guardduty",
            "provider_name": "registry.terraform.io/hashicorp/aws",
            "change": {
                "actions": [
                    "create"
                ],
                "before": null,
                "after": {
                    "account_id": "123456789012",
                    "service_principal": "guardduty.amazonaws.com"
                },
                "after_unknown": {
                    "arn": true,
                    "delegation_enabled_date": true,
                    "email": true,
                    "id": true,
                    "joined_method": true,
                    "joined_timestamp": true,
                    "name": true,
                    "status": true
                },
                "before_sensitive": false,
                "after_sensitive": {}
            }
        },
        {
            "address": "aws_organizations_delegated_administrator.securityhub",
            "mode": "managed",
            "type": "aws_organizations_delegated_administrator",
            "name": "securityhub",
            "provider_name": "registry.terraform.io/hashicorp/aws",
            "change": {
                "actions": [
                    "create"
                ],
                "before": null,
                "after": {
                    "account_id": "123456789012",
                    "service_principal": "securityhub.amazonaws.com"
                },
                "after_unknown": {
                    "arn": true,
                    "delegation_enabled_date": true,
                    "email": true,
                    "id": true,
                    "joined_method": true,
                    "joined_timestamp": true,
                    "name": true,
                    "status": true
                },
                "before_sensitive": false,
                "after_sensitive": {}
            }
        },
        {
            "address": "aws_organizations_organization.good_org",
            "mode": "managed",
            "type": "aws_organizations_organization",
            "name": "good_org",
            "provider_name": "registry.terraform.io/hashicorp/aws",
            "change": {
                "actions": [
                    "create"
                ],
                "before": null,
                "after": {
                    "aws_service_access_principals": [
                        "access-analyzer.amazonaws.com",
                        "cloudtrail.amazonaws.com",
                        "config.amazonaws.com",
                        "guardduty.amazonaws.com",
                        "ram.amazonaws.com",
                        "securityhub.amazonaws.com"
                    ],
                    "enabled_policy_types": [
                        "AISERVICES_OPT_OUT_POLICY",
                        "BACKUP_POLICY",
                        "TAG_POLICY"
                    ],
                    "feature_set": "ALL"
                },
                "after_unknown": {
                    "accounts": true,
                    "arn": true,
                    "aws_service_access_principals": [
                        false,
                        false,
                        false,
                        false,
                        false,
                        false
                    ],
                    "enabled_policy_types": [
                        false,
                        false,
                        false
                    ],
                    "id": true,
                    "master_account_arn": true,
                    "master_account_email": true,
                    "master_account_id": true,
                    "master_account_name": true,
                    "non_master_accounts": true,
                    "roots": true
                },
                "before_sensitive": false,
                "after_sensitive": {
                    "accounts": [],
                    "aws_service_access_principals": [
                        false,
                        false,
                        false,
                        false,
                        false,
                        false
                    ],
                    "enabled_policy_types": [
                        false,
                        false,
                        false
                    ],
                    "non_master_accounts": [],
                    "roots": []
                }
            }
        },
        {
            "address": "aws_organizations_organizational_unit.sandbox",
            "mode": "managed",
            "type": "aws_organizations_organizational_unit",
            "name": "sandbox",
            "provider_name": "registry.terraform.io/hashicorp/aws",
            "change": {
                "actions": [
                    "create"
                ],
                "before": null,
                "after": {
                    "name": "Sandbox",
                    "tags": null,
                    "tags_all": {
                        "CostCenter": "CC-1234",
                        "Environment": "prod",
                        "Owner": "platform-team"
                    }
                },
                "after_unknown": {
                    "accounts": true,
                    "arn": true,
                    "id": true,
                    "parent_id": true,
                    "tags_all": {}
                },
                "before_sensitive": false,
                "after_sensitive": {
                    "accounts": [],
                    "tags_all": {}
                }
            }
        },
        {
            "address": "aws_organizations_organizational_unit.security",
            "mode": "managed",
            "type": "aws_organizations_organizational_unit",
            "name": "security",
            "provider_name": "registry.terraform.io/hashicorp/aws",
            "change": {
                "actions": [
                    "create"
                ],
                "before": null,
                "after": {
                    "name": "Security",
                    "tags": null,
                    "tags_all": {
                        "CostCenter": "CC-1234",
                        "Environment": "prod",
                        "Owner": "platform-team"
                    }
                },
                "after_unknown": {
                    "accounts": true,
                    "arn": true,
                    "id": true,
                    "parent_id": true,
                    "tags_all": {}
                },
                "before_sensitive": false,
                "after_sensitive": {
                    "accounts": [],
                    "tags_all": {}
                }
            }
        },
        {
            "address": "aws_organizations_organizational_unit.workloads",
            "mode": "managed",
            "type": "aws_organizations_organizational_unit",
            "name": "workloads",
            "provider_name": "registry.terraform.io/hashicorp/aws",
            "change": {
                "actions": [
                    "create"
                ],
                "before": null,
                "after": {
                    "name": "Workloads",
                    "tags": null,
                    "tags_all": {
                        "CostCenter": "CC-1234",
                        "Environment": "prod",
                        "Owner": "platform-team"
                    }
                },
                "after_unknown": {
                    "accounts": true,
                    "arn": true,
                    "id": true,
                    "parent_id": true,
                    "tags_all": {}
                },
                "before_sensitive": false,
                "after_sensitive": {
                    "accounts": [],
                    "tags_all": {}
                }
            }
        },
        {
            "address": "aws_organizations_policy.good_backup_policy",
            "mode": "managed",
            "type": "aws_organizations_policy",
            "name": "good_backup_policy",
            "provider_name": "registry.terraform.io/hashicorp/aws",
            "change": {
                "actions": [
                    "create"
                ],
                "before": null,
                "after": {
                    "content": "{\"plans\":{\"daily_backup\":{\"regions\":{\"@@assign\":[\"ap-south-1\"]},\"rules\":{\"daily_rule\":{\"lifecycle\":{\"delete_after_days\":{\"@@assign\":35}},\"schedule_expression\":{\"@@assign\":\"cron(0 3 * * ? *)\"},\"target_backup_vault_name\":{\"@@assign\":\"Default\"}}},\"selections\":{\"all_resources\":{\"iam_role_arn\":{\"@@assign\":\"arn:aws:iam::$account:role/AWSBackupDefaultServiceRole\"},\"resources\":{\"@@assign\":[\"*\"]}}}}}}",
                    "description": null,
                    "name": "good-backup-policy",
                    "skip_destroy": null,
                    "tags": null,
                    "tags_all": {
                        "CostCenter": "CC-1234",
                        "Environment": "prod",
                        "Owner": "platform-team"
                    },
                    "type": "BACKUP_POLICY"
                },
                "after_unknown": {
                    "arn": true,
                    "id": true,
                    "tags_all": {}
                },
                "before_sensitive": false,
                "after_sensitive": {
                    "tags_all": {}
                }
            }
        },
        {
            "address": "aws_organizations_policy.good_tag_policy",
            "mode": "managed",
            "type": "aws_organizations_policy",
            "name": "good_tag_policy",
            "provider_name": "registry.terraform.io/hashicorp/aws",
            "change": {
                "actions": [
                    "create"
                ],
                "before": null,
                "after": {
                    "content": "{\"tags\":{\"CostCenter\":{\"tag_value\":{\"@@assign\":[\"*\"]}},\"Environment\":{\"tag_value\":{\"@@assign\":[\"prod\",\"dev\",\"staging\"]}},\"Owner\":{\"tag_value\":{\"@@assign\":[\"*\"]}}}}",
                    "description": null,
                    "name": "good-tag-policy",
                    "skip_destroy": null,
                    "tags": null,
                    "tags_all": {
                        "CostCenter": "CC-1234",
                        "Environment": "prod",
                        "Owner": "platform-team"
                    },
                    "type": "TAG_POLICY"
                },
                "after_unknown": {
                    "arn": true,
                    "id": true,
                    "tags_all": {}
                },
                "before_sensitive": false,
                "after_sensitive": {
                    "tags_all": {}
                }
            }
        },
        {
            "address": "aws_organizations_policy_attachment.backup_policy_attachment",
            "mode": "managed",
            "type": "aws_organizations_policy_attachment",
            "name": "backup_policy_attachment",
            "provider_name": "registry.terraform.io/hashicorp/aws",
            "change": {
                "actions": [
                    "create"
                ],
                "before": null,
                "after": {
                    "skip_destroy": null
                },
                "after_unknown": {
                    "id": true,
                    "policy_id": true,
                    "target_id": true
                },
                "before_sensitive": false,
                "after_sensitive": {}
            }
        },
        {
            "address": "aws_organizations_policy_attachment.tag_policy_attachment",
            "mode": "managed",
            "type": "aws_organizations_policy_attachment",
            "name": "tag_policy_attachment",
            "provider_name": "registry.terraform.io/hashicorp/aws",
            "change": {
                "actions": [
                    "create"
                ],
                "before": null,
                "after": {
                    "skip_destroy": null
                },
                "after_unknown": {
                    "id": true,
                    "policy_id": true,
                    "target_id": true
                },
                "before_sensitive": false,
                "after_sensitive": {}
            }
        }
    ],
    "configuration": {
        "provider_config": {
            "aws": {
                "name": "aws",
                "full_name": "registry.terraform.io/hashicorp/aws",
                "version_constraint": "~\u003e 5.0",
                "expressions": {
                    "default_tags": [
                        {
                            "tags": {
                                "constant_value": {
                                    "CostCenter": "CC-1234",
                                    "Environment": "prod",
                                    "Owner": "platform-team"
                                }
                            }
                        }
                    ],
                    "region": {
                        "constant_value": "ap-south-1"
                    }
                }
            }
        },
        "root_module": {
            "resources": [
                {
                    "address": "aws_account_alternate_contact.billing",
                    "mode": "managed",
                    "type": "aws_account_alternate_contact",
                    "name": "billing",
                    "provider_config_key": "aws",
                    "expressions": {
                        "alternate_contact_type": {
                            "constant_value": "BILLING"
                        },
                        "email_address": {
                            "constant_value": "billing@example.com"
                        },
                        "name": {
                            "constant_value": "Billing Team"
                        },
                        "phone_number": {
                            "constant_value": "+1-555-0200"
                        },
                        "title": {
                            "constant_value": "Billing"
                        }
                    },
                    "schema_version": 0
                },
                {
                    "address": "aws_account_alternate_contact.operations",
                    "mode": "managed",
                    "type": "aws_account_alternate_contact",
                    "name": "operations",
                    "provider_config_key": "aws",
                    "expressions": {
                        "alternate_contact_type": {
                            "constant_value": "OPERATIONS"
                        },
                        "email_address": {
                            "constant_value": "operations@example.com"
                        },
                        "name": {
                            "constant_value": "Operations Team"
                        },
                        "phone_number": {
                            "constant_value": "+1-555-0300"
                        },
                        "title": {
                            "constant_value": "Operations"
                        }
                    },
                    "schema_version": 0
                },
                {
                    "address": "aws_account_alternate_contact.security",
                    "mode": "managed",
                    "type": "aws_account_alternate_contact",
                    "name": "security",
                    "provider_config_key": "aws",
                    "expressions": {
                        "alternate_contact_type": {
                            "constant_value": "SECURITY"
                        },
                        "email_address": {
                            "constant_value": "security@example.com"
                        },
                        "name": {
                            "constant_value": "Security Team"
                        },
                        "phone_number": {
                            "constant_value": "+1-555-0100"
                        },
                        "title": {
                            "constant_value": "Security"
                        }
                    },
                    "schema_version": 0
                },
                {
                    "address": "aws_organizations_delegated_administrator.access_analyzer",
                    "mode": "managed",
                    "type": "aws_organizations_delegated_administrator",
                    "name": "access_analyzer",
                    "provider_config_key": "aws",
                    "expressions": {
                        "account_id": {
                            "constant_value": "123456789012"
                        },
                        "service_principal": {
                            "constant_value": "access-analyzer.amazonaws.com"
                        }
                    },
                    "schema_version": 0
                },
                {
                    "address": "aws_organizations_delegated_administrator.config",
                    "mode": "managed",
                    "type": "aws_organizations_delegated_administrator",
                    "name": "config",
                    "provider_config_key": "aws",
                    "expressions": {
                        "account_id": {
                            "constant_value": "123456789012"
                        },
                        "service_principal": {
                            "constant_value": "config.amazonaws.com"
                        }
                    },
                    "schema_version": 0
                },
                {
                    "address": "aws_organizations_delegated_administrator.guardduty",
                    "mode": "managed",
                    "type": "aws_organizations_delegated_administrator",
                    "name": "guardduty",
                    "provider_config_key": "aws",
                    "expressions": {
                        "account_id": {
                            "constant_value": "123456789012"
                        },
                        "service_principal": {
                            "constant_value": "guardduty.amazonaws.com"
                        }
                    },
                    "schema_version": 0
                },
                {
                    "address": "aws_organizations_delegated_administrator.securityhub",
                    "mode": "managed",
                    "type": "aws_organizations_delegated_administrator",
                    "name": "securityhub",
                    "provider_config_key": "aws",
                    "expressions": {
                        "account_id": {
                            "constant_value": "123456789012"
                        },
                        "service_principal": {
                            "constant_value": "securityhub.amazonaws.com"
                        }
                    },
                    "schema_version": 0
                },
                {
                    "address": "aws_organizations_organization.good_org",
                    "mode": "managed",
                    "type": "aws_organizations_organization",
                    "name": "good_org",
                    "provider_config_key": "aws",
                    "expressions": {
                        "aws_service_access_principals": {
                            "constant_value": [
                                "cloudtrail.amazonaws.com",
                                "config.amazonaws.com",
                                "securityhub.amazonaws.com",
                                "guardduty.amazonaws.com",
                                "access-analyzer.amazonaws.com",
                                "ram.amazonaws.com"
                            ]
                        },
                        "enabled_policy_types": {
                            "constant_value": [
                                "TAG_POLICY",
                                "BACKUP_POLICY",
                                "AISERVICES_OPT_OUT_POLICY"
                            ]
                        },
                        "feature_set": {
                            "constant_value": "ALL"
                        }
                    },
                    "schema_version": 0
                },
                {
                    "address": "aws_organizations_organizational_unit.sandbox",
                    "mode": "managed",
                    "type": "aws_organizations_organizational_unit",
                    "name": "sandbox",
                    "provider_config_key": "aws",
                    "expressions": {
                        "name": {
                            "constant_value": "Sandbox"
                        },
                        "parent_id": {
                            "references": [
                                "aws_organizations_organization.good_org.roots[0].id",
                                "aws_organizations_organization.good_org.roots[0]",
                                "aws_organizations_organization.good_org.roots",
                                "aws_organizations_organization.good_org"
                            ]
                        }
                    },
                    "schema_version": 0
                },
                {
                    "address": "aws_organizations_organizational_unit.security",
                    "mode": "managed",
                    "type": "aws_organizations_organizational_unit",
                    "name": "security",
                    "provider_config_key": "aws",
                    "expressions": {
                        "name": {
                            "constant_value": "Security"
                        },
                        "parent_id": {
                            "references": [
                                "aws_organizations_organization.good_org.roots[0].id",
                                "aws_organizations_organization.good_org.roots[0]",
                                "aws_organizations_organization.good_org.roots",
                                "aws_organizations_organization.good_org"
                            ]
                        }
                    },
                    "schema_version": 0
                },
                {
                    "address": "aws_organizations_organizational_unit.workloads",
                    "mode": "managed",
                    "type": "aws_organizations_organizational_unit",
                    "name": "workloads",
                    "provider_config_key": "aws",
                    "expressions": {
                        "name": {
                            "constant_value": "Workloads"
                        },
                        "parent_id": {
                            "references": [
                                "aws_organizations_organization.good_org.roots[0].id",
                                "aws_organizations_organization.good_org.roots[0]",
                                "aws_organizations_organization.good_org.roots",
                                "aws_organizations_organization.good_org"
                            ]
                        }
                    },
                    "schema_version": 0
                },
                {
                    "address": "aws_organizations_policy.good_backup_policy",
                    "mode": "managed",
                    "type": "aws_organizations_policy",
                    "name": "good_backup_policy",
                    "provider_config_key": "aws",
                    "expressions": {
                        "content": {},
                        "name": {
                            "constant_value": "good-backup-policy"
                        },
                        "type": {
                            "constant_value": "BACKUP_POLICY"
                        }
                    },
                    "schema_version": 0
                },
                {
                    "address": "aws_organizations_policy.good_tag_policy",
                    "mode": "managed",
                    "type": "aws_organizations_policy",
                    "name": "good_tag_policy",
                    "provider_config_key": "aws",
                    "expressions": {
                        "content": {},
                        "name": {
                            "constant_value": "good-tag-policy"
                        },
                        "type": {
                            "constant_value": "TAG_POLICY"
                        }
                    },
                    "schema_version": 0
                },
                {
                    "address": "aws_organizations_policy_attachment.backup_policy_attachment",
                    "mode": "managed",
                    "type": "aws_organizations_policy_attachment",
                    "name": "backup_policy_attachment",
                    "provider_config_key": "aws",
                    "expressions": {
                        "policy_id": {
                            "references": [
                                "aws_organizations_policy.good_backup_policy.id",
                                "aws_organizations_policy.good_backup_policy"
                            ]
                        },
                        "target_id": {
                            "references": [
                                "aws_organizations_organization.good_org.roots[0].id",
                                "aws_organizations_organization.good_org.roots[0]",
                                "aws_organizations_organization.good_org.roots",
                                "aws_organizations_organization.good_org"
                            ]
                        }
                    },
                    "schema_version": 0
                },
                {
                    "address": "aws_organizations_policy_attachment.tag_policy_attachment",
                    "mode": "managed",
                    "type": "aws_organizations_policy_attachment",
                    "name": "tag_policy_attachment",
                    "provider_config_key": "aws",
                    "expressions": {
                        "policy_id": {
                            "references": [
                                "aws_organizations_policy.good_tag_policy.id",
                                "aws_organizations_policy.good_tag_policy"
                            ]
                        },
                        "target_id": {
                            "references": [
                                "aws_organizations_organization.good_org.roots[0].id",
                                "aws_organizations_organization.good_org.roots[0]",
                                "aws_organizations_organization.good_org.roots",
                                "aws_organizations_organization.good_org"
                            ]
                        }
                    },
                    "schema_version": 0
                }
            ]
        }
    },
    "relevant_attributes": [
        {
            "resource": "aws_organizations_organization.good_org",
            "attribute": [
                "roots",
                0,
                "id"
            ]
        },
        {
            "resource": "aws_organizations_policy.good_backup_policy",
            "attribute": [
                "id"
            ]
        },
        {
            "resource": "aws_organizations_policy.good_tag_policy",
            "attribute": [
                "id"
            ]
        }
    ],
    "timestamp": "2026-07-20T00:58:12Z",
    "applyable": true,
    "complete": true,
    "errored": false
}