controls-aws-lom-passing.tfplan.json
   1
   2
   3
   4
   5
   6
   7
   8
   9
  10
  11
  12
  13
  14
  15
  16
  17
  18
  19
  20
  21
  22
  23
  24
  25
  26
  27
  28
  29
  30
  31
  32
  33
  34
  35
  36
  37
  38
  39
  40
  41
  42
  43
  44
  45
  46
  47
  48
  49
  50
  51
  52
  53
  54
  55
  56
  57
  58
  59
  60
  61
  62
  63
  64
  65
  66
  67
  68
  69
  70
  71
  72
  73
  74
  75
  76
  77
  78
  79
  80
  81
  82
  83
  84
  85
  86
  87
  88
  89
  90
  91
  92
  93
  94
  95
  96
  97
  98
  99
 100
 101
 102
 103
 104
 105
 106
 107
 108
 109
 110
 111
 112
 113
 114
 115
 116
 117
 118
 119
 120
 121
 122
 123
 124
 125
 126
 127
 128
 129
 130
 131
 132
 133
 134
 135
 136
 137
 138
 139
 140
 141
 142
 143
 144
 145
 146
 147
 148
 149
 150
 151
 152
 153
 154
 155
 156
 157
 158
 159
 160
 161
 162
 163
 164
 165
 166
 167
 168
 169
 170
 171
 172
 173
 174
 175
 176
 177
 178
 179
 180
 181
 182
 183
 184
 185
 186
 187
 188
 189
 190
 191
 192
 193
 194
 195
 196
 197
 198
 199
 200
 201
 202
 203
 204
 205
 206
 207
 208
 209
 210
 211
 212
 213
 214
 215
 216
 217
 218
 219
 220
 221
 222
 223
 224
 225
 226
 227
 228
 229
 230
 231
 232
 233
 234
 235
 236
 237
 238
 239
 240
 241
 242
 243
 244
 245
 246
 247
 248
 249
 250
 251
 252
 253
 254
 255
 256
 257
 258
 259
 260
 261
 262
 263
 264
 265
 266
 267
 268
 269
 270
 271
 272
 273
 274
 275
 276
 277
 278
 279
 280
 281
 282
 283
 284
 285
 286
 287
 288
 289
 290
 291
 292
 293
 294
 295
 296
 297
 298
 299
 300
 301
 302
 303
 304
 305
 306
 307
 308
 309
 310
 311
 312
 313
 314
 315
 316
 317
 318
 319
 320
 321
 322
 323
 324
 325
 326
 327
 328
 329
 330
 331
 332
 333
 334
 335
 336
 337
 338
 339
 340
 341
 342
 343
 344
 345
 346
 347
 348
 349
 350
 351
 352
 353
 354
 355
 356
 357
 358
 359
 360
 361
 362
 363
 364
 365
 366
 367
 368
 369
 370
 371
 372
 373
 374
 375
 376
 377
 378
 379
 380
 381
 382
 383
 384
 385
 386
 387
 388
 389
 390
 391
 392
 393
 394
 395
 396
 397
 398
 399
 400
 401
 402
 403
 404
 405
 406
 407
 408
 409
 410
 411
 412
 413
 414
 415
 416
 417
 418
 419
 420
 421
 422
 423
 424
 425
 426
 427
 428
 429
 430
 431
 432
 433
 434
 435
 436
 437
 438
 439
 440
 441
 442
 443
 444
 445
 446
 447
 448
 449
 450
 451
 452
 453
 454
 455
 456
 457
 458
 459
 460
 461
 462
 463
 464
 465
 466
 467
 468
 469
 470
 471
 472
 473
 474
 475
 476
 477
 478
 479
 480
 481
 482
 483
 484
 485
 486
 487
 488
 489
 490
 491
 492
 493
 494
 495
 496
 497
 498
 499
 500
 501
 502
 503
 504
 505
 506
 507
 508
 509
 510
 511
 512
 513
 514
 515
 516
 517
 518
 519
 520
 521
 522
 523
 524
 525
 526
 527
 528
 529
 530
 531
 532
 533
 534
 535
 536
 537
 538
 539
 540
 541
 542
 543
 544
 545
 546
 547
 548
 549
 550
 551
 552
 553
 554
 555
 556
 557
 558
 559
 560
 561
 562
 563
 564
 565
 566
 567
 568
 569
 570
 571
 572
 573
 574
 575
 576
 577
 578
 579
 580
 581
 582
 583
 584
 585
 586
 587
 588
 589
 590
 591
 592
 593
 594
 595
 596
 597
 598
 599
 600
 601
 602
 603
 604
 605
 606
 607
 608
 609
 610
 611
 612
 613
 614
 615
 616
 617
 618
 619
 620
 621
 622
 623
 624
 625
 626
 627
 628
 629
 630
 631
 632
 633
 634
 635
 636
 637
 638
 639
 640
 641
 642
 643
 644
 645
 646
 647
 648
 649
 650
 651
 652
 653
 654
 655
 656
 657
 658
 659
 660
 661
 662
 663
 664
 665
 666
 667
 668
 669
 670
 671
 672
 673
 674
 675
 676
 677
 678
 679
 680
 681
 682
 683
 684
 685
 686
 687
 688
 689
 690
 691
 692
 693
 694
 695
 696
 697
 698
 699
 700
 701
 702
 703
 704
 705
 706
 707
 708
 709
 710
 711
 712
 713
 714
 715
 716
 717
 718
 719
 720
 721
 722
 723
 724
 725
 726
 727
 728
 729
 730
 731
 732
 733
 734
 735
 736
 737
 738
 739
 740
 741
 742
 743
 744
 745
 746
 747
 748
 749
 750
 751
 752
 753
 754
 755
 756
 757
 758
 759
 760
 761
 762
 763
 764
 765
 766
 767
 768
 769
 770
 771
 772
 773
 774
 775
 776
 777
 778
 779
 780
 781
 782
 783
 784
 785
 786
 787
 788
 789
 790
 791
 792
 793
 794
 795
 796
 797
 798
 799
 800
 801
 802
 803
 804
 805
 806
 807
 808
 809
 810
 811
 812
 813
 814
 815
 816
 817
 818
 819
 820
 821
 822
 823
 824
 825
 826
 827
 828
 829
 830
 831
 832
 833
 834
 835
 836
 837
 838
 839
 840
 841
 842
 843
 844
 845
 846
 847
 848
 849
 850
 851
 852
 853
 854
 855
 856
 857
 858
 859
 860
 861
 862
 863
 864
 865
 866
 867
 868
 869
 870
 871
 872
 873
 874
 875
 876
 877
 878
 879
 880
 881
 882
 883
 884
 885
 886
 887
 888
 889
 890
 891
 892
 893
 894
 895
 896
 897
 898
 899
 900
 901
 902
 903
 904
 905
 906
 907
 908
 909
 910
 911
 912
 913
 914
 915
 916
 917
 918
 919
 920
 921
 922
 923
 924
 925
 926
 927
 928
 929
 930
 931
 932
 933
 934
 935
 936
 937
 938
 939
 940
 941
 942
 943
 944
 945
 946
 947
 948
 949
 950
 951
 952
 953
 954
 955
 956
 957
 958
 959
 960
 961
 962
 963
 964
 965
 966
 967
 968
 969
 970
 971
 972
 973
 974
 975
 976
 977
 978
 979
 980
 981
 982
 983
 984
 985
 986
 987
 988
 989
 990
 991
 992
 993
 994
 995
 996
 997
 998
 999
1000
1001
1002
1003
1004
1005
1006
1007
1008
1009
1010
1011
1012
1013
1014
1015
1016
1017
1018
1019
1020
1021
1022
1023
{
    "format_version": "1.2",
    "terraform_version": "1.15.6",
    "planned_values": {
        "root_module": {
            "resources": [
                {
                    "address": "aws_cloudtrail.good_trail",
                    "mode": "managed",
                    "type": "aws_cloudtrail",
                    "name": "good_trail",
                    "provider_name": "registry.terraform.io/hashicorp/aws",
                    "schema_version": 1,
                    "values": {
                        "advanced_event_selector": [],
                        "cloud_watch_logs_group_arn": null,
                        "cloud_watch_logs_role_arn": null,
                        "enable_log_file_validation": true,
                        "enable_logging": true,
                        "event_selector": [
                            {
                                "data_resource": [],
                                "exclude_management_event_sources": null,
                                "include_management_events": true,
                                "read_write_type": "All"
                            }
                        ],
                        "include_global_service_events": true,
                        "insight_selector": [],
                        "is_multi_region_trail": true,
                        "is_organization_trail": false,
                        "kms_key_id": "arn:aws:kms:ap-south-1:123456789012:key/mrk-1234abcd",
                        "name": "good-trail",
                        "s3_bucket_name": "good-trail-bucket",
                        "s3_key_prefix": null,
                        "sns_topic_name": null,
                        "tags": null
                    },
                    "sensitive_values": {
                        "advanced_event_selector": [],
                        "event_selector": [
                            {
                                "data_resource": []
                            }
                        ],
                        "insight_selector": [],
                        "tags_all": {}
                    }
                },
                {
                    "address": "aws_cloudwatch_log_group.good_log_group",
                    "mode": "managed",
                    "type": "aws_cloudwatch_log_group",
                    "name": "good_log_group",
                    "provider_name": "registry.terraform.io/hashicorp/aws",
                    "schema_version": 0,
                    "values": {
                        "kms_key_id": "arn:aws:kms:ap-south-1:123456789012:key/mrk-1234abcd",
                        "name": "good-log-group",
                        "retention_in_days": 365,
                        "skip_destroy": false,
                        "tags": null
                    },
                    "sensitive_values": {
                        "tags_all": {}
                    }
                },
                {
                    "address": "aws_config_configuration_recorder.good_recorder",
                    "mode": "managed",
                    "type": "aws_config_configuration_recorder",
                    "name": "good_recorder",
                    "provider_name": "registry.terraform.io/hashicorp/aws",
                    "schema_version": 0,
                    "values": {
                        "name": "good-recorder",
                        "recording_group": [
                            {
                                "all_supported": true,
                                "include_global_resource_types": true,
                                "resource_types": null
                            }
                        ],
                        "role_arn": "arn:aws:iam::123456789012:role/config-role"
                    },
                    "sensitive_values": {
                        "recording_group": [
                            {
                                "exclusion_by_resource_types": [],
                                "recording_strategy": []
                            }
                        ],
                        "recording_mode": []
                    }
                },
                {
                    "address": "aws_config_delivery_channel.good_channel",
                    "mode": "managed",
                    "type": "aws_config_delivery_channel",
                    "name": "good_channel",
                    "provider_name": "registry.terraform.io/hashicorp/aws",
                    "schema_version": 0,
                    "values": {
                        "name": "good-channel",
                        "s3_bucket_name": "good-config-bucket",
                        "s3_key_prefix": null,
                        "s3_kms_key_arn": null,
                        "snapshot_delivery_properties": [],
                        "sns_topic_arn": null
                    },
                    "sensitive_values": {
                        "snapshot_delivery_properties": []
                    }
                },
                {
                    "address": "aws_db_instance.good_rds",
                    "mode": "managed",
                    "type": "aws_db_instance",
                    "name": "good_rds",
                    "provider_name": "registry.terraform.io/hashicorp/aws",
                    "schema_version": 2,
                    "values": {
                        "allocated_storage": 20,
                        "allow_major_version_upgrade": null,
                        "apply_immediately": false,
                        "auto_minor_version_upgrade": true,
                        "blue_green_update": [],
                        "copy_tags_to_snapshot": false,
                        "custom_iam_instance_profile": null,
                        "customer_owned_ip_enabled": null,
                        "dedicated_log_volume": false,
                        "delete_automated_backups": true,
                        "deletion_protection": null,
                        "domain": null,
                        "domain_auth_secret_arn": null,
                        "domain_dns_ips": null,
                        "domain_iam_role_name": null,
                        "domain_ou": null,
                        "enabled_cloudwatch_logs_exports": [
                            "audit",
                            "error",
                            "general",
                            "slowquery"
                        ],
                        "engine": "mysql",
                        "engine_version": "8.0",
                        "final_snapshot_identifier": null,
                        "iam_database_authentication_enabled": null,
                        "identifier": "good-rds",
                        "instance_class": "db.t3.micro",
                        "manage_master_user_password": null,
                        "max_allocated_storage": null,
                        "monitoring_interval": 0,
                        "password": "Goodpassword123",
                        "password_wo": null,
                        "password_wo_version": null,
                        "performance_insights_enabled": false,
                        "publicly_accessible": false,
                        "replicate_source_db": null,
                        "restore_to_point_in_time": [],
                        "s3_import": [],
                        "skip_final_snapshot": true,
                        "storage_encrypted": null,
                        "tags": null,
                        "timeouts": null,
                        "upgrade_storage_config": null,
                        "username": "admin"
                    },
                    "sensitive_values": {
                        "blue_green_update": [],
                        "enabled_cloudwatch_logs_exports": [
                            false,
                            false,
                            false,
                            false
                        ],
                        "listener_endpoint": [],
                        "master_user_secret": [],
                        "password": true,
                        "password_wo": true,
                        "replicas": [],
                        "restore_to_point_in_time": [],
                        "s3_import": [],
                        "tags_all": {},
                        "vpc_security_group_ids": []
                    }
                },
                {
                    "address": "aws_flow_log.good_flow_log",
                    "mode": "managed",
                    "type": "aws_flow_log",
                    "name": "good_flow_log",
                    "provider_name": "registry.terraform.io/hashicorp/aws",
                    "schema_version": 0,
                    "values": {
                        "deliver_cross_account_role": null,
                        "destination_options": [],
                        "eni_id": null,
                        "iam_role_arn": "arn:aws:iam::123456789012:role/flow-log-role",
                        "log_destination": "arn:aws:logs:ap-south-1:123456789012:log-group:vpc-flow-logs",
                        "log_destination_type": "cloud-watch-logs",
                        "max_aggregation_interval": 600,
                        "subnet_id": null,
                        "tags": null,
                        "traffic_type": "ALL",
                        "transit_gateway_attachment_id": null,
                        "transit_gateway_id": null
                    },
                    "sensitive_values": {
                        "destination_options": [],
                        "tags_all": {}
                    }
                },
                {
                    "address": "aws_lb.good_lb",
                    "mode": "managed",
                    "type": "aws_lb",
                    "name": "good_lb",
                    "provider_name": "registry.terraform.io/hashicorp/aws",
                    "schema_version": 0,
                    "values": {
                        "access_logs": [
                            {
                                "bucket": "good-lb-logs",
                                "enabled": true,
                                "prefix": null
                            }
                        ],
                        "client_keep_alive": 3600,
                        "connection_logs": [],
                        "customer_owned_ipv4_pool": null,
                        "desync_mitigation_mode": "defensive",
                        "dns_record_client_routing_policy": null,
                        "drop_invalid_header_fields": false,
                        "enable_cross_zone_load_balancing": null,
                        "enable_deletion_protection": false,
                        "enable_http2": true,
                        "enable_tls_version_and_cipher_suite_headers": false,
                        "enable_waf_fail_open": false,
                        "enable_xff_client_port": false,
                        "enable_zonal_shift": false,
                        "idle_timeout": 60,
                        "internal": false,
                        "ipam_pools": [],
                        "load_balancer_type": "application",
                        "minimum_load_balancer_capacity": [],
                        "name": "good-lb",
                        "preserve_host_header": false,
                        "subnets": [
                            "subnet-12345678",
                            "subnet-87654321"
                        ],
                        "tags": null,
                        "timeouts": null,
                        "xff_header_processing_mode": "append"
                    },
                    "sensitive_values": {
                        "access_logs": [
                            {}
                        ],
                        "connection_logs": [],
                        "ipam_pools": [],
                        "minimum_load_balancer_capacity": [],
                        "security_groups": [],
                        "subnet_mapping": [],
                        "subnets": [
                            false,
                            false
                        ],
                        "tags_all": {}
                    }
                },
                {
                    "address": "aws_vpc.good_vpc",
                    "mode": "managed",
                    "type": "aws_vpc",
                    "name": "good_vpc",
                    "provider_name": "registry.terraform.io/hashicorp/aws",
                    "schema_version": 1,
                    "values": {
                        "assign_generated_ipv6_cidr_block": null,
                        "cidr_block": "10.0.0.0/16",
                        "enable_dns_support": true,
                        "instance_tenancy": "default",
                        "ipv4_ipam_pool_id": null,
                        "ipv4_netmask_length": null,
                        "ipv6_ipam_pool_id": null,
                        "ipv6_netmask_length": null,
                        "tags": null
                    },
                    "sensitive_values": {
                        "tags_all": {}
                    }
                }
            ]
        }
    },
    "resource_changes": [
        {
            "address": "aws_cloudtrail.good_trail",
            "mode": "managed",
            "type": "aws_cloudtrail",
            "name": "good_trail",
            "provider_name": "registry.terraform.io/hashicorp/aws",
            "change": {
                "actions": [
                    "create"
                ],
                "before": null,
                "after": {
                    "advanced_event_selector": [],
                    "cloud_watch_logs_group_arn": null,
                    "cloud_watch_logs_role_arn": null,
                    "enable_log_file_validation": true,
                    "enable_logging": true,
                    "event_selector": [
                        {
                            "data_resource": [],
                            "exclude_management_event_sources": null,
                            "include_management_events": true,
                            "read_write_type": "All"
                        }
                    ],
                    "include_global_service_events": true,
                    "insight_selector": [],
                    "is_multi_region_trail": true,
                    "is_organization_trail": false,
                    "kms_key_id": "arn:aws:kms:ap-south-1:123456789012:key/mrk-1234abcd",
                    "name": "good-trail",
                    "s3_bucket_name": "good-trail-bucket",
                    "s3_key_prefix": null,
                    "sns_topic_name": null,
                    "tags": null
                },
                "after_unknown": {
                    "advanced_event_selector": [],
                    "arn": true,
                    "event_selector": [
                        {
                            "data_resource": []
                        }
                    ],
                    "home_region": true,
                    "id": true,
                    "insight_selector": [],
                    "sns_topic_arn": true,
                    "tags_all": true
                },
                "before_sensitive": false,
                "after_sensitive": {
                    "advanced_event_selector": [],
                    "event_selector": [
                        {
                            "data_resource": []
                        }
                    ],
                    "insight_selector": [],
                    "tags_all": {}
                }
            }
        },
        {
            "address": "aws_cloudwatch_log_group.good_log_group",
            "mode": "managed",
            "type": "aws_cloudwatch_log_group",
            "name": "good_log_group",
            "provider_name": "registry.terraform.io/hashicorp/aws",
            "change": {
                "actions": [
                    "create"
                ],
                "before": null,
                "after": {
                    "kms_key_id": "arn:aws:kms:ap-south-1:123456789012:key/mrk-1234abcd",
                    "name": "good-log-group",
                    "retention_in_days": 365,
                    "skip_destroy": false,
                    "tags": null
                },
                "after_unknown": {
                    "arn": true,
                    "id": true,
                    "log_group_class": true,
                    "name_prefix": true,
                    "tags_all": true
                },
                "before_sensitive": false,
                "after_sensitive": {
                    "tags_all": {}
                }
            }
        },
        {
            "address": "aws_config_configuration_recorder.good_recorder",
            "mode": "managed",
            "type": "aws_config_configuration_recorder",
            "name": "good_recorder",
            "provider_name": "registry.terraform.io/hashicorp/aws",
            "change": {
                "actions": [
                    "create"
                ],
                "before": null,
                "after": {
                    "name": "good-recorder",
                    "recording_group": [
                        {
                            "all_supported": true,
                            "include_global_resource_types": true,
                            "resource_types": null
                        }
                    ],
                    "role_arn": "arn:aws:iam::123456789012:role/config-role"
                },
                "after_unknown": {
                    "id": true,
                    "recording_group": [
                        {
                            "exclusion_by_resource_types": true,
                            "recording_strategy": true
                        }
                    ],
                    "recording_mode": true
                },
                "before_sensitive": false,
                "after_sensitive": {
                    "recording_group": [
                        {
                            "exclusion_by_resource_types": [],
                            "recording_strategy": []
                        }
                    ],
                    "recording_mode": []
                }
            }
        },
        {
            "address": "aws_config_delivery_channel.good_channel",
            "mode": "managed",
            "type": "aws_config_delivery_channel",
            "name": "good_channel",
            "provider_name": "registry.terraform.io/hashicorp/aws",
            "change": {
                "actions": [
                    "create"
                ],
                "before": null,
                "after": {
                    "name": "good-channel",
                    "s3_bucket_name": "good-config-bucket",
                    "s3_key_prefix": null,
                    "s3_kms_key_arn": null,
                    "snapshot_delivery_properties": [],
                    "sns_topic_arn": null
                },
                "after_unknown": {
                    "id": true,
                    "snapshot_delivery_properties": []
                },
                "before_sensitive": false,
                "after_sensitive": {
                    "snapshot_delivery_properties": []
                }
            }
        },
        {
            "address": "aws_db_instance.good_rds",
            "mode": "managed",
            "type": "aws_db_instance",
            "name": "good_rds",
            "provider_name": "registry.terraform.io/hashicorp/aws",
            "change": {
                "actions": [
                    "create"
                ],
                "before": null,
                "after": {
                    "allocated_storage": 20,
                    "allow_major_version_upgrade": null,
                    "apply_immediately": false,
                    "auto_minor_version_upgrade": true,
                    "blue_green_update": [],
                    "copy_tags_to_snapshot": false,
                    "custom_iam_instance_profile": null,
                    "customer_owned_ip_enabled": null,
                    "dedicated_log_volume": false,
                    "delete_automated_backups": true,
                    "deletion_protection": null,
                    "domain": null,
                    "domain_auth_secret_arn": null,
                    "domain_dns_ips": null,
                    "domain_iam_role_name": null,
                    "domain_ou": null,
                    "enabled_cloudwatch_logs_exports": [
                        "audit",
                        "error",
                        "general",
                        "slowquery"
                    ],
                    "engine": "mysql",
                    "engine_version": "8.0",
                    "final_snapshot_identifier": null,
                    "iam_database_authentication_enabled": null,
                    "identifier": "good-rds",
                    "instance_class": "db.t3.micro",
                    "manage_master_user_password": null,
                    "max_allocated_storage": null,
                    "monitoring_interval": 0,
                    "password": "Goodpassword123",
                    "password_wo": null,
                    "password_wo_version": null,
                    "performance_insights_enabled": false,
                    "publicly_accessible": false,
                    "replicate_source_db": null,
                    "restore_to_point_in_time": [],
                    "s3_import": [],
                    "skip_final_snapshot": true,
                    "storage_encrypted": null,
                    "tags": null,
                    "timeouts": null,
                    "upgrade_storage_config": null,
                    "username": "admin"
                },
                "after_unknown": {
                    "address": true,
                    "arn": true,
                    "availability_zone": true,
                    "backup_retention_period": true,
                    "backup_target": true,
                    "backup_window": true,
                    "blue_green_update": [],
                    "ca_cert_identifier": true,
                    "character_set_name": true,
                    "database_insights_mode": true,
                    "db_name": true,
                    "db_subnet_group_name": true,
                    "domain_fqdn": true,
                    "enabled_cloudwatch_logs_exports": [
                        false,
                        false,
                        false,
                        false
                    ],
                    "endpoint": true,
                    "engine_lifecycle_support": true,
                    "engine_version_actual": true,
                    "hosted_zone_id": true,
                    "id": true,
                    "identifier_prefix": true,
                    "iops": true,
                    "kms_key_id": true,
                    "latest_restorable_time": true,
                    "license_model": true,
                    "listener_endpoint": true,
                    "maintenance_window": true,
                    "master_user_secret": true,
                    "master_user_secret_kms_key_id": true,
                    "monitoring_role_arn": true,
                    "multi_az": true,
                    "nchar_character_set_name": true,
                    "network_type": true,
                    "option_group_name": true,
                    "parameter_group_name": true,
                    "performance_insights_kms_key_id": true,
                    "performance_insights_retention_period": true,
                    "port": true,
                    "replica_mode": true,
                    "replicas": true,
                    "resource_id": true,
                    "restore_to_point_in_time": [],
                    "s3_import": [],
                    "snapshot_identifier": true,
                    "status": true,
                    "storage_throughput": true,
                    "storage_type": true,
                    "tags_all": true,
                    "timezone": true,
                    "vpc_security_group_ids": true
                },
                "before_sensitive": false,
                "after_sensitive": {
                    "blue_green_update": [],
                    "enabled_cloudwatch_logs_exports": [
                        false,
                        false,
                        false,
                        false
                    ],
                    "listener_endpoint": [],
                    "master_user_secret": [],
                    "password": true,
                    "password_wo": true,
                    "replicas": [],
                    "restore_to_point_in_time": [],
                    "s3_import": [],
                    "tags_all": {},
                    "vpc_security_group_ids": []
                }
            }
        },
        {
            "address": "aws_flow_log.good_flow_log",
            "mode": "managed",
            "type": "aws_flow_log",
            "name": "good_flow_log",
            "provider_name": "registry.terraform.io/hashicorp/aws",
            "change": {
                "actions": [
                    "create"
                ],
                "before": null,
                "after": {
                    "deliver_cross_account_role": null,
                    "destination_options": [],
                    "eni_id": null,
                    "iam_role_arn": "arn:aws:iam::123456789012:role/flow-log-role",
                    "log_destination": "arn:aws:logs:ap-south-1:123456789012:log-group:vpc-flow-logs",
                    "log_destination_type": "cloud-watch-logs",
                    "max_aggregation_interval": 600,
                    "subnet_id": null,
                    "tags": null,
                    "traffic_type": "ALL",
                    "transit_gateway_attachment_id": null,
                    "transit_gateway_id": null
                },
                "after_unknown": {
                    "arn": true,
                    "destination_options": [],
                    "id": true,
                    "log_format": true,
                    "log_group_name": true,
                    "tags_all": true,
                    "vpc_id": true
                },
                "before_sensitive": false,
                "after_sensitive": {
                    "destination_options": [],
                    "tags_all": {}
                }
            }
        },
        {
            "address": "aws_lb.good_lb",
            "mode": "managed",
            "type": "aws_lb",
            "name": "good_lb",
            "provider_name": "registry.terraform.io/hashicorp/aws",
            "change": {
                "actions": [
                    "create"
                ],
                "before": null,
                "after": {
                    "access_logs": [
                        {
                            "bucket": "good-lb-logs",
                            "enabled": true,
                            "prefix": null
                        }
                    ],
                    "client_keep_alive": 3600,
                    "connection_logs": [],
                    "customer_owned_ipv4_pool": null,
                    "desync_mitigation_mode": "defensive",
                    "dns_record_client_routing_policy": null,
                    "drop_invalid_header_fields": false,
                    "enable_cross_zone_load_balancing": null,
                    "enable_deletion_protection": false,
                    "enable_http2": true,
                    "enable_tls_version_and_cipher_suite_headers": false,
                    "enable_waf_fail_open": false,
                    "enable_xff_client_port": false,
                    "enable_zonal_shift": false,
                    "idle_timeout": 60,
                    "internal": false,
                    "ipam_pools": [],
                    "load_balancer_type": "application",
                    "minimum_load_balancer_capacity": [],
                    "name": "good-lb",
                    "preserve_host_header": false,
                    "subnets": [
                        "subnet-12345678",
                        "subnet-87654321"
                    ],
                    "tags": null,
                    "timeouts": null,
                    "xff_header_processing_mode": "append"
                },
                "after_unknown": {
                    "access_logs": [
                        {}
                    ],
                    "arn": true,
                    "arn_suffix": true,
                    "connection_logs": [],
                    "dns_name": true,
                    "enforce_security_group_inbound_rules_on_private_link_traffic": true,
                    "id": true,
                    "ip_address_type": true,
                    "ipam_pools": [],
                    "minimum_load_balancer_capacity": [],
                    "name_prefix": true,
                    "security_groups": true,
                    "subnet_mapping": true,
                    "subnets": [
                        false,
                        false
                    ],
                    "tags_all": true,
                    "vpc_id": true,
                    "zone_id": true
                },
                "before_sensitive": false,
                "after_sensitive": {
                    "access_logs": [
                        {}
                    ],
                    "connection_logs": [],
                    "ipam_pools": [],
                    "minimum_load_balancer_capacity": [],
                    "security_groups": [],
                    "subnet_mapping": [],
                    "subnets": [
                        false,
                        false
                    ],
                    "tags_all": {}
                }
            }
        },
        {
            "address": "aws_vpc.good_vpc",
            "mode": "managed",
            "type": "aws_vpc",
            "name": "good_vpc",
            "provider_name": "registry.terraform.io/hashicorp/aws",
            "change": {
                "actions": [
                    "create"
                ],
                "before": null,
                "after": {
                    "assign_generated_ipv6_cidr_block": null,
                    "cidr_block": "10.0.0.0/16",
                    "enable_dns_support": true,
                    "instance_tenancy": "default",
                    "ipv4_ipam_pool_id": null,
                    "ipv4_netmask_length": null,
                    "ipv6_ipam_pool_id": null,
                    "ipv6_netmask_length": null,
                    "tags": null
                },
                "after_unknown": {
                    "arn": true,
                    "default_network_acl_id": true,
                    "default_route_table_id": true,
                    "default_security_group_id": true,
                    "dhcp_options_id": true,
                    "enable_dns_hostnames": true,
                    "enable_network_address_usage_metrics": true,
                    "id": true,
                    "ipv6_association_id": true,
                    "ipv6_cidr_block": true,
                    "ipv6_cidr_block_network_border_group": true,
                    "main_route_table_id": true,
                    "owner_id": true,
                    "tags_all": true
                },
                "before_sensitive": false,
                "after_sensitive": {
                    "tags_all": {}
                }
            }
        }
    ],
    "configuration": {
        "provider_config": {
            "aws": {
                "name": "aws",
                "full_name": "registry.terraform.io/hashicorp/aws",
                "version_constraint": "~\u003e 5.0",
                "expressions": {
                    "region": {
                        "constant_value": "ap-south-1"
                    }
                }
            }
        },
        "root_module": {
            "resources": [
                {
                    "address": "aws_cloudtrail.good_trail",
                    "mode": "managed",
                    "type": "aws_cloudtrail",
                    "name": "good_trail",
                    "provider_config_key": "aws",
                    "expressions": {
                        "enable_log_file_validation": {
                            "constant_value": true
                        },
                        "event_selector": [
                            {
                                "include_management_events": {
                                    "constant_value": true
                                },
                                "read_write_type": {
                                    "constant_value": "All"
                                }
                            }
                        ],
                        "include_global_service_events": {
                            "constant_value": true
                        },
                        "is_multi_region_trail": {
                            "constant_value": true
                        },
                        "kms_key_id": {
                            "constant_value": "arn:aws:kms:ap-south-1:123456789012:key/mrk-1234abcd"
                        },
                        "name": {
                            "constant_value": "good-trail"
                        },
                        "s3_bucket_name": {
                            "constant_value": "good-trail-bucket"
                        }
                    },
                    "schema_version": 1
                },
                {
                    "address": "aws_cloudwatch_log_group.good_log_group",
                    "mode": "managed",
                    "type": "aws_cloudwatch_log_group",
                    "name": "good_log_group",
                    "provider_config_key": "aws",
                    "expressions": {
                        "kms_key_id": {
                            "constant_value": "arn:aws:kms:ap-south-1:123456789012:key/mrk-1234abcd"
                        },
                        "name": {
                            "constant_value": "good-log-group"
                        },
                        "retention_in_days": {
                            "constant_value": 365
                        }
                    },
                    "schema_version": 0
                },
                {
                    "address": "aws_config_configuration_recorder.good_recorder",
                    "mode": "managed",
                    "type": "aws_config_configuration_recorder",
                    "name": "good_recorder",
                    "provider_config_key": "aws",
                    "expressions": {
                        "name": {
                            "constant_value": "good-recorder"
                        },
                        "recording_group": [
                            {
                                "all_supported": {
                                    "constant_value": true
                                },
                                "include_global_resource_types": {
                                    "constant_value": true
                                }
                            }
                        ],
                        "role_arn": {
                            "constant_value": "arn:aws:iam::123456789012:role/config-role"
                        }
                    },
                    "schema_version": 0
                },
                {
                    "address": "aws_config_delivery_channel.good_channel",
                    "mode": "managed",
                    "type": "aws_config_delivery_channel",
                    "name": "good_channel",
                    "provider_config_key": "aws",
                    "expressions": {
                        "name": {
                            "constant_value": "good-channel"
                        },
                        "s3_bucket_name": {
                            "constant_value": "good-config-bucket"
                        }
                    },
                    "schema_version": 0,
                    "depends_on": [
                        "aws_config_configuration_recorder.good_recorder"
                    ]
                },
                {
                    "address": "aws_db_instance.good_rds",
                    "mode": "managed",
                    "type": "aws_db_instance",
                    "name": "good_rds",
                    "provider_config_key": "aws",
                    "expressions": {
                        "allocated_storage": {
                            "constant_value": 20
                        },
                        "enabled_cloudwatch_logs_exports": {
                            "constant_value": [
                                "audit",
                                "error",
                                "general",
                                "slowquery"
                            ]
                        },
                        "engine": {
                            "constant_value": "mysql"
                        },
                        "engine_version": {
                            "constant_value": "8.0"
                        },
                        "identifier": {
                            "constant_value": "good-rds"
                        },
                        "instance_class": {
                            "constant_value": "db.t3.micro"
                        },
                        "password": {
                            "constant_value": "Goodpassword123"
                        },
                        "skip_final_snapshot": {
                            "constant_value": true
                        },
                        "username": {
                            "constant_value": "admin"
                        }
                    },
                    "schema_version": 2
                },
                {
                    "address": "aws_flow_log.good_flow_log",
                    "mode": "managed",
                    "type": "aws_flow_log",
                    "name": "good_flow_log",
                    "provider_config_key": "aws",
                    "expressions": {
                        "iam_role_arn": {
                            "constant_value": "arn:aws:iam::123456789012:role/flow-log-role"
                        },
                        "log_destination": {
                            "constant_value": "arn:aws:logs:ap-south-1:123456789012:log-group:vpc-flow-logs"
                        },
                        "traffic_type": {
                            "constant_value": "ALL"
                        },
                        "vpc_id": {
                            "references": [
                                "aws_vpc.good_vpc.id",
                                "aws_vpc.good_vpc"
                            ]
                        }
                    },
                    "schema_version": 0
                },
                {
                    "address": "aws_lb.good_lb",
                    "mode": "managed",
                    "type": "aws_lb",
                    "name": "good_lb",
                    "provider_config_key": "aws",
                    "expressions": {
                        "access_logs": [
                            {
                                "bucket": {
                                    "constant_value": "good-lb-logs"
                                },
                                "enabled": {
                                    "constant_value": true
                                }
                            }
                        ],
                        "internal": {
                            "constant_value": false
                        },
                        "load_balancer_type": {
                            "constant_value": "application"
                        },
                        "name": {
                            "constant_value": "good-lb"
                        },
                        "subnets": {
                            "constant_value": [
                                "subnet-12345678",
                                "subnet-87654321"
                            ]
                        }
                    },
                    "schema_version": 0
                },
                {
                    "address": "aws_vpc.good_vpc",
                    "mode": "managed",
                    "type": "aws_vpc",
                    "name": "good_vpc",
                    "provider_config_key": "aws",
                    "expressions": {
                        "cidr_block": {
                            "constant_value": "10.0.0.0/16"
                        }
                    },
                    "schema_version": 1
                }
            ]
        }
    },
    "relevant_attributes": [
        {
            "resource": "aws_vpc.good_vpc",
            "attribute": [
                "id"
            ]
        }
    ],
    "timestamp": "2026-07-19T17:55:41Z",
    "applyable": true,
    "complete": true,
    "errored": false
}