1

{"format_version":"1.2","terraform_version":"1.15.6","planned_values":{"root_module":{"resources":[{"address":"aws_acm_certificate.bad_cert","mode":"managed","type":"aws_acm_certificate","name":"bad_cert","provider_name":"registry.terraform.io/hashicorp/aws","schema_version":0,"values":{"certificate_authority_arn":null,"certificate_body":null,"certificate_chain":null,"domain_name":"bad.example.com","domain_validation_options":[{"domain_name":"bad.example.com"}],"early_renewal_duration":null,"key_algorithm":"RSA_1024","private_key":null,"subject_alternative_names":["bad.example.com"],"tags":null,"validation_method":"DNS","validation_option":[]},"sensitive_values":{"domain_validation_options":[{}],"options":[],"private_key":true,"renewal_summary":[],"subject_alternative_names":[false],"tags_all":{},"validation_emails":[],"validation_option":[]}},{"address":"aws_ebs_encryption_by_default.bad_ebs","mode":"managed","type":"aws_ebs_encryption_by_default","name":"bad_ebs","provider_name":"registry.terraform.io/hashicorp/aws","schema_version":0,"values":{"enabled":false},"sensitive_values":{}},{"address":"aws_iam_policy.bad_kms_policy","mode":"managed","type":"aws_iam_policy","name":"bad_kms_policy","provider_name":"registry.terraform.io/hashicorp/aws","schema_version":0,"values":{"description":null,"name":"bad-kms-policy","path":"/","policy":"{\"Statement\":[{\"Action\":[\"kms:Decrypt\"],\"Effect\":\"Allow\",\"Resource\":\"*\"}],\"Version\":\"2012-10-17\"}","tags":null},"sensitive_values":{"tags_all":{}}},{"address":"aws_kms_key.bad_key","mode":"managed","type":"aws_kms_key","name":"bad_key","provider_name":"registry.terraform.io/hashicorp/aws","schema_version":0,"values":{"bypass_policy_lockout_safety_check":false,"custom_key_store_id":null,"customer_master_key_spec":"SYMMETRIC_DEFAULT","deletion_window_in_days":7,"description":"bad key","enable_key_rotation":false,"is_enabled":true,"key_usage":"ENCRYPT_DECRYPT","tags":null,"timeouts":null,"xks_key_id":null},"sensitive_values":{"tags_all":{}}},{"address":"aws_kms_key.bad_root_key","mode":"managed","type":"aws_kms_key","name":"bad_root_key","provider_name":"registry.terraform.io/hashicorp/aws","schema_version":0,"values":{"bypass_policy_lockout_safety_check":false,"custom_key_store_id":null,"customer_master_key_spec":"SYMMETRIC_DEFAULT","deletion_window_in_days":30,"description":"bad root key","enable_key_rotation":true,"is_enabled":true,"key_usage":"ENCRYPT_DECRYPT","policy":"{\"Statement\":[{\"Action\":\"kms:*\",\"Effect\":\"Allow\",\"Principal\":{\"AWS\":\"arn:aws:iam::123456789012:root\"},\"Resource\":\"*\"}],\"Version\":\"2012-10-17\"}","tags":null,"timeouts":null,"xks_key_id":null},"sensitive_values":{"tags_all":{}}},{"address":"aws_s3_bucket.bad_bucket","mode":"managed","type":"aws_s3_bucket","name":"bad_bucket","provider_name":"registry.terraform.io/hashicorp/aws","schema_version":0,"values":{"bucket":"bad-ekm-bucket","force_destroy":false,"tags":null,"timeouts":null},"sensitive_values":{"cors_rule":[],"grant":[],"lifecycle_rule":[],"logging":[],"object_lock_configuration":[],"replication_configuration":[],"server_side_encryption_configuration":[],"tags_all":{},"versioning":[],"website":[]}},{"address":"aws_s3_bucket_server_side_encryption_configuration.bad_sse","mode":"managed","type":"aws_s3_bucket_server_side_encryption_configuration","name":"bad_sse","provider_name":"registry.terraform.io/hashicorp/aws","schema_version":0,"values":{"expected_bucket_owner":null,"rule":[{"apply_server_side_encryption_by_default":[{"kms_master_key_id":"","sse_algorithm":"AES256"}],"bucket_key_enabled":null}]},"sensitive_values":{"rule":[{"apply_server_side_encryption_by_default":[{}]}]}},{"address":"aws_secretsmanager_secret.bad_secret","mode":"managed","type":"aws_secretsmanager_secret","name":"bad_secret","provider_name":"registry.terraform.io/hashicorp/aws","schema_version":0,"values":{"description":null,"force_overwrite_replica_secret":false,"kms_key_id":null,"name":"bad-secret","recovery_window_in_days":30,"tags":null},"sensitive_values":{"replica":[],"tags_all":{}}}]}},"resource_changes":[{"address":"aws_acm_certificate.bad_cert","mode":"managed","type":"aws_acm_certificate","name":"bad_cert","provider_name":"registry.terraform.io/hashicorp/aws","change":{"actions":["create"],"before":null,"after":{"certificate_authority_arn":null,"certificate_body":null,"certificate_chain":null,"domain_name":"bad.example.com","domain_validation_options":[{"domain_name":"bad.example.com"}],"early_renewal_duration":null,"key_algorithm":"RSA_1024","private_key":null,"subject_alternative_names":["bad.example.com"],"tags":null,"validation_method":"DNS","validation_option":[]},"after_unknown":{"arn":true,"domain_validation_options":[{"resource_record_name":true,"resource_record_type":true,"resource_record_value":true}],"id":true,"not_after":true,"not_before":true,"options":true,"pending_renewal":true,"renewal_eligibility":true,"renewal_summary":true,"status":true,"subject_alternative_names":[false],"tags_all":true,"type":true,"validation_emails":true,"validation_option":[]},"before_sensitive":false,"after_sensitive":{"domain_validation_options":[{}],"options":[],"private_key":true,"renewal_summary":[],"subject_alternative_names":[false],"tags_all":{},"validation_emails":[],"validation_option":[]}}},{"address":"aws_ebs_encryption_by_default.bad_ebs","mode":"managed","type":"aws_ebs_encryption_by_default","name":"bad_ebs","provider_name":"registry.terraform.io/hashicorp/aws","change":{"actions":["create"],"before":null,"after":{"enabled":false},"after_unknown":{"id":true},"before_sensitive":false,"after_sensitive":{}}},{"address":"aws_iam_policy.bad_kms_policy","mode":"managed","type":"aws_iam_policy","name":"bad_kms_policy","provider_name":"registry.terraform.io/hashicorp/aws","change":{"actions":["create"],"before":null,"after":{"description":null,"name":"bad-kms-policy","path":"/","policy":"{\"Statement\":[{\"Action\":[\"kms:Decrypt\"],\"Effect\":\"Allow\",\"Resource\":\"*\"}],\"Version\":\"2012-10-17\"}","tags":null},"after_unknown":{"arn":true,"attachment_count":true,"id":true,"name_prefix":true,"policy_id":true,"tags_all":true},"before_sensitive":false,"after_sensitive":{"tags_all":{}}}},{"address":"aws_kms_key.bad_key","mode":"managed","type":"aws_kms_key","name":"bad_key","provider_name":"registry.terraform.io/hashicorp/aws","change":{"actions":["create"],"before":null,"after":{"bypass_policy_lockout_safety_check":false,"custom_key_store_id":null,"customer_master_key_spec":"SYMMETRIC_DEFAULT","deletion_window_in_days":7,"description":"bad key","enable_key_rotation":false,"is_enabled":true,"key_usage":"ENCRYPT_DECRYPT","tags":null,"timeouts":null,"xks_key_id":null},"after_unknown":{"arn":true,"id":true,"key_id":true,"multi_region":true,"policy":true,"rotation_period_in_days":true,"tags_all":true},"before_sensitive":false,"after_sensitive":{"tags_all":{}}}},{"address":"aws_kms_key.bad_root_key","mode":"managed","type":"aws_kms_key","name":"bad_root_key","provider_name":"registry.terraform.io/hashicorp/aws","change":{"actions":["create"],"before":null,"after":{"bypass_policy_lockout_safety_check":false,"custom_key_store_id":null,"customer_master_key_spec":"SYMMETRIC_DEFAULT","deletion_window_in_days":30,"description":"bad root key","enable_key_rotation":true,"is_enabled":true,"key_usage":"ENCRYPT_DECRYPT","policy":"{\"Statement\":[{\"Action\":\"kms:*\",\"Effect\":\"Allow\",\"Principal\":{\"AWS\":\"arn:aws:iam::123456789012:root\"},\"Resource\":\"*\"}],\"Version\":\"2012-10-17\"}","tags":null,"timeouts":null,"xks_key_id":null},"after_unknown":{"arn":true,"id":true,"key_id":true,"multi_region":true,"rotation_period_in_days":true,"tags_all":true},"before_sensitive":false,"after_sensitive":{"tags_all":{}}}},{"address":"aws_s3_bucket.bad_bucket","mode":"managed","type":"aws_s3_bucket","name":"bad_bucket","provider_name":"registry.terraform.io/hashicorp/aws","change":{"actions":["create"],"before":null,"after":{"bucket":"bad-ekm-bucket","force_destroy":false,"tags":null,"timeouts":null},"after_unknown":{"acceleration_status":true,"acl":true,"arn":true,"bucket_domain_name":true,"bucket_prefix":true,"bucket_regional_domain_name":true,"cors_rule":true,"grant":true,"hosted_zone_id":true,"id":true,"lifecycle_rule":true,"logging":true,"object_lock_configuration":true,"object_lock_enabled":true,"policy":true,"region":true,"replication_configuration":true,"request_payer":true,"server_side_encryption_configuration":true,"tags_all":true,"versioning":true,"website":true,"website_domain":true,"website_endpoint":true},"before_sensitive":false,"after_sensitive":{"cors_rule":[],"grant":[],"lifecycle_rule":[],"logging":[],"object_lock_configuration":[],"replication_configuration":[],"server_side_encryption_configuration":[],"tags_all":{},"versioning":[],"website":[]}}},{"address":"aws_s3_bucket_server_side_encryption_configuration.bad_sse","mode":"managed","type":"aws_s3_bucket_server_side_encryption_configuration","name":"bad_sse","provider_name":"registry.terraform.io/hashicorp/aws","change":{"actions":["create"],"before":null,"after":{"expected_bucket_owner":null,"rule":[{"apply_server_side_encryption_by_default":[{"kms_master_key_id":"","sse_algorithm":"AES256"}],"bucket_key_enabled":null}]},"after_unknown":{"bucket":true,"id":true,"rule":[{"apply_server_side_encryption_by_default":[{}]}]},"before_sensitive":false,"after_sensitive":{"rule":[{"apply_server_side_encryption_by_default":[{}]}]}}},{"address":"aws_secretsmanager_secret.bad_secret","mode":"managed","type":"aws_secretsmanager_secret","name":"bad_secret","provider_name":"registry.terraform.io/hashicorp/aws","change":{"actions":["create"],"before":null,"after":{"description":null,"force_overwrite_replica_secret":false,"kms_key_id":null,"name":"bad-secret","recovery_window_in_days":30,"tags":null},"after_unknown":{"arn":true,"id":true,"name_prefix":true,"policy":true,"replica":true,"tags_all":true},"before_sensitive":false,"after_sensitive":{"replica":[],"tags_all":{}}}}],"configuration":{"provider_config":{"aws":{"name":"aws","full_name":"registry.terraform.io/hashicorp/aws","version_constraint":"~\u003e 5.0","expressions":{"region":{"constant_value":"ap-south-1"}}}},"root_module":{"resources":[{"address":"aws_acm_certificate.bad_cert","mode":"managed","type":"aws_acm_certificate","name":"bad_cert","provider_config_key":"aws","expressions":{"domain_name":{"constant_value":"bad.example.com"},"key_algorithm":{"constant_value":"RSA_1024"},"validation_method":{"constant_value":"DNS"}},"schema_version":0},{"address":"aws_ebs_encryption_by_default.bad_ebs","mode":"managed","type":"aws_ebs_encryption_by_default","name":"bad_ebs","provider_config_key":"aws","expressions":{"enabled":{"constant_value":false}},"schema_version":0},{"address":"aws_iam_policy.bad_kms_policy","mode":"managed","type":"aws_iam_policy","name":"bad_kms_policy","provider_config_key":"aws","expressions":{"name":{"constant_value":"bad-kms-policy"},"policy":{}},"schema_version":0},{"address":"aws_kms_key.bad_key","mode":"managed","type":"aws_kms_key","name":"bad_key","provider_config_key":"aws","expressions":{"customer_master_key_spec":{"constant_value":"SYMMETRIC_DEFAULT"},"deletion_window_in_days":{"constant_value":7},"description":{"constant_value":"bad key"},"enable_key_rotation":{"constant_value":false}},"schema_version":0},{"address":"aws_kms_key.bad_root_key","mode":"managed","type":"aws_kms_key","name":"bad_root_key","provider_config_key":"aws","expressions":{"customer_master_key_spec":{"constant_value":"SYMMETRIC_DEFAULT"},"deletion_window_in_days":{"constant_value":30},"description":{"constant_value":"bad root key"},"enable_key_rotation":{"constant_value":true},"policy":{}},"schema_version":0},{"address":"aws_s3_bucket.bad_bucket","mode":"managed","type":"aws_s3_bucket","name":"bad_bucket","provider_config_key":"aws","expressions":{"bucket":{"constant_value":"bad-ekm-bucket"}},"schema_version":0},{"address":"aws_s3_bucket_server_side_encryption_configuration.bad_sse","mode":"managed","type":"aws_s3_bucket_server_side_encryption_configuration","name":"bad_sse","provider_config_key":"aws","expressions":{"bucket":{"references":["aws_s3_bucket.bad_bucket.id","aws_s3_bucket.bad_bucket"]},"rule":[{"apply_server_side_encryption_by_default":[{"sse_algorithm":{"constant_value":"AES256"}}]}]},"schema_version":0},{"address":"aws_secretsmanager_secret.bad_secret","mode":"managed","type":"aws_secretsmanager_secret","name":"bad_secret","provider_config_key":"aws","expressions":{"name":{"constant_value":"bad-secret"}},"schema_version":0}]}},"relevant_attributes":[{"resource":"aws_s3_bucket.bad_bucket","attribute":["id"]}],"timestamp":"2026-07-17T12:51:04Z","applyable":true,"complete":true,"errored":false}