controls-aws-ncd-passing.tfplan.json
1
{"format_version":"1.2","terraform_version":"1.15.6","planned_values":{"root_module":{"resources":[{"address":"aws_api_gateway_method_settings.good_settings","mode":"managed","type":"aws_api_gateway_method_settings","name":"good_settings","provider_name":"registry.terraform.io/hashicorp/aws","schema_version":0,"values":{"method_path":"*/*","settings":[{"logging_level":"ERROR","throttling_burst_limit":-1,"throttling_rate_limit":-1}],"stage_name":"prod"},"sensitive_values":{"settings":[{}]}},{"address":"aws_api_gateway_rest_api.good_api","mode":"managed","type":"aws_api_gateway_rest_api","name":"good_api","provider_name":"registry.terraform.io/hashicorp/aws","schema_version":0,"values":{"body":null,"fail_on_warnings":null,"name":"good-api","parameters":null,"put_rest_api_mode":null,"tags":null},"sensitive_values":{"binary_media_types":[],"endpoint_configuration":[],"tags_all":{}}},{"address":"aws_api_gateway_stage.good_stage","mode":"managed","type":"aws_api_gateway_stage","name":"good_stage","provider_name":"registry.terraform.io/hashicorp/aws","schema_version":0,"values":{"access_log_settings":[],"cache_cluster_enabled":null,"cache_cluster_size":null,"canary_settings":[],"client_certificate_id":null,"deployment_id":"d-12345678","description":null,"documentation_version":null,"stage_name":"prod","tags":null,"variables":null,"xray_tracing_enabled":null},"sensitive_values":{"access_log_settings":[],"canary_settings":[],"tags_all":{}}},{"address":"aws_cloudfront_distribution.good_cf","mode":"managed","type":"aws_cloudfront_distribution","name":"good_cf","provider_name":"registry.terraform.io/hashicorp/aws","schema_version":1,"values":{"aliases":null,"comment":null,"custom_error_response":[],"default_cache_behavior":[{"allowed_methods":["GET","HEAD"],"cache_policy_id":null,"cached_methods":["GET","HEAD"],"compress":false,"field_level_encryption_id":null,"forwarded_values":[{"cookies":[{"forward":"none"}],"query_string":false}],"function_association":[],"lambda_function_association":[],"min_ttl":0,"origin_request_policy_id":null,"realtime_log_config_arn":null,"response_headers_policy_id":null,"smooth_streaming":null,"target_origin_id":"good-origin","viewer_protocol_policy":"redirect-to-https"}],"default_root_object":null,"enabled":true,"http_version":"http2","is_ipv6_enabled":false,"logging_config":[],"ordered_cache_behavior":[],"origin":[{"connection_attempts":3,"connection_timeout":10,"custom_header":[],"custom_origin_config":[{"http_port":80,"https_port":443,"origin_keepalive_timeout":5,"origin_protocol_policy":"https-only","origin_read_timeout":30,"origin_ssl_protocols":["TLSv1.2"]}],"domain_name":"example.com","origin_access_control_id":"","origin_id":"good-origin","origin_path":"","origin_shield":[],"s3_origin_config":[],"vpc_origin_config":[]}],"origin_group":[],"price_class":"PriceClass_All","restrictions":[{"geo_restriction":[{"restriction_type":"none"}]}],"retain_on_delete":false,"staging":false,"tags":null,"viewer_certificate":[{"acm_certificate_arn":"arn:aws:acm:us-east-1:123456789012:certificate/abc-123","cloudfront_default_certificate":null,"iam_certificate_id":null,"minimum_protocol_version":"TLSv1.2_2021","ssl_support_method":"sni-only"}],"wait_for_deployment":true,"web_acl_id":null},"sensitive_values":{"custom_error_response":[],"default_cache_behavior":[{"allowed_methods":[false,false],"cached_methods":[false,false],"forwarded_values":[{"cookies":[{"whitelisted_names":[]}],"headers":[],"query_string_cache_keys":[]}],"function_association":[],"grpc_config":[],"lambda_function_association":[],"trusted_key_groups":[],"trusted_signers":[]}],"logging_config":[],"ordered_cache_behavior":[],"origin":[{"custom_header":[],"custom_origin_config":[{"origin_ssl_protocols":[false]}],"origin_shield":[],"s3_origin_config":[],"vpc_origin_config":[]}],"origin_group":[],"restrictions":[{"geo_restriction":[{"locations":[]}]}],"tags_all":{},"trusted_key_groups":[],"trusted_signers":[],"viewer_certificate":[{}]}},{"address":"aws_default_security_group.good_default_sg","mode":"managed","type":"aws_default_security_group","name":"good_default_sg","provider_name":"registry.terraform.io/hashicorp/aws","schema_version":1,"values":{"revoke_rules_on_delete":false,"tags":null,"vpc_id":"vpc-12345678"},"sensitive_values":{"egress":[],"ingress":[],"tags_all":{}}},{"address":"aws_lb_listener.good_http","mode":"managed","type":"aws_lb_listener","name":"good_http","provider_name":"registry.terraform.io/hashicorp/aws","schema_version":0,"values":{"alpn_policy":null,"certificate_arn":null,"default_action":[{"authenticate_cognito":[],"authenticate_oidc":[],"fixed_response":[],"forward":[],"redirect":[{"host":"#{host}","path":"/#{path}","port":"443","protocol":"HTTPS","query":"#{query}","status_code":"HTTP_301"}],"target_group_arn":null,"type":"redirect"}],"load_balancer_arn":"arn:aws:elasticloadbalancing:ap-south-1:123456789012:loadbalancer/app/good-alb/1234567890","port":80,"protocol":"HTTP","tags":null,"timeouts":null},"sensitive_values":{"default_action":[{"authenticate_cognito":[],"authenticate_oidc":[],"fixed_response":[],"forward":[],"redirect":[{}]}],"mutual_authentication":[],"tags_all":{}}},{"address":"aws_network_acl_rule.good_nacl_rdp","mode":"managed","type":"aws_network_acl_rule","name":"good_nacl_rdp","provider_name":"registry.terraform.io/hashicorp/aws","schema_version":0,"values":{"cidr_block":"0.0.0.0/0","egress":false,"from_port":3389,"icmp_code":null,"icmp_type":null,"ipv6_cidr_block":null,"network_acl_id":"acl-12345678","protocol":"tcp","rule_action":"deny","rule_number":110,"to_port":3389},"sensitive_values":{}},{"address":"aws_network_acl_rule.good_nacl_ssh","mode":"managed","type":"aws_network_acl_rule","name":"good_nacl_ssh","provider_name":"registry.terraform.io/hashicorp/aws","schema_version":0,"values":{"cidr_block":"0.0.0.0/0","egress":false,"from_port":22,"icmp_code":null,"icmp_type":null,"ipv6_cidr_block":null,"network_acl_id":"acl-12345678","protocol":"tcp","rule_action":"deny","rule_number":100,"to_port":22},"sensitive_values":{}},{"address":"aws_security_group.good_sg","mode":"managed","type":"aws_security_group","name":"good_sg","provider_name":"registry.terraform.io/hashicorp/aws","schema_version":1,"values":{"description":"Managed by Terraform","ingress":[{"cidr_blocks":["10.0.0.0/8"],"description":"","from_port":22,"ipv6_cidr_blocks":[],"prefix_list_ids":[],"protocol":"tcp","security_groups":[],"self":false,"to_port":22},{"cidr_blocks":["10.0.0.0/8"],"description":"","from_port":3306,"ipv6_cidr_blocks":[],"prefix_list_ids":[],"protocol":"tcp","security_groups":[],"self":false,"to_port":3306},{"cidr_blocks":["10.0.0.0/8"],"description":"","from_port":3389,"ipv6_cidr_blocks":[],"prefix_list_ids":[],"protocol":"tcp","security_groups":[],"self":false,"to_port":3389}],"name":"good-sg","revoke_rules_on_delete":false,"tags":null,"timeouts":null,"vpc_id":"vpc-12345678"},"sensitive_values":{"egress":[],"ingress":[{"cidr_blocks":[false],"ipv6_cidr_blocks":[],"prefix_list_ids":[],"security_groups":[]},{"cidr_blocks":[false],"ipv6_cidr_blocks":[],"prefix_list_ids":[],"security_groups":[]},{"cidr_blocks":[false],"ipv6_cidr_blocks":[],"prefix_list_ids":[],"security_groups":[]}],"tags_all":{}}},{"address":"aws_vpc_endpoint.dynamodb","mode":"managed","type":"aws_vpc_endpoint","name":"dynamodb","provider_name":"registry.terraform.io/hashicorp/aws","schema_version":0,"values":{"auto_accept":null,"resource_configuration_arn":null,"service_name":"com.amazonaws.ap-south-1.dynamodb","service_network_arn":null,"tags":null,"timeouts":null,"vpc_endpoint_type":"Gateway","vpc_id":"vpc-12345678"},"sensitive_values":{"cidr_blocks":[],"dns_entry":[],"dns_options":[],"network_interface_ids":[],"route_table_ids":[],"security_group_ids":[],"subnet_configuration":[],"subnet_ids":[],"tags_all":{}}},{"address":"aws_vpc_endpoint.kms","mode":"managed","type":"aws_vpc_endpoint","name":"kms","provider_name":"registry.terraform.io/hashicorp/aws","schema_version":0,"values":{"auto_accept":null,"private_dns_enabled":true,"resource_configuration_arn":null,"service_name":"com.amazonaws.ap-south-1.kms","service_network_arn":null,"tags":null,"timeouts":null,"vpc_endpoint_type":"Interface","vpc_id":"vpc-12345678"},"sensitive_values":{"cidr_blocks":[],"dns_entry":[],"dns_options":[],"network_interface_ids":[],"route_table_ids":[],"security_group_ids":[],"subnet_configuration":[],"subnet_ids":[],"tags_all":{}}},{"address":"aws_vpc_endpoint.s3","mode":"managed","type":"aws_vpc_endpoint","name":"s3","provider_name":"registry.terraform.io/hashicorp/aws","schema_version":0,"values":{"auto_accept":null,"resource_configuration_arn":null,"service_name":"com.amazonaws.ap-south-1.s3","service_network_arn":null,"tags":null,"timeouts":null,"vpc_endpoint_type":"Gateway","vpc_id":"vpc-12345678"},"sensitive_values":{"cidr_blocks":[],"dns_entry":[],"dns_options":[],"network_interface_ids":[],"route_table_ids":[],"security_group_ids":[],"subnet_configuration":[],"subnet_ids":[],"tags_all":{}}},{"address":"aws_vpc_endpoint.secretsmanager","mode":"managed","type":"aws_vpc_endpoint","name":"secretsmanager","provider_name":"registry.terraform.io/hashicorp/aws","schema_version":0,"values":{"auto_accept":null,"private_dns_enabled":true,"resource_configuration_arn":null,"service_name":"com.amazonaws.ap-south-1.secretsmanager","service_network_arn":null,"tags":null,"timeouts":null,"vpc_endpoint_type":"Interface","vpc_id":"vpc-12345678"},"sensitive_values":{"cidr_blocks":[],"dns_entry":[],"dns_options":[],"network_interface_ids":[],"route_table_ids":[],"security_group_ids":[],"subnet_configuration":[],"subnet_ids":[],"tags_all":{}}}]}},"resource_changes":[{"address":"aws_api_gateway_method_settings.good_settings","mode":"managed","type":"aws_api_gateway_method_settings","name":"good_settings","provider_name":"registry.terraform.io/hashicorp/aws","change":{"actions":["create"],"before":null,"after":{"method_path":"*/*","settings":[{"logging_level":"ERROR","throttling_burst_limit":-1,"throttling_rate_limit":-1}],"stage_name":"prod"},"after_unknown":{"id":true,"rest_api_id":true,"settings":[{"cache_data_encrypted":true,"cache_ttl_in_seconds":true,"caching_enabled":true,"data_trace_enabled":true,"metrics_enabled":true,"require_authorization_for_cache_control":true,"unauthorized_cache_control_header_strategy":true}]},"before_sensitive":false,"after_sensitive":{"settings":[{}]}}},{"address":"aws_api_gateway_rest_api.good_api","mode":"managed","type":"aws_api_gateway_rest_api","name":"good_api","provider_name":"registry.terraform.io/hashicorp/aws","change":{"actions":["create"],"before":null,"after":{"body":null,"fail_on_warnings":null,"name":"good-api","parameters":null,"put_rest_api_mode":null,"tags":null},"after_unknown":{"api_key_source":true,"arn":true,"binary_media_types":true,"created_date":true,"description":true,"disable_execute_api_endpoint":true,"endpoint_configuration":true,"execution_arn":true,"id":true,"minimum_compression_size":true,"policy":true,"root_resource_id":true,"tags_all":true},"before_sensitive":false,"after_sensitive":{"binary_media_types":[],"endpoint_configuration":[],"tags_all":{}}}},{"address":"aws_api_gateway_stage.good_stage","mode":"managed","type":"aws_api_gateway_stage","name":"good_stage","provider_name":"registry.terraform.io/hashicorp/aws","change":{"actions":["create"],"before":null,"after":{"access_log_settings":[],"cache_cluster_enabled":null,"cache_cluster_size":null,"canary_settings":[],"client_certificate_id":null,"deployment_id":"d-12345678","description":null,"documentation_version":null,"stage_name":"prod","tags":null,"variables":null,"xray_tracing_enabled":null},"after_unknown":{"access_log_settings":[],"arn":true,"canary_settings":[],"execution_arn":true,"id":true,"invoke_url":true,"rest_api_id":true,"tags_all":true,"web_acl_arn":true},"before_sensitive":false,"after_sensitive":{"access_log_settings":[],"canary_settings":[],"tags_all":{}}}},{"address":"aws_cloudfront_distribution.good_cf","mode":"managed","type":"aws_cloudfront_distribution","name":"good_cf","provider_name":"registry.terraform.io/hashicorp/aws","change":{"actions":["create"],"before":null,"after":{"aliases":null,"comment":null,"custom_error_response":[],"default_cache_behavior":[{"allowed_methods":["GET","HEAD"],"cache_policy_id":null,"cached_methods":["GET","HEAD"],"compress":false,"field_level_encryption_id":null,"forwarded_values":[{"cookies":[{"forward":"none"}],"query_string":false}],"function_association":[],"lambda_function_association":[],"min_ttl":0,"origin_request_policy_id":null,"realtime_log_config_arn":null,"response_headers_policy_id":null,"smooth_streaming":null,"target_origin_id":"good-origin","viewer_protocol_policy":"redirect-to-https"}],"default_root_object":null,"enabled":true,"http_version":"http2","is_ipv6_enabled":false,"logging_config":[],"ordered_cache_behavior":[],"origin":[{"connection_attempts":3,"connection_timeout":10,"custom_header":[],"custom_origin_config":[{"http_port":80,"https_port":443,"origin_keepalive_timeout":5,"origin_protocol_policy":"https-only","origin_read_timeout":30,"origin_ssl_protocols":["TLSv1.2"]}],"domain_name":"example.com","origin_access_control_id":"","origin_id":"good-origin","origin_path":"","origin_shield":[],"s3_origin_config":[],"vpc_origin_config":[]}],"origin_group":[],"price_class":"PriceClass_All","restrictions":[{"geo_restriction":[{"restriction_type":"none"}]}],"retain_on_delete":false,"staging":false,"tags":null,"viewer_certificate":[{"acm_certificate_arn":"arn:aws:acm:us-east-1:123456789012:certificate/abc-123","cloudfront_default_certificate":null,"iam_certificate_id":null,"minimum_protocol_version":"TLSv1.2_2021","ssl_support_method":"sni-only"}],"wait_for_deployment":true,"web_acl_id":null},"after_unknown":{"arn":true,"caller_reference":true,"continuous_deployment_policy_id":true,"custom_error_response":[],"default_cache_behavior":[{"allowed_methods":[false,false],"cached_methods":[false,false],"default_ttl":true,"forwarded_values":[{"cookies":[{"whitelisted_names":true}],"headers":true,"query_string_cache_keys":true}],"function_association":[],"grpc_config":true,"lambda_function_association":[],"max_ttl":true,"trusted_key_groups":true,"trusted_signers":true}],"domain_name":true,"etag":true,"hosted_zone_id":true,"id":true,"in_progress_validation_batches":true,"last_modified_time":true,"logging_config":[],"ordered_cache_behavior":[],"origin":[{"custom_header":[],"custom_origin_config":[{"origin_ssl_protocols":[false]}],"origin_shield":[],"s3_origin_config":[],"vpc_origin_config":[]}],"origin_group":[],"restrictions":[{"geo_restriction":[{"locations":true}]}],"status":true,"tags_all":true,"trusted_key_groups":true,"trusted_signers":true,"viewer_certificate":[{}]},"before_sensitive":false,"after_sensitive":{"custom_error_response":[],"default_cache_behavior":[{"allowed_methods":[false,false],"cached_methods":[false,false],"forwarded_values":[{"cookies":[{"whitelisted_names":[]}],"headers":[],"query_string_cache_keys":[]}],"function_association":[],"grpc_config":[],"lambda_function_association":[],"trusted_key_groups":[],"trusted_signers":[]}],"logging_config":[],"ordered_cache_behavior":[],"origin":[{"custom_header":[],"custom_origin_config":[{"origin_ssl_protocols":[false]}],"origin_shield":[],"s3_origin_config":[],"vpc_origin_config":[]}],"origin_group":[],"restrictions":[{"geo_restriction":[{"locations":[]}]}],"tags_all":{},"trusted_key_groups":[],"trusted_signers":[],"viewer_certificate":[{}]}}},{"address":"aws_default_security_group.good_default_sg","mode":"managed","type":"aws_default_security_group","name":"good_default_sg","provider_name":"registry.terraform.io/hashicorp/aws","change":{"actions":["create"],"before":null,"after":{"revoke_rules_on_delete":false,"tags":null,"vpc_id":"vpc-12345678"},"after_unknown":{"arn":true,"description":true,"egress":true,"id":true,"ingress":true,"name":true,"name_prefix":true,"owner_id":true,"tags_all":true},"before_sensitive":false,"after_sensitive":{"egress":[],"ingress":[],"tags_all":{}}}},{"address":"aws_lb_listener.good_http","mode":"managed","type":"aws_lb_listener","name":"good_http","provider_name":"registry.terraform.io/hashicorp/aws","change":{"actions":["create"],"before":null,"after":{"alpn_policy":null,"certificate_arn":null,"default_action":[{"authenticate_cognito":[],"authenticate_oidc":[],"fixed_response":[],"forward":[],"redirect":[{"host":"#{host}","path":"/#{path}","port":"443","protocol":"HTTPS","query":"#{query}","status_code":"HTTP_301"}],"target_group_arn":null,"type":"redirect"}],"load_balancer_arn":"arn:aws:elasticloadbalancing:ap-south-1:123456789012:loadbalancer/app/good-alb/1234567890","port":80,"protocol":"HTTP","tags":null,"timeouts":null},"after_unknown":{"arn":true,"default_action":[{"authenticate_cognito":[],"authenticate_oidc":[],"fixed_response":[],"forward":[],"order":true,"redirect":[{}]}],"id":true,"mutual_authentication":true,"routing_http_request_x_amzn_mtls_clientcert_header_name":true,"routing_http_request_x_amzn_mtls_clientcert_issuer_header_name":true,"routing_http_request_x_amzn_mtls_clientcert_leaf_header_name":true,"routing_http_request_x_amzn_mtls_clientcert_serial_number_header_name":true,"routing_http_request_x_amzn_mtls_clientcert_subject_header_name":true,"routing_http_request_x_amzn_mtls_clientcert_validity_header_name":true,"routing_http_request_x_amzn_tls_cipher_suite_header_name":true,"routing_http_request_x_amzn_tls_version_header_name":true,"routing_http_response_access_control_allow_credentials_header_value":true,"routing_http_response_access_control_allow_headers_header_value":true,"routing_http_response_access_control_allow_methods_header_value":true,"routing_http_response_access_control_allow_origin_header_value":true,"routing_http_response_access_control_expose_headers_header_value":true,"routing_http_response_access_control_max_age_header_value":true,"routing_http_response_content_security_policy_header_value":true,"routing_http_response_server_enabled":true,"routing_http_response_strict_transport_security_header_value":true,"routing_http_response_x_content_type_options_header_value":true,"routing_http_response_x_frame_options_header_value":true,"ssl_policy":true,"tags_all":true,"tcp_idle_timeout_seconds":true},"before_sensitive":false,"after_sensitive":{"default_action":[{"authenticate_cognito":[],"authenticate_oidc":[],"fixed_response":[],"forward":[],"redirect":[{}]}],"mutual_authentication":[],"tags_all":{}}}},{"address":"aws_network_acl_rule.good_nacl_rdp","mode":"managed","type":"aws_network_acl_rule","name":"good_nacl_rdp","provider_name":"registry.terraform.io/hashicorp/aws","change":{"actions":["create"],"before":null,"after":{"cidr_block":"0.0.0.0/0","egress":false,"from_port":3389,"icmp_code":null,"icmp_type":null,"ipv6_cidr_block":null,"network_acl_id":"acl-12345678","protocol":"tcp","rule_action":"deny","rule_number":110,"to_port":3389},"after_unknown":{"id":true},"before_sensitive":false,"after_sensitive":{}}},{"address":"aws_network_acl_rule.good_nacl_ssh","mode":"managed","type":"aws_network_acl_rule","name":"good_nacl_ssh","provider_name":"registry.terraform.io/hashicorp/aws","change":{"actions":["create"],"before":null,"after":{"cidr_block":"0.0.0.0/0","egress":false,"from_port":22,"icmp_code":null,"icmp_type":null,"ipv6_cidr_block":null,"network_acl_id":"acl-12345678","protocol":"tcp","rule_action":"deny","rule_number":100,"to_port":22},"after_unknown":{"id":true},"before_sensitive":false,"after_sensitive":{}}},{"address":"aws_security_group.good_sg","mode":"managed","type":"aws_security_group","name":"good_sg","provider_name":"registry.terraform.io/hashicorp/aws","change":{"actions":["create"],"before":null,"after":{"description":"Managed by Terraform","ingress":[{"cidr_blocks":["10.0.0.0/8"],"description":"","from_port":22,"ipv6_cidr_blocks":[],"prefix_list_ids":[],"protocol":"tcp","security_groups":[],"self":false,"to_port":22},{"cidr_blocks":["10.0.0.0/8"],"description":"","from_port":3306,"ipv6_cidr_blocks":[],"prefix_list_ids":[],"protocol":"tcp","security_groups":[],"self":false,"to_port":3306},{"cidr_blocks":["10.0.0.0/8"],"description":"","from_port":3389,"ipv6_cidr_blocks":[],"prefix_list_ids":[],"protocol":"tcp","security_groups":[],"self":false,"to_port":3389}],"name":"good-sg","revoke_rules_on_delete":false,"tags":null,"timeouts":null,"vpc_id":"vpc-12345678"},"after_unknown":{"arn":true,"egress":true,"id":true,"ingress":[{"cidr_blocks":[false],"ipv6_cidr_blocks":[],"prefix_list_ids":[],"security_groups":[]},{"cidr_blocks":[false],"ipv6_cidr_blocks":[],"prefix_list_ids":[],"security_groups":[]},{"cidr_blocks":[false],"ipv6_cidr_blocks":[],"prefix_list_ids":[],"security_groups":[]}],"name_prefix":true,"owner_id":true,"tags_all":true},"before_sensitive":false,"after_sensitive":{"egress":[],"ingress":[{"cidr_blocks":[false],"ipv6_cidr_blocks":[],"prefix_list_ids":[],"security_groups":[]},{"cidr_blocks":[false],"ipv6_cidr_blocks":[],"prefix_list_ids":[],"security_groups":[]},{"cidr_blocks":[false],"ipv6_cidr_blocks":[],"prefix_list_ids":[],"security_groups":[]}],"tags_all":{}}}},{"address":"aws_vpc_endpoint.dynamodb","mode":"managed","type":"aws_vpc_endpoint","name":"dynamodb","provider_name":"registry.terraform.io/hashicorp/aws","change":{"actions":["create"],"before":null,"after":{"auto_accept":null,"resource_configuration_arn":null,"service_name":"com.amazonaws.ap-south-1.dynamodb","service_network_arn":null,"tags":null,"timeouts":null,"vpc_endpoint_type":"Gateway","vpc_id":"vpc-12345678"},"after_unknown":{"arn":true,"cidr_blocks":true,"dns_entry":true,"dns_options":true,"id":true,"ip_address_type":true,"network_interface_ids":true,"owner_id":true,"policy":true,"prefix_list_id":true,"private_dns_enabled":true,"requester_managed":true,"route_table_ids":true,"security_group_ids":true,"service_region":true,"state":true,"subnet_configuration":true,"subnet_ids":true,"tags_all":true},"before_sensitive":false,"after_sensitive":{"cidr_blocks":[],"dns_entry":[],"dns_options":[],"network_interface_ids":[],"route_table_ids":[],"security_group_ids":[],"subnet_configuration":[],"subnet_ids":[],"tags_all":{}}}},{"address":"aws_vpc_endpoint.kms","mode":"managed","type":"aws_vpc_endpoint","name":"kms","provider_name":"registry.terraform.io/hashicorp/aws","change":{"actions":["create"],"before":null,"after":{"auto_accept":null,"private_dns_enabled":true,"resource_configuration_arn":null,"service_name":"com.amazonaws.ap-south-1.kms","service_network_arn":null,"tags":null,"timeouts":null,"vpc_endpoint_type":"Interface","vpc_id":"vpc-12345678"},"after_unknown":{"arn":true,"cidr_blocks":true,"dns_entry":true,"dns_options":true,"id":true,"ip_address_type":true,"network_interface_ids":true,"owner_id":true,"policy":true,"prefix_list_id":true,"requester_managed":true,"route_table_ids":true,"security_group_ids":true,"service_region":true,"state":true,"subnet_configuration":true,"subnet_ids":true,"tags_all":true},"before_sensitive":false,"after_sensitive":{"cidr_blocks":[],"dns_entry":[],"dns_options":[],"network_interface_ids":[],"route_table_ids":[],"security_group_ids":[],"subnet_configuration":[],"subnet_ids":[],"tags_all":{}}}},{"address":"aws_vpc_endpoint.s3","mode":"managed","type":"aws_vpc_endpoint","name":"s3","provider_name":"registry.terraform.io/hashicorp/aws","change":{"actions":["create"],"before":null,"after":{"auto_accept":null,"resource_configuration_arn":null,"service_name":"com.amazonaws.ap-south-1.s3","service_network_arn":null,"tags":null,"timeouts":null,"vpc_endpoint_type":"Gateway","vpc_id":"vpc-12345678"},"after_unknown":{"arn":true,"cidr_blocks":true,"dns_entry":true,"dns_options":true,"id":true,"ip_address_type":true,"network_interface_ids":true,"owner_id":true,"policy":true,"prefix_list_id":true,"private_dns_enabled":true,"requester_managed":true,"route_table_ids":true,"security_group_ids":true,"service_region":true,"state":true,"subnet_configuration":true,"subnet_ids":true,"tags_all":true},"before_sensitive":false,"after_sensitive":{"cidr_blocks":[],"dns_entry":[],"dns_options":[],"network_interface_ids":[],"route_table_ids":[],"security_group_ids":[],"subnet_configuration":[],"subnet_ids":[],"tags_all":{}}}},{"address":"aws_vpc_endpoint.secretsmanager","mode":"managed","type":"aws_vpc_endpoint","name":"secretsmanager","provider_name":"registry.terraform.io/hashicorp/aws","change":{"actions":["create"],"before":null,"after":{"auto_accept":null,"private_dns_enabled":true,"resource_configuration_arn":null,"service_name":"com.amazonaws.ap-south-1.secretsmanager","service_network_arn":null,"tags":null,"timeouts":null,"vpc_endpoint_type":"Interface","vpc_id":"vpc-12345678"},"after_unknown":{"arn":true,"cidr_blocks":true,"dns_entry":true,"dns_options":true,"id":true,"ip_address_type":true,"network_interface_ids":true,"owner_id":true,"policy":true,"prefix_list_id":true,"requester_managed":true,"route_table_ids":true,"security_group_ids":true,"service_region":true,"state":true,"subnet_configuration":true,"subnet_ids":true,"tags_all":true},"before_sensitive":false,"after_sensitive":{"cidr_blocks":[],"dns_entry":[],"dns_options":[],"network_interface_ids":[],"route_table_ids":[],"security_group_ids":[],"subnet_configuration":[],"subnet_ids":[],"tags_all":{}}}}],"configuration":{"provider_config":{"aws":{"name":"aws","full_name":"registry.terraform.io/hashicorp/aws","version_constraint":"~\u003e 5.0","expressions":{"region":{"constant_value":"ap-south-1"}}}},"root_module":{"resources":[{"address":"aws_api_gateway_method_settings.good_settings","mode":"managed","type":"aws_api_gateway_method_settings","name":"good_settings","provider_config_key":"aws","expressions":{"method_path":{"constant_value":"*/*"},"rest_api_id":{"references":["aws_api_gateway_rest_api.good_api.id","aws_api_gateway_rest_api.good_api"]},"settings":[{"logging_level":{"constant_value":"ERROR"}}],"stage_name":{"references":["aws_api_gateway_stage.good_stage.stage_name","aws_api_gateway_stage.good_stage"]}},"schema_version":0},{"address":"aws_api_gateway_rest_api.good_api","mode":"managed","type":"aws_api_gateway_rest_api","name":"good_api","provider_config_key":"aws","expressions":{"name":{"constant_value":"good-api"}},"schema_version":0},{"address":"aws_api_gateway_stage.good_stage","mode":"managed","type":"aws_api_gateway_stage","name":"good_stage","provider_config_key":"aws","expressions":{"deployment_id":{"constant_value":"d-12345678"},"rest_api_id":{"references":["aws_api_gateway_rest_api.good_api.id","aws_api_gateway_rest_api.good_api"]},"stage_name":{"constant_value":"prod"}},"schema_version":0},{"address":"aws_cloudfront_distribution.good_cf","mode":"managed","type":"aws_cloudfront_distribution","name":"good_cf","provider_config_key":"aws","expressions":{"default_cache_behavior":[{"allowed_methods":{"constant_value":["GET","HEAD"]},"cached_methods":{"constant_value":["GET","HEAD"]},"forwarded_values":[{"cookies":[{"forward":{"constant_value":"none"}}],"query_string":{"constant_value":false}}],"target_origin_id":{"constant_value":"good-origin"},"viewer_protocol_policy":{"constant_value":"redirect-to-https"}}],"enabled":{"constant_value":true},"origin":[{"custom_origin_config":[{"http_port":{"constant_value":80},"https_port":{"constant_value":443},"origin_protocol_policy":{"constant_value":"https-only"},"origin_ssl_protocols":{"constant_value":["TLSv1.2"]}}],"domain_name":{"constant_value":"example.com"},"origin_id":{"constant_value":"good-origin"}}],"restrictions":[{"geo_restriction":[{"restriction_type":{"constant_value":"none"}}]}],"viewer_certificate":[{"acm_certificate_arn":{"constant_value":"arn:aws:acm:us-east-1:123456789012:certificate/abc-123"},"minimum_protocol_version":{"constant_value":"TLSv1.2_2021"},"ssl_support_method":{"constant_value":"sni-only"}}]},"schema_version":1},{"address":"aws_default_security_group.good_default_sg","mode":"managed","type":"aws_default_security_group","name":"good_default_sg","provider_config_key":"aws","expressions":{"vpc_id":{"constant_value":"vpc-12345678"}},"schema_version":1},{"address":"aws_lb_listener.good_http","mode":"managed","type":"aws_lb_listener","name":"good_http","provider_config_key":"aws","expressions":{"default_action":[{"redirect":[{"port":{"constant_value":"443"},"protocol":{"constant_value":"HTTPS"},"status_code":{"constant_value":"HTTP_301"}}],"type":{"constant_value":"redirect"}}],"load_balancer_arn":{"constant_value":"arn:aws:elasticloadbalancing:ap-south-1:123456789012:loadbalancer/app/good-alb/1234567890"},"port":{"constant_value":80},"protocol":{"constant_value":"HTTP"}},"schema_version":0},{"address":"aws_network_acl_rule.good_nacl_rdp","mode":"managed","type":"aws_network_acl_rule","name":"good_nacl_rdp","provider_config_key":"aws","expressions":{"cidr_block":{"constant_value":"0.0.0.0/0"},"egress":{"constant_value":false},"from_port":{"constant_value":3389},"network_acl_id":{"constant_value":"acl-12345678"},"protocol":{"constant_value":"tcp"},"rule_action":{"constant_value":"deny"},"rule_number":{"constant_value":110},"to_port":{"constant_value":3389}},"schema_version":0},{"address":"aws_network_acl_rule.good_nacl_ssh","mode":"managed","type":"aws_network_acl_rule","name":"good_nacl_ssh","provider_config_key":"aws","expressions":{"cidr_block":{"constant_value":"0.0.0.0/0"},"egress":{"constant_value":false},"from_port":{"constant_value":22},"network_acl_id":{"constant_value":"acl-12345678"},"protocol":{"constant_value":"tcp"},"rule_action":{"constant_value":"deny"},"rule_number":{"constant_value":100},"to_port":{"constant_value":22}},"schema_version":0},{"address":"aws_security_group.good_sg","mode":"managed","type":"aws_security_group","name":"good_sg","provider_config_key":"aws","expressions":{"ingress":{"constant_value":[{"cidr_blocks":["10.0.0.0/8"],"description":null,"from_port":22,"ipv6_cidr_blocks":null,"prefix_list_ids":null,"protocol":"tcp","security_groups":null,"self":null,"to_port":22},{"cidr_blocks":["10.0.0.0/8"],"description":null,"from_port":3389,"ipv6_cidr_blocks":null,"prefix_list_ids":null,"protocol":"tcp","security_groups":null,"self":null,"to_port":3389},{"cidr_blocks":["10.0.0.0/8"],"description":null,"from_port":3306,"ipv6_cidr_blocks":null,"prefix_list_ids":null,"protocol":"tcp","security_groups":null,"self":null,"to_port":3306}]},"name":{"constant_value":"good-sg"},"vpc_id":{"constant_value":"vpc-12345678"}},"schema_version":1},{"address":"aws_vpc_endpoint.dynamodb","mode":"managed","type":"aws_vpc_endpoint","name":"dynamodb","provider_config_key":"aws","expressions":{"service_name":{"constant_value":"com.amazonaws.ap-south-1.dynamodb"},"vpc_endpoint_type":{"constant_value":"Gateway"},"vpc_id":{"constant_value":"vpc-12345678"}},"schema_version":0},{"address":"aws_vpc_endpoint.kms","mode":"managed","type":"aws_vpc_endpoint","name":"kms","provider_config_key":"aws","expressions":{"private_dns_enabled":{"constant_value":true},"service_name":{"constant_value":"com.amazonaws.ap-south-1.kms"},"vpc_endpoint_type":{"constant_value":"Interface"},"vpc_id":{"constant_value":"vpc-12345678"}},"schema_version":0},{"address":"aws_vpc_endpoint.s3","mode":"managed","type":"aws_vpc_endpoint","name":"s3","provider_config_key":"aws","expressions":{"service_name":{"constant_value":"com.amazonaws.ap-south-1.s3"},"vpc_endpoint_type":{"constant_value":"Gateway"},"vpc_id":{"constant_value":"vpc-12345678"}},"schema_version":0},{"address":"aws_vpc_endpoint.secretsmanager","mode":"managed","type":"aws_vpc_endpoint","name":"secretsmanager","provider_config_key":"aws","expressions":{"private_dns_enabled":{"constant_value":true},"service_name":{"constant_value":"com.amazonaws.ap-south-1.secretsmanager"},"vpc_endpoint_type":{"constant_value":"Interface"},"vpc_id":{"constant_value":"vpc-12345678"}},"schema_version":0}]}},"relevant_attributes":[{"resource":"aws_api_gateway_rest_api.good_api","attribute":["id"]},{"resource":"aws_api_gateway_stage.good_stage","attribute":["stage_name"]}],"timestamp":"2026-07-17T10:31:36Z","applyable":true,"complete":true,"errored":false}