1

{"format_version":"1.2","terraform_version":"1.15.6","planned_values":{"root_module":{"resources":[{"address":"aws_s3_bucket.good_bucket","mode":"managed","type":"aws_s3_bucket","name":"good_bucket","provider_name":"registry.terraform.io/hashicorp/aws","schema_version":0,"values":{"bucket":"good-bucket","force_destroy":false,"tags":null,"timeouts":null},"sensitive_values":{"cors_rule":[],"grant":[],"lifecycle_rule":[],"logging":[],"object_lock_configuration":[],"replication_configuration":[],"server_side_encryption_configuration":[],"tags_all":{},"versioning":[],"website":[]}},{"address":"aws_s3_bucket_ownership_controls.good_ownership","mode":"managed","type":"aws_s3_bucket_ownership_controls","name":"good_ownership","provider_name":"registry.terraform.io/hashicorp/aws","schema_version":0,"values":{"rule":[{"object_ownership":"BucketOwnerEnforced"}]},"sensitive_values":{"rule":[{}]}},{"address":"aws_s3_bucket_policy.good_policy","mode":"managed","type":"aws_s3_bucket_policy","name":"good_policy","provider_name":"registry.terraform.io/hashicorp/aws","schema_version":0,"values":{"policy":"{\"Statement\":[{\"Action\":\"s3:*\",\"Condition\":{\"Bool\":{\"aws:SecureTransport\":\"false\"}},\"Effect\":\"Deny\",\"Principal\":\"*\",\"Resource\":[\"arn:aws:s3:::good-bucket\",\"arn:aws:s3:::good-bucket/*\"],\"Sid\":\"DenyNonTLS\"},{\"Action\":[\"s3:GetObject\"],\"Effect\":\"Allow\",\"Principal\":{\"AWS\":\"arn:aws:iam::123456789012:role/app-role\"},\"Resource\":\"arn:aws:s3:::good-bucket/*\",\"Sid\":\"AllowScopedAccess\"}],\"Version\":\"2012-10-17\"}"},"sensitive_values":{}},{"address":"aws_s3_bucket_public_access_block.good_pab","mode":"managed","type":"aws_s3_bucket_public_access_block","name":"good_pab","provider_name":"registry.terraform.io/hashicorp/aws","schema_version":0,"values":{"block_public_acls":true,"block_public_policy":true,"ignore_public_acls":true,"restrict_public_buckets":true},"sensitive_values":{}},{"address":"aws_s3_bucket_server_side_encryption_configuration.good_sse","mode":"managed","type":"aws_s3_bucket_server_side_encryption_configuration","name":"good_sse","provider_name":"registry.terraform.io/hashicorp/aws","schema_version":0,"values":{"expected_bucket_owner":null,"rule":[{"apply_server_side_encryption_by_default":[{"kms_master_key_id":"","sse_algorithm":"aws:kms"}],"bucket_key_enabled":null}]},"sensitive_values":{"rule":[{"apply_server_side_encryption_by_default":[{}]}]}}]}},"resource_changes":[{"address":"aws_s3_bucket.good_bucket","mode":"managed","type":"aws_s3_bucket","name":"good_bucket","provider_name":"registry.terraform.io/hashicorp/aws","change":{"actions":["create"],"before":null,"after":{"bucket":"good-bucket","force_destroy":false,"tags":null,"timeouts":null},"after_unknown":{"acceleration_status":true,"acl":true,"arn":true,"bucket_domain_name":true,"bucket_prefix":true,"bucket_regional_domain_name":true,"cors_rule":true,"grant":true,"hosted_zone_id":true,"id":true,"lifecycle_rule":true,"logging":true,"object_lock_configuration":true,"object_lock_enabled":true,"policy":true,"region":true,"replication_configuration":true,"request_payer":true,"server_side_encryption_configuration":true,"tags_all":true,"versioning":true,"website":true,"website_domain":true,"website_endpoint":true},"before_sensitive":false,"after_sensitive":{"cors_rule":[],"grant":[],"lifecycle_rule":[],"logging":[],"object_lock_configuration":[],"replication_configuration":[],"server_side_encryption_configuration":[],"tags_all":{},"versioning":[],"website":[]}}},{"address":"aws_s3_bucket_ownership_controls.good_ownership","mode":"managed","type":"aws_s3_bucket_ownership_controls","name":"good_ownership","provider_name":"registry.terraform.io/hashicorp/aws","change":{"actions":["create"],"before":null,"after":{"rule":[{"object_ownership":"BucketOwnerEnforced"}]},"after_unknown":{"bucket":true,"id":true,"rule":[{}]},"before_sensitive":false,"after_sensitive":{"rule":[{}]}}},{"address":"aws_s3_bucket_policy.good_policy","mode":"managed","type":"aws_s3_bucket_policy","name":"good_policy","provider_name":"registry.terraform.io/hashicorp/aws","change":{"actions":["create"],"before":null,"after":{"policy":"{\"Statement\":[{\"Action\":\"s3:*\",\"Condition\":{\"Bool\":{\"aws:SecureTransport\":\"false\"}},\"Effect\":\"Deny\",\"Principal\":\"*\",\"Resource\":[\"arn:aws:s3:::good-bucket\",\"arn:aws:s3:::good-bucket/*\"],\"Sid\":\"DenyNonTLS\"},{\"Action\":[\"s3:GetObject\"],\"Effect\":\"Allow\",\"Principal\":{\"AWS\":\"arn:aws:iam::123456789012:role/app-role\"},\"Resource\":\"arn:aws:s3:::good-bucket/*\",\"Sid\":\"AllowScopedAccess\"}],\"Version\":\"2012-10-17\"}"},"after_unknown":{"bucket":true,"id":true},"before_sensitive":false,"after_sensitive":{}}},{"address":"aws_s3_bucket_public_access_block.good_pab","mode":"managed","type":"aws_s3_bucket_public_access_block","name":"good_pab","provider_name":"registry.terraform.io/hashicorp/aws","change":{"actions":["create"],"before":null,"after":{"block_public_acls":true,"block_public_policy":true,"ignore_public_acls":true,"restrict_public_buckets":true},"after_unknown":{"bucket":true,"id":true},"before_sensitive":false,"after_sensitive":{}}},{"address":"aws_s3_bucket_server_side_encryption_configuration.good_sse","mode":"managed","type":"aws_s3_bucket_server_side_encryption_configuration","name":"good_sse","provider_name":"registry.terraform.io/hashicorp/aws","change":{"actions":["create"],"before":null,"after":{"expected_bucket_owner":null,"rule":[{"apply_server_side_encryption_by_default":[{"kms_master_key_id":"","sse_algorithm":"aws:kms"}],"bucket_key_enabled":null}]},"after_unknown":{"bucket":true,"id":true,"rule":[{"apply_server_side_encryption_by_default":[{}]}]},"before_sensitive":false,"after_sensitive":{"rule":[{"apply_server_side_encryption_by_default":[{}]}]}}}],"configuration":{"provider_config":{"aws":{"name":"aws","full_name":"registry.terraform.io/hashicorp/aws","version_constraint":"~\u003e 5.0","expressions":{"region":{"constant_value":"ap-south-1"}}}},"root_module":{"resources":[{"address":"aws_s3_bucket.good_bucket","mode":"managed","type":"aws_s3_bucket","name":"good_bucket","provider_config_key":"aws","expressions":{"bucket":{"constant_value":"good-bucket"}},"schema_version":0},{"address":"aws_s3_bucket_ownership_controls.good_ownership","mode":"managed","type":"aws_s3_bucket_ownership_controls","name":"good_ownership","provider_config_key":"aws","expressions":{"bucket":{"references":["aws_s3_bucket.good_bucket.id","aws_s3_bucket.good_bucket"]},"rule":[{"object_ownership":{"constant_value":"BucketOwnerEnforced"}}]},"schema_version":0},{"address":"aws_s3_bucket_policy.good_policy","mode":"managed","type":"aws_s3_bucket_policy","name":"good_policy","provider_config_key":"aws","expressions":{"bucket":{"references":["aws_s3_bucket.good_bucket.id","aws_s3_bucket.good_bucket"]},"policy":{}},"schema_version":0},{"address":"aws_s3_bucket_public_access_block.good_pab","mode":"managed","type":"aws_s3_bucket_public_access_block","name":"good_pab","provider_config_key":"aws","expressions":{"block_public_acls":{"constant_value":true},"block_public_policy":{"constant_value":true},"bucket":{"references":["aws_s3_bucket.good_bucket.id","aws_s3_bucket.good_bucket"]},"ignore_public_acls":{"constant_value":true},"restrict_public_buckets":{"constant_value":true}},"schema_version":0},{"address":"aws_s3_bucket_server_side_encryption_configuration.good_sse","mode":"managed","type":"aws_s3_bucket_server_side_encryption_configuration","name":"good_sse","provider_config_key":"aws","expressions":{"bucket":{"references":["aws_s3_bucket.good_bucket.id","aws_s3_bucket.good_bucket"]},"rule":[{"apply_server_side_encryption_by_default":[{"sse_algorithm":{"constant_value":"aws:kms"}}]}]},"schema_version":0}]}},"relevant_attributes":[{"resource":"aws_s3_bucket.good_bucket","attribute":["id"]}],"timestamp":"2026-07-16T12:45:43Z","applyable":true,"complete":true,"errored":false}