{"resources":{"terraform":{"id":"terraform","name":"terraform","fields":{"block":{"name":"block","type":"\u001bterraform.block","title":"Terraform configuration block","desc":"Single block parsed from Terraform HCL, a plan, or a state file, such as a `resource`, `data`, `provider`, `module`, `variable`, `output`, or the top-level `terraform` settings block. The `type` field carries the block kind and `labels` holds its identifying labels; for resource and data blocks, `resourceType` and `resourceName` expose the two labels separately. Argument values are available raw, with variable and local references left intact, or folded into the plan/state shape, so one audit can run across HCL, plan, and state assets.","is_private":true,"provider":"go.mondoo.com/cnquery/v9/providers/terraform","is_implicit_resource":true},"blocks":{"name":"blocks","type":"\u0019\u001bterraform.block","title":"Raw HCL blocks","provider":"go.mondoo.com/cnquery/v9/providers/terraform"},"context":{"name":"context","type":"\u001bterraform.context","title":"Terraform block source context","desc":"Source location and raw configuration text of a Terraform block: the file path, the line and column range the block spans, and the exact text within that range. Useful for pointing reviewers at the precise source of a flagged block. The content is available only for HCL configuration assets, not plan or state assets, which carry no source text.","is_private":true,"provider":"go.mondoo.com/cnquery/v9/providers/terraform","is_implicit_resource":true},"datasources":{"name":"datasources","type":"\u0019\u001bterraform.block","title":"Data sources blocks","provider":"go.mondoo.com/cnquery/v9/providers/terraform"},"file":{"name":"file","type":"\u001bterraform.file","title":"Terraform configuration file (.tf or .tf.json file)","desc":"A single parsed Terraform configuration file and the top-level HCL blocks it declares (resource, data, provider, variable, module, and others). Audit the file to inspect where a configuration lives on disk and to iterate the blocks it contributes to the module. Select a file by its path, for example `terraform.file(path: \"main.tf\").blocks`.","is_private":true,"provider":"go.mondoo.com/cnquery/v9/providers/terraform","is_implicit_resource":true},"fileposition":{"name":"fileposition","type":"\u001bterraform.fileposition","title":"File position of a Terraform configuration block","desc":"Source location of an HCL block: the file path, line and column numbers, and byte offset. Used to point reviewers at the exact location of a flagged block in the original file.","provider":"go.mondoo.com/cnquery/v9/providers/terraform","is_implicit_resource":true},"files":{"name":"files","type":"\u0019\u001bterraform.file","title":"Access to individual files including .tf and .tf.json files","provider":"go.mondoo.com/cnquery/v9/providers/terraform"},"module":{"name":"module","type":"\u001bterraform.module","title":"Terraform module reference","desc":"Module invocation drawn from a Terraform configuration, useful for auditing which external modules a codebase pulls in and where they come from. The `source` field reveals the origin (a public or private registry, a local path, or a Git URL), which matters when reviewing supply-chain trust and pinning; `version` records the constraint and `dir` the on-disk directory the module expanded into. Each entry is identified by `key`, and `block` exposes the underlying HCL block with its configuration arguments.","provider":"go.mondoo.com/cnquery/v9/providers/terraform","is_implicit_resource":true},"modules":{"name":"modules","type":"\u0019\u001bterraform.module","title":"All referenced Terraform modules","provider":"go.mondoo.com/cnquery/v9/providers/terraform"},"outputs":{"name":"outputs","type":"\u0019\u001bterraform.block","title":"Output blocks","provider":"go.mondoo.com/cnquery/v9/providers/terraform"},"plan":{"name":"plan","type":"\u001bterraform.plan","title":"Terraform plan file","desc":"Parsed Terraform plan (`terraform show -json plan`), the source for auditing what a change set will do before it is applied. The `resourceChanges` describe every create, update, delete, and replace the plan proposes, so a policy can flag risky changes (a deleted database, a security group opened to the world) ahead of apply.","provider":"go.mondoo.com/cnquery/v9/providers/terraform","is_implicit_resource":true},"providers":{"name":"providers","type":"\u0019\u001bterraform.block","title":"Provider blocks","provider":"go.mondoo.com/cnquery/v9/providers/terraform"},"resources":{"name":"resources","type":"\u001bterraform.resources","title":"Terraform resource blocks","desc":"Every `resource` block declared across the parsed configuration, the source-level declaration of each managed resource before it has been planned or applied. Select a subset with `terraform.resources(resource: \"aws_instance\")` to filter by Terraform resource type, or add `name:` to also filter by the resource name, without iterating the full block list manually.","provider":"go.mondoo.com/cnquery/v9/providers/terraform","is_implicit_resource":true},"settings":{"name":"settings","type":"\u001bterraform.settings","title":"Terraform settings block","desc":"Contents of the `terraform { ... }` settings block that configures Terraform itself: the provider requirements (each with its local name, source address, and version constraint) and the state `backend` configuration. Auditing this block surfaces which provider versions a configuration pins and where its state is stored.","provider":"go.mondoo.com/cnquery/v9/providers/terraform","is_implicit_resource":true},"state":{"name":"state","type":"\u001bterraform.state","title":"Terraform state file","desc":"Parsed Terraform state file (`terraform.tfstate` or the `terraform show -json` output). Surfaces the state format version, the Terraform version that wrote it, the declared output values, the root module, a flat list of every module, and a flat list of every managed and data resource captured in state.","provider":"go.mondoo.com/cnquery/v9/providers/terraform","is_implicit_resource":true},"tfvars":{"name":"tfvars","type":"\n","title":"Variable values from .tfvars and .tfvars.json","desc":"Dictionary keyed by variable name, with each value the raw input value assigned to that variable in the `.tfvars` and `.tfvars.json` files. Values are surfaced verbatim, without resolving var.* or local.* references.","provider":"go.mondoo.com/cnquery/v9/providers/terraform"},"variables":{"name":"variables","type":"\u0019\u001bterraform.block","title":"Variable blocks","provider":"go.mondoo.com/cnquery/v9/providers/terraform"}},"title":"Terraform configuration","desc":"Parsed Terraform source for a directory: every `.tf` and `.tf.json` file, the `tfvars` and `tfvars.json` variable values, the referenced modules, and the lists of provider, data source, variable, and output blocks. Use it to write infrastructure-as-code policy against the source representation of an infrastructure tree before it has been planned or applied.","min_provider_version":"9.0.0","provider":"go.mondoo.com/cnquery/v9/providers/terraform"},"terraform.block":{"id":"terraform.block","name":"terraform.block","fields":{"argumentReferences":{"name":"argumentReferences","type":"\n","title":"Block arguments with variable and local references left unresolved (e.g. \"var.bucket_acl\"), regardless of the TerraformResolveVars feature flag","min_provider_version":"13.2.4","provider":"go.mondoo.com/cnquery/v9/providers/terraform"},"arguments":{"name":"arguments","type":"\n","title":"Block arguments","provider":"go.mondoo.com/cnquery/v9/providers/terraform"},"attributes":{"name":"attributes","type":"\n","title":"Block attributes keyed by name","desc":"Dict keyed by attribute name, where each value is a map with `value` (the evaluated argument) and `type` (its HCL type string). For the argument values on their own, use `arguments`.","provider":"go.mondoo.com/cnquery/v9/providers/terraform"},"blocks":{"name":"blocks","type":"\u0019\u001bterraform.block","title":"Child blocks","provider":"go.mondoo.com/cnquery/v9/providers/terraform"},"context":{"name":"context","type":"\u001bterraform.context","title":"Contextual info, where this resource is located and defined","min_provider_version":"13.2.4","provider":"go.mondoo.com/cnquery/v9/providers/terraform"},"end":{"name":"end","type":"\u001bterraform.fileposition","is_mandatory":true,"title":"Block end position","provider":"go.mondoo.com/cnquery/v9/providers/terraform"},"labels":{"name":"labels","type":"\u0019\u0007","is_mandatory":true,"title":"Labels that identify the block (e.g., resource type and name)","provider":"go.mondoo.com/cnquery/v9/providers/terraform"},"nameLabel":{"name":"nameLabel","type":"\u0007","title":"Block name label","provider":"go.mondoo.com/cnquery/v9/providers/terraform"},"related":{"name":"related","type":"\u0019\u001bterraform.block","title":"Related blocks","min_provider_version":"9.0.12","provider":"go.mondoo.com/cnquery/v9/providers/terraform"},"resourceName":{"name":"resourceName","type":"\u0007","title":"Terraform resource name, e.g. \"web\" in `resource \"aws_instance\" \"web\"` (mirrors terraform.state.resource.name and terraform.plan.resourceChange.name)","min_provider_version":"13.0.15","provider":"go.mondoo.com/cnquery/v9/providers/terraform"},"resourceType":{"name":"resourceType","type":"\u0007","title":"Terraform resource type, e.g. \"aws_instance\" (mirrors terraform.state.resource.type and terraform.plan.resourceChange.type)","min_provider_version":"13.0.15","provider":"go.mondoo.com/cnquery/v9/providers/terraform"},"snippet":{"name":"snippet","type":"\u0007","is_mandatory":true,"title":"Block snippet","provider":"go.mondoo.com/cnquery/v9/providers/terraform"},"start":{"name":"start","type":"\u001bterraform.fileposition","is_mandatory":true,"title":"Block start position","provider":"go.mondoo.com/cnquery/v9/providers/terraform"},"type":{"name":"type","type":"\u0007","is_mandatory":true,"title":"Block type","provider":"go.mondoo.com/cnquery/v9/providers/terraform"},"values":{"name":"values","type":"\n","title":"Arguments with child blocks folded in as lists-of-maps, mirroring the plan (change.after) and state (values) shape","min_provider_version":"13.1.2","provider":"go.mondoo.com/cnquery/v9/providers/terraform"}},"title":"Terraform configuration block","desc":"Single block parsed from Terraform HCL, a plan, or a state file, such as a `resource`, `data`, `provider`, `module`, `variable`, `output`, or the top-level `terraform` settings block. The `type` field carries the block kind and `labels` holds its identifying labels; for resource and data blocks, `resourceType` and `resourceName` expose the two labels separately. Argument values are available raw, with variable and local references left intact, or folded into the plan/state shape, so one audit can run across HCL, plan, and state assets.","private":true,"min_provider_version":"9.0.0","defaults":"type labels","context":"terraform.context","provider":"go.mondoo.com/cnquery/v9/providers/terraform"},"terraform.context":{"id":"terraform.context","name":"terraform.context","fields":{"content":{"name":"content","type":"\u0007","refs":["\"path\"","\"range\""],"title":"Raw configuration text within the block's range, read from the source file","provider":"go.mondoo.com/cnquery/v9/providers/terraform"},"path":{"name":"path","type":"\u0007","is_mandatory":true,"title":"File path of the Terraform configuration file containing the block","provider":"go.mondoo.com/cnquery/v9/providers/terraform"},"range":{"name":"range","type":"\u001e","is_mandatory":true,"title":"Line and column range within the file that the block spans","provider":"go.mondoo.com/cnquery/v9/providers/terraform"}},"title":"Terraform block source context","desc":"Source location and raw configuration text of a Terraform block: the file path, the line and column range the block spans, and the exact text within that range. Useful for pointing reviewers at the precise source of a flagged block. The content is available only for HCL configuration assets, not plan or state assets, which carry no source text.","private":true,"min_provider_version":"13.2.4","defaults":"path range content","provider":"go.mondoo.com/cnquery/v9/providers/terraform"},"terraform.file":{"id":"terraform.file","name":"terraform.file","fields":{"blocks":{"name":"blocks","type":"\u0019\u001bterraform.block","title":"All blocks within the file","provider":"go.mondoo.com/cnquery/v9/providers/terraform"},"path":{"name":"path","type":"\u0007","is_mandatory":true,"title":"Path to the Terraform configuration file on disk","provider":"go.mondoo.com/cnquery/v9/providers/terraform"}},"title":"Terraform configuration file (.tf or .tf.json file)","desc":"A single parsed Terraform configuration file and the top-level HCL blocks it declares (resource, data, provider, variable, module, and others). Audit the file to inspect where a configuration lives on disk and to iterate the blocks it contributes to the module. Select a file by its path, for example `terraform.file(path: \"main.tf\").blocks`.","private":true,"min_provider_version":"9.0.0","defaults":"path","provider":"go.mondoo.com/cnquery/v9/providers/terraform"},"terraform.fileposition":{"id":"terraform.fileposition","name":"terraform.fileposition","fields":{"byte":{"name":"byte","type":"\u0005","is_mandatory":true,"title":"Byte offset of the position from the start of the file","provider":"go.mondoo.com/cnquery/v9/providers/terraform"},"column":{"name":"column","type":"\u0005","is_mandatory":true,"title":"Column of the block","provider":"go.mondoo.com/cnquery/v9/providers/terraform"},"line":{"name":"line","type":"\u0005","is_mandatory":true,"title":"Line of the block","provider":"go.mondoo.com/cnquery/v9/providers/terraform"},"path":{"name":"path","type":"\u0007","is_mandatory":true,"title":"File path to the Terraform configuration file","provider":"go.mondoo.com/cnquery/v9/providers/terraform"}},"title":"File position of a Terraform configuration block","desc":"Source location of an HCL block: the file path, line and column numbers, and byte offset. Used to point reviewers at the exact location of a flagged block in the original file.","min_provider_version":"9.0.0","provider":"go.mondoo.com/cnquery/v9/providers/terraform"},"terraform.module":{"id":"terraform.module","name":"terraform.module","fields":{"block":{"name":"block","type":"\u001bterraform.block","title":"Block (including the configuration)","provider":"go.mondoo.com/cnquery/v9/providers/terraform"},"dir":{"name":"dir","type":"\u0007","is_mandatory":true,"title":"Path to the directory where the module is stored","provider":"go.mondoo.com/cnquery/v9/providers/terraform"},"key":{"name":"key","type":"\u0007","is_mandatory":true,"title":"Unique identifier for the module","provider":"go.mondoo.com/cnquery/v9/providers/terraform"},"source":{"name":"source","type":"\u0007","is_mandatory":true,"title":"Source from which the module was loaded","provider":"go.mondoo.com/cnquery/v9/providers/terraform"},"version":{"name":"version","type":"\u0007","is_mandatory":true,"title":"Module version","provider":"go.mondoo.com/cnquery/v9/providers/terraform"}},"title":"Terraform module reference","desc":"Module invocation drawn from a Terraform configuration, useful for auditing which external modules a codebase pulls in and where they come from. The `source` field reveals the origin (a public or private registry, a local path, or a Git URL), which matters when reviewing supply-chain trust and pinning; `version` records the constraint and `dir` the on-disk directory the module expanded into. Each entry is identified by `key`, and `block` exposes the underlying HCL block with its configuration arguments.","min_provider_version":"9.0.0","defaults":"key source","provider":"go.mondoo.com/cnquery/v9/providers/terraform"},"terraform.plan":{"id":"terraform.plan","name":"terraform.plan","fields":{"applyable":{"name":"applyable","type":"\u0004","is_mandatory":true,"title":"Whether `apply` is valid for the plan","min_provider_version":"11.1.0","provider":"go.mondoo.com/cnquery/v9/providers/terraform"},"configuration":{"name":"configuration","type":"\u001bterraform.plan.configuration","title":"Terraform plan configuration","desc":"Configuration section of a plan: the per-provider configuration entries and the resource configuration belonging to the root module, the shape Terraform was about to apply.","provider":"go.mondoo.com/cnquery/v9/providers/terraform","is_implicit_resource":true},"errored":{"name":"errored","type":"\u0004","is_mandatory":true,"title":"Whether the plan errored","min_provider_version":"11.1.0","provider":"go.mondoo.com/cnquery/v9/providers/terraform"},"formatVersion":{"name":"formatVersion","type":"\u0007","is_mandatory":true,"title":"Terraform plan format version","provider":"go.mondoo.com/cnquery/v9/providers/terraform"},"proposedChange":{"name":"proposedChange","type":"\u001bterraform.plan.proposedChange","title":"Terraform plan proposed change","desc":"The actions Terraform will apply to a resource (create, read, update, delete, or no-op) with the before and after states. `beforeSensitive` and `afterSensitive` mark which attributes Terraform redacts as sensitive, and `replacePaths` identifies the attribute changes that force the resource to be replaced rather than updated in place.","provider":"go.mondoo.com/cnquery/v9/providers/terraform","is_implicit_resource":true},"resourceChange":{"name":"resourceChange","type":"\u001bterraform.plan.resourceChange","title":"Terraform plan resource change","desc":"A single proposed change in a plan, selected by `address`. `change` describes the actions and the before and after values, `mode` distinguishes managed resources from data sources, `actionReason` gives the human-readable reason for the change, and `previousAddress` is set when the resource was moved. This is the primary record for auditing what a plan will do to an individual resource.","provider":"go.mondoo.com/cnquery/v9/providers/terraform","is_implicit_resource":true},"resourceChanges":{"name":"resourceChanges","type":"\u0019\u001bterraform.plan.resourceChange","title":"Resource changes","provider":"go.mondoo.com/cnquery/v9/providers/terraform"},"terraformVersion":{"name":"terraformVersion","type":"\u0007","is_mandatory":true,"title":"Generated by Terraform version","provider":"go.mondoo.com/cnquery/v9/providers/terraform"},"variable":{"name":"variable","type":"\u001bterraform.plan.variable","title":"Terraform plan variable","desc":"A single variable supplied to the plan, selected by `name`. The `value` preserves the original Terraform value shape.","provider":"go.mondoo.com/cnquery/v9/providers/terraform","is_implicit_resource":true},"variables":{"name":"variables","type":"\u0019\u001bterraform.plan.variable","is_mandatory":true,"title":"Variables used to generate the Terraform plan","min_provider_version":"11.1.0","provider":"go.mondoo.com/cnquery/v9/providers/terraform"}},"title":"Terraform plan file","desc":"Parsed Terraform plan (`terraform show -json plan`), the source for auditing what a change set will do before it is applied. The `resourceChanges` describe every create, update, delete, and replace the plan proposes, so a policy can flag risky changes (a deleted database, a security group opened to the world) ahead of apply.","min_provider_version":"9.0.0","provider":"go.mondoo.com/cnquery/v9/providers/terraform"},"terraform.plan.configuration":{"id":"terraform.plan.configuration","name":"terraform.plan.configuration","fields":{"providerConfig":{"name":"providerConfig","type":"\u0019\n","title":"Provider configuration","provider":"go.mondoo.com/cnquery/v9/providers/terraform"},"resources":{"name":"resources","type":"\u0019\n","title":"Root module resource configuration","provider":"go.mondoo.com/cnquery/v9/providers/terraform"}},"title":"Terraform plan configuration","desc":"Configuration section of a plan: the per-provider configuration entries and the resource configuration belonging to the root module, the shape Terraform was about to apply.","min_provider_version":"9.0.0","provider":"go.mondoo.com/cnquery/v9/providers/terraform"},"terraform.plan.proposedChange":{"id":"terraform.plan.proposedChange","name":"terraform.plan.proposedChange","fields":{"actions":{"name":"actions","type":"\u0019\u0007","is_mandatory":true,"title":"Actions Terraform will apply to the resource (e.g., \"create\", \"read\", \"update\", \"delete\", \"no-op\")","provider":"go.mondoo.com/cnquery/v9/providers/terraform"},"address":{"name":"address","type":"\u0007","is_mandatory":true,"title":"Resource address","provider":"go.mondoo.com/cnquery/v9/providers/terraform"},"after":{"name":"after","type":"\n","is_mandatory":true,"title":"Resource after values","provider":"go.mondoo.com/cnquery/v9/providers/terraform"},"afterSensitive":{"name":"afterSensitive","type":"\n","is_mandatory":true,"title":"Attributes redacted as sensitive in the after state","desc":"Keyed by attribute name; a true value marks an attribute Terraform treats as sensitive and hides in plan output.","provider":"go.mondoo.com/cnquery/v9/providers/terraform"},"afterUnknown":{"name":"afterUnknown","type":"\n","is_mandatory":true,"title":"Attributes whose values are not known until apply","desc":"Keyed by attribute name, mirroring the structure of `after`. A true value (or nested structure) marks an attribute Terraform cannot resolve until the change is applied.","provider":"go.mondoo.com/cnquery/v9/providers/terraform"},"before":{"name":"before","type":"\n","is_mandatory":true,"title":"Resource before values","provider":"go.mondoo.com/cnquery/v9/providers/terraform"},"beforeSensitive":{"name":"beforeSensitive","type":"\n","is_mandatory":true,"title":"Attributes redacted as sensitive in the before state","desc":"Keyed by attribute name; a true value marks an attribute Terraform treats as sensitive and hides in plan output.","provider":"go.mondoo.com/cnquery/v9/providers/terraform"},"replacePaths":{"name":"replacePaths","type":"\n","is_mandatory":true,"title":"Attribute paths whose change forces the resource to be replaced","desc":"Each entry is a path (a list of attribute names and indexes) identifying an attribute whose modification requires destroying and recreating the resource rather than updating it in place.","provider":"go.mondoo.com/cnquery/v9/providers/terraform"}},"title":"Terraform plan proposed change","desc":"The actions Terraform will apply to a resource (create, read, update, delete, or no-op) with the before and after states. `beforeSensitive` and `afterSensitive` mark which attributes Terraform redacts as sensitive, and `replacePaths` identifies the attribute changes that force the resource to be replaced rather than updated in place.","min_provider_version":"9.0.0","defaults":"actions after","provider":"go.mondoo.com/cnquery/v9/providers/terraform"},"terraform.plan.resourceChange":{"id":"terraform.plan.resourceChange","name":"terraform.plan.resourceChange","fields":{"actionReason":{"name":"actionReason","type":"\u0007","is_mandatory":true,"title":"Resource action reason","provider":"go.mondoo.com/cnquery/v9/providers/terraform"},"address":{"name":"address","type":"\u0007","is_mandatory":true,"title":"Resource address","provider":"go.mondoo.com/cnquery/v9/providers/terraform"},"change":{"name":"change","type":"\u001bterraform.plan.proposedChange","is_mandatory":true,"title":"Change to make to this object","provider":"go.mondoo.com/cnquery/v9/providers/terraform"},"deposed":{"name":"deposed","type":"\u0007","is_mandatory":true,"title":"Whether the action applies to a deposed object","provider":"go.mondoo.com/cnquery/v9/providers/terraform"},"mode":{"name":"mode","type":"\u0007","is_mandatory":true,"title":"Resource mode","provider":"go.mondoo.com/cnquery/v9/providers/terraform"},"moduleAddress":{"name":"moduleAddress","type":"\u0007","is_mandatory":true,"title":"Resource module address","provider":"go.mondoo.com/cnquery/v9/providers/terraform"},"name":{"name":"name","type":"\u0007","is_mandatory":true,"title":"Resource name","provider":"go.mondoo.com/cnquery/v9/providers/terraform"},"previousAddress":{"name":"previousAddress","type":"\u0007","is_mandatory":true,"title":"Resource previous address","provider":"go.mondoo.com/cnquery/v9/providers/terraform"},"providerName":{"name":"providerName","type":"\u0007","is_mandatory":true,"title":"Provider name","provider":"go.mondoo.com/cnquery/v9/providers/terraform"},"type":{"name":"type","type":"\u0007","is_mandatory":true,"title":"Resource type","provider":"go.mondoo.com/cnquery/v9/providers/terraform"}},"title":"Terraform plan resource change","desc":"A single proposed change in a plan, selected by `address`. `change` describes the actions and the before and after values, `mode` distinguishes managed resources from data sources, `actionReason` gives the human-readable reason for the change, and `previousAddress` is set when the resource was moved. This is the primary record for auditing what a plan will do to an individual resource.","min_provider_version":"9.0.0","defaults":"address","provider":"go.mondoo.com/cnquery/v9/providers/terraform"},"terraform.plan.variable":{"id":"terraform.plan.variable","name":"terraform.plan.variable","fields":{"name":{"name":"name","type":"\u0007","is_mandatory":true,"title":"Variable name","provider":"go.mondoo.com/cnquery/v9/providers/terraform"},"value":{"name":"value","type":"\n","is_mandatory":true,"title":"Variable value","provider":"go.mondoo.com/cnquery/v9/providers/terraform"}},"title":"Terraform plan variable","desc":"A single variable supplied to the plan, selected by `name`. The `value` preserves the original Terraform value shape.","min_provider_version":"11.1.0","defaults":"name value","provider":"go.mondoo.com/cnquery/v9/providers/terraform"},"terraform.resources":{"id":"terraform.resources","name":"terraform.resources","fields":{"list":{"name":"list","type":"\u0019\u001bterraform.block","provider":"go.mondoo.com/cnquery/v9/providers/terraform"}},"init":{"args":[{"name":"resource","type":"\u0001","optional":true},{"name":"name","type":"\u0001","optional":true}]},"list_type":"\u001bterraform.block","title":"Terraform resource blocks","desc":"Every `resource` block declared across the parsed configuration, the source-level declaration of each managed resource before it has been planned or applied. Select a subset with `terraform.resources(resource: \"aws_instance\")` to filter by Terraform resource type, or add `name:` to also filter by the resource name, without iterating the full block list manually.","min_provider_version":"11.1.50","provider":"go.mondoo.com/cnquery/v9/providers/terraform"},"terraform.settings":{"id":"terraform.settings","name":"terraform.settings","fields":{"backend":{"name":"backend","type":"\n","is_mandatory":true,"title":"Backend configuration","desc":"Attributes of the state `backend \"\u003ctype\u003e\" { ... }` block as a dict. The `type` key holds the backend type label (for example `s3`, `gcs`, `azurerm`, `remote`, or `local`); the remaining keys are the backend-specific settings as written (for example `bucket`, `key`, and `region` for an S3 backend). Empty when no backend is configured.","min_provider_version":"9.0.5","provider":"go.mondoo.com/cnquery/v9/providers/terraform"},"block":{"name":"block","type":"\u001bterraform.block","is_mandatory":true,"title":"The terraform { ... } block holding required_providers, backend, and version constraints","provider":"go.mondoo.com/cnquery/v9/providers/terraform"},"requiredProvider":{"name":"requiredProvider","type":"\u001bterraform.settings.requiredProvider","title":"Terraform required provider","is_private":true,"provider":"go.mondoo.com/cnquery/v9/providers/terraform","is_implicit_resource":true},"requiredProviders":{"name":"requiredProviders","type":"\u0019\u001bterraform.settings.requiredProvider","is_mandatory":true,"title":"Provider requirements","provider":"go.mondoo.com/cnquery/v9/providers/terraform"}},"title":"Terraform settings block","desc":"Contents of the `terraform { ... }` settings block that configures Terraform itself: the provider requirements (each with its local name, source address, and version constraint) and the state `backend` configuration. Auditing this block surfaces which provider versions a configuration pins and where its state is stored.","min_provider_version":"9.0.0","provider":"go.mondoo.com/cnquery/v9/providers/terraform"},"terraform.settings.requiredProvider":{"id":"terraform.settings.requiredProvider","name":"terraform.settings.requiredProvider","fields":{"name":{"name":"name","type":"\u0007","is_mandatory":true,"title":"Local name of the provider (e.g., \"aws\", \"google\")","provider":"go.mondoo.com/cnquery/v9/providers/terraform"},"source":{"name":"source","type":"\u0007","is_mandatory":true,"title":"Source address (e.g., \"hashicorp/aws\")","provider":"go.mondoo.com/cnquery/v9/providers/terraform"},"version":{"name":"version","type":"\u0007","is_mandatory":true,"title":"Version constraint (e.g., \"~\u003e 3.74\", \"\u003e= 4.0\")","provider":"go.mondoo.com/cnquery/v9/providers/terraform"}},"title":"Terraform required provider","private":true,"min_provider_version":"11.1.92","defaults":"name source version","provider":"go.mondoo.com/cnquery/v9/providers/terraform"},"terraform.state":{"id":"terraform.state","name":"terraform.state","fields":{"formatVersion":{"name":"formatVersion","type":"\u0007","is_mandatory":true,"title":"Terraform state format version","provider":"go.mondoo.com/cnquery/v9/providers/terraform"},"module":{"name":"module","type":"\u001bterraform.state.module","title":"Terraform state module","desc":"Single module captured in state, identified by its absolute module `address`. The `resources` field holds the infrastructure objects this module owns, and `childModules` walks into nested modules.","provider":"go.mondoo.com/cnquery/v9/providers/terraform","is_implicit_resource":true},"modules":{"name":"modules","type":"\u0019\u001bterraform.state.module","title":"Flat list of all modules","provider":"go.mondoo.com/cnquery/v9/providers/terraform"},"output":{"name":"output","type":"\u001bterraform.state.output","title":"Terraform state output value","desc":"Single declared output, identified by `identifier`: the resolved value, its type definition, and a `sensitive` flag indicating whether Terraform should redact the value in CLI output.","provider":"go.mondoo.com/cnquery/v9/providers/terraform","is_implicit_resource":true},"outputs":{"name":"outputs","type":"\u0019\u001bterraform.state.output","title":"Output values","provider":"go.mondoo.com/cnquery/v9/providers/terraform"},"resource":{"name":"resource","type":"\u001bterraform.state.resource","title":"Terraform state resource","desc":"Single managed or data resource as captured in state: absolute address, mode (managed vs data), Terraform resource type and name, the responsible provider, the schema version of the `values` payload, the attribute values themselves, the dependency list, the `tainted` flag, and any `deposedKey`. Use it to write policies that match the post-apply shape of infrastructure.","provider":"go.mondoo.com/cnquery/v9/providers/terraform","is_implicit_resource":true},"resources":{"name":"resources","type":"\u0019\u001bterraform.state.resource","title":"A flat list of all resources across all modules","provider":"go.mondoo.com/cnquery/v9/providers/terraform"},"rootModule":{"name":"rootModule","type":"\u001bterraform.state.module","title":"Root module which consists resources defined in .tf files","provider":"go.mondoo.com/cnquery/v9/providers/terraform"},"terraformVersion":{"name":"terraformVersion","type":"\u0007","is_mandatory":true,"title":"Generated by Terraform version","provider":"go.mondoo.com/cnquery/v9/providers/terraform"}},"title":"Terraform state file","desc":"Parsed Terraform state file (`terraform.tfstate` or the `terraform show -json` output). Surfaces the state format version, the Terraform version that wrote it, the declared output values, the root module, a flat list of every module, and a flat list of every managed and data resource captured in state.","min_provider_version":"9.0.0","provider":"go.mondoo.com/cnquery/v9/providers/terraform"},"terraform.state.module":{"id":"terraform.state.module","name":"terraform.state.module","fields":{"address":{"name":"address","type":"\u0007","is_mandatory":true,"title":"Module identifier address","provider":"go.mondoo.com/cnquery/v9/providers/terraform"},"childModules":{"name":"childModules","type":"\u0019\u001bterraform.state.module","title":"Child modules called from this module","provider":"go.mondoo.com/cnquery/v9/providers/terraform"},"resources":{"name":"resources","type":"\u0019\u001bterraform.state.resource","title":"Resources that describe infrastructure objects","provider":"go.mondoo.com/cnquery/v9/providers/terraform"}},"init":{"args":[{"name":"identifier","type":"\u0007"}]},"title":"Terraform state module","desc":"Single module captured in state, identified by its absolute module `address`. The `resources` field holds the infrastructure objects this module owns, and `childModules` walks into nested modules.","min_provider_version":"9.0.0","defaults":"address","provider":"go.mondoo.com/cnquery/v9/providers/terraform"},"terraform.state.output":{"id":"terraform.state.output","name":"terraform.state.output","fields":{"identifier":{"name":"identifier","type":"\u0007","is_mandatory":true,"title":"Output identifier","provider":"go.mondoo.com/cnquery/v9/providers/terraform"},"sensitive":{"name":"sensitive","type":"\u0004","is_mandatory":true,"title":"Whether the output is sensitive","provider":"go.mondoo.com/cnquery/v9/providers/terraform"},"type":{"name":"type","type":"\n","title":"Output value type","provider":"go.mondoo.com/cnquery/v9/providers/terraform"},"value":{"name":"value","type":"\n","title":"Output value","provider":"go.mondoo.com/cnquery/v9/providers/terraform"}},"init":{"args":[{"name":"identifier","type":"\u0007"}]},"title":"Terraform state output value","desc":"Single declared output, identified by `identifier`: the resolved value, its type definition, and a `sensitive` flag indicating whether Terraform should redact the value in CLI output.","min_provider_version":"9.0.0","defaults":"identifier","provider":"go.mondoo.com/cnquery/v9/providers/terraform"},"terraform.state.resource":{"id":"terraform.state.resource","name":"terraform.state.resource","fields":{"address":{"name":"address","type":"\u0007","is_mandatory":true,"title":"Address is the absolute resource address","provider":"go.mondoo.com/cnquery/v9/providers/terraform"},"dependsOn":{"name":"dependsOn","type":"\u0019\u0007","is_mandatory":true,"title":"List of the resource's dependencies","provider":"go.mondoo.com/cnquery/v9/providers/terraform"},"deposedKey":{"name":"deposedKey","type":"\u0007","is_mandatory":true,"title":"Whether the resource is deposed in the Terraform state","provider":"go.mondoo.com/cnquery/v9/providers/terraform"},"mode":{"name":"mode","type":"\u0007","is_mandatory":true,"title":"Resource mode: \"managed\" (created/updated by Terraform) or \"data\" (read-only data source)","provider":"go.mondoo.com/cnquery/v9/providers/terraform"},"name":{"name":"name","type":"\u0007","is_mandatory":true,"title":"Resource name","provider":"go.mondoo.com/cnquery/v9/providers/terraform"},"providerName":{"name":"providerName","type":"\u0007","is_mandatory":true,"title":"Terraform provider","provider":"go.mondoo.com/cnquery/v9/providers/terraform"},"schemaVersion":{"name":"schemaVersion","type":"\u0005","is_mandatory":true,"title":"Which version of the resource type schema the `values` property conforms to","provider":"go.mondoo.com/cnquery/v9/providers/terraform"},"tainted":{"name":"tainted","type":"\u0004","is_mandatory":true,"title":"Whether the resource is marked tainted (will be destroyed and recreated on the next apply)","provider":"go.mondoo.com/cnquery/v9/providers/terraform"},"type":{"name":"type","type":"\u0007","is_mandatory":true,"title":"Resource type","provider":"go.mondoo.com/cnquery/v9/providers/terraform"},"values":{"name":"values","type":"\n","is_mandatory":true,"title":"Attribute values","provider":"go.mondoo.com/cnquery/v9/providers/terraform"}},"title":"Terraform state resource","desc":"Single managed or data resource as captured in state: absolute address, mode (managed vs data), Terraform resource type and name, the responsible provider, the schema version of the `values` payload, the attribute values themselves, the dependency list, the `tainted` flag, and any `deposedKey`. Use it to write policies that match the post-apply shape of infrastructure.","min_provider_version":"9.0.0","defaults":"type name","provider":"go.mondoo.com/cnquery/v9/providers/terraform"}}}