{"resources":{"terraform":{"id":"terraform","name":"terraform","fields":{"asset":{"name":"asset","type":"\u001basset","title":"Asset this root belongs to","desc":"Platform, version, identity and labels of the asset this root describes.","provider":"go.mondoo.com/mql/providers/terraform","is_implicit_resource":true},"block":{"name":"block","type":"\u001bterraform.block","title":"Terraform configuration block","desc":"Single block parsed from Terraform HCL, a plan, or a state file, such as a `resource`, `data`, `provider`, `module`, `variable`, `output`, or the top-level `terraform` settings block. The `type` field carries the block kind and `labels` holds its identifying labels; for resource and data blocks, `resourceType` and `resourceName` expose the two labels separately. Argument values are available resolved, with variable and local references replaced by their effective values, unresolved via `argumentReferences`, or folded into the plan/state shape, so one audit can run across HCL, plan, and state assets.","is_private":true,"provider":"go.mondoo.com/mql/providers/terraform","is_implicit_resource":true},"blocks":{"name":"blocks","type":"\u0019\u001bterraform.block","title":"Raw HCL blocks","provider":"go.mondoo.com/mql/providers/terraform"},"context":{"name":"context","type":"\u001bterraform.context","title":"Terraform block source context","desc":"Source location and raw configuration text of a Terraform block: the file path, the line and column range the block spans, and the exact text within that range. Useful for pointing reviewers at the precise source of a flagged block. The content is available only for HCL configuration assets, not plan or state assets, which carry no source text.","is_private":true,"provider":"go.mondoo.com/mql/providers/terraform","is_implicit_resource":true},"datasources":{"name":"datasources","type":"\u0019\u001bterraform.block","title":"Data sources blocks","provider":"go.mondoo.com/mql/providers/terraform"},"file":{"name":"file","type":"\u001bterraform.file","title":"Terraform configuration file (.tf or .tf.json file)","desc":"A single parsed Terraform configuration file and the top-level HCL blocks it declares (resource, data, provider, variable, module, and others). Audit the file to inspect where a configuration lives on disk and to iterate the blocks it contributes to the module. Select a file by its path, for example `terraform.file(path: \"main.tf\").blocks`.","is_private":true,"provider":"go.mondoo.com/mql/providers/terraform","is_implicit_resource":true},"fileposition":{"name":"fileposition","type":"\u001bterraform.fileposition","title":"File position of a Terraform configuration block","desc":"Source location of an HCL block: the file path, line and column numbers, and byte offset. Used to point reviewers at the exact location of a flagged block in the original file.","provider":"go.mondoo.com/mql/providers/terraform","is_implicit_resource":true},"files":{"name":"files","type":"\u0019\u001bterraform.file","title":"Access to individual files including .tf and .tf.json files","provider":"go.mondoo.com/mql/providers/terraform"},"module":{"name":"module","type":"\u001bterraform.module","title":"Terraform module reference","desc":"Module invocation drawn from a Terraform configuration, useful for auditing which external modules a codebase pulls in and where they come from. The `source` field reveals the origin (a public or private registry, a local path, or a Git URL), which matters when reviewing supply-chain trust and pinning; `version` records the constraint and `dir` the on-disk directory the module expanded into. Each entry is identified by `key`, and `block` exposes the underlying HCL block with its configuration arguments.","provider":"go.mondoo.com/mql/providers/terraform","is_implicit_resource":true},"modules":{"name":"modules","type":"\u0019\u001bterraform.module","title":"All referenced Terraform modules","provider":"go.mondoo.com/mql/providers/terraform"},"outputs":{"name":"outputs","type":"\u0019\u001bterraform.block","title":"Output blocks","provider":"go.mondoo.com/mql/providers/terraform"},"plan":{"name":"plan","type":"\u001bterraform.plan","title":"Terraform plan file","desc":"Parsed Terraform plan (`terraform show -json plan`), the source for auditing what a change set will do before it is applied. The `resourceChanges` describe every create, update, delete, and replace the plan proposes, so a policy can flag risky changes (a deleted database, a security group opened to the world) ahead of apply.","provider":"go.mondoo.com/mql/providers/terraform","is_implicit_resource":true},"providers":{"name":"providers","type":"\u0019\u001bterraform.block","title":"Provider blocks","provider":"go.mondoo.com/mql/providers/terraform"},"resources":{"name":"resources","type":"\u001bterraform.resources","title":"Terraform resource blocks","desc":"Every `resource` block declared across the parsed configuration, the source-level declaration of each managed resource before it has been planned or applied. Select a subset with `terraform.resources(resource: \"aws_instance\")` to filter by Terraform resource type, or add `name:` to also filter by the resource name, without iterating the full block list manually.","provider":"go.mondoo.com/mql/providers/terraform","is_implicit_resource":true},"settings":{"name":"settings","type":"\u001bterraform.settings","title":"Terraform settings block","desc":"Contents of the `terraform { ... }` settings block that configures Terraform itself: the provider requirements (each with its local name, source address, and version constraint) and the state `backend` configuration. Auditing this block surfaces which provider versions a configuration pins and where its state is stored.","provider":"go.mondoo.com/mql/providers/terraform","is_implicit_resource":true},"state":{"name":"state","type":"\u001bterraform.state","title":"Terraform state file","desc":"Parsed Terraform state file (`terraform.tfstate` or the `terraform show -json` output). Surfaces the state format version, the Terraform version that wrote it, the declared output values, the root module, a flat list of every module, and a flat list of every managed and data resource captured in state.","provider":"go.mondoo.com/mql/providers/terraform","is_implicit_resource":true},"tfvars":{"name":"tfvars","type":"\n","title":"Variable values from .tfvars and .tfvars.json","desc":"Dictionary keyed by variable name, with each value the raw input value assigned to that variable in the `.tfvars` and `.tfvars.json` files. Values are surfaced verbatim, without resolving var.* or local.* references.","provider":"go.mondoo.com/mql/providers/terraform"},"variables":{"name":"variables","type":"\u0019\u001bterraform.block","title":"Variable blocks","provider":"go.mondoo.com/mql/providers/terraform"}},"title":"Terraform configuration","desc":"Parsed Terraform source for a directory: every `.tf` and `.tf.json` file, the `tfvars` and `tfvars.json` variable values, the referenced modules, and the lists of provider, data source, variable, and output blocks. Use it to write infrastructure-as-code policy against the source representation of an infrastructure tree before it has been planned or applied.","min_provider_version":"9.0.0","provider":"go.mondoo.com/mql/providers/terraform","root":true},"terraform.block":{"id":"terraform.block","name":"terraform.block","fields":{"argumentReferences":{"name":"argumentReferences","type":"\n","title":"Block arguments with variable and local references left unresolved (e.g. \"var.bucket_acl\")","min_provider_version":"13.2.4","provider":"go.mondoo.com/mql/providers/terraform"},"arguments":{"name":"arguments","type":"\n","title":"Block arguments","desc":"Argument values with `var.*` and `local.*` references resolved to their effective values (variable defaults overridden by .tfvars, locals evaluated from those). References that cannot be resolved statically, such as data sources and resource attributes, fall back to their reference string. For the unresolved view, use `argumentReferences`.","provider":"go.mondoo.com/mql/providers/terraform"},"attributes":{"name":"attributes","type":"\n","title":"Block attributes keyed by name","desc":"Dict keyed by attribute name, where each value is a map with `value` (the evaluated argument) and `type` (its HCL type string). For the argument values on their own, use `arguments`.","provider":"go.mondoo.com/mql/providers/terraform"},"blocks":{"name":"blocks","type":"\u0019\u001bterraform.block","title":"Child blocks","provider":"go.mondoo.com/mql/providers/terraform"},"context":{"name":"context","type":"\u001bterraform.context","title":"Contextual info, where this resource is located and defined","min_provider_version":"13.2.4","provider":"go.mondoo.com/mql/providers/terraform"},"end":{"name":"end","type":"\u001bterraform.fileposition","is_mandatory":true,"title":"Block end position","provider":"go.mondoo.com/mql/providers/terraform"},"labels":{"name":"labels","type":"\u0019\u0007","is_mandatory":true,"title":"Labels that identify the block (e.g., resource type and name)","provider":"go.mondoo.com/mql/providers/terraform"},"nameLabel":{"name":"nameLabel","type":"\u0007","title":"Block name label","provider":"go.mondoo.com/mql/providers/terraform"},"related":{"name":"related","type":"\u0019\u001bterraform.block","title":"Related blocks","min_provider_version":"9.0.12","provider":"go.mondoo.com/mql/providers/terraform"},"resourceName":{"name":"resourceName","type":"\u0007","title":"Terraform resource name, e.g. \"web\" in `resource \"aws_instance\" \"web\"` (mirrors terraform.state.resource.name and terraform.plan.resourceChange.name)","min_provider_version":"13.0.15","provider":"go.mondoo.com/mql/providers/terraform"},"resourceType":{"name":"resourceType","type":"\u0007","title":"Terraform resource type, e.g. \"aws_instance\" (mirrors terraform.state.resource.type and terraform.plan.resourceChange.type)","min_provider_version":"13.0.15","provider":"go.mondoo.com/mql/providers/terraform"},"snippet":{"name":"snippet","type":"\u0007","is_mandatory":true,"title":"Block snippet","provider":"go.mondoo.com/mql/providers/terraform"},"start":{"name":"start","type":"\u001bterraform.fileposition","is_mandatory":true,"title":"Block start position","provider":"go.mondoo.com/mql/providers/terraform"},"type":{"name":"type","type":"\u0007","is_mandatory":true,"title":"Block type","provider":"go.mondoo.com/mql/providers/terraform"},"values":{"name":"values","type":"\n","title":"Arguments with child blocks folded in as lists-of-maps, mirroring the plan (change.after) and state (values) shape","min_provider_version":"13.1.2","provider":"go.mondoo.com/mql/providers/terraform"}},"title":"Terraform configuration block","desc":"Single block parsed from Terraform HCL, a plan, or a state file, such as a `resource`, `data`, `provider`, `module`, `variable`, `output`, or the top-level `terraform` settings block. The `type` field carries the block kind and `labels` holds its identifying labels; for resource and data blocks, `resourceType` and `resourceName` expose the two labels separately. Argument values are available resolved, with variable and local references replaced by their effective values, unresolved via `argumentReferences`, or folded into the plan/state shape, so one audit can run across HCL, plan, and state assets.","private":true,"min_provider_version":"9.0.0","defaults":"type labels","context":"terraform.context","provider":"go.mondoo.com/mql/providers/terraform"},"terraform.context":{"id":"terraform.context","name":"terraform.context","fields":{"content":{"name":"content","type":"\u0007","refs":["\"path\"","\"range\""],"title":"Raw configuration text within the block's range, read from the source file","provider":"go.mondoo.com/mql/providers/terraform"},"path":{"name":"path","type":"\u0007","is_mandatory":true,"title":"File path of the Terraform configuration file containing the block","provider":"go.mondoo.com/mql/providers/terraform"},"range":{"name":"range","type":"\u001e","is_mandatory":true,"title":"Line and column range within the file that the block spans","provider":"go.mondoo.com/mql/providers/terraform"}},"title":"Terraform block source context","desc":"Source location and raw configuration text of a Terraform block: the file path, the line and column range the block spans, and the exact text within that range. Useful for pointing reviewers at the precise source of a flagged block. The content is available only for HCL configuration assets, not plan or state assets, which carry no source text.","private":true,"min_provider_version":"13.2.4","defaults":"path range content","provider":"go.mondoo.com/mql/providers/terraform"},"terraform.file":{"id":"terraform.file","name":"terraform.file","fields":{"blocks":{"name":"blocks","type":"\u0019\u001bterraform.block","title":"All blocks within the file","provider":"go.mondoo.com/mql/providers/terraform"},"path":{"name":"path","type":"\u0007","is_mandatory":true,"title":"Path to the Terraform configuration file on disk","provider":"go.mondoo.com/mql/providers/terraform"}},"title":"Terraform configuration file (.tf or .tf.json file)","desc":"A single parsed Terraform configuration file and the top-level HCL blocks it declares (resource, data, provider, variable, module, and others). Audit the file to inspect where a configuration lives on disk and to iterate the blocks it contributes to the module. Select a file by its path, for example `terraform.file(path: \"main.tf\").blocks`.","private":true,"min_provider_version":"9.0.0","defaults":"path","provider":"go.mondoo.com/mql/providers/terraform"},"terraform.fileposition":{"id":"terraform.fileposition","name":"terraform.fileposition","fields":{"byte":{"name":"byte","type":"\u0005","is_mandatory":true,"title":"Byte offset of the position from the start of the file","provider":"go.mondoo.com/mql/providers/terraform"},"column":{"name":"column","type":"\u0005","is_mandatory":true,"title":"Column of the block","provider":"go.mondoo.com/mql/providers/terraform"},"line":{"name":"line","type":"\u0005","is_mandatory":true,"title":"Line of the block","provider":"go.mondoo.com/mql/providers/terraform"},"path":{"name":"path","type":"\u0007","is_mandatory":true,"title":"File path to the Terraform configuration file","provider":"go.mondoo.com/mql/providers/terraform"}},"title":"File position of a Terraform configuration block","desc":"Source location of an HCL block: the file path, line and column numbers, and byte offset. Used to point reviewers at the exact location of a flagged block in the original file.","min_provider_version":"9.0.0","provider":"go.mondoo.com/mql/providers/terraform"},"terraform.module":{"id":"terraform.module","name":"terraform.module","fields":{"block":{"name":"block","type":"\u001bterraform.block","title":"Block (including the configuration)","provider":"go.mondoo.com/mql/providers/terraform"},"dir":{"name":"dir","type":"\u0007","is_mandatory":true,"title":"Path to the directory where the module is stored","provider":"go.mondoo.com/mql/providers/terraform"},"key":{"name":"key","type":"\u0007","is_mandatory":true,"title":"Unique identifier for the module","provider":"go.mondoo.com/mql/providers/terraform"},"source":{"name":"source","type":"\u0007","is_mandatory":true,"title":"Source from which the module was loaded","provider":"go.mondoo.com/mql/providers/terraform"},"version":{"name":"version","type":"\u0007","is_mandatory":true,"title":"Module version","provider":"go.mondoo.com/mql/providers/terraform"}},"title":"Terraform module reference","desc":"Module invocation drawn from a Terraform configuration, useful for auditing which external modules a codebase pulls in and where they come from. The `source` field reveals the origin (a public or private registry, a local path, or a Git URL), which matters when reviewing supply-chain trust and pinning; `version` records the constraint and `dir` the on-disk directory the module expanded into. Each entry is identified by `key`, and `block` exposes the underlying HCL block with its configuration arguments.","min_provider_version":"9.0.0","defaults":"key source","provider":"go.mondoo.com/mql/providers/terraform"},"terraform.plan":{"id":"terraform.plan","name":"terraform.plan","fields":{"applyable":{"name":"applyable","type":"\u0004","is_mandatory":true,"title":"Whether `apply` is valid for the plan","min_provider_version":"11.1.0","provider":"go.mondoo.com/mql/providers/terraform"},"configuration":{"name":"configuration","type":"\u001bterraform.plan.configuration","title":"Terraform plan configuration","desc":"Configuration section of a plan: the per-provider configuration entries and the resource configuration belonging to the root module, the shape Terraform was about to apply.","provider":"go.mondoo.com/mql/providers/terraform","is_implicit_resource":true},"errored":{"name":"errored","type":"\u0004","is_mandatory":true,"title":"Whether the plan errored","min_provider_version":"11.1.0","provider":"go.mondoo.com/mql/providers/terraform"},"formatVersion":{"name":"formatVersion","type":"\u0007","is_mandatory":true,"title":"Terraform plan format version","provider":"go.mondoo.com/mql/providers/terraform"},"proposedChange":{"name":"proposedChange","type":"\u001bterraform.plan.proposedChange","title":"Terraform plan proposed change","desc":"The actions Terraform will apply to a resource (create, read, update, delete, or no-op) with the before and after states. `beforeSensitive` and `afterSensitive` mark which attributes Terraform redacts as sensitive, and `replacePaths` identifies the attribute changes that force the resource to be replaced rather than updated in place.","provider":"go.mondoo.com/mql/providers/terraform","is_implicit_resource":true},"resourceChange":{"name":"resourceChange","type":"\u001bterraform.plan.resourceChange","title":"Terraform plan resource change","desc":"A single proposed change in a plan, selected by `address`. `change` describes the actions and the before and after values, `mode` distinguishes managed resources from data sources, `actionReason` gives the human-readable reason for the change, and `previousAddress` is set when the resource was moved. This is the primary record for auditing what a plan will do to an individual resource.","provider":"go.mondoo.com/mql/providers/terraform","is_implicit_resource":true},"resourceChanges":{"name":"resourceChanges","type":"\u0019\u001bterraform.plan.resourceChange","title":"Resource changes","provider":"go.mondoo.com/mql/providers/terraform"},"terraformVersion":{"name":"terraformVersion","type":"\u0007","is_mandatory":true,"title":"Generated by Terraform version","provider":"go.mondoo.com/mql/providers/terraform"},"variable":{"name":"variable","type":"\u001bterraform.plan.variable","title":"Terraform plan variable","desc":"A single variable supplied to the plan, selected by `name`. The `value` preserves the original Terraform value shape.","provider":"go.mondoo.com/mql/providers/terraform","is_implicit_resource":true},"variables":{"name":"variables","type":"\u0019\u001bterraform.plan.variable","is_mandatory":true,"title":"Variables used to generate the Terraform plan","min_provider_version":"11.1.0","provider":"go.mondoo.com/mql/providers/terraform"}},"title":"Terraform plan file","desc":"Parsed Terraform plan (`terraform show -json plan`), the source for auditing what a change set will do before it is applied. The `resourceChanges` describe every create, update, delete, and replace the plan proposes, so a policy can flag risky changes (a deleted database, a security group opened to the world) ahead of apply.","min_provider_version":"9.0.0","provider":"go.mondoo.com/mql/providers/terraform"},"terraform.plan.configuration":{"id":"terraform.plan.configuration","name":"terraform.plan.configuration","fields":{"providerConfig":{"name":"providerConfig","type":"\u0019\n","title":"Provider configuration","provider":"go.mondoo.com/mql/providers/terraform"},"resources":{"name":"resources","type":"\u0019\n","title":"Root module resource configuration","provider":"go.mondoo.com/mql/providers/terraform"}},"title":"Terraform plan configuration","desc":"Configuration section of a plan: the per-provider configuration entries and the resource configuration belonging to the root module, the shape Terraform was about to apply.","min_provider_version":"9.0.0","provider":"go.mondoo.com/mql/providers/terraform"},"terraform.plan.proposedChange":{"id":"terraform.plan.proposedChange","name":"terraform.plan.proposedChange","fields":{"actions":{"name":"actions","type":"\u0019\u0007","is_mandatory":true,"title":"Actions Terraform will apply to the resource (e.g., \"create\", \"read\", \"update\", \"delete\", \"no-op\")","provider":"go.mondoo.com/mql/providers/terraform"},"address":{"name":"address","type":"\u0007","is_mandatory":true,"title":"Resource address","provider":"go.mondoo.com/mql/providers/terraform"},"after":{"name":"after","type":"\n","is_mandatory":true,"title":"Resource after values","provider":"go.mondoo.com/mql/providers/terraform"},"afterSensitive":{"name":"afterSensitive","type":"\n","is_mandatory":true,"title":"Attributes redacted as sensitive in the after state","desc":"Keyed by attribute name; a true value marks an attribute Terraform treats as sensitive and hides in plan output.","provider":"go.mondoo.com/mql/providers/terraform"},"afterUnknown":{"name":"afterUnknown","type":"\n","is_mandatory":true,"title":"Attributes whose values are not known until apply","desc":"Keyed by attribute name, mirroring the structure of `after`. A true value (or nested structure) marks an attribute Terraform cannot resolve until the change is applied.","provider":"go.mondoo.com/mql/providers/terraform"},"before":{"name":"before","type":"\n","is_mandatory":true,"title":"Resource before values","provider":"go.mondoo.com/mql/providers/terraform"},"beforeSensitive":{"name":"beforeSensitive","type":"\n","is_mandatory":true,"title":"Attributes redacted as sensitive in the before state","desc":"Keyed by attribute name; a true value marks an attribute Terraform treats as sensitive and hides in plan output.","provider":"go.mondoo.com/mql/providers/terraform"},"replacePaths":{"name":"replacePaths","type":"\n","is_mandatory":true,"title":"Attribute paths whose change forces the resource to be replaced","desc":"Each entry is a path (a list of attribute names and indexes) identifying an attribute whose modification requires destroying and recreating the resource rather than updating it in place.","provider":"go.mondoo.com/mql/providers/terraform"}},"title":"Terraform plan proposed change","desc":"The actions Terraform will apply to a resource (create, read, update, delete, or no-op) with the before and after states. `beforeSensitive` and `afterSensitive` mark which attributes Terraform redacts as sensitive, and `replacePaths` identifies the attribute changes that force the resource to be replaced rather than updated in place.","min_provider_version":"9.0.0","defaults":"actions after","provider":"go.mondoo.com/mql/providers/terraform"},"terraform.plan.resourceChange":{"id":"terraform.plan.resourceChange","name":"terraform.plan.resourceChange","fields":{"actionReason":{"name":"actionReason","type":"\u0007","is_mandatory":true,"title":"Resource action reason","provider":"go.mondoo.com/mql/providers/terraform"},"address":{"name":"address","type":"\u0007","is_mandatory":true,"title":"Resource address","provider":"go.mondoo.com/mql/providers/terraform"},"change":{"name":"change","type":"\u001bterraform.plan.proposedChange","is_mandatory":true,"title":"Change to make to this object","provider":"go.mondoo.com/mql/providers/terraform"},"deposed":{"name":"deposed","type":"\u0007","is_mandatory":true,"title":"Whether the action applies to a deposed object","provider":"go.mondoo.com/mql/providers/terraform"},"mode":{"name":"mode","type":"\u0007","is_mandatory":true,"title":"Resource mode","provider":"go.mondoo.com/mql/providers/terraform"},"moduleAddress":{"name":"moduleAddress","type":"\u0007","is_mandatory":true,"title":"Resource module address","provider":"go.mondoo.com/mql/providers/terraform"},"name":{"name":"name","type":"\u0007","is_mandatory":true,"title":"Resource name","provider":"go.mondoo.com/mql/providers/terraform"},"previousAddress":{"name":"previousAddress","type":"\u0007","is_mandatory":true,"title":"Resource previous address","provider":"go.mondoo.com/mql/providers/terraform"},"providerName":{"name":"providerName","type":"\u0007","is_mandatory":true,"title":"Provider name","provider":"go.mondoo.com/mql/providers/terraform"},"type":{"name":"type","type":"\u0007","is_mandatory":true,"title":"Resource type","provider":"go.mondoo.com/mql/providers/terraform"}},"title":"Terraform plan resource change","desc":"A single proposed change in a plan, selected by `address`. `change` describes the actions and the before and after values, `mode` distinguishes managed resources from data sources, `actionReason` gives the human-readable reason for the change, and `previousAddress` is set when the resource was moved. This is the primary record for auditing what a plan will do to an individual resource.","min_provider_version":"9.0.0","defaults":"address","provider":"go.mondoo.com/mql/providers/terraform"},"terraform.plan.variable":{"id":"terraform.plan.variable","name":"terraform.plan.variable","fields":{"name":{"name":"name","type":"\u0007","is_mandatory":true,"title":"Variable name","provider":"go.mondoo.com/mql/providers/terraform"},"value":{"name":"value","type":"\n","is_mandatory":true,"title":"Variable value","provider":"go.mondoo.com/mql/providers/terraform"}},"title":"Terraform plan variable","desc":"A single variable supplied to the plan, selected by `name`. The `value` preserves the original Terraform value shape.","min_provider_version":"11.1.0","defaults":"name value","provider":"go.mondoo.com/mql/providers/terraform"},"terraform.resources":{"id":"terraform.resources","name":"terraform.resources","fields":{"list":{"name":"list","type":"\u0019\u001bterraform.block","provider":"go.mondoo.com/mql/providers/terraform"}},"init":{"args":[{"name":"resource","type":"\u0001","optional":true},{"name":"name","type":"\u0001","optional":true}]},"list_type":"\u001bterraform.block","title":"Terraform resource blocks","desc":"Every `resource` block declared across the parsed configuration, the source-level declaration of each managed resource before it has been planned or applied. Select a subset with `terraform.resources(resource: \"aws_instance\")` to filter by Terraform resource type, or add `name:` to also filter by the resource name, without iterating the full block list manually.","min_provider_version":"11.1.50","provider":"go.mondoo.com/mql/providers/terraform"},"terraform.settings":{"id":"terraform.settings","name":"terraform.settings","fields":{"backend":{"name":"backend","type":"\n","is_mandatory":true,"title":"Backend configuration","desc":"Attributes of the state `backend \"\u003ctype\u003e\" { ... }` block as a dict. The `type` key holds the backend type label (for example `s3`, `gcs`, `azurerm`, `remote`, or `local`); the remaining keys are the backend-specific settings as written (for example `bucket`, `key`, and `region` for an S3 backend). Empty when no backend is configured.","min_provider_version":"9.0.5","provider":"go.mondoo.com/mql/providers/terraform"},"block":{"name":"block","type":"\u001bterraform.block","is_mandatory":true,"title":"The terraform { ... } block holding required_providers, backend, and version constraints","provider":"go.mondoo.com/mql/providers/terraform"},"requiredProvider":{"name":"requiredProvider","type":"\u001bterraform.settings.requiredProvider","title":"Terraform required provider","is_private":true,"provider":"go.mondoo.com/mql/providers/terraform","is_implicit_resource":true},"requiredProviders":{"name":"requiredProviders","type":"\u0019\u001bterraform.settings.requiredProvider","is_mandatory":true,"title":"Provider requirements","provider":"go.mondoo.com/mql/providers/terraform"}},"title":"Terraform settings block","desc":"Contents of the `terraform { ... }` settings block that configures Terraform itself: the provider requirements (each with its local name, source address, and version constraint) and the state `backend` configuration. Auditing this block surfaces which provider versions a configuration pins and where its state is stored.","min_provider_version":"9.0.0","provider":"go.mondoo.com/mql/providers/terraform"},"terraform.settings.requiredProvider":{"id":"terraform.settings.requiredProvider","name":"terraform.settings.requiredProvider","fields":{"name":{"name":"name","type":"\u0007","is_mandatory":true,"title":"Local name of the provider (e.g., \"aws\", \"google\")","provider":"go.mondoo.com/mql/providers/terraform"},"source":{"name":"source","type":"\u0007","is_mandatory":true,"title":"Source address (e.g., \"hashicorp/aws\")","provider":"go.mondoo.com/mql/providers/terraform"},"version":{"name":"version","type":"\u0007","is_mandatory":true,"title":"Version constraint (e.g., \"~\u003e 3.74\", \"\u003e= 4.0\")","provider":"go.mondoo.com/mql/providers/terraform"}},"title":"Terraform required provider","private":true,"min_provider_version":"11.1.92","defaults":"name source version","provider":"go.mondoo.com/mql/providers/terraform"},"terraform.state":{"id":"terraform.state","name":"terraform.state","fields":{"formatVersion":{"name":"formatVersion","type":"\u0007","is_mandatory":true,"title":"Terraform state format version","provider":"go.mondoo.com/mql/providers/terraform"},"module":{"name":"module","type":"\u001bterraform.state.module","title":"Terraform state module","desc":"Single module captured in state, identified by its absolute module `address`. The `resources` field holds the infrastructure objects this module owns, and `childModules` walks into nested modules.","provider":"go.mondoo.com/mql/providers/terraform","is_implicit_resource":true},"modules":{"name":"modules","type":"\u0019\u001bterraform.state.module","title":"Flat list of all modules","provider":"go.mondoo.com/mql/providers/terraform"},"output":{"name":"output","type":"\u001bterraform.state.output","title":"Terraform state output value","desc":"Single declared output, identified by `identifier`: the resolved value, its type definition, and a `sensitive` flag indicating whether Terraform should redact the value in CLI output.","provider":"go.mondoo.com/mql/providers/terraform","is_implicit_resource":true},"outputs":{"name":"outputs","type":"\u0019\u001bterraform.state.output","title":"Output values","provider":"go.mondoo.com/mql/providers/terraform"},"resource":{"name":"resource","type":"\u001bterraform.state.resource","title":"Terraform state resource","desc":"Single managed or data resource as captured in state: absolute address, mode (managed vs data), Terraform resource type and name, the responsible provider, the schema version of the `values` payload, the attribute values themselves, the dependency list, the `tainted` flag, and any `deposedKey`. Use it to write policies that match the post-apply shape of infrastructure.","provider":"go.mondoo.com/mql/providers/terraform","is_implicit_resource":true},"resources":{"name":"resources","type":"\u0019\u001bterraform.state.resource","title":"A flat list of all resources across all modules","provider":"go.mondoo.com/mql/providers/terraform"},"rootModule":{"name":"rootModule","type":"\u001bterraform.state.module","title":"Root module which consists resources defined in .tf files","provider":"go.mondoo.com/mql/providers/terraform"},"terraformVersion":{"name":"terraformVersion","type":"\u0007","is_mandatory":true,"title":"Generated by Terraform version","provider":"go.mondoo.com/mql/providers/terraform"}},"title":"Terraform state file","desc":"Parsed Terraform state file (`terraform.tfstate` or the `terraform show -json` output). Surfaces the state format version, the Terraform version that wrote it, the declared output values, the root module, a flat list of every module, and a flat list of every managed and data resource captured in state.","min_provider_version":"9.0.0","provider":"go.mondoo.com/mql/providers/terraform"},"terraform.state.module":{"id":"terraform.state.module","name":"terraform.state.module","fields":{"address":{"name":"address","type":"\u0007","is_mandatory":true,"title":"Module identifier address","provider":"go.mondoo.com/mql/providers/terraform"},"childModules":{"name":"childModules","type":"\u0019\u001bterraform.state.module","title":"Child modules called from this module","provider":"go.mondoo.com/mql/providers/terraform"},"resources":{"name":"resources","type":"\u0019\u001bterraform.state.resource","title":"Resources that describe infrastructure objects","provider":"go.mondoo.com/mql/providers/terraform"}},"init":{"args":[{"name":"identifier","type":"\u0007"}]},"title":"Terraform state module","desc":"Single module captured in state, identified by its absolute module `address`. The `resources` field holds the infrastructure objects this module owns, and `childModules` walks into nested modules.","min_provider_version":"9.0.0","defaults":"address","provider":"go.mondoo.com/mql/providers/terraform"},"terraform.state.output":{"id":"terraform.state.output","name":"terraform.state.output","fields":{"identifier":{"name":"identifier","type":"\u0007","is_mandatory":true,"title":"Output identifier","provider":"go.mondoo.com/mql/providers/terraform"},"sensitive":{"name":"sensitive","type":"\u0004","is_mandatory":true,"title":"Whether the output is sensitive","provider":"go.mondoo.com/mql/providers/terraform"},"type":{"name":"type","type":"\n","title":"Output value type","provider":"go.mondoo.com/mql/providers/terraform"},"value":{"name":"value","type":"\n","title":"Output value","provider":"go.mondoo.com/mql/providers/terraform"}},"init":{"args":[{"name":"identifier","type":"\u0007"}]},"title":"Terraform state output value","desc":"Single declared output, identified by `identifier`: the resolved value, its type definition, and a `sensitive` flag indicating whether Terraform should redact the value in CLI output.","min_provider_version":"9.0.0","defaults":"identifier","provider":"go.mondoo.com/mql/providers/terraform"},"terraform.state.resource":{"id":"terraform.state.resource","name":"terraform.state.resource","fields":{"address":{"name":"address","type":"\u0007","is_mandatory":true,"title":"Address is the absolute resource address","provider":"go.mondoo.com/mql/providers/terraform"},"dependsOn":{"name":"dependsOn","type":"\u0019\u0007","is_mandatory":true,"title":"List of the resource's dependencies","provider":"go.mondoo.com/mql/providers/terraform"},"deposedKey":{"name":"deposedKey","type":"\u0007","is_mandatory":true,"title":"Whether the resource is deposed in the Terraform state","provider":"go.mondoo.com/mql/providers/terraform"},"mode":{"name":"mode","type":"\u0007","is_mandatory":true,"title":"Resource mode: \"managed\" (created/updated by Terraform) or \"data\" (read-only data source)","provider":"go.mondoo.com/mql/providers/terraform"},"name":{"name":"name","type":"\u0007","is_mandatory":true,"title":"Resource name","provider":"go.mondoo.com/mql/providers/terraform"},"providerName":{"name":"providerName","type":"\u0007","is_mandatory":true,"title":"Terraform provider","provider":"go.mondoo.com/mql/providers/terraform"},"schemaVersion":{"name":"schemaVersion","type":"\u0005","is_mandatory":true,"title":"Which version of the resource type schema the `values` property conforms to","provider":"go.mondoo.com/mql/providers/terraform"},"tainted":{"name":"tainted","type":"\u0004","is_mandatory":true,"title":"Whether the resource is marked tainted (will be destroyed and recreated on the next apply)","provider":"go.mondoo.com/mql/providers/terraform"},"type":{"name":"type","type":"\u0007","is_mandatory":true,"title":"Resource type","provider":"go.mondoo.com/mql/providers/terraform"},"values":{"name":"values","type":"\n","is_mandatory":true,"title":"Attribute values","provider":"go.mondoo.com/mql/providers/terraform"}},"title":"Terraform state resource","desc":"Single managed or data resource as captured in state: absolute address, mode (managed vs data), Terraform resource type and name, the responsible provider, the schema version of the `values` payload, the attribute values themselves, the dependency list, the `tainted` flag, and any `deposedKey`. Use it to write policies that match the post-apply shape of infrastructure.","min_provider_version":"9.0.0","defaults":"type name","provider":"go.mondoo.com/mql/providers/terraform"}},"dependencies":{"core":{"id":"go.mondoo.com/mql/providers/core","name":"core"}},"provider_roots":{"go.mondoo.com/mql/providers/terraform":"terraform"}}