opa-terraform-troubleshooting

bad_bucket_tfstate.json

{
  "format_version": "0.1",
  "terraform_version": "0.12.2",
  "planned_values": {
    "root_module": {
      "resources": [
        {
          "address": "aws_s3_bucket.bad_bucket",
          "mode": "managed",
          "type": "aws_s3_bucket",
          "name": "bad_bucket",
          "provider_name": "aws",
          "schema_version": 0,
          "values": {
            "acl": "private",
            "bucket": "kmcquade-opa-no-encryption-test",
            "bucket_prefix": null,
            "cors_rule": [],
            "force_destroy": false,
            "lifecycle_rule": [],
            "logging": [],
            "object_lock_configuration": [],
            "policy": null,
            "replication_configuration": [],
            "server_side_encryption_configuration": [],
            "tags": null,
            "website": []
          }
        }
      ]
    }
  },
  "resource_changes": [
    {
      "address": "aws_s3_bucket.bad_bucket",
      "mode": "managed",
      "type": "aws_s3_bucket",
      "name": "bad_bucket",
      "provider_name": "aws",
      "change": {
        "actions": ["create"],
        "before": null,
        "after": {
          "acl": "private",
          "bucket": "kmcquade-opa-no-encryption-test",
          "bucket_prefix": null,
          "cors_rule": [],
          "force_destroy": false,
          "lifecycle_rule": [],
          "logging": [],
          "object_lock_configuration": [],
          "policy": null,
          "replication_configuration": [],
          "server_side_encryption_configuration": [],
          "tags": null,
          "website": []
        },
        "after_unknown": {
          "acceleration_status": true,
          "arn": true,
          "bucket_domain_name": true,
          "bucket_regional_domain_name": true,
          "cors_rule": [],
          "hosted_zone_id": true,
          "id": true,
          "lifecycle_rule": [],
          "logging": [],
          "object_lock_configuration": [],
          "region": true,
          "replication_configuration": [],
          "request_payer": true,
          "server_side_encryption_configuration": [],
          "versioning": true,
          "website": [],
          "website_domain": true,
          "website_endpoint": true
        }
      }
    }
  ],
  "configuration": {
    "root_module": {
      "resources": [
        {
          "address": "aws_s3_bucket.bad_bucket",
          "mode": "managed",
          "type": "aws_s3_bucket",
          "name": "bad_bucket",
          "provider_config_key": "aws",
          "expressions": {
            "bucket": { "constant_value": "kmcquade-opa-no-encryption-test" }
          },
          "schema_version": 0
        }
      ]
    }
  }
}

good_bucket_tfstate.json

{
  "format_version": "0.1",
  "terraform_version": "0.12.2",
  "planned_values": {
    "root_module": {
      "resources": [
        {
          "address": "aws_s3_bucket.good_bucket",
          "mode": "managed",
          "type": "aws_s3_bucket",
          "name": "good_bucket",
          "provider_name": "aws",
          "schema_version": 0,
          "values": {
            "acl": "private",
            "bucket": "kmcquade-opa-with-encryption-test",
            "bucket_prefix": null,
            "cors_rule": [],
            "force_destroy": false,
            "lifecycle_rule": [],
            "logging": [],
            "object_lock_configuration": [],
            "policy": null,
            "replication_configuration": [],
            "server_side_encryption_configuration": [
              {
                "rule": [
                  {
                    "apply_server_side_encryption_by_default": [
                      { "kms_master_key_id": null, "sse_algorithm": "aws:kms" }
                    ]
                  }
                ]
              }
            ],
            "tags": null,
            "website": []
          }
        }
      ]
    }
  },
  "resource_changes": [
    {
      "address": "aws_s3_bucket.good_bucket",
      "mode": "managed",
      "type": "aws_s3_bucket",
      "name": "good_bucket",
      "provider_name": "aws",
      "change": {
        "actions": ["create"],
        "before": null,
        "after": {
          "acl": "private",
          "bucket": "kmcquade-opa-with-encryption-test",
          "bucket_prefix": null,
          "cors_rule": [],
          "force_destroy": false,
          "lifecycle_rule": [],
          "logging": [],
          "object_lock_configuration": [],
          "policy": null,
          "replication_configuration": [],
          "server_side_encryption_configuration": [
            {
              "rule": [
                {
                  "apply_server_side_encryption_by_default": [
                    { "kms_master_key_id": null, "sse_algorithm": "aws:kms" }
                  ]
                }
              ]
            }
          ],
          "tags": null,
          "website": []
        },
        "after_unknown": {
          "acceleration_status": true,
          "arn": true,
          "bucket_domain_name": true,
          "bucket_regional_domain_name": true,
          "cors_rule": [],
          "hosted_zone_id": true,
          "id": true,
          "lifecycle_rule": [],
          "logging": [],
          "object_lock_configuration": [],
          "region": true,
          "replication_configuration": [],
          "request_payer": true,
          "server_side_encryption_configuration": [
            { "rule": [{ "apply_server_side_encryption_by_default": [{}] }] }
          ],
          "versioning": true,
          "website": [],
          "website_domain": true,
          "website_endpoint": true
        }
      }
    }
  ],
  "configuration": {
    "root_module": {
      "resources": [
        {
          "address": "aws_s3_bucket.good_bucket",
          "mode": "managed",
          "type": "aws_s3_bucket",
          "name": "good_bucket",
          "provider_config_key": "aws",
          "expressions": {
            "bucket": { "constant_value": "kmcquade-opa-with-encryption-test" },
            "server_side_encryption_configuration": [
              {
                "rule": [
                  {
                    "apply_server_side_encryption_by_default": [
                      { "sse_algorithm": { "constant_value": "aws:kms" } }
                    ]
                  }
                ]
              }
            ]
          },
          "schema_version": 0
        }
      ]
    }
  }
}