Main

1# Intentionally non-compliant fixture — DO NOT deploy, DO NOT sanitize.
2# Exercises: rds_not_public must still fire when a lexically-irrelevant brace
3# appears in a comment or string literal ahead of the offending attribute.
4# Braces inside comments/strings/heredocs are NOT block delimiters; counting them
5# as such once hid `publicly_accessible = true` and reported this stack compliant.
6# Keep the stray "{" characters below — removing them defeats the guard.
7resource "aws_db_instance" "bad" {
8  # capacity review pending { revisit next quarter
9  identifier          = "primary { db"
10  instance_class      = "db.t3.micro"
11  publicly_accessible = true
12  storage_encrypted   = true
13}