Main

1# Intentionally non-compliant fixture — DO NOT deploy, DO NOT sanitize.
2# Exercises: rds_not_public must still fire when a CLOSING brace appears in a
3# comment, a string, and a heredoc body ahead of the offending attribute.
4# A `}` in those positions is not a block delimiter; treating it as one truncated
5# the resource body before `publicly_accessible = true` and reported zero
6# violations. Keep every stray "}" below — removing them defeats the guard.
7resource "aws_db_instance" "bad" {
8  storage_encrypted = true
9  # capacity review } pending
10  identifier        = "primary } db"
11  description       = <<EOT
12  a closing } brace inside heredoc body
13EOT
14  publicly_accessible = true
15}