Database

1# Intentionally non-compliant fixture — DO NOT deploy, DO NOT sanitize.
2# Exercises: rds_not_public + rds_encryption_at_rest failure paths.
3resource "aws_db_instance" "bad" {
4  identifier          = "bad-db"
5  engine              = "postgres"
6  instance_class      = "db.t4g.micro"
7  allocated_storage   = 20
8  publicly_accessible = true
9  storage_encrypted   = false
10}