Security

1# Intentionally non-compliant fixture — DO NOT deploy, DO NOT sanitize.
2# Exercises: no_wildcard_iam failure path (Allow Action "*" on Resource "*").
3resource "aws_iam_policy" "bad" {
4  name = "bad-wildcard"
5  policy = jsonencode({
6    Version = "2012-10-17"
7    Statement = [
8      {
9        Effect   = "Allow"
10        Action   = "*"
11        Resource = "*"
12      }
13    ]
14  })
15}