README

step-functions-state-machine-logging-enabled.sentinel

Conversion Quality

Good

Why this is Good

This policy is still a single-resource planned-value check, but it relies on a nested block (logging_configuration) and an allowlist of valid levels. tfpolicy can express that clearly with core::try() and a small local allowlist.

Key translation notes

• Nested map access becomes direct block access through attrs.logging_configuration[0].level
• The allowed log levels carry over directly into the tfpolicy version

Limitations encountered

This relies on the provider exposing logging_configuration in the expected block/list shape. Otherwise, the enforcement intent maps cleanly.