terraform-aws-annotated-reference
Pass
Audited by Gen Agent Trust Hub on Feb 17, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION] (SAFE): The validation script
lib/validate_template.shutilizes standard Unix utilities such asgrep,jq,sed, andwcto analyze local Terraform files. It does not useevalor perform dynamic command execution based on untrusted inputs. - [CREDENTIALS_UNSAFE] (SAFE): The HCL example in
references/nested_block_example.mdincludes AWS ARNs and resource IDs. However, these are clearly identified as dummy values (e.g., AWS account ID123456789012and generic subnet/security group IDs) used for illustrative purposes in documentation. - [DATA_EXFILTRATION] (SAFE): No network operations, exfiltration patterns, or attempts to access sensitive system files (like SSH keys or AWS credentials) were identified in the provided files.
Audit Metadata