terraform {
  encryption {
    key_provider "pbkdf2" "basic" {
      passphrase    = var.passphrase
      key_length    = local.key_length
      iterations    = 200000
      hash_function = "sha512"
      salt_length   = 12
    }
    method "aes_gcm" "example" {
      keys = key_provider.pbkdf2.basic
    }
    method "unencrypted" "fallback" {}
    state {
      method = method.unencrypted.fallback
      fallback {
        method = method.aes_gcm.example
      }
    }
    plan {
      method = method.unencrypted.fallback
      fallback {
        method = method.aes_gcm.example
      }
    }
  }
}