Added test

tests/terraform/parser/resources/plan_after_unknown/tfplan.json

@@ -0,0 +1,49 @@
+{
+  "format_version": "1.0",
+  "terraform_version": "1.1.3",
+  "planned_values": {
+    "root_module": {
+      "resources": [
+        {
+          "address": "aws_cloudfront_distribution.cloudfront",
+          "mode": "managed",
+          "type": "aws_cloudfront_distribution",
+          "name": "cloudfront",
+          "provider_name": "registry.terraform.io/hashicorp/aws",
+          "schema_version": 1,
+          "values": {
+            "logging_config": [
+              {
+                "include_cookies": false,
+                "prefix": "cloudfront"
+              }
+            ]
+          }
+        }
+      ]
+    }
+  },
+  "resource_changes": [
+    {
+      "address": "aws_cloudfront_distribution.cloudfront",
+      "mode": "managed",
+      "type": "aws_cloudfront_distribution",
+      "name": "cloudfront",
+      "provider_name": "registry.terraform.io/hashicorp/aws",
+      "change": {
+        "actions": [
+          "create"
+        ],
+        "before": null,
+        "after": null,
+        "after_unknown": {
+          "logging_config": [
+            {
+              "bucket": true
+            }
+          ]
+        }
+      }
+    }
+  ]
+}

tests/terraform/parser/test_plan_parser.py

@@ -1,9 +1,11 @@
 import os
 import unittest
 from pathlib import Path
+from unittest import mock
 
 from pytest_mock import MockerFixture
 
+from checkov.common.util.consts import TRUE_AFTER_UNKNOWN
 from checkov.terraform.plan_parser import parse_tf_plan
 from checkov.common.parsers.node import StrNode
 
@@ -80,6 +82,16 @@ def test_module_with_connected_resources(self):
         resource_attributes = next(iter(resource_definition.values()))
         self.assertTrue(resource_attributes['references_'])
 
+    @mock.patch.dict(os.environ, {"EVAL_TF_PLAN_AFTER_UNKNOWN": "True"})
+    def test_after_unknown_handling(self):
+        current_dir = os.path.dirname(os.path.realpath(__file__))
+        valid_plan_path = current_dir + "/resources/plan_after_unknown/tfplan.json"
+        tf_definition, _ = parse_tf_plan(valid_plan_path, {})
+        file_resource_definition = tf_definition['resource'][0]
+        resource_definition = next(iter(file_resource_definition.values()))
+        resource_attributes = next(iter(resource_definition.values()))
+        self.assertEqual(resource_attributes['logging_config'][0]["bucket"], [TRUE_AFTER_UNKNOWN])
+
 def test_large_file(mocker: MockerFixture):
     # given
     test_file = Path(__file__).parent / "resources/plan_encodings/tfplan_mac_utf8.json"