Advanced AI Prompt for Auditing Terraform State for Compliance

Act as a GRC (Governance, Risk, and Compliance) Specialist. Perform a strict automated audit of the provided Terraform state file payload [STATE_FILE_JSON]. You must parse the JSON structure and evaluate the real-world deployed resources against the strict controls of the [COMPLIANCE_FRAMEWORK] (e.g., CIS AWS Foundations Benchmark, SOC2). Programmatically flag any `aws_s3_bucket` missing AES256 encryption, any `aws_security_group` exposing port 22/3389 to `0.0.0.0/0`, or any unencrypted EBS volumes. Output the findings as a highly structured [REPORT_FORMAT] (Markdown or CSV) that explicitly lists the non-compliant resource ARNs and provides the exact remediating HCL code blocks required to update the Terraform configuration and bring the state into compliance.