# fail
# ruleid: gcp-dataflow-job-encrypted-with-cmk
resource "google_dataflow_job" "fail" {
  name              = "dataflow-job"
  template_gcs_path = "gs://my-bucket/templates/template_file"
  temp_gcs_location = "gs://my-bucket/tmp_dir"
  parameters = {
    foo = "bar"
    baz = "qux"
  }
}

# ok: gcp-dataflow-job-encrypted-with-cmk
resource "google_dataflow_job" "pass" {
  name              = "dataflow-job"
  template_gcs_path = "gs://my-bucket/templates/template_file"
  temp_gcs_location = "gs://my-bucket/tmp_dir"
  parameters = {
    foo = "bar"
    baz = "qux"
  }
  kms_key_name = "SecretSquirrel"
}