terraform { required_providers { vault = { source = "hashicorp/vault" version = "5.12.0" } } backend "s3" { key = "vault/terraform.tfstate" } }