Dynamic block for Terraform AWS ALB access_logs

Describe the bug When using dynamic blocks to enable access_logs for AWS ALB checkov is marking the check CKV_AWS_91 as failed.

To Reproduce Steps to reproduce the behavior:

1. Surround access_log bock with “dynamic”
2. Run checkov
3. Test for CKV_AWS_91 will fail

Expected behavior Test for CKV_AWS_91 will pass

Desktop (please complete the following information):

• OS: MacOs Big Sur
• Checkov Version [1.0.675]

Additional context

  dynamic "access_logs" {
    for_each = module.s3_bucket
    content {
      bucket  = access_logs.value.bucket.id
      prefix  = "${var.environment}-public"
      enabled = true
    }
}

[schosterbarak]

@tronxd had an idea on how to solve a similar issue. @tronxd @nimrodkor let’s talk somewhere this week. Maybe I can take this one.

[ngocketit]

Looks like Checkov doesn’t work at all with dynamic bocks, not just the one in this example. Could someone please confirm?