fix(query): fix fp for s3_bucket_logging_disabled

assets/queries/terraform/aws/s3_bucket_logging_disabled/query.rego

@@ -8,6 +8,7 @@ CxPolicy[result] {
 
     not common_lib.valid_key(s3, "logging")  # version before TF AWS 4.0
     not tf_lib.has_target_resource(bucketName, "aws_s3_bucket_logging") # version after TF AWS 4.0
+    not is_logging_target(bucketName) 
 
     result := {
         "documentId": input.document[i].id,
@@ -38,3 +39,9 @@ CxPolicy[result] {
         "searchLine": common_lib.build_search_line(["module", name], []),
     }
 }
+
+is_logging_target(bucketName) {
+  some name
+  logging := input.document[i].resource.aws_s3_bucket_logging[name]
+  logging.target_bucket == sprintf("${aws_s3_bucket.%s.id}", [bucketName])
+}

assets/queries/terraform/aws/s3_bucket_logging_disabled/test/negative4.tf

@@ -0,0 +1,14 @@
+resource "aws_s3_bucket" "attachments_bucket" {
+  bucket = "${local.env_app_name}-attachments"
+}
+
+resource "aws_s3_bucket" "log_bucket" {
+  bucket = "${local.env_app_name}-attachments-logs"
+}
+
+resource "aws_s3_bucket_logging" "logging" {
+  bucket = aws_s3_bucket.attachments_bucket.id
+
+  target_bucket = aws_s3_bucket.log_bucket.id
+  target_prefix = "log/"
+}