# PASS — correct account name (direct literal)
provider "snowflake" {
  account_name = "delphi.us-east-1"
  role         = "PROD_ATLANTIS"
}

# FAIL — deprecated account name (direct literal)
# Note: the variable-default pattern (variable "account" { default = "orchard" } + account_name = var.account)
# is also caught because checkov.yaml has evaluate-variables: true
provider "snowflake" {
  alias        = "orchard"
  account_name = "orchard"
  role         = "PROD_ATLANTIS"
}

# FAIL — deprecated temporary account name (direct literal)
provider "snowflake" {
  alias        = "dataplatform"
  account_name = "dataplatform"
  role         = "PROD_ATLANTIS"
}