Repository: opentofu/opentofu
File: internal/backend/remote-state/s3/backend.go (Go)

Code before:
				Optional:    true,
				Description: "A custom endpoint for the IAM API. Use `endpoints.iam` instead",
				Deprecated:  true,
			},
			"sts_endpoint": {
				Type:        cty.String,
				Optional:    true,
				Description: "A custom endpoint for the STS API. Use `endpoints.sts` instead",
				Deprecated:  true,
			},
			"sts_region": {
				Type:        cty.String,
				Optional:    true,
				Description: "The region where AWS STS operations will take place",
			},
			"encrypt": {
				Type:        cty.Bool,
				Optional:    true,
				Description: "Whether to enable server side encryption of the state file",
			},
			"acl": {
				Type:        cty.String,
				Optional:    true,
				Description: "Canned ACL to be applied to the state file",
			},
			"tags": {
				Type:        cty.Map(cty.String),
				Optional:    true,
				Description: "Tags to be applied to the state file",
			},
			"access_key": {
				Type:        cty.String,
				Optional:    true,
				Description: "AWS access key",
			},
			"secret_key": {
				Type:        cty.String,
				Optional:    true,
				Description: "AWS secret key",
			},
			"kms_key_id": {
				Type:        cty.String,
				Optional:    true,
				Description: "The ARN of a KMS Key to use for encrypting the state",
			},
			"dynamodb_table": {
				Type:        cty.String,
				Optional:    true,
				Description: "DynamoDB table for state locking and consistency",
			},
			"profile": {

Review comment (suggestion):
As discussed in #2960, we want to have two sets of tags: one for the state file and one for the lock file.

For the moment I would suggest to go with `statefile_tags` and `lockfile_tags`. If you have other ideas, don't hold back.
We can rename those later when will have other reviewers and will reach an agreement.

Code after:
				Type:        cty.String,
				Optional:    true,
				Description: "A custom endpoint for the IAM API. Use `endpoints.iam` instead",
				Deprecated:  true,
			},
			"sts_endpoint": {
				Type:        cty.String,
				Optional:    true,
				Description: "A custom endpoint for the STS API. Use `endpoints.sts` instead",
				Deprecated:  true,
			},
			"sts_region": {
				Type:        cty.String,
				Optional:    true,
				Description: "The region where AWS STS operations will take place",
			},
			"encrypt": {
				Type:        cty.Bool,
				Optional:    true,
				Description: "Whether to enable server side encryption of the state file",
			},
			"acl": {
				Type:        cty.String,
				Optional:    true,
				Description: "Canned ACL to be applied to the state file",
			},
			"state_tags": {
				Type:        cty.Map(cty.String),
				Optional:    true,
				Description: "Tags to be applied to the state object",
			},
			"lock_tags": {
				Type:        cty.Map(cty.String),
				Optional:    true,
				Description: "Tags to be applied to the lock object",
			},
			"access_key": {
				Type:        cty.String,
				Optional:    true,
				Description: "AWS access key",
			},
			"secret_key": {
				Type:        cty.String,
				Optional:    true,
				Description: "AWS secret key",
			},
			"kms_key_id": {
				Type:        cty.String,
				Optional:    true,
				Description: "The ARN of a KMS Key to use for encrypting the state",
			},