provider.tf

provider "aws" {
  region  = "yourawsregion"
  profile = "yourawsprofile"
}

terraform {
  // you can comment the encryption block out if you dont want opentofu encryption for your terraform state
  encryption {
    key_provider "aws_kms" "basic" {
      kms_key_id = "YOUR AWS KMS ID"
      region     = "yourawsregion"
      key_spec   = "AES_256"
    }

    method "aes_gcm" "method" {
      keys = key_provider.aws_kms.basic
    }

    state {
      method   = method.aes_gcm.method
      enforced = true
    }
    plan {
      method   = method.aes_gcm.method
      enforced = true
    }
  }
  required_version = ">= 1.8.4"
  required_providers {
    aws = {
      source  = "hashicorp/aws"
      version = "5.71.0"
    }
    acme = {
      source  = "vancluever/acme"
      version = "2.24.1"
    }
  }

  backend "s3" {
    bucket = var.bucket_name
    key    = "terraform.tfstate"
    region = "yourawsregion"
  }
}