# Source: https://docs.snyk.io/developer-tools/snyk-cli/scan-and-maintain-projects-using-the-cli/snyk-cli-for-iac/understand-the-iac-cli-test-results/snyk-iac-cli-test-results-v.-1.938.0-and-earlier.md

# Snyk IaC CLI test results (v. 1.938.0 and earlier)

{% hint style="info" %}
The instructions in this section apply to any file format supported by Snyk Infrastructure as Code, including Terraform, Kubernetes, CloudFormation, and ARM.
{% endhint %}

Snyk analyzes your configuration file for issues and provides additional information on the issues discovered that can help you resolve them.

For example, when scanning a Terraform file, run the following command:

```
snyk iac test aws_api_gateway_stage_logging.tf
```

The results from running this command follow:

<figure><img src="https://2533899886-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F-MdwVZ6HOZriajCf5nXH%2Fuploads%2Fgit-blob-2c751fcbcea30df406d39d3045d0f8b937551ee8%2Fscreenshot-2021-09-28-at-19.58.22.png?alt=media&#x26;token=371e3708-f88e-415f-b526-12ce792634c8" alt="snyk iac test output"><figcaption><p>snyk iac test output</p></figcaption></figure>

The results include a list of issues sorted by severity, where each issue reported includes the following details:

* **Heading** - the issue that was detected, the severity of that issue, and the Snyk Policy ID for that particular issue.
* **Location** - the property path within the configuration file where the issue was identified. See the example that follows for more details.

<figure><img src="https://2533899886-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F-MdwVZ6HOZriajCf5nXH%2Fuploads%2Fgit-blob-32b0e35da67e09f5603b30c2efdcb40ceb6c26d0%2Fscreenshot-2021-09-28-at-20.00.36.png?alt=media&#x26;token=2b706ce5-6466-496d-b404-d886f55e48e0" alt="Example of property path"><figcaption><p>Example of property path</p></figcaption></figure>

The path of this issue is specified as follows:

```
resource > aws_api_gateway_stage[denied] > access_log_settings
```

The following example represents the content of the `aws_api_gateway_stage` block, called "**denied**", which lacks the `access_log_settings` field.

{% code title="aws\_api\_gateway\_stage\_logging.tf" %}

```
resource "aws_api_gateway_stage" "denied" {
  xray_tracing_enabled = true
}
```

{% endcode %}