fix: fix handling of missing encryption block

config/config.go

@@ -287,6 +287,8 @@ func (remoteState *remoteStateConfigFile) toConfig() (*remote.RemoteState, error
 		}
 
 		config.Encryption = remoteStateEncryption
+	} else {
+		config.Encryption = nil
 	}
 
 	if remoteState.DisableInit != nil {

remote/remote_state.go

@@ -234,24 +234,33 @@ func (state *RemoteState) GenerateTerraformCode(terragruntOptions *options.Terra
 	config := state.Config
 
 	// Initialize the encryption config based on the key provider
-	keyProvider, ok := state.Encryption["key_provider"].(string)
-	if !ok {
-		return errors.New("key_provider not found in encryption config")
-	}
+	var encryption map[string]interface{}
+
+	switch {
+	case state.Encryption == nil:
+		terragruntOptions.Logger.Debugf("No encryption block in remote_state config")
+	case len(state.Encryption) == 0:
+		terragruntOptions.Logger.Debugf("Empty encryption block in remote_state config")
+	default:
+		keyProvider, ok := state.Encryption["key_provider"].(string)
+		if !ok {
+			return errors.New("key_provider not found in encryption config")
+		}
 
-	encryptionProvider, err := NewRemoteEncryptionKeyProvider(keyProvider)
-	if err != nil {
-		return fmt.Errorf("error creating provider: %w", err)
-	}
+		encryptionProvider, err := NewRemoteEncryptionKeyProvider(keyProvider)
+		if err != nil {
+			return fmt.Errorf("error creating provider: %w", err)
+		}
 
-	err = encryptionProvider.UnmarshalConfig(state.Encryption)
-	if err != nil {
-		return err
-	}
+		err = encryptionProvider.UnmarshalConfig(state.Encryption)
+		if err != nil {
+			return err
+		}
 
-	encryption, err := encryptionProvider.ToMap()
-	if err != nil {
-		return fmt.Errorf("error decoding struct to map: %w", err)
+		encryption, err = encryptionProvider.ToMap()
+		if err != nil {
+			return fmt.Errorf("error decoding struct to map: %w", err)
+		}
 	}
 
 	initializer, hasInitializer := remoteStateInitializers[state.Backend]