Policy Setting: AWS > IAM > Policy > Statements > Approved > Rules

resource "turbot_policy_setting" "aws_iam_statements_approved_rules" {
  resource = turbot_policy_pack.main.id
  type     = "tmod:@turbot/aws-iam#/policy/types/statementsApprovedRules"
  note     = "AWS CIS v3.0.0 - Controls: 1.16"
  value    = <<-EOT
    REJECT $.Effect:"Allow" $.Action:"*"  $.Resource:"*"
    APPROVE *
    EOT
}