Policy Setting: AWS > S3 > Bucket > Encryption in Transit

resource "turbot_policy_setting" "aws_s3_encryption_in_transit" {
  resource = turbot_policy_pack.main.id
  type     = "tmod:@turbot/aws-s3#/policy/types/encryptionInTransit"
  note     = "AWS CIS v3.0.0 - Control: 2.1.1"
  value    = "Check: Enabled"
  # value    = "Enforce: Enabled"
}