Policy Setting: AWS > VPC > Network ACL > Ingress Rules > Approved

resource "turbot_policy_setting" "aws_vpc_network_acl_ingress_rules_approved" {
  resource = turbot_policy_pack.main.id
  type     = "tmod:@turbot/aws-vpc-security#/policy/types/networkAclIngressRulesApproved"
  note     = "AWS CIS v3.0.0 - Controls: 5.1"
  value    = "Check: Approved"
  # value    = "Enforce: Delete unapproved"
}