Policy Packs
Deny AWS EC2 Instances with Unapproved AMIs or Publisher Accounts

Policy Setting: AWS > EC2 > Permissions > Lockdown > Instance > Image > AMI IDs

Policies

This policy setting is dependent on the following policy types:

Source

resource "turbot_policy_setting" "aws_ec2_permissions_lockdown_instance_image_ami_ids" {
resource = turbot_policy_pack.main.id
type = "tmod:@turbot/aws-ec2#/policy/types/ec2PermissionsLockdownInstanceImageAmiIds"
# Insert your AMI IDs below
value = <<-EOT
- "ami-12345678"
- "ami-87654321"
EOT
}