Policy Packs
Deny AWS EC2 Instances with Unapproved AMIs or Publisher Accounts

Policy Setting: AWS > EC2 > Permissions > Lockdown > Instance > Image > Publishers

Policies

This policy setting is dependent on the following policy types:

Source

resource "turbot_policy_setting" "aws_ec2_permissions_lockdown_instance_image_publishers" {
resource = turbot_policy_pack.main.id
type = "tmod:@turbot/aws-ec2#/policy/types/ec2PermissionsLockdownInstanceImagePublishers"
# Insert your Publisher Account IDs below
value = <<-EOT
- "123456789012"
- "987654321098"
EOT
# Allow all images with `amazon` ImageOwnerAlias and all local images
# value = <<-EOT
# - "amazon"
# - "local"
# EOT
}