Policy Setting: AWS > EC2 > Instance > Approved > Image > Publishers

resource "turbot_policy_setting" "aws_ec2_instance_approved_image_publishers" {
  resource = turbot_policy_pack.main.id
  type     = "tmod:@turbot/aws-ec2#/policy/types/instanceApprovedImagePublishers"
  # Insert your Publisher Account IDs below
  value = <<-EOT
    - "123456789012"
    - "987654321098"
    EOT
  # Allow all images with `amazon` ImageOwnerAlias and all local images
  # value    = <<-EOT
  #   - "amazon"
  #   - "local"
  #   EOT
}