Policy Setting: AWS > IAM > Role > Policy > Trusted Access

resource "turbot_policy_setting" "aws_iam_role_policy_trusted_access" {
  resource = turbot_policy_pack.main.id
  type     = "tmod:@turbot/aws-iam#/policy/types/rolePolicyTrustedAccess"
  value    = "Check: Trusted Access"
  # value    = "Enforce: Revoke untrusted access"
}