Policy Setting: AWS > KMS > Key > Policy Statements > Approved

resource "turbot_policy_setting" "aws_kms_key_policy_statements_approved" {
  resource = turbot_policy_pack.main.id
  type     = "tmod:@turbot/aws-kms#/policy/types/keyPolicyStatementsApproved"
  value    = "Check: Approved"
  # value    = "Enforce: Delete unapproved"
}