Policy Setting: AWS > Lambda > Function > Approved > Custom

resource "turbot_policy_setting" "aws_lambda_function_approved_custom" {
  resource       = turbot_policy_pack.main.id
  type           = "tmod:@turbot/aws-lambda#/policy/types/functionApprovedCustom"
  template_input = <<-EOT
    {
      item: function {
        tags: get(path: "Tags")
      }
    }
  EOT
  # Replace your list of approved tags in inputTagKeys
  template = <<-EOT
    {%- set tags = $.item.tags -%}

    {%- set inputTagKeys = ["name", "environment"] -%}

    {%- set tagsLength = tags | length -%}

    {%- set allTagsPresent = true -%}

    {%- set flag = true -%}

    {%- if tagsLength > 0 -%}

      {%- for key in inputTagKeys -%}

        {%- if flag and not key in tags -%}

          {%- set allTagsPresent = false -%}

          {%- set flag = false -%}

        {%- endif -%}

      {%- endfor -%}

    {%- endif -%}

    {%- if tagsLength > 0 and allTagsPresent -%}

      {%- set data = {
          "title": "Approved Tags",
          "result": "Approved",
          "message": "Function has approved tags"
      } -%}

    {%- elif tagsLength == 0 or not allTagsPresent -%}

      {%- set data = {
          "title": "Approved Tags",
          "result": "Not approved",
          "message": "Function does not have approved tags"
      } -%}

    {%- else -%}

      {%- set data = {
         "title": "Approved Tags",
          "result": "Skip",
          "message": "No data for function tags yet"
      } -%}

    {%- endif -%}
    {{ data | json }}
  EOT
}