Policy Setting: AWS > Logs > Log Group > Encryption at Rest

resource "turbot_policy_setting" "aws_logs_log_group_encryption_at_rest" {
  resource = turbot_policy_pack.main.id
  type     = "tmod:@turbot/aws-logs#/policy/types/logGroupEncryptionAtRest"
  value    = "Check: AWS SSE or higher"
  # value    = "Check: Customer managed key"
  # value    = "Check: Encryption at Rest > Customer Managed Key"
  # value    = "Enforce: AWS SSE or higher"
  # value    = "Enforce: Customer managed key"
  # value    = "Enforce: Encryption at Rest > Customer Managed Key"
}