Policy Setting: GCP > DNS > Managed Zone > DNSSEC Configuration

resource "turbot_policy_setting" "gcp_dns_managed_zone_dnssec_configuration" {
  resource = turbot_policy_pack.main.id
  type     = "tmod:@turbot/gcp-dns#/policy/types/managedZoneDnssecConfiguration"
  note     = "GCP CIS v2.0.0 - Control: 3.3"
  value    = "Check: Enabled"
  # value    = "Enforce: Enabled"
}