Dms Endpoint Should Be SSL Configured Policy

1# Converted from HashiCorp PCI DSS Sentinel example: dms-endpoint-should-be-ssl-configured.sentinel
2# Conversion quality: Good
3
4resource_policy "aws_dms_endpoint" "dms_endpoint_should_be_ssl_configured" {
5    locals {
6        certificate_arn = core::try(attrs.certificate_arn, "")
7    }
8
9    enforce {
10        condition = local.certificate_arn != ""
11        error_message = "DMS endpoints should set certificate_arn for SSL configuration"
12    }
13}