Example Compliance

// Identifying S3 buckets with public access
if (node.resourceType === "AWS/S3Bucket" && node.PublicAccess) {
    return { type: 'error', message: 'S3 bucket has public access enabled.', resourceId: node._id };
}