GUARDRAIL "Ensure S3 buckets have Block Public Access enabled"
  WHEN aws_s3_bucket_public_access_block
    REQUIRE block_public_acls = true
    REQUIRE block_public_policy = true
    REQUIRE ignore_public_acls = true
    REQUIRE restrict_public_buckets = true