Adds policy to check remote-exec provisioner exist

Author: petems

governance/aws/must_have_remote_exec_provisioner.sentinel

@@ -0,0 +1,9 @@
+import "tfconfig"
+
+main = rule {
+  all tfconfig.resources.aws_instance as _, r {
+    any r.provisioners as _, p {
+      p.type == "remote-exec"
+    }
+  }
+}