We have a corporate policy that all IAM IaC must be approved by the IAM team. For our Terraform solutio