resource "null_resource" "policy" { triggers = { always_run = timestamp() } provisioner "local-exec" { on_failure = fail when = create interpreter = ["/bin/bash", "-c"] command = <