{ "apiVersion": "json.kyverno.io/v1alpha1", "kind": "ValidatingPolicy", "metadata": { "name": "no-placeholder-account", "annotations": { "nova.cloudinit.dev/severity": "critical", "title.policy.kyverno.io": "Env does not use a placeholder AWS account id" } }, "spec": { "rules": [ { "name": "no-placeholder-account", "assert": { "all": [ { "check": { "(account_id == '000000000000')": false } } ] } } ] } }