rules:
- id: missing-aws-qldb-deletion-protection
  patterns:
    - pattern: |
        resource "aws_qldb_ledger" $ANYTHING {
          ...
          deletion_protection = false
          ...
        }
  message: >-
    The AWS QLDB deletion protection is not enabled.
  languages: [hcl]
  severity: WARNING
  metadata:
    category: best-practice
    technology:
    - terraform
    - aws