Let's finagle with rego and get this Trivy policy up and running!
For the policy to stop buckets being made in an AWS account that do not fit a particular naming scheme.
ID002.rego:38: rego_unsafe_var_error: var aws_s3_bucket is unsafe
The code has been updated to no longer give errors, but it does not acknowledge what it should be (ie, if the bucket does not meet parameters, it doesn't see that in the report)