My Policy-as-Code Check Passed. It Never Read the Policy.

In my last post, I showed how OPA and Conftest block over-privileged IAM roles before anything gets deployed. I ended with a warning: there's a case where the check passes when it shouldn't. This is t