let dms_replicationInstances = Resources.*[
	Type == "AWS::DMS::ReplicationInstance"
]

rule dms_replication_instances_public when %dms_replicationInstances !empty {
	%dms_replicationInstances {
		Properties {
			PubliclyAccessible exists <<Public access is not configured (i.e. enabled).>>
			when PubliclyAccessible exists {
				PubliclyAccessible == false <<Public access is enabled.>>
			}
		}
	}
}