let sns_topics = Resources.*[
	Type == "AWS::SNS::Topic"
]

rule sns_encryption when %sns_topics !empty {
	%sns_topics {
		Properties {
			KmsMasterKeyId exists <<Encryption is disabled.>>
		}
	}
}