Query resources not managed by terraform

[Bin-security]

Hi team,

This is more like a question than issue. Is there a way to query AWS resources not managed by Terraform in Sentinel? We have some AMIs not managed by Terraform and we want to write sentinel policies to restrict new EC2 instances to use those AMIs. Is there a way to do this without terraform import? Is there a way to query the resources in Terraform sentinel? Thanks in advance.