fix(aws): disallow child-accounts to overwrite policy for ai_services_opt_out

[kagahd]

Context

The check organizations_opt_out_ai_services_policy just verifies that AWS Organizations opt-out of AI services policy is enabled. However, it does not check if child-accounts are disallowed to overwrite this policy.
Since the check is only checking the AWS Organizations account and not the child accounts, it's important to check that child-accounts are disallowed to overwrite the opt-out policy.

Description

This PR extends the check organizations_opt_out_ai_services_policy to ensure that AWS Organizations opt-out of AI services policy is enabled and that child-accounts are disallowed to overwrite this policy.

Checklist

• Are there new checks included in this PR? Yes
  • If so, do we need to update permissions for the provider? No
• Review if the code is being covered by tests.
• Review if code is being documented following this specification https://github.com/google/styleguide/blob/gh-pages/pyguide.md#38-comments-and-docstrings
• Review if backport is needed.

License

By submitting this pull request, I confirm that my contribution is made under the terms of the Apache 2.0 license.

[codecov]

Codecov Report

All modified and coverable lines are covered by tests ✅

Project coverage is 90.08%. Comparing base (ec9455f) to head (1a47e14).
Report is 35 commits behind head on master.

Additional details and impacted files

@@            Coverage Diff             @@
##           master    #6229      +/-   ##
==========================================
- Coverage   90.09%   90.08%   -0.02%     
==========================================
  Files        1181     1182       +1     
  Lines       36275    36315      +40     
==========================================
+ Hits        32682    32713      +31     
- Misses       3593     3602       +9     

Flag	Coverage Δ
prowler	90.08% <100.00%> (-0.02%)	⬇️

Flags with carried forward coverage won't be shown. Click here to find out more.

Components	Coverage Δ
prowler	90.08% <100.00%> (-0.02%)	⬇️
api	∅ <ø> (∅)

[MrCloudSec]

Good catch @kagahd, thank you!
Please, review my comments.

[MrCloudSec]

Thanks for this fix @kagahd !

[prowler-bot]

💚 All backports created successfully

Status	Branch	Result
✅	v4.6
✅	v5.0

Questions ?

Please refer to the Backport tool documentation and see the Github Action logs for details