[BUG] Failed rule does not print details of the failure about cloudformation-guard HOT 6 CLOSED

let s3_buckets_policies_ssl_requests_only = Resources.*[ Type == 'AWS::S3::BucketPolicy'
  Metadata.guard.SuppressedRules not exists or
  Metadata.guard.SuppressedRules.* != "S3_BUCKET_SSL_REQUESTS_ONLY"
]

%s3_buckets_policies_ssl_requests_only !empty

let statements = %s3_buckets_policies_ssl_requests_only[*].Properties.PolicyDocument.Statement[*]

when %statements !empty {
    S3_BUCKET_SSL_REQUESTS_ONLY(%statements)
    <<
        Violation: Bucket policies must feature a statement to enforce TLS usage.
        Fix: Set a bucket policy statement to '"Action":"s3:*","Effect":"Deny","Principal":"*","Resource":"*","Condition":{"Bool":{"aws:SecureTransport":false}}' .
    >>
}

rule S3_BUCKET_SSL_REQUESTS_ONLY(statements) {
  some %statements[*] {
        Effect == 'Deny'
        Condition {
            Bool.'aws:SecureTransport' == false
        }
    }
}

443.yaml Status = FAIL
FAILED rules
443.guard/default    FAIL
---
Evaluating data 443.yaml against rules 443.guard
Number of non-compliant resources 1
Resource = ExampleS3 {
  Type      = AWS::S3::BucketPolicy
  Rule = 443.guard/default {
    ALL {
      Rule = S3_BUCKET_SSL_REQUESTS_ONLY {
        Message {
          Violation: Bucket policies must feature a statement to enforce TLS usage.
          Fix: Set a bucket policy statement to '"Action":"s3:*","Effect":"Deny","Principal":"*","Resource":"*","Condition":{"Bool":{"aws:SecureTransport":false}}' .
        }
        ALL {
          Check =  Effect EQUALS  "Deny" {
            ComparisonError {
              Error            = Check was not compliant as property value [Path=/Resources/ExampleS3/Properties/PolicyDocument/Statement/0/Effect[L:9,C:20] Value="Allow"] not equal to value [Path=[L:0,C:0] Value="Deny"].
              PropertyPath    = /Resources/ExampleS3/Properties/PolicyDocument/Statement/0/Effect[L:9,C:20]
              Operator        = EQUAL
              Value           = "Allow"
              ComparedWith    = "Deny"
              Code:
                    7.        Version: "2012-10-17"
                    8.        Statement:
                    9.          - Sid: "AWSLogDeliveryWrite"
                   10.            Effect: "Allow"
                   11.            Principal:
                   12.              Service:

            }
          }
          Check =  Bool.aws:SecureTransport EQUALS  false {
            RequiredPropertyError {
              PropertyPath = /Resources/ExampleS3/Properties/PolicyDocument/Statement/0/Condition[L:16,C:14]
              MissingProperty = Bool.aws:SecureTransport
              Reason = Could not find key Bool inside struct at path /Resources/ExampleS3/Properties/PolicyDocument/Statement/0/Condition[L:16,C:14]
              Code:
                   14.            Action: "s3:PutObject"
                   15.            Resource: "*"
                   16.            Condition:
                   17.              StringEquals:
                   18.                "s3:x-amz-acl": "bucket-owner-full-control"
            }
          }
        }
      }
    }
  }
}

%s3_buckets_policies_ssl_requests_only !empty