Huh, Aspects - CDK for Terraform | Terraform | HashiCorp Developer seems like the best place for me to start with this. At the very least I can add some policy checks as regards prefixes. The example in that page is actually for S3 bucket name prefixes!