Ensure Effect is set to 'Deny' if Resource is used in Organization policies

Service control policies (SCP) syntax does not support the element 'Resource' with effect 'Allow'; only 'Deny' is supported here.
References:
https://docs.aws.amazon.com/organizations/latest/userguide/orgs_manage_policies_scps_syntax.html

In AWS Console -

1. Sign in to the AWS console and go to the Organizations console.
2. Under Policy Management, select Policies.
3. Choose the policy you wish to edit.
4. Update accordingly.

In Terraform -

1. In the aws_organizations_policy resource, edit the policy Statement to have valid syntax.
2. For Resource entries, use explicit Deny options as needed.

References:
https://docs.aws.amazon.com/organizations/latest/userguide/orgs_manage_policies.html
https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/organizations_policy