Repository: bridgecrewio/checkov

Issue:
CKV2_IBM_1 is failing even when we set loadbalancer as type private
**Describe the issue**
The check for CKV2_IBM_1 is only checking if the loadbalancer value of `type` is set to `private`. But IBM has a new type which is `private_path` which is also a private loadbalancer. The error is invalid.

```
Check: CKV2_IBM_1: "Ensure load balancer for VPC is private (disable public access)"
        FAILED for resource: module.private_path.ibm_is_lb.ppnlb
        File: /main.tf:5-13
        Guide: https://docs.prismacloud.io/en/enterprise-edition/policy-reference/ibm-policies/ibm-general-policies/bc-ibm-2-1

                5  | resource "ibm_is_lb" "ppnlb" {
                6  |   name           = var.nlb_name
                7  |   subnets        = [var.subnet_id]
                8  |   type           = "private_path"
                9  |   profile        = "network-private-path"
                10 |   resource_group = var.resource_group_id
                11 |   tags           = var.tags
                12 |   access_tags    = var.access_tags
                13 | }
```
I don't think the logic should be failing here.

**Examples**
Please share an example code sample (in the IaC of your choice) + the expected outcomes.
```
resource "ibm_is_lb" "ppnlb" {
  name     = "my-example-ppnlb"
  subnets  = [ibm_is_subnet.subnet1.id]
  profile = "network-private-path"
  type = "private_path"
}
```

**Version (please complete the following information):**
 - Checkov Version [e.g. 22]
 - 3.2.368

**Additional context**
Add any other context about the problem here.



Discussion:

Patch:
diff --git a/checkov/terraform/checks/graph_checks/ibm/IBM_LoadBalancerforVPCisPrivate.yaml b/checkov/terraform/checks/graph_checks/ibm/IBM_LoadBalancerforVPCisPrivate.yaml
index ec78b31a90..d8543145e6 100644
--- a/checkov/terraform/checks/graph_checks/ibm/IBM_LoadBalancerforVPCisPrivate.yaml
+++ b/checkov/terraform/checks/graph_checks/ibm/IBM_LoadBalancerforVPCisPrivate.yaml
@@ -2,17 +2,20 @@ metadata:
   id: "CKV2_IBM_1"
   name: "Ensure load balancer for VPC is private (disable public access)"
   category: "GENERAL_SECURITY"
-
 definition:
   and:
-
     - cond_type: "attribute"
       resource_types: "ibm_is_lb"
       attribute: "type"
       operator: "exists"
-
-    - cond_type: "attribute"
-      resource_types: "ibm_is_lb"
-      attribute: "type"
-      operator: "equals_ignore_case"
-      value: "private"
\ No newline at end of file
+    - or:
+      - cond_type: "attribute"
+        resource_types: "ibm_is_lb"
+        attribute: "type"
+        operator: "equals_ignore_case"
+        value: "private"
+      - cond_type: "attribute"
+        resource_types: "ibm_is_lb"
+        attribute: "type"
+        operator: "equals_ignore_case"
+        value: "private_path"


Test patch:
diff --git a/tests/terraform/graph/checks/resources/IBM_LoadBalancerforVPCisPrivate/expected.yaml b/tests/terraform/graph/checks/resources/IBM_LoadBalancerforVPCisPrivate/expected.yaml
index 52a7855045..5fcb10b93e 100644
--- a/tests/terraform/graph/checks/resources/IBM_LoadBalancerforVPCisPrivate/expected.yaml
+++ b/tests/terraform/graph/checks/resources/IBM_LoadBalancerforVPCisPrivate/expected.yaml
@@ -1,4 +1,5 @@
 pass:
   - "ibm_is_lb.pass"
+  - "ibm_is_lb.pass_private_path"
 fail:
   - "ibm_is_lb.fail"
\ No newline at end of file
diff --git a/tests/terraform/graph/checks/resources/IBM_LoadBalancerforVPCisPrivate/main.tf b/tests/terraform/graph/checks/resources/IBM_LoadBalancerforVPCisPrivate/main.tf
index 1acb004f10..259effe1cc 100644
--- a/tests/terraform/graph/checks/resources/IBM_LoadBalancerforVPCisPrivate/main.tf
+++ b/tests/terraform/graph/checks/resources/IBM_LoadBalancerforVPCisPrivate/main.tf
@@ -17,3 +17,11 @@ resource "ibm_is_lb" "fail" {
   subnets = [var.pud-subnet]
   profile = "network-fixed"
 }
+
+# Case 3: Pass: type = "private"
+
+resource "ibm_is_lb" "pass_private_path" {
+  name    = "pud-load-balancer"
+  subnets = [var.pud-subnet]
+  type = "private_path"
+}
\ No newline at end of file
diff --git a/tests/terraform/graph/checks/test_yaml_policies.py b/tests/terraform/graph/checks/test_yaml_policies.py
index 6ae97eed86..54767c02d8 100644
--- a/tests/terraform/graph/checks/test_yaml_policies.py
+++ b/tests/terraform/graph/checks/test_yaml_policies.py
@@ -511,7 +511,7 @@ def test_AzureMSSQLserverConfigPrivEndpt(self):
     def test_AzureSynapseWorkspaceVAisEnabled(self):
         self.go("AzureSynapseWorkspaceVAisEnabled")
 
-    def test_IBM_AppLBforVPCisPrivate(self):
+    def test_IBM_LoadBalancerforVPCisPrivate(self):
         self.go("IBM_LoadBalancerforVPCisPrivate")
 
     def test_IBM_VPCclassicAccessIsDisabled(self):