Posture check: dnd_test_add_remove_child_policy_hyperion_policy_ss_finding_2
Query: ```config from cloud.resource where cloud.type = 'aws' AND api.name = 'aws-cloudfront-list-distributions' AND json.rule = defaultRootObject is empty```