SCP deny AMIs

SCP deny AMIs

{
   "Version": "2020-06-01",
   "Statement": [
       {
           "Sid": "DenyAMIsExceptFromAccount",
           "Effect": "Deny",
           "Action": "ec2:RunInstances",
           "Resource": "arn:aws:ec2:eu-west-1::image/{ami_id}",
           "Condition": {
               "StringNotEquals": {
                   "ec2:Owner": "{imagebuilder_account_id}", "{shared_account_id}" 
               }
           }
       }
   ]
}