OPA in Kubernetes to block create load balancer except with specific annotation in .rego

[cmwatts1974]

How do I write my .rego file to deny creation of loadbalancer except with specific annotation in .rego file...see below what I have tried

package kubernetes.admission

import data.kubernetes.namespaces

import input.request.object.metadata.annotations as annotations

deny[msg] {
input.request.kind.kind = "Service"
input.request.operation = "CREATE"
input.request.object.spec.type = "LoadBalancer"
missing_required_annotations[msg]
}
missing_required_annotations[msg] {
not annotations["service.beta.kubernetes.io/aws-load-balancer-scheme = "internal"] = internal
}

[anderseknert]

Answered here.