Describe the issue
The CKV2_AWS_74 introduced recently results in false positives for load balancers which are pass-through (network load balancers) or do not use TLS at all. Per TF documentation ssl_policy is required only if protocol is HTTPS or TLS

Examples
This block describing an NLB listener should not be flagged:

resource "aws_lb_listener" "external_https" {
  load_balancer_arn = aws_lb.external_lb.arn
  port              = 443
  protocol          = "TCP"

  default_action {
    type             = "forward"
    target_group_arn = aws_lb_target_group.external_tg.arn
  }
}

Version (please complete the following information):

• Checkov Version 3.2.407

Additional context