def evaluate_configuration_item()

in rules/customer-fc/vpc_flow_logs_enabled.py [0:0]

• 10 lines of code
• 3 McCabe index (conditional complexity)

def evaluate_configuration_item(context, rule_parameters, configuration_item):
    vpc_region_id = configuration_item["regionId"]
    vpc_id = json.loads(configuration_item['configuration'])["VpcId"]
    vpc_logs_count = query_vpc_logs(context, vpc_region_id, vpc_id)

    compliance_type = COMPLIANCE_TYPE_COMPLIANT
    annotation = None
    if not vpc_logs_count or vpc_logs_count <= 0:
        compliance_type = COMPLIANCE_TYPE_NON_COMPLIANT
        annotation = json.dumps({'configuration': 'Not enable flowLogs', 'desiredValue': 'Enable flowLogs'})
    return compliance_type, annotation