in scripts/security_group_is_secure.py [0:0]
def lambda_handler(event, context):
invoking_event = json.loads(event['invokingEvent'])
rule_parameters = json.loads(event['ruleParameters'])
configuration_item = invoking_event['configurationItem']
evaluation = evaluate_compliance(configuration_item, rule_parameters)
result_token = event['resultToken'] if 'resultToken' in event else 'No token found'
config.put_evaluations(
Evaluations=[
{
'ComplianceResourceType': configuration_item['resourceType'],
'ComplianceResourceId': configuration_item['resourceId'],
'ComplianceType': evaluation['compliance_type'],
'Annotation': evaluation['annotation'],
'OrderingTimestamp': configuration_item['configurationItemCaptureTime']
},
],
ResultToken=result_token
)