def should_raise_alert()

in access-analyzer/step-functions-archive-findings/functions/evaluate-access-analyzer-finding/app.py [0:0]

• 16 lines of code
• 10 McCabe index (conditional complexity)

def should_raise_alert(finding_details, tags, additional_context):
  if "error" in finding_details:
    logger.error(f"Error in finding {finding_details['error']} for resource {finding_details['resource']}")
    return True

  if (
      finding_details["isPublic"]
      and not is_allowed_public(finding_details, tags, additional_context)
     ):
    return True
  elif (
        "IsAllowedToShare" in tags and tags["IsAllowedToShare"]=="true"
        and "Environment" in tags and tags["Environment"]=="development"
        and "key_aliases" in additional_context and "alias/DevelopmentKey" in additional_context["key_aliases"]
    ):
    return False

  return True