def get_client()

in functions/password_policy/app.py [0:0]


def get_client(event):
    """Creates and returns an IAM client."""
    stack_id = event['StackId']
    stack_account = stack_id.split(":")[4]
    stack_region = stack_id.split(":")[3]
    aws_partition = os.getenv("AWS_PARTITION")
    target_role = os.getenv("TARGET_ROLE")
    role_arn = "arn:{}:iam::{}:role/{}".format(aws_partition, stack_account, target_role)
    session = CustomSession(role_arn=role_arn, role_session_name="assumed-role-session").session
    iam_client = session.client('iam', stack_region)
    return iam_client