in ta-eventbridge-lambda-s3/lambda_functions/s3openbucket/s3openbucket.py [0:0]
def lambda_handler(event, context):
topic_arn = os.environ['topic_arn']
detail = event['detail']
checkitemdetail = detail['check-item-detail']
bucketname = checkitemdetail['Bucket Name']
if checkitemdetail['ACL Allows List'] != 'No' or checkitemdetail['ACL Allows Upload/Delete'] != 'No':
reset_bucket_acl(bucketname)
msg = 'Removed Public access from bucket ACL for bucket: ' + bucketname
print(msg)
nofify_by_email(topic_arn,msg)
if checkitemdetail['Policy Allows Access'] != 'No':
original_bucket_policy = remove_bucket_policy(bucketname)
msg = 'Removed S3 Bucket Policy for bucket: ' + bucketname
print(msg)
nofify_by_email(topic_arn,msg,original_bucket_policy)
return {
'statusCode': 200,
'body': json.dumps('Bucket" ' + bucketname + ' has been set to private')
}