def lambda_handler()

in ta-eventbridge-lambda-s3/lambda_functions/s3openbucket/s3openbucket.py [0:0]


def lambda_handler(event, context):
    topic_arn = os.environ['topic_arn']
    detail = event['detail']
    checkitemdetail = detail['check-item-detail']
    bucketname = checkitemdetail['Bucket Name']
    if checkitemdetail['ACL Allows List'] != 'No' or checkitemdetail['ACL Allows Upload/Delete'] != 'No':
        reset_bucket_acl(bucketname)
        msg = 'Removed Public access from bucket ACL for bucket: ' + bucketname
        print(msg)
        nofify_by_email(topic_arn,msg)
    if checkitemdetail['Policy Allows Access'] != 'No':
        original_bucket_policy = remove_bucket_policy(bucketname)
        msg = 'Removed S3 Bucket Policy for bucket: ' + bucketname
        print(msg)
        nofify_by_email(topic_arn,msg,original_bucket_policy)

    return {
        'statusCode': 200,
        'body': json.dumps('Bucket" ' + bucketname + ' has been set to private')
    }