basic aws config rule example

iam.py

def evaluate_compliance(event, configuration_item, valid_rule_parameters):
    iam = get_client('iam', event)
    users = get_all_users(iam)
    evaluations = []
    for user in users:
        e = build_evaluation(user["UserId"], 'COMPLIANT', event, annotation="testing")
        evaluations.append(e)
    return evaluations


def get_all_users(client):
    list_to_return = []
    user_list = client.list_users()
    while True:
        for user in user_list['Users']:
            list_to_return.append(user)
        if 'Marker' in user_list:
            user_list = client.list_users(Marker=user_list['Marker'])
        else:
            break
    return list_to_return