var AWS = require('aws-sdk'); exports.handler = function(event) { console.log("request:", JSON.stringify(event, undefined, 2)); var s3 = new AWS.S3({apiVersion: '2006-03-01'}); var resource = event['detail']['requestParameters']['evaluations']; console.log("evaluations:", JSON.stringify(resource, null, 2)); for (var i = 0, len = resource.length; i < len; i++) { if (resource[i]["complianceType"] == "NON_COMPLIANT") { console.log(resource[i]["complianceResourceId"]); var params = { Bucket: resource[i]["complianceResourceId"] }; s3.deleteBucketPolicy(params, function(err, data) { if (err) console.log(err, err.stack); // an error occurred else console.log(data); // successful response }); } } };