fix flake8 issues in config rules

Author: cyphronix

aws_sra_examples/solutions/genai/bedrock_org/lambda/rules/sra_bedrock_check_guardrail_encryption/app.py

@@ -1,3 +1,12 @@
+"""Config rule to check the guardrail encryption for Bedrock environemts.
+
+Version: 1.0
+
+Config rule for SRA in the repo, https://github.com/aws-samples/aws-security-reference-architecture-examples
+
+Copyright Amazon.com, Inc. or its affiliates. All Rights Reserved.
+SPDX-License-Identifier: MIT-0
+"""
 from typing import Any
 import boto3
 import json
@@ -17,9 +26,17 @@
 bedrock_client = boto3.client('bedrock', region_name=AWS_REGION)
 config_client = boto3.client('config', region_name=AWS_REGION)
 
-def evaluate_compliance(rule_parameters: dict) -> tuple[str, str]:
-    """Evaluates if Bedrock guardrails are encrypted with a KMS key"""
-    
+
+def evaluate_compliance(rule_parameters: dict) -> tuple[str, str]:  # noqa: CFQ004
+    """Evaluate if Bedrock guardrails are encrypted with a KMS key.
+
+    Args:
+        rule_parameters (dict): The rule parameters
+
+    Returns:
+        tuple[str, str]: The compliance type and annotation
+    """
+    LOGGER.info(f"Rule parameters: {json.dumps(rule_parameters)}")
     try:
         response = bedrock_client.list_guardrails()
         guardrails = response.get('guardrails', [])
@@ -32,28 +49,34 @@ def evaluate_compliance(rule_parameters: dict) -> tuple[str, str]:
             guardrail_id = guardrail['id']
             guardrail_name = guardrail['name']
             guardrail_detail = bedrock_client.get_guardrail(guardrailIdentifier=guardrail_id)
-            
+
             if 'kmsKeyArn' not in guardrail_detail:
                 unencrypted_guardrails.append(guardrail_name)
 
         if unencrypted_guardrails:
             return 'NON_COMPLIANT', f"The following Bedrock guardrails are not encrypted with a KMS key: {', '.join(unencrypted_guardrails)}"
-        else:
-            return 'COMPLIANT', "All Bedrock guardrails are encrypted with a KMS key"
+        return 'COMPLIANT', "All Bedrock guardrails are encrypted with a KMS key"
 
     except Exception as e:
         LOGGER.error(f"Error evaluating Bedrock guardrails encryption: {str(e)}")
         return 'ERROR', f"Error evaluating compliance: {str(e)}"
 
-def lambda_handler(event: dict, context: Any) -> None:
+
+def lambda_handler(event: dict, context: Any) -> None:  # noqa: U100
+    """Lambda handler.
+
+    Args:
+        event (dict): Lambda event object
+        context (Any): Lambda context object
+    """
     LOGGER.info('Evaluating compliance for AWS Config rule')
     LOGGER.info(f"Event: {json.dumps(event)}")
 
     invoking_event = json.loads(event['invokingEvent'])
     rule_parameters = json.loads(event['ruleParameters']) if 'ruleParameters' in event else {}
 
     compliance_type, annotation = evaluate_compliance(rule_parameters)
-    
+
     evaluation = {
         'ComplianceResourceType': 'AWS::::Account',
         'ComplianceResourceId': event['accountId'],