{
  "Version": "2012-10-17",
  "Statement": [
    {
      "Effect": "Allow",
      "Action": [
        "ec2:DescribeInstances",
        "ec2:StopInstances",
        "s3:ListBucket",
        "s3:PutPublicAccessBlock"
      ],
      "Resource": "*"
    }
  ]
}

import boto3

def lambda_handler(event, context):
    ec2 = boto3.client('ec2')
    s3 = boto3.client('s3')

    # Dừng tất cả các instance EC2 đang chạy
    instances = ec2.describe_instances(Filters=[{'Name': 'instance-state-name', 'Values': ['running']}])
    for reservation in instances['Reservations']:
        for instance in reservation['Instances']:
            ec2.stop_instances(InstanceIds=[instance['InstanceId']])
            print(f"Stopped instance: {instance['InstanceId']}")

    # Khóa truy cập công khai tất cả bucket S3
    buckets = s3.list_buckets()
    for bucket in buckets['Buckets']:
        s3.put_public_access_block(
            Bucket=bucket['Name'],
            PublicAccessBlockConfiguration={
                'BlockPublicAcls': True,
                'IgnorePublicAcls': True,
                'BlockPublicPolicy': True,
                'RestrictPublicBuckets': True
            }
        )
        print(f"Blocked bucket: {bucket['Name']}")

    return {
        'statusCode': 200,
        'body': 'EC2 stopped and S3 buckets locked.'
    }