定期作成されたAMIと関連付けされているSnapshotを指定期間後に削除してみた

import boto3
from datetime import datetime, timezone, timedelta

#  削除機能を有効化するか (True:有効 / False:無効 削除候補表示のみ)
backup_deletion_enable = False

# 日本時間のタイムゾーンを指定
JST = timezone(timedelta(hours=9))

def lambda_handler(event, context):
    ec2 = boto3.client('ec2')
    response = ec2.describe_images(Owners=['self'])

    # 現在の日付と90日前の日付を日本時間で取得
    now = datetime.now(JST)
    cutoff_date = now - timedelta(days=90)

    # 削除対象のAMIをフィルタリング
    images = [image for image in response['Images'] 
        if datetime.strptime(image['CreationDate'], '%Y-%m-%dT%H:%M:%S.%fZ').replace(tzinfo=timezone.utc).astimezone(JST) < cutoff_date]

    # AMIとスナップショットを削除
    for image in images:
        image_id = image['ImageId']
        print(f"Delete AMI: {image_id}")
        if backup_deletion_enable:
            ec2.deregister_image(ImageId=image_id)

        # 関連するスナップショットを削除
        for block_device in image['BlockDeviceMappings']:
            if 'Ebs' in block_device:
                snapshot_id = block_device['Ebs']['SnapshotId']
                print(f"Delete Snapshot: {snapshot_id}")
                if backup_deletion_enable:
                    ec2.delete_snapshot(SnapshotId=snapshot_id)

    deleted_images = [image['ImageId'] for image in images]
    return {
        'statusCode': 200,
        'body': f"Deleted AMIs: {deleted_images}"
    }

{
    "Version": "2012-10-17",
    "Statement": [
        {
            "Effect": "Allow",
            "Action": [
                "ec2:DeregisterImage"
            ],
            "Resource": [
                "arn:aws:ec2:[%REGION%]:[%AWS_ID%]:image/*"
            ]
        },
        {
            "Effect": "Allow",
            "Action": [
                "ec2:DescribeImages"
            ],
            "Resource": [
                "*"
            ]
        },
        {
            "Effect": "Allow",
            "Action": [
                "ec2:DeleteSnapshot"
            ],
            "Resource": [
                "arn:aws:ec2:[%REGION%]:[%AWS_ID%]:snapshot/*"
            ]
        },
        {
            "Effect": "Allow",
            "Action": [
                "ec2:DescribeSnapshots"
            ],
            "Resource": [
                "*"
            ]
        }
    ]
}