You can use https://raw.githubusercontent.com/vinycoolguy2015/awslambda/14a839adc2fd94959f7d5a0de337c01ee0874e6f/config_rule3.py. for lambda code. Make sure you have SES configured.

Also make sure Lambda role has following permissions "ses:SendEmail",

"ses:SendRawEmail"

Also change ses_client.send_email(Source='sender@xyz.com',Destination={'ToAddresses': ['recipient@xyz.com']},

and

authorized_security_groups=['sg-xyz']