Wildcards in Lambda prefix / suffix filters are still not supported, in the meantime you can partially filter them and then populate your filter by adding a regular expression inside your lambda function.
Get the source key:
var srcKey = decodeURIComponent(event.Records[0].s3.object.key.replace(/\+/g, " "));
Check if it is inside the user folder:
if (srcKey.indexOf('/users/') === -1) { callback('Not inside users folder!'); return; }
Hatef source share