Community Meeting Minutes 2022-12-06 #8059

castrojo · 2022-12-07T21:04:23Z

castrojo
Dec 7, 2022
Maintainer

C7n Community Meeting Minutes

December 6th 2022

:::info

URL: meet.google.com/mii-evqh-esh
Date: December 6th, 2022 (2:00 PM (ET) / 11:00 AM (PT) / 6PM (UTC))
Timezone Converter (Click me)
Agenda

Intros 10m
Agenda Items 20m
PR Party 30m

Meeting Contact: Jorge: [email protected]
Video Archive and Transcripts: https://mtngs.io/cloud-custodian/community-meetings/
:::

Agenda Items

Intros, etc.
We're testing Slack! Join us:
- Invite page
Release Update [Sonny]
- Dependency updates, poetry, etc.
- Release update
- .9.21 targetted for right after reInvent
- Kapil: we'll need this: c7n_left - github action output annotation fixes #8011
- Where we at now?
  - Kapil - release next week, week of 12 Dec
We're back from reinvent!
- Thanks everyone for stopping by the booth!
- If you're new here from reinvent, welcome!
No community meeting next time 20th December, making this the last meeting of the year!
We'll resume Jan 10th, calendar on cloudcustodian.io is up to date!
Kapil: ressurect Cask?
- https://github.com/cloud-custodian/cloud-custodian/tree/master/tools/cask
- Jorge volunteers to document this
Kapil: There's no consistent identifier across resources?
- Looking at adding a getURN? (did I spell that right?)
- Discussion here

Weekly Report

Weekly status report for cloud-custodian/cloud-custodian Week #49 2022

Weekly Stats

	Opened this week	Closed this week
Issues	16	11
PR's	53	55


New stars	0
New forks	0

PR's Opened

💥 #7807: RDS instance TLS check
💥 #7946: APIGW WAFv2
💥 #7029: Managed Config Rules
💥 #8056: AWS - AppSync - Create graphql api cache filter
#8053: aws - iam-analyzer - add support for additional resources
#8052: docs - tencentcloud resources docs with examples
#8051: mailer - skip empty email addr and filter out invalid cc email addr
#8049: aws - glue-connection - tag read/write support
#8048: Chore/bump ubi
#8047: tools/cask - support tencent cloud
#8045: aws - cloudfront - updating s3 regexes for mismatch-s3-origin filter
#8044: c7n_tencentcloud - resources - cos
#8043: tencentcloud - client - support for assume role
#8042: aws - route53 - define rrset and healthcheck as global resources
#8041: adding resource for mysql flexible server
#8039: fix - flake8/pyflakes bump removed type comments linting
#8037: aws - Target group attributes check filter and modify action added
#8036: c7n-org - cli - support not-accounts option
#8035: c7n - cli - enable vars option to load vars file
#8034: policy - support include, format vars after load
#8033: c7n-org - support org level vars in config file
#8030: aws - backup - add consecutive backups filter
#8029: utils - reduce backoff_delays jitter
#8028: aws - security-group - used filter - add interface usage annotation
#8027: aws - dlm - use native arn attribute
#8025: aws - elasticache - skip delete replication group if it is in use
#8024: aws - ebs - divide into small batch to achieve better performance when retrieving EBS resources (codecov exception requested)
#8023: aws - dynamodb - add update table action (could u pls make an exception for this codecov)
#8022: aws - notify - prepare iam-saml-provider for notify
#8021: aws - ami - add last-launched-time filter
#8020: aws - account - check-cloudtrail sns lookup refactor
#8019: fix - add GA code from older website
#8018: Bump cryptography from 38.0.1 to 38.0.3
#8017: Bump cryptography from 38.0.1 to 38.0.3 in /tools/c7n_azure
#8016: Bump cryptography from 38.0.1 to 38.0.3 in /tools/c7n_openstack
#8014: policy - have conditions support vars
#8013: releng - update poetry to 1.2.2
#8012: releng - github actions use concurrency option to only run on latest push
#8011: c7n_left - github action output annotation fixes
#8007: aws - ec2 - force stop override stop protection
#8006: aws - iam-profile, ec2 - add has-specific-managed-policy filter
#8002: docs - tencentcloud resource reference docs build
#8001: releng - handle optional extras in gen-frozensetup
#7999: aws - iam - instance-profile set-role action
#7998: aws - Lambda kms key fix for securityhub finding
#7996: aws - cloudhsm-cluster, augment and serverless mode
#7995: releng - install mailer extras in docker image
#7994: c7n_tencentcloud - filter - refactor metrics filter
#7992: c7n_tencentcloud - tests - vcr add recording filter
#7990: releng - 0.9.21.0 pkg-increment and pkg-rebase
#7988: aws - hosted-zone - query-logging-enabled: add subscription filter details
#7986: aws - cloudfront - wafv2-enabled fix to find resources which are associated with waf-classic acl
#7984: aws - autotag action - fix none userinfo exception
#7983: aws - transit-attachment - Support CloudTrail mode
#7981: aws - Support CloudTrail mode for aws.transit-attachment
#7980: core - fix issue on policy conditions ("account.*" policy conditions prevent lambda based policies from executing. #7967)

PR's Closed

#8053: aws - iam-analyzer - add support for additional resources
#8049: aws - glue-connection - tag read/write support
#8048: Chore/bump ubi
#8047: tools/cask - support tencent cloud
#8045: aws - cloudfront - updating s3 regexes for mismatch-s3-origin filter
#8043: tencentcloud - client - support for assume role
#8042: aws - route53 - define rrset and healthcheck as global resources
#8039: fix - flake8/pyflakes bump removed type comments linting
#8036: c7n-org - cli - support not-accounts option
#8030: aws - backup - add consecutive backups filter
#8028: aws - security-group - used filter - add interface usage annotation
#8027: aws - dlm - use native arn attribute
#8022: aws - notify - prepare iam-saml-provider for notify
#8019: fix - add GA code from older website
#8018: Bump cryptography from 38.0.1 to 38.0.3
#8017: Bump cryptography from 38.0.1 to 38.0.3 in /tools/c7n_azure
#8016: Bump cryptography from 38.0.1 to 38.0.3 in /tools/c7n_openstack
#8013: releng - update poetry to 1.2.2
#8012: releng - github actions use concurrency option to only run on latest push
#8011: c7n_left - github action output annotation fixes
#8006: aws - iam-profile, ec2 - add has-specific-managed-policy filter
#8002: docs - tencentcloud resource reference docs build
#8001: releng - handle optional extras in gen-frozensetup
#7999: aws - iam - instance-profile set-role action
#7998: aws - Lambda kms key fix for securityhub finding
#7996: aws - cloudhsm-cluster, augment and serverless mode
#7995: releng - install mailer extras in docker image
#7994: c7n_tencentcloud - filter - refactor metrics filter
#7992: c7n_tencentcloud - tests - vcr add recording filter
#7990: releng - 0.9.21.0 pkg-increment and pkg-rebase
#7988: aws - hosted-zone - query-logging-enabled: add subscription filter details
#7986: aws - cloudfront - wafv2-enabled fix to find resources which are associated with waf-classic acl
#7984: aws - autotag action - fix none userinfo exception
#7983: aws - transit-attachment - Support CloudTrail mode
#7981: aws - Support CloudTrail mode for aws.transit-attachment
#7974: aws.ami enhancements for issues Add more flexible 'set-permissions' action to aws.ami to manage AMI sharing policies #7972, Add action to deprecate an AWS AMI #7232, whitelist_orgids missing from cross-account aws.ami #7031
#7971: Add gcp resource project info
#7962: M.Hogg - Suggested fix for KMSKeyArn Parameter validation failed for …
#7957: docs - add governance-as-code day orgs
#7954: aws - event-rule - add set-rule-state action
#7953: aws - composite-alarm - add resource and delete action
#7947: aws - ec2 - add managed-policy filter
#7919: aws - security-group - add alb-wafv2-enabled filter
#7917: custodian lambdas - graviton support
#7908: c7n_tencentcloud - resources - cdb & cdb_backup
#7907: fix the parsing with the latest tfparse
#7904: aws - lambda - added assume role for invoke lambda
#7889: Use case-insensitive checks for allowed conditions in cross-account filters
#7884: aws - efs - add has-statement filter
#7876: azure - postgresql-server - add configuration-parameter filter
#7865: c7n_tencentcloud - cam - add resources
#7851: aws - account - check-cloudtrail filter: add include-management-events and log-metric-filter-pattern
#7840: azure - webapp - add webapp authentication filter
#7664: azure - sqlserver - add auditing filter
#7223: aws - tags - copy-related-tag using resourcegroupstaggingapi, support tags as key

Issues Opened

#8055: c7n_gcp fails with "Nonetype" object is not iterable when running policy against project with no clusters
#8054: security group scan prefix list my account work, but other account can't
#8050: WAFv2 Add Ability to Check for Logging
#8040: aws - Lambda output_dir - synchronize variable interpolation with notify message and metadata.json
#8015: Support identifying relationships between Route 53 records and Elastic IPs
#8010: Mailer - question about send mail to gcp target
#8009: [aws:sns] ResourceNotFound Terminates Policy Evaluation Early
#8008: awscc query.get_resources is not called for some of the resources
#8005: IllegalLocationConstraintException when calling the GetBucketTagging operation
#8004: Develop an action on Connect resource to disable the contact lens feature
#8003: resume and suspend actions for asg should support a new filter to ignore ASGs with Spot Instances
#7997: Add AWS MSK (Kafka) V2 Serverless Support
#7991: aws - cloudhsm-cluster policies failing in event mode
#7989: Replace AWS EventBridge Rules with EventBridge Scheduler
#7987: Filter action CWL log group for retention, size
#7985: wafv-enabled for CloudFront fails to return resources which are associated with waf-classic acl

Issues Closed

#8015: Support identifying relationships between Route 53 records and Elastic IPs
#7991: aws - cloudhsm-cluster policies failing in event mode
#7985: wafv-enabled for CloudFront fails to return resources which are associated with waf-classic acl
#7977: Securityhub upload finding - Botocore ParamValidationError for aws.lambda with encrypted env variables
#7961: route 53 resources are all global
#7960: resources/awslambda.py using KMSKeyArn instead of KmsKeyArn
#7837: Use case-insensitive checks for allowed conditions in cross-account filters
#7763: cloudwatch alarms deletion failing
#7529: Issue with mismatch-s3-origin filter for aws.distribution resource
#7188: support copy-related-tag when related resource is not a first-class resource type
#6351: Custodian policies that call GenerateCredentialReport api hit throttling limits intermittently.

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Cloud Custodian

Community Meeting Minutes 2022-12-06 #8059

{{title}}

Replies: 0 comments

Select a reply

Cloud Custodian

Community Meeting Minutes 2022-12-06 #8059

castrojo Dec 7, 2022 Maintainer

C7n Community Meeting Minutes

December 6th 2022

Agenda Items

Weekly Report

Weekly Stats

PR's Opened

PR's Closed

Issues Opened

Issues Closed

Replies: 0 comments

castrojo
Dec 7, 2022
Maintainer