0.9.35.0

aws

• aws - account - add support for bedrock model invocation logging configuration (#9259)
• aws - add set-policy action for iam-profile resource (#9257)
• aws - allow excluding specific processes when resuming ASGs (#9252)
• aws - appmesh support (#9260)
• aws - bedrock - support for knowledge base, bedrock-agent delete action (#9301)
• aws - bedrock customization jobs, tag, kms-key and stop action (#9282)
• aws - cloud watch alarm - add a filter for determining if part of a composite alarm (#9300)
• aws - dynamodb-table - avoid key errors in continuous-backup filter (#9266)
• aws - ec2 resize from cost hub recommendation (#9281)
• aws - ecs-service - modify-definition with resize support (#9288)
• aws - ism-role - fix config resource id (#9294)
• aws - lambda update action w/ resize support from cost recommendation hub (#9283)
• aws - rds-proxy fix cfn type (#9267)
• aws - route53 record set delete action, hosted zone delete fix (#9291)
• aws - s3 - support for storage lens configuration (#9271)

awscc

• awscc - update action - ensure patch only against updatable properties, support user supplied jsonpatch (#9297)

azure

• azure - automation-account variable filter (#8999)
• azure - azure.vm.filters.backup-status (#9242)
• azure - front-door waf filter (#9038)
• azure - redis firewall filter (#9045)
• azure - sql server auditing filter (#9097)
• azure - sql-server filters - failover-group and security-alert-policies (#9114)

docs

• docs - minor gcp and c7n left fixes (#9129)
• docs - remove beta label on gcp (#9278)
• docs - update vector.dev toml configuration (#9279)

releng

• releng - docs publish - ensure use of pypi for awscli install (#9314)
• releng - downgrade urllib3 for release (#9334)
• releng - pin freeze wheel to previous release due to error (#9332)
• releng - prep 0.9.35 release (#9328)
• releng - update github actions versions and fix doc build (#9262)
• releng - cryptography from 41.0.7 to 42.0.4 in /tools/c7n_mailer (#9313)

shift-left

• c7n-left - fix policy severity level filtering for --warn-on (#9261)
• shift-left - handle a null tag map on a resource (#9323)
• shift-left - log policy error during execution (#9293)

tencentcloud

• tencentcloud - security group filter - fix for empty port string (#9253)

schema changes

• aws.appmesh-mesh added
• aws.appmesh-virtual-gateway added
• aws.bedrock-agent added
• aws.bedrock-customization-job added
• aws.bedrock-knowledge-base added
• aws.s3-storage-lens added
• azure.automation-account added
• aws.account
  • added actions: set-bedrock-model-invocation-logging
  • added filters: bedrock-model-invocation-logging
• aws.alarm
  • added filters: is-composite-child
• aws.bedrock-custom-model
  • added filters: kms-key
• aws.ecs-service
  • added actions: modify-definition
• aws.iam-profile
  • added actions: set-policy
• aws.lambda
  • added actions: update
• aws.rds-proxy
  • removed filters: json-diff
• aws.rrset
  • added actions: delete
• azure.front-door
  • added filters: firewall-policy
• azure.redis
  • added filters: firewall
• azure.sql-server
  • added filters: auditing-policies, failover-group, security-alert-policies
• azure.vm
  • added filters: backup-status

New Contributors

• @thomas-stone made their first contribution in #9252
• @missedone made their first contribution in #9253
• @Johnlon made their first contribution in #9260

Full Changelog: 0.9.34.0...0.9.35.0