Community Meeting Minutes for 2022-08-16

[castrojo]

C7n Community Meeting Minutes

August 16th 2022

:::info

• URL: meet.google.com/mii-evqh-esh
• Date: August 16th, 2022 (2:00 PM (ET) / 11:00 PM (PT) / 6PM (UTC))
• Timezone Converter (Click me)
• Agenda

1. Intros 10m
2. Agenda Items 20m
3. PR Party 30m

• Meeting Contact: Jorge: [email protected]
• Video Archive and Transcripts: https://mtngs.io/cloud-custodian/community-meetings/
  :::

Agenda Item

• Intros, etc.
• Governance Updates
  • See this GitHub issue for the latest draft revisions.
• Governance as Code day CFPs are open!
  • https://github.com/orgs/cloud-custodian/discussions/7625
  • CFP Form
  • Registration
• Release Information:
  • 0.9.18 is out: https://github.com/cloud-custodian/cloud-custodian/releases/tag/0.9.18.0

https://ismsguy.medium.com/ingesting-cloud-custodian-logs-into-sumo-logic-part-1-4e6af6df70a

Weekly Stats

	Opened this week	Closed this week
Issues	26	16
PR's	50	48

New stars
New forks

AJ: #7650
Kapil: #7659

(Want to see an item discussed? Add a :boom: next to an item!)

PR's Opened

• 💥 #7654: Fix for VPC FlowLog issue VPC flow-logs policy Errors #7648
• #7653: Fix for VPC FlowLog issue VPC flow-logs policy Errors #7648
• :table: #7652: feat: add lambda handler as parameter Support for lambda layers and how to adjust environment/handler? #7635
• 💥 #7651: metrics - end_time round up 1 unit to include now
• #7649: Fix for VPC FlowLog issue VPC flow-logs policy Errors #7648
• #7645: aws - quotas - update quotas onto the default quotas
• #7644: c7n-org - support vars in the script args
• #7643: mailer - jinja get_date_age support seconds
• #7642: c7n-org - no overwrite when merge acct tags to resource result
• #7638: aws - actions - kms tagging
• #7637: gcp - marked-for-op - fix to support actions with hyphens
• 💥 #7636: releng - bump package versions for 0.9.18.0
• #7632: aws - apigw cross-account, handle policy mangling and use correct default
• #7631: offhour - escape tag restricted chars with uxx
• #7630: gcp - also get project id from GCP_PROJECT env
• #7629: gcp - metrics - start/end time need to end with Z
• #7628: Add new count filter to the RDS and RDS Cluster resources
• #7627: Only disable Stop/Termination Protection only when necessary
• #7626: Added new resource securityContacts
• #7624: gcp - sql - fix augment function in GCP SQL
• #7622: aws.event-rule | Filter unknown arns and add event-bus as a valid target
• #7621: releng - docs build - update cache keys to address stale cache issue
• #7619: releng - docker update poetry version and update ubuntu base image
• #7618: Aws.rds.cluster.paragroup.filter
• #7617: Allow to pass role to subscription-filter Allow to pass IAM role to "put_subscription_filter" call #7609
• #7614: Update URL for Meeting Archives
• #7613: Add myself as admin contact for the project
• #7611: aws - filters - add aws:SourceAccount support to cross-account filter
• #7608: feat: add ec2 filter for disableApiStop attribute
• #7607: fix: terminate only 'batch' number of instances a request
• #7605: releng - update policystream to use 22.04 and remove libgit compilation
• #7603: gcp - gke - add labels filters and actions
• #7602: release - 0.9.18.0 - prep for release 0.9.18
• #7601: lint - fix E275 findings from pycodestyle 2.9.0
• #7598: Make Terminate force=True work with Stop Protection
• #7594: fix: skip incorrect action_date instead of failing c7n
• #7592: Get Bucket Encryption Fails When No Encryption Configuration Is Present but KMS Bucket Key is Enabled
• #7591: Get Bucket Encryption Fails When No Encryption Configuration Is Present but KMS Bucket Key is Enabled
• #7588: aws - cloudfront - support fetching with arns
• #7586: tools/c7n-mailer - fix null exception of notify_action_to
• #7585: AWS - RedshiftParameterGroup Added new resource type param-group
• #7579: chore: cleanup the blob output handlers.
• #7578: Created a filter on account resource to check if s3 bucket i.e.registered for lake-formation belongs to same account or not
• #7576: aws - cloudfront - post-finding fix webacl attribute
• #7575: aws - kinesis - config source attribute adaptation fix
• #7574: aws - apigw waf - fix for APIGateway resources returned are tuples #7573 and cloudtrail mode support for apigw
• #7572: aws - quotas - include aws default service quotas
• #7570: core - structural validate handle explicit null filters or actions
• #7569: aws - vpc - flow-logs - bugfix LogDestination key error
• #7568: aws - budget execution mode

PR's Closed

• #7653: Fix for VPC FlowLog issue VPC flow-logs policy Errors #7648
• #7651: metrics - end_time round up 1 unit to include now
• #7649: Fix for VPC FlowLog issue VPC flow-logs policy Errors #7648
• #7645: aws - quotas - update quotas onto the default quotas
• #7643: mailer - jinja get_date_age support seconds
• #7642: c7n-org - no overwrite when merge acct tags to resource result
• #7638: aws - actions - kms tagging
• #7637: gcp - marked-for-op - fix to support actions with hyphens
• #7636: releng - bump package versions for 0.9.18.0
• #7632: aws - apigw cross-account, handle policy mangling and use correct default
• #7631: offhour - escape tag restricted chars with uxx
• #7630: gcp - also get project id from GCP_PROJECT env
• #7629: gcp - metrics - start/end time need to end with Z
• #7627: Only disable Stop/Termination Protection only when necessary
• #7624: gcp - sql - fix augment function in GCP SQL
• #7622: aws.event-rule | Filter unknown arns and add event-bus as a valid target
• #7621: releng - docs build - update cache keys to address stale cache issue
• #7619: releng - docker update poetry version and update ubuntu base image
• #7613: Add myself as admin contact for the project
• #7611: aws - filters - add aws:SourceAccount support to cross-account filter
• #7607: fix: terminate only 'batch' number of instances a request
• #7605: releng - update policystream to use 22.04 and remove libgit compilation
• #7602: release - 0.9.18.0 - prep for release 0.9.18
• #7601: lint - fix E275 findings from pycodestyle 2.9.0
• #7598: Make Terminate force=True work with Stop Protection
• #7594: fix: skip incorrect action_date instead of failing c7n
• #7592: Get Bucket Encryption Fails When No Encryption Configuration Is Present but KMS Bucket Key is Enabled
• #7591: Get Bucket Encryption Fails When No Encryption Configuration Is Present but KMS Bucket Key is Enabled
• #7588: aws - cloudfront - support fetching with arns
• #7586: tools/c7n-mailer - fix null exception of notify_action_to
• #7579: chore: cleanup the blob output handlers.
• #7576: aws - cloudfront - post-finding fix webacl attribute
• #7575: aws - kinesis - config source attribute adaptation fix
• #7572: aws - quotas - include aws default service quotas
• #7570: core - structural validate handle explicit null filters or actions
• #7569: aws - vpc - flow-logs - bugfix LogDestination key error
• #7568: aws - budget execution mode
• #7561: AWS - Connect - Create new Connect resource and instance-attribute filter
• #7525: aws - sns and sqs- add reusable "has-statement" filter
• #7519: aws - waf/wafv2 - ability to associate apigateway, cloudfront and elb resources between waf and wafv2 web-acls
• #7498: gcp - gcp-periodic - trigger type is http, fix for delta_resource, require service-account
• #7460: AWS - Workspaces - Create filter for workspaces directory connection aliases
• #7307: aws - metrics - align metric window with cloudwatch retention schedule
• #7273: aws - rename and update lakeformation resource
• #7252: Fsx backup checks
• #7221: slack_delivery: Allow using email address in tag's value
• #7200: [Issue Error while executing policy flow-logs-enabled #6152] Error while executing policy flow-logs-enabled
• #5885: aws - apigw cross-account, handle policy mangling and use correct default

Issues Opened

• 💥 #7656: Cloud custodian v0.9.18.0 is not able to find our policy file in the container
• #7648: VPC flow-logs policy Errors
• #7647: Add delete action and remove-statement action for secrets manager
• #7646: Add KMS filter for Secrets Manager
• #7641: aws.iam-role - [ERROR] ClientError: An error occurred (Throttling) when calling the SimulatePrincipalPolicy operation (reached max retries: 4): Rate exceeded
• #7639: AttributeError: 'list' object has no attribute 'get'
• #7635: Support for lambda layers and how to adjust environment/handler?
• #7634: UnitTests using assertTrue(x, y) instead of assertEqual(x, y)
• #7623: GCP mark(ed)-for-op support op that contains hyphen
• #7620: ci - doc builds not using cache and thus taking excess time
• #7612: DocumentDB offHours downtime support
• #7610: Policy using resource: iam-policy recieves UnrecognizedClientException during dry-run in GovCloud
• #7609: Allow to pass IAM role to "put_subscription_filter" call
• #7600: CI lint failing with E275 errors in pycodestyle 2.9.0
• #7599: GuardDuty support for newer resources
• #7597: [EC2] Force Terminate does not work when disableApiStop is set
• #7593: Error when sending logs from Lambda to s3 buckets in another region
• #7590: Custodian GCP Http cache issue
• 💥 #7587: AWS Lakeformation registered location for S3 and role
• #7584: Service Limits are not showing updated limits
• #7583: Add Secrets Manager secrets resource
• #7582: Usage of fallback_schedule option in RDS offhours policy
• #7577: c7n-org Out of Memory (OOM) Condition When Running Merged Policy File Across 500+ Accounts
• #7573: APIGateway resources returned are tuples
• #7567: NoneType Issue
• #7566: account-service-limits for s3

Issues Closed

• #7623: GCP mark(ed)-for-op support op that contains hyphen
• #7620: ci - doc builds not using cache and thus taking excess time
• #7612: DocumentDB offHours downtime support
• #7600: CI lint failing with E275 errors in pycodestyle 2.9.0
• #7597: [EC2] Force Terminate does not work when disableApiStop is set
• #7583: Add Secrets Manager secrets resource
• #7567: NoneType Issue
• #7566: account-service-limits for s3
• #7564: Error using event-rule invalid-targets filter
• #7548: post-finding action of aws.distribution resource is throwing error
• #7471: Add AWS Connect resource to Cloud custodian
• #7470: Using config-rule mode with aws.kinesis resource results in KeyError: 'StreamName'
• #7158: Error installing c7n-gcp
• #6367: feat: Generic Helm Chart?
• #6258: Cross account filter in rest-api returning error while execution
• #6152: Error while executing policy flow-logs-enabled