0.9.35.0

[kapilt]

aws

• aws - account - add support for bedrock model invocation logging configuration (aws - bedrock - add support for model invocation logging configuration #9259)
• aws - add set-policy action for iam-profile resource (add set-policy action for iam-profile resource #9257)
• aws - allow excluding specific processes when resuming ASGs (aws - allow excluding specific processes when resuming ASGs #9252)
• aws - appmesh support (First cut of adding support for appmesh #9260)
• aws - bedrock - support for knowledge base, bedrock-agent delete action (aws - bedrock - add support for knowledge base #9301)
• aws - bedrock customization jobs, tag, kms-key and stop action (aws - bedrock customization jobs, tag, kms-key and stop action #9282)
• aws - cloud watch alarm - add a filter for determining if part of a composite alarm (aws - add cwa filter for alarms that have a parent composite alarm #9300)
• aws - dynamodb-table - avoid key errors in continuous-backup filter (aws - dynamodb-table - avoid key errors in continuous-backup filter #9266)
• aws - ec2 resize from cost hub recommendation (aws - ec2 resize from cost hub recommendation #9281)
• aws - ecs-service - modify-definition with resize support (aws - ecs-service - modify-definition with resize support #9288)
• aws - ism-role - fix config resource id (aws - fix iam-role config resource ID #9294)
• aws - lambda update action w/ resize support from cost recommendation hub (aws - lambda resize from cost recommendation hub #9283)
• aws - rds-proxy fix cfn type (aws - rds-proxy cfn type #9267)
• aws - route53 record set delete action, hosted zone delete fix (aws - Added new action and a bugfix for existing action for route53 #9291)
• aws - s3 - support for storage lens configuration (aws - s3 - add support for storage lens configuration #9271)

awscc

• awscc - update action - ensure patch only against updatable properties, support user supplied jsonpatch (awscc - update action - ensure patch only against updatable properties #9297)

azure

• azure - automation-account variable filter (azure - automation-account, automation-account.filters.variable-value #8999)
• azure - azure.vm.filters.backup-status (azure.vm.filters.backup-status #9242)
• azure - front-door waf filter (azure - front-door.filters.web-application-firewall-policies #9038)
• azure - redis firewall filter (azure - redis.filters.redis-firewall-filter #9045)
• azure - sql server auditing filter (azure - azure.sql-auditing-settings #9097)
• azure - sql-server filters - failover-group and security-alert-policies (azure - sql-server.filters failover-group-filter sql-server-security-alert-policies #9114)

docs

• docs - minor gcp and c7n left fixes (docs - minor fixes #9129)
• docs - remove beta label on gcp (releng - remove beta label on gcp #9278)
• docs - update vector.dev toml configuration (docs - update vector.dev toml configuration #9279)

releng

• releng - docs publish - ensure use of pypi for awscli install (releng - ensure use of pypi for awscli install #9314)
• releng - downgrade urllib3 for release (releng - downgrade urllib3 for release #9334)
• releng - pin freeze wheel to previous release due to error (releng - pin freeze wheel to previous release due to error #9332)
• releng - prep 0.9.35 release (releng - prep 0.9.35 release #9328)
• releng - update github actions versions and fix doc build (releng - update github actions versions and fix doc build #9262)
• releng - cryptography from 41.0.7 to 42.0.4 in /tools/c7n_mailer (Bump cryptography from 41.0.7 to 42.0.4 in /tools/c7n_mailer #9313)

shift-left

• c7n-left - fix policy severity level filtering for --warn-on (c7n-left - fix policy severity level filtering for --warn-on #9261)
• shift-left - handle a null tag map on a resource (shift-left - handle a null tag map on a resource #9323)
• shift-left - log policy error during execution (shift-left - log policy error during execution #9293)

tencentcloud

• tencentcloud - security group filter - fix for empty port string (fixed: invalid literal for int() with base 10 #9253)

schema changes

• aws.appmesh-mesh added
• aws.appmesh-virtual-gateway added
• aws.bedrock-agent added
• aws.bedrock-customization-job added
• aws.bedrock-knowledge-base added
• aws.s3-storage-lens added
• azure.automation-account added
• aws.account
  • added actions: set-bedrock-model-invocation-logging
  • added filters: bedrock-model-invocation-logging
• aws.alarm
  • added filters: is-composite-child
• aws.bedrock-custom-model
  • added filters: kms-key
• aws.ecs-service
  • added actions: modify-definition
• aws.iam-profile
  • added actions: set-policy
• aws.lambda
  • added actions: update
• aws.rds-proxy
  • removed filters: json-diff
• aws.rrset
  • added actions: delete
• azure.front-door
  • added filters: firewall-policy
• azure.redis
  • added filters: firewall
• azure.sql-server
  • added filters: auditing-policies, failover-group, security-alert-policies
• azure.vm
  • added filters: backup-status

New Contributors

• @thomas-stone made their first contribution in aws - allow excluding specific processes when resuming ASGs #9252
• @missedone made their first contribution in fixed: invalid literal for int() with base 10 #9253
• @Johnlon made their first contribution in First cut of adding support for appmesh #9260

Full Changelog: 0.9.34.0...0.9.35.0

---

This discussion was created from the release 0.9.35.0.