# C7n Community Meeting Minutes
# August 22nd 2023

###### tags: `Meeting`

:::info
- **URL:** https://meet.google.com/mii-evqh-esh
- **Date:** August 22, 2023 (2:00 PM (ET) / 11:00 AM (PT) / 8PM (UTC))
- **[Timezone Converter (Click me)](https://www.timeanddate.com/worldclock/converter.html?iso=20210629T190000&p1=tz_et&p2=tz_pt&p3=22&p4=240&p5=136&p6=176&p7=37&p8=248)**
- **Agenda**

1. Intros `10m`
1. Agenda Items `20m`
1. PR Party `30m`

:::

## Agenda Item

- Intros, etc
- c7n-left 0.2.0 released - multiple improvements

:mag: PR / Issue Discussion
---
# Weekly Report
Weekly status report for cloud-custodian/cloud-custodian Week #34 2023

## Weekly Stats
| | Opened this week| Closed this week|
|--|---|-----|
|Issues| 15 | 15|
|PR's| 37 | 36|

## PR's Opened
* [#8866](https://github.com/cloud-custodian/cloud-custodian/pull/8866): aws - add update-env and delete-env to airflow
* [#8862](https://github.com/cloud-custodian/cloud-custodian/pull/8862): releng - handle chainguard image change re no version
* [#8861](https://github.com/cloud-custodian/cloud-custodian/pull/8861): c7n-left - data resource types are now prefixed w/ data.
* [#8855](https://github.com/cloud-custodian/cloud-custodian/pull/8855): c7n-left - terraform module resources now display instead the invoking block
* [#8854](https://github.com/cloud-custodian/cloud-custodian/pull/8854): 1488 add delete vpc action
* [#8852](https://github.com/cloud-custodian/cloud-custodian/pull/8852): c7n-left - support taggable filter and default provider tags
* [#8851](https://github.com/cloud-custodian/cloud-custodian/pull/8851): resolver - support decompression when using value_from with s3
* [#8850](https://github.com/cloud-custodian/cloud-custodian/pull/8850): aws - ecs - Adding network-location filter for ecs
* [#8849](https://github.com/cloud-custodian/cloud-custodian/pull/8849): aws - ec2- add instance-expiration-tag filter
* [#8848](https://github.com/cloud-custodian/cloud-custodian/pull/8848): Feature/expiration tag filter
* [#8846](https://github.com/cloud-custodian/cloud-custodian/pull/8846): OCI - session factory creation correction
* [#8845](https://github.com/cloud-custodian/cloud-custodian/pull/8845): OCI - remove the extra data from the Group cassette files
* [#8844](https://github.com/cloud-custodian/cloud-custodian/pull/8844): OCI - remove the extra data from the Compartment cassette files
* [#8842](https://github.com/cloud-custodian/cloud-custodian/pull/8842): Iam filter
* [#8841](https://github.com/cloud-custodian/cloud-custodian/pull/8841): c7n-left - support --var-file parameter, update tfparse
* [#8840](https://github.com/cloud-custodian/cloud-custodian/pull/8840): awscc - use build step to fetch data files
* [#8839](https://github.com/cloud-custodian/cloud-custodian/pull/8839): OCI - remove the extra data from the VCN cassette files
* [#8837](https://github.com/cloud-custodian/cloud-custodian/pull/8837): create new azure resource for application insights
* [#8836](https://github.com/cloud-custodian/cloud-custodian/pull/8836): releng - automate release artifact downloads
* [#8835](https://github.com/cloud-custodian/cloud-custodian/pull/8835): add policy example for rds reserved instances
* [#8834](https://github.com/cloud-custodian/cloud-custodian/pull/8834): OCI - remove extra data from the Subnet cassette files
* [#8833](https://github.com/cloud-custodian/cloud-custodian/pull/8833): aws - glue catalog - kms-key filter and set-encryption refactor
* [#8832](https://github.com/cloud-custodian/cloud-custodian/pull/8832): awscc - update schema catalog
* [#8831](https://github.com/cloud-custodian/cloud-custodian/pull/8831): releng - pin terraform to last oss version
* [#8829](https://github.com/cloud-custodian/cloud-custodian/pull/8829): gcp - dns zone records filter
* [#8827](https://github.com/cloud-custodian/cloud-custodian/pull/8827): Added new resource for Azure Bastion Host
* [#8826](https://github.com/cloud-custodian/cloud-custodian/pull/8826): gcp - big query - encrypt filter
* [#8825](https://github.com/cloud-custodian/cloud-custodian/pull/8825): gcp - instance-group-manager, zone
* [#8823](https://github.com/cloud-custodian/cloud-custodian/pull/8823): aws - ssm session manager
* [#8822](https://github.com/cloud-custodian/cloud-custodian/pull/8822): releng - fix aws functional test
* [#8821](https://github.com/cloud-custodian/cloud-custodian/pull/8821): aws - sg - unused/used filter don't consider self references as usage
* [#8820](https://github.com/cloud-custodian/cloud-custodian/pull/8820): releng - update data dictionaries
* [#8819](https://github.com/cloud-custodian/cloud-custodian/pull/8819): releng - dependency upgrade 2023/08/14
* [#8814](https://github.com/cloud-custodian/cloud-custodian/pull/8814): gcp - firewall filters, vpc dns policy filter
* [#8813](https://github.com/cloud-custodian/cloud-custodian/pull/8813): Networkfilters
* [#8812](https://github.com/cloud-custodian/cloud-custodian/pull/8812): gcp - firewall filters: attached-to-cluster
* [#8811](https://github.com/cloud-custodian/cloud-custodian/pull/8811): Create new resource front-door-policy to list FrontDoor WAF policies

## PR's Closed
* [#8862](https://github.com/cloud-custodian/cloud-custodian/pull/8862): releng - handle chainguard image change re no version
* [#8861](https://github.com/cloud-custodian/cloud-custodian/pull/8861): c7n-left - data resource types are now prefixed w/ data.
* [#8855](https://github.com/cloud-custodian/cloud-custodian/pull/8855): c7n-left - terraform module resources now display instead the invoking block
* [#8852](https://github.com/cloud-custodian/cloud-custodian/pull/8852): c7n-left - support taggable filter and default provider tags
* [#8848](https://github.com/cloud-custodian/cloud-custodian/pull/8848): Feature/expiration tag filter
* [#8846](https://github.com/cloud-custodian/cloud-custodian/pull/8846): OCI - session factory creation correction
* [#8845](https://github.com/cloud-custodian/cloud-custodian/pull/8845): OCI - remove the extra data from the Group cassette files
* [#8844](https://github.com/cloud-custodian/cloud-custodian/pull/8844): OCI - remove the extra data from the Compartment cassette files
* [#8841](https://github.com/cloud-custodian/cloud-custodian/pull/8841): c7n-left - support --var-file parameter, update tfparse
* [#8839](https://github.com/cloud-custodian/cloud-custodian/pull/8839): OCI - remove the extra data from the VCN cassette files
* [#8837](https://github.com/cloud-custodian/cloud-custodian/pull/8837): create new azure resource for application insights
* [#8835](https://github.com/cloud-custodian/cloud-custodian/pull/8835): add policy example for rds reserved instances
* [#8834](https://github.com/cloud-custodian/cloud-custodian/pull/8834): OCI - remove extra data from the Subnet cassette files
* [#8832](https://github.com/cloud-custodian/cloud-custodian/pull/8832): awscc - update schema catalog
* [#8831](https://github.com/cloud-custodian/cloud-custodian/pull/8831): releng - pin terraform to last oss version
* [#8827](https://github.com/cloud-custodian/cloud-custodian/pull/8827): Added new resource for Azure Bastion Host
* [#8823](https://github.com/cloud-custodian/cloud-custodian/pull/8823): aws - ssm session manager
* [#8822](https://github.com/cloud-custodian/cloud-custodian/pull/8822): releng - fix aws functional test
* [#8821](https://github.com/cloud-custodian/cloud-custodian/pull/8821): aws - sg - unused/used filter don't consider self references as usage
* [#8819](https://github.com/cloud-custodian/cloud-custodian/pull/8819): releng - dependency upgrade 2023/08/14
* [#8813](https://github.com/cloud-custodian/cloud-custodian/pull/8813): Networkfilters
* [#8811](https://github.com/cloud-custodian/cloud-custodian/pull/8811): Create new resource front-door-policy to list FrontDoor WAF policies
* [#8810](https://github.com/cloud-custodian/cloud-custodian/pull/8810): OCI logging and object storage integration
* [#8809](https://github.com/cloud-custodian/cloud-custodian/pull/8809): Oci metrics query compartment fix
* [#8807](https://github.com/cloud-custodian/cloud-custodian/pull/8807): OCI - remove extra data from bucket cassettes
* [#8806](https://github.com/cloud-custodian/cloud-custodian/pull/8806): modified_db_cluster based on engine type
* [#8805](https://github.com/cloud-custodian/cloud-custodian/pull/8805): Added filter for server parameter in azure mysql server
* [#8803](https://github.com/cloud-custodian/cloud-custodian/pull/8803): issue-8783: handling pristine default security groups
* [#8802](https://github.com/cloud-custodian/cloud-custodian/pull/8802): Add handling for zonal GKE clusters
* [#8799](https://github.com/cloud-custodian/cloud-custodian/pull/8799): aws - more resource types
* [#8796](https://github.com/cloud-custodian/cloud-custodian/pull/8796): Bump cryptography from 41.0.2 to 41.0.3 in /tools/c7n_azure
* [#8795](https://github.com/cloud-custodian/cloud-custodian/pull/8795): releng - use ubuntu for c7n-left image
* [#8793](https://github.com/cloud-custodian/cloud-custodian/pull/8793): RDS pending maintenance list
* [#8792](https://github.com/cloud-custodian/cloud-custodian/pull/8792): gcp - iam filters
* [#8686](https://github.com/cloud-custodian/cloud-custodian/pull/8686): aws-s3-bucket-add replication filter
* [#8200](https://github.com/cloud-custodian/cloud-custodian/pull/8200): awscc - update type schemas

## Issues Opened
* [#8865](https://github.com/cloud-custodian/cloud-custodian/issues/8865): Azure - vmss resize support
* [#8863](https://github.com/cloud-custodian/cloud-custodian/issues/8863): releng - update cosign to v2
* [#8860](https://github.com/cloud-custodian/cloud-custodian/issues/8860): aws - wafv2 raising TypeError when waf has ByteMatchStatement Rules
* [#8859](https://github.com/cloud-custodian/cloud-custodian/issues/8859): GCP - switch from "stop" to "pause" for stop actions in gcp.instances
* [#8858](https://github.com/cloud-custodian/cloud-custodian/issues/8858): core - value filter - value_type base64
* [#8857](https://github.com/cloud-custodian/cloud-custodian/issues/8857): c7n-left - iam document filter
* [#8856](https://github.com/cloud-custodian/cloud-custodian/issues/8856): c7n-left - terraform - data is mixed into resources namespace
* [#8853](https://github.com/cloud-custodian/cloud-custodian/issues/8853): c7n-left - support multiple policy directories
* [#8847](https://github.com/cloud-custodian/cloud-custodian/issues/8847): gcp - support cloud function v2 resources
* [#8843](https://github.com/cloud-custodian/cloud-custodian/issues/8843): aws - glue catalog issues
* [#8830](https://github.com/cloud-custodian/cloud-custodian/issues/8830): aws - api stat for tracking api call retries
* [#8824](https://github.com/cloud-custodian/cloud-custodian/issues/8824): ECS network-location filter
* [#8817](https://github.com/cloud-custodian/cloud-custodian/issues/8817): releng - pin linter
* [#8816](https://github.com/cloud-custodian/cloud-custodian/issues/8816): c7n-sphinxext==1.1.28 cannot be installed due to dependency conflicts with c7n==0.9.29
* [#8815](https://github.com/cloud-custodian/cloud-custodian/issues/8815): aws - cache-cluster - error occurred (InvalidParameterValue)

## Issues Closed
* [#8856](https://github.com/cloud-custodian/cloud-custodian/issues/8856): c7n-left - terraform - data is mixed into resources namespace
* [#8817](https://github.com/cloud-custodian/cloud-custodian/issues/8817): releng - pin linter
* [#8816](https://github.com/cloud-custodian/cloud-custodian/issues/8816): c7n-sphinxext==1.1.28 cannot be installed due to dependency conflicts with c7n==0.9.29
* [#8783](https://github.com/cloud-custodian/cloud-custodian/issues/8783): the unused filter for aws.security-group needs to ignore default IpPermissions
* [#8769](https://github.com/cloud-custodian/cloud-custodian/issues/8769): modify_db_cluster method for rds-cluster is not working when RDS EngineMode= 'serverless'
* [#8763](https://github.com/cloud-custodian/cloud-custodian/issues/8763): Support for AWS Systems Manager - Session Manager
* [#8704](https://github.com/cloud-custodian/cloud-custodian/issues/8704): ACTION REQUIRED: Changes to pulling Chainguard Images
* [#8458](https://github.com/cloud-custodian/cloud-custodian/issues/8458): c7n-left - finding in module should record caller
* [#8214](https://github.com/cloud-custodian/cloud-custodian/issues/8214): shift-left - terraform aws provider should propagate default tags
* [#8210](https://github.com/cloud-custodian/cloud-custodian/issues/8210): shift-left - support passing variables/inputs on run cli
* [#8175](https://github.com/cloud-custodian/cloud-custodian/issues/8175): S3 Add Filter for Bucket Replication filter
* [#5782](https://github.com/cloud-custodian/cloud-custodian/issues/5782): proposal - shift left - policies on iaac assets
* [#3903](https://github.com/cloud-custodian/cloud-custodian/issues/3903): aws - arn resolver and metadata refactor
* [#1390](https://github.com/cloud-custodian/cloud-custodian/issues/1390): Exponential Backoff / Throttling for Rate Limits
* [#972](https://github.com/cloud-custodian/cloud-custodian/issues/972): token bucket for ops/actions on large resource counts