# C7N Community Meeting Minutes 2025-01-21

:::info

- **URL:** meet.google.com/mii-evqh-esh
- **Date:** January 21, 2025 (2:00 PM (ET) / 11:00 AM (PT) / 7PM (UTC))
- **[Timezone Converter (Click me)](https://www.timeanddate.com/worldclock/converter.html?iso=20220621T180000&p1=263&p2=224&p3=136&p4=37&p5=367&p6=438&p7=248&p8=22)**
- **Agenda**
1. Intros `10m`
1. Agenda Items `20m`
1. PR Party `30m`
- **Meeting Contact:** AJ: <[e-mail]>
- **Video Archive and Transcripts**: https://mtngs.io/cloud-custodian/community-meetings/
:::

## Agenda Items

- Due for a release - blockers
- https://github.com/cloud-custodian/cloud-custodian/pull/9928
- tfparse release for 3.13
- Freeze-wheel release first may help
- Supported poetry v2 in https://github.com/cloud-custodian/poetry-plugin-freeze/pull/27
- Open PRs
- https://github.com/cloud-custodian/poetry-plugin-freeze/pull/28
- https://github.com/cloud-custodian/poetry-plugin-freeze/pull/30
- Sonny [topics](https://cloud-custodian.slack.com/archives/C03UC3D92J3/p1736967083464789)
- EOL for python 3.8 (python EOL was last November, Amazon EOL for lambdas is Feb 2025)
- No reservations about c7n dropping 3.8 support
- Add 3.13 separately
- Merge Queues for PR Management
- :thumbsup:
- Related but separate - check CI times
- Hold off until after this release
- Look into configuration options
- Automated formatting/Github Action to check well formatted PR titles
- Sonny to open proposal/issue for this

### PR/Issue Discussion

-
- https://github.com/cloud-custodian/cloud-custodian/pull/9947
-
- https://github.com/cloud-custodian/cloud-custodian/pull/9868
- provide review guidance on filter vs. child resource
- note for child resources: override get_resources
- https://github.com/cloud-custodian/cloud-custodian/pull/9902
- worth fixing issues / addressing comments and landing
-

# Weekly Report
Weekly status report for cloud-custodian/cloud-custodian Week #03 2025

## Here's what the team has focused on this week:
*

## Weekly Stats
| | Opened this week| Closed this week|
|--|---|-----|
|Issues| 14 | 11|
|PR's| 23 | 39|

| | |
|--|--|
| New stars | 36|
| New forks | 12|

## PR's Opened
* [#9950](https://github.com/cloud-custodian/cloud-custodian/pull/9950): Add jit policy ports filter for azure.vm
* [#9949](https://github.com/cloud-custodian/cloud-custodian/pull/9949): aws - workspaces-web - BugFix: empty browser policy, add tests
* [#9947](https://github.com/cloud-custodian/cloud-custodian/pull/9947): aws - ses - ingress - endpoints
* [#9946](https://github.com/cloud-custodian/cloud-custodian/pull/9946): gcp - instance - add support for discard_local_ssd in stop action
* [#9944](https://github.com/cloud-custodian/cloud-custodian/pull/9944): aws - lexv2-bot - set maxResults
* [#9943](https://github.com/cloud-custodian/cloud-custodian/pull/9943): Bump jinja2 from 3.1.4 to 3.1.5
* [#9940](https://github.com/cloud-custodian/cloud-custodian/pull/9940): chore: Add a large c7n-left test and docs for jmespath
* [#9937](https://github.com/cloud-custodian/cloud-custodian/pull/9937): aws - add support for lexv2 bot
* [#9936](https://github.com/cloud-custodian/cloud-custodian/pull/9936): aws - cfn - stacks - Add ARN definition
* [#9935](https://github.com/cloud-custodian/cloud-custodian/pull/9935): c7n_tencentcloud - resources - subnet
* [#9933](https://github.com/cloud-custodian/cloud-custodian/pull/9933): AWS - Athena Resource Tagging support
* [#9931](https://github.com/cloud-custodian/cloud-custodian/pull/9931): Update mgmt ml lib and enable additional properties
* [#9930](https://github.com/cloud-custodian/cloud-custodian/pull/9930): Add webapps filter to app-service-plan
* [#9929](https://github.com/cloud-custodian/cloud-custodian/pull/9929): gcp - c7n_org - handle empty project name
* [#9928](https://github.com/cloud-custodian/cloud-custodian/pull/9928): 2025-01 - update data dictionaries
* [#9927](https://github.com/cloud-custodian/cloud-custodian/pull/9927): aws - network-manager - handle shared networks
* [#9926](https://github.com/cloud-custodian/cloud-custodian/pull/9926): aws kafka config
* [#9925](https://github.com/cloud-custodian/cloud-custodian/pull/9925): Bump jinja2 from 3.1.4 to 3.1.5 in /tools/c7n_salactus
* [#9924](https://github.com/cloud-custodian/cloud-custodian/pull/9924): azure - keyvault - add update action
* [#9922](https://github.com/cloud-custodian/cloud-custodian/pull/9922): Bump golang.org/x/net from 0.23.0 to 0.33.0 in /tools/cask
* [#9920](https://github.com/cloud-custodian/cloud-custodian/pull/9920): Bump jinja2 from 3.1.4 to 3.1.5 in /tools/c7n_mailer
* [#9919](https://github.com/cloud-custodian/cloud-custodian/pull/9919): optimize set credential env variables of tencent-cloud tests
* [#9918](https://github.com/cloud-custodian/cloud-custodian/pull/9918): Optimize set credential env vars

## PR's Closed
* [#9946](https://github.com/cloud-custodian/cloud-custodian/pull/9946): gcp - instance - add support for discard_local_ssd in stop action
* [#9944](https://github.com/cloud-custodian/cloud-custodian/pull/9944): aws - lexv2-bot - set maxResults
* [#9943](https://github.com/cloud-custodian/cloud-custodian/pull/9943): Bump jinja2 from 3.1.4 to 3.1.5
* [#9940](https://github.com/cloud-custodian/cloud-custodian/pull/9940): chore: Add a large c7n-left test and docs for jmespath
* [#9937](https://github.com/cloud-custodian/cloud-custodian/pull/9937): aws - add support for lexv2 bot
* [#9936](https://github.com/cloud-custodian/cloud-custodian/pull/9936): aws - cfn - stacks - Add ARN definition
* [#9935](https://github.com/cloud-custodian/cloud-custodian/pull/9935): c7n_tencentcloud - resources - subnet
* [#9933](https://github.com/cloud-custodian/cloud-custodian/pull/9933): AWS - Athena Resource Tagging support
* [#9931](https://github.com/cloud-custodian/cloud-custodian/pull/9931): Update mgmt ml lib and enable additional properties
* [#9930](https://github.com/cloud-custodian/cloud-custodian/pull/9930): Add webapps filter to app-service-plan
* [#9929](https://github.com/cloud-custodian/cloud-custodian/pull/9929): gcp - c7n_org - handle empty project name
* [#9927](https://github.com/cloud-custodian/cloud-custodian/pull/9927): aws - network-manager - handle shared networks
* [#9926](https://github.com/cloud-custodian/cloud-custodian/pull/9926): aws kafka config
* [#9925](https://github.com/cloud-custodian/cloud-custodian/pull/9925): Bump jinja2 from 3.1.4 to 3.1.5 in /tools/c7n_salactus
* [#9922](https://github.com/cloud-custodian/cloud-custodian/pull/9922): Bump golang.org/x/net from 0.23.0 to 0.33.0 in /tools/cask
* [#9920](https://github.com/cloud-custodian/cloud-custodian/pull/9920): Bump jinja2 from 3.1.4 to 3.1.5 in /tools/c7n_mailer
* [#9919](https://github.com/cloud-custodian/cloud-custodian/pull/9919): optimize set credential env variables of tencent-cloud tests
* [#9918](https://github.com/cloud-custodian/cloud-custodian/pull/9918): Optimize set credential env vars
* [#9911](https://github.com/cloud-custodian/cloud-custodian/pull/9911): aws - sesv2 - Add support for sesv2 configuration sets
* [#9909](https://github.com/cloud-custodian/cloud-custodian/pull/9909): aws - shield - tagging
* [#9904](https://github.com/cloud-custodian/cloud-custodian/pull/9904): azure - storage - set minimum tls version on buckets
* [#9899](https://github.com/cloud-custodian/cloud-custodian/pull/9899): aws - directory - [Bug Fix] - Filtering directories without trusts
* [#9892](https://github.com/cloud-custodian/cloud-custodian/pull/9892): feat: add network-location filter
* [#9885](https://github.com/cloud-custodian/cloud-custodian/pull/9885): aws - iam-role - bugfix for IAM role ARN parsing
* [#9881](https://github.com/cloud-custodian/cloud-custodian/pull/9881): aws - kendra resource
* [#9878](https://github.com/cloud-custodian/cloud-custodian/pull/9878): c7n_tencentcloud - resources - EIP & DnsRecords
* [#9877](https://github.com/cloud-custodian/cloud-custodian/pull/9877): aws - policystatement - has-statement partial-match
* [#9876](https://github.com/cloud-custodian/cloud-custodian/pull/9876): aws - quicksight-account
* [#9874](https://github.com/cloud-custodian/cloud-custodian/pull/9874): Fix aws event rule and event rule target
* [#9867](https://github.com/cloud-custodian/cloud-custodian/pull/9867): fix: sns-subscription get resources
* [#9856](https://github.com/cloud-custodian/cloud-custodian/pull/9856): add cross account filter for efs
* [#9849](https://github.com/cloud-custodian/cloud-custodian/pull/9849): feat: add support for aws-kafka-cluster config
* [#9848](https://github.com/cloud-custodian/cloud-custodian/pull/9848): aws - account - update has-virtual-mfa
* [#9837](https://github.com/cloud-custodian/cloud-custodian/pull/9837): aws - directory service log subscription filter
* [#9831](https://github.com/cloud-custodian/cloud-custodian/pull/9831): Add afd endpoint and afd custom domain resources
* [#9783](https://github.com/cloud-custodian/cloud-custodian/pull/9783): c7n-left: handle reference list declared in __tfmeta
* [#9768](https://github.com/cloud-custodian/cloud-custodian/pull/9768): aws - cfn - search template filter
* [#9759](https://github.com/cloud-custodian/cloud-custodian/pull/9759): aws - ses-email-identity cross-account filter
* [#9721](https://github.com/cloud-custodian/cloud-custodian/pull/9721): aws - cloudhsm - backup

## Issues Opened
* [#9948](https://github.com/cloud-custodian/cloud-custodian/issues/9948): Add SES Ingress Endpoints
* [#9945](https://github.com/cloud-custodian/cloud-custodian/issues/9945): synchronization of csv report files to S3
* [#9942](https://github.com/cloud-custodian/cloud-custodian/issues/9942): c7n-left - Failed install on Python 3.13
* [#9941](https://github.com/cloud-custodian/cloud-custodian/issues/9941): gcp.iam-role is possibly erroneously returning only predefined roles
* [#9939](https://github.com/cloud-custodian/cloud-custodian/issues/9939): Cannot authenticate to EKS cluster using kubeconfig file #9938
* [#9938](https://github.com/cloud-custodian/cloud-custodian/issues/9938): Cannot authenticate to EKS cluster using kubeconfig file
* [#9934](https://github.com/cloud-custodian/cloud-custodian/issues/9934): aws - security groups - opt-in regions
* [#9932](https://github.com/cloud-custodian/cloud-custodian/issues/9932): aws - athena - tagging support
* [#9923](https://github.com/cloud-custodian/cloud-custodian/issues/9923): Add a savings plan resource
* [#9921](https://github.com/cloud-custodian/cloud-custodian/issues/9921): Cannot Delete AWS NLB associated with VPC Endpoint Services
* [#9917](https://github.com/cloud-custodian/cloud-custodian/issues/9917): Add support for Macie automated sensitive data discovery configuration
* [#9916](https://github.com/cloud-custodian/cloud-custodian/issues/9916): azure.webapp - Add action to set the configuration (needed to enforce latest HTTP 2.0)
* [#9915](https://github.com/cloud-custodian/cloud-custodian/issues/9915): azure.keyvault - Add action to enable/disable soft delete on key vaults
* [#9914](https://github.com/cloud-custodian/cloud-custodian/issues/9914): Azure.storage - Add an action to enable/disable blob anonymous access.

## Issues Closed
* [#9932](https://github.com/cloud-custodian/cloud-custodian/issues/9932): aws - athena - tagging support
* [#9910](https://github.com/cloud-custodian/cloud-custodian/issues/9910): AWS - SES - Add support to SESv2 Configuration Sets
* [#9908](https://github.com/cloud-custodian/cloud-custodian/issues/9908): AWS - Network Manager - Core Networks - 404 error when there's a shared core network from RAM
* [#9898](https://github.com/cloud-custodian/cloud-custodian/issues/9898): AWS - Directories - Cannot filter for directories with a trust
* [#9893](https://github.com/cloud-custodian/cloud-custodian/issues/9893): Add network-location filter to timestream-influxdb resource
* [#9887](https://github.com/cloud-custodian/cloud-custodian/issues/9887): Azure.Storage - Add update action to enable/enforce TLSv1.2
* [#9875](https://github.com/cloud-custodian/cloud-custodian/issues/9875): Quicksight Account Support
* [#9866](https://github.com/cloud-custodian/cloud-custodian/issues/9866): cloudtrail policies for sns-subscription time out
* [#9836](https://github.com/cloud-custodian/cloud-custodian/issues/9836): Directory Service Log Forwarding
* [#9824](https://github.com/cloud-custodian/cloud-custodian/issues/9824): New resource support: aws.kendra_index
* [#9758](https://github.com/cloud-custodian/cloud-custodian/issues/9758): Support cross-account filtering for ses-email-identity