---
# System prepended metadata

title: C7N Community Meeting Minutes 2025-01-21

---

# C7N Community Meeting Minutes 2025-01-21

:::info

- **URL:** meet.google.com/mii-evqh-esh
- **Date:** January 21, 2025 (2:00 PM (ET) / 11:00 AM (PT) / 7PM (UTC)) 
- **[Timezone Converter (Click me)](https://www.timeanddate.com/worldclock/converter.html?iso=20220621T180000&p1=263&p2=224&p3=136&p4=37&p5=367&p6=438&p7=248&p8=22)**
- **Agenda**
1. Intros `10m`
1. Agenda Items `20m`
1. PR Party `30m`
- **Meeting Contact:** AJ: <aj@stacklet.io>
- **Video Archive and Transcripts**: https://mtngs.io/cloud-custodian/community-meetings/
:::

## Agenda Items

- Due for a release - blockers
    - https://github.com/cloud-custodian/cloud-custodian/pull/9928
    - tfparse release for 3.13
- Freeze-wheel release first may help
    - Supported poetry v2 in https://github.com/cloud-custodian/poetry-plugin-freeze/pull/27
    - Open PRs
        - https://github.com/cloud-custodian/poetry-plugin-freeze/pull/28
        - https://github.com/cloud-custodian/poetry-plugin-freeze/pull/30
- Sonny [topics](https://cloud-custodian.slack.com/archives/C03UC3D92J3/p1736967083464789)
    - EOL for python 3.8 (python EOL was last November, Amazon EOL for lambdas is Feb 2025)
        - No reservations about c7n dropping 3.8 support
        - Add 3.13 separately
    - Merge Queues for PR Management
        - :thumbsup: 
        - Related but separate - check CI times
        - Hold off until after this release
        - Look into configuration options
    - Automated formatting/Github Action to check well formatted PR titles
        - Sonny to open proposal/issue for this

### PR/Issue Discussion

- 
- https://github.com/cloud-custodian/cloud-custodian/pull/9947
- 
- https://github.com/cloud-custodian/cloud-custodian/pull/9868
    - provide review guidance on filter vs. child resource
    - note for child resources: override get_resources
- https://github.com/cloud-custodian/cloud-custodian/pull/9902
    - worth fixing issues / addressing comments and landing
- 

# Weekly Report
Weekly status report for cloud-custodian/cloud-custodian Week #03 2025


## Here's what the team has focused on this week:
* 

## Weekly Stats
| | Opened this week| Closed this week|
|--|---|-----|
|Issues|  14 | 11|
|PR's|  23 |  39|

|  |  |
|--|--|
| New stars | 36|
| New forks | 12|

## PR's Opened
* [#9950](https://github.com/cloud-custodian/cloud-custodian/pull/9950):  Add jit policy ports filter for azure.vm
* [#9949](https://github.com/cloud-custodian/cloud-custodian/pull/9949):  aws - workspaces-web - BugFix: empty browser policy, add tests
* [#9947](https://github.com/cloud-custodian/cloud-custodian/pull/9947):  aws - ses - ingress - endpoints
* [#9946](https://github.com/cloud-custodian/cloud-custodian/pull/9946):  gcp - instance - add support for discard_local_ssd in stop action
* [#9944](https://github.com/cloud-custodian/cloud-custodian/pull/9944):  aws - lexv2-bot - set maxResults
* [#9943](https://github.com/cloud-custodian/cloud-custodian/pull/9943):  Bump jinja2 from 3.1.4 to 3.1.5
* [#9940](https://github.com/cloud-custodian/cloud-custodian/pull/9940):  chore: Add a large c7n-left test and docs for jmespath
* [#9937](https://github.com/cloud-custodian/cloud-custodian/pull/9937):  aws - add support for lexv2 bot
* [#9936](https://github.com/cloud-custodian/cloud-custodian/pull/9936):  aws - cfn - stacks - Add ARN definition
* [#9935](https://github.com/cloud-custodian/cloud-custodian/pull/9935):  c7n_tencentcloud - resources - subnet
* [#9933](https://github.com/cloud-custodian/cloud-custodian/pull/9933):  AWS - Athena Resource Tagging support
* [#9931](https://github.com/cloud-custodian/cloud-custodian/pull/9931):  Update mgmt ml lib and enable additional properties
* [#9930](https://github.com/cloud-custodian/cloud-custodian/pull/9930):  Add webapps filter to app-service-plan
* [#9929](https://github.com/cloud-custodian/cloud-custodian/pull/9929):  gcp - c7n_org - handle empty project name
* [#9928](https://github.com/cloud-custodian/cloud-custodian/pull/9928):  2025-01 - update data dictionaries
* [#9927](https://github.com/cloud-custodian/cloud-custodian/pull/9927):  aws - network-manager - handle shared networks
* [#9926](https://github.com/cloud-custodian/cloud-custodian/pull/9926):  aws kafka config
* [#9925](https://github.com/cloud-custodian/cloud-custodian/pull/9925):  Bump jinja2 from 3.1.4 to 3.1.5 in /tools/c7n_salactus
* [#9924](https://github.com/cloud-custodian/cloud-custodian/pull/9924):  azure - keyvault - add update action
* [#9922](https://github.com/cloud-custodian/cloud-custodian/pull/9922):  Bump golang.org/x/net from 0.23.0 to 0.33.0 in /tools/cask
* [#9920](https://github.com/cloud-custodian/cloud-custodian/pull/9920):  Bump jinja2 from 3.1.4 to 3.1.5 in /tools/c7n_mailer
* [#9919](https://github.com/cloud-custodian/cloud-custodian/pull/9919):  optimize set credential env variables of tencent-cloud tests
* [#9918](https://github.com/cloud-custodian/cloud-custodian/pull/9918):  Optimize set credential env vars

## PR's Closed
* [#9946](https://github.com/cloud-custodian/cloud-custodian/pull/9946):  gcp - instance - add support for discard_local_ssd in stop action
* [#9944](https://github.com/cloud-custodian/cloud-custodian/pull/9944):  aws - lexv2-bot - set maxResults
* [#9943](https://github.com/cloud-custodian/cloud-custodian/pull/9943):  Bump jinja2 from 3.1.4 to 3.1.5
* [#9940](https://github.com/cloud-custodian/cloud-custodian/pull/9940):  chore: Add a large c7n-left test and docs for jmespath
* [#9937](https://github.com/cloud-custodian/cloud-custodian/pull/9937):  aws - add support for lexv2 bot
* [#9936](https://github.com/cloud-custodian/cloud-custodian/pull/9936):  aws - cfn - stacks - Add ARN definition
* [#9935](https://github.com/cloud-custodian/cloud-custodian/pull/9935):  c7n_tencentcloud - resources - subnet
* [#9933](https://github.com/cloud-custodian/cloud-custodian/pull/9933):  AWS - Athena Resource Tagging support
* [#9931](https://github.com/cloud-custodian/cloud-custodian/pull/9931):  Update mgmt ml lib and enable additional properties
* [#9930](https://github.com/cloud-custodian/cloud-custodian/pull/9930):  Add webapps filter to app-service-plan
* [#9929](https://github.com/cloud-custodian/cloud-custodian/pull/9929):  gcp - c7n_org - handle empty project name
* [#9927](https://github.com/cloud-custodian/cloud-custodian/pull/9927):  aws - network-manager - handle shared networks
* [#9926](https://github.com/cloud-custodian/cloud-custodian/pull/9926):  aws kafka config
* [#9925](https://github.com/cloud-custodian/cloud-custodian/pull/9925):  Bump jinja2 from 3.1.4 to 3.1.5 in /tools/c7n_salactus
* [#9922](https://github.com/cloud-custodian/cloud-custodian/pull/9922):  Bump golang.org/x/net from 0.23.0 to 0.33.0 in /tools/cask
* [#9920](https://github.com/cloud-custodian/cloud-custodian/pull/9920):  Bump jinja2 from 3.1.4 to 3.1.5 in /tools/c7n_mailer
* [#9919](https://github.com/cloud-custodian/cloud-custodian/pull/9919):  optimize set credential env variables of tencent-cloud tests
* [#9918](https://github.com/cloud-custodian/cloud-custodian/pull/9918):  Optimize set credential env vars
* [#9911](https://github.com/cloud-custodian/cloud-custodian/pull/9911):  aws - sesv2 - Add support for sesv2 configuration sets
* [#9909](https://github.com/cloud-custodian/cloud-custodian/pull/9909):  aws - shield - tagging
* [#9904](https://github.com/cloud-custodian/cloud-custodian/pull/9904):  azure - storage - set minimum tls version on buckets
* [#9899](https://github.com/cloud-custodian/cloud-custodian/pull/9899):  aws - directory - [Bug Fix] - Filtering directories without trusts
* [#9892](https://github.com/cloud-custodian/cloud-custodian/pull/9892):  feat: add network-location filter
* [#9885](https://github.com/cloud-custodian/cloud-custodian/pull/9885):  aws - iam-role - bugfix for IAM role ARN parsing
* [#9881](https://github.com/cloud-custodian/cloud-custodian/pull/9881):  aws - kendra resource
* [#9878](https://github.com/cloud-custodian/cloud-custodian/pull/9878):  c7n_tencentcloud - resources - EIP & DnsRecords
* [#9877](https://github.com/cloud-custodian/cloud-custodian/pull/9877):  aws - policystatement - has-statement partial-match
* [#9876](https://github.com/cloud-custodian/cloud-custodian/pull/9876):  aws - quicksight-account
* [#9874](https://github.com/cloud-custodian/cloud-custodian/pull/9874):  Fix aws event rule and event rule target
* [#9867](https://github.com/cloud-custodian/cloud-custodian/pull/9867):  fix: sns-subscription get resources
* [#9856](https://github.com/cloud-custodian/cloud-custodian/pull/9856):  add cross account filter for efs
* [#9849](https://github.com/cloud-custodian/cloud-custodian/pull/9849):  feat: add support for aws-kafka-cluster config
* [#9848](https://github.com/cloud-custodian/cloud-custodian/pull/9848):  aws - account - update has-virtual-mfa
* [#9837](https://github.com/cloud-custodian/cloud-custodian/pull/9837):  aws - directory service log subscription filter
* [#9831](https://github.com/cloud-custodian/cloud-custodian/pull/9831):  Add afd endpoint and afd custom domain resources
* [#9783](https://github.com/cloud-custodian/cloud-custodian/pull/9783):  c7n-left: handle reference list declared in __tfmeta
* [#9768](https://github.com/cloud-custodian/cloud-custodian/pull/9768):  aws - cfn - search template filter
* [#9759](https://github.com/cloud-custodian/cloud-custodian/pull/9759):  aws - ses-email-identity cross-account filter
* [#9721](https://github.com/cloud-custodian/cloud-custodian/pull/9721):  aws - cloudhsm - backup

## Issues Opened
* [#9948](https://github.com/cloud-custodian/cloud-custodian/issues/9948):  Add SES Ingress Endpoints
* [#9945](https://github.com/cloud-custodian/cloud-custodian/issues/9945):  synchronization of csv report files to S3
* [#9942](https://github.com/cloud-custodian/cloud-custodian/issues/9942):  c7n-left - Failed install on Python 3.13
* [#9941](https://github.com/cloud-custodian/cloud-custodian/issues/9941):  gcp.iam-role is possibly erroneously returning only predefined roles
* [#9939](https://github.com/cloud-custodian/cloud-custodian/issues/9939):  Cannot authenticate to EKS cluster using kubeconfig file #9938
* [#9938](https://github.com/cloud-custodian/cloud-custodian/issues/9938):  Cannot authenticate to EKS cluster using kubeconfig file
* [#9934](https://github.com/cloud-custodian/cloud-custodian/issues/9934):  aws - security groups - opt-in regions
* [#9932](https://github.com/cloud-custodian/cloud-custodian/issues/9932):  aws - athena - tagging support
* [#9923](https://github.com/cloud-custodian/cloud-custodian/issues/9923):  Add a savings plan resource
* [#9921](https://github.com/cloud-custodian/cloud-custodian/issues/9921):  Cannot Delete AWS NLB associated with VPC Endpoint Services
* [#9917](https://github.com/cloud-custodian/cloud-custodian/issues/9917):  Add support for Macie automated sensitive data discovery configuration
* [#9916](https://github.com/cloud-custodian/cloud-custodian/issues/9916):  azure.webapp - Add action to set the configuration (needed to enforce latest HTTP 2.0)
* [#9915](https://github.com/cloud-custodian/cloud-custodian/issues/9915):  azure.keyvault - Add action to enable/disable soft delete on key vaults
* [#9914](https://github.com/cloud-custodian/cloud-custodian/issues/9914):  Azure.storage - Add an action to enable/disable blob anonymous access.

## Issues Closed
* [#9932](https://github.com/cloud-custodian/cloud-custodian/issues/9932):  aws - athena - tagging support
* [#9910](https://github.com/cloud-custodian/cloud-custodian/issues/9910):  AWS - SES - Add support to SESv2 Configuration Sets
* [#9908](https://github.com/cloud-custodian/cloud-custodian/issues/9908):  AWS - Network Manager - Core Networks - 404 error when there's a shared core network from RAM
* [#9898](https://github.com/cloud-custodian/cloud-custodian/issues/9898):  AWS - Directories - Cannot filter for directories with a trust
* [#9893](https://github.com/cloud-custodian/cloud-custodian/issues/9893):  Add network-location filter to timestream-influxdb resource
* [#9887](https://github.com/cloud-custodian/cloud-custodian/issues/9887):  Azure.Storage - Add update action to enable/enforce TLSv1.2
* [#9875](https://github.com/cloud-custodian/cloud-custodian/issues/9875):  Quicksight Account Support
* [#9866](https://github.com/cloud-custodian/cloud-custodian/issues/9866):  cloudtrail policies for sns-subscription time out
* [#9836](https://github.com/cloud-custodian/cloud-custodian/issues/9836):  Directory Service Log Forwarding
* [#9824](https://github.com/cloud-custodian/cloud-custodian/issues/9824):  New resource support: aws.kendra_index
* [#9758](https://github.com/cloud-custodian/cloud-custodian/issues/9758):  Support cross-account filtering for ses-email-identity

