# C7N Community Meeting Minutes 2023-05-30
## May 30th 2023

:::info

- **URL:** meet.google.com/mii-evqh-esh
- **Date:** May 30, 2023 (2:00 PM (ET) / 11:00 AM (PT) / 7PM (UTC))
- **[Timezone Converter (Click me)](https://www.timeanddate.com/worldclock/converter.html?iso=20220621T180000&p1=263&p2=224&p3=136&p4=37&p5=367&p6=438&p7=248&p8=22)**
- **Agenda**
1. Intros `10m`
1. Agenda Items `20m`
1. PR Party `30m`
- **Meeting Contact:** AJ: <[e-mail]>
- **Video Archive and Transcripts**: https://mtngs.io/cloud-custodian/community-meetings/
:::

## Agenda Items

- Pregame: GCP Audit question from Prasanna
- Instances matching policy but not stopping
- Guidance: Confirm issue by checking execution logs
-
- Intros, etc.
- We're moving on from Python 3.7 this year, details TBD, heads up:
- https://github.com/cloud-custodian/cloud-custodian/issues/8092
- Tips and Tricks section in Discussions
- https://github.com/cloud-custodian/cloud-custodian/discussions/categories/tips-and-tricks
- Policy Packs? (ddao)

### PR/Issue Discussion

# Weekly Report
Weekly status report for cloud-custodian/cloud-custodian Week #22 2023

## Here's what the team has focused on this week:
- 0.9.27.0 released!
- Docker builds failing
- Appears to be due to a combination of freeze-wheel plugin changes and c7n-left's path dependency on c7n
- Possible to use freeze-wheel during the c7n-left docker build rather than poetry export?

## Weekly Stats
| | Opened this week| Closed this week|
|--|---|-----|
|Issues| 11 | 12|
|PR's| 29 | 32|

| | |
|--|--|
| New stars | 22|
| New forks | 6|

## PR's Opened
* [#8611](https://github.com/cloud-custodian/cloud-custodian/pull/8611): releng - use frozen wheels for c7n-left docker install
* [#8610](https://github.com/cloud-custodian/cloud-custodian/pull/8610): aws - add delete action to directory and cloud-directory
* [#8608](https://github.com/cloud-custodian/cloud-custodian/pull/8608): aws-efs-mount-target-add-cloudtrail-mode
* [#8606](https://github.com/cloud-custodian/cloud-custodian/pull/8606): docs - document gcp env vars explicitly along with noting workload federation
* [#8604](https://github.com/cloud-custodian/cloud-custodian/pull/8604): aws - security-group - used filter - handle ram vpc sharing eni when run in vpc owner
* [#8601](https://github.com/cloud-custodian/cloud-custodian/pull/8601): GCP - add logging-sink resource and test
* [#8600](https://github.com/cloud-custodian/cloud-custodian/pull/8600): quick update to example for bucket policy
* [#8599](https://github.com/cloud-custodian/cloud-custodian/pull/8599): Added policy for recovery services
* [#8598](https://github.com/cloud-custodian/cloud-custodian/pull/8598): aws - event bus delete action
* [#8596](https://github.com/cloud-custodian/cloud-custodian/pull/8596): GCP - Added logging-sink resource
* [#8595](https://github.com/cloud-custodian/cloud-custodian/pull/8595): aws - filter eni's based on OwnerId for unused sg filter
* [#8593](https://github.com/cloud-custodian/cloud-custodian/pull/8593): Policy for azure recovery services
* [#8591](https://github.com/cloud-custodian/cloud-custodian/pull/8591): releng - prep 0.9.27.0 release
* [#8590](https://github.com/cloud-custodian/cloud-custodian/pull/8590): Added resource for azure recovery services vault
* [#8589](https://github.com/cloud-custodian/cloud-custodian/pull/8589): Bump requests from 2.30.0 to 2.31.0 in /tools/c7n_mailer
* [#8588](https://github.com/cloud-custodian/cloud-custodian/pull/8588): Bump requests from 2.30.0 to 2.31.0 in /tools/c7n_gcp
* [#8587](https://github.com/cloud-custodian/cloud-custodian/pull/8587): Bump requests from 2.30.0 to 2.31.0
* [#8586](https://github.com/cloud-custodian/cloud-custodian/pull/8586): Bump requests from 2.30.0 to 2.31.0 in /tools/c7n_kube
* [#8585](https://github.com/cloud-custodian/cloud-custodian/pull/8585): Bump requests from 2.30.0 to 2.31.0 in /tools/c7n_openstack
* [#8584](https://github.com/cloud-custodian/cloud-custodian/pull/8584): Bump requests from 2.30.0 to 2.31.0 in /tools/c7n_azure
* [#8583](https://github.com/cloud-custodian/cloud-custodian/pull/8583): Bump requests from 2.30.0 to 2.31.0 in /tools/c7n_policystream
* [#8582](https://github.com/cloud-custodian/cloud-custodian/pull/8582): Bump requests from 2.30.0 to 2.31.0 in /tools/c7n_sphinxext
* [#8580](https://github.com/cloud-custodian/cloud-custodian/pull/8580): add-azure-resource-monitor-log-profile
* [#8579](https://github.com/cloud-custodian/cloud-custodian/pull/8579): azure - front-door and cdn waf filters for WAF policies
* [#8576](https://github.com/cloud-custodian/cloud-custodian/pull/8576): aws - codecommit - add universal_augment to pull tags
* [#8574](https://github.com/cloud-custodian/cloud-custodian/pull/8574): Added WAF resource and Filter for App Gateway WAF policies
* [#8573](https://github.com/cloud-custodian/cloud-custodian/pull/8573): gcp - fix report fields metadata
* [#8571](https://github.com/cloud-custodian/cloud-custodian/pull/8571): feat: adding support for gcp impersonated credentials
* [#8569](https://github.com/cloud-custodian/cloud-custodian/pull/8569): gcp - fix metadata on a few resource types

## PR's Closed
* [#8604](https://github.com/cloud-custodian/cloud-custodian/pull/8604): aws - security-group - used filter - handle ram vpc sharing eni when run in vpc owner
* [#8600](https://github.com/cloud-custodian/cloud-custodian/pull/8600): quick update to example for bucket policy
* [#8599](https://github.com/cloud-custodian/cloud-custodian/pull/8599): Added policy for recovery services
* [#8598](https://github.com/cloud-custodian/cloud-custodian/pull/8598): aws - event bus delete action
* [#8596](https://github.com/cloud-custodian/cloud-custodian/pull/8596): GCP - Added logging-sink resource
* [#8595](https://github.com/cloud-custodian/cloud-custodian/pull/8595): aws - filter eni's based on OwnerId for unused sg filter
* [#8593](https://github.com/cloud-custodian/cloud-custodian/pull/8593): Policy for azure recovery services
* [#8591](https://github.com/cloud-custodian/cloud-custodian/pull/8591): releng - prep 0.9.27.0 release
* [#8590](https://github.com/cloud-custodian/cloud-custodian/pull/8590): Added resource for azure recovery services vault
* [#8589](https://github.com/cloud-custodian/cloud-custodian/pull/8589): Bump requests from 2.30.0 to 2.31.0 in /tools/c7n_mailer
* [#8588](https://github.com/cloud-custodian/cloud-custodian/pull/8588): Bump requests from 2.30.0 to 2.31.0 in /tools/c7n_gcp
* [#8587](https://github.com/cloud-custodian/cloud-custodian/pull/8587): Bump requests from 2.30.0 to 2.31.0
* [#8586](https://github.com/cloud-custodian/cloud-custodian/pull/8586): Bump requests from 2.30.0 to 2.31.0 in /tools/c7n_kube
* [#8585](https://github.com/cloud-custodian/cloud-custodian/pull/8585): Bump requests from 2.30.0 to 2.31.0 in /tools/c7n_openstack
* [#8584](https://github.com/cloud-custodian/cloud-custodian/pull/8584): Bump requests from 2.30.0 to 2.31.0 in /tools/c7n_azure
* [#8583](https://github.com/cloud-custodian/cloud-custodian/pull/8583): Bump requests from 2.30.0 to 2.31.0 in /tools/c7n_policystream
* [#8582](https://github.com/cloud-custodian/cloud-custodian/pull/8582): Bump requests from 2.30.0 to 2.31.0 in /tools/c7n_sphinxext
* [#8580](https://github.com/cloud-custodian/cloud-custodian/pull/8580): add-azure-resource-monitor-log-profile
* [#8576](https://github.com/cloud-custodian/cloud-custodian/pull/8576): aws - codecommit - add universal_augment to pull tags
* [#8573](https://github.com/cloud-custodian/cloud-custodian/pull/8573): gcp - fix report fields metadata
* [#8571](https://github.com/cloud-custodian/cloud-custodian/pull/8571): feat: adding support for gcp impersonated credentials
* [#8569](https://github.com/cloud-custodian/cloud-custodian/pull/8569): gcp - fix metadata on a few resource types
* [#8565](https://github.com/cloud-custodian/cloud-custodian/pull/8565): core - validate - report errors per file
* [#8554](https://github.com/cloud-custodian/cloud-custodian/pull/8554): Added resources for cdn customdomain and cdn endpoint
* [#8546](https://github.com/cloud-custodian/cloud-custodian/pull/8546): add-azure-resource-servicebus-namespace-networkruleset
* [#8541](https://github.com/cloud-custodian/cloud-custodian/pull/8541): Add azure resource servicebus namespace authrules
* [#8538](https://github.com/cloud-custodian/cloud-custodian/pull/8538): Adds ECR repository policy to saved resource for reporting
* [#8519](https://github.com/cloud-custodian/cloud-custodian/pull/8519): gc - added bigtable instance, bigtable instance cluster, bigtable ins…
* [#8475](https://github.com/cloud-custodian/cloud-custodian/pull/8475): core - value filter - add json value_type
* [#8395](https://github.com/cloud-custodian/cloud-custodian/pull/8395): releng - automated releases
* [#8372](https://github.com/cloud-custodian/cloud-custodian/pull/8372): aws - iam-user - add include-via option to policy filter
* [#8353](https://github.com/cloud-custodian/cloud-custodian/pull/8353): releng - offer some guidance following a failed freeze-wheel

## Issues Opened
* [#8609](https://github.com/cloud-custodian/cloud-custodian/issues/8609): aws - delete action of directory/cloud-directory services
* [#8607](https://github.com/cloud-custodian/cloud-custodian/issues/8607): Adds cloudtrail support for efs-mount-target
* [#8603](https://github.com/cloud-custodian/cloud-custodian/issues/8603): has-statement filter running into "list index out of range" error
* [#8597](https://github.com/cloud-custodian/cloud-custodian/issues/8597): aws - event bus delete action
* [#8594](https://github.com/cloud-custodian/cloud-custodian/issues/8594): aws - unused sg filter eni evaluation
* [#8592](https://github.com/cloud-custodian/cloud-custodian/issues/8592): aws - notify action batch_size flexibility
* [#8581](https://github.com/cloud-custodian/cloud-custodian/issues/8581): Increased Memory Usage in Version 0.9.26
* [#8578](https://github.com/cloud-custodian/cloud-custodian/issues/8578): It would be great if overwrite: False was an option with the tag action.
* [#8577](https://github.com/cloud-custodian/cloud-custodian/issues/8577): configure EphemeralStorage when running in Lambda mode
* [#8575](https://github.com/cloud-custodian/cloud-custodian/issues/8575): Azure - Add Snapshots resource
* [#8568](https://github.com/cloud-custodian/cloud-custodian/issues/8568): Would like to get the feature --impersonate-service-account for GCP account

## Issues Closed
* [#8603](https://github.com/cloud-custodian/cloud-custodian/issues/8603): has-statement filter running into "list index out of range" error
* [#8597](https://github.com/cloud-custodian/cloud-custodian/issues/8597): aws - event bus delete action
* [#8594](https://github.com/cloud-custodian/cloud-custodian/issues/8594): aws - unused sg filter eni evaluation
* [#8575](https://github.com/cloud-custodian/cloud-custodian/issues/8575): Azure - Add Snapshots resource
* [#8568](https://github.com/cloud-custodian/cloud-custodian/issues/8568): Would like to get the feature --impersonate-service-account for GCP account
* [#8566](https://github.com/cloud-custodian/cloud-custodian/issues/8566): get errors after putting the slack_token in the mailer configuration
* [#8537](https://github.com/cloud-custodian/cloud-custodian/issues/8537): The action set-wafv2 doesn't seem to accept my regex in the web-acl parameter
* [#8528](https://github.com/cloud-custodian/cloud-custodian/issues/8528): GCP Cloud Run Service resource causing an error
* [#8501](https://github.com/cloud-custodian/cloud-custodian/issues/8501): RDS snapshot copy-related-tag fails with error
* [#7956](https://github.com/cloud-custodian/cloud-custodian/issues/7956): CodeCommit tags missing
* [#7870](https://github.com/cloud-custodian/cloud-custodian/issues/7870): Random GetBucketLocation Failures Since Upgrading to v0.9.19
* [#7593](https://github.com/cloud-custodian/cloud-custodian/issues/7593): Error when sending logs from Lambda to s3 buckets in another region