# C7N Community Meeting Minutes 2025-05-27

:::info

- **URL:** meet.google.com/mii-evqh-esh
- **Date:** May 27, 2025 (2:00 PM (ET) / 11:00 AM (PT) / 7PM (UTC))
- **[Timezone Converter (Click me)](https://www.timeanddate.com/worldclock/converter.html?iso=20220621T180000&p1=263&p2=224&p3=136&p4=37&p5=367&p6=438&p7=248&p8=22)**
- **Agenda**
1. Intros `10m`
1. Agenda Items `20m`
1. PR Party `30m`
- **Meeting Contact:** AJ: <[e-mail]>
- **Video Archive and Transcripts**: https://mtngs.io/cloud-custodian/community-meetings/
:::

## Agenda Items

- PyCon sprint recap
- cel-python activity (separate from core custodian activity)
- 3-4 new contributors
- work migrating from poetry --> uv
- dropping python 3.9 support early due to c7n-left complications
- add python 3.13 to ci
- documentation updates
- nix support (https://github.com/cloud-custodian/cloud-custodian/pull/10148)
- Release coming soon - blockers?
- PR incoming for https://github.com/cloud-custodian/cloud-custodian/issues/9673
- get tfparse release/update in for c7n-left
- least privilege updates for github actions
- take advantage of native attestation/signing functionality

### PRs/Issues

- https://github.com/cloud-custodian/cloud-custodian/issues/10168
- Either detect or catch the expected error
- https://github.com/cloud-custodian/cloud-custodian/pull/10167
- https://github.com/cloud-custodian/cloud-custodian/pull/1011
- fresh eyes

# Weekly Report
Weekly status report for cloud-custodian/cloud-custodian Week #21 2025

## Weekly Stats
| | Opened this week| Closed this week|
|--|---|-----|
|Issues| 13 | 6|
|PR's| 11 | 11|

| | |
|--|--|
| New stars | 14|
| New forks | 4|

## PR's Opened
* [#10167](https://github.com/cloud-custodian/cloud-custodian/pull/10167): Add VPC Resolver Query Logging Filter
* [#10166](https://github.com/cloud-custodian/cloud-custodian/pull/10166): releng - 2025-05 release prep - increment versions and update dependencies
* [#10156](https://github.com/cloud-custodian/cloud-custodian/pull/10156): releng - add 3.13 to ci
* [#10155](https://github.com/cloud-custodian/cloud-custodian/pull/10155): azure - wait for async tag operation results from tests
* [#10154](https://github.com/cloud-custodian/cloud-custodian/pull/10154): azure - revert tag change on resource mgmt, as it results in intermittent test failures
* [#10151](https://github.com/cloud-custodian/cloud-custodian/pull/10151): docs - update developer docs for change from poetry to uv
* [#10150](https://github.com/cloud-custodian/cloud-custodian/pull/10150): fix doc for setup in mac environment
* [#10149](https://github.com/cloud-custodian/cloud-custodian/pull/10149): Add resource tdsql
* [#10148](https://github.com/cloud-custodian/cloud-custodian/pull/10148): releng - add initial nix support via flake
* [#10147](https://github.com/cloud-custodian/cloud-custodian/pull/10147): Add arn generator for aws glue-catalog
* [#10146](https://github.com/cloud-custodian/cloud-custodian/pull/10146): Adding RDS cluster snapshot copy region to region

## PR's Closed
* [#10166](https://github.com/cloud-custodian/cloud-custodian/pull/10166): releng - 2025-05 release prep - increment versions and update dependencies
* [#10156](https://github.com/cloud-custodian/cloud-custodian/pull/10156): releng - add 3.13 to ci
* [#10155](https://github.com/cloud-custodian/cloud-custodian/pull/10155): azure - wait for async tag operation results from tests
* [#10154](https://github.com/cloud-custodian/cloud-custodian/pull/10154): azure - revert tag change on resource mgmt, as it results in intermittent test failures
* [#10150](https://github.com/cloud-custodian/cloud-custodian/pull/10150): fix doc for setup in mac environment
* [#10147](https://github.com/cloud-custodian/cloud-custodian/pull/10147): Add arn generator for aws glue-catalog
* [#10138](https://github.com/cloud-custodian/cloud-custodian/pull/10138): releng - script to freeze a wheel so we don't need a poetry plugin
* [#10136](https://github.com/cloud-custodian/cloud-custodian/pull/10136): azure - tags - use the TagOperations class for tag-only updates
* [#10131](https://github.com/cloud-custodian/cloud-custodian/pull/10131): aws - metrics - handle extended statistics keys
* [#10120](https://github.com/cloud-custodian/cloud-custodian/pull/10120): tools/c7n_left - add failing test for attribute presence testing
* [#9539](https://github.com/cloud-custodian/cloud-custodian/pull/9539): aws: Added Region copy to RDS clustersnapshot

## Issues Opened
* [#10165](https://github.com/cloud-custodian/cloud-custodian/issues/10165): aws.event-rule does not support cloudtrail mode anymore
* [#10164](https://github.com/cloud-custodian/cloud-custodian/issues/10164): Azure EntraID Roles
* [#10163](https://github.com/cloud-custodian/cloud-custodian/issues/10163): Azure EntraID Enterprise Apps
* [#10162](https://github.com/cloud-custodian/cloud-custodian/issues/10162): Azure EntraID External Identity
* [#10161](https://github.com/cloud-custodian/cloud-custodian/issues/10161): Azure EntraID Devices
* [#10160](https://github.com/cloud-custodian/cloud-custodian/issues/10160): Azure EntraID Security
* [#10159](https://github.com/cloud-custodian/cloud-custodian/issues/10159): Azure EntraID Policy Resource
* [#10158](https://github.com/cloud-custodian/cloud-custodian/issues/10158): Azure EntraID Resource Filters
* [#10157](https://github.com/cloud-custodian/cloud-custodian/issues/10157): Azure EntraID Users Resource
* [#10152](https://github.com/cloud-custodian/cloud-custodian/issues/10152): Python 3.13 make test report
* [#10145](https://github.com/cloud-custodian/cloud-custodian/issues/10145): Support Advanced Threat Protection settings for MySQL Flexible Servers (and maybe other Azure DBs)
* [#10143](https://github.com/cloud-custodian/cloud-custodian/issues/10143): azure.service-fabric-cluster only seems to recognize two clusters
* [#10141](https://github.com/cloud-custodian/cloud-custodian/issues/10141): aws.iam-role - check-permissions filter method of SimulatePolicy is too slow

## Issues Closed
* [#10152](https://github.com/cloud-custodian/cloud-custodian/issues/10152): Python 3.13 make test report
* [#10102](https://github.com/cloud-custodian/cloud-custodian/issues/10102): azure.defender-contact seems to be using an old API
* [#10068](https://github.com/cloud-custodian/cloud-custodian/issues/10068): Azure Tagging - Enhancement to utilize the tag operation class for tagging instead of the resource operations class
* [#10007](https://github.com/cloud-custodian/cloud-custodian/issues/10007): Regression on has-statement filter on S3 bucket policies
* [#9137](https://github.com/cloud-custodian/cloud-custodian/issues/9137): Unable to use percentile checks on CPUUtilization for EC2
* [#3220](https://github.com/cloud-custodian/cloud-custodian/issues/3220): Security Group Modify ability