C7n Community Meeting Minutes

# C7n Community Meeting Minutes # March 1st 2022 ###### tags: `Meeting` :::info - **URL:** meet.google.com/mii-evqh-esh - **Date:** March 1st, 2022 (2:00 PM (ET) / 11:00 AM (PT) / 6PM (UTC)) - **[Timezone Converter (Click me)](https://www.timeanddate.com/worldclock/converter.html?iso=20210629T190000&p1=tz_et&p2=tz_pt&p3=22&p4=240&p5=136&p6=176&p7=37&p8=248)** - **Agenda** 1. Intros `10m` 1. Agenda Items `20m` 1. PR Party `30m` - **Participants:** - **Meeting Contact:** Jorge: <jorge@stacklet.io> - **Host:** Liz - **Permalink:** - **Video:** https://youtu.be/bERpbf_uUW8 ::: ## Agenda Item 1 - Cloud Custodian Workshops for March! - As usual, all skill levels welcome and they're free: - March 8th: [Introduction to Cloud Custodian](https://app.livestorm.co/stacklet-io/introduction-to-cloud-custodian) - March 9th: [Cloud Custodian 101](https://app.livestorm.co/stacklet-io/cloud-custodian-101-workshop) - March 16th: [Cloud Custodian 102](https://app.livestorm.co/stacklet-io/cloud-custodian-102-save-the-date-for-advance-session) - c7n-org and mailer, click the link for the description. - Note, Python 3.6 is deprecated since January, if you're on an older enterprise linux please check with your vendor on supported options. - If you're able to use the docker container of c7n instead we recommend that: - Check the [c7n docker instructions](https://cloudcustodian.io/docs/quickstart/index.html?highlight=docker#docker) for instructions on how to use the container - Cloud Custodian 0.9.15.0 is out! - https://github.com/cloud-custodian/cloud-custodian/releases/tag/0.9.15.0 - [AWS CC Provider](https://github.com/cloud-custodian/cloud-custodian/pull/7060) is now merged, lotsa new resources to play with! Note, this provider is alpha, and as mentioned previously, this does not replace the current AWS provider, it is additive, please feel free to file more issues on this, we're expecting a new category of issues so please don't be shy. - Let's talk release cadence! - PR Review - [Added action for enabling an AWS Config Managed Rule #7029 ](https://github.com/cloud-custodian/cloud-custodian/pull/7029) (Darren) - managed config rule - [Mitushi] - Policy Question - stopping an ec2 instance if a mandatory tag is missing. - [Example](https://github.com/code42/cloud-c7n-policy-examples/blob/master/policies/ec2-tag-enforcement.yml) (Thanks Aakif!) - https://cloudcustodian.io/docs/aws/resources/aws-modes.html#ec2-instance-state - https://cloudcustodian.io/docs/aws/resources/aws-common-filters.html#network-location - [Pratyush] - [#7109](https://github.com/cloud-custodian/cloud-custodian/pull/7109): Traffic mirror sessions and target - Kapil: LGTM, it's on my backlog. - Would like to finish up [#5999](https://github.com/cloud-custodian/cloud-custodian/pull/5999) (Just make sure the previous author at your org has signed the CLA since the bot will check their commits too) - [Faan/Kapil] - [GCP c7n-org with resource gcp.project and iam-policy filter runs against all projects in org when single project is specified](https://github.com/cloud-custodian/cloud-custodian/issues/7119) - [c7n-org for AWS no longer recording account tags and vars to resources.json ](https://github.com/cloud-custodian/cloud-custodian/issues/7136) ## Biweekly Stats | | Opened this week| Closed this week| |--|---|-----| |Issues| 17 | 4| |PR's| 8 | 2| | | | |--|--| | New stars | 0| | New forks | 0| ## PR's Opened * [#7135](https://github.com/cloud-custodian/cloud-custodian/pull/7135): ebs snapshot with description * [#7134](https://github.com/cloud-custodian/cloud-custodian/pull/7134): Add lambda ARM64 support * [#7129](https://github.com/cloud-custodian/cloud-custodian/pull/7129): Add value_type:cidr_range to support cidr range in filters/core.py * [#7128](https://github.com/cloud-custodian/cloud-custodian/pull/7128): azure - add initial defender resources * [#7126](https://github.com/cloud-custodian/cloud-custodian/pull/7126): awscc - cloudformation hook execution mode * [#7125](https://github.com/cloud-custodian/cloud-custodian/pull/7125): releng - dependency upgrade 2022 02 21 * [#7120](https://github.com/cloud-custodian/cloud-custodian/pull/7120): Feat add gcp mailer * [#7112](https://github.com/cloud-custodian/cloud-custodian/pull/7112): Fixes for IAM and Security Hub filters * [#7109](https://github.com/cloud-custodian/cloud-custodian/pull/7109): Traffic mirror sessions and target ## PR's Closed * [#7125](https://github.com/cloud-custodian/cloud-custodian/pull/7125): releng - dependency upgrade 2022 02 21 * [#7120](https://github.com/cloud-custodian/cloud-custodian/pull/7120): Feat add gcp mailer ## Issues Opened * [#7136](https://github.com/cloud-custodian/cloud-custodian/issues/7136): c7n-org for AWS no longer recording account tags and vars to resources.json * [#7133](https://github.com/cloud-custodian/cloud-custodian/issues/7133): Azure function app is not triggered for a policy with event-grid mode type * [#7132](https://github.com/cloud-custodian/cloud-custodian/issues/7132): Filter to ensure that no EC2 has a security group with certain ports open * [#7131](https://github.com/cloud-custodian/cloud-custodian/issues/7131): docs - Document minimum Python version * [#7130](https://github.com/cloud-custodian/cloud-custodian/issues/7130): Invoke Lambda Function using variable name * [#7127](https://github.com/cloud-custodian/cloud-custodian/issues/7127): Delete custom domain name if mtls truststore uri does not exist/does not match * [#7124](https://github.com/cloud-custodian/cloud-custodian/issues/7124): GCP saving resource details to GCS bucket * [#7123](https://github.com/cloud-custodian/cloud-custodian/issues/7123): Cloudcustodian as a wrapper around ansible * [#7122](https://github.com/cloud-custodian/cloud-custodian/issues/7122): filter for specific tags not getting recognized for Cognito User Pools and Cognito Identity Pools * [#7121](https://github.com/cloud-custodian/cloud-custodian/issues/7121): Add delete action for gcp bucket * [#7119](https://github.com/cloud-custodian/cloud-custodian/issues/7119): GCP c7n-org with resource gcp.project and iam-policy filter runs against all projects in org when single project is specified * [#7118](https://github.com/cloud-custodian/cloud-custodian/issues/7118): using multi item json as value_from in filter * [#7117](https://github.com/cloud-custodian/cloud-custodian/issues/7117): Cannot run GCP policy * [#7116](https://github.com/cloud-custodian/cloud-custodian/issues/7116): Azure - Add new Microsoft Defender resource * [#7115](https://github.com/cloud-custodian/cloud-custodian/issues/7115): auto-tag-event-time missing from schema * [#7114](https://github.com/cloud-custodian/cloud-custodian/issues/7114): Azure - Add resource support for network watcher * [#7113](https://github.com/cloud-custodian/cloud-custodian/issues/7113): Azure - Add Describe Keyvaults filter to azure.keyvault resource ## Issues Closed * [#7130](https://github.com/cloud-custodian/cloud-custodian/issues/7130): Invoke Lambda Function using variable name * [#7127](https://github.com/cloud-custodian/cloud-custodian/issues/7127): Delete custom domain name if mtls truststore uri does not exist/does not match * [#7118](https://github.com/cloud-custodian/cloud-custodian/issues/7118): using multi item json as value_from in filter * [#7117](https://github.com/cloud-custodian/cloud-custodian/issues/7117): Cannot run GCP policy ## Notes