# C7N Community Meeting Minutes 2023-10-17
## October 17th 2023

:::info

- **URL:** meet.google.com/mii-evqh-esh
- **Date:** October 17, 2023 (2:00 PM (ET) / 11:00 AM (PT) / 7PM (UTC))
- **[Timezone Converter (Click me)](https://www.timeanddate.com/worldclock/converter.html?iso=20220621T180000&p1=263&p2=224&p3=136&p4=37&p5=367&p6=438&p7=248&p8=22)**
- **Agenda**
1. Intros `10m`
1. Agenda Items `20m`
1. PR Party `30m`
- **Meeting Contact:** AJ: <[e-mail]>
- **Video Archive and Transcripts**: https://mtngs.io/cloud-custodian/community-meetings/
:::

## Agenda Items

- Intros, etc.
- Issue incoming around fetching credentials from ECS tasks
- botocore.exceptions.EndpointConnectionError: Could not connect to the endpoint URL: "http://169.254.170.2/v2/credentials/XXXXXXXX-XXXX-XXXX-XXXX-XXXXXXXXXXXX"\

### PR/Issue Discussion

- [ AWS account filter service-limits runs into unrefreshable check ID c1dfprch07 #9001 ](https://github.com/cloud-custodian/cloud-custodian/issues/9001)
- Python version bumps
- https://github.com/cloud-custodian/cloud-custodian/issues/9043
- https://github.com/cloud-custodian/cloud-custodian/issues/9034
- https://github.com/cloud-custodian/cloud-custodian/pull/9047
- ECS port exhaustion fetching creds
- https://github.com/cloud-custodian/cloud-custodian/issues/9031
- boto3/s3 memory leak
- https://github.com/cloud-custodian/cloud-custodian/pull/9065
- https://github.com/cloud-custodian/cloud-custodian/issues/8791
- https://gist.github.com/dmytro-afanasiev/94e1ec66f53f8302eb87ba4885982904

# Weekly Report
Weekly status report for cloud-custodian/cloud-custodian Week #42 2023

## Weekly Stats
| | Opened this week| Closed this week|
|--|---|-----|
|Issues| 11 | 2|
|PR's| 32 | 19|

| | |
|--|--|
| New stars | 24|
| New forks | 9|

## PR's Opened
* [#9072](https://github.com/cloud-custodian/cloud-custodian/pull/9072): Fix: Handles InvalidParameterValueException for refreshing trusted advisor checks (#9001)
* [#9071](https://github.com/cloud-custodian/cloud-custodian/pull/9071): Fix list index error in aws arn parsing
* [#9070](https://github.com/cloud-custodian/cloud-custodian/pull/9070): aws - elasticsearch - fix error handling of boto3
* [#9069](https://github.com/cloud-custodian/cloud-custodian/pull/9069): GCP WIF not working - https://github.com/cloud-custodian/cloud-custodian/issues/7155
* [#9068](https://github.com/cloud-custodian/cloud-custodian/pull/9068): Corrected issue reported in https://github.com/cloud-custodian/cloud-custodian/issues/7155
* [#9066](https://github.com/cloud-custodian/cloud-custodian/pull/9066): aws - check-cloudtrail filter - fix
* [#9065](https://github.com/cloud-custodian/cloud-custodian/pull/9065): Boto3 clients memory leak
* [#9064](https://github.com/cloud-custodian/cloud-custodian/pull/9064): openstack - security-group
* [#9063](https://github.com/cloud-custodian/cloud-custodian/pull/9063): aws - iam-oidc-provider - adds delete action
* [#9062](https://github.com/cloud-custodian/cloud-custodian/pull/9062): azure - signalr
* [#9061](https://github.com/cloud-custodian/cloud-custodian/pull/9061): azure - defender-assessment, defender-contacts, defender-jit-policies, defender-jit-policies-filter
* [#9060](https://github.com/cloud-custodian/cloud-custodian/pull/9060): azure - security-assessments
* [#9059](https://github.com/cloud-custodian/cloud-custodian/pull/9059): Log error and continue when deleting IGWs
* [#9058](https://github.com/cloud-custodian/cloud-custodian/pull/9058): aws - add support for opensearch serverless
* [#9053](https://github.com/cloud-custodian/cloud-custodian/pull/9053): aws - add support for opensearch domain
* [#9051](https://github.com/cloud-custodian/cloud-custodian/pull/9051): aws - glue - fix toggle-metrics filter
* [#9050](https://github.com/cloud-custodian/cloud-custodian/pull/9050): Bump golang.org/x/net from 0.7.0 to 0.17.0 in /tools/cask
* [#9049](https://github.com/cloud-custodian/cloud-custodian/pull/9049): Bump golang.org/x/net from 0.7.0 to 0.17.0 in /tools/omnissm
* [#9047](https://github.com/cloud-custodian/cloud-custodian/pull/9047): Add python3.11 to runtime property in policy lambda mode schema
* [#9046](https://github.com/cloud-custodian/cloud-custodian/pull/9046): Enhanchement/adding port ranges to firewall rules
* [#9045](https://github.com/cloud-custodian/cloud-custodian/pull/9045): azure - redis.filters.redis-firewall-filter
* [#9044](https://github.com/cloud-custodian/cloud-custodian/pull/9044): azure - networksecuritygroup.filters.flow-analytics-logging
* [#9042](https://github.com/cloud-custodian/cloud-custodian/pull/9042): add mysql-server-security-alert-policies-filter
* [#9041](https://github.com/cloud-custodian/cloud-custodian/pull/9041): azure - postgresql-server.filters
* [#9040](https://github.com/cloud-custodian/cloud-custodian/pull/9040): azure - mariadb-server
* [#9039](https://github.com/cloud-custodian/cloud-custodian/pull/9039): azure - machine-learning-workspace
* [#9038](https://github.com/cloud-custodian/cloud-custodian/pull/9038): azure - front-door.filters.web-application-firewall-policies
* [#9037](https://github.com/cloud-custodian/cloud-custodian/pull/9037): azure - eventhub.filters.private-endpoint-connections
* [#9035](https://github.com/cloud-custodian/cloud-custodian/pull/9035): azure - event-grid-topic
* [#9032](https://github.com/cloud-custodian/cloud-custodian/pull/9032): fix: use correct regex patterns in ami shares
* [#9030](https://github.com/cloud-custodian/cloud-custodian/pull/9030): Adding EffectiveFirewall filter to gke cluster
* [#9029](https://github.com/cloud-custodian/cloud-custodian/pull/9029): c7n-left - support policy filtering for warn on

## PR's Closed
* [#9070](https://github.com/cloud-custodian/cloud-custodian/pull/9070): aws - elasticsearch - fix error handling of boto3
* [#9068](https://github.com/cloud-custodian/cloud-custodian/pull/9068): Corrected issue reported in https://github.com/cloud-custodian/cloud-custodian/issues/7155
* [#9066](https://github.com/cloud-custodian/cloud-custodian/pull/9066): aws - check-cloudtrail filter - fix
* [#9063](https://github.com/cloud-custodian/cloud-custodian/pull/9063): aws - iam-oidc-provider - adds delete action
* [#9062](https://github.com/cloud-custodian/cloud-custodian/pull/9062): azure - signalr
* [#9060](https://github.com/cloud-custodian/cloud-custodian/pull/9060): azure - security-assessments
* [#9059](https://github.com/cloud-custodian/cloud-custodian/pull/9059): Log error and continue when deleting IGWs
* [#9051](https://github.com/cloud-custodian/cloud-custodian/pull/9051): aws - glue - fix toggle-metrics filter
* [#9050](https://github.com/cloud-custodian/cloud-custodian/pull/9050): Bump golang.org/x/net from 0.7.0 to 0.17.0 in /tools/cask
* [#9047](https://github.com/cloud-custodian/cloud-custodian/pull/9047): Add python3.11 to runtime property in policy lambda mode schema
* [#9040](https://github.com/cloud-custodian/cloud-custodian/pull/9040): azure - mariadb-server
* [#9035](https://github.com/cloud-custodian/cloud-custodian/pull/9035): azure - event-grid-topic
* [#9029](https://github.com/cloud-custodian/cloud-custodian/pull/9029): c7n-left - support policy filtering for warn on
* [#8992](https://github.com/cloud-custodian/cloud-custodian/pull/8992): Add DesktopVirtualization resources
* [#8968](https://github.com/cloud-custodian/cloud-custodian/pull/8968): aws - check-cloudtrail filter - update
* [#8892](https://github.com/cloud-custodian/cloud-custodian/pull/8892): aws - ecs - adding network-location filter for ecs-service and ecs-task
* [#8542](https://github.com/cloud-custodian/cloud-custodian/pull/8542): Adding new filter to examine resources contained within a resource group
* [#8437](https://github.com/cloud-custodian/cloud-custodian/pull/8437): ensuring webacl detail is present for wafv2 resources
* [#8420](https://github.com/cloud-custodian/cloud-custodian/pull/8420): Add api-key feature to values_from

## Issues Opened
* [#9067](https://github.com/cloud-custodian/cloud-custodian/issues/9067): Can we please add support to setting AWS AMIs to a disabled state
* [#9057](https://github.com/cloud-custodian/cloud-custodian/issues/9057): aws - opensearch serverless support
* [#9056](https://github.com/cloud-custodian/cloud-custodian/issues/9056): Custodian stops processing IGW objects when it hits a DependencyViolation exception
* [#9055](https://github.com/cloud-custodian/cloud-custodian/issues/9055): Match multiple values in network-location filter
* [#9052](https://github.com/cloud-custodian/cloud-custodian/issues/9052): aws - opensearch domain support
* [#9048](https://github.com/cloud-custodian/cloud-custodian/issues/9048): AWS - VPC Endpoint Service Allowed Principals Check Filter
* [#9043](https://github.com/cloud-custodian/cloud-custodian/issues/9043): Support Python 3.11 Lambda Runtime
* [#9036](https://github.com/cloud-custodian/cloud-custodian/issues/9036): Filter 'lifecycle-rule' for a AWS ECR doen't work with multiple lifecycle policies
* [#9034](https://github.com/cloud-custodian/cloud-custodian/issues/9034): releng - support python 3.12
* [#9033](https://github.com/cloud-custodian/cloud-custodian/issues/9033): Enable lambda-mode for AWS Cloud Control Provider
* [#9031](https://github.com/cloud-custodian/cloud-custodian/issues/9031): Custodian job errors/failures potentially because of exhaustion of ephemeral ports on the instance

## Issues Closed
* [#9056](https://github.com/cloud-custodian/cloud-custodian/issues/9056): Custodian stops processing IGW objects when it hits a DependencyViolation exception
* [#8940](https://github.com/cloud-custodian/cloud-custodian/issues/8940): c7n-left - support cli flag filtering for warning and failures