# C7N Community Meeting Minutes 2023-10-03
## October 3rd 2023

:::info

- **URL:** meet.google.com/mii-evqh-esh
- **Date:** October 3, 2023 (2:00 PM (ET) / 11:00 AM (PT) / 7PM (UTC))
- **[Timezone Converter (Click me)](https://www.timeanddate.com/worldclock/converter.html?iso=20220621T180000&p1=263&p2=224&p3=136&p4=37&p5=367&p6=438&p7=248&p8=22)**
- **Agenda**
1. Intros `10m`
1. Agenda Items `20m`
1. PR Party `30m`
- **Meeting Contact:** AJ: <[e-mail]>
- **Video Archive and Transcripts**: https://mtngs.io/cloud-custodian/community-meetings/
:::

## Agenda Items

- Intros, etc.
- We've moved on from Python 3.7 this year, heads up:
- https://github.com/cloud-custodian/cloud-custodian/issues/8092
- [Slack question](https://www.linen.dev/s/cloud-custodian/t/15727051/hi-it-looks-like-the-cloud-custodian-mailer-is-using-python-#15e5889c-16ce-4ca4-8e6a-b887a543f7f3) about mailer using 3.7, seems to be due to local/config issues though
- 0.9.32.0 released today
- 8 new contributors this release! :tada:
- Cloud Custodian Day ideas?
- Details coming soon
- Virtual event (targeting end of January 2024)
- Deprecation timelines / planning
- Highlight changes in release notes
- Potentially flip deprecations from warning to error 1-2 releases before removal
- Allow an opt-in "run anyway" type option
- waf-enabled / wafv2-enabled - examples for "new way"
- Issue incoming around fetching credentials from ECS tasks
- botocore.exceptions.EndpointConnectionError: Could not connect to the endpoint URL: "http://169.254.170.2/v2/credentials/XXXXXXXX-XXXX-XXXX-XXXX-XXXXXXXXXXXX"\

### PR/Issue Discussion

# Weekly Report
Weekly status report for cloud-custodian/cloud-custodian Week #40 2023

## Weekly Stats
| | Opened this week| Closed this week|
|--|---|-----|
|Issues| 14 | 7|
|PR's| 56 | 54|

| | |
|--|--|
| New stars | 22|
| New forks | 8|

## PR's Opened
* [#9025](https://github.com/cloud-custodian/cloud-custodian/pull/9025): releng - update custodian version in dependent packages
* [#9022](https://github.com/cloud-custodian/cloud-custodian/pull/9022): releng - update dependencies
* [#9021](https://github.com/cloud-custodian/cloud-custodian/pull/9021): Bump urllib3 from 1.26.16 to 1.26.17 in /tools/c7n_mailer
* [#9020](https://github.com/cloud-custodian/cloud-custodian/pull/9020): Bump urllib3 from 1.26.16 to 1.26.17
* [#9019](https://github.com/cloud-custodian/cloud-custodian/pull/9019): Bump urllib3 from 1.26.16 to 1.26.17 in /tools/c7n_gcp
* [#9018](https://github.com/cloud-custodian/cloud-custodian/pull/9018): Bump urllib3 from 1.26.16 to 1.26.17 in /tools/c7n_azure
* [#9017](https://github.com/cloud-custodian/cloud-custodian/pull/9017): Bump urllib3 from 1.26.16 to 1.26.17 in /tools/c7n_kube
* [#9016](https://github.com/cloud-custodian/cloud-custodian/pull/9016): Bump urllib3 from 1.26.16 to 1.26.17 in /tools/c7n_sphinxext
* [#9015](https://github.com/cloud-custodian/cloud-custodian/pull/9015): Bump urllib3 from 1.26.16 to 1.26.17 in /tools/c7n_left
* [#9014](https://github.com/cloud-custodian/cloud-custodian/pull/9014): Bump urllib3 from 1.26.16 to 1.26.17 in /tools/c7n_policystream
* [#9013](https://github.com/cloud-custodian/cloud-custodian/pull/9013): Bump urllib3 from 1.26.16 to 1.26.17 in /tools/c7n_terraform
* [#9012](https://github.com/cloud-custodian/cloud-custodian/pull/9012): Bump urllib3 from 1.26.16 to 1.26.17 in /tools/c7n_trailcreator
* [#9011](https://github.com/cloud-custodian/cloud-custodian/pull/9011): Bump urllib3 from 1.26.16 to 1.26.17 in /tools/c7n_tencentcloud
* [#9010](https://github.com/cloud-custodian/cloud-custodian/pull/9010): Bump urllib3 from 1.26.16 to 1.26.17 in /tools/c7n_logexporter
* [#9009](https://github.com/cloud-custodian/cloud-custodian/pull/9009): Bump urllib3 from 1.26.16 to 1.26.17 in /tools/c7n_org
* [#9008](https://github.com/cloud-custodian/cloud-custodian/pull/9008): Bump urllib3 from 1.26.16 to 1.26.17 in /tools/c7n_openstack
* [#9007](https://github.com/cloud-custodian/cloud-custodian/pull/9007): Bump urllib3 from 1.26.16 to 1.26.17 in /tools/c7n_awscc
* [#9006](https://github.com/cloud-custodian/cloud-custodian/pull/9006): Enhance iam-policy Filter to Support gcp.organization and gcp.folder Resources
* [#9005](https://github.com/cloud-custodian/cloud-custodian/pull/9005): docs - cover list-item under generic filters
* [#9003](https://github.com/cloud-custodian/cloud-custodian/pull/9003): releng - prep 0.9.32
* [#9002](https://github.com/cloud-custodian/cloud-custodian/pull/9002): c7n-left - cli entrypoint point reporter parameter
* [#9000](https://github.com/cloud-custodian/cloud-custodian/pull/9000): azure - event-grid-domain
* [#8999](https://github.com/cloud-custodian/cloud-custodian/pull/8999): azure - automation-account, automation-account.filters.variable-value
* [#8998](https://github.com/cloud-custodian/cloud-custodian/pull/8998): OCI Instance Principal Auth
* [#8997](https://github.com/cloud-custodian/cloud-custodian/pull/8997): azure - app-configuration
* [#8996](https://github.com/cloud-custodian/cloud-custodian/pull/8996): Oci function support
* [#8995](https://github.com/cloud-custodian/cloud-custodian/pull/8995): c7n-left - only consider root module variables when injecting uninitialized defaults
* [#8994](https://github.com/cloud-custodian/cloud-custodian/pull/8994): gcp - bq-job - update enum_spec
* [#8993](https://github.com/cloud-custodian/cloud-custodian/pull/8993): c7n-left - fix handling of relative source dir
* [#8992](https://github.com/cloud-custodian/cloud-custodian/pull/8992): Add DesktopVirtualization resources
* [#8991](https://github.com/cloud-custodian/cloud-custodian/pull/8991): create Desktop Virtualization resources host-pools and session-hosts with session-hosts-vm to check identity
* [#8990](https://github.com/cloud-custodian/cloud-custodian/pull/8990): Update tagcompliance.rst
* [#8988](https://github.com/cloud-custodian/cloud-custodian/pull/8988): aws - route53 - fix query-logging-enabled filter
* [#8985](https://github.com/cloud-custodian/cloud-custodian/pull/8985): releng - update dependencies
* [#8984](https://github.com/cloud-custodian/cloud-custodian/pull/8984): c7n-left - handle null provider tags when augmenting
* [#8982](https://github.com/cloud-custodian/cloud-custodian/pull/8982): Add filter for GCP Org Policies
* [#8979](https://github.com/cloud-custodian/cloud-custodian/pull/8979): updated the package version for azure mgnt cdn
* [#8978](https://github.com/cloud-custodian/cloud-custodian/pull/8978): [GCP] - Cloudrun GCP iam-policy
* [#8977](https://github.com/cloud-custodian/cloud-custodian/pull/8977): [GCP] - Cloudrun GCP iam-policy
* [#8976](https://github.com/cloud-custodian/cloud-custodian/pull/8976): Cloudrun iam policies
* [#8974](https://github.com/cloud-custodian/cloud-custodian/pull/8974): c7n-left - dump cli command to show graph and input variables
* [#8972](https://github.com/cloud-custodian/cloud-custodian/pull/8972): aws - launch-template-version - generate arns that include a version number
* [#8971](https://github.com/cloud-custodian/cloud-custodian/pull/8971): azure - kusho
* [#8970](https://github.com/cloud-custodian/cloud-custodian/pull/8970): azure - network-watcher
* [#8968](https://github.com/cloud-custodian/cloud-custodian/pull/8968): aws - check-cloudtrail filter - update
* [#8967](https://github.com/cloud-custodian/cloud-custodian/pull/8967): GCP: adding support for setting high availability sql instances
* [#8966](https://github.com/cloud-custodian/cloud-custodian/pull/8966): azure - datalake-analytics
* [#8965](https://github.com/cloud-custodian/cloud-custodian/pull/8965): Bump cryptography from 41.0.3 to 41.0.4 in /tools/c7n_mailer
* [#8964](https://github.com/cloud-custodian/cloud-custodian/pull/8964): Bump cryptography from 41.0.3 to 41.0.4
* [#8963](https://github.com/cloud-custodian/cloud-custodian/pull/8963): Bump cryptography from 41.0.3 to 41.0.4 in /tools/c7n_openstack
* [#8962](https://github.com/cloud-custodian/cloud-custodian/pull/8962): Bump cryptography from 41.0.3 to 41.0.4 in /tools/c7n_oci
* [#8961](https://github.com/cloud-custodian/cloud-custodian/pull/8961): Bump cryptography from 41.0.3 to 41.0.4 in /tools/c7n_azure
* [#8960](https://github.com/cloud-custodian/cloud-custodian/pull/8960): aws - s3 - only check local trails in data-events filter
* [#8959](https://github.com/cloud-custodian/cloud-custodian/pull/8959): docs - fix event filter example to use `op: contains`
* [#8958](https://github.com/cloud-custodian/cloud-custodian/pull/8958): c7n-left - initialize variables with defaults if none provided
* [#8957](https://github.com/cloud-custodian/cloud-custodian/pull/8957): aws - Correct the default value for an empty list of EC2 Tags

## PR's Closed
* [#9025](https://github.com/cloud-custodian/cloud-custodian/pull/9025): releng - update custodian version in dependent packages
* [#9022](https://github.com/cloud-custodian/cloud-custodian/pull/9022): releng - update dependencies
* [#9021](https://github.com/cloud-custodian/cloud-custodian/pull/9021): Bump urllib3 from 1.26.16 to 1.26.17 in /tools/c7n_mailer
* [#9020](https://github.com/cloud-custodian/cloud-custodian/pull/9020): Bump urllib3 from 1.26.16 to 1.26.17
* [#9019](https://github.com/cloud-custodian/cloud-custodian/pull/9019): Bump urllib3 from 1.26.16 to 1.26.17 in /tools/c7n_gcp
* [#9018](https://github.com/cloud-custodian/cloud-custodian/pull/9018): Bump urllib3 from 1.26.16 to 1.26.17 in /tools/c7n_azure
* [#9017](https://github.com/cloud-custodian/cloud-custodian/pull/9017): Bump urllib3 from 1.26.16 to 1.26.17 in /tools/c7n_kube
* [#9016](https://github.com/cloud-custodian/cloud-custodian/pull/9016): Bump urllib3 from 1.26.16 to 1.26.17 in /tools/c7n_sphinxext
* [#9015](https://github.com/cloud-custodian/cloud-custodian/pull/9015): Bump urllib3 from 1.26.16 to 1.26.17 in /tools/c7n_left
* [#9014](https://github.com/cloud-custodian/cloud-custodian/pull/9014): Bump urllib3 from 1.26.16 to 1.26.17 in /tools/c7n_policystream
* [#9013](https://github.com/cloud-custodian/cloud-custodian/pull/9013): Bump urllib3 from 1.26.16 to 1.26.17 in /tools/c7n_terraform
* [#9012](https://github.com/cloud-custodian/cloud-custodian/pull/9012): Bump urllib3 from 1.26.16 to 1.26.17 in /tools/c7n_trailcreator
* [#9011](https://github.com/cloud-custodian/cloud-custodian/pull/9011): Bump urllib3 from 1.26.16 to 1.26.17 in /tools/c7n_tencentcloud
* [#9010](https://github.com/cloud-custodian/cloud-custodian/pull/9010): Bump urllib3 from 1.26.16 to 1.26.17 in /tools/c7n_logexporter
* [#9009](https://github.com/cloud-custodian/cloud-custodian/pull/9009): Bump urllib3 from 1.26.16 to 1.26.17 in /tools/c7n_org
* [#9008](https://github.com/cloud-custodian/cloud-custodian/pull/9008): Bump urllib3 from 1.26.16 to 1.26.17 in /tools/c7n_openstack
* [#9007](https://github.com/cloud-custodian/cloud-custodian/pull/9007): Bump urllib3 from 1.26.16 to 1.26.17 in /tools/c7n_awscc
* [#9006](https://github.com/cloud-custodian/cloud-custodian/pull/9006): Enhance iam-policy Filter to Support gcp.organization and gcp.folder Resources
* [#9005](https://github.com/cloud-custodian/cloud-custodian/pull/9005): docs - cover list-item under generic filters
* [#9003](https://github.com/cloud-custodian/cloud-custodian/pull/9003): releng - prep 0.9.32
* [#9002](https://github.com/cloud-custodian/cloud-custodian/pull/9002): c7n-left - cli entrypoint point reporter parameter
* [#8995](https://github.com/cloud-custodian/cloud-custodian/pull/8995): c7n-left - only consider root module variables when injecting uninitialized defaults
* [#8994](https://github.com/cloud-custodian/cloud-custodian/pull/8994): gcp - bq-job - update enum_spec
* [#8993](https://github.com/cloud-custodian/cloud-custodian/pull/8993): c7n-left - fix handling of relative source dir
* [#8991](https://github.com/cloud-custodian/cloud-custodian/pull/8991): create Desktop Virtualization resources host-pools and session-hosts with session-hosts-vm to check identity
* [#8988](https://github.com/cloud-custodian/cloud-custodian/pull/8988): aws - route53 - fix query-logging-enabled filter
* [#8985](https://github.com/cloud-custodian/cloud-custodian/pull/8985): releng - update dependencies
* [#8984](https://github.com/cloud-custodian/cloud-custodian/pull/8984): c7n-left - handle null provider tags when augmenting
* [#8982](https://github.com/cloud-custodian/cloud-custodian/pull/8982): Add filter for GCP Org Policies
* [#8979](https://github.com/cloud-custodian/cloud-custodian/pull/8979): updated the package version for azure mgnt cdn
* [#8978](https://github.com/cloud-custodian/cloud-custodian/pull/8978): [GCP] - Cloudrun GCP iam-policy
* [#8977](https://github.com/cloud-custodian/cloud-custodian/pull/8977): [GCP] - Cloudrun GCP iam-policy
* [#8976](https://github.com/cloud-custodian/cloud-custodian/pull/8976): Cloudrun iam policies
* [#8974](https://github.com/cloud-custodian/cloud-custodian/pull/8974): c7n-left - dump cli command to show graph and input variables
* [#8972](https://github.com/cloud-custodian/cloud-custodian/pull/8972): aws - launch-template-version - generate arns that include a version number
* [#8967](https://github.com/cloud-custodian/cloud-custodian/pull/8967): GCP: adding support for setting high availability sql instances
* [#8965](https://github.com/cloud-custodian/cloud-custodian/pull/8965): Bump cryptography from 41.0.3 to 41.0.4 in /tools/c7n_mailer
* [#8964](https://github.com/cloud-custodian/cloud-custodian/pull/8964): Bump cryptography from 41.0.3 to 41.0.4
* [#8963](https://github.com/cloud-custodian/cloud-custodian/pull/8963): Bump cryptography from 41.0.3 to 41.0.4 in /tools/c7n_openstack
* [#8962](https://github.com/cloud-custodian/cloud-custodian/pull/8962): Bump cryptography from 41.0.3 to 41.0.4 in /tools/c7n_oci
* [#8961](https://github.com/cloud-custodian/cloud-custodian/pull/8961): Bump cryptography from 41.0.3 to 41.0.4 in /tools/c7n_azure
* [#8960](https://github.com/cloud-custodian/cloud-custodian/pull/8960): aws - s3 - only check local trails in data-events filter
* [#8959](https://github.com/cloud-custodian/cloud-custodian/pull/8959): docs - fix event filter example to use `op: contains`
* [#8958](https://github.com/cloud-custodian/cloud-custodian/pull/8958): c7n-left - initialize variables with defaults if none provided
* [#8957](https://github.com/cloud-custodian/cloud-custodian/pull/8957): aws - Correct the default value for an empty list of EC2 Tags
* [#8937](https://github.com/cloud-custodian/cloud-custodian/pull/8937): New filter for azure cdn endpoint custom domain minimum tls version
* [#8905](https://github.com/cloud-custodian/cloud-custodian/pull/8905): Create new filter keyvault-keys-rotation to check rotation policy
* [#8903](https://github.com/cloud-custodian/cloud-custodian/pull/8903): gcp - kms keyring filter
* [#8880](https://github.com/cloud-custodian/cloud-custodian/pull/8880): Enhancement/adding valid gcp node versions, master version, and imagetype to nodepool and cluster resources
* [#8872](https://github.com/cloud-custodian/cloud-custodian/pull/8872): releng - move some obsolete things to sandbox
* [#8840](https://github.com/cloud-custodian/cloud-custodian/pull/8840): awscc - use build step to fetch data files
* [#8833](https://github.com/cloud-custodian/cloud-custodian/pull/8833): aws - glue catalog - kms-key filter and set-encryption refactor
* [#8601](https://github.com/cloud-custodian/cloud-custodian/pull/8601): GCP - add logging-sink resource and test
* [#8567](https://github.com/cloud-custodian/cloud-custodian/pull/8567): Add filter for GCP Org Policies

## Issues Opened
* [#9027](https://github.com/cloud-custodian/cloud-custodian/issues/9027): https://cloudcustodian.io/getting-started/policyStructure/ doesn't work
* [#9024](https://github.com/cloud-custodian/cloud-custodian/issues/9024): Enable reporting / checking on AWS IAM User Code Commit Security Credentials
* [#9023](https://github.com/cloud-custodian/cloud-custodian/issues/9023): Eventbridge Rules - Support non-default event buses
* [#9004](https://github.com/cloud-custodian/cloud-custodian/issues/9004): Add generic filter support for matching a list item that meets conditions on multiple fields
* [#9001](https://github.com/cloud-custodian/cloud-custodian/issues/9001): AWS account filter service-limits runs into unrefreshable check ID c1dfprch07
* [#8989](https://github.com/cloud-custodian/cloud-custodian/issues/8989): ec2-auto-tag-user example doesn't work
* [#8987](https://github.com/cloud-custodian/cloud-custodian/issues/8987): Support set-inline-policy for iam roles
* [#8986](https://github.com/cloud-custodian/cloud-custodian/issues/8986): auto-tag aws userName on resources has botocore.errorfactory.InvalidParameterValueException
* [#8983](https://github.com/cloud-custodian/cloud-custodian/issues/8983): Delete hosted zone fails when hosted zone contains record with no TTL
* [#8981](https://github.com/cloud-custodian/cloud-custodian/issues/8981): Secrets Manager not working with Cloudtrail and DeleteSecret
* [#8980](https://github.com/cloud-custodian/cloud-custodian/issues/8980): Need support for configuring registry scanning configuration in aws.ecr resource
* [#8975](https://github.com/cloud-custodian/cloud-custodian/issues/8975): SSL Validation Error for aws.connect-campaign policy
* [#8973](https://github.com/cloud-custodian/cloud-custodian/issues/8973): c7n-left - support cli command to dump graph and input variables
* [#8969](https://github.com/cloud-custodian/cloud-custodian/issues/8969): CloudTrail advanced selectors support

## Issues Closed
* [#9004](https://github.com/cloud-custodian/cloud-custodian/issues/9004): Add generic filter support for matching a list item that meets conditions on multiple fields
* [#8973](https://github.com/cloud-custodian/cloud-custodian/issues/8973): c7n-left - support cli command to dump graph and input variables
* [#8953](https://github.com/cloud-custodian/cloud-custodian/issues/8953): aws.ec2 length(Tags) fails if an EC2 instance has no tags at all
* [#8947](https://github.com/cloud-custodian/cloud-custodian/issues/8947): bug - update docs event filter docs
* [#8945](https://github.com/cloud-custodian/cloud-custodian/issues/8945): Organization trails break the data-events filter for the s3 resource
* [#8843](https://github.com/cloud-custodian/cloud-custodian/issues/8843): aws - glue catalog issues
* [#8756](https://github.com/cloud-custodian/cloud-custodian/issues/8756): oci-provider misses id field in resources.json for buckets