---
# System prepended metadata

title: C7n Community Meeting Minutes
tags: [Meeting]

---

# C7n Community Meeting Minutes
# March 15th 2022

###### tags: `Meeting`

:::info
- **URL:** meet.google.com/mii-evqh-esh
- **Date:** March 15th, 2021 (3:00 PM (ET) / 12:00 PM (PT) / 7PM (UTC)) 
- **[Timezone Converter (Click me)](https://www.timeanddate.com/worldclock/converter.html?iso=20210629T190000&p1=tz_et&p2=tz_pt&p3=22&p4=240&p5=136&p6=176&p7=37&p8=248)**
- **Agenda**
1. Intros `10m`
1. Agenda Items `20m`
1. PR Party `30m`
- **Meeting Contact:** Jorge: <jorge@stacklet.io>
- **Video:** https://www.youtube.com/watch?v=bERpbf_uUW8
- **Permalink:** 

:::

## Agenda Items

- Custodian 102 - March 16th (that's tomorrow!): Cloud Custodian 102 will cover c7n-org and c7n mailer. [Click the link](https://app.livestorm.co/stacklet-io/cloud-custodian-102-save-the-date-for-advance-session) for more details.
- PyCon Sprint - We're planning on hacking on c7n as part of [PyCon 2022](https://us.pycon.org/2022/)!
- [Our first This month in Cloud Custodian Newsletter](https://stacklet.io/blog/tmi-c7n-feb2022) is out!
    - (It's like these notes but higher level)

## Open Questions: 

- Mitushi - Check if an ec2 instance is in a certain subnet. Is there a regex to check the name of the tag instead of a value?
    - AJ: Good question! Don't know how to do this but here are some solutions that may work: 
      - https://gitter.im/cloud-custodian/cloud-custodian?at=6230afbd9bd1c71ecaa3d115
      - [Link to video discussion](https://youtu.be/wuZJic-EVbw?t=389)

- Aakif - Azure, deployed a policy, with Stefan's help. We were able to successfully deploy, policy was working fine. 
      - https://github.com/cloud-custodian/cloud-custodian/issues/7160
- [Link to video discussion](https://youtu.be/wuZJic-EVbw?t=721)


## :mag: PR and Issue Review

### Activity since 2022-02-28


## [cloud-custodian/cloud-custodian](https://github.com/cloud-custodian/cloud-custodian) 

- repo pull\_requests

   *   [**Added action for enabling an AWS Config Managed Rule** #7029](https://github.com/cloud-custodian/cloud-custodian/pull/7029) \[darrendao\]
        
        Similar to #7025 but implemented via action instead of run mode. Sample policy: policies: - name:...
        
        - Ask @kapilt to review.
            
    *   [**Expand self.vtype == 'cidr' to support cidr range in filters/core.py** #7129](https://github.com/cloud-custodian/cloud-custodian/pull/7129) \[cahn1 & darrendao\] -TODO: Jorge to respond here
        
        This PR adds the ability to pass in a list of CIDRs for the cidr value type. There are many use cases for this...
        - @ajkerrigan comment on this - use case looks good
        - @kapilt to review
         
    *   [**Added action to toggle metrics collection on glue jobs** #7151](https://github.com/cloud-custodian/cloud-custodian/pull/7151) \[darrendao\]
        
        This PR adds a new action toggle-metrics to resource glue-job. Our company relies on glue job metrics to identify...
   
    * [**Fixes for IAM and Security Hub filters** #7112](https://github.com/cloud-custodian/cloud-custodian/pull/7112) \[KISStian\]
        The IAM policy checker would fail if there was more than 1 principal included in a statement due to the assertion of...
        - TODO: AJ to submit test so we can get this over the line!
        
    *   [**aws - quota - fix TooManyRequestsException when ListServices in us-east-1** #7138](https://github.com/cloud-custodian/cloud-custodian/pull/7138) \[kentnsw\]
        - TODO: Jorge to file issue on us warning about floods
        
        Because the us-east-1 has more services than some of the others, the service-quota filter will run into the...
        
    *   [**azure - add initial defender resources** #7128](https://github.com/cloud-custodian/cloud-custodian/pull/7128) \[ajkerrigan\]
        
        This is partly addressing #7116 , and partly me figuring out the flow of adding Azure resources. High-level: Add...
      

## [cloud-custodian/cloud-custodian](https://github.com/cloud-custodian/cloud-custodian) 
* repo issues
    
  * :smiley: [**Unable to deploy GCP policies from AWS (workload identity federation)** #7155](https://github.com/cloud-custodian/cloud-custodian/issues/7155) \[darrendao\] kind/bug 

(Heads up from the Intuit crew if you're using [GCP Workload identity federation](https://cloud.google.com/iam/docs/workload-identity-federation)
        
##  [cloud-custodian/examples](https://github.com/cloud-custodian/examples) 
* repo issues and pull requests
    
    *   [**Add policies and infra for c7n workshop** #5](https://github.com/cloud-custodian/examples/pull/5) \[liz-acosta\]
        
        This PR adds example policies and infrastructure to support the c7n workshop webinar: Example...
            
    *   [**Include intentionally broken infra as an example** #8](https://github.com/cloud-custodian/examples/issues/8) \[castrojo\]
        
    *   [**Configure Terraform cache, specify Makefile shell** #9](https://github.com/cloud-custodian/examples/pull/9) \[ajkerrigan\]
        
        Addresses a couple issues I've encountered running these examples across systems: Sets a common Terraform Provider...
                

created at 2022-03-14 13:08 by [dinghy 0.7.1](https://pypi.org/project/dinghy/0.7.1).