# C7N Community Meeting Minutes 2023-10-31
## October 31st 2023

:::info

- **URL:** meet.google.com/mii-evqh-esh
- **Date:** October 31, 2023 (2:00 PM (ET) / 11:00 AM (PT) / 7PM (UTC))
- **[Timezone Converter (Click me)](https://www.timeanddate.com/worldclock/converter.html?iso=20220621T180000&p1=263&p2=224&p3=136&p4=37&p5=367&p6=438&p7=248&p8=22)**
- **Agenda**
1. Intros `10m`
1. Agenda Items `20m`
1. PR Party `30m`
- **Meeting Contact:** AJ: <[e-mail]>
- **Video Archive and Transcripts**: https://mtngs.io/cloud-custodian/community-meetings/
:::

## Agenda Items

- Intros, etc.
- Issue incoming around fetching credentials from ECS tasks
- botocore.exceptions.EndpointConnectionError: Could not connect to the endpoint URL: "http://169.254.170.2/v2/credentials/XXXXXXXX-XXXX-XXXX-XXXX-XXXXXXXXXXXX"\

### PR/Issue Discussion

- https://github.com/cloud-custodian/cloud-custodian/pull/9107
- Testing welcome!

# Weekly Report
Weekly status report for cloud-custodian/cloud-custodian Week #44 2023

## Weekly Stats
| | Opened this week| Closed this week|
|--|---|-----|
|Issues| 10 | 10|
|PR's| 43 | 38|

| | |
|--|--|
| New stars | 18|
| New forks | 8|

## PR's Opened
* [#9127](https://github.com/cloud-custodian/cloud-custodian/pull/9127): adding postgresql flexible servers start and stop features
* [#9126](https://github.com/cloud-custodian/cloud-custodian/pull/9126): fix: get SG IDs from all interfaces on an EC2 instance in 'security-group' filter
* [#9125](https://github.com/cloud-custodian/cloud-custodian/pull/9125): aws - dynamodb-table - delete protection config and force delete
* [#9123](https://github.com/cloud-custodian/cloud-custodian/pull/9123): openstack - user.filters.extended-info
* [#9122](https://github.com/cloud-custodian/cloud-custodian/pull/9122): Bump github.com/docker/docker from 23.0.3+incompatible to 24.0.7+incompatible in /tools/cask
* [#9121](https://github.com/cloud-custodian/cloud-custodian/pull/9121): aws - add support for workspaces web
* [#9119](https://github.com/cloud-custodian/cloud-custodian/pull/9119): openstack - server.filters.security-group
* [#9118](https://github.com/cloud-custodian/cloud-custodian/pull/9118): azure - stream-job
* [#9117](https://github.com/cloud-custodian/cloud-custodian/pull/9117): Update azure poetry lock
* [#9116](https://github.com/cloud-custodian/cloud-custodian/pull/9116): azure - storage.filters
* [#9115](https://github.com/cloud-custodian/cloud-custodian/pull/9115): azure - sql-server-vulnerability-assessments and sql-server.filters.vulnerability-assessments
* [#9114](https://github.com/cloud-custodian/cloud-custodian/pull/9114): azure - sql-server.filters failover-group-filter sql-server-security-alert-policies
* [#9113](https://github.com/cloud-custodian/cloud-custodian/pull/9113): azure - sql-managed-instance and its filters
* [#9110](https://github.com/cloud-custodian/cloud-custodian/pull/9110): aws - secrets manager tag, ignore reserved tags
* [#9108](https://github.com/cloud-custodian/cloud-custodian/pull/9108): releng - update deps and restore azure lock file
* [#9107](https://github.com/cloud-custodian/cloud-custodian/pull/9107): aws - cache clients by region
* [#9105](https://github.com/cloud-custodian/cloud-custodian/pull/9105): Update the docker README for c7n_mailer
* [#9104](https://github.com/cloud-custodian/cloud-custodian/pull/9104): releng: vendor selections of distutils
* [#9103](https://github.com/cloud-custodian/cloud-custodian/pull/9103): Added support for 'aws-iso' partition
* [#9101](https://github.com/cloud-custodian/cloud-custodian/pull/9101): add a case-insensitive option in 'Type' filter
* [#9100](https://github.com/cloud-custodian/cloud-custodian/pull/9100): aws - add eni detach and eip disassociate actions, fix check-permissions filter
* [#9099](https://github.com/cloud-custodian/cloud-custodian/pull/9099): Rds cluster pending maintenance list filter
* [#9098](https://github.com/cloud-custodian/cloud-custodian/pull/9098): azure - sql-database.filters.data-encryption
* [#9097](https://github.com/cloud-custodian/cloud-custodian/pull/9097): azure - azure.sql-auditing-settings
* [#9096](https://github.com/cloud-custodian/cloud-custodian/pull/9096): Update azure poetry lock
* [#9094](https://github.com/cloud-custodian/cloud-custodian/pull/9094): Make AWS waf global
* [#9092](https://github.com/cloud-custodian/cloud-custodian/pull/9092): aws - modify-sgs by tags - vpc id check
* [#9090](https://github.com/cloud-custodian/cloud-custodian/pull/9090): releng - update dependencies - 2023-10
* [#9088](https://github.com/cloud-custodian/cloud-custodian/pull/9088): Bump urllib3 from 1.26.17 to 1.26.18 in /tools/c7n_tencentcloud
* [#9087](https://github.com/cloud-custodian/cloud-custodian/pull/9087): Bump urllib3 from 1.26.17 to 1.26.18 in /tools/c7n_mailer
* [#9086](https://github.com/cloud-custodian/cloud-custodian/pull/9086): Bump urllib3 from 1.26.17 to 1.26.18 in /tools/c7n_azure
* [#9085](https://github.com/cloud-custodian/cloud-custodian/pull/9085): Bump urllib3 from 1.26.17 to 1.26.18 in /tools/c7n_terraform
* [#9084](https://github.com/cloud-custodian/cloud-custodian/pull/9084): Bump urllib3 from 1.26.17 to 1.26.18 in /tools/c7n_openstack
* [#9083](https://github.com/cloud-custodian/cloud-custodian/pull/9083): Bump urllib3 from 1.26.17 to 1.26.18 in /tools/c7n_sphinxext
* [#9082](https://github.com/cloud-custodian/cloud-custodian/pull/9082): Bump urllib3 from 1.26.17 to 1.26.18 in /tools/c7n_left
* [#9081](https://github.com/cloud-custodian/cloud-custodian/pull/9081): Bump urllib3 from 1.26.17 to 1.26.18 in /tools/c7n_kube
* [#9080](https://github.com/cloud-custodian/cloud-custodian/pull/9080): Bump urllib3 from 1.26.17 to 1.26.18 in /tools/c7n_org
* [#9079](https://github.com/cloud-custodian/cloud-custodian/pull/9079): Bump urllib3 from 1.26.17 to 1.26.18 in /tools/c7n_trailcreator
* [#9078](https://github.com/cloud-custodian/cloud-custodian/pull/9078): Bump urllib3 from 1.26.17 to 1.26.18 in /tools/c7n_policystream
* [#9077](https://github.com/cloud-custodian/cloud-custodian/pull/9077): Bump urllib3 from 1.26.17 to 1.26.18 in /tools/c7n_logexporter
* [#9076](https://github.com/cloud-custodian/cloud-custodian/pull/9076): Bump urllib3 from 1.26.17 to 1.26.18 in /tools/c7n_gcp
* [#9075](https://github.com/cloud-custodian/cloud-custodian/pull/9075): Bump urllib3 from 1.26.17 to 1.26.18
* [#9074](https://github.com/cloud-custodian/cloud-custodian/pull/9074): Bump urllib3 from 1.26.17 to 1.26.18 in /tools/c7n_awscc

## PR's Closed
* [#9121](https://github.com/cloud-custodian/cloud-custodian/pull/9121): aws - add support for workspaces web
* [#9119](https://github.com/cloud-custodian/cloud-custodian/pull/9119): openstack - server.filters.security-group
* [#9110](https://github.com/cloud-custodian/cloud-custodian/pull/9110): aws - secrets manager tag, ignore reserved tags
* [#9108](https://github.com/cloud-custodian/cloud-custodian/pull/9108): releng - update deps and restore azure lock file
* [#9105](https://github.com/cloud-custodian/cloud-custodian/pull/9105): Update the docker README for c7n_mailer
* [#9104](https://github.com/cloud-custodian/cloud-custodian/pull/9104): releng: vendor selections of distutils
* [#9103](https://github.com/cloud-custodian/cloud-custodian/pull/9103): Added support for 'aws-iso' partition
* [#9101](https://github.com/cloud-custodian/cloud-custodian/pull/9101): add a case-insensitive option in 'Type' filter
* [#9099](https://github.com/cloud-custodian/cloud-custodian/pull/9099): Rds cluster pending maintenance list filter
* [#9098](https://github.com/cloud-custodian/cloud-custodian/pull/9098): azure - sql-database.filters.data-encryption
* [#9096](https://github.com/cloud-custodian/cloud-custodian/pull/9096): Update azure poetry lock
* [#9094](https://github.com/cloud-custodian/cloud-custodian/pull/9094): Make AWS waf global
* [#9092](https://github.com/cloud-custodian/cloud-custodian/pull/9092): aws - modify-sgs by tags - vpc id check
* [#9090](https://github.com/cloud-custodian/cloud-custodian/pull/9090): releng - update dependencies - 2023-10
* [#9088](https://github.com/cloud-custodian/cloud-custodian/pull/9088): Bump urllib3 from 1.26.17 to 1.26.18 in /tools/c7n_tencentcloud
* [#9087](https://github.com/cloud-custodian/cloud-custodian/pull/9087): Bump urllib3 from 1.26.17 to 1.26.18 in /tools/c7n_mailer
* [#9086](https://github.com/cloud-custodian/cloud-custodian/pull/9086): Bump urllib3 from 1.26.17 to 1.26.18 in /tools/c7n_azure
* [#9085](https://github.com/cloud-custodian/cloud-custodian/pull/9085): Bump urllib3 from 1.26.17 to 1.26.18 in /tools/c7n_terraform
* [#9084](https://github.com/cloud-custodian/cloud-custodian/pull/9084): Bump urllib3 from 1.26.17 to 1.26.18 in /tools/c7n_openstack
* [#9083](https://github.com/cloud-custodian/cloud-custodian/pull/9083): Bump urllib3 from 1.26.17 to 1.26.18 in /tools/c7n_sphinxext
* [#9082](https://github.com/cloud-custodian/cloud-custodian/pull/9082): Bump urllib3 from 1.26.17 to 1.26.18 in /tools/c7n_left
* [#9081](https://github.com/cloud-custodian/cloud-custodian/pull/9081): Bump urllib3 from 1.26.17 to 1.26.18 in /tools/c7n_kube
* [#9080](https://github.com/cloud-custodian/cloud-custodian/pull/9080): Bump urllib3 from 1.26.17 to 1.26.18 in /tools/c7n_org
* [#9079](https://github.com/cloud-custodian/cloud-custodian/pull/9079): Bump urllib3 from 1.26.17 to 1.26.18 in /tools/c7n_trailcreator
* [#9078](https://github.com/cloud-custodian/cloud-custodian/pull/9078): Bump urllib3 from 1.26.17 to 1.26.18 in /tools/c7n_policystream
* [#9077](https://github.com/cloud-custodian/cloud-custodian/pull/9077): Bump urllib3 from 1.26.17 to 1.26.18 in /tools/c7n_logexporter
* [#9076](https://github.com/cloud-custodian/cloud-custodian/pull/9076): Bump urllib3 from 1.26.17 to 1.26.18 in /tools/c7n_gcp
* [#9075](https://github.com/cloud-custodian/cloud-custodian/pull/9075): Bump urllib3 from 1.26.17 to 1.26.18
* [#9074](https://github.com/cloud-custodian/cloud-custodian/pull/9074): Bump urllib3 from 1.26.17 to 1.26.18 in /tools/c7n_awscc
* [#9072](https://github.com/cloud-custodian/cloud-custodian/pull/9072): Fix: Handles InvalidParameterValueException for refreshing trusted advisor checks (#9001)
* [#9071](https://github.com/cloud-custodian/cloud-custodian/pull/9071): Fix list index error in aws arn parsing
* [#9064](https://github.com/cloud-custodian/cloud-custodian/pull/9064): openstack - security-group
* [#9058](https://github.com/cloud-custodian/cloud-custodian/pull/9058): aws - add support for opensearch serverless
* [#9053](https://github.com/cloud-custodian/cloud-custodian/pull/9053): aws - add support for opensearch domain
* [#9049](https://github.com/cloud-custodian/cloud-custodian/pull/9049): Bump golang.org/x/net from 0.7.0 to 0.17.0 in /tools/omnissm
* [#9046](https://github.com/cloud-custodian/cloud-custodian/pull/9046): Enhanchement/adding port ranges to firewall rules
* [#9039](https://github.com/cloud-custodian/cloud-custodian/pull/9039): azure - machine-learning-workspace
* [#8990](https://github.com/cloud-custodian/cloud-custodian/pull/8990): Update tagcompliance.rst

## Issues Opened
* [#9120](https://github.com/cloud-custodian/cloud-custodian/issues/9120): aws - workspaces web support
* [#9112](https://github.com/cloud-custodian/cloud-custodian/issues/9112): aws.asg - Resize using a threshold
* [#9111](https://github.com/cloud-custodian/cloud-custodian/issues/9111): aws.asg - Set desired capacity to the maximum taken from cloudwatch metrics for a specific period
* [#9109](https://github.com/cloud-custodian/cloud-custodian/issues/9109): Adding Parent tags to resources
* [#9106](https://github.com/cloud-custodian/cloud-custodian/issues/9106): c7n-mailer - Amazon SES Verified Domain Identity instead of a Verified Email Address Identity
* [#9102](https://github.com/cloud-custodian/cloud-custodian/issues/9102): Handle aws-iso region
* [#9095](https://github.com/cloud-custodian/cloud-custodian/issues/9095): The check-permissions Filter is not Always Working as Expected
* [#9093](https://github.com/cloud-custodian/cloud-custodian/issues/9093): aws.secrets-manager:tag action tries to retag secret with existing tags as well
* [#9091](https://github.com/cloud-custodian/cloud-custodian/issues/9091): aws - modify sg by tags
* [#9089](https://github.com/cloud-custodian/cloud-custodian/issues/9089): Azure resource filtering should not be case-sensitive

## Issues Closed
* [#9120](https://github.com/cloud-custodian/cloud-custodian/issues/9120): aws - workspaces web support
* [#9102](https://github.com/cloud-custodian/cloud-custodian/issues/9102): Handle aws-iso region
* [#9093](https://github.com/cloud-custodian/cloud-custodian/issues/9093): aws.secrets-manager:tag action tries to retag secret with existing tags as well
* [#9091](https://github.com/cloud-custodian/cloud-custodian/issues/9091): aws - modify sg by tags
* [#9089](https://github.com/cloud-custodian/cloud-custodian/issues/9089): Azure resource filtering should not be case-sensitive
* [#9057](https://github.com/cloud-custodian/cloud-custodian/issues/9057): aws - opensearch serverless support
* [#9052](https://github.com/cloud-custodian/cloud-custodian/issues/9052): aws - opensearch domain support
* [#9027](https://github.com/cloud-custodian/cloud-custodian/issues/9027): https://cloudcustodian.io/getting-started/policyStructure/ doesn't work
* [#9001](https://github.com/cloud-custodian/cloud-custodian/issues/9001): AWS account filter service-limits runs into unrefreshable check ID c1dfprch07
* [#8394](https://github.com/cloud-custodian/cloud-custodian/issues/8394): releng - remove distutils version usage from the code base