# C7n Community Meeting Minutes
# October 11 2022
:::info
- **URL:** meet.google.com/mii-evqh-esh
- **Date:** October 11th, 2022 (2:00 PM (ET) / 11:00 AM (PT) / 6PM (UTC))
- **[Timezone Converter (Click me)](https://www.timeanddate.com/worldclock/converter.html?iso=20220621T180000&p1=263&p2=224&p3=136&p4=37&p5=367&p6=438&p7=248&p8=22)**
- **Agenda**
1. Intros `10m`
1. Agenda Items `20m`
1. PR Party `30m`
- **Meeting Contact:** Jorge: <[e-mail]>
- **Video Archive and Transcripts**: https://mtngs.io/cloud-custodian/community-meetings/
:::

[](https://youtu.be/7Kmjpd6oVzw)

## Agenda Item

- Intros, etc.
- Governance Updates
- See this [GitHub issue](https://github.com/cloud-custodian/cloud-custodian/issues/7149) for the latest draft revisions.
- Governance as Code day:
- Next week!
- [Registration](https://hopin.com/events/governance-as-code-day-with-cloud-custodian-hosted-by-stacklet-2022?hss_channel=tw-1242918094160498699)

- We're testing Slack! Join us:
- [Invite page](https://communityinviter.com/apps/cloud-custodian/c7n-chat)
- PRs incoming to update project link
- Still working on an archive solution, more to follow next week

- [sonny]
- K8s provider update
- See [#7697](https://github.com/cloud-custodian/cloud-custodian/pull/7697)
- Docs PR: https://github.com/thisisshi/cloud-custodian/pull/21/files
- [Example Policies](https://github.com/thisisshi/cloud-custodian/tree/6fa80c1b3d95aa1656e54f88cd3d545c823d0ea1/docs/source/kubernetes/examples) - feedback wanted!

- Shift Left Survey: https://www.surveymonkey.com/r/8Y53GJQ

- From the community: :boom: https://github.com/cloud-custodian/cloud-custodian/issues/7553

# Weekly Report
Weekly status report for cloud-custodian/cloud-custodian Week #41 2022

## Weekly Stats
| | Opened this week| Closed this week|
|--|---|-----|
|Issues| 17 | 14|
|PR's| 37 | 25|

| | |
|--|--|
| New stars | 0|
| New forks | 0|

## PR's Opened
* [#7867](https://github.com/cloud-custodian/cloud-custodian/pull/7867): releng - changelog generator updates
* [#7866](https://github.com/cloud-custodian/cloud-custodian/pull/7866): releng - changelog generator updates
* :boom: [#7865](https://github.com/cloud-custodian/cloud-custodian/pull/7865): c7n_tencentcloud - resources - cam
* [#7864](https://github.com/cloud-custodian/cloud-custodian/pull/7864): Update azure sql va filter
* [#7862](https://github.com/cloud-custodian/cloud-custodian/pull/7862): improve docker layer cache
* [#7861](https://github.com/cloud-custodian/cloud-custodian/pull/7861): aws - security-group - used filter - enrich attribute
* [#7860](https://github.com/cloud-custodian/cloud-custodian/pull/7860): c7n_kube - cache - fix cache usage
* [#7859](https://github.com/cloud-custodian/cloud-custodian/pull/7859): Add new RDS Proxy resource
* [#7857](https://github.com/cloud-custodian/cloud-custodian/pull/7857): tools/c7n_mailer - lazily import processor modules
* [#7854](https://github.com/cloud-custodian/cloud-custodian/pull/7854): Add c7n:MatchedIpPermissions to notification
* [#7852](https://github.com/cloud-custodian/cloud-custodian/pull/7852): releng - 0.9.20 pkg rebase and increment
* [#7851](https://github.com/cloud-custodian/cloud-custodian/pull/7851): AWS Metric Alarm Filter
* [#7850](https://github.com/cloud-custodian/cloud-custodian/pull/7850): tools/c7n-left - refactor terraform support to subpackage
* [#7849](https://github.com/cloud-custodian/cloud-custodian/pull/7849): tools/c7n-left - refactor terraform support to subpackage
* [#7848](https://github.com/cloud-custodian/cloud-custodian/pull/7848): releng - pin poetry and fix setup gen
* [#7844](https://github.com/cloud-custodian/cloud-custodian/pull/7844): releng - fix poetrypkg gen-setup command
* [#7843](https://github.com/cloud-custodian/cloud-custodian/pull/7843): releng - fix poetry pkg script, add test
* [#7840](https://github.com/cloud-custodian/cloud-custodian/pull/7840): azure - webapp - add webapp authentication filter
* [#7832](https://github.com/cloud-custodian/cloud-custodian/pull/7832): core - policy var formatting preserves var type
* [#7828](https://github.com/cloud-custodian/cloud-custodian/pull/7828): aws - elasticsearch - filter/action on source ips
* [#7827](https://github.com/cloud-custodian/cloud-custodian/pull/7827): img tags need to be relative for the root index
* [#7826](https://github.com/cloud-custodian/cloud-custodian/pull/7826): aws - metrics - support extended statistics
* [#7824](https://github.com/cloud-custodian/cloud-custodian/pull/7824): c7n_tencentcloud: add fixture for environment variables, and fix typos in query.py.
* [#7823](https://github.com/cloud-custodian/cloud-custodian/pull/7823): releng - docker - include tencentcloud provider
* [#7822](https://github.com/cloud-custodian/cloud-custodian/pull/7822): aws - sqs - set-encryption key usage consistency
* [#7821](https://github.com/cloud-custodian/cloud-custodian/pull/7821): aws - s3 - config handle missing configuration for regional specific feature sets
* [#7819](https://github.com/cloud-custodian/cloud-custodian/pull/7819): c7n_tencentcloud - resources - ami&nat gateway&cbs snapshot
* [#7818](https://github.com/cloud-custodian/cloud-custodian/pull/7818): c7n_tencentcloud - Add environment fixture, and add 'qcs' to resources.
* [#7817](https://github.com/cloud-custodian/cloud-custodian/pull/7817): Add cloudwatch put subscription filter action
* [#7816](https://github.com/cloud-custodian/cloud-custodian/pull/7816): Add cloudwatch put subscription filter action
* [#7815](https://github.com/cloud-custodian/cloud-custodian/pull/7815): utils - handle interpolation of non-string variables
* [#7813](https://github.com/cloud-custodian/cloud-custodian/pull/7813): aws - dynamodb - enhancement recommended for the consecuitive-backups filter
* [#7809](https://github.com/cloud-custodian/cloud-custodian/pull/7809): c7n_tencentcloud - resources - clb&cbs
* [#7807](https://github.com/cloud-custodian/cloud-custodian/pull/7807): aws - rds - list db instance option groups
* [#7806](https://github.com/cloud-custodian/cloud-custodian/pull/7806): c7n_tencentcloud - filters - metrics
* [#7804](https://github.com/cloud-custodian/cloud-custodian/pull/7804): aws - iam-user - add login-profile filter
* [#7803](https://github.com/cloud-custodian/cloud-custodian/pull/7803): tools/c7n-left - run policies on terraform

## PR's Closed
* [#7866](https://github.com/cloud-custodian/cloud-custodian/pull/7866): releng - changelog generator updates
* [#7862](https://github.com/cloud-custodian/cloud-custodian/pull/7862): improve docker layer cache
* [#7850](https://github.com/cloud-custodian/cloud-custodian/pull/7850): tools/c7n-left - refactor terraform support to subpackage
* [#7849](https://github.com/cloud-custodian/cloud-custodian/pull/7849): tools/c7n-left - refactor terraform support to subpackage
* [#7848](https://github.com/cloud-custodian/cloud-custodian/pull/7848): releng - pin poetry and fix setup gen
* [#7844](https://github.com/cloud-custodian/cloud-custodian/pull/7844): releng - fix poetrypkg gen-setup command
* [#7843](https://github.com/cloud-custodian/cloud-custodian/pull/7843): releng - fix poetry pkg script, add test
* [#7832](https://github.com/cloud-custodian/cloud-custodian/pull/7832): core - policy var formatting preserves var type
* [#7828](https://github.com/cloud-custodian/cloud-custodian/pull/7828): aws - elasticsearch - filter/action on source ips
* [#7827](https://github.com/cloud-custodian/cloud-custodian/pull/7827): img tags need to be relative for the root index
* [#7824](https://github.com/cloud-custodian/cloud-custodian/pull/7824): c7n_tencentcloud: add fixture for environment variables, and fix typos in query.py.
* [#7823](https://github.com/cloud-custodian/cloud-custodian/pull/7823): releng - docker - include tencentcloud provider
* [#7822](https://github.com/cloud-custodian/cloud-custodian/pull/7822): aws - sqs - set-encryption key usage consistency
* [#7821](https://github.com/cloud-custodian/cloud-custodian/pull/7821): aws - s3 - config handle missing configuration for regional specific feature sets
* [#7818](https://github.com/cloud-custodian/cloud-custodian/pull/7818): c7n_tencentcloud - Add environment fixture, and add 'qcs' to resources.
* [#7816](https://github.com/cloud-custodian/cloud-custodian/pull/7816): Add cloudwatch put subscription filter action
* [#7815](https://github.com/cloud-custodian/cloud-custodian/pull/7815): utils - handle interpolation of non-string variables
* [#7806](https://github.com/cloud-custodian/cloud-custodian/pull/7806): c7n_tencentcloud - filters - metrics
* [#7803](https://github.com/cloud-custodian/cloud-custodian/pull/7803): tools/c7n-left - run policies on terraform
* [#7802](https://github.com/cloud-custodian/cloud-custodian/pull/7802): aws - servicecatalog - added new resource of type catalog-product
* [#7790](https://github.com/cloud-custodian/cloud-custodian/pull/7790): docs - tencentcloud usage readme
* [#7750](https://github.com/cloud-custodian/cloud-custodian/pull/7750): aws - dynamodb - disable consecutive backups filter
* [#7747](https://github.com/cloud-custodian/cloud-custodian/pull/7747): docs - Change gitter link to slack for chat
* [#7744](https://github.com/cloud-custodian/cloud-custodian/pull/7744): Added Instance Metadata Tags action
* [#7706](https://github.com/cloud-custodian/cloud-custodian/pull/7706): Add FMS WAFv2 support for alb, cloudfront

## Issues Opened
* [#7858](https://github.com/cloud-custodian/cloud-custodian/issues/7858): aws - apigateway.websockets.stage - add resource, tag filters/actions, and delete action
* [#7856](https://github.com/cloud-custodian/cloud-custodian/issues/7856): Lambdas aren't deprovisioned after policies are removed
* [#7853](https://github.com/cloud-custodian/cloud-custodian/issues/7853): Deployment of c7n-mailer Fails Due to Missing Package
* [#7847](https://github.com/cloud-custodian/cloud-custodian/issues/7847): Unable to Copy tags from EC2 to Security Groups.
* [#7845](https://github.com/cloud-custodian/cloud-custodian/issues/7845): releng - dont cast None in setup.py
* [#7842](https://github.com/cloud-custodian/cloud-custodian/issues/7842): Need support for AppSync Resource in custodian platform
* [#7841](https://github.com/cloud-custodian/cloud-custodian/issues/7841): C7N Mailer - Allow Redis cluster to have encryption in transit enabled
* [#7839](https://github.com/cloud-custodian/cloud-custodian/issues/7839): using member-role for periodic policy not running on remote account
* [#7838](https://github.com/cloud-custodian/cloud-custodian/issues/7838): Automatically filter out automated snapshots from rds-snapshot resource.
* [#7837](https://github.com/cloud-custodian/cloud-custodian/issues/7837): Use case-insensitive checks for allowed conditions in `cross-account` filters
* [#7833](https://github.com/cloud-custodian/cloud-custodian/issues/7833): The 'report' command shows results even when no matching resources
* [#7831](https://github.com/cloud-custodian/cloud-custodian/issues/7831): Lambda does not have filter to check on policy statements that allow public access.
* [#7830](https://github.com/cloud-custodian/cloud-custodian/issues/7830): Issue which Security group Ingress filter type
* [#7829](https://github.com/cloud-custodian/cloud-custodian/issues/7829): c7n-salactus gives syntax error
* [#7820](https://github.com/cloud-custodian/cloud-custodian/issues/7820): Support percentile statistics in CloudWatch metrics filter
* [#7814](https://github.com/cloud-custodian/cloud-custodian/issues/7814): AWS - global resource cloudfront runs on multiple regions
* [#7808](https://github.com/cloud-custodian/cloud-custodian/issues/7808): Mode config-rule cannot handle S3 Buckets in eu-north-1

## Issues Closed
* [#7856](https://github.com/cloud-custodian/cloud-custodian/issues/7856): Lambdas aren't deprovisioned after policies are removed
* [#7845](https://github.com/cloud-custodian/cloud-custodian/issues/7845): releng - dont cast None in setup.py
* [#7839](https://github.com/cloud-custodian/cloud-custodian/issues/7839): using member-role for periodic policy not running on remote account
* [#7831](https://github.com/cloud-custodian/cloud-custodian/issues/7831): Lambda does not have filter to check on policy statements that allow public access.
* [#7814](https://github.com/cloud-custodian/cloud-custodian/issues/7814): AWS - global resource cloudfront runs on multiple regions
* [#7808](https://github.com/cloud-custodian/cloud-custodian/issues/7808): Mode config-rule cannot handle S3 Buckets in eu-north-1
* [#7778](https://github.com/cloud-custodian/cloud-custodian/issues/7778): releng - add tecentcloud to tools/dev/dockerpkg and the docker images
* [#7762](https://github.com/cloud-custodian/cloud-custodian/issues/7762): SQS Set-Encryption Not Standard
* [#7760](https://github.com/cloud-custodian/cloud-custodian/issues/7760): Still Getting Type Error when using set-s3-public-block
* [#7695](https://github.com/cloud-custodian/cloud-custodian/issues/7695): GetBucketLocation api failure for cross region buckets
* [#7553](https://github.com/cloud-custodian/cloud-custodian/issues/7553): Define and use of integer variables (YAML-files) - c7n-org
* [#6734](https://github.com/cloud-custodian/cloud-custodian/issues/6734): Variable interpolation only works on strings
* [#3992](https://github.com/cloud-custodian/cloud-custodian/issues/3992): Add a feature to specify the region(s) to deploy into the policy document
* [#1410](https://github.com/cloud-custodian/cloud-custodian/issues/1410): index given cw metric on given set of resources