# C7n Community Meeting Minutes ## March 21st 2023 :::info - **URL:** meet.google.com/mii-evqh-esh - **Date:** March 21st, 2023 (2:00 PM (ET) / 11:00 AM (PT) / 6PM (UTC)) - **[Timezone Converter (Click me)](https://www.timeanddate.com/worldclock/converter.html?iso=20220621T180000&p1=263&p2=224&p3=136&p4=37&p5=367&p6=438&p7=248&p8=22)** - **Agenda** 1. Intros `10m` 1. Agenda Items `20m` 1. PR Party `30m` - **Meeting Contact:** Jorge: <jorge@stacklet.io> - **Video Archive and Transcripts**: https://mtngs.io/cloud-custodian/community-meetings/ ::: [![Video Recording](https://img.youtube.com/vi/PuZLGzSYEEU/0.jpg)](https://youtu.be/PuZLGzSYEEU) ## Agenda Items - Intros, etc. - We're testing Slack! Join us: - [Invite page](https://communityinviter.com/apps/cloud-custodian/c7n-chat) - We're moving on from Python 3.7 this year, details TBD, heads up: - https://github.com/cloud-custodian/cloud-custodian/issues/8092 - Tips and Tricks section in Discussions - https://github.com/cloud-custodian/cloud-custodian/discussions/categories/tips-and-tricks - Maintainer Discussion, assigning PRs to reviewers? - Kapil: https://github.com/cloud-custodian/cloud-custodian/pull/7739 - Auto-tag teams to assign reviews? # Weekly Report Weekly status report for cloud-custodian/cloud-custodian Week #12 2023 ## Weekly Stats | | Opened this week| Closed this week| |--|---|-----| |Issues| 32 | 26| |PR's| 61 | 58| | | | |--|--| | New stars | 455| | New forks | 104| ## PR's Opened * :boom: [#7140](https://github.com/cloud-custodian/cloud-custodian/pull/7140): aws - quota - fix usage-metric exceeds the limit of 1440 data points * [#8404](https://github.com/cloud-custodian/cloud-custodian/pull/8404): feat: add iam-policy filter for gcp.service-account resource * [#8403](https://github.com/cloud-custodian/cloud-custodian/pull/8403): aws - elasticsearch - cross-account bug fix handle no access policy * [#8401](https://github.com/cloud-custodian/cloud-custodian/pull/8401): adding filter for Azure subscription diagnostic settings * [#8399](https://github.com/cloud-custodian/cloud-custodian/pull/8399): c7n_tencentcloud - resources - SecurityGroup * :boom: [#8396](https://github.com/cloud-custodian/cloud-custodian/pull/8396): releng - c7n-left docker image * :boom: [#8395](https://github.com/cloud-custodian/cloud-custodian/pull/8395): releng - automated releases * [#8392](https://github.com/cloud-custodian/cloud-custodian/pull/8392): releng - release automation tweaks * [#8390](https://github.com/cloud-custodian/cloud-custodian/pull/8390): aws - vpc - bug fix security-groups-used filter with in-use eni having no attachments * [#8384](https://github.com/cloud-custodian/cloud-custodian/pull/8384): Add api-key feature to values_from * [#8383](https://github.com/cloud-custodian/cloud-custodian/pull/8383): aws - tag variable interpolation fix * [#8382](https://github.com/cloud-custodian/cloud-custodian/pull/8382): aws.lambda - filter lambda@edge * :boom:[#8381](https://github.com/cloud-custodian/cloud-custodian/pull/8381): aws - route53 - recovery - control - panel: add a safety rule filter * [#8380](https://github.com/cloud-custodian/cloud-custodian/pull/8380): Updating ecs cluster resource for container insights * :boom: [#8379](https://github.com/cloud-custodian/cloud-custodian/pull/8379): releng - black apply begin * [#8378](https://github.com/cloud-custodian/cloud-custodian/pull/8378): releng - add black as dev dependency and add to make lint * [#8377](https://github.com/cloud-custodian/cloud-custodian/pull/8377): aws - eks - adding network-location filter * [#8376](https://github.com/cloud-custodian/cloud-custodian/pull/8376): tools/dev - prcheck can tag prs and recheck them * [#8374](https://github.com/cloud-custodian/cloud-custodian/pull/8374): aws - s3 - handle access denied errors in check-public-block filter * [#8372](https://github.com/cloud-custodian/cloud-custodian/pull/8372): aws - iam-user - add include-via option to policy filter * [#8371](https://github.com/cloud-custodian/cloud-custodian/pull/8371): Feature: Add API-Key secret functionality to values_from * [#8370](https://github.com/cloud-custodian/cloud-custodian/pull/8370): tools/c7n-mailer - unique email list * [#8366](https://github.com/cloud-custodian/cloud-custodian/pull/8366): aws - apigw - generate domain name arns * [#8365](https://github.com/cloud-custodian/cloud-custodian/pull/8365): releng - address some linting found by new bandit release * [#8361](https://github.com/cloud-custodian/cloud-custodian/pull/8361): gcp new filter access-approval * [#8359](https://github.com/cloud-custodian/cloud-custodian/pull/8359): releng - functional aws tests and slack results * [#8357](https://github.com/cloud-custodian/cloud-custodian/pull/8357): aws - rds - bug fix in consecutive-snapshots filter * [#8356](https://github.com/cloud-custodian/cloud-custodian/pull/8356): aws - common actions - enhance modify-security-groups action * [#8353](https://github.com/cloud-custodian/cloud-custodian/pull/8353): releng - offer some guidance following a failed freeze-wheel * [#8352](https://github.com/cloud-custodian/cloud-custodian/pull/8352): aws - route53 ARC - control panel: add resource and tagging * [#8350](https://github.com/cloud-custodian/cloud-custodian/pull/8350): feat: Add value_path functionality to Value Filter * [#8348](https://github.com/cloud-custodian/cloud-custodian/pull/8348): releng - get rid of generated setup.py/requirements.txt files, use poetry to publish wheels * [#8347](https://github.com/cloud-custodian/cloud-custodian/pull/8347): efs-mount-point network-location filter * [#8346](https://github.com/cloud-custodian/cloud-custodian/pull/8346): add new gcp project filter access-approval * [#8343](https://github.com/cloud-custodian/cloud-custodian/pull/8343): releng - explicitly define bash as the makefile shell * [#8342](https://github.com/cloud-custodian/cloud-custodian/pull/8342): releng - change docker :dev tag to daily build * [#8341](https://github.com/cloud-custodian/cloud-custodian/pull/8341): releng - rev version, sphinx fixes, and rebase dependencies * [#8340](https://github.com/cloud-custodian/cloud-custodian/pull/8340): Bump golang.org/x/net from 0.0.0-20200202094626-16171245cfb2 to 0.7.0 in /tools/omnissm * [#8337](https://github.com/cloud-custodian/cloud-custodian/pull/8337): aws - elasticsearch - enable support for server-side query filtering * [#8336](https://github.com/cloud-custodian/cloud-custodian/pull/8336): sns subscription unused #8316 * [#8332](https://github.com/cloud-custodian/cloud-custodian/pull/8332): releng - refactor ci and makefile * [#8331](https://github.com/cloud-custodian/cloud-custodian/pull/8331): releng - use layer cache when building images * [#8329](https://github.com/cloud-custodian/cloud-custodian/pull/8329): tools/c7n_mailer - handle lambda container images * [#8327](https://github.com/cloud-custodian/cloud-custodian/pull/8327): aws-ami-set-permissions: allow no 'add' in set-permissions action * [#8322](https://github.com/cloud-custodian/cloud-custodian/pull/8322): releng - cask dep updates * [#8320](https://github.com/cloud-custodian/cloud-custodian/pull/8320): Bump golang.org/x/sys from 0.0.0-20190215142949-d0b11bdaac8a to 0.1.0 in /tools/omnissm * [#8319](https://github.com/cloud-custodian/cloud-custodian/pull/8319): New filter for advanced threat protection on Azure SQL Servers * [#8317](https://github.com/cloud-custodian/cloud-custodian/pull/8317): tools/dev - fix poetry installation * [#8315](https://github.com/cloud-custodian/cloud-custodian/pull/8315): Bump markdown-it-py from 2.1.0 to 2.2.0 in /tools/c7n_sphinxext * [#8314](https://github.com/cloud-custodian/cloud-custodian/pull/8314): feat: Update SQL Server auditing filter to be more flexible * [#8313](https://github.com/cloud-custodian/cloud-custodian/pull/8313): feat: fix marked-for-op filter bug * [#8312](https://github.com/cloud-custodian/cloud-custodian/pull/8312): feat: new filter for azure network security group flow logs * [#8311](https://github.com/cloud-custodian/cloud-custodian/pull/8311): Bump golang.org/x/text from 0.3.0 to 0.3.8 in /tools/omnissm * [#8310](https://github.com/cloud-custodian/cloud-custodian/pull/8310): chore: Have the arg names the same as the base class. * [#8309](https://github.com/cloud-custodian/cloud-custodian/pull/8309): feat: adding flag to allow the inclusion of the azure 'magic' ip range for sql and postgresql * [#8308](https://github.com/cloud-custodian/cloud-custodian/pull/8308): aws - asg - let valid/invalid filters work in explicit pull mode * [#8307](https://github.com/cloud-custodian/cloud-custodian/pull/8307): aws - filters - add headers to valuefrom * [#8305](https://github.com/cloud-custodian/cloud-custodian/pull/8305): Pass validate to c7n.loader.PolicyLoader.load_data * [#8303](https://github.com/cloud-custodian/cloud-custodian/pull/8303): adding gcp filter essentialcontacts * [#8301](https://github.com/cloud-custodian/cloud-custodian/pull/8301): aws - route53.recovery-cluster - add resource and tagging support * [#8300](https://github.com/cloud-custodian/cloud-custodian/pull/8300): aws - route53.recovery-cluster - add resource and tagging support * [#8299](https://github.com/cloud-custodian/cloud-custodian/pull/8299): c7n-left - traverse filter supports non value type filters ## PR's Closed * [#8392](https://github.com/cloud-custodian/cloud-custodian/pull/8392): releng - release automation tweaks * [#8390](https://github.com/cloud-custodian/cloud-custodian/pull/8390): aws - vpc - bug fix security-groups-used filter with in-use eni having no attachments * [#8383](https://github.com/cloud-custodian/cloud-custodian/pull/8383): aws - tag variable interpolation fix * [#8382](https://github.com/cloud-custodian/cloud-custodian/pull/8382): aws.lambda - filter lambda@edge * [#8380](https://github.com/cloud-custodian/cloud-custodian/pull/8380): Updating ecs cluster resource for container insights * [#8377](https://github.com/cloud-custodian/cloud-custodian/pull/8377): aws - eks - adding network-location filter * [#8374](https://github.com/cloud-custodian/cloud-custodian/pull/8374): aws - s3 - handle access denied errors in check-public-block filter * [#8371](https://github.com/cloud-custodian/cloud-custodian/pull/8371): Feature: Add API-Key secret functionality to values_from * [#8370](https://github.com/cloud-custodian/cloud-custodian/pull/8370): tools/c7n-mailer - unique email list * [#8366](https://github.com/cloud-custodian/cloud-custodian/pull/8366): aws - apigw - generate domain name arns * [#8365](https://github.com/cloud-custodian/cloud-custodian/pull/8365): releng - address some linting found by new bandit release * [#8359](https://github.com/cloud-custodian/cloud-custodian/pull/8359): releng - functional aws tests and slack results * [#8357](https://github.com/cloud-custodian/cloud-custodian/pull/8357): aws - rds - bug fix in consecutive-snapshots filter * [#8356](https://github.com/cloud-custodian/cloud-custodian/pull/8356): aws - common actions - enhance modify-security-groups action * [#8352](https://github.com/cloud-custodian/cloud-custodian/pull/8352): aws - route53 ARC - control panel: add resource and tagging * [#8348](https://github.com/cloud-custodian/cloud-custodian/pull/8348): releng - get rid of generated setup.py/requirements.txt files, use poetry to publish wheels * [#8347](https://github.com/cloud-custodian/cloud-custodian/pull/8347): efs-mount-point network-location filter * [#8346](https://github.com/cloud-custodian/cloud-custodian/pull/8346): add new gcp project filter access-approval * [#8343](https://github.com/cloud-custodian/cloud-custodian/pull/8343): releng - explicitly define bash as the makefile shell * [#8342](https://github.com/cloud-custodian/cloud-custodian/pull/8342): releng - change docker :dev tag to daily build * [#8341](https://github.com/cloud-custodian/cloud-custodian/pull/8341): releng - rev version, sphinx fixes, and rebase dependencies * [#8340](https://github.com/cloud-custodian/cloud-custodian/pull/8340): Bump golang.org/x/net from 0.0.0-20200202094626-16171245cfb2 to 0.7.0 in /tools/omnissm * [#8337](https://github.com/cloud-custodian/cloud-custodian/pull/8337): aws - elasticsearch - enable support for server-side query filtering * [#8332](https://github.com/cloud-custodian/cloud-custodian/pull/8332): releng - refactor ci and makefile * [#8331](https://github.com/cloud-custodian/cloud-custodian/pull/8331): releng - use layer cache when building images * [#8329](https://github.com/cloud-custodian/cloud-custodian/pull/8329): tools/c7n_mailer - handle lambda container images * [#8327](https://github.com/cloud-custodian/cloud-custodian/pull/8327): aws-ami-set-permissions: allow no 'add' in set-permissions action * [#8322](https://github.com/cloud-custodian/cloud-custodian/pull/8322): releng - cask dep updates * [#8320](https://github.com/cloud-custodian/cloud-custodian/pull/8320): Bump golang.org/x/sys from 0.0.0-20190215142949-d0b11bdaac8a to 0.1.0 in /tools/omnissm * [#8317](https://github.com/cloud-custodian/cloud-custodian/pull/8317): tools/dev - fix poetry installation * [#8315](https://github.com/cloud-custodian/cloud-custodian/pull/8315): Bump markdown-it-py from 2.1.0 to 2.2.0 in /tools/c7n_sphinxext * [#8313](https://github.com/cloud-custodian/cloud-custodian/pull/8313): feat: fix marked-for-op filter bug * [#8311](https://github.com/cloud-custodian/cloud-custodian/pull/8311): Bump golang.org/x/text from 0.3.0 to 0.3.8 in /tools/omnissm * [#8310](https://github.com/cloud-custodian/cloud-custodian/pull/8310): chore: Have the arg names the same as the base class. * [#8308](https://github.com/cloud-custodian/cloud-custodian/pull/8308): aws - asg - let valid/invalid filters work in explicit pull mode * [#8307](https://github.com/cloud-custodian/cloud-custodian/pull/8307): aws - filters - add headers to valuefrom * [#8305](https://github.com/cloud-custodian/cloud-custodian/pull/8305): Pass validate to c7n.loader.PolicyLoader.load_data * [#8301](https://github.com/cloud-custodian/cloud-custodian/pull/8301): aws - route53.recovery-cluster - add resource and tagging support * [#8300](https://github.com/cloud-custodian/cloud-custodian/pull/8300): aws - route53.recovery-cluster - add resource and tagging support * [#8299](https://github.com/cloud-custodian/cloud-custodian/pull/8299): c7n-left - traverse filter supports non value type filters * [#8297](https://github.com/cloud-custodian/cloud-custodian/pull/8297): aws - vpc - sg : Add Batch (un)used filter * [#8269](https://github.com/cloud-custodian/cloud-custodian/pull/8269): aws - config_id support added to get Configuration Item for R53 hostedzone * [#8241](https://github.com/cloud-custodian/cloud-custodian/pull/8241): Adding new resource for mysql flexibleserver and a new filter * [#8232](https://github.com/cloud-custodian/cloud-custodian/pull/8232): aws - elasticsearch - Added new action to enable audit logs to cloudwatch * [#8120](https://github.com/cloud-custodian/cloud-custodian/pull/8120): aws - wafv2 - add scope param to list_web_acls call in lambda modes * [#7952](https://github.com/cloud-custodian/cloud-custodian/pull/7952): c7n_gcp-add-augment-to-big-query-resource-bq-table-to-extract-encryptionconfiguration * [#7929](https://github.com/cloud-custodian/cloud-custodian/pull/7929): Fixing typo on fallback-schedule schema * [#7186](https://github.com/cloud-custodian/cloud-custodian/pull/7186): [Issue #7185] Update c7n logging for base64 decode error for clarification * [#6707](https://github.com/cloud-custodian/cloud-custodian/pull/6707): tools/c7n_mailer - assume role to send email with SES in centralized … * [#5999](https://github.com/cloud-custodian/cloud-custodian/pull/5999): AWS - Add Lambda Versions and Lambda@Edge Filter * [#5907](https://github.com/cloud-custodian/cloud-custodian/pull/5907): tools/c7n_mailer - changed list to set for remove email dupes * [#5835](https://github.com/cloud-custodian/cloud-custodian/pull/5835): gcp - audit mode on function resources fix location key * [#5655](https://github.com/cloud-custodian/cloud-custodian/pull/5655): c7n-mailer-replay - support mimicking sqs * [#5653](https://github.com/cloud-custodian/cloud-custodian/pull/5653): c7n-mailer-replay - support for slack * [#5123](https://github.com/cloud-custodian/cloud-custodian/pull/5123): GCP - Metrics filter * [#5055](https://github.com/cloud-custodian/cloud-custodian/pull/5055): Added list_to_dict to globals * [#4170](https://github.com/cloud-custodian/cloud-custodian/pull/4170): PR- c7n_mailer sending email issues- seeing the email still in queue * [#1183](https://github.com/cloud-custodian/cloud-custodian/pull/1183): Fixed event-owner property of email not getting the right AWS username ## Issues Opened * [#8402](https://github.com/cloud-custodian/cloud-custodian/issues/8402): releng - get to 100% on CLOMonitor * [#8398](https://github.com/cloud-custodian/cloud-custodian/issues/8398): Cloud Custodian Not Handling DomainConfig.AccessPolicies.Options Properly For Elasticsearch * [#8397](https://github.com/cloud-custodian/cloud-custodian/issues/8397): AWS route53 ARC cluster tagging exception * [#8394](https://github.com/cloud-custodian/cloud-custodian/issues/8394): releng - remove distutils version usage from the code base * [#8391](https://github.com/cloud-custodian/cloud-custodian/issues/8391): Support Aurora RDS for Offhours Policy * [#8388](https://github.com/cloud-custodian/cloud-custodian/issues/8388): A suggestion on Run your policy ( AWS getting started guide) * [#8375](https://github.com/cloud-custodian/cloud-custodian/issues/8375): Add a safety rule filter to route53 arc control panel resource * [#8373](https://github.com/cloud-custodian/cloud-custodian/issues/8373): Delete an ECS task definition * [#8369](https://github.com/cloud-custodian/cloud-custodian/issues/8369): releng - use custom ruff to get whitespace linting * [#8368](https://github.com/cloud-custodian/cloud-custodian/issues/8368): c7n-left policy testing * [#8364](https://github.com/cloud-custodian/cloud-custodian/issues/8364): releng - bandit 1.7.5 is flagging several issues * [#8363](https://github.com/cloud-custodian/cloud-custodian/issues/8363): Mapping source code tags to pypi versions * [#8362](https://github.com/cloud-custodian/cloud-custodian/issues/8362): mugc cli publishing * [#8358](https://github.com/cloud-custodian/cloud-custodian/issues/8358): Migrating resources and filters from the EPAM repository * [#8355](https://github.com/cloud-custodian/cloud-custodian/issues/8355): releng - sphinx warning pull request annotation * [#8354](https://github.com/cloud-custodian/cloud-custodian/issues/8354): releng - install poetry / venv cache isn't working correctly * [#8351](https://github.com/cloud-custodian/cloud-custodian/issues/8351): aws - route53.control-panel - add resource and tagging support * [#8345](https://github.com/cloud-custodian/cloud-custodian/issues/8345): releng - doc action caching seems busted * [#8344](https://github.com/cloud-custodian/cloud-custodian/issues/8344): Generic related resource filter * [#8339](https://github.com/cloud-custodian/cloud-custodian/issues/8339): releng - run only relevant tests during PR CI runs * [#8338](https://github.com/cloud-custodian/cloud-custodian/issues/8338): EKS network-location filter * [#8333](https://github.com/cloud-custodian/cloud-custodian/issues/8333): c7n_kube - tests spin up threads without closing them * [#8330](https://github.com/cloud-custodian/cloud-custodian/issues/8330): C7N Mailer - crashes when reporting lambda resources where runtime is blank * [#8328](https://github.com/cloud-custodian/cloud-custodian/issues/8328): Failed Docker publishing for 0.9.23.0 * [#8326](https://github.com/cloud-custodian/cloud-custodian/issues/8326): releng - Set up docker builds with the custodian AWS account * [#8325](https://github.com/cloud-custodian/cloud-custodian/issues/8325): releng - setup functional tests in GitHub actions against custodian aws cncf account * [#8323](https://github.com/cloud-custodian/cloud-custodian/issues/8323): Set-permissions action in aws.ami resource failed to execute * [#8318](https://github.com/cloud-custodian/cloud-custodian/issues/8318): Use of {now} produces exception: AttributeError: 'datetime.datetime' object has no attribute 'format' * [#8316](https://github.com/cloud-custodian/cloud-custodian/issues/8316): unused filter needed for sns-subscription resource * [#8306](https://github.com/cloud-custodian/cloud-custodian/issues/8306): Bug in marked-for-op filter * [#8304](https://github.com/cloud-custodian/cloud-custodian/issues/8304): c7n-left - traverse filter better output * [#8302](https://github.com/cloud-custodian/cloud-custodian/issues/8302): c7n-org report with S3 as source shows duplicate resources when policy is run more than once * :boom: [#8284](https://github.com/cloud-custodian/cloud-custodian/issues/8284): Tagging/Modifying resources with lookup values using data from a csv/db ## Issues Closed * [#8391](https://github.com/cloud-custodian/cloud-custodian/issues/8391): Support Aurora RDS for Offhours Policy * [#8364](https://github.com/cloud-custodian/cloud-custodian/issues/8364): releng - bandit 1.7.5 is flagging several issues * [#8354](https://github.com/cloud-custodian/cloud-custodian/issues/8354): releng - install poetry / venv cache isn't working correctly * [#8351](https://github.com/cloud-custodian/cloud-custodian/issues/8351): aws - route53.control-panel - add resource and tagging support * [#8345](https://github.com/cloud-custodian/cloud-custodian/issues/8345): releng - doc action caching seems busted * [#8338](https://github.com/cloud-custodian/cloud-custodian/issues/8338): EKS network-location filter * [#8330](https://github.com/cloud-custodian/cloud-custodian/issues/8330): C7N Mailer - crashes when reporting lambda resources where runtime is blank * [#8328](https://github.com/cloud-custodian/cloud-custodian/issues/8328): Failed Docker publishing for 0.9.23.0 * [#8326](https://github.com/cloud-custodian/cloud-custodian/issues/8326): releng - Set up docker builds with the custodian AWS account * [#8325](https://github.com/cloud-custodian/cloud-custodian/issues/8325): releng - setup functional tests in GitHub actions against custodian aws cncf account * [#8323](https://github.com/cloud-custodian/cloud-custodian/issues/8323): Set-permissions action in aws.ami resource failed to execute * [#8318](https://github.com/cloud-custodian/cloud-custodian/issues/8318): Use of {now} produces exception: AttributeError: 'datetime.datetime' object has no attribute 'format' * [#8306](https://github.com/cloud-custodian/cloud-custodian/issues/8306): Bug in marked-for-op filter * [#8295](https://github.com/cloud-custodian/cloud-custodian/issues/8295): aws - route53.recovery-cluster - add resource and tagging support * [#8277](https://github.com/cloud-custodian/cloud-custodian/issues/8277): releng - remove tox from docs * [#8231](https://github.com/cloud-custodian/cloud-custodian/issues/8231): EFS Mount Target network-location filter * [#8118](https://github.com/cloud-custodian/cloud-custodian/issues/8118): Wafv2 logging error when using cloudtrail mode * [#8099](https://github.com/cloud-custodian/cloud-custodian/issues/8099): Errors logged with security-group resource. (when processing ENI that is in-use but has no attachment) * [#7973](https://github.com/cloud-custodian/cloud-custodian/issues/7973): AWS EC2 - exception when processing ENI that is in-use but has no attachment * [#6678](https://github.com/cloud-custodian/cloud-custodian/issues/6678): s3 filter check-public-block causes c7n to fail to scan remaining buckets when it encounters an access denied * [#6034](https://github.com/cloud-custodian/cloud-custodian/issues/6034): AWS - Lambda Edge Filter * [#5621](https://github.com/cloud-custodian/cloud-custodian/issues/5621): azure - ci flakey test * [#5482](https://github.com/cloud-custodian/cloud-custodian/issues/5482): c7n-mailer - replay of a slack message only works if key action.slack_template is renamed to action.template * [#5238](https://github.com/cloud-custodian/cloud-custodian/issues/5238): mailer - notify message from policy for faster local testing of templates * [#4686](https://github.com/cloud-custodian/cloud-custodian/issues/4686): azure - storage firewall actions has some failures * [#3860](https://github.com/cloud-custodian/cloud-custodian/issues/3860): Implement Azure Pipeline Cache/Restore Tasks