Feb 15st 2021 - HackMD

# Feb 15st 2021 # C7n Community Meeting Minutes ###### tags: `Meeting` :::info - **URL:** meet.google.com/mii-evqh-esh - **Date:** Feb 1, 2022 (2:00 PM (ET) / 11:00 AM (PT) / 6PM (UTC)) - **[Timezone Converter (Click me)](https://www.timeanddate.com/worldclock/converter.html?iso=20210629T190000&p1=tz_et&p2=tz_pt&p3=22&p4=240&p5=136&p6=176&p7=37&p8=248)** - Check out the [calendar to subscribe](https://cloudcustodian.io/events/index.html) to our meetings and workshops - **Agenda** 1. Intros `10m` 1. Agenda Items `20m` 1. PR Party `30m` - **Participants:** - **Meeting Contact:** Jorge: <jorge@stacklet.io> - **Host:** This Couldbeyou - **Video:** https://youtu.be/RMG_gTLMoxg - **Permalink:** ::: ## Agenda Items - Cloud Custodian Workshops for March! - As usual, all skill levels welcome and they're free: - March 8th: [Introduction to Cloud Custodian](https://app.livestorm.co/stacklet-io/introduction-to-cloud-custodian) - March 9th: [Cloud Custodian 101](https://app.livestorm.co/stacklet-io/cloud-custodian-101-workshop) - March 16th: [Cloud Custodian 102](https://app.livestorm.co/stacklet-io/cloud-custodian-102-save-the-date-for-advance-session) - c7norg and mailer, click the link for the description. - Darren: [#7029](https://github.com/cloud-custodian/cloud-custodian/pull/7029) - Added action for enabling an AWS Config Managed Rule - Kapil: TODO: We need a narrative document around the missing filter. - Jorge/Kapil: distutils is being removed in python 3.12: [https://docs.python.org/3/library/distutils.html](https://docs.python.org/3/library/distutils.html) - https://lwn.net/Articles/883391/ - We have two things we depend on, a version class for version parsing, the other is a string-to-bool thing for parsing variables. Do we just vendor both of those and move on? - Nothing in our ecosystem is on 3.10 yet so it's not burning. - TODO: Jorge to file an issue. - Liz/Kapil: Are we switching to poetry? - https://python-poetry.org/docs/ - We dig it and love it, but the project doesn't have an opinion (we prefer to use what users prefer) - The real question is what is being tested in CI, which is now all poetry - non-poetry installations need to be added back into CI to make sure it continues to work as users expect. - We need to update the documentation to reflect poetry (the current tox instructions are busted): TODO: Jorge is on this with Liz. - No changes for you as a developer. - Jorge/Sonny: We're due for a release, I've asked Sonny to do one this Thursday: - Kapil did a release live in one of these calls: https://youtu.be/FzG6PoX4VF8?t=1152 - Jorge would like to record it so we'll do it in a google meet, ping me if you'd like to join in, recording will be on youtube - Getting back to a monthly cadence, AJs volunteered to do one in March(ish) - Kapil: Still working on AWS Cloud Control API - * [#7060](https://github.com/cloud-custodian/cloud-custodian/pull/7060): awscc - experimental cloud control provider - Need to install a new package to play with it - You will need to rewrite policies - Here be dragons, but support for new stuff! Friendly dragons, current state is alpha, note, current AWS provider isn't going anywhere, they do different things, this is an additive provider that can provide additional coverage. - When Kapil merges it will publish docs via reference materials. - Aakif: Discuss the Issue Ticket [#7160] related to Azure Deployment - Modified the existing policy for output_dir for an Azure Subscription and it looks like the new deployment isn't working. Don't see the function, neither its running per set period, not producing the output, nothing seems to happen. While I have another subscription with same policies (but old custodian version 0.9.11) and those are running fine. ## Weekly Report Weekly status report for cloud-custodian/cloud-custodian Week #07 2022 ## Weekly Stats | | Opened this week| Closed this week| |--|---|-----| |Issues| 10 | 10| |PR's| 14 | 13| | | | |--|--| | New stars | -1| | New forks | 0| ## PRs/Issues to discuss :microphone: The host will pick interesting PRs and Issues that would make good discussion for the community If you see something interesting and want to add it feel free, or if you have filed an issue or have a PR you'd like to see discussed please also add it here. * getglad/kapil: [#7104](https://github.com/cloud-custodian/cloud-custodian/pull/7104): feat: support s3 url for policy location * AJ: [#7089](https://github.com/cloud-custodian/cloud-custodian/issues/7089): cloudtrail mode policies against `aws.key-pair` cannot resolve resources by ID ## PR's Closed * [#7108](https://github.com/cloud-custodian/cloud-custodian/pull/7108): releng - cask dep updates * [#7107](https://github.com/cloud-custodian/cloud-custodian/pull/7107): Bump gopkg.in/yaml.v2 from 2.2.1 to 2.2.8 in /tools/omnissm * [#7106](https://github.com/cloud-custodian/cloud-custodian/pull/7106): aws - apigateway - delete action - use retry * [#7102](https://github.com/cloud-custodian/cloud-custodian/pull/7102): New ECR Action, New IAM Group Filter, and Security Hub Fix * [#7098](https://github.com/cloud-custodian/cloud-custodian/pull/7098): releng - update generated requirements files * [#7092](https://github.com/cloud-custodian/cloud-custodian/pull/7092): GCP - BigQuery tables `bq-tables` `delete` action * [#7091](https://github.com/cloud-custodian/cloud-custodian/pull/7091): fix: only require pywin32 if running on Windows * [#7090](https://github.com/cloud-custodian/cloud-custodian/pull/7090): New ECR Action, New IAM Group Filter, and Security Hub Fix * [#7087](https://github.com/cloud-custodian/cloud-custodian/pull/7087): GCP BigQuery dataset metric_key typo fix * [#7075](https://github.com/cloud-custodian/cloud-custodian/pull/7075): aws- add modify-subnet-atrribute action for aws subnet * [#7074](https://github.com/cloud-custodian/cloud-custodian/pull/7074): Fix: avoid report in progress error when generating credential report * [#7060](https://github.com/cloud-custodian/cloud-custodian/pull/7060): awscc - experimental cloud control provider * [#7018](https://github.com/cloud-custodian/cloud-custodian/pull/7018): ISSUE-7107 - allow for policy name in AWS IAM set-policy action ## PR's Opened * [#7109](https://github.com/cloud-custodian/cloud-custodian/pull/7109): aws.vpc - traffic mirror session and target * [#7108](https://github.com/cloud-custodian/cloud-custodian/pull/7108): releng - cask dep updates * [#7107](https://github.com/cloud-custodian/cloud-custodian/pull/7107): Bump gopkg.in/yaml.v2 from 2.2.1 to 2.2.8 in /tools/omnissm * [#7106](https://github.com/cloud-custodian/cloud-custodian/pull/7106): aws - apigateway - delete action - use retry * [#7105](https://github.com/cloud-custodian/cloud-custodian/pull/7105): cwe - fix the ids expr of elasticloadbalancing events * [#7104](https://github.com/cloud-custodian/cloud-custodian/pull/7104): feat: support s3 url for policy location * [#7103](https://github.com/cloud-custodian/cloud-custodian/pull/7103): fix service quota usage-metric exceeds the limit of 1440 data points and incorrect op for datapoint * [#7102](https://github.com/cloud-custodian/cloud-custodian/pull/7102): New ECR Action, New IAM Group Filter, and Security Hub Fix * [#7098](https://github.com/cloud-custodian/cloud-custodian/pull/7098): releng - update generated requirements files * [#7094](https://github.com/cloud-custodian/cloud-custodian/pull/7094): aws - key-pair - remove id_prefix to fix cloudtrail mode policies * [#7092](https://github.com/cloud-custodian/cloud-custodian/pull/7092): GCP - BigQuery tables `bq-tables` `delete` action * [#7091](https://github.com/cloud-custodian/cloud-custodian/pull/7091): fix: only require pywin32 if running on Windows * [#7090](https://github.com/cloud-custodian/cloud-custodian/pull/7090): New ECR Action, New IAM Group Filter, and Security Hub Fix * [#7087](https://github.com/cloud-custodian/cloud-custodian/pull/7087): GCP BigQuery dataset metric_key typo fix ## Issues Opened * [#7101](https://github.com/cloud-custodian/cloud-custodian/issues/7101): Is it possible to deploy as managed resources? * [#7100](https://github.com/cloud-custodian/cloud-custodian/issues/7100): deleting API Gateway Rest APIs: getting TooManyRequestsException when calling the DeleteRestApi operation * [#7099](https://github.com/cloud-custodian/cloud-custodian/issues/7099): Add GCP support for filtering resources via Data Catalog * [#7097](https://github.com/cloud-custodian/cloud-custodian/issues/7097): Docs don't build on linux due to pywin32 dependency * [#7096](https://github.com/cloud-custodian/cloud-custodian/issues/7096): Adding varible to GCP action URL * [#7095](https://github.com/cloud-custodian/cloud-custodian/issues/7095): Question: Add tag to custodian lambda function * [#7093](https://github.com/cloud-custodian/cloud-custodian/issues/7093): Question: Remove ec2 if tag value is not valid * [#7088](https://github.com/cloud-custodian/cloud-custodian/issues/7088): Docker Container in Dockerhub not up to date. * [#7086](https://github.com/cloud-custodian/cloud-custodian/issues/7086): Add ARM-based Lambda function architecture for AWS modes ## Issues Closed * [#7101](https://github.com/cloud-custodian/cloud-custodian/issues/7101): Is it possible to deploy as managed resources? * [#7100](https://github.com/cloud-custodian/cloud-custodian/issues/7100): deleting API Gateway Rest APIs: getting TooManyRequestsException when calling the DeleteRestApi operation * [#7097](https://github.com/cloud-custodian/cloud-custodian/issues/7097): Docs don't build on linux due to pywin32 dependency * [#7093](https://github.com/cloud-custodian/cloud-custodian/issues/7093): Question: Remove ec2 if tag value is not valid * [#7088](https://github.com/cloud-custodian/cloud-custodian/issues/7088): Docker Container in Dockerhub not up to date. * [#7077](https://github.com/cloud-custodian/cloud-custodian/issues/7077): KMS AliasName required to check with a value from CSV file * [#7050](https://github.com/cloud-custodian/cloud-custodian/issues/7050): AWS Cloud Control api * [#7028](https://github.com/cloud-custodian/cloud-custodian/issues/7028): How to execute custodian policies using proxy ? * [#7017](https://github.com/cloud-custodian/cloud-custodian/issues/7017): Enable AWS IAM set-policy action to use policy name instead of ARN similar to set-boundary action * [#6959](https://github.com/cloud-custodian/cloud-custodian/issues/6959): aws.subnet resource - Add modify-subnet action ## Community PRs Closed * [#7107](https://github.com/cloud-custodian/cloud-custodian/pull/7107): Bump gopkg.in/yaml.v2 from 2.2.1 to 2.2.8 in /tools/omnissm * [#7102](https://github.com/cloud-custodian/cloud-custodian/pull/7102): New ECR Action, New IAM Group Filter, and Security Hub Fix * [#7092](https://github.com/cloud-custodian/cloud-custodian/pull/7092): GCP - BigQuery tables `bq-tables` `delete` action * [#7091](https://github.com/cloud-custodian/cloud-custodian/pull/7091): fix: only require pywin32 if running on Windows * [#7090](https://github.com/cloud-custodian/cloud-custodian/pull/7090): New ECR Action, New IAM Group Filter, and Security Hub Fix * [#7087](https://github.com/cloud-custodian/cloud-custodian/pull/7087): GCP BigQuery dataset metric_key typo fix * [#7075](https://github.com/cloud-custodian/cloud-custodian/pull/7075): aws- add modify-subnet-atrribute action for aws subnet * [#7074](https://github.com/cloud-custodian/cloud-custodian/pull/7074): Fix: avoid report in progress error when generating credential report * [#7018](https://github.com/cloud-custodian/cloud-custodian/pull/7018): ISSUE-7107 - allow for policy name in AWS IAM set-policy action ## Community PRs Opened * [#7109](https://github.com/cloud-custodian/cloud-custodian/pull/7109): aws.vpc - traffic mirror session and target * [#7107](https://github.com/cloud-custodian/cloud-custodian/pull/7107): Bump gopkg.in/yaml.v2 from 2.2.1 to 2.2.8 in /tools/omnissm * [#7105](https://github.com/cloud-custodian/cloud-custodian/pull/7105): cwe - fix the ids expr of elasticloadbalancing events * [#7103](https://github.com/cloud-custodian/cloud-custodian/pull/7103): fix service quota usage-metric exceeds the limit of 1440 data points and incorrect op for datapoint * [#7102](https://github.com/cloud-custodian/cloud-custodian/pull/7102): New ECR Action, New IAM Group Filter, and Security Hub Fix * [#7092](https://github.com/cloud-custodian/cloud-custodian/pull/7092): GCP - BigQuery tables `bq-tables` `delete` action * [#7091](https://github.com/cloud-custodian/cloud-custodian/pull/7091): fix: only require pywin32 if running on Windows * [#7090](https://github.com/cloud-custodian/cloud-custodian/pull/7090): New ECR Action, New IAM Group Filter, and Security Hub Fix * [#7087](https://github.com/cloud-custodian/cloud-custodian/pull/7087): GCP BigQuery dataset metric_key typo fix -- ## Notes