release - 0.8.45.2

[kapilt]

abbreviated changelog from 0.8.45.1

#5014 in particular is an urgent regression fix for the 0.8.45.0 release that exhibits for particular configurations of aws lambda policies.

aws

• aws - aurora cluster and snapshot using resource group tagging (aws - aurora cluster and snapshot using resource group tagging #4941)
• aws - eks tag normalization (aws - eks tag normalization #4947)
• aws - fix cloud watch log group name construction (aws - fix cloud watch log group name construction #5014)
• aws - iam policy is "used" if it is used as a permissions boundary (aws - mark IAM policy as "used" if it is used as a permissions boundary #4989)
• aws - rest-stage fix tag, untag operation (aws - refactor rest-stage tag, untag operation #5022)
• aws - sechub custom action uses self filtering pattern (aws - sechub custom action uses self-select pattern #5042)
• aws - security group ingress/egress filters - ToPort and FromPort update schema to support full value filters, not just integers. (Support value filters for IpProtocol #5000)
• aws - ssm ops center - restrict dedupe size per breaking api change (aws - ssm ops center - restrict dedupe size per breaking api change #5025)
• aws - sts regional endpoints are off by default for now (aws - sts regional endpoints are off by default for now #5043)
• aws - universal augment arn type check (aws - universal augment arn type check #4981)
• aws - use sts regional endpoints revisit (aws - use sts regional endpoints revisit #4987)
• aws.rds-snapshot - default create time if not present to None (aws.rds-snapshot | Exclude rds if create time not present #4975)
• aws.redshift-snapshot - fix tag augment and actions (aws.redshift-snapshot| Fix tag/remove-tag #4990)
• aws.rest-api - delete action (aws.rest-api | Delete action for rest-api #4954)
• aws - asg use mixed instances policy launch template if present (asg - use mixed instances policy launch template if present #5006)

azure

• azure - add azure resource graph as a query provider (azure - add azure resource graph as a query provider #4924)
• azure - add extra exception type (azure - add extra exception type #5045)
• azure - add support for azure search resource (azure - resource - Azure Search #4996)
• azure - arm resource type validation (azure - validate event resource is ARM resource #4935)
• azure - fix merge (azure - nightly test merge fix  #4960)
• azure - pin major version for azure storage sdks (azure - pin major version for azure storage sdks #5019)
• azure - updated functions structure & updated azure-mgmt-resource (azure - updated functions structure & updated azure-mgmt-resource #5035)

core

• core - extend structure validation to policy verification (core - extend structure validation to policy verification #4982)
• core - move structure parsing to separate module (core - move structure parsing to separate module #4986)
• core - schema semantic error should handle filters/actions with a resource key (core - schema semantic error handle filters/actions w/ a resource key. #5005)
• core - structural parser for more better top level error messages (core - structural parser for more better top level error messages #4967)
• core - value filter add a version value type (core - value filter add a version value type #4936)
• core - webhook action - use date aware json serializer (core - webhook action - use date aware serializer #4951)

gcp

• gcp - actions fix ignore_error_codes name typo (GCP - Fix ignore_error_codes variable name #4978)
• gcp - add option to set project_id where to save metrics (GCP - Add option to set project_id where to save metrics #5002)
• gcp - entrypoint import common infra modules for registration (GCP - Fix metrics.. #4976)
• gcp - fix disk snapshot action and add option to delete disks (GCP - Fix creating snapshots out of disk and add option to delete disks #4930)
• gcp - offhours fix default label value (gcp - offhhours switch default to value offhours base filter groks #4995)
• gcp - pubsub add option to delete subscriptions/topics/snapshots (GCP Add option to delete subscriptions/topics/snapshots #5033)
• gcp -load balancer delete address action (GCP - Delete Ip adresses action #4974)

release engineering

• ci - address boto3 and azure sdk install issues (ci - address boto3 and azure sdk install issues #5030)
• ci - disable windows builds (ci - disable windows builds #5047)
• ci - mailer build context (ci - mailer build context #4963)
• ci - re-enable windows runners via pywin32 pin on win32 (ci - re-enable windows runners with win32 pin on win32 #5048)
• ci - windows testing with pip wheel cache (CI - Testing Wheel Caching #4870)
• build - publish docker nightly after functionals (build - publish docker nightly after functionals #4932)
• docker - exclude .git directory from docker build context (Exclude .git directory from docker build context #4991)

tools

• tools/c7n_mailer - add mailer logging of provisioned lambda region (tools/c7n_mailer - logging of provisioned lambda region #4882)
• tools/c7n_mailer - fix tests, update doc build (tools/c7n_mailer - fix tests, update doc build #4979)
• tools/c7n_mailer - handle plaintext response from Slack Webhook API (Expect plaintext response from Slack Webhook API #4654)
• tools/c7n_org - fix vars usage for gcp and azure accounts (GCP/Azure - Fix vars for c7n_org in gcp/azure #5010)

[kapilt]

#5023 is a release blocker

[kapilt]

also #5032 should only be merged post release

[kapilt]

release blocker addressed, time for a release