0.9.22.0

aws

• aws - route53 recovery readiness-check - add resource and tagging support (#8112)
• aws - account - organization filter (#8113)
• aws - ami - add image-attribute filter (#8091)
• aws - appelb - added filter and action for target group attributes (#8037)
• aws - config - remediation filter: add rule_prefix to schema (#8171)
• aws - connect - add set-attribute action (#8095)
• aws - docs - network-addr moved to elastic-ip resource (#8170)
• aws - ebs - EBS CreateDate should be CreateTime in docs example (#8153)
• aws - fix transit-user resource type metadata (#8134)
• aws - iam-profile, ec2 - add value filter logic to has-specific-managed-policy filter (#8104)
• aws - rds, config-poll-rule - add server-side filter query support (#7696)
• aws - rds-cluster - add db-cluster-parameter filter (#7729)
• aws - rds-snapshot - fix rds-snapshot multi retrieval w/ server side scalar filter (#8135)
• aws - redshift - fix consecutive-snapshots date filtering (#8129)
• aws - rest-stage - Scope down apigw ids with arn:aws:apigateway (#8111)
• aws - secrets manager delete and remove-statements action (#8152)
• aws - userpool - register universal taggable (#8158)
• aws - validate arn types on resources (#8143)

azure

• azure - add azure.defender-alert resource (#8097)
• azure - storage - fix blob-services docs (#8086)

c7n-org

• c7n-org - support org level vars in config file (#8033)

gcp

• gcp - api-key - Add gcp resource api key (#8094)
• gcp - gke-cluster - fix augment when gke is not enabled (#8073)

omnissm

• omnissm - Bump github.com/aws/aws-sdk-go from 1.15.23 to 1.33.0 in /tools/omnissm (#8107)

releng

• releng - disable trivy for now due to rate limits causing failed docker builds (#8131)
• releng - pkg-rebase and increment for 0.9.22.0 (#8160)

shift-left

• c7n-left - fix matches resources on the cli and docs related to traverse (#8088)

tencentcloud

• tencentcloud - cbs-snapshot, security-group - fix service in resource_type (#8127)
• tencentcloud - mysql-backup - fix for casting date when status is not SUCCESS (#8126)

mailer

• mailer - skip empty email address and filter out invalid cc email addresses (#8051)

schema changes

• aws.readiness-check added
• awscc.accessanalyzer_analyzer added
• awscc.acmpca_certificate added
• awscc.acmpca_certificateauthority added
• awscc.acmpca_certificateauthorityactivation added
• awscc.amplify_app added
• awscc.amplify_branch added
• awscc.amplify_domain added
• awscc.amplifyuibuilder_component added
• awscc.amplifyuibuilder_theme added
• awscc.apigateway_account added
• awscc.apigateway_apikey added
• awscc.apigateway_authorizer added
• awscc.apigateway_basepathmapping added
• awscc.apigateway_clientcertificate added
• awscc.apigateway_deployment added
• awscc.apigateway_documentationversion added
• awscc.apigateway_domainname added
• awscc.apigateway_method added
• awscc.apigateway_model added
• awscc.apigateway_requestvalidator added
• awscc.apigateway_stage added
• awscc.apigateway_usageplan added
• awscc.appflow_connectorprofile added
• awscc.appflow_flow added
• awscc.appintegrations_eventintegration added
• awscc.applicationinsights_application added
• awscc.apprunner_service added
• awscc.appstream_application added
• awscc.appstream_entitlement added
• awscc.appsync_domainname added
• awscc.appsync_domainnameapiassociation added
• awscc.aps_rulegroupsnamespace added
• awscc.aps_workspace added
• awscc.athena_datacatalog added
• awscc.athena_namedquery added
• awscc.athena_preparedstatement added
• awscc.athena_workgroup added
• awscc.auditmanager_assessment added
• awscc.autoscaling_lifecyclehook added
• awscc.autoscaling_warmpool added
• awscc.backup_backupplan added
• awscc.backup_backupvault added
• awscc.backup_framework added
• awscc.backup_reportplan added
• awscc.batch_schedulingpolicy added
• awscc.budgets_budgetsaction added
• awscc.cassandra_keyspace added
• awscc.cassandra_table added
• awscc.ce_anomalymonitor added
• awscc.ce_anomalysubscription added
• awscc.ce_costcategory added
• awscc.certificatemanager_account added
• awscc.chatbot_slackchannelconfiguration added
• awscc.cloudformation_resourcedefaultversion added
• awscc.cloudformation_stackset added
• awscc.cloudformation_typeactivation added
• awscc.cloudfront_cachepolicy added
• awscc.cloudfront_cloudfrontoriginaccessidentity added
• awscc.cloudfront_distribution added
• awscc.cloudfront_function added
• awscc.cloudfront_keygroup added
• awscc.cloudfront_originrequestpolicy added
• awscc.cloudfront_publickey added
• awscc.cloudfront_realtimelogconfig added
• awscc.cloudfront_responseheaderspolicy added
• awscc.cloudtrail_trail added
• awscc.cloudwatch_compositealarm added
• awscc.cloudwatch_metricstream added
• awscc.codeartifact_domain added
• awscc.codeartifact_repository added
• awscc.codeguruprofiler_profilinggroup added
• awscc.codestarconnections_connection added
• awscc.codestarnotifications_notificationrule added
• awscc.config_aggregationauthorization added
• awscc.config_configurationaggregator added
• awscc.config_conformancepack added
• awscc.config_organizationconformancepack added
• awscc.config_storedquery added
• awscc.connect_contactflow added
• awscc.connect_contactflowmodule added
• awscc.connect_hoursofoperation added
• awscc.connect_quickconnect added
• awscc.connect_user added
• awscc.connect_userhierarchygroup added
• awscc.cur_reportdefinition added
• awscc.customerprofiles_domain added
• awscc.customerprofiles_integration added
• awscc.customerprofiles_objecttype added
• awscc.databrew_dataset added
• awscc.databrew_job added
• awscc.databrew_project added
• awscc.databrew_recipe added
• awscc.databrew_ruleset added
• awscc.databrew_schedule added
• awscc.datasync_agent added
• awscc.datasync_locationefs added
• awscc.datasync_locationfsxwindows added
• awscc.datasync_locationhdfs added
• awscc.datasync_locationnfs added
• awscc.datasync_locationobjectstorage added
• awscc.datasync_locations3 added
• awscc.datasync_locationsmb added
• awscc.datasync_task added
• awscc.detective_graph added
• awscc.detective_memberinvitation added
• awscc.devopsguru_resourcecollection added
• awscc.dynamodb_globaltable added
• awscc.ec2_capacityreservationfleet added
• awscc.ec2_carriergateway added
• awscc.ec2_dhcpoptions added
• awscc.ec2_ec2fleet added
• awscc.ec2_flowlog added
• awscc.ec2_gatewayroutetableassociation added
• awscc.ec2_host added
• awscc.ec2_internetgateway added
• awscc.ec2_ipam added
• awscc.ec2_ipampool added
• awscc.ec2_ipamscope added
• awscc.ec2_localgatewayroutetablevpcassociation added
• awscc.ec2_networkacl added
• awscc.ec2_networkinsightsaccessscope added
• awscc.ec2_networkinsightsaccessscopeanalysis added
• awscc.ec2_networkinsightsanalysis added
• awscc.ec2_networkinsightspath added
• awscc.ec2_networkinterface added
• awscc.ec2_prefixlist added
• awscc.ec2_routetable added
• awscc.ec2_spotfleet added
• awscc.ec2_subnet added
• awscc.ec2_transitgateway added
• awscc.ec2_transitgatewayconnect added
• awscc.ec2_transitgatewaymulticastdomain added
• awscc.ec2_transitgatewaypeeringattachment added
• awscc.ec2_transitgatewayvpcattachment added
• awscc.ec2_vpc added
• awscc.ec2_vpcdhcpoptionsassociation added
• awscc.ec2_vpcendpoint added
• awscc.ecr_publicrepository added
• awscc.ecr_registrypolicy added
• awscc.ecr_replicationconfiguration added
• awscc.ecr_repository added
• awscc.ecs_capacityprovider added
• awscc.ecs_cluster added
• awscc.ecs_clustercapacityproviderassociations added
• awscc.ecs_primarytaskset added
• awscc.ecs_service added
• awscc.ecs_taskdefinition added
• awscc.ecs_taskset added
• awscc.efs_accesspoint added
• awscc.efs_filesystem added
• awscc.efs_mounttarget added
• awscc.eks_addon added
• awscc.eks_cluster added
• awscc.eks_fargateprofile added
• awscc.elasticache_globalreplicationgroup added
• awscc.elasticache_user added
• awscc.elasticache_usergroup added
• awscc.elasticloadbalancingv2_listener added
• awscc.elasticloadbalancingv2_listenerrule added
• awscc.emr_studio added
• awscc.emr_studiosessionmapping added
• awscc.emrcontainers_virtualcluster added
• awscc.events_apidestination added
• awscc.events_archive added
• awscc.events_connection added
• awscc.eventschemas_registrypolicy added
• awscc.evidently_experiment added
• awscc.evidently_feature added
• awscc.evidently_launch added
• awscc.evidently_project added
• awscc.finspace_environment added
• awscc.fis_experimenttemplate added
• awscc.fms_notificationchannel added
• awscc.fms_policy added
• awscc.forecast_datasetgroup added
• awscc.frauddetector_detector added
• awscc.frauddetector_entitytype added
• awscc.frauddetector_eventtype added
• awscc.frauddetector_label added
• awscc.frauddetector_outcome added
• awscc.frauddetector_variable added
• awscc.gamelift_alias added
• awscc.gamelift_fleet added
• awscc.gamelift_gameservergroup added
• awscc.globalaccelerator_accelerator added
• awscc.globalaccelerator_endpointgroup added
• awscc.globalaccelerator_listener added
• awscc.glue_registry added
• awscc.glue_schema added
• awscc.greengrassv2_componentversion added
• awscc.groundstation_config added
• awscc.groundstation_missionprofile added
• awscc.healthlake_fhirdatastore added
• awscc.iam_oidcprovider added
• awscc.iam_role added
• awscc.iam_samlprovider added
• awscc.iam_servercertificate added
• awscc.iam_virtualmfadevice added
• awscc.imagebuilder_distributionconfiguration added
• awscc.imagebuilder_image added
• awscc.imagebuilder_imagepipeline added
• awscc.imagebuilder_infrastructureconfiguration added
• awscc.inspectorv2_filter added
• awscc.iot_accountauditconfiguration added
• awscc.iot_authorizer added
• awscc.iot_certificate added
• awscc.iot_custommetric added
• awscc.iot_dimension added
• awscc.iot_domainconfiguration added
• awscc.iot_fleetmetric added
• awscc.iot_logging added
• awscc.iot_mitigationaction added
• awscc.iot_provisioningtemplate added
• awscc.iot_resourcespecificlogging added
• awscc.iot_scheduledaudit added
• awscc.iot_securityprofile added
• awscc.iot_topicrule added
• awscc.iot_topicruledestination added
• awscc.iotanalytics_dataset added
• awscc.iotanalytics_datastore added
• awscc.iotanalytics_pipeline added
• awscc.iotcoredeviceadvisor_suitedefinition added
• awscc.iotevents_detectormodel added
• awscc.iotevents_input added
• awscc.iotfleethub_application added
• awscc.iotsitewise_accesspolicy added
• awscc.iotsitewise_asset added
• awscc.iotsitewise_assetmodel added
• awscc.iotsitewise_dashboard added
• awscc.iotsitewise_gateway added
• awscc.iotsitewise_portal added
• awscc.iotsitewise_project added
• awscc.iotwireless_destination added
• awscc.iotwireless_fuotatask added
• awscc.iotwireless_multicastgroup added
• awscc.iotwireless_partneraccount added
• awscc.iotwireless_wirelessdevice added
• awscc.iotwireless_wirelessgateway added
• awscc.ivs_channel added
• awscc.ivs_playbackkeypair added
• awscc.ivs_recordingconfiguration added
• awscc.ivs_streamkey added
• awscc.kendra_datasource added
• awscc.kendra_faq added
• awscc.kendra_index added
• awscc.kinesis_stream added
• awscc.kinesisfirehose_deliverystream added
• awscc.kinesisvideo_signalingchannel added
• awscc.kinesisvideo_stream added
• awscc.kms_alias added
• awscc.kms_key added
• awscc.kms_replicakey added
• awscc.lambda_codesigningconfig added
• awscc.lambda_eventsourcemapping added
• awscc.lambda_function added
• awscc.lex_bot added
• awscc.lex_botalias added
• awscc.lex_resourcepolicy added
• awscc.licensemanager_grant added
• awscc.licensemanager_license added
• awscc.lightsail_alarm added
• awscc.lightsail_bucket added
• awscc.lightsail_database added
• awscc.lightsail_disk added
• awscc.lightsail_instance added
• awscc.lightsail_loadbalancer added
• awscc.lightsail_loadbalancertlscertificate added
• awscc.lightsail_staticip added
• awscc.logs_loggroup added
• awscc.logs_querydefinition added
• awscc.logs_resourcepolicy added
• awscc.lookoutequipment_inferencescheduler added
• awscc.lookoutmetrics_anomalydetector added
• awscc.lookoutvision_project added
• awscc.macie_customdataidentifier added
• awscc.macie_findingsfilter added
• awscc.macie_session added
• awscc.mediaconnect_flow added
• awscc.mediaconnect_flowentitlement added
• awscc.mediaconnect_flowoutput added
• awscc.mediaconnect_flowsource added
• awscc.mediaconnect_flowvpcinterface added
• awscc.mediapackage_channel added
• awscc.mediapackage_originendpoint added
• awscc.mediapackage_packaginggroup added
• awscc.memorydb_acl added
• awscc.memorydb_cluster added
• awscc.memorydb_parametergroup added
• awscc.memorydb_subnetgroup added
• awscc.memorydb_user added
• awscc.mwaa_environment added
• awscc.networkfirewall_firewall added
• awscc.networkfirewall_firewallpolicy added
• awscc.networkfirewall_loggingconfiguration added
• awscc.networkfirewall_rulegroup added
• awscc.networkmanager_device added
• awscc.networkmanager_globalnetwork added
• awscc.networkmanager_link added
• awscc.networkmanager_site added
• awscc.nimblestudio_launchprofile added
• awscc.nimblestudio_streamingimage added
• awscc.nimblestudio_studio added
• awscc.nimblestudio_studiocomponent added
• awscc.opensearchservice_domain added
• awscc.opsworkscm_server added
• awscc.panorama_applicationinstance added
• awscc.panorama_package added
• awscc.panorama_packageversion added
• awscc.pinpoint_inapptemplate added
• awscc.qldb_stream added
• awscc.quicksight_analysis added
• awscc.quicksight_dashboard added
• awscc.quicksight_dataset added
• awscc.quicksight_datasource added
• awscc.quicksight_template added
• awscc.quicksight_theme added
• awscc.rds_dbproxy added
• awscc.rds_dbproxyendpoint added
• awscc.rds_dbproxytargetgroup added
• awscc.rds_globalcluster added
• awscc.redshift_cluster added
• awscc.redshift_endpointaccess added
• awscc.redshift_endpointauthorization added
• awscc.redshift_eventsubscription added
• awscc.redshift_scheduledaction added
• awscc.rekognition_project added
• awscc.resiliencehub_app added
• awscc.resiliencehub_resiliencypolicy added
• awscc.resourcegroups_group added
• awscc.robomaker_fleet added
• awscc.robomaker_robot added
• awscc.robomaker_simulationapplication added
• awscc.route53_healthcheck added
• awscc.route53_hostedzone added
• awscc.route53_keysigningkey added
• awscc.route53recoverycontrol_controlpanel added
• awscc.route53recoverycontrol_routingcontrol added
• awscc.route53recoverycontrol_safetyrule added
• awscc.route53recoveryreadiness_cell added
• awscc.route53recoveryreadiness_readinesscheck added
• awscc.route53recoveryreadiness_recoverygroup added
• awscc.route53recoveryreadiness_resourceset added
• awscc.route53resolver_firewalldomainlist added
• awscc.route53resolver_firewallrulegroup added
• awscc.route53resolver_firewallrulegroupassociation added
• awscc.route53resolver_resolverrule added
• awscc.rum_appmonitor added
• awscc.s3_accesspoint added
• awscc.s3_bucket added
• awscc.s3_multiregionaccesspoint added
• awscc.s3_multiregionaccesspointpolicy added
• awscc.s3_storagelens added
• awscc.s3objectlambda_accesspoint added
• awscc.s3objectlambda_accesspointpolicy added
• awscc.s3outposts_accesspoint added
• awscc.s3outposts_bucket added
• awscc.s3outposts_bucketpolicy added
• awscc.sagemaker_appimageconfig added
• awscc.sagemaker_device added
• awscc.sagemaker_devicefleet added
• awscc.sagemaker_domain added
• awscc.sagemaker_image added
• awscc.sagemaker_modelpackagegroup added
• awscc.sagemaker_monitoringschedule added
• awscc.sagemaker_pipeline added
• awscc.sagemaker_project added
• awscc.sagemaker_userprofile added
• awscc.servicecatalog_cloudformationprovisionedproduct added
• awscc.servicecatalog_serviceaction added
• awscc.servicecatalogappregistry_application added
• awscc.servicecatalogappregistry_attributegroup added
• awscc.ses_contactlist added
• awscc.signer_signingprofile added
• awscc.ssm_association added
• awscc.ssm_document added
• awscc.ssm_resourcedatasync added
• awscc.ssmcontacts_contact added
• awscc.ssmcontacts_contactchannel added
• awscc.ssmincidents_replicationset added
• awscc.ssmincidents_responseplan added
• awscc.sso_instanceaccesscontrolattributeconfiguration added
• awscc.sso_permissionset added
• awscc.stepfunctions_activity added
• awscc.stepfunctions_statemachine added
• awscc.synthetics_canary added
• awscc.timestream_database added
• awscc.timestream_scheduledquery added
• awscc.timestream_table added
• awscc.transfer_workflow added
• awscc.wafv2_ipset added
• awscc.wafv2_loggingconfiguration added
• awscc.wafv2_regexpatternset added
• awscc.wafv2_rulegroup added
• awscc.wafv2_webacl added
• awscc.wafv2_webaclassociation added
• awscc.xray_group added
• awscc.xray_samplingrule added
• azure.defender-alert added
• gcp.api-key added
• aws.account
  • added filters: organization
• aws.ami
  • added filters: image-attribute
• aws.app-elb-target-group
  • added actions: modify-attributes
  • added filters: attributes
• aws.connect-instance
  • added actions: set-attributes
• aws.rds-cluster
  • added filters: db-cluster-parameter
• aws.secrets-manager
  • added actions: delete, remove-statements
• aws.user-pool
  • added actions: auto-tag-user, copy-related-tag, mark-for-op, remove-tag, tag
  • added filters: marked-for-op