Community Meeting Minutes for 2022-10-11

[castrojo]

C7n Community Meeting Minutes

October 11 2022

:::info

• URL: meet.google.com/mii-evqh-esh
• Date: October 11th, 2022 (2:00 PM (ET) / 11:00 AM (PT) / 6PM (UTC))
• Timezone Converter (Click me)
• Agenda

1. Intros 10m
2. Agenda Items 20m
3. PR Party 30m

• Meeting Contact: Jorge: jorge@stacklet.io
• Video Archive and Transcripts: https://mtngs.io/cloud-custodian/community-meetings/
  :::

Agenda Item

• Intros, etc.

• Governance Updates

  • See this GitHub issue for the latest draft revisions.

• Governance as Code day:

  • Next week!
  • Registration

• We're testing Slack! Join us:

  • Invite page
  • PRs incoming to update project link
  • Still working on an archive solution, more to follow next week

• [sonny]

  • K8s provider update
    • See #7697
    • Docs PR: https://github.com/thisisshi/cloud-custodian/pull/21/files
    • Example Policies - feedback wanted!

• Shift Left Survey: https://www.surveymonkey.com/r/8Y53GJQ

• From the community: 💥 Define and use of integer variables (YAML-files) - c7n-org #7553

Weekly Report

Weekly status report for cloud-custodian/cloud-custodian Week #41 2022

Weekly Stats

	Opened this week	Closed this week
Issues	17	14
PR's	37	25

New stars	0
New forks	0

PR's Opened

• #7867: releng - changelog generator updates
• #7866: releng - changelog generator updates
• 💥 #7865: c7n_tencentcloud - resources - cam
• #7864: Update azure sql va filter
• #7862: improve docker layer cache
• #7861: aws - security-group - used filter - enrich attribute
• #7860: c7n_kube - cache - fix cache usage
• #7859: Add new RDS Proxy resource
• #7857: tools/c7n_mailer - lazily import processor modules
• #7854: Add c7n:MatchedIpPermissions to notification
• #7852: releng - 0.9.20 pkg rebase and increment
• #7851: AWS Metric Alarm Filter
• #7850: tools/c7n-left - refactor terraform support to subpackage
• #7849: tools/c7n-left - refactor terraform support to subpackage
• #7848: releng - pin poetry and fix setup gen
• #7844: releng - fix poetrypkg gen-setup command
• #7843: releng - fix poetry pkg script, add test
• #7840: azure - webapp - add webapp authentication filter
• #7832: core - policy var formatting preserves var type
• #7828: aws - elasticsearch - filter/action on source ips
• #7827: img tags need to be relative for the root index
• #7826: aws - metrics - support extended statistics
• #7824: c7n_tencentcloud: add fixture for environment variables, and fix typos in query.py.
• #7823: releng - docker - include tencentcloud provider
• #7822: aws - sqs - set-encryption key usage consistency
• #7821: aws - s3 - config handle missing configuration for regional specific feature sets
• #7819: c7n_tencentcloud - resources - ami&nat gateway&cbs snapshot
• #7818: c7n_tencentcloud - Add environment fixture, and add 'qcs' to resources.
• #7817: Add cloudwatch put subscription filter action
• #7816: Add cloudwatch put subscription filter action
• #7815: utils - handle interpolation of non-string variables
• #7813: aws - dynamodb - enhancement recommended for the consecuitive-backups filter
• #7809: c7n_tencentcloud - resources - clb&cbs
• #7807: aws - rds - list db instance option groups
• #7806: c7n_tencentcloud - filters - metrics
• #7804: aws - iam-user - add login-profile filter
• #7803: tools/c7n-left - run policies on terraform

PR's Closed

• #7866: releng - changelog generator updates
• #7862: improve docker layer cache
• #7850: tools/c7n-left - refactor terraform support to subpackage
• #7849: tools/c7n-left - refactor terraform support to subpackage
• #7848: releng - pin poetry and fix setup gen
• #7844: releng - fix poetrypkg gen-setup command
• #7843: releng - fix poetry pkg script, add test
• #7832: core - policy var formatting preserves var type
• #7828: aws - elasticsearch - filter/action on source ips
• #7827: img tags need to be relative for the root index
• #7824: c7n_tencentcloud: add fixture for environment variables, and fix typos in query.py.
• #7823: releng - docker - include tencentcloud provider
• #7822: aws - sqs - set-encryption key usage consistency
• #7821: aws - s3 - config handle missing configuration for regional specific feature sets
• #7818: c7n_tencentcloud - Add environment fixture, and add 'qcs' to resources.
• #7816: Add cloudwatch put subscription filter action
• #7815: utils - handle interpolation of non-string variables
• #7806: c7n_tencentcloud - filters - metrics
• #7803: tools/c7n-left - run policies on terraform
• #7802: aws - servicecatalog - added new resource of type catalog-product
• #7790: docs - tencentcloud usage readme
• #7750: aws - dynamodb - disable consecutive backups filter
• #7747: docs - Change gitter link to slack for chat
• #7744: Added Instance Metadata Tags action
• #7706: Add FMS WAFv2 support for alb, cloudfront

Issues Opened

• #7858: aws - apigateway.websockets.stage - add resource, tag filters/actions, and delete action
• #7856: Lambdas aren't deprovisioned after policies are removed
• #7853: Deployment of c7n-mailer Fails Due to Missing Package
• #7847: Unable to Copy tags from EC2 to Security Groups.
• #7845: releng - dont cast None in setup.py
• #7842: Need support for AppSync Resource in custodian platform
• #7841: C7N Mailer - Allow Redis cluster to have encryption in transit enabled
• #7839: using member-role for periodic policy not running on remote account
• #7838: Automatically filter out automated snapshots from rds-snapshot resource.
• #7837: Use case-insensitive checks for allowed conditions in cross-account filters
• #7833: The 'report' command shows results even when no matching resources
• #7831: Lambda does not have filter to check on policy statements that allow public access.
• #7830: Issue which Security group Ingress filter type
• #7829: c7n-salactus gives syntax error
• #7820: Support percentile statistics in CloudWatch metrics filter
• #7814: AWS - global resource cloudfront runs on multiple regions
• #7808: Mode config-rule cannot handle S3 Buckets in eu-north-1

Issues Closed

• #7856: Lambdas aren't deprovisioned after policies are removed
• #7845: releng - dont cast None in setup.py
• #7839: using member-role for periodic policy not running on remote account
• #7831: Lambda does not have filter to check on policy statements that allow public access.
• #7814: AWS - global resource cloudfront runs on multiple regions
• #7808: Mode config-rule cannot handle S3 Buckets in eu-north-1
• #7778: releng - add tecentcloud to tools/dev/dockerpkg and the docker images
• #7762: SQS Set-Encryption Not Standard
• #7760: Still Getting Type Error when using set-s3-public-block
• #7695: GetBucketLocation api failure for cross region buckets
• #7553: Define and use of integer variables (YAML-files) - c7n-org
• #6734: Variable interpolation only works on strings
• #3992: Add a feature to specify the region(s) to deploy into the policy document
• #1410: index given cw metric on given set of resources