0.9.43.0

[kapilt]

aws

• aws - account - fix has-virtual-mfa (aws - account - update has-virtual-mfa #9848)
• aws - add support for lexv2 bot (aws - add support for lexv2 bot #9937)
• aws - add support for timestream influxdb (aws - add support for timestream influxdb #9858)
• aws - athena workgroup, capacity-reservation, data-catalog (AWS - Athena Resource Tagging support #9933)
• aws - bugfix for IAM role arn parsing (aws - iam-role - bugfix for IAM role ARN parsing #9885)
• aws - cfn - search template filter (aws - cfn - search template filter #9768)
• aws - cfn - stacks - Add ARN definition (aws - cfn - stacks - Add ARN definition #9936)
• aws - cloudhsm - backup (aws - cloudhsm - backup #9721)
• aws - directory - fix - filtering directories without trusts (aws - directory - [Bug Fix] - Filtering directories without trusts #9899)
• aws - directory service log subscription filter (aws - directory service log subscription filter #9837)
• aws - dms-endpoint - kms-key filter (aws - dms-endpoint kms-key filter #9871)
• aws - efs - cross-account filter and remove-statements action (add cross account filter for efs #9856)
• aws - elastic-ip - used-by filter (aws - elastic-ip - used-by filter #9958)
• aws - event-rule and target - handle non-default event buses (Fix aws event rule and event rule target #9874)
• aws - glue - fix table ARN to include the database name (aws - glue - fix table ARN to include the database name #9880)
• aws - guard duty- update to use get administrator account instead of deprecated get master (updating deprecated action GetMasterAccount #9840)
• aws - handle concurrent deletes better when fetching resource details ([Bug Fix] - Handle occurrences where resource exists in list API but doesn't exist in get api used in the detail_spec. #9902)
• aws - has-statement filter - multiple statements bugfix (aws - has-statement filter multiple statements bugfix #9865)
• aws - kafka-cluster config resource (aws kafka config #9926)
• aws - kendra resource (aws - kendra resource #9881)
• aws - lex - set maxResults (aws - lexv2-bot - set maxResults #9944)
• aws - network-manager - handle shared networks (aws - network-manager - handle shared networks #9927)
• aws - networkmanager - mark all resources as global (aws - networkmanager - mark all resources as global #9900)
• aws - policystatement - has-statement partial-match (aws - policystatement - has-statement partial-match #9877)
• aws - quicksight-account settings resource (aws - quicksight-account #9876)
• aws - quota - usage filter - fix too many datapoints (aws - quota - fix too many datapoints #9897)
• aws - rest-account - Retry and Raise Client Errors (aws - rest-account - Retry and Raise Client Errors #9862)
• aws - ses - ingress - endpoints (aws - ses - ingress - endpoints #9947)
• aws - ses-email-identity - cross-account filter (aws - ses-email-identity cross-account filter #9759)
• aws - sesv2 - sesv2 configuration sets (aws - sesv2 - Add support for sesv2 configuration sets #9911)
• aws - shield - mark all resources as global (aws - shield - mark all resources as global #9901)
• aws - shield - tagging (aws - shield - tagging #9909)
• aws - sns-subscription - get_resources fetch only passed resource ids (fix: sns-subscription get resources #9867)
• aws - ssm - fix iam permission metadata (aws - ssm - fix iam permission metadata #9962)
• aws - swf - domain configuration filter (aws - swf describe domain #9850)
• aws - timestream-influxdb - add network-location filter (feat: add network-location filter #9892)
• aws - workspaces-web - fix and test matching an empty browser policy (aws - workspaces-web - BugFix: empty browser policy, add tests #9949)

azure

• azure - add afd endpoint and afd custom domain resources (Add afd endpoint and afd custom domain resources #9831)
• azure - appserviceplan - add webapps filter (Add webapps filter to app-service-plan #9930)
• azure - azure.storage - add management-policy-rules filter (Add management-policy-rules filter for azure.storage #9838)
• azure - releng - update mgmt ml lib and enable additional properties (Update mgmt ml lib and enable additional properties #9931)
• azure - storage - set minimum tls version on buckets (azure - storage - set minimum tls version on buckets #9904)
• azure - support custom namespace for c7n azure metrics filter (azure - metrics - support custom namespace for metrics filter #9863)
• azure - update azure.mgmt.network (Update azure.mgmt.network #9830)
• azure - vm - add jit policy ports filter (Add jit policy ports filter for azure.vm #9950)

gcp

• gcp - instance - add support for discard_local_ssd in stop action (gcp - instance - add support for discard_local_ssd in stop action #9946)
• gcp - loadbalancer-target-tcp-proxy - remove stray space from asset_type (gcp - loadbalancer-target-tcp-proxy - remove stray space from asset_type #9956)

tencentcloud

• c7n_tencentcloud - resources - eip & dns-records (c7n_tencentcloud - resources - EIP & DnsRecords #9878)
• c7n_tencentcloud - resources - subnet (c7n_tencentcloud - resources - subnet #9935)
• tencentcloud - testing allow pass through credential env vars when recording (optimize set credential env variables of tencent-cloud tests #9919)

shift-left

• c7n-left - docs and a test around jmespath w/ json string (chore: Add a large c7n-left test and docs for jmespath #9940)
• c7n-left - handle reference list declared in __tfmeta (c7n-left: handle reference list declared in __tfmeta #9783)
• feat(c7n-left): add option to select Terraform workspace (feat(c7n-left): add option to select Terraform workspace #9869)

tools

• tools/c7n_org - gcp - handle empty project name (gcp - c7n_org - handle empty project name #9929)

docs

• docs - fix typo in azure.webapp example (azure - webapp - fix metric name in policy #9955)

releng

• releng - 2025-01 - update data dictionaries (2025-01 - update data dictionaries #9928)
• releng - prepare 2025-02 release - dep update and version increment (releng - prepare 2025-02 release - dep update and version increment #9965)
• releng - tools/c7n_mailer update jinja2 to 3.1.5 (Bump jinja2 from 3.1.4 to 3.1.5 in /tools/c7n_mailer #9920)
• releng - tools/c7n_salactus update jinja2 (Bump jinja2 from 3.1.4 to 3.1.5 in /tools/c7n_salactus #9925)
• releng - update jinja2 from 3.1.4 to 3.1.5 (Bump jinja2 from 3.1.4 to 3.1.5 #9943)
• releng - update tools/cask golang deps (Bump golang.org/x/net from 0.23.0 to 0.33.0 in /tools/cask #9922)

schema changes

• aws.athena-capacity-reservation added
• aws.athena-data-catalog added
• aws.athena-work-group added
• aws.cloudhsm-backup added
• aws.kafka-config added
• aws.kendra added
• aws.lexv2-bot added
• aws.quicksight-account added
• aws.ses-configuration-set-v2 added
• aws.ses-ingress-endpoint added
• aws.timestream-influxdb added
• azure.afd-custom-domain added
• azure.afd-endpoint added
• tencentcloud.dns-record added
• tencentcloud.eip added
• tencentcloud.subnet added
• terraform._ added
• aws.cfn
  • added filters: template
• aws.directory
  • added filters: is-log-forwarding
• aws.dms-endpoint
  • added filters: kms-key
• aws.efs
  • added actions: remove-statements
  • added filters: cross-account
• aws.elastic-ip
  • added filters: used-by
• aws.ses-email-identity
  • added actions: remove-policies
  • added filters: cross-account
• aws.shield-protection
  • added actions: auto-tag-user, copy-related-tag, mark-for-op, remove-tag, tag
  • added filters: finding, marked-for-op
• aws.swf-domain
  • added filters: configuration
• azure.appserviceplan
  • added filters: webapp
• azure.storage
  • added filters: management-policy-rules
• azure.vm
  • added filters: jit-policy-port

New Contributors

• @ghorondo made their first contribution in updating deprecated action GetMasterAccount #9840
• @wgrant made their first contribution in aws - glue - fix table ARN to include the database name #9880
• @Singha22 made their first contribution in aws - cfn - search template filter #9768
• @judysychen made their first contribution in optimize set credential env variables of tencent-cloud tests #9919
• @karthik221 made their first contribution in add cross account filter for efs #9856
• @CR-EvgenyT made their first contribution in gcp - c7n_org - handle empty project name #9929
• @rvichery made their first contribution in gcp - instance - add support for discard_local_ssd in stop action #9946
• @tjamet made their first contribution in aws - quota - fix too many datapoints #9897

Full Changelog: 0.9.42.0...0.9.43.0

---

This discussion was created from the release 0.9.43.0.