0.9.44.0

[kapilt]

What's Changed

aws

• aws - account - emr - block public account access bugfix (aws - account - emr-block-public-access - Error Handling Bugfix #10018)
• aws - add rds-db-shard-group resource (aws - add rds-db-shard-group resource #10052)
• aws - athena-data-catalog tagging (athena-data-catalog-tagging #10021)
• aws - aws.cfn add sns notification topic filter (Add topics filter for aws.cfn #10013)
• aws - codedeploy-config resource and codedeploy-group config filter (Add codedeploy-config resource and codedeploy-group config filter #10044)
• aws - destination and delivery destination (aws - destination and delivery destination #9995)
• aws - docs - Add example of PartialMatch for EFS (aws - docs - Add example of PartialMatch for EFS #10031)
• aws - docs - remove-keys fix example to note its creation date based (Fix remove-keys documentation to indicate that we do not look at usage #10053)
• aws - ebs - fix resources returned in delete action results/file (aws - ebs - fix resources returned in action file #10050)
• aws - ecr - set-lifecycle - add support for 'tagPatternList' ECR lifecycle policy field (Added support for 'tagPatternList' ECR lifecycle policy field #9970)
• aws - ecr-image - support server side query in policies and remove extraneous api calls in augment (aws - ecr-image - support server side query in policies and remove extraneous api calls in augment #9680)
• aws - fix-volume resource and filter and vpc filter (Add fsx-volume resource #10067)
• aws - lambda - bug fix on update lambda configuration for multiple values of function name (aws - lambda - Fix bug multiple values for keyword argument 'Function Name' while updating lambda config #10082)
• aws - macie2 - use get administrator account vs deprecated ([Macie2]: Updating deprecated GetMasterAccount to GetAdministratorAcc… #10014)
• aws - mu - remove scope from periodic rules (aws - mu - remove scope from periodic rules #10008)
• aws - payment-cryptography tag and delete (aws - payment-cryptography tag and delete #9829)
• aws - s3 - set-inventory - add additional optional fields to schema (Update s3.py to include additional optional fields for ObjectACLs and objectowner #10020)
• aws - secrets manager - handle access denied errors (Do not throw access denied if cannot describe secrets manager secret #10055)
• aws - sesv2 - Dedicated IP Pool Tagging Fix ([SESv2] Dedicated IP Pool Tagging Fix #10077)
• aws - sesv2 - dedicated ip pools support (aws - sesv2 - dedicated ip pools support #9913)
• aws - shield - bug fix for clear-stale on elastic-ips (aws - clear_stale for EIP sync action does not properly identify protected Elastic IPs #10006)
• aws - sso - delete idp action (Added support for SAML SSO provider deletion within AWS IAM #10085)
• aws - timestream influxdb - cluster resource (Add support for AWS TimeStream InfluxDB Cluster #10027)
• aws - utils - schema from shape (aws - schema from shape #9771)
• aws - wafv2 - add web-acl-rules filter (aws - waf - rulegroup #9868)
• aws - workspace - filter by active directory (Add Directory related resource to workspace dir #10066)
• fix - avoid key error cases in policystatement filter (Bugfix: KeyError in PolicyStatement #10026)
• fix - conditional for key error in policystatement filter ([Bug] Fix conditional for key error in policystatement filter #9977)
• fix - more consistent lambda mode execution. (fix: more consistent lambda mode execution. #9997)
• modify-security-groups action - removed check for maximum of 5 security groups (Removed arbitrary check for maximum of 5 security groups #9789)

azure

• azure - add postgresql-flexibleserver resource (Add postgresql-flexibleserver resource #10009)
• azure - disk - add modify-disk-type action (Azure - resource: Azure.disk - Added action modify-disk-type for Azure Disk Managed Disks. #9986)
• azure - event-mode - fix parent id on child resources (azure - event-mode - fix parent id on child resources #9906)
• azure - session - handle azure-identity call signature change (Fix a bug with azure cli login #10079)
• azure - update azure mgmt storage and compute libraries (Update azure mgmt storage and compute #10054)
• azure - update azure-mgmt-redis version and update resource (Update azure-mgmt-redis #9662)

gcp

• gcp - bucket - fix gcp-scc mode use (gcp - bucket - fix gcp-scc mode use #10005)
• gcp - kms - remove duplicate location function / chore (chore: remove duplicate function #9983)

shift-left

• c7n-left - taggable filter - match resources from v3 of the azurerm provider (c7n-left - taggable filter - match resources from v3 of the azurerm provider #10046)
• tests - add c7n-left xfail for merging local map with unknowns (tests - add c7n-left xfail for merging local map with unknowns #10045)
• tests - add xfail tests for known c7n-left/tfparse issues (tests - add xfail tests for known c7n-left/tfparse issues #10034)

tools

• tools/cask - update dependencies and code for new docker/moby api (tools/cask - update dependencies and code for new docker/moby api #9975)
• tools/omnissm - remove obsolete tool (tools/omnissm - remove obsolete tool #9976)
• tools/ops - aws iam permission generator for policies (tools/ops - aws iam permission generator for policies #9964)

docs

• docs - add a separate SECURITY.md (releng - add a separate SECURITY.md #10094)
• docs - fix typo in quickstart (docs(quickstart): fix typo isntructions #9981)
• docs - tools/c7n-org update README.md example w/ quotes around run-script args and relative path (Update README.md #9960)

releng

• releng - 🌱 bump codecov/codecov-action in the github-actions group (🌱 Bump codecov/codecov-action from 4 to 5 in the github-actions group #9855)
• releng - changelog generator - handle missing docker hub images (releng - changelog generator - handle missing docker hub images #10087)
• releng - dep updates and release prep (releng - feb 2025 dep updates #9994)
• releng - dep updates april 2025 v2 (releng - dep updates april 2025 v2 #10104)
• releng - pin github actions (releng - pin github actions #10093)
• releng - reintroduce urllib3 pin in root package (Pin root urllib3 #10103)
• releng - release workflow - update poetry freeze plugin (releng - release workflow - update poetry freeze plugin #10095)
• releng - remove end of life python 3.8 from ci (releng - remove EoL python 3.8 from ci #9966)
• releng - tools/c7n_salactus - Bump jinja2 (Bump jinja2 from 3.1.5 to 3.1.6 in /tools/c7n_salactus #10019)
• releng - update dependencies for release (releng - update dependencies for release #10092)
• releng - update tfparse to 0.6.15 (releng - update tfparse to 0.6.15 #10058)
• releng - workaround vs pinning for poetry plugin freeze issue on urllib (Workaround for poetry plugin freeze #10096)

schema changes

• aws.athena-capacity-reservation added
• aws.athena-data-catalog added
• aws.athena-work-group added
• aws.cloudhsm-backup added
• aws.codedeploy-config added
• aws.delivery-destination added
• aws.destination added
• aws.fsx-volume added
• aws.kafka-config added
• aws.kendra added
• aws.lexv2-bot added
• aws.log-destination removed
• aws.payment-cryptography-key added
• aws.quicksight-account added
• aws.rds-db-shard-group added
• aws.ses-configuration-set-v2 added
• aws.ses-dedicated-ip-pool added
• aws.ses-ingress-endpoint added
• aws.timestream-influxdb added
• aws.timestream-influxdb-cluster added
• azure.afd-custom-domain added
• azure.afd-endpoint added
• azure.postgresql-flexibleserver added
• tencentcloud.dns-record added
• tencentcloud.eip added
• tencentcloud.subnet added
• terraform._ added
• aws.cfn
  • added filters: template, topic
• aws.codedeploy-group
  • added filters: config
• aws.directory
  • added filters: is-log-forwarding
• aws.dms-endpoint
  • added filters: kms-key
• aws.efs
  • added actions: remove-statements
  • added filters: cross-account
• aws.elastic-ip
  • added filters: used-by
• aws.fsx
  • added filters: volume, vpc
• aws.iam-saml-provider
  • added actions: delete
• aws.ses-email-identity
  • added actions: remove-policies
  • added filters: cross-account
• aws.shield-protection
  • added actions: auto-tag-user, copy-related-tag, mark-for-op, remove-tag, tag
  • added filters: finding, marked-for-op
• aws.swf-domain
  • added filters: configuration
• aws.wafv2
  • added filters: web-acl-rules
• aws.workspaces-directory
  • added filters: directory
• azure.appserviceplan
  • added filters: webapp
• azure.disk
  • added actions: modify-disk-type
• azure.storage
  • added filters: management-policy-rules
• azure.vm
  • added filters: jit-policy-port

New Contributors

• @5tingy made their first contribution in Added support for 'tagPatternList' ECR lifecycle policy field #9970
• @Hotpirsch made their first contribution in Update README.md #9960
• @lanandra made their first contribution in docs(quickstart): fix typo isntructions #9981
• @jismail3000 made their first contribution in aws - payment-cryptography tag and delete #9829
• @sujit-kulkarni made their first contribution in Update s3.py to include additional optional fields for ObjectACLs and objectowner #10020
• @jflim made their first contribution in aws - clear_stale for EIP sync action does not properly identify protected Elastic IPs #10006
• @Benco351 made their first contribution in Azure - resource: Azure.disk - Added action modify-disk-type for Azure Disk Managed Disks. #9986
• @strixthekiet made their first contribution in aws - lambda - Fix bug multiple values for keyword argument 'Function Name' while updating lambda config #10082
• @benbridts made their first contribution in Fix remove-keys documentation to indicate that we do not look at usage #10053

Full Changelog: 0.9.43.0...0.9.44.0

---

This discussion was created from the release 0.9.44.0.

[ebertinbench]

why is this version unfindable on pip ?

[ajkerrigan]

It's available on PyPI here