aws
- aws - account - add support for bedrock model invocation logging configuration (#9259)
- aws - add set-policy action for iam-profile resource (#9257)
- aws - allow excluding specific processes when resuming ASGs (#9252)
- aws - appmesh support (#9260)
- aws - bedrock - support for knowledge base, bedrock-agent delete action (#9301)
- aws - bedrock customization jobs, tag, kms-key and stop action (#9282)
- aws - cloud watch alarm - add a filter for determining if part of a composite alarm (#9300)
- aws - dynamodb-table - avoid key errors in continuous-backup filter (#9266)
- aws - ec2 resize from cost hub recommendation (#9281)
- aws - ecs-service - modify-definition with resize support (#9288)
- aws - ism-role - fix config resource id (#9294)
- aws - lambda update action w/ resize support from cost recommendation hub (#9283)
- aws - rds-proxy fix cfn type (#9267)
- aws - route53 record set delete action, hosted zone delete fix (#9291)
- aws - s3 - support for storage lens configuration (#9271)
awscc
- awscc - update action - ensure patch only against updatable properties, support user supplied jsonpatch (#9297)
azure
- azure - automation-account variable filter (#8999)
- azure - azure.vm.filters.backup-status (#9242)
- azure - front-door waf filter (#9038)
- azure - redis firewall filter (#9045)
- azure - sql server auditing filter (#9097)
- azure - sql-server filters - failover-group and security-alert-policies (#9114)
docs
- docs - minor gcp and c7n left fixes (#9129)
- docs - remove beta label on gcp (#9278)
- docs - update vector.dev toml configuration (#9279)
releng
- releng - docs publish - ensure use of pypi for awscli install (#9314)
- releng - downgrade urllib3 for release (#9334)
- releng - pin freeze wheel to previous release due to error (#9332)
- releng - prep 0.9.35 release (#9328)
- releng - update github actions versions and fix doc build (#9262)
- releng - cryptography from 41.0.7 to 42.0.4 in /tools/c7n_mailer (#9313)
shift-left
- c7n-left - fix policy severity level filtering for --warn-on (#9261)
- shift-left - handle a null tag map on a resource (#9323)
- shift-left - log policy error during execution (#9293)
tencentcloud
- tencentcloud - security group filter - fix for empty port string (#9253)
schema changes
aws.appmesh-meshaddedaws.appmesh-virtual-gatewayaddedaws.bedrock-agentaddedaws.bedrock-customization-jobaddedaws.bedrock-knowledge-baseaddedaws.s3-storage-lensaddedazure.automation-accountaddedaws.account- added actions:
set-bedrock-model-invocation-logging - added filters:
bedrock-model-invocation-logging
- added actions:
aws.alarm- added filters:
is-composite-child
- added filters:
aws.bedrock-custom-model- added filters:
kms-key
- added filters:
aws.ecs-service- added actions:
modify-definition
- added actions:
aws.iam-profile- added actions:
set-policy
- added actions:
aws.lambda- added actions:
update
- added actions:
aws.rds-proxy- removed filters:
json-diff
- removed filters:
aws.rrset- added actions:
delete
- added actions:
azure.front-door- added filters:
firewall-policy
- added filters:
azure.redis- added filters:
firewall
- added filters:
azure.sql-server- added filters:
auditing-policies,failover-group,security-alert-policies
- added filters:
azure.vm- added filters:
backup-status
- added filters:
New Contributors
- @thomas-stone made their first contribution in #9252
- @missedone made their first contribution in #9253
- @Johnlon made their first contribution in #9260
Full Changelog: 0.9.34.0...0.9.35.0