What's Changed

aws

• aws - account - switch to describe source (#9337)
• aws - add workspaces bundle support (#9380)
• aws - appmesh - add virtualnode resource (#9378)
• aws - appmesh - update resource model, extend core docs and test support (#9290)
• aws - ebs - add snapshots filter (#9451)
• aws - ecs-service - fix delete for services with task sets (#9353)
• aws - firewall - add logging-config filter and tag actions (#9339)
• aws - lambda@edge filter - fix to use unique resourceIds (#9368)
• aws - make account_id available to c7n-org report (#9285)
• aws - opensearch-serverless resource and kms filter (#9358)
• aws - rds - update stoppable engine list (#9364)
• aws - sagemaker-auto-ml-job (#9434)
• aws - sagemaker-cluster (#9390)
• aws - sagemaker-domain resource (#9373)
• aws - sagemaker-hyperparameter-tuning-job (#9418)
• aws - update tag permissions, expand s3 assembly permissions, add missing config_types (#9154)
• aws - update transfer.py exception catch (#9394)

azure

• azure - api-management certificates filter (#9413)
• azure - machine-learning-workspace - compute instance filter (#9412)
• azure - postgresql-server.filters (#9041)
• azure - stream-job (#9118)
• azure - support certificate authentication (#9325)
• azure - update azure-mgmt-rdbms major version (#9420)

core

• core - allow variable references to pass type validation (#9237)
• core - apply query over extra_args (#9449)
• core - Avoid raising spurious KeyError during policy validation (#9407)

docs

• docs - add external security audit report (#9446)
• docs - fix several minor typos and formatting (#9361)

c7n_left

• core - full filename in rich output (#9460)

releng

• releng - Bump black from 23.12.1 to 24.3.0 in /tools/c7n_mailer (#9372)
• releng - bump black from 23.12.1 to 24.3.0 (#9371)
• releng - bump github.com/docker/docker in /tools/cask (#9370)
• releng - bump golang.org/x/net from 0.17.0 to 0.23.0 in /tools/cask (#9450)
• releng - bump golang.org/x/net from 0.17.0 to 0.23.0 in /tools/omnissm (#9447)
• releng - c7n-left - update tfparse and increment (#9384)
• releng - dependency update 2024/04/15 (#9435)
• releng - increment c7n-left (#9467)
• releng - move c7n-left to chainguard wolfi-base from docker hub (#9389)
• releng - prep 0.9.36 release (#9463)
• releng - redo 0.9.36 release prep 2024/04 (#9468)
• releng - ruff update and lint fixes (#9381)
• releng - transient decrement release (#9466)
• releng - update c7n-left tfparse dependency for additional pyversion and os support (#9230)
• releng - update cosign version (#9470)

tencentcloud

• tencentcloud - use custodian version in user agent / request client header (#9338)

schema changes

• aws.appmesh-virtual-gateway removed
• aws.appmesh-virtualgateway added
• aws.appmesh-virtualnode added
• aws.sagemaker-auto-ml-job added
• aws.sagemaker-cluster added
• aws.sagemaker-domain added
• aws.sagemaker-hyperparameter-tuning-job added
• aws.workspaces-bundle added
• azure.stream-job added
• aws.app-flow
  • added filters: config-compliance, json-diff
• aws.appstream-stack
  • added filters: json-diff
• aws.bedrock-agent
  • added actions: auto-tag-user, copy-related-tag, mark-for-op, remove-tag, tag
  • added filters: marked-for-op
• aws.catalog-product
  • added filters: json-diff
• aws.config-recorder
  • added filters: json-diff
• aws.dms-endpoint
  • added filters: json-diff
• aws.dms-instance
  • added filters: json-diff
• aws.ebs
  • added filters: snapshots
• aws.event-rule
  • added filters: json-diff
• aws.firewall
  • added actions: delete, update-delete-protection, update-logging-config
  • added filters: logging-config
• aws.graphql-api
  • added filters: json-diff
• aws.opensearch-serverless
  • added filters: kms-key
• aws.s3-access-point
  • added filters: json-diff
• aws.s3-access-point-multi
  • added filters: json-diff
• aws.sagemaker-endpoint-config
  • added filters: json-diff
• aws.sagemaker-notebook
  • added filters: json-diff
• aws.scaling-policy
  • added filters: json-diff
• aws.ses-configuration-set
  • added filters: config-compliance, json-diff
• azure.api-management
  • added filters: certificates
• azure.machine-learning-workspace
  • added filters: compute-instances
• azure.postgresql-server
  • added filters: firewall-bypass, security-alert-policies, server-configurations

New Contributors

• @bruceybian made their first contribution in #9338
• @mrvalterhugo made their first contribution in #9364
• @dannysauer made their first contribution in #9361
• @zkarpinski made their first contribution in #9434
• @AdamKorcz made their first contribution in #9446
• @theriault made their first contribution in #9394
• @fwereade made their first contribution in #9460

Full Changelog: 0.9.35.0...0.9.36.0