aws

• aws - account - check macie2 filter (#6327)
• aws - app-elb - add modify-attributes action (#6220)
• aws - asg propagate tag changes for auto-tag-user (#6257)
• aws - ebs-snapshot - set-permissions action (#6203)
• aws - elasticsearch - cross-account filter and remove-statements action (#6225)
• aws - iam certificate - add delete action (#6288)
• aws - logs - fix tag augment (#6333)
• aws - metrics filter - push start time back to the top of the last hour (#6329)
• aws - rds - remove tag augmentation where builtin (#6332)
• aws - resource type metadata fixes (#6314)
• aws - sqs - trigger paginated queue listing (#6303)

azure

• azure - ci - stabilize cosmos db tests (#6300)
• azure - diagnostic-settings filter fix for absent operator (#6308)
• azure - retry hardening (#6349)

core

• core - webhook action - add event to payload (#6299)

docs

• docs - fix cloud formation cli example in policylambda.py (#6311)

gcp

• gcp - service mgmt switch to service usage api (#6320)

releng

• releng - release prep for 0.9.9 (#6338)
• ci - aws asg remove region specific zone usage (#6348)
• ci - azure - fix az cosmos functional test failure (#6342)
• ci - azure - functional tests disable flakey storage tests for now (#6344)
• ci - azure - public ip test filter to the ip the test created (#6343)
• ci - fix aws functional test on region for terraform (#6341)
• ci - tests - remove hardcoded certificate arn (#6324)
• ci - azure - stabilize cosmos db tests (#6300)

tools

• tools/c7n-org - aws - export organization account's tags as variables (#6323)
• tools/c7n_mailer - fix azure mailer deployment issue (#6325)
• tools/c7n-mailer - add support for additional, arbitrary email headers (#6249)

schema changes

• aws.account
  • added filters: check-macie
• aws.app-elb
  • added actions: modify-attributes
• aws.ebs-snapshot
  • added actions: set-permissions
• aws.elasticsearch
  • added actions: remove-statements
  • added filters: cross-account
• aws.iam-certificate
  • added actions: delete