0.9.28.0 release

[kapilt]

TLDR

New oracle cloud infrastructure provider, several additional resources to gcp, regular fixes and updates to extant providers.

aws

• aws - add delete action to directory and cloud-directory (aws - add delete action to directory and cloud-directory #8610)
• aws - add ses-receipt-rule resource and delete action (added ses functionality - resource type and delete action #8671)
• aws - asg - fix propagate-tags for asgs with no tags (AWS - ASG - fix propagate tags #8612)
• aws - core - fix fetching resources by id for types with scalar server-side filters (aws - retrieve multiple rds resources for tag copy #8614)
• aws - ebs - encrypt-instance-volumes handle missing tags (Update ebs.py #8683)
• aws - efs-mount-target - support cloudtrail mode (Aws efs mount target cloudtrail mode #8631)
• aws - event bus delete action (aws - event bus delete action #8598)
• aws - iam-user - add include-via option to policy filter for group inherited policies (aws - iam-user - add include-via option to policy filter #8372)
• aws - security-group - used filter - handle ram vpc sharing eni when run in vpc owner (aws - security-group - used filter - handle ram vpc sharing eni when run in vpc owner #8604)
• aws - ses - add ses-email-identity resource type (aws - ses - add ses-email-identity resource type #8616)
• aws - ses - add set-delivery-options action (aws - ses - add set-delivery-options action #8635)
• aws - ses - identity has-statement filter (aws - ses - identity has-statement filter #8640)
• aws - user-pool - include resource details from parent augment (aws - user-pool - include resource details from parent augment #8684)
• aws - vpc - metrics filter for vpce and tgw attachment (vpc - add metrics filter for VPC Endpoint and TGW Attachment #8674)

azure

• azure - add recovery services vault resource (Added policy for recovery services #8599)
• azure - filter for the SQL Server TDE (Added filter for the SQL Server TDE #8652)
• azure - monitor-log-profile resource (add-azure-resource-monitor-log-profile #8580)
• azure - session - add _run_command timeout parameter (azure - session - add _run_command timeout parameter #8632)

docs

• docs - document gcp env vars explicitly along with noting workload federated identity support (docs - document gcp env vars explicitly along with noting workload federation #8606)
• docs - update tencent cloud object storage example (quick update to example for bucket policy #8600)

gcp

• gcp - add big table asset types metadata (gcp - add big table asset types metadata #8615)
• gcp - add datafusion resource (gcp - added datafusion #8676)
• gcp - add more bigtable resources (instance, cluster, table, backup) (gc - added bigtable instance, bigtable instance cluster, bigtable ins… #8519)
• gcp - add support for impersonated credentials (feat: adding support for gcp impersonated credentials #8571)
• gcp - added notebook resource (gcp - added notebook instance #8680)
• gcp - new resources app service and app service version (Gcp new resources app service and app service version #8425)

oci

• oci - new provider (Initial OCI commit #8620)

releng

• releng - bump cryptography from 40.0.2 to 41.0.0 (Bump cryptography from 40.0.2 to 41.0.0 #8627)
• releng - bump cryptography from 40.0.2 to 41.0.0 in /tools/c7n_azure (Bump cryptography from 40.0.2 to 41.0.0 in /tools/c7n_azure #8626)
• releng - bump cryptography from 40.0.2 to 41.0.0 in /tools/c7n_openstack (Bump cryptography from 40.0.2 to 41.0.0 in /tools/c7n_openstack #8625)
• releng - docker fix c7n-left image build via poetry install for dependency group changes (releng - use poetry install rather than export for c7n-left docker image #8611)
• releng - format c7n_left and c7n_mailer python code with black "make format" command (releng - format c7n_left and c7n_mailer python code with "make format" command #8636)
• releng - release prep for 0.9.28.0 (releng - release prep for 0.9.28.0 #8658)
• releng - ruff whitespace config and github output (releng - ruff whitespace config and github output #8649)
• releng - update issue template for new providers (releng - update issue template for new providers #8655)

tools

• tools/c7n_mailer - refactoring and fix SendGrid duplicated emails (mailer - refactoring and fix SendGrid duplicated emails #8642)
• tools/c7n_mailer - strip newlines from slack token (Fix "invalid header value" error for Slack token #8645)
• tools/ops - fix mugc.py policy filtering (Update mugc.py #8670)

schema changes

• aws.ses-email-identity added
• aws.ses-receipt-rule-set added
• azure.monitor-log-profile added
• azure.recovery-services added
• gcp.app-engine-service added
• gcp.app-engine-service-version added
• gcp.bigtable-instance added
• gcp.bigtable-instance-cluster added
• gcp.bigtable-instance-cluster-backup added
• gcp.bigtable-instance-table added
• gcp.datafusion-instance added
• gcp.notebook added
• oci.bucket added
• oci.compartment added
• oci.cross_connect added
• oci.group added
• oci.instance added
• oci.subnet added
• oci.user added
• oci.vcn added
• oci.zone added
• aws.artifact-repo
  • added filters: json-diff
• aws.cloud-directory
  • added actions: delete, disable
• aws.directory
  • added actions: delete
• aws.ec2-spot-fleet-request
  • added filters: json-diff
• aws.event-bus
  • added actions: delete
• aws.firehose
  • added filters: json-diff
• aws.iam-certificate
  • added filters: config-compliance, json-diff
• aws.iam-saml-provider
  • added filters: config-compliance, json-diff
• aws.prefix-list
  • added filters: config-compliance, json-diff
• aws.ses-configuration-set
  • added actions: set-delivery-options
• aws.transit-attachment
  • added filters: metrics
• aws.vpc-endpoint
  • added filters: metrics
• azure.sql-server
  • added filters: transparent-data-encryption