0.9.48.0

[kapilt]

What's Changed

aws

• aws - account - add 'ami-block-public-access' filter (feat: Implement the 'ami-block-public-access' filter for AWS AMIs. #10377)
• aws - add 'iam-access-key' resource (feat: Implement the 'iam-access-key' resource in IAM. #10364)
• aws - add custom replica filter to the secretsmanager resource (add custom replica filter to the secretsmanager resource #10350)
• aws - add delete action for subnet (aws - add delete action for subnet #10296)
• aws - artifact-domain - fix cross account filter (aws - artifact-domain - fix cross account filter #10446)
• aws - cache-cluster - implement the 'upgrade-available' filter (feat: Implement the 'upgrade-available' filter for AWS ElastiCache. #10361)
• aws - core - consolidated query parsing (aws - consolidated query parsing #10388)
• aws - ebs - add Server-Side Query Filtering (Add Server-Side Query Filtering for EBS Volumes #10393)
• aws - firehose - delete action add support for suspended streams (added for suspended firehose stream too #10397)
• aws - fsx - delete-file-system support other fsx types (aws - fsx - delete-file-system support other fsx types #10391)
• aws - kafka - cross account filter (aws - kafka - cross account filter #10371)
• aws - kafka - upgrade-available (feat: Implement the 'upgrade-available' filter for AWS Kafka. #10360)
• aws - kms - add 'last-rotation' filter (feat: Implement the 'last-rotation' filter for AWS KMS. #10363)
• aws - lambda event source mapping (aws - lambda event source mapping #10293)
• aws - r53 domain - test data fix (R53 Test Data Fix #10403)
• aws - route53 domain - add a detail spec
• aws - schedule mode - strip version from eventbridge schedule target arn (fix: Strip version from eventbridge schedule target arn #10407)
• aws - secrets manager - Filter on attributes of current version (aws - secrets manager - Filter on attributes of current version  #10434)
• aws - service-quota - Add hard_limit support for service quota management (aws - service-quota: Add hard_limit support for service quota management #10331)
• aws - ssm-document - support everyone-only in cross-account filter (Fixed everyone_only support in SSMDocumentCrossAccount. #10413)
• aws - wafv2 set logging (aws - wafv2 set logging #10412)
• Add VPC Resolver Query Logging Filter (Add VPC Resolver Query Logging Filter #10167)
• Adding analytics-association filter for Connect instances (Adding analytics-association filter for Connect instances #10275)
• Adding support for AWS VPC Lattice resources (Adding support for AWS VPC Lattice resources #10341)
• feat: add action for app elb (feat: add action for app elb #10248)
• fix(guardduty): use correct key for administrator account (Fix GuardDuty administrator account key and rename variables from Master → Administrator #10376)
• Fixing KeyError in Comprehend cross-account filter when resource has no policy (Fixing KeyError in Comprehend cross-account filter when resource has no policy #10355)

azure

• azure - AKS / ACI Azure Container Host Enhancements (AKS / ACI Azure Container Host Enhancements #10395)
• azure - add 'elasticache-reserved' resource (feat: Implement the 'elasticache-reserved' resource in ElastiCache. #10369)
• azure - add base Entra ID support and the entraid-user resource (feat: Base Azure Entra ID support and the azure.entraid-user resource. #10357)
• azure - azure.keyvault-key: fix policy filter due to incompatible sdk update (azure - keyvault-key: fix policy filter #10368)
• azure - keyvault-key - add update action (azure - keyvault-key - add update action #9905)
• azure - update azure mgmt keyvault version (Update azure mgmt keyvault version #10352)
• azure - update azure mgmt security version (Update azure mgmt security version #10351)

core

• core - add GOVERNANCE.md to document project governance structure (Add GOVERNANCE.md to document project governance structure  #10320)

gcp

• gcp - add certificatemanager certificate support (gcp - add certificatemanager certificate support #10326)
• gcp - fix broken secret manager documentation link (fix: broken GCP Secret Manager resource documentation link #10438)
• gcp - update metric support for spanner resources (feat: Added get_metric_resource_name for GCP Spanner. #10374)

kubernetes

• kubernetes - enhanced PatchAction with save/restore functionality and improved error handling (Enhanced PatchAction with save/restore functionality and improved error handling #10288)

releng

• releng - 2025/10 increment versions and update dependencies (releng - 2025/10 increment versions and update dependencies #10383)
• releng - 🌱 bump github-actions group across 4 directories with 12 updates (🌱 Bump the github-actions group across 4 directories with 12 updates #10410)
• releng - azure - update azure-mgmt-sql to 3.x (feat: Upgraded azure-mgmt-sql to latest. #10421)
• releng - ensure dependabot scans reusable workflows (releng - ensure dependabot scans reusable workflows #10408)
• releng - fix ci installation cache check to avoid breakage (releng - fix ci installation cache check to avoid spurious package installs #10404)
• releng - make awscc build script is quiet by default (releng - make awscc build script is quiet by default #10405)
• releng - update dependencies 2025/11 (releng - update dependencies 2025/11 #10417)

tencentcloud:

• tencentcloud: fix metrics service name, enforce batching limits, and annotate resources with metrics (tencentcloud: fix metrics service name, enforce batching limits, and annotate resources with metrics #10337)

tools

• c7n_mailer - ensure template_folders are sorted to get same sha256sum each time (fix: Ensure template_folders are sorted to get same sha256sum each time #10387)

schema changes

• aws.elasticache-reserved added
• aws.iam-access-key added
• aws.lambda-event-source-mapping added
• aws.vpc-lattice-service added
• aws.vpc-lattice-service-network added
• aws.vpc-lattice-target-group added
• azure.entraid-user added
• gcp.certmanager-certificate added
• terraform._ added
• aws.account
  • added filters: ami-block-public-access
• aws.app-elb
  • added actions: delete-listener
• aws.cache-cluster
  • added filters: upgrade-available
• aws.connect-instance
  • added filters: analytics-association
• aws.kafka
  • added filters: cross-account, upgrade-available
• aws.kms-key
  • added filters: last-rotation
• aws.opswork-stack
  • removed filters: metrics
• aws.secrets-manager
  • added filters: current-version, replica-attribute
• aws.subnet
  • added actions: delete
• aws.vpc
  • added filters: resolver-query-logging
• aws.wafv2
  • added actions: set-logging
• azure.keyvault-key
  • added actions: update
• gcp.spanner-backup
  • removed filters: metrics
• gcp.spanner-database-instance
  • removed filters: metrics

New Contributors

• @vit-corp made their first contribution in Update azure mgmt security version #10351
• @yuzegao made their first contribution in tencentcloud: fix metrics service name, enforce batching limits, and annotate resources with metrics #10337
• @franzramadhan made their first contribution in gcp - add certificatemanager certificate support #10326
• @umairmkhan made their first contribution in Add GOVERNANCE.md to document project governance structure  #10320
• @linguini-dev made their first contribution in aws - add delete action for subnet #10296
• @toastdriven made their first contribution in feat: Implement the 'elasticache-reserved' resource in ElastiCache. #10369
• @licquia made their first contribution in feat: Base Azure Entra ID support and the azure.entraid-user resource. #10357
• @andrewhibbert made their first contribution in fix: Ensure template_folders are sorted to get same sha256sum each time #10387
• @SoyTecnopata made their first contribution in Enhanced PatchAction with save/restore functionality and improved error handling #10288
• @priscila-lugon made their first contribution in Add Server-Side Query Filtering for EBS Volumes #10393
• @ejohn20 made their first contribution in AKS / ACI Azure Container Host Enhancements #10395
• @KeisukeYamashita made their first contribution in fix: broken GCP Secret Manager resource documentation link #10438

Full Changelog: 0.9.47.0...0.9.48.0

---

This discussion was created from the release 0.9.48.0.