0.9.46.0

[kapilt]

What's Changed

aws

• aws - account - add new action for setting sts config (Add action to set security token service preferences #10225)
• aws - add resource client-vpn-endpoint (aws - add resource client-vpn-endpoint #10257)
• aws - add vpc-endpoint-service-configuration resource (Add vpc endpoint service configuration resource #10220)
• aws - cross-account filter - support additional condition keys (aws - add cross-account filter conditions #10264)
• aws - delivery-destination - fix cross-account for destinations with no policy (aws - delivery-destination cross-account bugfix #10254)
• aws - invoke-lambda - use keyword args for assumed_session() call (Use keyword args for assumed_session() in invoke-lambda action #10252)
• aws - kms - Add UnsupportedOperationException handling for getRotationStatus (aws - kms - Add UnsupportedOperationException handling for getRotationStatus #10180)
• aws - kms-key - add schedule-deletion action (aws - kms-key - add schedule-deletion action  #10195)
• aws - opensearch-ingestion - pipeline-config filter (aws - opensearch-ingestion pipeline-config filter #10236)
• aws - policy-statement - more partial match (aws - policy-statement - more partial match #10115)
• aws - resolver-logs - skip operations on resources from other accounts (aws - resolver-logs - skip operations on shared resources #10169)
• aws - sesv2 - dedicated ip pool bug fix for get operation (aws - sesv2 - dedicated ip pool bug fix for get operation #10197)
• aws - quicksight-user delete (aws.quicksight-user delete #10224)
• aws - Enhancing Comprehend support with new job resources and KMS filter (Enhancing Comprehend support with new job resources and KMS filter #10251)

azure

• azure - defender-contacts - work around upstream sdk issue (Fix issue with azure defender-contacts #10216)
• azure - define default values for report metadata attributes (azure - define default values for report metadata attributes #10255)
• azure - storage - file services filter (add file services list item filter #10217)

docs

• docs - update from poetry to uv (docs - update developer docs for change from poetry to uv #10151)

releng

• releng - 2025.06 - version increment and dep upgrade (releng - 2025.06 - version increment and dep upgrade #10229)
• releng - 2025.07 - update deps for release / specifically twine >= 6 (releng - 2025.07 - update deps for release / specifically twine >= 6 #10258)
• releng - 🌱 Bump codecov/codecov-action in the github-actions group (🌱 Bump codecov/codecov-action from 5.4.2 to 5.4.3 in the github-actions group #10178)
• releng - 🌱 bump astral-sh/setup-uv in github-actions (🌱 Bump astral-sh/setup-uv from 5.4.2 to 6.3.1 in the github-actions group #10238)
• releng - add initial nix support via flake with uv (releng - add initial nix support via flake  #10148)
• releng - docker uv fixes (releng - docker uv fixes #10203)
• releng - releasee fixes for uv switch out (releng - fix for makefile build-wheel target - freezewheel script name #10260)
• releng - remove xfail marker on c7n-left test for issue 10119 (tests - remove xfail marker for c7n-left test_attribute_value_presence #10259)
• releng - switch out to uv (releng - switch out to uv #10140)
• releng - update dependencies for new tfparse (releng - update dependencies for new tfparse #10250)

tools

• tools/c7n_mailer - gcp attempt to prevent dupe delivery by ack'ing messages individually (Duplicate Notify Delivery by c7n-mailer in GCP env #10221)

schema changes

• aws.client-vpn-endpoint added
• aws.comprehend-document-classification-job added
• aws.comprehend-dominant-language-detection-job added
• aws.comprehend-entities-detection-job added
• aws.comprehend-events-detection-job added
• aws.comprehend-key-phrases-detection-job added
• aws.comprehend-pii-entities-detection-job added
• aws.comprehend-sentiment-detection-job added
• aws.comprehend-targeted-sentiment-detection-job added
• aws.comprehend-topics-detection-job added
• aws.vpc-endpoint-service-configuration added
• terraform._ added
• aws.account
  • added actions: set-security-token-service-preferences
• aws.comprehend-document-classifier
  • added filters: kms-key
• aws.comprehend-entity-recognizer
  • added filters: kms-key
• aws.comprehend-flywheel
  • added filters: kms-key
• aws.iam-oidc-provider
  • added filters: config-compliance, json-diff
• aws.identity-pool
  • added filters: json-diff
• aws.kms-key
  • added actions: schedule-deletion
• aws.memorydb-subnet-group
  • added filters: json-diff
• aws.opensearch-ingestion
  • added filters: pipeline-config
• aws.quicksight-user
  • added actions: delete
• azure.storage
  • added filters: file-services

New Contributors

• @hussainsultan made their first contribution in releng - add initial nix support via flake  #10148
• @Adelabumowe made their first contribution in Duplicate Notify Delivery by c7n-mailer in GCP env #10221
• @cdemers made their first contribution in aws - add resource client-vpn-endpoint #10257
• @germangarces made their first contribution in Use keyword args for assumed_session() in invoke-lambda action #10252

Full Changelog: 0.9.45.0...0.9.46.0

---

This discussion was created from the release 0.9.46.0.