RATATOSKRATATOSK
Sign in

Cloud Custodian

0.9.53.0Security
Oct 1, 2026

ACTION 2OTHER 30

A feature-rich release expands resource and action coverage across AWS, Azure, GCP, Kubernetes, and core functionality. It also includes correctness fixes and behavior changes in existing AWS and Kubernetes integrations.

Action needed (2)

  • breakingAWS-managed resource exclusion for kms and route53 actions

    Actions for kms and route53 now exclude AWS-managed resources.

    cloud-custodian#11050

  • breakingThe rename-tag action, removed from aws.cloudwatch-dashboard

    The aws.cloudwatch-dashboard resource no longer supports the rename-tag action.

All 30 other recorded changesadditions 20 · constraints 4 · fixes 4 · value changes 2

additions (20)

  • * aws - bedrock-custom-model - add deployments filter by @jimfulton in https://github.com/cloud-custodian/cloud-custodian/pull/10944
  • * aws - apigwv2 - add route resource for authorization type filtering by @scott-sixfeetup in https://github.com/cloud-custodian/cloud-custodian/pull/10476
  • * aws - s3files - add file-system, mount-target and access-point resources by @rondodev in https://github.com/cloud-custodian/cloud-custodian/pull/10972
  • * aws - s3tables - add table-bucket and table resources by @rondodev in https://github.com/cloud-custodian/cloud-custodian/pull/10973
  • * aws - eventbridge - add event-connection resource by @rondodev in https://github.com/cloud-custodian/cloud-custodian/pull/11007
  • * aws - ssm - add tagging support for managed instances, ops items, patch baselines, maintenance windows, and associations by @rondodev in https://github.com/cloud-custodian/cloud-custodian/pull/11093
  • * aws - rds - add rds-global-cluster resource by @rondodev in https://github.com/cloud-custodian/cloud-custodian/pull/11092
  • * aws - dsql-cluster - register consecutive-aws-backups filter by @rondodev in https://github.com/cloud-custodian/cloud-custodian/pull/11133
  • * aws - aiops - add investigation group resource by @mattheidelbaugh in https://github.com/cloud-custodian/cloud-custodian/pull/10899
  • * aws - qbusiness - add qbusiness resource types by @mattheidelbaugh in https://github.com/cloud-custodian/cloud-custodian/pull/10990
  • * aws - budget - surface notifications and filter expression by @mrinalpravi in https://github.com/cloud-custodian/cloud-custodian/pull/11116
  • * azure - machine-learning-data-container - add archive action by @jimfulton in https://github.com/cloud-custodian/cloud-custodian/pull/11063
  • * azure - network-security-group - add remove-rules action by @liamade in https://github.com/cloud-custodian/cloud-custodian/pull/11137
  • * azure - machine-learning-job - add cancel action by @jimfulton in https://github.com/cloud-custodian/cloud-custodian/pull/11059
  • * gcp - kms-cryptokey - add update action by @jimfulton in https://github.com/cloud-custodian/cloud-custodian/pull/10910
  • * gcp - add vertex-ai-metadata-store-artifact resource by @jimfulton in https://github.com/cloud-custodian/cloud-custodian/pull/11015
  • * gcp - add workspace-user resource for Workspace MFA reporting by @jimfulton in https://github.com/cloud-custodian/cloud-custodian/pull/10950
  • * kube - add custom-resource type for dynamic CRD discovery by @sontek in https://github.com/cloud-custodian/cloud-custodian/pull/11083
  • * core - add a --vars-file parameter to inject variables by @adamsgoldsmith in https://github.com/cloud-custodian/cloud-custodian/pull/10939
  • - aws.account - added filters: [iot-logging](https://cloudcustodian.io/docs/aws/resources/account.html#aws-account-filters-iot-logging)

constraints (4)

  • * azure - metric filter - support parent-scoped dimensions by @dreakj12 in https://github.com/cloud-custodian/cloud-custodian/pull/11101
  • * azure - machine-learning-model-version - fetch anonymous model versions by @toastdriven in https://github.com/cloud-custodian/cloud-custodian/pull/11077
  • * azure - machine-learning-job - include archived jobs by @jimfulton in https://github.com/cloud-custodian/cloud-custodian/pull/11100
  • * gcp - dataproc-clusters - add audit mode support by @jimfulton in https://github.com/cloud-custodian/cloud-custodian/pull/10913

fixes (4)

  • * aws - tagging - tolerate resources deleted mid-run by @ajkerrigan in https://github.com/cloud-custodian/cloud-custodian/pull/11089
  • * aws - ec2 - ssm-compliance - honor advertised default for states by @anxkhn in https://github.com/cloud-custodian/cloud-custodian/pull/10883
  • * aws - wafv2 - cloudfront fix by @jismail3000 in https://github.com/cloud-custodian/cloud-custodian/pull/11127
  • * kube - fix resource listing to follow pagination continuation tokens by @sontek in https://github.com/cloud-custodian/cloud-custodian/pull/11081

value changes (2)

  • * core - tags - standardize dynamic tagging support by @ajkerrigan in https://github.com/cloud-custodian/cloud-custodian/pull/10968
  • * releng - :seedling: bump the python-requirements group across 1 directory with 17 updates by @dependabot[bot] in https://github.com/cloud-custodian/cloud-custodian/pull/11088
Add Cloud Custodian to your stack

A weekly email arrives when a release needs action. Like the breaking changes in this release.

Add to stack →
Official release note ↗All Cloud Custodian releases →