Cloud Custodian
0.9.53.0Security2026年10月1日
複数クラウドにまたがるリソースとアクションの対応範囲を広げ、正確性の修正も含むリリースです。既存の AWS および Kubernetes 連携の挙動にも変更があります。
要対応 (2)
breakingAWS 管理リソースのアクション対象外化
kmsとroute53では、AWS が管理するリソースをアクションの対象外にします。breaking
rename-tagアクションの削除aws.からcloudwatch-dashboard rename-tagアクションを削除しました。
その他の記録済み変更 30 件すべてadditions 20 · constraints 4 · fixes 4 · value changes 2
additions (20)
- * aws - bedrock-custom-model - add deployments filter by @jimfulton in https://github.com/cloud-custodian/cloud-custodian/pull/10944
- * aws - apigwv2 - add route resource for authorization type filtering by @scott-sixfeetup in https://github.com/cloud-custodian/cloud-custodian/pull/10476
- * aws - s3files - add file-system, mount-target and access-point resources by @rondodev in https://github.com/cloud-custodian/cloud-custodian/pull/10972
- * aws - s3tables - add table-bucket and table resources by @rondodev in https://github.com/cloud-custodian/cloud-custodian/pull/10973
- * aws - eventbridge - add event-connection resource by @rondodev in https://github.com/cloud-custodian/cloud-custodian/pull/11007
- * aws - ssm - add tagging support for managed instances, ops items, patch baselines, maintenance windows, and associations by @rondodev in https://github.com/cloud-custodian/cloud-custodian/pull/11093
- * aws - rds - add rds-global-cluster resource by @rondodev in https://github.com/cloud-custodian/cloud-custodian/pull/11092
- * aws - dsql-cluster - register consecutive-aws-backups filter by @rondodev in https://github.com/cloud-custodian/cloud-custodian/pull/11133
- * aws - aiops - add investigation group resource by @mattheidelbaugh in https://github.com/cloud-custodian/cloud-custodian/pull/10899
- * aws - qbusiness - add qbusiness resource types by @mattheidelbaugh in https://github.com/cloud-custodian/cloud-custodian/pull/10990
- * aws - budget - surface notifications and filter expression by @mrinalpravi in https://github.com/cloud-custodian/cloud-custodian/pull/11116
- * azure - machine-learning-data-container - add archive action by @jimfulton in https://github.com/cloud-custodian/cloud-custodian/pull/11063
- * azure - network-security-group - add remove-rules action by @liamade in https://github.com/cloud-custodian/cloud-custodian/pull/11137
- * azure - machine-learning-job - add cancel action by @jimfulton in https://github.com/cloud-custodian/cloud-custodian/pull/11059
- * gcp - kms-cryptokey - add update action by @jimfulton in https://github.com/cloud-custodian/cloud-custodian/pull/10910
- * gcp - add vertex-ai-metadata-store-artifact resource by @jimfulton in https://github.com/cloud-custodian/cloud-custodian/pull/11015
- * gcp - add workspace-user resource for Workspace MFA reporting by @jimfulton in https://github.com/cloud-custodian/cloud-custodian/pull/10950
- * kube - add custom-resource type for dynamic CRD discovery by @sontek in https://github.com/cloud-custodian/cloud-custodian/pull/11083
- * core - add a --vars-file parameter to inject variables by @adamsgoldsmith in https://github.com/cloud-custodian/cloud-custodian/pull/10939
- -
aws.- added filters: [account iot-logging](https://cloudcustodian.io/docs/aws/resources/account.html#aws-account-filters-iot-logging)
constraints (4)
- * azure - metric filter - support parent-scoped dimensions by @dreakj12 in https://github.com/cloud-custodian/cloud-custodian/pull/11101
- * azure - machine-learning-model-version - fetch anonymous model versions by @toastdriven in https://github.com/cloud-custodian/cloud-custodian/pull/11077
- * azure - machine-learning-job - include archived jobs by @jimfulton in https://github.com/cloud-custodian/cloud-custodian/pull/11100
- * gcp - dataproc-clusters - add audit mode support by @jimfulton in https://github.com/cloud-custodian/cloud-custodian/pull/10913
fixes (4)
- * aws - tagging - tolerate resources deleted mid-run by @ajkerrigan in https://github.com/cloud-custodian/cloud-custodian/pull/11089
- * aws - ec2 - ssm-compliance - honor advertised default for states by @anxkhn in https://github.com/cloud-custodian/cloud-custodian/pull/10883
- * aws - wafv2 - cloudfront fix by @jismail3000 in https://github.com/cloud-custodian/cloud-custodian/pull/11127
- * kube - fix resource listing to follow pagination continuation tokens by @sontek in https://github.com/cloud-custodian/cloud-custodian/pull/11081
value changes (2)
- * core - tags - standardize dynamic tagging support by @ajkerrigan in https://github.com/cloud-custodian/cloud-custodian/pull/10968
- * releng - :seedling: bump the python-requirements group across 1 directory with 17 updates by @dependabot[bot] in https://github.com/cloud-custodian/cloud-custodian/pull/11088
Cloud Custodianをスタックに追加
対応が必要なリリースが出たときに、週次メールでお知らせします。 今回の破壊的変更も、その一例です。