# Cloud Custodian 0.9.52.0

> Security · 2026-09-03

A broad multi-cloud release adds resource integrations, filters, and policy actions across AWS, Azure, and GCP, alongside correctness fixes and dependency updates. Operators should also review the LDAP input handling improvement and the behavior changes affecting existing configurations.

## Check if affected
- **[breaking]** The `Status` field, replaced by `State`
  - Applies if you configure `Status`.
  - The AWS `c7n-org` accounts configuration retires `Status` in favor of `State`.
- **[breaking]** The `SCM basic auth` method, replaced by an `Entra ID bearer token`
  - Applies if you use `SCM basic auth`.
  - Azure Functions replace `SCM basic auth` with an `Entra ID bearer token`.
- **[breaking]** The `cloud-run` label mutation fields, restricted to the schema
  - Applies if you use `cloud-run`.
  - The GCP `cloud-run` resource drops non-schema fields from label mutations.

## Other recorded changes
- 159 (added 119, defect_corrected 25, value_changed 10, constraint_changed 4, default_changed 1)

[Full analysis](https://ratatosk.io/en/releases/cloud-custodian/0.9.52.0)

[Original release notes](https://github.com/cloud-custodian/cloud-custodian/releases/tag/0.9.52.0)