
►
From YouTube: Cloud Custodian Community Meeting 20211026
Description
Our community meeting is public and we encourage users and contributors of Cloud Custodian to attend! You can find the notes for this meeting on our github repo: https://github.com/cloud-custodian/community/discussions
To get an invite to the meeting join the google group and you'll receive one via email: https://groups.google.com/g/cloud-custodian
A
Here
we
go
hello,
everyone,
it
is
october,
26
2021,
and
this
is
the
cloud
custodian
community
meeting
I'll,
be
your
host
today,
george
castro,
just
a
reminder
that
this
meeting
is
under
the
cncf
code
of
conduct.
So
please
be
excellent
to
each
other
and
just
a
reminder
that
we
do
record
these
meetings
and
they
will
be
available
on
youtube
along
with
all
the
notes
after
we
are
done.
So
it's
been
a
while.
A
We
took
a
break
there
for
kubecon
cloud
data
governance's
code
day,
so
we
almost
have
a
in
a
month.
So
we've
got
a
an
agenda
with
a
lot
of
good
stuff
here
to
talk
about
both
kapila
and
mayor's.
Send
their
regards
are
not
a
temple
able
to
attend
today,
but
we'll
be
here
next
time.
So
we
like
to
have
introductions
and
things
like
that.
So
if
it's
your
first
meeting
or
you
want
to
say
hello,
this
is
the
time
where
we
do
that.
B
Sure
I'll
go,
my
name
is
liz
pronouns.
Are
she
her?
I
am
coming
at?
You
live
from
the
city
of
san
francisco
in
california
in
the
united
states.
I
am
a
developer
advocate
at
stacklit
and
I
really
love
pugs.
C
Sure
I'm
jameson
roberts
solutions
architect
here
at
stacklit
and
a
very
avid
cloud
custodian
fan
and
user
yeah.
That's
it.
A
A
I
don't
know
if
aj
was
reaching
for
the
mute
button
or
not.
Look
like
you
were
all
right.
Let's
get
started
all
right,
so
I
tossed
the
notes
url.
In
the
side
we
like
to
take
notes
of
everything
that
we
have
and
then
we
check
these
into
github
and
then
I
always
publish
these
notes
on
the
google
group
for
cloud
custodian,
which
you
can
find
a
link
to
on
the
website,
and
things
like
that.
A
So
if
you
could
scroll
down
a
little
bit
liz
to
like
the
agenda
items,
so
we
finished
the
intros
like
we
said,
welcome
back
and
we
have
some
agenda
items
first,
I
want
to
cover
governance's
code
day.
This
happened
last
week
on
tuesday
was
it
last
week,
two
weeks
ago,
two
weeks
ago,
time
flies
as
part
of
cubecon
cloud
nativecon.
A
We
had
incredible
turnout
over
2500
people
representing
over
50
countries.
Many
thanks
to
our
speakers
and
attendees.
I
know
a
lot
of
people
from
our
community
submitted
talks
and
we
were
able
to
get
some
fantastic
content
and
we're
luck
because
we
recorded
everything,
and
so,
if
you
weren't
able
to
attend,
there's
a
link
there
to
the
youtube
playlist
that
has
all
of
the
talks.
A
You
know
you
could
just
link
to
each
one
and
then
here
in
the
notes
I
put
umer,
did
like
a
blog
write-up
of
the
of
the
events.
If
you
want
to
look
for
like
the
summary-
and
he
has
a
link
to
all
the
individual
talks
there
as
well,
so
definitely
check
those
out
something
I
like
to
do
after
large
conferences,
you
can't
ever
watch
enough
because
there's
so
much
content
in
multiple
tracks,
a
pro
tip.
A
If
on
youtube,
you
can
set
your
playback
speed
to
1.25
and
you
can
get
through
a
lot
more
technical
content
quickly.
So
that's
how
I've
been
kind
of
trying
to
make
my
way
through
that
monster
playlist
so
definitely
check
that
out
and
semi-related
state
of
the
custodial.
One
of
those
talks
was
kapila
and
I
kind
of
doing
a
state
of
the
custodian.
A
So
if
you
are
using
custodian-
or
maybe
you
haven't
kept
up
with
development,
what
we
tried
to
do
the
mantra
for
this
talk
was:
let's
try
to
summarize
the
development
that's
been
happening
over
the
past
year.
So,
if
you're
interested
in
maybe
underdeveloped
features
that
you
know
you're
kind
of
wondering
where
they're
happening
or
what
the
state
is
of
azure,
google
kubernetes
all
that
kind
of
sort
of
stuff.
That
is
the
one
talk
I
would
recommend.
If
you
only
watch
one
talk,
that's
probably
the
one
to
watch.
A
So
that
has
a
lot
of
bunch
of
interesting
stuff
and
I
added
it
to
do
there.
I
still
need
to
export
the
slides
to
make
sure
that
we
put
that
there.
I
want
to
put
that
on
the
readme
list,
or
maybe
the
website.
I
don't
know
we
can
think
about
ideas
where
it
makes
sense.
Anybody
have
any
questions
or
comments
about
that
before
we
move
on.
B
A
All
right
awesome,
that's
always
good
to
know
yeah,
so
for
sure
we
have
those
on
youtube
and
share
them
with
a
friend
all
right.
Moving
on
to
the
the
usual
agenda,
we
have
our
regular
weekly
dot
sprint
sessions.
A
This
has
been
an
item
that
we've
been
wrestling
for
the
past
month
and
then
we
had
to
kind
of
take
a
break
for
for
qcon.
This
is
documenting
server,
side
filters,
and
this,
I
think,
is
pretty
much.
I
don't
know
if
you
want
to
open
the
link
to
show
people
but
6918
and
I'll
post.
The
link
in
chat.
B
A
Follow
along
so
this
is.
This
is
one
where
we
were
in
the
middle
of
getting
a
bunch
of
feedback
here,
and
I
think
I
just
need
to
accept
your
successes,
changes
and
merge
or
accept
your
suggested
changes
and
then
send
it
to
kapil
for
review.
I
think,
is
what
I
meant
to
say.
So
that
is
in
progress
and
for
those
of
you
who
are
not
aware,
we
do
every
friday
liz
and
I
kind
of
spend
an
hour.
A
We
grab
a
thing
that
we
think
is
annoying
in
in
the
documentation
or
maybe
there's
a
bug
report
and
a
user
says
something
is
confusing,
and
then
we
just
do
a
pr
on
the
spot
and
we
try
to
fix
it
documenting
service
drive.
Filters
has
taken
us
quite
a
long
time
because
we
had
to
go
unravel
it's
like
one
of
those
things.
A
You
keep
pulling
a
string,
and
then
you
find
another
thing
that
you
should
probably
document
and
then
that
pr
ended
up
getting
rather
large,
but
I'm
hoping
to
close
this
off
on
friday,
liz
or
aj.
You
were
reviewing
this
anything.
You
would
like
to
add,
or
any
color
here
on
this
one.
B
Nope
yeah,
I
just
added
all
my
suggestions,
so
yeah
yeah,
it
sounds
like
yeah
yeah.
No
and
it
sounds
like
yeah.
It
just
needs.
Some
extra
looks
at
it
or
eyeballs
on
it
and
yeah.
D
All
right,
I
think
my
main
thing
on
it
was
that
it's
kind
of
like
what
you're
saying
we
just
need
to
get
something
posted
out
there
and
keep
because
there's
a
it's
such
a
big
thing
and
it's
so
easy
to
become
unclear
that
there's
a
pull
to
just
keep
revising
the
heck
out
of
it
and
yeah
yeah.
Let's
just
get
it
up
there,
but
if
anybody
here
has
feedback,
if
anyone's
using
it
for
sure
have
look.
A
Yeah,
I'm
also
really
interested.
I
know
this
is
weird.
I've
never
done
a
git
commit
with
like
a
co-authored
field
and
I'm
really
interested
in
seeing
like
how
that
looks
like
on
like
the
github,
charts
and
stuff.
I
don't
know,
but
we're
figuring
it
out,
it's
great
all
right
anything
else.
Before
we
get
on
to
events.
A
All
right
re
invents
coming
up
anyone
know
for
sure
where
they're
going.
I
know
I'm
probably
going
to
go,
but
I
haven't
committed
quite
yet,
but
I
will,
by
the
end
of
the
week
anybody
else.
A
Okay,
well,
if
you're
listening
out
there
and
you
are
going
to
go
to
re,
invent
and
then
liz-
and
I
are
there-
definitely
reach
out
to
us-
we'd
love
to
take
you
out
to
dinner
or
something
or
stop
by
the
booth
or
you'll
find
us
frantically
preparing
our
demo
and
that
kind
of
thing
and
we
can
dive
in
and
we'll
show
you
some
some
examples
of
other
policies
and
things
that
we're
working
on
upcoming
cloud
custodian
day.
A
So
these
we
normally
do
on
the
regular
monthly
they've
been
on
pause
because
we're
preparing
for
kubecon
and
those
will
definitely
be
starting
up
here
again
in
november.
So
between
now
and
reinvent
and
the
holidays,
we
are
hoping
to
have
at
least
one
more,
but
we
don't
have
a
solid
date
yet,
but
in
the
notes
there
I
have
the
link
and
that's
when
we're
ready
to
do
that.
A
That
is
the
link
that
we
will
go
to
anything
else
on
events,
anyone
go
to
any
interesting
conferences
or
anything
to
report
or
anything
upcoming
where
you
you
want
to
see,
if
there's
a
local
custodian
person
to
me
meet
you
up
there,
so
I'm
pretty
much
myself,
I'm
100
focused
on
reinvent,
so
that's
where
I'm
going
to
be.
E
Yep
all
right,
so
I
may
go
to
re-invent,
I'm
still
working
with
my
manager
at
this
time
to
approve
all
the
funds
and
stuff.
My
thing
was,
you
know
I
was
wondering
if
you
can
have
a
workshop
at
the
arraignment.
You
know
how
to
use
the
other
scripts,
you
know
and
then
mailer
or
c7
trail
creator.
You
know
whatever
we
have.
Can
we
hit
those
workshops?
You
know
because
I
have
already
said
before.
E
Also
you
know
like
if
we
are
going
in
presents
you
know
we
want
something
that
we
can
see
and
interact
and
and
ask
questions
and
and
get
those
things
done.
Sure.
A
C
That
that's
a
great
idea.
We
also
do
liz
and
I
did
a
video
on
kubecon.
So
it's
in
that
link
that
george
posted
to
all
the
videos
on
the
cloud
custodian
tools.
C
So
we
cover
like
log
exporters,
c7n,
org,
mailer,
c7n,
trail
creator,
some
stuff,
like
that,
it's
more
at
a
high
level,
but
we
kind
of
show
some
use
cases
what
you
might
use
them
for,
so
that
might
be
a
good
place
to
get
started.
If
you
haven't
seen
that
video,
but
yeah
workshop
would
be
great
to
get
some
people's
hands
on.
E
Yeah
so
jamison,
I
have
seen
that
video,
that's
a
good
one,
but
again
I
want
to
see
their
working
mechanism.
You
know
the
step
by
step,
how
you
do
stuff
yeah.
A
B
So
we
are
actually
in
the
middle
of
planning
like
in
a
dance
class.
That's
going
to
be
covering
c7
and
org
like
more,
not
like
not
hands-on.
Like
a
workshop,
it's
like
a
class
about
it,
we'll
go
through
what
that
configuration
looks
like
and
how
to
use
it,
so
that
will
be
coming
up
in
november
and
in
november
2
right
now.
The
tentative
plan
is
to
roll
those
community
workshops
into
like
re
invent,
so
we
might
be
like
broadcasting.
B
Those
classes
live
from
re
invent
and
it'll
still
be
open
to
everyone,
but
yeah
hang
tight
because
yeah
those
advanced
classes
are
definitely
in
the
works.
A
Yeah
well,
and
if
you
are
going
to
be
at
re,
invent
physically,
of
course,
we'll
just
sit
down
and
give
you
a
peel
and
then
we'll
record
it
and
then
we'll
just
put
that
on
youtube.
Maybe
that'll
be
the
way
to
do
it,
but
yeah.
This
is
the
kind
of
feedback
that
that
I've
been
looking
for.
So
now
that
I
know
that
at
least
one
person
would
show
up
to
it.
A
Let's
yeah
I'll
need
to
see
who,
who
from
engineering
will
be,
will
be
able
to?
How
deep
can
you
go
on
tools,
liz.
A
Like
should
we
like,
how
deep
can
you
go
into
like
workshopping
tools
by
yourself
or
do
we
need
to
ask
a
jamison
or
aj
to
come
to
vegas.
B
I
mean
some
of
I
mean
I
could
I
could
go
yeah
I
mean
with
jamison
and
aj
and
all
of
y'all's
help.
I
could.
I
could
definitely
like
take
you
on
a
tour
of
a
couple
of
them
and
feel
comfortable
doing
that
so
yeah,
but
we're
working
like
I
said:
we're
working
on
the
class
for
g7n,
org
and.
D
E
A
We
have
two
more
of
these
meetings
before
reinvent
so
that'll
that'll
enable
us
to
kind
of
see
what
everyone's
travel
time
and
schedule
is
and
where
you're
staying
and
whatnot,
and
then
we
can
probably
figure
something
out,
and
I've
taken
note
of
that
as
well.
A
All
right
good
to
know
that
kind
of
handles
the
the
formal
agenda,
there's
a
few
more
things
that
that
we
did
want
to
tackle
that
are
in
github,
but
unfortunately,
since
kapil
can't
attend,
he
wanted
to
ensure
that
he
had
a
look
at
those
items.
So
we're
gonna
have
to
pump
those,
but
we
do
have
one
from
jameson
that
is
aws
subnet
resource
add
modify
subnet
action
that
he
wanted
some
feedback
from
the
community
on
and
liz.
C
Yeah,
if
you
could
scroll
down
a
little
bit
there,
we
go
so
this
proposal
for
feature
request
is
to
add
an
action
to
the
aws
subnet
resource
and
that
action
would
be
a
modify.
Subnet
action
which
relates
to
the
ec2
client,
modify,
subnet,
attribute,
block,
203
call
and
the
use
case
around
this
would
be
if
you
have
subnets
throughout
your
accounts,
where
maybe
they
didn't
get
set
up
correctly
or
what
not.
When
they're
you
know
set
to
map
public
ips
on
launch.
C
So
by
adding
the
modify
subnet
action
you'd
be
able
to
do
a
policy
similar
to
this
sample.
One
in
here
where
you
could
scan
all
subnets
find
ones
that
have
the
setting
of
map
public
ip
on
launch
set
to
true,
and
then
it
could
take
an
action
to
modify
those
identified
subnets
to
switch
the
map
public
ip
on
launch
to
false.
C
Therefore,
so
any
new
instances
and
stuff
launched
in
that
subject
would
not
automatically
be
assigned
public
ip
and
therefore
that
by
doing
that,
run
that
policy
that
would
help
secure
some
of
the
infrastructure
a
little
bit
by
default.
Instead
of
having
to
remediate
when
you
see
a
public
ip
pop
up
having
to
shut
it
down
or
remove
it
after
the
fact
just
prevents
it
from
automatically
launching
it
with
those
in
the
first
place.
C
A
C
B
C
There'd
be
other
settings,
you
could
modify
with
the
subnet
as
well.
I
don't
recall
what
all
those
are,
but
I
think
you
can
change
some
subnet
ids
and
let
me
look
at
that
again
here.
C
D
We
might
need
to
just
sync
up
on
the
the
naming
of
it,
because
I
think
I
think
we
have
set
attribute
type
actions.
I
just
want
to
make
sure
that
we
follow
whatever
convention
that
we're
using
for
other
resources.
When
we're
doing
these
attribute
tweaks.
It
looks
like
a
useful
thing
to
have.
C
Yeah
but
you
can
you'd
be
able
to
adjust.
You
know:
assigning
ipv6
addresses
on
creation
map
public
ips,
on
launch
the
map,
customer
owned
ip
on
launch
and
then
modify
the
customer
owned,
ipv4
pool
as
well.
So
a
few
different
things
you
can
use
it
for
not
just
for
the
map
public
ip
on
launch,
but
ipv4
and
ipv6
stuff.
A
All
right
and
sort
of
a
unanswerable
question
to
myself:
what's
what's
usually
the
next
step
here,
I
know
we
have
a
documenting
a
enhancements
process
in
our
backlog.
C
B
C
After
that
modify
subnet
feature
coming
to
a
custodian
near
you.
B
This
could
be
really
fun
for
me
to
take
because
it
sounds
like
it's
adding
and
I
know
in
the
contributor
docs.
I
think
that
there's
a
section
on
adding
stuff
like
this,
so
this
would
actually
be
kind
of
fun
and
go
back
to
the
thing
I
have
on
the
backlog
about
the
contributor
docs.
This
could
be
an
opportunity
for
me
to
walk
through
that
doing
that
going
through
the
stocks
and,
like
you
know,
going
through
it
and
seeing
where
we
can
improve
that
documentation
and
it
doesn't
seem
like
it's.
B
C
Not
a
ticket
with
it
being
an
open
source.
I
think
we
just
oh.
D
A
Process
might
just
be
what
kapil
did?
Is
you
put
kind,
slash
enhancement
on
the
label
and
we
call
it
a
day,
and
then
you
know
when
we
need
something
more
complicated,
we'll
do
something
more
complicated,
so
that
might
that
might
be
the
solution,
all
right,
that
pretty
much
wraps
it
up
for
things.
Does
anybody
have
anything
they'd
like
to
add
the
agenda
or
a
question
or
concern
or
anything
before
we
get
give
you
some
time
back.
D
I
would
have
a
quick
call
and
not
even
a
call
to
action,
a
call
to
thought.
I
guess
only
because
of
some
things
that
I've
been
noticing
recently.
I
I
just
came
across
a
an
action
and
james.
I
think
it
was
when
you-
and
I
were
talking
about
like
for
as
three
buckets
when
you
can
set
set
logging,
there's
a
there's,
a
parameter
where
it'll
it's
kind
of
smart,
about
pulling
in
a
bucket
region
and
doing
doing
the
right
thing,
and
there
was
no
example
policy
in
the
docs
that
included
that
option.
D
I
feel
like
that's
a
really
handy
pr,
to
make
an
example
clearer
or
to
add
a
useful
example.
That's
not
obvious,
so
whether
you
bring
it
up
in
getter,
make
a
vr
or
something
it
seems
like
a
really
nice
way.
If
you
just,
you
want
to
contribute
something
and
you're
not
where
to
go,
and
you
don't
know
where
to
go.
A
D
B
D
A
Yeah,
if
you
know
there's
an
example,
you
want
to
fix
and
you
don't
know,
and
you
reach
out
to
us
I'll,
we'll
figure
out
a
time
and
come
to
you
if
you're
right
here,
you
know
if
you're
willing
to
do
the
work.
We
will
come
to
you
on
that
one
but
yeah.
That
is.
That
is
a
great
idea,
call
for
thought.
We
are
using
that
from
now
on.
That
must
that
that
might
be
a
good
section
to
have
there
as
a
regular.
You
know
things
to
think
about
over
the
next
week.
Anything
else.
A
All
right
everybody
we
we
have
that
backlog
that
we're
going
to
continue
to
ignore
until
until
we
have
time
to
actually
get
to
some
of
this
stuff,
but
it's
generally
prioritized
in
order
by
things
that
need
to
be
scratched
and
with
that
we're
going
to
give
everybody
a
half
hour
back
thanks
everyone
for
taking
the
time
out
of
your
day,
as
always,
we'll
make
sure
we
document
all
this
stuff
and
send
it
out
on
the
list
and
do
make
sure
you
check
out
those
videos
because
there's
a
lot
of
great
stuff.