Owner

cloud-custodian

8 indexed repositories · View on GitHub

cloud-custodian
Rules engine for cloud security, cost optimization, and governance, DSL in yaml for policies to query, filter, and take actions on resources

Python · 6063 stars
cel-python
Pure Python implementation of the Common Expression Language

Python · 174 stars
pytest-terraform
pytest terraform plugin with fixtures and offline replay support

Python · 59 stars
tfparse
python extension for terraform hcl parsing

Go · 57 stars
poetry-plugin-freeze
poetry plugin to freeze dependency versions in wheels

Python · 29 stars
community
Cloud Custodian Community Content

Shell · 10 stars
helm-charts
Helm Charts

Smarty · 7 stars
examples

Jinja · 6 stars

Open All

1482 open issues indexed

lambda functions need garbage collection if removed from policy file Open

kind/enhancement

cloud-custodian/cloud-custodian#48 · 18 comments · 12 reactions · 0 assignees · Indexed Sep 15, 2026
include config file syntax Open

area/core kind/enhancement priority/P4-backlog scope/large

cloud-custodian/cloud-custodian#56 · 2 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026
ami lineage tracking Open

area/actions kind/enhancement priority/P2 provider/aws scope/large

cloud-custodian/cloud-custodian#57 · 1 comment · 0 reactions · 0 assignees · Indexed Sep 15, 2026
use lambda aliases for cwe targets Open

area/serverless kind/enhancement priority/P4-backlog scope/bitesize

cloud-custodian/cloud-custodian#131 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026
marked-for-op filter/action should allow explicit tz specification Open

area/filters kind/bug priority/P2 scope/small

cloud-custodian/cloud-custodian#132 · 1 comment · 0 reactions · 0 assignees · Indexed Sep 15, 2026
sns metrics/records relay Open

area/outputs kind/enhancement scope/large

cloud-custodian/cloud-custodian#133 · 1 comment · 0 reactions · 0 assignees · Indexed Sep 15, 2026
extend cloud-custodian to cover private IP address health check for Route53 Open

area/actions area/serverless kind/enhancement priority/P4-backlog scope/large status/0-triage

cloud-custodian/cloud-custodian#142 · 3 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026
python api Open

area/core help wanted kind/enhancement priority/P2 scope/medium

cloud-custodian/cloud-custodian#191 · 4 comments · 3 reactions · 0 assignees · Indexed Sep 15, 2026
docs / policy authoring guide Open

area/docs

cloud-custodian/cloud-custodian#197 · 3 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026
trusted advisor filters Open

area/filters kind/enhancement priority/P4-backlog

cloud-custodian/cloud-custodian#198 · 0 comments · 4 reactions · 0 assignees · Indexed Sep 15, 2026
ui dashboard for viewing results Open

cloud-custodian/cloud-custodian#200 · 10 comments · 1 reaction · 0 assignees · Indexed Sep 15, 2026
EBS volume rolling snapshot feature? Open

help wanted status/0-triage

cloud-custodian/cloud-custodian#226 · 4 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026
non iam-policy resource cross account access Open

area/filters help wanted

cloud-custodian/cloud-custodian#238 · 4 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026
structured/json logging Open

area/outputs kind/enhancement

cloud-custodian/cloud-custodian#282 · 1 comment · 0 reactions · 0 assignees · Indexed Sep 15, 2026
Treat tag search as case insensitive Open

area/filters scope/bitesize

cloud-custodian/cloud-custodian#298 · 5 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026
flush out support for missing resource types Open

kind/enhancement priority/P3 scope/epic

cloud-custodian/cloud-custodian#325 · 1 comment · 0 reactions · 0 assignees · Indexed Sep 15, 2026
annotate models with create and modify events per cloud trail Open

cloud-custodian/cloud-custodian#327 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026
swap on security groups on launch config/asg Open

area/actions provider/aws

cloud-custodian/cloud-custodian#357 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026
value_type day for day equality match on age Open

area/filters help wanted scope/bitesize

cloud-custodian/cloud-custodian#384 · 4 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026
add links to extant presentations and blog posts to readme or docs Open

area/docs

cloud-custodian/cloud-custodian#391 · 1 comment · 0 reactions · 0 assignees · Indexed Sep 15, 2026
diff and patch on iam user to role map, inline permissions and separately on role permissions Open

kind/enhancement provider/aws scope/large

cloud-custodian/cloud-custodian#394 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026
cfn deploy action with diff / optional apply using change groups Open

area/actions area/filters help wanted provider/aws scope/medium

cloud-custodian/cloud-custodian#398 · 1 comment · 0 reactions · 0 assignees · Indexed Sep 15, 2026
cli from config file Open

area/cli area/core help wanted

cloud-custodian/cloud-custodian#401 · 6 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026
periodic lambda for cw metrics fetch to s3 Open

area/outputs area/serverless

cloud-custodian/cloud-custodian#406 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026
emr validate filter / advanced settings and terminate action Open

area/actions area/filters

cloud-custodian/cloud-custodian#407 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026
Allow for automated integration testing of policies Open

kind/enhancement

cloud-custodian/cloud-custodian#455 · 13 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026
auto-group cloudtrail lambda policies by event Open

area/serverless kind/enhancement scope/large

cloud-custodian/cloud-custodian#470 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026
introduce delay options for mass ops Open

area/core

cloud-custodian/cloud-custodian#495 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026
put bucket policy resiliency to perm issue on bucket Open

provider/aws

cloud-custodian/cloud-custodian#498 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026
ec2 limit filters on account Open

area/filters help wanted kind/enhancement

cloud-custodian/cloud-custodian#516 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026
alarm enabled Open

area/filters kind/enhancement scope/large

cloud-custodian/cloud-custodian#521 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026
random select filter Open

priority/P4-backlog

cloud-custodian/cloud-custodian#524 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026
prefix all annotations w/ c7n- Open

area/core

cloud-custodian/cloud-custodian#612 · 1 comment · 0 reactions · 0 assignees · Indexed Sep 15, 2026
policy resource (meta) aka policies to find policies. Open

area/core

cloud-custodian/cloud-custodian#614 · 2 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026
support cwe s3 object events Open

cloud-custodian/cloud-custodian#658 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026
value filter should allow default specification if resource missing value Open

area/core area/filters kind/enhancement

cloud-custodian/cloud-custodian#673 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026
c7n mailer improvements Open

area/tools area/tools-mailer kind/enhancement

cloud-custodian/cloud-custodian#706 · 4 comments · 1 reaction · 0 assignees · Indexed Sep 15, 2026
ami copy-to-region & add-launch-permissions Open

area/actions kind/enhancement

cloud-custodian/cloud-custodian#744 · 2 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026
detect stale r53 cname/a* records for elbs Open

area/filters kind/enhancement provider/aws

cloud-custodian/cloud-custodian#762 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026
cis aws foundation policies Open

area/docs kind/enhancement

cloud-custodian/cloud-custodian#763 · 3 comments · 2 reactions · 0 assignees · Indexed Sep 15, 2026
Change remaining `maid` references Open

area/docs

cloud-custodian/cloud-custodian#779 · 13 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026
endpoint policy management Open

kind/enhancement provider/aws

cloud-custodian/cloud-custodian#870 · 1 comment · 0 reactions · 0 assignees · Indexed Sep 15, 2026
add tools script for generating iam policy for a custodian config file Open

area/cli kind/enhancement priority/P3

cloud-custodian/cloud-custodian#888 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026
Allow custodian to remove statements by content from an S3 bucket policy Open

cloud-custodian/cloud-custodian#889 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026
CI - run functional tests against live AWS Open

area/core kind/enhancement scope/large

cloud-custodian/cloud-custodian#903 · 19 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026
ingress/egress filter for network attached resources Open

area/filters scope/large

cloud-custodian/cloud-custodian#922 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026
custodian policy permissions tool ie generate iam policies needed Open

area/core area/tools scope/large

cloud-custodian/cloud-custodian#937 · 1 comment · 3 reactions · 0 assignees · Indexed Sep 15, 2026
support simple variable interpolation and passing a vars file Open

area/cli area/core kind/enhancement scope/large

cloud-custodian/cloud-custodian#938 · 6 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026
s3 encryption-policy - use custom policy Open

cloud-custodian/cloud-custodian#973 · 3 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026
Developer guide Open

area/docs

cloud-custodian/cloud-custodian#1006 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026

cloud-custodian

Get new issues in your inbox