The `region` argument is to allow functional tests to override the default region. It is unused when replaying stored data.

Safely initialize a repository class to a property. Args: repository_class (class): The class to initialize. version

jsonschema generation helper params: - type_name: name of the type - inherits: list of document fragments that are required via anyOf[$

Cache a session thread local for up to 45m

Helper method to load a policy

Format the report for output. If a source locator is specified, it is used to provide file and line number information for the policy

Check if a resource is locked. If a resource has an explicit status we use that, else we defer to the parent resource lock status.

Run the actual policy.

Execute a gcp serverless model

Generate URNs for the resources. A Uniform Resource Name (URN) is a URI that identifies a resource by name in a particular namespace.

Get the details on a given function.

Executes query (ex. get) via a dedicated http object. Args: verb (str): Method to execute on the component (ex. get, list).

Submit a function for serialized execution on sqs

Break an iterable into lists of size

Executes command (ex. add) via a dedicated http object. Async APIs may take minutes to complete. Therefore, callers are encouraged to

cli option filtering support --filters "type=aws_sqs_queue,aws_rds_* policy=*encryption* severity=high"

The filter has been superseded by another filter.

Default no-op

Decorator for retry boto3 api call on transient errors. https://www.awsarchitectureblog.com/2015/03/backoff.html https://en.wikipedia.org/wik

f: filter data/spec i: instance v: expected value (true/false)

Default no-op

Sample arn: arn:aws:apigateway:us-east-1::/restapis/rest-api-id This method overrides c7n.utils.generate_arn and drops acc

Helper method to load a policy

Return a temporary directory that will get cleaned up.