Determine if user has high privileges (to be enhanced with role checks)

Given a message body from c7n, return a list of splunk indices to send notifications to. :param msg: c7n notification messag

Retry sending payload to splunk via ``_send_splunk`` up to ``config["splunk_max_attempts"]`` times, sleeping a random amount

Waits for a VM to exit transient states (Creating, Updating). Returns True if VM becomes stable, False if timeout occurs.

Analyze group member types (internal vs external/guest users). Required permission: GroupMember.Read.All, User.Read.All

Context manager for dealing with s3 errors in one place bid: bucket_id in form of account_name:bucket_name

Check user's risk level using Identity Protection API. Required permission: IdentityRiskyUser.Read.All

Return an iterator of policy changes along a commit lineage in a repo.

normalize tag format on ecs resources to match common aws format.

Handle various client side errors when describing images

Determine the immediate parent boolean operator for a filter

Return the entire zip file as a byte string.

preserve cli output options into serverless environment.

Get accurate owner count for a group using Graph API. Required permission: Group.Read.All

Get the parent container for the log sink

Convert ports range string to the set of integers Example: "10-12, 20" -> {10, 11, 12, 20}

Transform a list of port numbers to the list of strings with port ranges Example: [10, 12, 13, 14, 15] -> ['10', '12-15']

Get an active session in the target account.

take an list of dictionaries and merge them. last dict wins/overwrites on keys.

called when collection execution is about to start

A simplified iso8601 duration parser that only accepts one duration designator.

Resources preparation for transport. If we have sensitive or overly large resource metadata we want to remove or additional serializa

convert the tag to a dictionary, taking values as is This method name and purpose are opaque... and not true.