Repository navigation

Parity sweep: burn down items_still_open across all AWS services (685 → 161) - #2482

Merged

agbishop merged 178 commits into

mainfrom

chore/parity-sweep-2026-10-07

Oct 13, 2026

Merged

Parity sweep: burn down items_still_open across all AWS services (685 → 161)#2482
agbishop merged 178 commits into
mainfrom
chore/parity-sweep-2026-10-07

Commits on Oct 8, 2026
- docs(iam): adjudicate items_still_open into structural vs unverifiable
  
  Witness Patrol
  and
  claude
  committed
  6fc4ac1
- fix(ssm): record caller ARN on parameters, settings and OpsItems; check SyncType on DeleteResourceDataSync
  
  Witness Patrol
  and
  claude
  committed
  3c1c358
- fix(cloudwatchlogs,iot): record query UserIdentity, reject bad PutLogEvents Entity keys, filter ListJobs by namespace
  
  Witness Patrol
  and
  claude
  committed
  145eb31
- fix(sagemaker): opaque list tokens, caller UserContext, UpdateProject details, SDK-valid VariantStatus
  
  Witness Patrol
  and
  claude
  committed
  9e70d3a
- fix(redshift,stepfunctions): non-cluster resource tags, cluster rename, state machine TimeoutSeconds
  
  Witness Patrol
  and
  claude
  committed
  da52afb
- fix(docdb,cleanrooms,rds): global cluster membership and failover, cluster restore inheritance, receiver configs
  
  Witness Patrol
  and
  claude
  committed
  0baf90c
- fix(fsx,codeartifact): ClientRequestToken idempotency, required SubnetIds, OpenZFS volume config, domain-owner checks
  
  Witness Patrol
  and
  claude
  committed
  a29457c
- fix(s3,kinesis,xray,quicksight): append writes, computed metadata config, shard metrics, DryRun
  
  Witness Patrol
  and
  claude
  committed
  ec89beb
- fix(codepipeline,cloudtrail,awsconfig,appsync): custom action jobs, lake aggregates, conformance pack params
  
  Witness Patrol
  and
  claude
  committed
  49fa96b
- fix(firehose,kafka,verifiedpermissions,workspaces): delivery metrics, Splunk failures, replicator Apache Kafka clusters
  
  Witness Patrol
  and
  claude
  committed
  3a5dba6
- fix(ec2,dms,elasticbeanstalk,inspector2): ComposeEnvironments, endpoint settings, aggregations, remaining filters
  
  Witness Patrol
  and
  claude
  committed
  161f3b7
- fix(athena,appstream,accessanalyzer,vpclattice): workgroup feature configs, AppBlockArn checks, finding filters
  
  Witness Patrol
  and
  claude
  committed
  d626d70
- fix(swf,securityhub,neptune,redshiftdata,opsworks): task timeouts, sticky task lists, V2 filters, session expiry
  
  Witness Patrol
  and
  claude
  committed
  4e66670
- fix(cognitoidp,ecs,directoryservice,eks): ClientMetadata to triggers, token revocation, port ranges, async states
  
  Witness Patrol
  and
  claude
  committed
  d38d9b5
- fix(glue,lakeformation,guardduty,datasync): workflow run options, per-catalog settings, org feature stats
  
  Witness Patrol
  and
  claude
  committed
  7083769
- fix(lambda,lightsail,medialive,memorydb,mediatailor): Lambda metrics, qualified function URLs, PITR restore
  
  Witness Patrol
  and
  claude
  committed
  884038b
- fix(batch,bedrockagent,apigatewayv2,account,acm): array and multi-node jobs, flow validation, WS metrics
  
  Witness Patrol
  and
  claude
  committed
  d7e173a
- fix(s3control,timestreamquery): GetDataAccess vends grant-checked credentials, outpost bucket ARNs, SelectColumn metadata
  
  Witness Patrol
  and
  claude
  committed
  f0586c2
- fix(eventbridge,rdsdata,networkmanager,managedblockchain): delivery metrics and DLQ attributes, per-database SQLite, Ethereum nodes
  
  Witness Patrol
  and
  claude
  committed
  542f2a8
- fix(elasticache,elasticsearch,directconnect,comprehend,codedeploy,detective): replication-group topology, domain processing windows, endpoint devices
  
  Witness Patrol
  and
  claude
  committed
  a0e38a5
- feat: cross-service wiring for managed master secrets, subnet networks, ECS health and metrics, SWF Lambda tasks
  
  Witness Patrol
  and
  claude
  committed
  901dde9
- fix(codebuild,ce,backup,acmpca,wafv2,transcribe,ssoadmin): build matrices, cost drivers, job summary aggregation, CSR passthrough
  
  Witness Patrol
  and
  claude
  committed
  db4aafd
- feat: wire MACsec secrets, ES subnet lookups, TGW peering route analysis, MQ RAM shares, Logs target authz
  
  Witness Patrol
  and
  claude
  committed
  8683b01
- fix(resourcegroups,route53resolver,sesv2,sagemakerruntime,rekognition,resourcegroupstaggingapi,sqs): live resource queries, delegation endpoints, invoke target validation
  
  Witness Patrol
  and
  claude
  committed
  b51db3f
- fix(ram,omics,kms,secretsmanager,iotdataplane,mwaa): unmatched-permission promote, run options, XKS keys, owning service
  
  Witness Patrol
  and
  claude
  committed
  a9f07aa
- fix(dynamodb,elbv2,ecr,efs,forecast): vector indexes and SearchVectors, target group attribute defaults, foreign registry checks
  
  Witness Patrol
  and
  claude
  committed
  dd5fa77
- fix(pinpoint,glacier,databrew,cognitoidentity,iotwireless,cloudwatch,...): template versions, Select SQL expressions, vault policy enforcement, JWT OpenID tokens
  
  Witness Patrol
  and
  claude
  committed
  1b5e4f5
- fix(apigateway,translate,autoscaling,bedrock,sns,shield,waf,...): response cache, real TestInvokeAuthorizer, translation jobs over S3, AZ ids
  
  Witness Patrol
  and
  claude
  committed
  775d645
- fix(scheduler,cloudfront,appmesh,s3tables,apprunner,...): Quartz L/W/# cron tokens fire, function LIVE stage, deep spec validation
  
  Witness Patrol
  and
  claude
  committed
  b8b41f7
- fix(emr,networkmonitor,resiliencehub,polly,...): IdleTimeout auto-termination, probe VpcId from EC2, import source resolution test
  
  Witness Patrol
  and
  claude
  committed
  ac8dd27
- fix(sts,sagemaker): trust policy Numeric/IpAddress/Binary operators with aws:SourceIp, SDK-validated opaque configs, variant scaling and routing
  
  Witness Patrol
  and
  claude
  committed
  57739dd
- feat: wire tagging coverage, omics S3 sources, FIS target resolution, EFS free addresses, transformed insight logs
  
  Witness Patrol
  and
  claude
  committed
  a790810
- fix(cloudformation,stepfunctions): template and policy URLs from S3, NotAction/NotResource, AWS_TYPES listing, TaskStarted/TaskSubmitted
  
  Witness Patrol
  and
  claude
  committed
  4f06fd5
- feat(ec2,ecs,cognitoidp): regional NAT gateways, lattice VPC endpoints, blue/green lifecycle, device SRP auth
  
  Witness Patrol
  and
  claude
  committed
  0903a74
- feat: wire API Gateway AWS-service integrations, SNS-to-SQS failure metrics, KMS key state, CloudControl delegation
  
  Witness Patrol
  and
  claude
  committed
  16ca763
- fix(codepipeline,cloudtrail,iotwireless,pinpoint,databrew,sagemaker,sts): stage condition engine, Lake joins and set ops, no fabricated position estimate
  
  Witness Patrol
  and
  claude
  committed
  f7acaa8
- fix(s3,dynamodb): MD5/SHA512 and multipart object checksums, Object Lambda routing, WarmThroughput, statement and stream metrics
  
  Witness Patrol
  and
  claude
  committed
  7f30c9d
- fix(iot,iotdataplane,cloudwatchlogs,s3control): broker lifecycle reporting, direct-message acks, managed data identifiers, Object Lambda registration
  
  Witness Patrol
  and
  claude
  committed
  c254d22
- feat: wire CloudFormation DirectConnect resources and OU stamping, VPC Lattice endpoint associations, ECS hooks and alarms, more CloudControl types
  
  Witness Patrol
  and
  claude
  committed
  ec7734e
- fix(s3,iot): Object Lambda HeadObject/ListObjects routing, domain configuration certificates, bounded broker close
  
  Witness Patrol
  and
  claude
  committed
  52ea5e0
- fix(lambda,kms,ssm,directconnect): Zip PackageType default, multi-generation imported key material, inventory schema delete options, CFN property shapes
  
  Witness Patrol
  and
  claude
  committed
  8296129
- feat: wire IoT domain certificate status from ACM and rule SQL decode proto from S3
  
  Witness Patrol
  and
  claude
  committed
  fe4d58c
- fix(directconnect): CloudFormation LAGs start empty and VIF BGP settings come from BgpPeers
  
  Witness Patrol
  and
  claude
  committed
  55e3b6e
- chore(beads): close parity sweep tracking issue, file remaining-items follow-up
  
  Witness Patrol
  and
  claude
  committed
  c6c12b6
Commits on Oct 9, 2026
- fix: CI failures and CodeQL alerts on the parity sweep
  
  Witness Patrol
  and
  claude
  committed
  d8f09ff
- fix(stepfunctions,ssm,cloudwatchlogs,awsconfig): Athena manifests, documented metrics, inventory schemas, recorder validation
  
  Witness Patrol
  and
  claude
  committed
  e6315eb
- fix(codeartifact,efs,xray,apigatewayv2,quicksight,bedrockruntime,kinesisanalyticsv2): publish restrictions, regional throughput quotas, policy lockout, service graph histograms
  
  Witness Patrol
  and
  claude
  committed
  d35eacd
- fix(docdb,ec2,rdsdata): parameter AllowedValues and audit_logs, attached EBS status, documented response caps
  
  Witness Patrol
  and
  claude
  committed
  ef6ebea
- fix(s3,lambda,cloudformation,iot,networkmanager): MFA Delete, Object Lambda identity and features, PublishTo, TenantId, NetworkManager CFN types
  
  Witness Patrol
  and
  claude
  committed
  5ce57ce
- fix(cloudtrail): record error code and message for XML and CBOR error bodies
  
  Witness Patrol
  and
  claude
  committed
  3c2d082
- feat(ec2,dynamodb,ecs,appconfig,eks,kms,...): Allowed AMIs evaluation, replica wire names, hook payloads, extension actions
  
  Witness Patrol
  and
  claude
  committed
  e75cce6
- feat(appconfig,elbv2,sns,servicediscovery,...): deployment extension action points, SSL policy catalogue, filtered-out metrics, quotas
  
  Witness Patrol
  and
  claude
  committed
  2e1478d
- feat(cloudformation,ram,organizations,iot,lambda): async stack-set operation lifecycle, account-leave share revocation, ESM metrics
  
  Witness Patrol
  and
  claude
  committed
  67f5f1c
- fix(glue,mgn,managedblockchain,resourcegroups,vpclattice,batch,iotdataplane): attribute projection, import columns, quotas, stack type support
  
  Witness Patrol
  and
  claude
  committed
  6957587
- feat(glue,mgn,batch): conditional triggers fire on completion, imported launch template settings, EcsClusterArn backfill
  
  Witness Patrol
  and
  claude
  committed
  7f41a79
- feat(lambda,cloudwatchlogs): stream ESM retries and on-failure destinations, ESM logging and lag metrics, format-based data identifiers
  
  Witness Patrol
  and
  claude
  committed
  54765ac
- feat: wire ES processing delay, MQ broker reconfiguration via container exec, EKS Identity Center apps, Lambda ESM S3 destination
  
  Witness Patrol
  and
  claude
  committed
  3b5802a
- chore(beads): update remaining parity items follow-up
  
  Witness Patrol
  and
  claude
  committed
  2fac4d9
- feat(cloudcontrol): delegate EC2, ECS, ELBv2, Route 53, CloudWatch, Cognito, API Gateway, EFS and Glue types; CodeQL guards
  
  Witness Patrol
  and
  claude
  committed
  628f962
- test(cloudformation): wait for queued stack-set operations before asserting
  
  Witness Patrol
  and
  claude
  committed
  b05b4a8
- test(cloudformation): make custom-resource and wait-condition tests clock-independent
  
  Witness Patrol
  and
  claude
  committed
  56811bf
- fix(cloudcontrol): align delegated types with the CloudFormation resource schemas
  
  Witness Patrol
  and
  claude
  committed
  a9f6cf8
- fix(ec2,apigateway): stop dropping CreateSubnet/ModifySubnetAttribute and CreateRestApi members
  
  Witness Patrol
  and
  claude
  committed
  6a66e21
- feat(cloudcontrol): map target group targets/attributes, hosted zone features, alarm windows, user pool MFA, EFS replication, subnet IPv6
  
  Witness Patrol
  and
  claude
  committed
  f5cf544
- docs(cloudcontrol): regenerate README from PARITY.md
  
  Witness Patrol
  and
  claude
  committed
  71bfa02
- fix: narrow int32 conversions through a 32-bit parse for CodeQL
  
  Witness Patrol
  and
  claude
  committed
  4ed6291
- chore(deps): bump golang.org/x/net to v0.60.0
  
  Witness Patrol
  and
  claude
  committed
  094d06a
Commits on Oct 10, 2026
- ci: run govulncheck in binary mode
  
  Witness Patrol
  and
  claude
  committed
  c6d1ce0
- ci: dedupe govulncheck SARIF stacks and scan with the latest Go 1.27 patch
  
  Witness Patrol
  and
  claude
  committed
  59f990b
- ci: anchor binary-mode govulncheck findings to go.mod for code scanning
  
  Witness Patrol
  and
  claude
  committed
  8b91237
- refactor: resolve CodeFactor findings (fsx cloneBackup, CloudControl test complexity)
  
  Witness Patrol
  and
  claude
  committed
  b0bd527
- test(cloudcontrol): split the delegation case table into per-family builders
  
  Witness Patrol
  and
  claude
  committed
  fdd131f
- feat: deliver EventBridge, Pipes and Scheduler job/build targets; bound ArrayPartition capacity
  
  Witness Patrol
  and
  claude
  committed
  6c391ae
- fix(s3,sns,dynamodb,sqs,kinesis,secretsmanager,ssm,cloudwatchlogs): realism pass on core data services
  
  Witness Patrol
  and
  claude
  committed
  b3462b2
- feat: API Gateway and API destination targets, Scheduler universal aws-sdk targets, regional Batch targets
  
  Witness Patrol
  and
  claude
  committed
  9d4e529
- fix(route53,iam,kms,ecs,elbv2,lambda,ecr,sts): realism pass; clear CodeQL request-forgery and overflow alerts
  
  Witness Patrol
  and
  claude
  committed
  a7fc63e
- fix(ec2,rds,cognitoidp,elasticache,efs): realism pass on compute, database and identity services
  
  Witness Patrol
  and
  claude
  committed
  1526d70
- docs: regenerate root README
  
  Witness Patrol
  and
  claude
  committed
  159e4ca
- fix(cloudformation,eventbridge,athena,glue,apigatewayv2): realism pass on orchestration and analytics services
  
  Witness Patrol
  and
  claude
  committed
  4fb50e0
- fix(stepfunctions,apigateway,firehose,codebuild,appsync): realism pass; deflake rdsdata continue-after-timeout
  
  Witness Patrol
  and
  claude
  committed
  64e552e
- chore(beads): close rdsdata flake
  
  Witness Patrol
  and
  claude
  committed
  aceb420
- docs: regenerate root README
  
  Witness Patrol
  and
  claude
  committed
  e7c164e
- fix(opensearch,codedeploy,codepipeline,acm,mq,servicediscovery): realism pass on deployment and platform services
  
  Witness Patrol
  and
  claude
  committed
  bb81ea7
- docs: regenerate root README
  
  Witness Patrol
  and
  claude
  committed
  18f5c94
- fix(cloudfront,wafv2,sesv2,transfer,iot): realism pass on edge, email and device services
  
  Witness Patrol
  and
  claude
  committed
  c4969d0
- fix: realism pass on xray, appconfig, tagging, memorydb, kafka, backup, neptune; lifecycle delay setters
  
  Witness Patrol
  and
  claude
  committed
  b32b27b
- feat: lifecycle delay knobs; docdb realism pass; clear CodeQL request-forgery, logging and overflow alerts
  
  Witness Patrol
  and
  claude
  committed
  a6ca6c2
- fix(organizations,ram,ssoadmin,identitystore,cognitoidentity): realism pass on identity and governance services
  
  Witness Patrol
  and
  claude
  committed
  74e7e12
- fix(batch,emr,emrserverless,datasync,dms): realism pass on batch and data-movement services
  
  Witness Patrol
  and
  claude
  committed
  0459325
- fix(guardduty,securityhub,awsconfig,cloudtrail,inspector2): realism pass on security and compliance services
  
  Witness Patrol
  and
  claude
  committed
  8d5d509
- fix(quicksight,workspaces,lakeformation,scheduler,pipes): realism pass on analytics, desktop and scheduling services
  
  Witness Patrol
  and
  claude
  committed
  8c9766e
- fix: route botocore namespaced X-Amz-Target for CloudTrail, CodeConnections and CodeStar Connections
  
  Witness Patrol
  and
  claude
  committed
  464ea3e
- fix(awserr,s3control,kinesisanalyticsv2,ses,glacier,lakeformation): single XML declaration on query/restxml errors; realism pass
  
  Witness Patrol
  and
  claude
  committed
  7043ec2
- fix(apprunner,amplify,appmesh,mediaconvert): realism pass on app hosting and media services
  
  Witness Patrol
  and
  claude
  committed
  5158707
- feat: lifecycle delay knobs for WorkSpaces, QuickSight, App Runner and Kinesis Analytics v2
  
  Witness Patrol
  and
  claude
  committed
  f543fb3
- fix(sagemaker,bedrock,bedrockagent): realism pass on ML services
  
  Witness Patrol
  and
  claude
  committed
  9ba1c78
- fix(medialive,mediatailor,timestream,ce): realism pass; drop computed capacity hints flagged by CodeQL
  
  Witness Patrol
  and
  claude
  committed
  a078bce
- fix(elasticbeanstalk,codecommit,codeartifact,route53resolver,directoryservice): realism pass; more lifecycle knobs
  
  Witness Patrol
  and
  claude
  committed
  ccd0510
- fix(fsx,account,shield,waf,networkmanager): realism pass on storage, edge protection and account services
  
  Witness Patrol
  and
  claude
  committed
  458e0dd
- fix: JSON error bodies carry both message and Message so schema-serde SDK clients see the text
  
  Witness Patrol
  and
  claude
  committed
  0226ddb
- fix(rekognition,comprehend,translate,textract,polly,transcribe): realism pass on AI services
  
  Witness Patrol
  and
  claude
  committed
  35fadad
- feat(polly,transcribe,textract,comprehend): write async job outputs to S3
  
  Witness Patrol
  and
  claude
  committed
  a78b3d3
- fix(iotdataplane,iotwireless,iotanalytics,mediastore,mediastoredata): realism pass; AI-service lifecycle knobs
  
  Witness Patrol
  and
  claude
  committed
  651bd44
- fix(cloudwatch,autoscaling,applicationautoscaling,eks,dynamodbstreams): realism pass on monitoring and scaling services
  
  Witness Patrol
  and
  claude
  committed
  5c45177
- fix(redshift,redshiftdata,swf,dax,pinpoint): realism pass; autoscaling, eks and more lifecycle knobs
  
  Witness Patrol
  and
  claude
  committed
  44b54d4
- fix(dynamodb,dynamodbstreams,elb,lightsail,kinesisvideo,ecrpublic): disabled streams stay readable; realism pass
  
  Witness Patrol
  and
  claude
  committed
  6aa2e58
- fix(vpclattice,verifiedpermissions,kafkaconnect,elasticsearch,grafana): realism pass; lifecycle knobs
  
  Witness Patrol
  and
  claude
  committed
  a6b0d8d
- fix: start janitor tickers synchronously; realism pass on acmpca, accessanalyzer, appstream, dlm, fis
  
  Witness Patrol
  and
  claude
  committed
  ac04b91
- fix(workmail,personalize,opsworks,outposts,support): realism pass on productivity and ML-ops services
  
  Witness Patrol
  and
  claude
  committed
  870a489
- fix(elb,macie2,dsql,detective): ELB instance health from EC2 state; realism pass
  
  Witness Patrol
  and
  claude
  committed
  f568e23
- feat: lifecycle delay knobs for acmpca, accessanalyzer, appstream, fis, dsql, macie2, detective, workmail, personalize, opsworks, outposts, support
  
  Witness Patrol
  and
  claude
  committed
  8f9f1e3
- fix(sagemakerruntime,bedrockruntime,s3tables,cloudfrontkeyvaluestore): realism pass on data planes; resolve cross-service lookups lazily
  
  Witness Patrol
  and
  claude
  committed
  f9daf00
- fix(cloudwatchlogs,bedrock): resolve the S3 export sink lazily; pattern-conformant guardrail ids
  
  Witness Patrol
  and
  claude
  committed
  ecad7dd
- fix(omics,mwaa,resiliencehub,databrew,mgn): realism pass; lifecycle knobs
  
  Witness Patrol
  and
  claude
  committed
  038238a
- fix(cleanrooms,forecast,networkmonitor,rolesanywhere,managedblockchain): realism pass
  
  Witness Patrol
  and
  claude
  committed
  d9ebeee
Commits on Oct 11, 2026
- fix(routing): REST matchers yield requests signed for another service
  
  Witness Patrol
  and
  claude
  committed
  e8a94cf
- fix(resourcegroups,serverlessrepo,codeconnections,codestarconnections,apigatewaymanagementapi): realism pass
  
  Witness Patrol
  and
  claude
  committed
  f38368a
- fix(cognitoidp,ec2,sagemaker): close open parity items
  
  Witness Patrol
  and
  claude
  committed
  e2d696f
- docs: regenerate root README parity summary
  
  Witness Patrol
  and
  claude
  committed
  bb85894
- feat: lifecycle delay knobs for forecast, networkmonitor, managedblockchain, cleanrooms, resourcegroups, serverlessrepo, codeconnections, codestarconnections
  
  Witness Patrol
  and
  claude
  committed
  2daef57
- perf(s3,dynamodb): chunked sorted key index; single-parse BETWEEN
  
  Witness Patrol
  and
  claude
  committed
  4840e6e
- perf(azure,cosmosdb): index in-flight messages; cached sorted queries; hand-written list XML
  
  Witness Patrol
  and
  claude
  committed
  e3f7f44
- feat(eventbridge,pipes,appsync): SSM, AppSync and Timestream targets
  
  Witness Patrol
  and
  claude
  committed
  bb41418
- fix(rds): CreateDBCluster starts in creating; MaxRecords honours documented ranges
  
  Witness Patrol
  and
  claude
  committed
  ce39e6d
- fix(cloudcontrol,directconnect,kinesisanalytics,mediapackage,rdsdata,cloudformation): realism pass; wait for SageMaker endpoint deletion
  
  Witness Patrol
  and
  claude
  committed
  409f561
- fix(sqs): default queue URL host for in-process creates; cloudcontrol and mediapackage lifecycle knobs
  
  Witness Patrol
  and
  claude
  committed
  5142627
- fix(s3,dynamodb,sns,kinesis): deep realism pass on end-to-end flows
  
  Witness Patrol
  and
  claude
  committed
  dc49240
- fix(lambda,stepfunctions,apigateway,ecs,cloudformation): deep realism pass; integration fixes
  
  Witness Patrol
  and
  claude
  committed
  9659d26
- fix(odatatable,stepfunctions): clear CodeQL allocation alerts
  
  Witness Patrol
  and
  claude
  committed
  6e3095b
- fix(service): route JSON error mirror passthrough through io.Writer
  
  Witness Patrol
  and
  claude
  committed
  06448cc
- fix(cloudwatch,ecr,eks,firehose,ssm,directconnect,appconfig,mediastoredata): deep realism pass; terraform fixes
  
  Witness Patrol
  and
  claude
  committed
  1c8812a
- fix(awserr): add StripCode for messages that repeat the error code
  
  Witness Patrol
  and
  claude
  committed
  b8daef8
- fix(iam,sts,ec2,kms,route53,cognitoidp,apigatewayv2,elbv2,rds,eventbridge): deep realism pass
  
  Witness Patrol
  and
  claude
  committed
  a9edd74
- fix: ECS deployment race; CFN rule delete; STS/ELBv2/route wiring; repo-wide error-wire guards
  
  Witness Patrol
  and
  claude
  committed
  a9834d6
- fix: build tag on mediastoredata leading-slash test; regenerate docs
  
  Witness Patrol
  and
  claude
  committed
  320fe80
- feat(lambda): runtime environment, endpoint and execution-role credentials in function containers
  
  Witness Patrol
  and
  claude
  committed
  d20e475
- perf(s3,lockmetrics): e2e router benches; fix multipart and lock-metric leaks; honour SDK default checksums
  
  Witness Patrol
  and
  claude
  committed
  7c3410e
- feat(ecs): state-change events, task role credentials and task metadata v4
  
  Witness Patrol
  and
  claude
  committed
  e91209e
- feat(iam): AWS managed policy catalog
  
  Witness Patrol
  and
  claude
  committed
  b5b77c7
- feat(ssm): AWS public parameters and Secrets Manager references
  
  Witness Patrol
  and
  claude
  committed
  1ae8b81
- feat(elbv2): ALB listener data plane routes HTTP to registered targets
  
  Witness Patrol
  and
  claude
  committed
  049d3a3
- feat(ec2): instance metadata service; SSM secret references wired; public AMIs
  
  Witness Patrol
  and
  claude
  committed
  a5c3dcb
- feat(cognitoidp): federated sign-in through OIDC identity providers
  
  Witness Patrol
  and
  claude
  committed
  7335f66
- feat(cloudfront): viewer request data plane serving from origins
  
  Witness Patrol
  and
  claude
  committed
  24adbb4
- docs: regenerate root README parity summary
  
  Witness Patrol
  and
  claude
  committed
  d1fc770
- feat(ecs,servicediscovery): register service tasks in Cloud Map
  
  Witness Patrol
  and
  claude
  committed
  d6d9939
- feat(eks,sts,iam): IAM roles for service accounts
  
  Witness Patrol
  and
  claude
  committed
  0f934b7
- docs: regenerate READMEs
  
  Witness Patrol
  and
  claude
  committed
  7560ec3
- feat(sqs,sns): signed receipt handles; SNS message size and endpoint screening
  
  Witness Patrol
  and
  claude
  committed
  4fd3d1e
- feat(rds): IAM database authentication for PostgreSQL; deterministic rdsdata timeout test
  
  Witness Patrol
  and
  claude
  committed
  96b9caf
- docs: regenerate READMEs
  
  Witness Patrol
  and
  claude
  committed
  ef47b11
Commits on Oct 12, 2026
- feat(rds): wire IAM database auth; serve the engine CA; fix iotdataplane broker test race
  
  Witness Patrol
  and
  claude
  committed
  18b94ae
- feat(kinesis): expiring ListShards/ListStreamConsumers tokens; inspection endpoints
  
  Witness Patrol
  and
  claude
  committed
  bd02492
- feat(lambda,efs): mount EFS access points into function containers; fix lightsail LB test race
  
  Witness Patrol
  and
  claude
  committed
  5b58adf
- feat(athena): execute SQL over S3 data described by the Glue catalog
  
  Witness Patrol
  and
  claude
  committed
  f67e744
- feat(route53resolver,dns): apply resolver rules, private zones and DNS Firewall in the embedded DNS
  
  Witness Patrol
  and
  claude
  committed
  57b906d
- feat(batch): optional container execution of submitted jobs
  
  Witness Patrol
  and
  claude
  committed
  2a90412
- feat(athena): CTAS, INSERT INTO and UNLOAD write S3 data; NULLs in results
  
  Witness Patrol
  and
  claude
  committed
  7401e0e
- feat(ssm): Run Command executes in docker-backed EC2 instances
  
  Witness Patrol
  and
  claude
  committed
  4b111b6
- feat(rds,rdsdata): Aurora Serverless v2 auto-pause and resume
  
  Witness Patrol
  and
  claude
  committed
  03794b7
- fix(athena,efs,cloudfront,elbv2): clear CodeQL and CodeFactor findings
  
  Witness Patrol
  and
  claude
  committed
  891f3d7
- feat(ec2): Docker network per VPC; publish security-group-open ports
  
  Witness Patrol
  and
  claude
  committed
  091209c
- fix(codebuild): phase durationInSeconds is a whole number
  
  Witness Patrol
  and
  claude
  committed
  94a8059
- feat: pinned resource IDs via gopherstack:id; link-local credential and metadata relay; SSM CodeQL fixes
  
  Witness Patrol
  and
  claude
  committed
  20a3d38
- test(athena): integration DDL/DML flow uses a located table and waits for completion
  
  Witness Patrol
  and
  claude
  committed
  c3b10d1
- style(test): wrap long line in athena integration test
  
  Witness Patrol
  and
  claude
  committed
  4933707
- feat(sso,ssooidc): SSO OIDC and SSO portal services; aws sso login works end to end
  
  Witness Patrol
  and
  claude
  committed
  731bff6
- feat(cloudwatchlogs,athena): complete metric filter patterns and default values; reject external tables without LOCATION
  
  Witness Patrol
  and
  claude
  committed
  ef9c201
- fix(secretsmanager,ses,sesv2,appsync,opensearch): deep realism pass on end-to-end flows
  
  Witness Patrol
  and
  claude
  committed
  13b12a7
- fix(glue,emr,sagemaker,bedrock,codepipeline): deep realism pass on end-to-end flows
  
  Witness Patrol
  and
  claude
  committed
  28d7d77
- feat(appsync,sesv2,redshift): AppSync DynamoDB resolvers and nested resolvers; SESv2 SNS events; Redshift Serverless lifecycle; leak tests out of the unit budget
  
  Witness Patrol
  and
  claude
  committed
  e623224
- fix(kafka,elasticache,memorydb,docdb,neptune): deep realism pass on end-to-end flows
  
  Witness Patrol
  and
  claude
  committed
  754c87d
- feat(glue,codepipeline,kafka): crawlers read S3; pipelines run S3 source, CodeBuild and S3 deploy; kafka lifecycle knob
  
  Witness Patrol
  and
  claude
  committed
  58eb50f
- fix(iot,organizations,backup,transfer,cognitoidentity): deep realism pass on end-to-end flows
  
  Witness Patrol
  and
  claude
  committed
  c596da1
- test(e2e): dashboard tests follow CloudFormation preflight and MediaConvert default queue
  
  Witness Patrol
  and
  claude
  committed
  ea9a350
- fix(kinesis): shard iterator expiry uses the backend clock; deterministic ec2 port fake
  
  Witness Patrol
  and
  claude
  committed
  047b52f
- fix(rds): order engine proxy/forwarder WaitGroup.Add before publishing
  
  Witness Patrol
  and
  claude
  committed
  8cae015
Commits on Oct 13, 2026
- ci: raise unit-test go test timeout to 20m
  
  Witness Patrol
  and
  claude
  committed
  afb9858

Commits

Commits on Oct 8, 2026

Commits on Oct 9, 2026

Commits on Oct 10, 2026

Commits on Oct 11, 2026