Files
freemo 3556481681 feat(resource): implement AWS SDK integration for CloudResourceHandler
Implements real AWS SDK integration for CloudResourceHandler using boto3
as an optional dependency. Key changes:

- Add boto3/botocore as optional [aws] dependency in pyproject.toml
- Implement CloudResourceHandler.resolve() for AWS: builds boto3 session,
  verifies credentials via STS get_caller_identity for account-level types,
  and returns a BoundResource with the resource ARN as sandbox_path
- Implement discover_aws_resources() to enumerate VPCs, subnets, instances,
  S3 buckets, IAM roles, RDS instances, ECS clusters, Lambda functions,
  and EKS clusters via the AWS API
- Implement CloudResourceHandler.discover_children() for AWS resource types
  using the new discovery function
- Implement CloudSandboxStrategy.create/commit/rollback for AWS using a
  tag-based isolation strategy (CleverAgents:PlanId tag)
- GCP and Azure providers still raise NotImplementedError (pending)
- boto3 is optional: handler raises ImportError with helpful install message
  when boto3 is not installed
- Credentials are never logged (existing redaction infrastructure preserved)
- Update cloud_resources.feature to reflect new AWS behavior
- Add comprehensive cloud_aws_sdk.feature with 47 BDD scenarios covering
  all new code paths with mocked boto3

Closes #1021
2026-04-02 08:42:46 +00:00
..
2026-02-20 20:38:53 +00:00