v1.0.0

What's Changed

• feat(sqs): add AddPermission, RemovePermission, and message move task operations by @conao3 in #4
• feat(keyspaces): implement 11 remaining operations by @conao3 in #6
• feat(dlm): complete lifecycle-policy update and tagging operations by @conao3 in #9
• feat(scheduler): implement GetScheduleGroup, DeleteScheduleGroup, TagResource, UntagResource, ListTagsForResource by @conao3 in #7
• feat(secretsmanager): complete rotation, replication and resource-policy operations by @conao3 in #8
• feat(mwaa): complete environment, token and tagging operations by @conao3 in #10
• feat(acm): implement 7 remaining ACM operations by @conao3 in #5
• feat(mediapackage): complete origin-endpoint, harvest-job and tagging operations by @conao3 in #12
• feat(datapipeline): complete remaining pipeline lifecycle and task operations by @conao3 in #11
• feat(signer): complete remaining signing-profile and job operations by @conao3 in #14
• feat(dax): complete all 21 operations with parameter groups, subnet groups and tags by @conao3 in #13
• feat(firehose): implement UpdateDestination to complete the service by @conao3 in #3
• feat(mediastore): implement remaining 17 operations by @conao3 in #15
• feat(resourcegroups): implement remaining 18 operations by @conao3 in #16
• feat(mq): implement remaining 18 operations by @conao3 in #18
• feat(emr-serverless): complete job-run, session and application lifecycle operations by @conao3 in #17
• feat(sns): complete permissions, SMS, sandbox and data-protection operations by @conao3 in #19
• feat(budgets): implement remaining 22 operations by @conao3 in #20
• feat(servicediscovery): implement remaining 23 operations by @conao3 in #22
• feat(stepfunctions): implement remaining 22 operations by @conao3 in #23
• feat(iotevents): complete detector-model, alarm-model and logging operations by @conao3 in #21
• feat(schemas): complete schema, discoverer, code-binding and policy operations by @conao3 in #25
• feat(voiceid): implement all 29 operations by @conao3 in #26
• feat(ssm-incidents): implement remaining 27 operations by @conao3 in #24
• feat(detective): complete all 26 remaining operations by @conao3 in #27
• feat(ram): implement all 31 remaining RAM operations by @conao3 in #28
• feat(kinesis): complete shard, consumer, encryption and resource-policy operations by @conao3 in #31
• feat(efs): complete access-point, policy, replication and tagging operations by @conao3 in #30
• feat(eventbridge): implement remaining 41 operations to complete the service by @conao3 in #33
• feat(elbv2): complete remaining 43 operations by @conao3 in #34
• feat(kms): implement remaining 36 operations by @conao3 in #29
• feat(cloudwatch): implement remaining 33 operations to complete all 46 by @conao3 in #32
• feat(ecr): implement remaining 52 operations to complete ECR service by @conao3 in #35
• feat(wafv2): implement remaining 40 operations to complete service by @conao3 in #36
• feat(shield): implement remaining 32 operations by @conao3 in #37
• feat(dynamodb): implement remaining 31 operations by @conao3 in #40
• feat(apprunner): implement remaining 31 operations to complete 37/37 coverage by @conao3 in #38
• feat(batch): complete scheduling-policy, consumable-resource, service-environment and service-job operations by @conao3 in #39
• feat(amplify): implement remaining 29 operations to complete service by @conao3 in #41
• feat(accessanalyzer): implement remaining 35 operations by @conao3 in #42
• feat(appmesh): implement remaining 34 operations to complete service by @conao3 in #43
• feat(outposts): implement remaining 33 operations to complete service by @conao3 in #45
• feat(dataexchange): complete all 37 operations by @conao3 in #44
• feat(ssm-contacts): complete remaining 35 operations by @conao3 in #46
• feat(swf): implement remaining 35 SWF operations by @conao3 in #47
• feat(groundstation): implement remaining 36 operations by @conao3 in #48
• feat(ivs): implement remaining 36 IVS operations by @conao3 in #49
• feat(codepipeline): implement remaining 38 operations by @conao3 in #50
• feat(cloudtrail): complete event-data-store, channel, dashboard, query and import operations by @conao3 in #52
• feat(memorydb): implement remaining 40 operations by @conao3 in #51
• feat(mediatailor): implement remaining 44 operations by @conao3 in #54
• feat(elasticbeanstalk): implement remaining 41 operations by @conao3 in #53
• feat(eks): complete access-entry, nodegroup, addon, pod-identity and identity-provider operations by @conao3 in #55
• feat(datasync): implement remaining 46 operations by @conao3 in #57
• feat(fms): implement remaining 38 operations by @conao3 in #56
• feat(fsx): complete volume, snapshot, SVM, data-repository and file-cache operations by @conao3 in #58
• feat(codebuild): implement remaining 52 operations and extend e2e tests by @conao3 in #59
• feat(forecast): implement remaining 59 operations by @conao3 in #61
• feat(lakeformation): implement remaining 57 operations by @conao3 in #60
• feat(directconnect): implement all 63 operations by @conao3 in #62
• feat(emr): implement remaining 55 EMR operations by @conao3 in #64
• feat(licensemanager): implement remaining 58 operations by @conao3 in #63
• feat(elasticache): complete remaining 64 operations by @conao3 in #65
• feat(wisdom): implement remaining 37 operations by @conao3 in #67
• feat(transcribe): implement remaining 39 operations by @conao3 in #66
• feat(appconfig): implement remaining 38 operations by @conao3 in #68
• feat(globalaccelerator): implement remaining 51 operations by @conao3 in #70
• feat(codeartifact): complete remaining 44 operations by @conao3 in #69
• feat(organizations): implement remaining 55 operations by @conao3 in #73
• feat(lambda): complete event-source-mapping, alias, layer, code-signing and provisioned-concurrency operations by @conao3 in #72
• feat(ecs): implement remaining 61 operations by @conao3 in #74
• feat(athena): implement remaining 55 operations (CON-1530) by @conao3 in #71
• feat(frauddetector): implement remaining 70 operations by @conao3 in #75
• feat(personalize): implement remaining 67 operations by @conao3 in #76
• feat(network-firewall): implement remaining 75 operations with focused e2e by @conao3 in #77
• feat(cloudformation): implement remaining 77 operations with focused e2e by @conao3 in #78
• feat(ses): implement remaining 64 operations (CON-1539) by @conao3 in #79
• feat(transfer): implement remaining 64 operations by @conao3 in #80
• feat(kendra): complete remaining 62 operations (focused e2e) by @conao3 in #81
• feat(appsync): implement remaining 67 operations with e2e tests by @conao3 in #82
• feat(codecommit): implement 31 operations — repository, branch, file, commit & merge (part 1/2) by @conao3 in #83
• feat(imagebuilder): implement 33 operations — components, recipes, configs, and tags (CON-1543) by @conao3 in #84
• feat(guardduty): implement remaining 82 operations (CON-1545) by @conao3 in #85
• feat(comprehend): implement remaining 81 operations with focused e2e by @conao3 in #86
• feat(opensearch): implement remaining 82 operations by @conao3 in #87
• feat(codecommit): part 2/2 — pull-request, approval-rule-template & comment operations by @conao3 in #88
• feat(appstream): implement remaining 83 operations with e2e tests by @conao3 in #89
• feat(servicecatalog): implement remaining 85 operations by @conao3 in #90
• feat(workspaces): implement remaining 86 operations by @conao3 in #91
• feat(greengrass): implement remaining 88 operations by @conao3 in #92
• feat(config): implement remaining 91 operations by @conao3 in #93
• feat(storagegateway): implement remaining 92 operations by @conao3 in #94
• feat(networkmanager): implement remaining 92 operations by @conao3 in #95
• feat(route53): implement remaining 60 operations by @conao3 in #96
• feat(logs): implement remaining 97 operations by @conao3 in #97
• docs: update README and STATUS to reflect current implementation by @conao3 in #98
• feat(iotsitewise): implement remaining 100 operations with focused e2e by @conao3 in #99
• feat(backup): implement remaining 101 operations by @conao3 in #100
• feat(pinpoint-sms-voice-v2): implement remaining 103 operations by @conao3 in #101
• feat(lexv2): implement remaining 103 operations by @conao3 in #102
• feat(pinpoint): implement remaining 118 operations by @conao3 in #103
• feat(cloudfront): origin-access, distribution mgmt, invalidation & monitoring (part 1/4) by @conao3 in #104
• feat(ssm): implement remaining 135 operations with focused e2e tests by @conao3 in #105
• feat(cognito-idp): implement remaining 112 operations by @conao3 in #106
• feat(medialive): part 1/2 — input, input-security-group, multiplex, channel, input-device, reservation, schedule (focused e2e) by @conao3 in #107
• feat(apigateway): implement 61 REST API operations (part 1/2) by @conao3 in #109
• feat(iam): part 1/2 — user, group, login-profile, access-key, mfa, ssh-key, server-cert, signing-cert, password-policy by @conao3 in #108
• feat(redshift): implement 55 operations — cluster, snapshot, parameter-group, security-group, subnet-group, logging, credentials (part 1/2) by @conao3 in #110
• feat(rds): implement 77 operations for part 1 (CON-1576) by @conao3 in #111
• feat(redshift): part 2a — event-subscription, scheduled-action, usage-limit, snapshot-copy/schedule, authentication-profile, custom-domain by @conao3 in #112
• feat(rds): implement 75 operations for part 2 (CON-1581) by @conao3 in #113
• feat(iam): part 2a — managed-policy, instance-profile, OIDC provider, simulate, service-last-accessed (CON-1585) by @conao3 in #115
• feat(apigateway): part 2a — api-key, authorizer, base-path-mapping, client-certificate, tags (CON-1583) by @conao3 in #116
• feat(redshift): add datashare, endpoint-access, namespace operations (part 2b-1) by @conao3 in #114
• feat(medialive): part 2a — cloudwatch-alarm-template, eventbridge-rule-template, signal-map, list-versions (28 ops) by @conao3 in #117
• feat(apigateway): implement domain-name, vpc-link operations by @conao3 in #118
• feat(medialive): implement sdi-source, alerts, channel-placement-group ops (CON-1592) by @conao3 in #119
• feat(iam): implement SAML provider and delegation request operations (CON-1595) by @conao3 in #121
• feat(redshift): implement HSM and reserved-node operations (CON-1596) by @conao3 in #123
• feat(apigateway): add UsagePlan, UsagePlanKey, Usage, UpdateVpcLink ops by @conao3 in #120
• feat(medialive): implement Cluster and Node operations (CON-1594) by @conao3 in #122
• feat(iam): implement organizations-root, outbound-web-identity-federation, account-auth-details ops (CON-1598) by @conao3 in #124
• feat(medialive): implement network operations (completes service) by @conao3 in #125
• feat(imagebuilder): implement image CRUD + lifecycle ops (CON-1600) by @conao3 in #126
• feat(redshift): implement integration, idc-application operations (CON-1599) by @conao3 in #127
• feat(imagebuilder): lifecycle-policy, lifecycle-execution, and pipeline-execution ops (CON-1603) by @conao3 in #130
• feat(iam): implement final 11 ops — delegation, policy-list, role-update, untag by @conao3 in #129
• feat(redshift): implement partner, resource-policy, recommendations, failover, lakehouse ops by @conao3 in #128
• feat(glue): implement chunk 1 data-catalog ops (CON-1604) by @conao3 in #131
• feat(sagemaker): implement chunk 1 — endpoint-config, model-package, model-card, training (CON-1608) by @conao3 in #132
• feat(ec2): implement chunk 1 — accept/allocate/assign/associate ops by @conao3 in #134
• feat(connect): chunk 1 — associate/disassociate, claim-phone-number, agent-status by @conao3 in #133
• feat(sagemaker): chunk 2 - notebook-lifecycle-config, pipeline, processing-job, transform-job by @conao3 in #135
• feat(ec2): chunk 2 — attach/detach (volume, network-interface, vpn-gateway, classic-link, verified-access) by @conao3 in #136
• feat(connect): implement chunk 2 — 28 Create operations by @conao3 in #137
• feat(glue): implement jobs, crawlers, triggers chunk 2 (CON-1614) by @conao3 in #139
• feat(sagemaker): implement app/domain/space/user-profile ops (chunk 3) by @conao3 in #138
• feat(ec2): chunk 3 — capacity-reservation, client-vpn, carrier-gateway, coip, customer-gateway create ops by @conao3 in #140
• feat(imagebuilder): workflow, scan-findings, marketplace (completes service) by @conao3 in #141
• feat(connect): implement describe operations chunk 3 (16 ops) by @conao3 in #142
• feat(sagemaker): chunk 4 — feature-group, hub, image, inference, monitoring-schedule by @conao3 in #143
• feat(ec2): chunk 4 — ipam, launch-template, local-gateway-route create ops (12 ops) by @conao3 in #144
• feat(connect): chunk 4 — implement 14 update operations by @conao3 in #145
• feat(glue): chunk 3 — ml-transform, dev-endpoint, schema-registry (12 ops) by @conao3 in #146
• feat(glue): chunk 4 — blueprint, data-quality, session, workflow (12 ops) by @conao3 in #148
• feat(connect): chunk 5 — delete operations (CON-1623) by @conao3 in #149
• feat(sagemaker): chunk 5 — describe operations (12 ops) by @conao3 in #147
• feat(ec2): chunk 5 — local-gateway, managed-prefix-list, network-acl, network-insights, network-interface by @conao3 in #150
• feat(sagemaker): chunk 6 — association, tags, cluster-node batch, AI job create by @conao3 in #151
• feat(ec2): chunk 6 — associate operations (dhcp, iam, ipam, route-table, security-group) by @conao3 in #154
• feat(connect): implement chunk-6 operations (AssociateWorkspace, BatchDataTableValue, BatchPutContact, CreateUser/HierarchyGroup/View/Vocabulary/Workspace) by @conao3 in #153
• feat(sagemaker): implement chunk 7 create operations (CON-1633) by @conao3 in #155
• feat(glue): implement chunk 6 operations (CON-1630) by @conao3 in #152
• feat(glue): implement chunk 7 delete operations (CON-1634) by @conao3 in #156
• feat(sagemaker): chunk 8 — create operations (device-fleet, edge, experiment, tuning, labeling) by @conao3 in #157
• feat(connect): implement chunk 7 delete operations (queue, prompt, routing-profile, rule) by @conao3 in #158
• feat(ec2): chunk 7 — associate (cidr/transit-gateway), authorize, bundle, cancel by @conao3 in #159
• feat(glue): chunk 8 — describe/get (entity, integration, blueprint, catalog, column-stats) by @conao3 in #160
• feat(sagemaker): chunk 9 — create (project, trial, workforce) + delete group start by @conao3 in #162
• feat(connect): chunk 8 — delete operations (security-profile, user, view, vocabulary, workspace) by @conao3 in #161
• feat(ec2): chunk 8 — cancel tasks + confirm + copy (image, snapshot, fpga) by @conao3 in #163
• feat(sagemaker): implement chunk-10 delete operations (CON-1644) by @conao3 in #165
• feat(glue): chunk 9 — get (data-quality, dataflow, dev-endpoint, entity-records) by @conao3 in #164
• feat(connect): chunk 9 — describe operations (phone, queue, prompt, routing-profile, rule) by @conao3 in #166
• feat(ec2): chunk 9 — implement 12 operations (dhcp, fleet, flow-logs, image, instance-connect, event-window) by @conao3 in #167
• feat(connect): chunk 10 — describe (user, view, vocabulary) + disassociate group (focused e2e) by @conao3 in #168
• feat(ec2): chunk 10 — create (placement-group, ipv4-pool, route, route-server, subnet) by @conao3 in #169
• feat(glue): implement chunk-10 get ops (ml-task, ml-transform, mapping, plan, registry, resource-policy) by @conao3 in #170
• feat(sagemaker): chunk 11 — delete operations (experiment, hub, image, inference, mlflow) by @conao3 in #171
• feat(ec2): chunk 11 — create (snapshots, traffic-mirror, transit-gateway) by @conao3 in #172
• feat(connect): chunk 11 — disassociate operations (lex, lambda, queue, security, workspace) by @conao3 in #173
• feat(sagemaker): chunk 12 — delete operations (mlflow, project, space, trial, user-profile, workforce) by @conao3 in #174
• feat(ec2): chunk 12 — transit-gateway (continued) + verified-access by @conao3 in #175
• feat(glue): implement chunk-11 get ops (schema, security-config, session, table-version, tags) by @conao3 in #176
• feat(connect): chunk 12 — get (attached-file, contact-attributes, metric-data, federation-token) by @conao3 in #177
• feat(sagemaker): implement chunk-13 describe operations (CON-1659) by @conao3 in #178
• feat(glue): chunk 12 — GetUnfilteredMetadata, GetUsageProfile, GetUserDefinedFunction(s), GetWorkflow*, ImportCatalogToGlue, ListBlueprints by @conao3 in #179
• feat(ec2): chunk 13 — create vpc-endpoint, vpc-peering, vpn (focused e2e) by @conao3 in #180
• test(e2e): drive the gateway handler in-process without HTTP by @conao3 in #181
• feat(glue): chunk 13 — list crawls, custom-entity, data-quality, dev-endpoints, entities (focused e2e) by @conao3 in #183
• feat(ec2): chunk 14 — delete carrier-gw, client-vpn, coip, customer-gw, dhcp, fleet, flow-logs by @conao3 in #184
• feat(sagemaker): chunk 14 — describe operations (edge, experiment, feature-group, hub, image) by @conao3 in #182
• chore: add lint (tsc + knip) and fmt (prettier) with CI checks by @conao3 in #186
• fix(server): disable idle timeout on the management server for SSE by @conao3 in #187
• feat(core): carry request payloads as bytes end to end by @conao3 in #188
• feat(s3): faithful object metadata by @conao3 in #189
• feat(s3): conditional requests and complete ListObjectsV2 pagination by @conao3 in #190
• feat(s3): multipart validation, UploadPartCopy, presigned URLs, virtual-host style by @conao3 in #191
• feat(core): add DynamoDB expression evaluator (Step 0 of task-goal-003) by @conao3 in #192
• feat(dynamodb): enforce ConditionExpression (Step 1 of task-goal-003) by @conao3 in #193
• feat(dynamodb): route UpdateExpression through the core evaluator (Step 2) by @conao3 in #194
• feat(dynamodb): Query with KeyConditionExpression (Step 3) by @conao3 in #195
• feat(dynamodb): full FilterExpression evaluator (Step 4) by @conao3 in #196
• feat(dynamodb): ProjectionExpression and ReturnValues integrity (Step 5) by @conao3 in #197
• feat(dynamodb): TransactWriteItems rollback and CancellationReasons (Step 6) by @conao3 in #198
• feat(dynamodb): route PartiQL WHERE through the core evaluator (Step 7) by @conao3 in #199
• test(dynamodb): end-to-end scenario for task-goal-003 (Step 8) by @conao3 in #200
• feat(sqs): faithful messaging semantics — visibility, delay, long polling, DLQ redrive, FIFO by @conao3 in #201
• fix(dynamodb): close real-AWS gaps across task-goal-003 acceptance criteria by @conao3 in #202
• feat(lambda): execute real Node.js handlers on Invoke by @conao3 in #203
• feat(sns): fan out Publish to subscribed SQS queues (SNS→SQS bus) by @conao3 in #204
• feat(events): deliver cross-service event notifications to SQS and Lambda by @conao3 in #205
• fix(sns): unify fan-out on the event registry (sns→sqs→lambda ESM) by @conao3 in #206
• feat(sts): assumed-role identity flows through to subsequent calls by @conao3 in #207
• feat(cognito): real RS256 JWTs + JWKS endpoint (task-goal-001 Tier 3) by @conao3 in #208
• feat(dynamodb): scan pagination + TTL-on-read filtering by @conao3 in #209
• feat(s3): DeleteObjects batch delete + ranged GetObject by @conao3 in #210
• test(events): close S3->SNS->SQS coverage + Step-7 acceptance scenario by @conao3 in #211
• refactor(core): centralize iam::root ARNs via callerArn helper by @conao3 in #212
• refactor: simplify session changes (dedup test helpers, jwt/md5/range/callerArn) by @conao3 in #213
• feat(ec2): chunk 15 — delete instance-connect, internet-gw, ipam family, key-pair by @conao3 in #215
• feat(sagemaker): implement 12 describe operations (chunk 15) by @conao3 in #216
• feat(connect): chunk 13 — GetPromptFile, GetTaskTemplate, GetTestCaseExecutionSummary, GetTrafficDistribution, ImportPhoneNumber, ImportWorkspaceMedia, ListAgentStatuses, ListAnalyticsDataAssociations, ListAnalyticsDataLakeDataSets, ListApprovedOrigins, ListAssociatedContacts, ListAttachedFilesConfigurations by @conao3 in #217
• docs: update README and STATUS.md to reflect current coverage by @conao3 in #214
• feat(glue): chunk 15 — list + modify ops (CON-1669) by @conao3 in #218
• feat(sagemaker): chunk 16 — describe space/trial/workforce + portfolio toggles by @conao3 in #219
• feat(ec2): chunk 16 — delete launch-template, local-gateway, prefix-list, network-acl by @conao3 in #221
• feat(connect): chunk 14 — list auth-profiles, bots, contact-flows, data-tables by @conao3 in #220
• feat(glue): chunk 16 — put/register/schema-version + workflow-run ops by @conao3 in #222
• fix(core): emit x-amzn-RequestId response header on all responses by @conao3 in #223
• feat(s3): implement real object versioning by @conao3 in #225
• feat(cloudformation): materialize templated resources into owning services by @conao3 in #224
• feat(cognito-idp): verify password in USER_PASSWORD_AUTH / ADMIN_USER_PASSWORD_AUTH by @conao3 in #227
• feat(events): implement detail-content pattern matching with operators by @conao3 in #228
• feat(stepfunctions): implement ASL interpreter in StartExecution/StartSyncExecution by @conao3 in #226
• feat(glue): implement start ops chunk 17 with run lifecycle by @conao3 in #229
• feat(connect): chunk 15 — list data-tables, vocabularies, evaluation-forms, hours, instance by @conao3 in #230
• feat(sagemaker): chunk 17 — implement 12 get/portfolio/import + AI list ops by @conao3 in #232
• feat(ec2): chunk 17 — delete (network-insights, network-interface, placement-group, route, route-server) by @conao3 in #231
• fix(core): thread per-request id into error envelopes by @conao3 in #233
• feat(s3): implement GetObjectAcl/PutObjectAcl object ACL ops by @conao3 in #235
• feat(firehose): deliver PutRecord/PutRecordBatch to the configured S3 destination by @conao3 in #234
• feat(ec2): chunk 18 — delete (route-table, security-group, traffic-mirror, transit-gateway) by @conao3 in #236
• feat(connect): chunk 16 — list lambda, lex, phone-numbers, prompts, queues, quick-connects by @conao3 in #237
• feat(glue): chunk 18 — start/stop + TagResource (12 ops) by @conao3 in #238
• feat(sagemaker): chunk 18 — list ops (actions, algorithms, apps, artifacts, automl, cluster) by @conao3 in #239
• feat(stepfunctions): execute Task states (Lambda invoke) during interpretation by @conao3 in #240
• fix(core): add $headers escape hatch for unmodeled response headers by @conao3 in #241
• feat(ec2): chunk 19 — delete transit-gateway family (12 ops) by @conao3 in #242
• feat(glue): chunk 19 — update ops + TestConnection/UntagResource e2e by @conao3 in #243
• feat(cloudformation): resolve Outputs (Ref/Fn::GetAtt/Fn::Sub) on create/update by @conao3 in #244
• feat(kms): implement real Sign/Verify and GenerateMac/VerifyMac by @conao3 in #245
• feat(events): apply target Input/InputPath/InputTransformer on delivery by @conao3 in #246
• feat(sagemaker): chunk 19 — list clusters/code-repos/compilation/contexts/devices/domains/edge (12 ops) by @conao3 in #247
• feat(connect): chunk 17 — list routing-profiles, rules, security-profiles, tags, task-templates (12 ops) by @conao3 in #248
• feat(cognito-idp): implement USER_SRP_AUTH challenge flow by @conao3 in #249
• feat(glue): chunk 20 — implement Update ops (database, dev-endpoint, integration, job, ml-transform, partition, registry, schema) by @conao3 in #250
• feat(sagemaker): chunk 20 — list ops (experiments, feature-groups, hubs, tuning, images, inference) by @conao3 in #251
• feat(ec2): chunk 20 — delete (verified-access, vpc-endpoints, vpc-peering, vpn) by @conao3 in #252
• feat(s3): persist and return system metadata headers on objects by @conao3 in #253
• fix(core): preserve handler $status and $headers content-type in model-less fallback by @conao3 in #254
• feat(glue): implement UpdateTable/TableOptimizer/Trigger/UsageProfile/UDF/Workflow (CON-1710) by @conao3 in #255
• feat(sts): implement AssumeRoleWithWebIdentity and AssumeRoleWithSAML by @conao3 in #256
• feat(sagemaker): chunk 21 — list inference-recs, labeling, lineage, mlflow, model-cards/bias by @conao3 in #257
• feat(ec2): chunk 21 — delete-vpn, deprovision, deregister ops by @conao3 in #258
• feat(lambda): snapshot code per version/alias and resolve Qualifier on Invoke by @conao3 in #259
• feat(connect): chunk 18 — list test-cases, traffic-dist, users, views, workspace-media by @conao3 in #260
• feat(stepfunctions): emit real per-state GetExecutionHistory events by @conao3 in #261
• feat(cognito-idp): validate refresh token in REFRESH_TOKEN_AUTH and omit new RefreshToken by @conao3 in #262
• feat(s3): honor CopyObject MetadataDirective=REPLACE by @conao3 in #263
• feat(sagemaker): chunk 22 — list model-packages, monitoring, optimization, pipelines, processing by @conao3 in #264
• feat(ec2): chunk 22 — describe addresses/bundle-tasks/byoip/capacity-blocks by @conao3 in #265
• feat(s3): apply GetObject response-* override query params by @conao3 in #266
• feat(sagemaker): chunk 23 — list projects/spaces/tags/training/transform/trials by @conao3 in #267
• feat(lambda): merge layer contents into execution sandbox by @conao3 in #268
• feat(events): fire scheduled rules (rate/cron ScheduleExpression) by @conao3 in #269
• feat(scheduler): fire schedules and invoke their targets by @conao3 in #270
• fix(core): enforce enum and numeric range validation by @conao3 in #271
• feat(s3): reject DeleteBucket on non-empty buckets with BucketNotEmpty by @conao3 in #272
• feat(ecs): advance task lifecycle PENDING->RUNNING on DescribeTasks by @conao3 in #273
• feat(sagemaker): chunk 24 — list (user-profiles, workforces, workteams) + put/query/render/search by @conao3 in #274
• feat(connect): implement chunk 19 ops (workspaces list, contact lifecycle, phone-number ops) by @conao3 in #275
• feat(s3): implement PutBucketAcl and fix GetBucketAcl round-trip by @conao3 in #276
• feat(kms): return stable public keys and real matching data key pairs by @conao3 in #278
• feat(sagemaker): chunk 25 — start/stop ops (cluster, edge, inference, mlflow, monitoring, notebook, pipeline) by @conao3 in #279
• feat(connect): implement search ops chunk 20 by @conao3 in #280
• fix(core): stop rejecting empty required strings and preserve 64-bit long precision by @conao3 in #277
• feat(batch): simulate job lifecycle SUBMITTED->SUCCEEDED for SubmitJob by @conao3 in #281
• feat(sagemaker): chunk 26 — stop ops (compilation, edge, tuning, inference, labeling, monitoring, notebook, pipeline) by @conao3 in #282
• feat(kinesis): honor ShardCount and partition records across shards by @conao3 in #283
• feat(connect): chunk 21 — search ops and SendChatIntegrationEvent by @conao3 in #284
• feat(stepfunctions): implement activity task token callbacks by @conao3 in #285
• feat(secretsmanager): assign AWSPREVIOUS and resolve GetSecretValue by VersionStage by @conao3 in #287
• feat(route53): preserve AliasTarget and routing-policy fields on record sets by @conao3 in #288
• fix(lambda): return Runtime.Unsupported error for non-nodejs runtimes by @conao3 in #286
• feat(ec2): implement describe ops for capacity-reservations, carrier-gw, client-vpn, coip by @conao3 in #289
• feat(sagemaker): implement stop/update ops chunk 27 (CON-1747) by @conao3 in #290
• feat(apigateway): implement execute-api routing for deployed REST APIs by @conao3 in #291
• feat(connect): implement start-contact ops chunk 22 by @conao3 in #292
• feat(connect): chunk 23 — start/stop contact tail + submit/suspend/tag (in-process harness e2e) by @conao3 in #293
• feat(sagemaker): chunk 28 — update ops (devices, domain, endpoint, experiment, feature-group, hub, image) by @conao3 in #294
• feat(sagemaker): implement chunk 29 update ops (inference-component, mlflow, model-card, monitoring, notebook, partner) by @conao3 in #295
• feat(ec2): chunk 24b — describe conversion-tasks/customer-gw/dhcp/egress-igw/export-tasks/fleet by @conao3 in #296
• feat(connect): implement chunk 24 — TransferContact, Untag*, Update* (12 ops) by @conao3 in #297
• feat(sagemaker): implement final 11 Update operations (chunk 30) by @conao3 in #298
• feat(connect): chunk 25 — update (phone-number, predefined-attr, prompt, queue ops) by @conao3 in #299
• feat(ec2): chunk 25 — describe fleets/flow-logs/fpga/hosts/iam-profile/id-format/image by @conao3 in #300
• feat(ec2): chunk 26 — describe images/import-tasks/instance-attribute/connect/credit/event-windows by @conao3 in #301
• feat(connect): chunk 26 — update ops (queue-status, quick-connect, routing-profile, rule, security-profile, task-template, test-case) by @conao3 in #302
• feat(ec2): chunk 27 — describe instance-status, instance-types, ipam family by @conao3 in #303
• feat(connect): chunk 27 — update traffic-distribution, user ops, view-content by @conao3 in #304
• feat(ec2): chunk 28 — describe ipam-discovery, ipam-scopes, ipv6-pools, launch-templates, local-gateway by @conao3 in #305
• feat(connect): implement UpdateViewMetadata, UpdateWorkspace{Metadata,Page,Theme,Visibility} by @conao3 in #306
• feat(ec2): chunk 29 — describe (local-gateways, locked-snapshots, mac-hosts, prefix-lists, network-acls, network-insights) by @conao3 in #307
• feat(ec2): chunk 30 describe ops (network-interfaces, placement-groups, prefix-lists, regions, reserved-instances) by @conao3 in #308
• feat(ec2): chunk 31 — describe reserved-offerings, route-servers, scheduled, secondary-net, security-group-rules by @conao3 in #309
• feat(ec2): chunk 32 — describe snapshots/spot-fleet/spot-instances/stale-sg/traffic-mirror by @conao3 in #310
• feat(ec2): chunk 33 — describe traffic-mirror, transit-gateway family by @conao3 in #311
• feat(ec2): chunk 34 — describe transit-gateways, trunk, verified-access, volumes, vpc-attribute by @conao3 in #312
• feat(ec2): chunk 35 — describe vpc-block-public-access, vpc-classic-link, vpc-endpoints family by @conao3 in #313
• feat(ec2): chunk 36 — describe vpc-peering/vpn + disable ops (in-process harness e2e) by @conao3 in #314
• feat(ec2): chunk 37 — disable ops (image-settings, ipam, route-server, serial-console, snapshot, vgw, vpc-classic-link) by @conao3 in #315
• feat(ec2): chunk 38 — disassociate ops (address, client-vpn, iam-profile, instance-event-window, ipam, nat-gw, route-table) by @conao3 in #316
• feat(ec2): chunk 39 — disassociate tail + enable start ops by @conao3 in #317
• feat(ec2): implement chunk-40 enable ops (fast-launch, image-settings, ipam, route-server, snapshot) by @conao3 in #318
• feat(ec2): chunk 41 — enable tail + export/get ops start by @conao3 in #319
• feat(ec2): chunk 42 — get ops (enclave-cert, ipv6-pool, capacity-manager, capacity-reservation, console) by @conao3 in #320
• feat(ec2): implement chunk 43 — 12 GetX operations (credit-spec, ebs-kms, ipam-policy, capacity-reservation-groups, instance-metadata) by @conao3 in #321
• feat(ec2): implement chunk 44 — get ops (ipam-discovered, ipam-pool-cidrs, ipam-prefix-list-resolver, launch-template-data) by @conao3 in #322
• feat(ec2): chunk 45 — get ops (prefix-list, network-insights, password-data, route-server, security-groups-for-vpc) by @conao3 in #323
• feat(ec2): chunk 46 — get ops (subnet-cidr-reservations, transit-gateway, verified-access-policy) by @conao3 in #324
• feat(ec2): chunk 47 — get-vpn tail + import ops + list-recycle-bin by @conao3 in #325
• feat(ec2): chunk 48 — lock-snapshot + modify ops (address, capacity-reservation, client-vpn, fleet, hosts, id-format) by @conao3 in #326
• feat(ec2): chunk 49 — modify instance ops (12 ops) by @conao3 in #327
• feat(ec2): implement chunk-50 modify ops (ipam family, launch-template, local-gateway-route, managed-prefix-list) by @conao3 in #328
• feat(ec2): implement chunk-51 modify ops (network-interface, dns, reserved-instances, route-server, sg-rules, snapshot, subnet) by @conao3 in #329
• feat(ec2): implement chunk-52 modify ops (traffic-mirror, transit-gateway, verified-access) by @conao3 in #330
• feat(ec2): implement chunk 53 modify ops (volume, vpc-attribute, vpc-endpoint family) by @conao3 in #331
• feat(ec2): implement chunk 54 modify vpc-peering/vpn + monitor/move/provision ops by @conao3 in #332
• feat(ec2): implement chunk 55 ops — provision/purchase/register/reboot by @conao3 in #333
• feat(ec2): UpdateInterruptibleCapacityReservationAllocation, UpdateSecurityGroupRuleDescriptions{Egress,Ingress}, WithdrawByoipCidr by @conao3 in #335
• feat(ec2): implement replace route/tgw/vpn and reset attribute ops by @conao3 in #334
• feat(ec2): implement reject/release/replace ops (CON-1791) by @conao3 in #336
• feat(ec2): implement restore/recycle-bin/revoke/search/run-scheduled ops by @conao3 in #337
• feat(sns): full FilterPolicy operators and MessageBody scope by @conao3 in #339
• feat(dynamodb): honor GSI/LSI projection type and index query semantics by @conao3 in #340
• feat(ssm): parameter version/label selectors and SecureString WithDecryption by @conao3 in #341
• feat(logs): honor GetLogEvents limit/startFromHead and FilterLogEvents AND pattern by @conao3 in #342
• feat(ecs): reconcile service desiredCount to running tasks by @conao3 in #343
• feat(s3): add object-lock ops (Put/GetObjectRetention, Put/GetObjectLegalHold) + GetObjectAttributes by @conao3 in #344
• feat(glue): StartCrawler/StopCrawler populate catalog tables from crawler targets by @conao3 in #345
• feat(iam): evaluate SimulateCustomPolicy/SimulatePrincipalPolicy (allow/deny, not always-allow) by @conao3 in #346
• test(monitoring): add GetMetricData round-trip assertions by @conao3 in #347
• feat(ecr): fix GetDownloadUrlForLayer layer check; add round-trip e2e tests by @conao3 in #348
• feat(acm): RequestCertificate lifecycle PENDING_VALIDATION → ISSUED with DescribeCertificate by @conao3 in #349
• feat(rds): persist ModifyDBInstance params and ModifyDBParameterGroup values by @conao3 in #350
• feat(cloudfront): add UpdateDistribution IfMatch validation + CreateInvalidation InProgress status by @conao3 in #351
• feat(elbv2): target registration/health round-trip + listener rule CRUD state by @conao3 in #352
• feat(ec2): implement start/unassign/unmonitor/unlock ops (CON-1794) by @conao3 in #338
• feat(athena): StartQueryExecution lifecycle QUEUED→RUNNING→SUCCEEDED by @conao3 in #353
• test(servicediscovery): add fidelity round-trip e2e test by @conao3 in #354
• feat(secretsmanager): implement RotateSecret version stage promotion and lambda invoke by @conao3 in #355
• feat(ses): persist send stats and verify identity on email send by @conao3 in #356
• feat(monitoring): implement SetAlarmState history and DescribeAlarmHistory by @conao3 in #357
• feat(stepfunctions): add ExecutionAborted event and execution lifecycle e2e by @conao3 in #358
• feat(cognito-idp): TOTP MFA flow — AssociateSoftwareToken/VerifySoftwareToken + MFA challenge by @conao3 in #360
• feat(dynamodb): implement Streams round-trip (StreamSpecification → DescribeStream/GetRecords) by @conao3 in #359
• test(lambda): e2e round-trip for versions, aliases, and function URL config by @conao3 in #361
• test(logs): add subscription/metric filter e2e coverage by @conao3 in #362
• test(iam): e2e round-trip for access keys + policy version default by @conao3 in #363
• test(kinesis): shard split/merge + enhanced fan-out consumer round-trip e2e by @conao3 in #364
• feat(s3): static website hosting + CORS configuration round-trip by @conao3 in #365
• feat(apigateway): stage variables + VTL mapping templates in execute-api MOCK by @conao3 in #366
• feat(dynamodb): emit stream records on TransactWriteItems commit + TransactGetItems e2e by @conao3 in #369
• feat(route53): ChangeResourceRecordSets batch semantics + ALIAS records by @conao3 in #368
• feat(events): EventBridge archive capture and replay round-trip by @conao3 in #371
• test(s3): presigned URL (SigV4 query-string auth) e2e coverage by @conao3 in #370
• feat(stepfunctions): ASL interpreter e2e tests — Choice/Pass/Wait/Succeed/Fail by @conao3 in #367
• feat(ssm): GetParametersByPath hierarchy + recursive/pagination semantics by @conao3 in #372
• feat(ecs): task definition revision fidelity + RunTask cluster check by @conao3 in #373
• feat(kms): add encryption context binding and grant constraints by @conao3 in #375
• feat(sqs): MessageAttributeNames filtering and binary MD5 fix by @conao3 in #376
• feat(sns): Publish TargetArn endpoint validation + platform e2e by @conao3 in #374
• feat(dynamodb): TTL expiry + PartiQL ExecuteStatement round-trip by @conao3 in #377
• feat(sts): AssumeRole session credentials + caller identity fidelity by @conao3 in #378
• feat(cognito-idp): GlobalSignOut/RevokeToken token revocation + OAuth client settings e2e by @conao3 in #380
• feat(stepfunctions): Map/Parallel state execution + Retry/Catch error handling by @conao3 in #379
• feat(lambda): EventSourceMapping round-trip + SQS poll-to-invoke e2e by @conao3 in #381
• feat(s3): object versioning depth — delete markers, version-id GET/DELETE, ListObjectVersions by @conao3 in #382
• feat(logs): CloudWatch Logs Insights StartQuery/GetQueryResults lifecycle by @conao3 in #383
• feat(glue): job run lifecycle StartJobRun -> GetJobRun RUNNING->SUCCEEDED by @conao3 in #386
• feat(ecr): lifecycle policy + repository policy + image scan e2e assertions by @conao3 in #384
• feat(secretsmanager): resource policy + replication round-trip fidelity by @conao3 in #385
• feat(apigateway): API key lifecycle + usage plan throttle patch e2e by @conao3 in #387
• feat(rds): add snapshot error checks and restore lifecycle e2e by @conao3 in #388
• feat(ec2): expose IpPermissions/IpPermissionsEgress in DescribeSecurityGroups by @conao3 in #389
• test(iam): trust policy round-trip + GetAccountAuthorizationDetails e2e by @conao3 in #390
• feat(elbv2): target group health-check fields + rule priority fidelity by @conao3 in #391
• feat(cloudfront): distribution cache behaviors + origin config depth by @conao3 in #392
• test(e2e): CloudFormation S3 bucket lifecycle fidelity test by @conao3 in #393
• feat(glue): data catalog partition lifecycle + GetPartitions Expression filter by @conao3 in #394
• feat(sagemaker): endpoint deploy lifecycle Creating→InService by @conao3 in #395
• feat(ec2): VPC/subnet/route-table/IGW association integrity by @conao3 in #397
• feat(athena): workgroups + named queries + query result reuse by @conao3 in #396
• feat(ec2): NAT gateway + Elastic IP allocate/associate + VPC endpoint by @conao3 in #398
• test(sqs): add e2e coverage for redrive policy and StartMessageMoveTask by @conao3 in #399
• feat(cognito-idp): e2e coverage for groups + admin user lifecycle by @conao3 in #400
• feat(sns): subscription confirmation + raw message delivery + redrive DLQ by @conao3 in #401
• feat(ecs): service load-balancer + deployment configuration by @conao3 in #402
• test(acm): DNS validation records + ImportCertificate round-trip e2e by @conao3 in #403
• test(route53): add e2e coverage for health check and traffic policy round-trips by @conao3 in #404
• feat(monitoring): composite alarm rule evaluation + GetMetricData metric math by @conao3 in #405
• test(sqs): add e2e coverage for visibility timeout, long polling, ChangeMessageVisibility (CON-1867) by @conao3 in #406
• fix(stepfunctions): name idempotency + StartSyncExecution type guard by @conao3 in #407
• fix(dynamodb): stream records on BatchWrite/PartiQL + TTL on batch reads by @conao3 in #408
• fix(lambda): async Event invoke and dynamic unreserved concurrency by @conao3 in #409
• fix(apigateway): enforce request validation, authorizers, gateway responses by @conao3 in #410
• fix(kinesis): add AT_TIMESTAMP iterator support and fidelity e2e tests by @conao3 in #411
• fix(sns): select per-protocol message body when MessageStructure=json by @conao3 in #412
• fix(iam): make GetAccountSummary/GetAccountAuthorizationDetails dynamic by @conao3 in #414
• fix(cognito-idp): real auth gates, groups claim, UpdateUserAttributes, ListUsers filter by @conao3 in #415
• fix(ec2): instance lifecycle persist, DescribeInstances filters, tag propagation by @conao3 in #413
• fix(sts): fill fidelity gaps — federation token identity, DecodeAuthorizationMessage by @conao3 in #417
• test(events): add e2e for custom EventBus bus-scoped rule delivery by @conao3 in #419
• fix(secretsmanager): honor RecoveryWindowInDays, guard double-delete and invalid restore by @conao3 in #418
• fix(kms): enforce key state on crypto operations by @conao3 in #416
• fix(rds): re-audit fidelity gaps — param/subnet group association, Filters, read replica attributes by @conao3 in #420
• fix(cloudformation): fill fidelity gaps — real provisioning, change sets, outputs/exports, stack events by @conao3 in #421
• fix(ssm): fidelity gaps — SecureString history, tags, DescribeParameters filters/pagination by @conao3 in #423
• fix(s3): fill fidelity gaps — CopyObject tags/conditional, ListObjectVersions+ListObjects pagination, GetBucketTagging by @conao3 in #422
• fix(logs): re-audit fidelity gaps — metric emission, subscription delivery, pagination by @conao3 in #424
• fix(ecs): deployment rollout, pagination, failures, list filters, tag round-trip by @conao3 in #425
• fix(ses): enforce send-pause, increment templated-send stats, add pagination by @conao3 in #426
• fix(efs): pagination, lifecycle-state guards, CreateFileSystem field persistence by @conao3 in #427
• fix(redshift): tier-2 audit fidelity gaps — resize tracking, snapshot/cluster lifecycle, restore validation by @conao3 in #428
• fix(elasticache): tier-2 fidelity gaps — soft-delete, pagination, modify persistence by @conao3 in #429
• fix(eks): tier-2 fidelity gaps — lifecycle, pagination, update status by @conao3 in #430
• fix(batch): tier-2 audit fidelity gaps by @conao3 in #431
• fix(transfer): tier-2 audit fidelity gaps — execution tracking, agreement profile validation, server lifecycle, pagination by @conao3 in #432
• fix(backup): tier-2 audit fidelity gaps — job/recovery-point lifecycle, StartCopyJob validation, pagination/filters by @conao3 in #433
• fix(firehose): tier-2 audit fidelity gaps — lifecycle, non-ACTIVE rejection, async delete by @conao3 in #434
• fix(appsync): tier-2 audit fidelity gaps — schema creation state, introspection schema, cache/association lifecycle, pagination by @conao3 in #435
• fix(emr): tier-2 fidelity gaps — termination lifecycle/protection, fleet/group provisioning state, capacity persistence by @conao3 in #436
• fix(cloudtrail): tier-2 audit fidelity gaps — query status lifecycle, DescribeQuery validation, trail status detail by @conao3 in #437
• fix(opensearch): tier-2 audit fidelity gaps — 404 not-found code, VPC endpoint validate+lifecycle, pagination by @conao3 in #438
• fix(config): tier-2 audit fidelity gaps — delete not-found errors, compliance filters, required-field validation by @conao3 in #439
• fix(organizations): tier-2 fidelity gaps — async account creation, policy hierarchy, pagination by @conao3 in #440
• fix(codebuild): tier-3 audit fidelity gaps — build status lifecycle, pagination, list filters, retry validation by @conao3 in #442
• fix(codeartifact): tier-3 audit fidelity gaps — revision, unfinished status, binary asset, pagination by @conao3 in #441
• fix(codepipeline): tier-3 audit fidelity gaps — pagination, nonce validation, version history, job state transitions by @conao3 in #443
• fix(dax): tier-3 audit fidelity gaps — parameter group persistence, pagination, cluster lifecycle by @conao3 in #444
• fix(codecommit): tier-3 audit fidelity gaps — branch/commit validation, pagination, PR merge state, merge conflicts by @conao3 in #445
• fix(keyspaces): tier-3 audit fidelity gaps — pagination, DeleteTable/UpdateTable semantics, restore status by @conao3 in #446
• fix(memorydb): tier-3 audit fidelity gaps — pagination, parameter persistence, resource lifecycle, user filters by @conao3 in #447
• fix(mq): tier-3 audit fidelity gaps — broker lifecycle, password validation, soft-delete, DescribeBroker detail, pagination by @conao3 in #448
• fix(datasync): tier-3 audit fidelity gaps — pagination, list filters, task lifecycle, location validation by @conao3 in #449
• fix(apprunner): tier-4 audit fidelity gaps — service lifecycle, pagination, connection/domain states by @conao3 in #450
• fix(mwaa): tier-3 audit fidelity gaps — lifecycle, unified tags, pagination, field persistence by @conao3 in #451
• fix(amplify): tier-3 audit fidelity gaps — pagination, unified tags, domain/job lifecycle by @conao3 in #452
• fix(appconfig): tier-4 audit fidelity gaps — GetConfiguration, pagination, deployment lifecycle by @conao3 in #453
• fix(fsx): tier-3 audit fidelity gaps — lifecycle, soft-delete, pagination, filters, tags by @conao3 in #454
• fix(wafv2): tier-3 audit fidelity gaps — pagination, ID validation, ARN-based lookup by @conao3 in #455
• fix(emr-serverless): tier-4 audit fidelity gaps — state transitions, pagination/filters, tag ARN validation by @conao3 in #456
• fix(lakeformation): tier-4 audit fidelity gaps — LF-tag resource assignment + search, table objects, pagination, 404 codes by @conao3 in #458
• fix(appmesh): tier-4 fidelity gaps — pagination, spec preservation, tag cleanup by @conao3 in #457
• fix(guardduty): tier-3 audit fidelity gaps — findings backed by storage, statistics, pagination, admin relationship by @conao3 in #459
• fix(scheduler): tier-4 audit fidelity gaps — pagination, tag/group not-found, schedule-group validation by @conao3 in #461
• fix(servicecatalog): tier-4 audit fidelity gaps — provisioned product lifecycle, copy/share tracking, pagination by @conao3 in #460
• fix(transcribe): tier-4 audit fidelity gaps — job status lifecycle, pagination/name-filters, duplicate/not-found errors by @conao3 in #462
• fix(imagebuilder): tier-4 audit fidelity gaps — pagination, filters, workflow executions, recipe validation by @conao3 in #463
• fix(storagegateway): tier-4 audit fidelity gaps — tape retrieval/archival state validation, pagination by @conao3 in #464
• fix(signer): add revocationRecord, pagination, and filters by @conao3 in #465
• fix(detective): tier-4 audit fidelity gaps — CreateGraph idempotency, pagination/filters, invitation state, admin scoping by @conao3 in #466
• fix(accessanalyzer): tier-4 audit fidelity — filter/pagination, policy checks, unified tags by @conao3 in #467
• fix(lexv2): tier-4 async status, pagination, export/import lifecycle by @conao3 in #468
• fix(swf): tier-4 audit fidelity gaps — pagination, poll task history events, activity type validation by @conao3 in #469
• fix(globalaccelerator): tier-3 audit fidelity gaps — accelerator lifecycle, pagination, custom-routing traffic rules, cross-account update by @conao3 in #470
• fix(kendra): tier-5 audit fidelity gaps by @conao3 in #471
• fix(forecast): resource ref validation, pagination/filters, e2e coverage by @conao3 in #473
• fix(workspaces): tier-5 audit fidelity gaps — workspace lifecycle, connection state, ModifyWorkspaceProperties, pagination by @conao3 in #474
• fix(elasticbeanstalk): tier-5 audit fidelity gaps — resource lifecycle, ref validation, pagination by @conao3 in #472
• fix(medialive): list pagination, alert filtering and persistence by @conao3 in #476
• fix(mediapackage): pagination, S3 validation, unified tag storage, harvest status by @conao3 in #477
• fix(iotevents): tier-5 audit fidelity gaps — duplicate-name errors, pagination, analysis status, delete tag cleanup by @conao3 in #478
• fix(personalize): tier-5 audit fidelity gaps — resource status lifecycle, pagination, ref validation by @conao3 in #479
• fix(networkmanager): add pagination and ID/parent filters to Get*/List* ops by @conao3 in #480
• fix(ram): tier-5 audit fidelity gaps — resourceOwner filtering, pagination, association status, tag/permission filters by @conao3 in #481
• fix(network-firewall): tier-5 audit fidelity gaps — pagination, UpdateToken validation, proxy rule persistence by @conao3 in #483
• fix(schemas): tier-5 fidelity gaps — pagination, Scope/SourceArnPrefix filters, code-binding status/blob by @conao3 in #482
• fix(ssm-incidents): add pagination, filters, status validation, deletion protection, tags by @conao3 in #484
• fix(datapipeline): fidelity gaps — SetStatus/QueryObjects/DescribeObjects/ListPipelines/DescribePipelines by @conao3 in #485
• fix(comprehend): status lifecycle, List filters/pagination, ms timestamps by @conao3 in #475
• fix(mediastore): container lifecycle and ListContainers pagination by @conao3 in #486
• fix(dlm): tier-6 fidelity gaps — GetLifecyclePolicies filters, tag validation/cleanup by @conao3 in #487
• fix(iotsitewise): tier-6 audit fidelity gaps — pagination, property history, asset validation, state transitions by @conao3 in #488
• fix(frauddetector): add pagination, rule evaluation, prediction metadata, event filters by @conao3 in #489
• fix(mediatailor): required-field validation, ScheduleConfiguration, pagination by @conao3 in #490
• fix(budgets): pagination, performance history data, action state validation by @conao3 in #491
• fix(dataexchange): tier-6 audit fidelity gaps by @conao3 in #492
• fix(directconnect): tier-6 audit fidelity gaps — connection/VIF state lifecycle, pagination, soft-delete by @conao3 in #493
• fix(fms): tier-6 audit fidelity gaps — pagination, policy token, compliance data by @conao3 in #494
• fix(licensemanager): add pagination and filters to List* operations by @conao3 in #495
• fix(greengrass): tier-6 audit fidelity gaps by @conao3 in #496
• fix(shield): add pagination+filters to list ops, tag cleanup on delete by @conao3 in #497
• fix(resourcegroups): tier-6 audit fidelity gaps by @conao3 in #498
• fix(appstream): tier-6 audit fidelity gaps — GetExportImageTask param/not-found, session persistence, pagination/filters by @conao3 in #499
• fix(ivs): tier-6 audit fidelity gaps — lifecycle, pagination, tags, sessions by @conao3 in #500
• fix(outposts): tier-7 audit fidelity gaps — tag round-trip, pagination/filters, delete cleanup by @conao3 in #501
• fix(groundstation): tier-7 audit fidelity gaps — pagination, contact/ephemeris lifecycle, tag round-trip by @conao3 in #503
• fix(pinpoint): tag store reconciliation, pagination, journey state validation by @conao3 in #502
• fix(voiceid): tier-7 audit fidelity gaps — pagination, tag persistence, job lifecycle, non-empty conflict by @conao3 in https://github.com/conao3/bun-bunsai/pull/504
• fix(wisdom): tier-7 fidelity gaps — lifecycle, pagination, conflict, tag round-trip, import-job by @conao3 in https://github.com/conao3/bun-bunsai/pull/506
• fix(pinpoint-sms-voice-v2): tier-7 fidelity gaps — pagination, filters, lifecycle, deletion-protection, ref validation by @conao3 in https://github.com/conao3/bun-bunsai/pull/505
• fix(ssm-contacts): tier-7 audit fidelity gaps — pagination, tag persistence/cleanup, activation validation, ref conflict by @conao3 in https://github.com/conao3/bun-bunsai/pull/507
• fix(ivs): tier-7 fidelity gaps — ref validation, stop-state, delete-in-use, cascade, tag ARN by @conao3 in https://github.com/conao3/bun-bunsai/pull/508
• fix(resourcegroups): tier-7 fidelity gaps — ARN validation, cancel guard, cascade, reserved names, next-token by @conao3 in https://github.com/conao3/bun-bunsai/pull/509
• fix(appstream): tier-7 fidelity gaps — delete in-use, pagination, state guards, ARN validation by @conao3 in https://github.com/conao3/bun-bunsai/pull/510
• fix(connect): tier-7 fidelity gaps — pagination, lifecycle, tag round-trip, delete not-found by @conao3 in https://github.com/conao3/bun-bunsai/pull/511
• fix(shield): tier-7 residual fidelity gaps — pattern validation, list pagination, tag ARN validation by @conao3 in https://github.com/conao3/bun-bunsai/pull/512
• fix(directconnect): tier-7 residual fidelity gaps — parent-filter+pagination, gateway pagination, delete-lag block by @conao3 in https://github.com/conao3/bun-bunsai/pull/513
• fix(fms): tier-7 residual fidelity gaps — tag ARN validation, PutPolicy TagList, admin reassoc, batch items required, member-id limit by @conao3 in https://github.com/conao3/bun-bunsai/pull/514
• fix(mq): tier-8 fidelity gaps — CreatorRequestId idempotency, tag round-trip, lifecycle transitions, reboot state guard by @conao3 in https://github.com/conao3/bun-bunsai/pull/515
• fix(servicediscovery): tier-8 fidelity gaps — CreatorRequestId idempotency, in-use delete guards, list pagination/filters by @conao3 in https://github.com/conao3/bun-bunsai/pull/516
• fix(batch): tier-8 fidelity gaps — tag round-trip on Create, delete state guard, tag cleanup on delete by @conao3 in https://github.com/conao3/bun-bunsai/pull/517
• fix(storagegateway): tier-8 fidelity gaps — ClientToken idempotency on file shares, tag cleanup on delete, gateway state guards by @conao3 in https://github.com/conao3/bun-bunsai/pull/518
• fix(backup): tier-8 fidelity gaps — ListBackupVaults pagination, DeleteBackupVault tag cleanup by @conao3 in https://github.com/conao3/bun-bunsai/pull/519
• fix(firehose): tier-9 fidelity gaps — Create persists Tags + Source, encryption state/required-field guards by @conao3 in https://github.com/conao3/bun-bunsai/pull/520
• fix(ecr): tier-9 fidelity gaps — enum validation, repositoryName pattern, DescribeRepositories+ListImages pagination, tagStatus filter by @conao3 in https://github.com/conao3/bun-bunsai/pull/521
• fix(transcribe): tier-10 fidelity gaps — vocabulary lifecycle, Start* tag ARN persistence, category conflict guard by @conao3 in https://github.com/conao3/bun-bunsai/pull/522
• fix(transcribe): NextToken malformed guard, Settings ref validation, Delete state guard + tag purge by @conao3 in https://github.com/conao3/bun-bunsai/pull/523
• fix(firehose): add tag list and limit boundary validation by @conao3 in https://github.com/conao3/bun-bunsai/pull/525
• fix(ecr): orphan key cleanup on force-delete, DescribeImages pagination by @conao3 in https://github.com/conao3/bun-bunsai/pull/524
• fix(keyspaces): tag persistence, delete cleanup, in-use guard, malformed token by @conao3 in https://github.com/conao3/bun-bunsai/pull/526
• fix(mwaa): lifecycle, tag ARN validation, list pagination bounds by @conao3 in https://github.com/conao3/bun-bunsai/pull/528
• fix(emr-serverless): clientToken idempotency, delete guards, lifecycle by @conao3 in https://github.com/conao3/bun-bunsai/pull/529
• fix(dax): tag persistence, ref validation, in-use delete guards, lifecycle by @conao3 in https://github.com/conao3/bun-bunsai/pull/527
• fix(codepipeline): tier-11 fidelity gaps — clientRequestToken idempotency, stop state guard, tag round-trip by @conao3 in https://github.com/conao3/bun-bunsai/pull/530
• fix(datasync): create tag persistence, dedup, cleanup-on-delete, in-use guard by @conao3 in https://github.com/conao3/bun-bunsai/pull/531
• fix(amplify): tier-12 fidelity gaps — tag round-trip, delete cascade, job state machine by @conao3 in https://github.com/conao3/bun-bunsai/pull/532
• fix(wafv2): tier-12 fidelity gaps — in-use guards, ref validation, tag round-trip by @conao3 in https://github.com/conao3/bun-bunsai/pull/533
• fix(emr): tier-12 fidelity gaps — tag persistence, cleanup, Marker pagination by @conao3 in https://github.com/conao3/bun-bunsai/pull/534
• fix(memorydb): tier-12 fidelity gaps — tag cleanup, ref validation, in-use delete guards by @conao3 in https://github.com/conao3/bun-bunsai/pull/535
• fix(ses): active ruleset delete guard, identity cascade cleanup, pagination by @conao3 in https://github.com/conao3/bun-bunsai/pull/536
• fix(apprunner): tier-13 audit fidelity gaps — tag pipeline, lifecycle, in-use guards by @conao3 in https://github.com/conao3/bun-bunsai/pull/538
• fix(appmesh): tier-13 audit fidelity gaps — in-use guards, clientToken idempotency, tag round-trip by @conao3 in https://github.com/conao3/bun-bunsai/pull/539
• fix(fsx): tier-13 audit fidelity gaps — ClientRequestToken idempotency, tag cleanup, in-use guards by @conao3 in https://github.com/conao3/bun-bunsai/pull/537
• fix(appconfig): tier-13 audit fidelity gaps — tag round-trip, pagination, in-use guards by @conao3 in https://github.com/conao3/bun-bunsai/pull/540
• fix(transfer): tier-14 fidelity gaps — idempotent ops, enum values, in-use guard by @conao3 in https://github.com/conao3/bun-bunsai/pull/541
• fix(cloudtrail): tier-14 audit fidelity gaps — EDS delete guards, tag cleanup, CreateTrail tags by @conao3 in https://github.com/conao3/bun-bunsai/pull/542
• fix(pinpoint): tier-14 audit fidelity gaps — channel Enabled, resource validation, in-use guards by @conao3 in https://github.com/conao3/bun-bunsai/pull/545
• fix(sagemaker): address tier-14 audit HIGH gaps by @conao3 in https://github.com/conao3/bun-bunsai/pull/543
• fix(kms): add Tags on CreateKey, list pagination, and ListGrants GranteePrincipal filter by @conao3 in https://github.com/conao3/bun-bunsai/pull/544
• fix(stepfunctions): idempotent Create/Activity/Alias, tag persistence by @conao3 in https://github.com/conao3/bun-bunsai/pull/547
• fix(route53): tier-15 audit HIGH gaps — idempotency, in-use delete, pagination by @conao3 in https://github.com/conao3/bun-bunsai/pull/546
• fix(ssm): ClientToken idempotency and DocumentName validation by @conao3 in https://github.com/conao3/bun-bunsai/pull/548
• fix(sns): HIGH-1~5 audit fidelity gaps — Tags, pagination, FIFO dedup, ReturnSubscriptionArn by @conao3 in https://github.com/conao3/bun-bunsai/pull/549
• fix(iotsitewise): resolve tier-15 audit HIGH gaps — clientToken, tag round-trip, parent-child guards by @conao3 in https://github.com/conao3/bun-bunsai/pull/550
• fix(sqs): tier-16 audit HIGH-1~9 — QueueNameExists, batch validation, ListQueues/DLQ pagination by @conao3 in https://github.com/conao3/bun-bunsai/pull/551
• fix(glue): pagination, tag cleanup on delete, ClientToken idempotency by @conao3 in https://github.com/conao3/bun-bunsai/pull/554
• fix(cognito-idp): fix tier-16 HIGH audit gaps (UserPoolTags, DeletionProtection, TagResource ref, DeleteGroup membership) by @conao3 in https://github.com/conao3/bun-bunsai/pull/553
• fix(eventbridge): resolve tier-16 audit HIGH gaps — Tags, in-use guards, ref validation by @conao3 in https://github.com/conao3/bun-bunsai/pull/552
• fix(efs): resolve HIGH audit gaps — CreationToken idempotency, lifecycle creating, replication delete guard by @conao3 in https://github.com/conao3/bun-bunsai/pull/556
• fix(acm): implement IdempotencyToken, InUseBy guard, pagination, tags by @conao3 in https://github.com/conao3/bun-bunsai/pull/555
• fix(athena): add ClientRequestToken idempotency, tag persistence, list pagination, StateFilter by @conao3 in https://github.com/conao3/bun-bunsai/pull/557
• fix(networkmanager): tier-17 audit HIGH gaps — ClientToken, initial state, tag plumbing, in-use delete by @conao3 in https://github.com/conao3/bun-bunsai/pull/559
• fix(lambda): repair Tags round-trip, Pending lifecycle, ListFunctions pagination by @conao3 in https://github.com/conao3/bun-bunsai/pull/560
• fix(dynamodb): CreateTable lifecycle, Tags, TransactWriteItems idempotency by @conao3 in https://github.com/conao3/bun-bunsai/pull/561
• fix(cloudfront): resolve tier-17 audit HIGH gaps — CallerReference idempotency, in-use guards, DistributionNotDisabled by @conao3 in https://github.com/conao3/bun-bunsai/pull/558
• fix(comprehend): idempotency on Endpoint/Flywheel/Dataset, delete state guards, ARN reference validation by @conao3 in https://github.com/conao3/bun-bunsai/pull/563
• fix(iam): delete tag cleanup, MaxItems/Marker pagination, ListPolicies filters by @conao3 in https://github.com/conao3/bun-bunsai/pull/562
• fix(secretsmanager): HIGH-5 idempotency and validation gaps (CON-2029) by @conao3 in https://github.com/conao3/bun-bunsai/pull/564
• fix(cloudwatch): repair tier-18 audit fidelity gaps by @conao3 in https://github.com/conao3/bun-bunsai/pull/565
• fix(swf): reverseOrder sorting, TypeNotDeprecatedFault, DomainDeprecatedFault by @conao3 in https://github.com/conao3/bun-bunsai/pull/567
• fix(opensearch): HIGH-1/2/3/4 audit fidelity gaps by @conao3 in https://github.com/conao3/bun-bunsai/pull/566
• fix(kinesis): address tier-20 audit gaps — Tags, EnforceConsumerDeletion, ExplicitHashKey, status guards by @conao3 in https://github.com/conao3/bun-bunsai/pull/569
• fix(kendra): resolve tier-19 audit fidelity gaps by @conao3 in https://github.com/conao3/bun-bunsai/pull/568
• fix(lexv2): repair tier-19 audit fidelity gaps — HIGH-1/2/3 by @conao3 in https://github.com/conao3/bun-bunsai/pull/570
• fix(redshift): HIGH audit gaps — tags, delete cleanup, list pagination by @conao3 in https://github.com/conao3/bun-bunsai/pull/571
• fix(lakeformation): transaction state guards, pagination, StatusFilter by @conao3 in https://github.com/conao3/bun-bunsai/pull/572
• fix(eks): DeleteCluster child-resource guard + Delete* tag cleanup (CON-2040 manual) by @conao3 in https://github.com/conao3/bun-bunsai/pull/573
• fix(mediatailor): tag round-trip on Create + child-in-use guards + function ref guard (CON-2036 manual) by @conao3 in https://github.com/conao3/bun-bunsai/pull/574
• fix(ecs): DescribeTaskDefinition tag retrieval + Delete/Deregister tag cleanup (CON-2041 manual) by @conao3 in https://github.com/conao3/bun-bunsai/pull/575
• fix(servicecatalog): DeletePortfolio/DeleteProduct in-use guards (CON-2044 manual) by @conao3 in https://github.com/conao3/bun-bunsai/pull/576
• fix(frauddetector): DeleteDetectorVersion ACTIVE guard + UpdateDetectorVersion DRAFT guard (CON-2038 manual) by @conao3 in https://github.com/conao3/bun-bunsai/pull/577
• fix(elasticache): Create Tags persistence + Delete tag cleanup (CON-2043 manual) by @conao3 in https://github.com/conao3/bun-bunsai/pull/578
• fix(rds): CreateDBInstance Tags persistence + DeleteDBInstance tag cleanup (CON-2042 manual) by @conao3 in https://github.com/conao3/bun-bunsai/pull/579
• fix(eks): clientRequestToken idempotency for all 7 Create ops (CON-2040) by @conao3 in https://github.com/conao3/bun-bunsai/pull/580
• fix(ssm): clean up tag entries on DeleteParameter and DeleteParameters by @conao3 in https://github.com/conao3/bun-bunsai/pull/581
• fix(apprunner): validate AutoScaling and Observability ARN existence in CreateService/UpdateService by @conao3 in https://github.com/conao3/bun-bunsai/pull/585
• fix(ses): MEDIUM audit gaps — ConfigurationSet validation, existence guards, DoesNotExistException by @conao3 in https://github.com/conao3/bun-bunsai/pull/584
• fix(glue): MEDIUM/LOW gaps from tier-16 audit (CON-2039) by @conao3 in https://github.com/conao3/bun-bunsai/pull/583
• fix(appconfig): StartDeployment returns DEPLOYING state by @conao3 in https://github.com/conao3/bun-bunsai/pull/586
• fix(route53): validate DelegationSetId, add pagination to ListHostedZones, dedupe CreateReusableDelegationSet by @conao3 in https://github.com/conao3/bun-bunsai/pull/582
• fix(apprunner): pagination default, list filters, revision bump by @conao3 in https://github.com/conao3/bun-bunsai/pull/587
• fix(pinpoint): MEDIUM gaps — template duplicate, tag resource validation, pagination bounds by @conao3 in https://github.com/conao3/bun-bunsai/pull/588
• fix(mediapackage): tier-22 audit fidelity gaps — channel in-use guard, tag cleanup, harvest job lifecycle/validation by @conao3 in https://github.com/conao3/bun-bunsai/pull/589
• fix(elbv2): tier-22 audit fidelity gaps (HIGH×5, MEDIUM×3) by @conao3 in https://github.com/conao3/bun-bunsai/pull/590
• fix(forecast): tier-22 audit fidelity gaps — Tags, AlreadyExists, DeleteResourceTree cascade, Stop/Resume semantics by @conao3 in https://github.com/conao3/bun-bunsai/pull/591
• fix(apprunner): throw InvalidRequestException for unknown ARN in CreateService/UpdateService by @conao3 in https://github.com/conao3/bun-bunsai/pull/592
• fix(signer): resolve tier-22 audit fidelity gaps by @conao3 in https://github.com/conao3/bun-bunsai/pull/593
• fix(logs): tier-22 audit HIGH gaps — CreateLogGroup inputs, deletion protection, delete cascade, tag store unify, logGroupIdentifier by @conao3 in https://github.com/conao3/bun-bunsai/pull/595
• fix(medialive): address HIGH-tier audit gaps by @conao3 in https://github.com/conao3/bun-bunsai/pull/594
• test(scenario): Cognito auth round-trip — SignUp → Confirm → InitiateAuth → JWT verify → GetUser by @conao3 in https://github.com/conao3/bun-bunsai/pull/596
• test(scenario): CloudFormation IaC round-trip SNS+SQS+DynamoDB by @conao3 in https://github.com/conao3/bun-bunsai/pull/597
• test(scenario): STS temporary credentials — AssumeRole creds used for subsequent SDK calls through the gateway by @conao3 in https://github.com/conao3/bun-bunsai/pull/599
• fix(cognito-idp): persist sub UUID as user attribute at SignUp so token claims carry the real sub by @conao3 in https://github.com/conao3/bun-bunsai/pull/601
• fix(logs): resolve MEDIUM tier-22 audit gaps — GetLogEvents nextToken, FilterLogEvents limit/prefix, export task lifecycle by @conao3 in https://github.com/conao3/bun-bunsai/pull/600
• fix(medialive): tier-22 MEDIUM/LOW gaps — MultiplexProgram settings, pagination, list filters, signal-map lifecycle by @conao3 in https://github.com/conao3/bun-bunsai/pull/602
• test(scenario): Step Functions orchestration — Choice + Lambda Task + Retry/Catch by @conao3 in https://github.com/conao3/bun-bunsai/pull/598
• test(scenario): API Gateway → Lambda proxy integration round-trip by @conao3 in https://github.com/conao3/bun-bunsai/pull/603
• test(scenario): Lambda versioning blue/green deployment round-trip by @conao3 in https://github.com/conao3/bun-bunsai/pull/604
• fix(dashboard): surface fetch/SSE failures, reset connected=false by @conao3 in https://github.com/conao3/bun-bunsai/pull/605
• test(scenario): Kinesis consumer loop — PutRecords batch, shard iterator paging, sequence ordering by @conao3 in https://github.com/conao3/bun-bunsai/pull/607
• fix(dashboard): keyboard accessibility — interactive divs to buttons, aria states by @conao3 in https://github.com/conao3/bun-bunsai/pull/608
• fix(dashboard): drawer close history bug + dialog semantics by @conao3 in https://github.com/conao3/bun-bunsai/pull/606
• fix(dashboard): resources single source of truth — remove double fetching by @conao3 in https://github.com/conao3/bun-bunsai/pull/610
• fix(dashboard): raise --muted-soft contrast to WCAG AA and add :focus-visible rings by @conao3 in https://github.com/conao3/bun-bunsai/pull/611
• test(scenario): EventBridge pattern routing — detail field matching by @conao3 in https://github.com/conao3/bun-bunsai/pull/612
• feat(server): in-memory state snapshot API under /__bunsai/snapshots by @conao3 in https://github.com/conao3/bun-bunsai/pull/613
• feat(dashboard): extend serviceMeta brand entries to core services by @conao3 in https://github.com/conao3/bun-bunsai/pull/614
• feat(dashboard+server): add headers tab and method/path meta to request log detail by @conao3 in https://github.com/conao3/bun-bunsai/pull/615
• test(scenario): Secrets Manager rotation staging version stages lifecycle by @conao3 in https://github.com/conao3/bun-bunsai/pull/616
• feat(dashboard): add State Snapshots screen with dump/restore UI by @conao3 in https://github.com/conao3/bun-bunsai/pull/618
• feat(dashboard): service-specific resource detail views by @conao3 in https://github.com/conao3/bun-bunsai/pull/619
• fix(iam): implement SimulateCustomPolicy/SimulatePrincipalPolicy allow/deny evaluation by @conao3 in https://github.com/conao3/bun-bunsai/pull/621
• fix(dashboard): live pause buffering + SSE render batching + memoized log rows by @conao3 in https://github.com/conao3/bun-bunsai/pull/620
• test(scenario): CloudWatch Logs Insights filter/sort/limit scenario by @conao3 in https://github.com/conao3/bun-bunsai/pull/622
• feat(dashboard): apply global scope to RequestLog and Overview by @conao3 in https://github.com/conao3/bun-bunsai/pull/624
• feat(dashboard): Settings screen — General/Scope/Services tabs by @conao3 in https://github.com/conao3/bun-bunsai/pull/623
• fix(dashboard): show not-found empty state for unknown /log/:id deep links by @conao3 in https://github.com/conao3/bun-bunsai/pull/625
• test(scenario): CloudWatch metrics PutMetricData → GetMetricStatistics/GetMetricData + alarm evaluation by @conao3 in https://github.com/conao3/bun-bunsai/pull/626
• feat(dashboard): deep-link Overview ServiceCard to Resource Browser by service by @conao3 in https://github.com/conao3/bun-bunsai/pull/627
• fix(server): respect BUNSAI_PORT in service-issued URLs by @conao3 in https://github.com/conao3/bun-bunsai/pull/628
• fix(server): use development:false when hmr is off to fix production jsxDEV TypeError by @conao3 in https://github.com/conao3/bun-bunsai/pull/629
• feat(test): parity harness — fixture replay runner + maint/bin recorder by @conao3 in https://github.com/conao3/bun-bunsai/pull/631
• feat(dashboard): add density and log layout settings by @conao3 in https://github.com/conao3/bun-bunsai/pull/630
• test(scenario): EventBridge archive + replay redelivery by @conao3 in https://github.com/conao3/bun-bunsai/pull/632
• test(scenario): SQS FIFO ordering, dedup, ContentBasedDeduplication, group isolation by @conao3 in https://github.com/conao3/bun-bunsai/pull/633
• test(scenario): ELBv2 target lifecycle — register, health transitions, listener forward, deregister by @conao3 in https://github.com/conao3/bun-bunsai/pull/634
• docs(readme): add quickstart, client examples, dashboard, snapshots, and limitations by @conao3 in https://github.com/conao3/bun-bunsai/pull/635
• test(scenario): Cognito TOTP MFA — software token association, verification, MFA challenge sign-in by @conao3 in https://github.com/conao3/bun-bunsai/pull/636
• fix(dashboard): auto-select first resource + full ARN in detail header by @conao3 in https://github.com/conao3/bun-bunsai/pull/637
• fix(dashboard): extract decideAutoSelect pure fn + fix auto-select race condition by @conao3 in https://github.com/conao3/bun-bunsai/pull/638
• docs(maint): add gen-status.ts and regenerate STATUS.md by @conao3 in https://github.com/conao3/bun-bunsai/pull/639
• fix(maint): derive Wire protocols from ServiceDefinition instead of model metadata by @conao3 in https://github.com/conao3/bun-bunsai/pull/640
• feat(autoscaling): new service — EC2 Auto Scaling groups, launch configurations, scaling lifecycle by @conao3 in https://github.com/conao3/bun-bunsai/pull/641
• feat(cognito-identity): new service — Identity Pools CRUD + GetId/GetCredentialsForIdentity by @conao3 in https://github.com/conao3/bun-bunsai/pull/642
• feat(pipes): new service — EventBridge Pipes CRUD + SQS source delivery by @conao3 in https://github.com/conao3/bun-bunsai/pull/645
• feat(parity): add localstack snapshot fixtures for SQS/SNS/Lambda by @conao3 in https://github.com/conao3/bun-bunsai/pull/644
• feat(core): support multiple service definitions per signingName by @conao3 in https://github.com/conao3/bun-bunsai/pull/646
• feat(codedeploy): new service — applications, deployment groups, deployment lifecycle by @conao3 in https://github.com/conao3/bun-bunsai/pull/648
• feat(route53resolver): new service — resolver endpoints, rules, rule associations by @conao3 in https://github.com/conao3/bun-bunsai/pull/647
• feat(application-autoscaling): new service — scalable targets, scaling policies, scheduled actions by @conao3 in https://github.com/conao3/bun-bunsai/pull/649
• feat(xray): new service — PutTraceSegments, GetTraceSummaries, BatchGetTraces, sampling rules by @conao3 in https://github.com/conao3/bun-bunsai/pull/643
• test(rds): DocumentDB and Neptune cluster lifecycle scenarios by @conao3 in https://github.com/conao3/bun-bunsai/pull/652
• feat(apigatewayv2): HTTP API core families via router multi-def by @conao3 in https://github.com/conao3/bun-bunsai/pull/650
• feat(sesv2): new service — email sending, identities, configuration sets (chunk 1) by @conao3 in https://github.com/conao3/bun-bunsai/pull/651
• feat(bedrock): new services — control plane + bedrock-runtime InvokeModel/Converse via router multi-def by @conao3 in https://github.com/conao3/bun-bunsai/pull/653
• feat(dms): new service — replication instances, endpoints, tasks with lifecycle by @conao3 in https://github.com/conao3/bun-bunsai/pull/654
• feat(textract): new service — sync/async document analysis with deterministic stub blocks by @conao3 in https://github.com/conao3/bun-bunsai/pull/656
• feat(timestream): new services — timestream-write + timestream-query via router multi-def, basic scan query by @conao3 in https://github.com/conao3/bun-bunsai/pull/657
• feat(kinesisanalyticsv2): new service — Flink application CRUD and run lifecycle by @conao3 in https://github.com/conao3/bun-bunsai/pull/655
• feat(acm-pca): new service — private CA lifecycle + IssueCertificate/GetCertificate/Revoke by @conao3 in https://github.com/conao3/bun-bunsai/pull/658
• feat: add AWS Verified Permissions service by @conao3 in https://github.com/conao3/bun-bunsai/pull/659
• feat(test): expand parity fixtures for DynamoDB, CloudFormation, EventBridge by @conao3 in https://github.com/conao3/bun-bunsai/pull/662
• feat: add MSK (kafka) service by @conao3 in https://github.com/conao3/bun-bunsai/pull/660
• feat(mediaconvert): new service — queues, presets, job templates, job lifecycle by @conao3 in https://github.com/conao3/bun-bunsai/pull/663
• feat(ce): new service — Cost Explorer with deterministic synthetic series + cost categories CRUD by @conao3 in https://github.com/conao3/bun-bunsai/pull/664
• feat(iot+iot-data): new services — IoT Core registry + device shadows with delta by @conao3 in https://github.com/conao3/bun-bunsai/pull/665
• feat(sso-admin+identitystore): new services — permission sets, account assignments, users/groups by @conao3 in https://github.com/conao3/bun-bunsai/pull/661
• feat(cloudcontrol): new service — Cloud Control API resource CRUD with async request status by @conao3 in https://github.com/conao3/bun-bunsai/pull/667
• fix(cognito-identity): implement roles, auth guards, developer identity flows, delete cleanup by @conao3 in https://github.com/conao3/bun-bunsai/pull/668
• fix(pipes): autonomous RUNNING transition, backlog drain, and audit gaps (PIPES-01–08) by @conao3 in https://github.com/conao3/bun-bunsai/pull/669
• fix(xray): post-launch audit gaps — ctx.store migration, filter expression evaluator, Default rules seeding by @conao3 in https://github.com/conao3/bun-bunsai/pull/670
• fix(codedeploy): implement on-prem instances, revision registry, and config guards by @conao3 in https://github.com/conao3/bun-bunsai/pull/671
• feat(route53resolver): implement remaining 52 operations by @conao3 in https://github.com/conao3/bun-bunsai/pull/672
• feat(serverlessrepo): new service — applications, versions, CloudFormation template generation by @conao3 in https://github.com/conao3/bun-bunsai/pull/673
• fix(application-autoscaling): post-launch audit gaps — tag ARN guards, capacity validation, scaling activities by @conao3 in https://github.com/conao3/bun-bunsai/pull/674
• feat(autoscaling): implement remaining 48 operations by @conao3 in https://github.com/conao3/bun-bunsai/pull/675
• fix(route53resolver): post-launch audit gaps — endpoint in-use guard, rule type semantics, tag/IP guards by @conao3 in https://github.com/conao3/bun-bunsai/pull/676
• feat(fis): new service — experiment templates CRUD + experiment run lifecycle by @conao3 in https://github.com/conao3/bun-bunsai/pull/666
• fix(autoscaling): post-launch audit gaps — launch source validation, capacity reconciliation, attach semantics by @conao3 in https://github.com/conao3/bun-bunsai/pull/677
• fix(timestream-write): post-launch audit gaps — batch load fields, delete guard, pagination by @conao3 in https://github.com/conao3/bun-bunsai/pull/678
• fix(kinesisanalyticsv2): KDA2-001~008 post-launch audit gaps by @conao3 in https://github.com/conao3/bun-bunsai/pull/679
• fix(textract): post-launch audit gaps — idempotency, tag ARN 404, DatasetConfig, DeleteAdapter conflict by @conao3 in https://github.com/conao3/bun-bunsai/pull/682
• fix(identitystore): fix post-launch audit gaps (IDS-01 through IDS-08) by @conao3 in https://github.com/conao3/bun-bunsai/pull/683
• fix(acm-pca): post-launch audit gaps acmpca-01 through acmpca-08 by @conao3 in https://github.com/conao3/bun-bunsai/pull/685
• fix(iot): post-launch audit gaps — missing ops, CreateThing dup 409, cert delete guards, dangling refs by @conao3 in https://github.com/conao3/bun-bunsai/pull/684
• fix(dms): post-launch audit gaps DMS-01 through DMS-08 by @conao3 in https://github.com/conao3/bun-bunsai/pull/686
• fix(verifiedpermissions): post-launch audit gaps VP-1 through VP-8 by @conao3 in https://github.com/conao3/bun-bunsai/pull/687
• fix(sso-admin): resolve post-launch audit gaps (SSOADMIN-001–008) by @conao3 in https://github.com/conao3/bun-bunsai/pull/688
• fix(mediaconvert): post-launch audit gaps — SearchJobs, jobs-query, certificate ops, list filters, idempotency, cross-validation, tags by @conao3 in https://github.com/conao3/bun-bunsai/pull/689
• fix(iot-data): post-launch audit gaps — 6 missing ops, Publish stub, shadow version conflict by @conao3 in https://github.com/conao3/bun-bunsai/pull/690
• fix(timestream-query): implement ScheduledQuery lifecycle, tag persistence, and query improvements by @conao3 in https://github.com/conao3/bun-bunsai/pull/681
• fix(cloudcontrol): resolve post-launch audit gaps CC-01 through CC-08 by @conao3 in https://github.com/conao3/bun-bunsai/pull/691
• fix(ce): post-launch audit gaps CE-001 through CE-008 by @conao3 in https://github.com/conao3/bun-bunsai/pull/692
• fix(kafka): post-launch audit gaps (KAFKA-01 through KAFKA-08) by @conao3 in https://github.com/conao3/bun-bunsai/pull/680
• docs: regenerate STATUS.md and update README service count by @conao3 in https://github.com/conao3/bun-bunsai/pull/693
• feat(dashboard): extend serviceMeta to newly added services by @conao3 in https://github.com/conao3/bun-bunsai/pull/694
• fix(dashboard): aggregate services by name to deduplicate multi-def cards by @conao3 in https://github.com/conao3/bun-bunsai/pull/695
• test(ssm): hierarchical app config scenario by @conao3 in https://github.com/conao3/bun-bunsai/pull/698
• test(kms): add encryption app scenario test by @conao3 in https://github.com/conao3/bun-bunsai/pull/697
• test(iam): add app permission setup scenario by @conao3 in https://github.com/conao3/bun-bunsai/pull/699
• test(s3): add static-site hosting scenario e2e test by @conao3 in https://github.com/conao3/bun-bunsai/pull/700
• feat(dashboard): add serviceMeta entries for all 141 services by @conao3 in https://github.com/conao3/bun-bunsai/pull/696
• test(elasticache): cache layer provisioning scenario by @conao3 in https://github.com/conao3/bun-bunsai/pull/701
• test(eks): cluster provisioning scenario by @conao3 in https://github.com/conao3/bun-bunsai/pull/702
• test(ecr): image registry workflow scenario by @conao3 in https://github.com/conao3/bun-bunsai/pull/703
• test(cloudfront): add CDN delivery config scenario e2e by @conao3 in https://github.com/conao3/bun-bunsai/pull/704
• test(ecs): container service deployment scenario by @conao3 in https://github.com/conao3/bun-bunsai/pull/705
• test(appsync): GraphQL API build-out scenario test by @conao3 in https://github.com/conao3/bun-bunsai/pull/706
• test(cloudtrail): audit trail operations scenario by @conao3 in https://github.com/conao3/bun-bunsai/pull/707
• test(mq): broker provisioning scenario by @conao3 in https://github.com/conao3/bun-bunsai/pull/708
• test(efs): shared file system scenario — create FS, mount target, access point, lifecycle policy, then guarded teardown by @conao3 in https://github.com/conao3/bun-bunsai/pull/710
• test(batch): job pipeline scenario — compute env → queue → job def → submit/track → terminate → DISABLED-guard cleanup by @conao3 in https://github.com/conao3/bun-bunsai/pull/709
• test(backup): add backup plan operation scenario by @conao3 in https://github.com/conao3/bun-bunsai/pull/711
• test(organizations): multi-account org management scenario by @conao3 in https://github.com/conao3/bun-bunsai/pull/712
• test(glue): add data catalog build scenario by @conao3 in https://github.com/conao3/bun-bunsai/pull/713
• fix(iam): add DeleteConflict guard to DeleteRole and DeletePolicy by @conao3 in https://github.com/conao3/bun-bunsai/pull/714
• test(athena): add query execution workflow scenario by @conao3 in https://github.com/conao3/bun-bunsai/pull/715
• feat(test): expand parity fixtures for secretsmanager, ssm, kms, sts by @conao3 in https://github.com/conao3/bun-bunsai/pull/716
• test(route53): add failover routing record e2e by @conao3 in https://github.com/conao3/bun-bunsai/pull/717
• fix(ec2): validate AllocationId in CreateNatGateway and VpcId/RouteTableIds in CreateVpcEndpoint by @conao3 in https://github.com/conao3/bun-bunsai/pull/718
• fix(sns): RedrivePolicy DLQ delivery and PendingToken retrieval by @conao3 in https://github.com/conao3/bun-bunsai/pull/720
• test(secretsmanager): strengthen rotation lambda step assertions by @conao3 in https://github.com/conao3/bun-bunsai/pull/719
• feat(test): expand parity fixtures for IAM, CloudWatch Logs, Step Functions, Route 53 by @conao3 in https://github.com/conao3/bun-bunsai/pull/721
• fix(logs): lambda subscription delivery and OR/exclusion filter patterns by @conao3 in https://github.com/conao3/bun-bunsai/pull/722
• fix(apigateway): ImportApiKeys CSV parse + CreateUsagePlanKey validation + DeleteApiKey cascade by @conao3 in https://github.com/conao3/bun-bunsai/pull/723
• feat(test): extend parity runner ref to nested paths and add KMS chain fixtures by @conao3 in https://github.com/conao3/bun-bunsai/pull/724
• feat(ecs): propagate loadBalancers to elbv2 target groups by @conao3 in https://github.com/conao3/bun-bunsai/pull/725
• feat(test): add expectedError support to parity runner and error fixtures by @conao3 in https://github.com/conao3/bun-bunsai/pull/726
• fix(logs): add JSON filter pattern support ({ $.field = ... }) by @conao3 in https://github.com/conao3/bun-bunsai/pull/727
• feat(test): parity wave 3 — vendor 8 services + s3 fixtures by @conao3 in https://github.com/conao3/bun-bunsai/pull/728
• feat(test): add apigateway and acm parity fixtures by @conao3 in https://github.com/conao3/bun-bunsai/pull/729
• feat(test): expand parity fixtures for CloudWatch, Kinesis, Firehose by @conao3 in https://github.com/conao3/bun-bunsai/pull/730
• feat(test): parity wave 3 — ec2 and route53resolver fixtures by @conao3 in https://github.com/conao3/bun-bunsai/pull/731
• fix(logs): add IS NULL / NOT EXISTS / IS TRUE / IS FALSE operators to JSON filter pattern by @conao3 in https://github.com/conao3/bun-bunsai/pull/732
• feat(test): parity wave 4 — ses and transcribe fixtures by @conao3 in https://github.com/conao3/bun-bunsai/pull/733
• fix(apigateway): add endpointConfiguration to restApiView by @conao3 in https://github.com/conao3/bun-bunsai/pull/734
• feat(dashboard): group resources by key prefix in Resource Browser by @conao3 in https://github.com/conao3/bun-bunsai/pull/735
• feat(sesv2): implement 35 ops (contacts, custom verif templates, identity policies, export/import jobs, insights) by @conao3 in https://github.com/conao3/bun-bunsai/pull/736
• feat(iot): implement jobs, job executions, job templates, commands ops by @conao3 in https://github.com/conao3/bun-bunsai/pull/737
• feat(sesv2): implement 46 ops (dedicated IPs, account attrs, tenants, multi-region endpoints, deliverability dashboard) by @conao3 in https://github.com/conao3/bun-bunsai/pull/738
• feat(iot): implement certificates/provisioning/role-alias/authorizer/domain-config ops by @conao3 in https://github.com/conao3/bun-bunsai/pull/740
• feat(apigatewayv2): implement 66 missing operations by @conao3 in https://github.com/conao3/bun-bunsai/pull/739
• feat(iot): implement Device Defender operations (~58 ops) by @conao3 in https://github.com/conao3/bun-bunsai/pull/741
• feat(iot): implement billing groups / dynamic thing groups / fleet metrics / indexing / registration tasks (~30 ops) by @conao3 in https://github.com/conao3/bun-bunsai/pull/742
• feat(cloudtrail): implement LookupEvents with gateway event recording by @conao3 in https://github.com/conao3/bun-bunsai/pull/743
• feat(iot): implement all 51 remaining ops (missing 0/272) by @conao3 in https://github.com/conao3/bun-bunsai/pull/744
• docs(maint): regenerate STATUS.md and align README coverage figures by @conao3 in https://github.com/conao3/bun-bunsai/pull/745
• fix(dynamodb): store and reflect ProvisionedThroughput in table operations by @conao3 in https://github.com/conao3/bun-bunsai/pull/746
• fix(s3): resolve null-versioned object deletion and add missing response headers by @conao3 in https://github.com/conao3/bun-bunsai/pull/748
• feat(test): terraform smoke test against bunsai endpoint by @conao3 in https://github.com/conao3/bun-bunsai/pull/747
• feat(maint): add record-parity script and CONTRIBUTING guide by @conao3 in https://github.com/conao3/bun-bunsai/pull/749
• feat(test): parity wave 6 — docs-derived fixtures for elasticache/ecs/ecr/eks/cloudfront/organizations by @conao3 in https://github.com/conao3/bun-bunsai/pull/750
• feat(test): parity wave 5 — moto aws_verified test vendoring (rds / athena / timestream-write) by @conao3 in https://github.com/conao3/bun-bunsai/pull/751
• fix(athena): seed default primary workgroup and guard its deletion by @conao3 in https://github.com/conao3/bun-bunsai/pull/753
• fix(s3): add replication/requestPayment routing and fix S3 XML error format for Terraform smoke by @conao3 in https://github.com/conao3/bun-bunsai/pull/752
• test(parity): wave-6 docs-derived fixtures for backup/efs/mq/batch/appsync/glue by @conao3 in https://github.com/conao3/bun-bunsai/pull/754
• fix(server): hide internal store keys from the management resources API by @conao3 in https://github.com/conao3/bun-bunsai/pull/755
• fix(rds): implement ModifyOptionGroup OptionsToInclude / OptionsToRemove by @conao3 in https://github.com/conao3/bun-bunsai/pull/756
• fix(sns): include default topic policy in GetTopicAttributes and restore SNS in terraform smoke by @conao3 in https://github.com/conao3/bun-bunsai/pull/757
• fix(router): resolve execute-api hosts before the numeric-label IP guard by @conao3 in https://github.com/conao3/bun-bunsai/pull/758
• feat(test): parity wave 7 — vendor moto aws_verified tests for 12 services and port first-half fixtures by @conao3 in https://github.com/conao3/bun-bunsai/pull/759
• feat(test): parity wave 7 second half — cloudformation / secretsmanager / ssm fixtures from moto aws_verified by @conao3 in https://github.com/conao3/bun-bunsai/pull/760
• feat(core): add per-service validation error mapping hook (s3 InvalidLocationConstraint) by @conao3 in https://github.com/conao3/bun-bunsai/pull/761
• test(dynamodb): expression engine edge cases and unused-values validation by @conao3 in https://github.com/conao3/bun-bunsai/pull/762
• test(s3): versioning / object-lock / multipart edge cases with retention guards by @conao3 in https://github.com/conao3/bun-bunsai/pull/763
• feat(dynamodb): reject reserved keywords as bare attribute names in expressions by @conao3 in https://github.com/conao3/bun-bunsai/pull/764
• refactor(conformance): classify known-gaps entries into named arrays by @conao3 in https://github.com/conao3/bun-bunsai/pull/765
• fix(conformance): strip requestId in XML comparison to run float output cases by @conao3 in https://github.com/conao3/bun-bunsai/pull/767
• feat(test): extend terraform smoke with Lambda / CloudWatch Logs / EventBridge by @conao3 in https://github.com/conao3/bun-bunsai/pull/768
• fix(dashboard): design audit — amber token fix + drift report (CON-2231) by @conao3 in https://github.com/conao3/bun-bunsai/pull/769
• feat(test): Cognito User Pool JWT → API Gateway COGNITO_USER_POOLS authorizer → Lambda dispatch scenario by @conao3 in https://github.com/conao3/bun-bunsai/pull/770
• fix(lambda): return 200 for GetFunctionCodeSigningConfig when no config set by @conao3 in https://github.com/conao3/bun-bunsai/pull/771
• feat(test): parity wave 8 — extend moto vendor pattern and add dynamodb/lambda fixtures by @conao3 in https://github.com/conao3/bun-bunsai/pull/772
• fix(apigateway): validate JWT iss/aud against providerARNs in COGNITO_USER_POOLS authorizer by @conao3 in https://github.com/conao3/bun-bunsai/pull/773
• feat(dashboard): add Persistence tab to Settings with correct tab order by @conao3 in https://github.com/conao3/bun-bunsai/pull/774
• feat(test): parity wave 9 — cognito-idp, application-autoscaling, ec2, athena fixtures by @conao3 in https://github.com/conao3/bun-bunsai/pull/775
• feat(server,dashboard): add uptime/version meta API and contentType to log entries by @conao3 in https://github.com/conao3/bun-bunsai/pull/776
• feat(test): parity wave 9 — s3 multipart/copy/lock/conditional fixtures by @conao3 in https://github.com/conao3/bun-bunsai/pull/777
• feat(dashboard): add Operation MultiFilter and S3 size-warn badge by @conao3 in https://github.com/conao3/bun-bunsai/pull/778
• fix(application-autoscaling): align DeregisterScalableTarget not-found error to ValidationException by @conao3 in https://github.com/conao3/bun-bunsai/pull/779
• fix(ec2): time-driven instance state lifecycle (pending/stopping/shutting-down) by @conao3 in https://github.com/conao3/bun-bunsai/pull/780
• fix(server,dashboard): expose gatewayPort in meta and use it in sidebar by @conao3 in https://github.com/conao3/bun-bunsai/pull/781
• fix(server): truncate large values in management resources API by @conao3 in https://github.com/conao3/bun-bunsai/pull/782
• test(parity): dynamodb query/scan fixtures — wave 10 by @conao3 in https://github.com/conao3/bun-bunsai/pull/783
• feat(server): add bunsai CLI entry and npm packaging scaffold (M1) by @conao3 in https://github.com/conao3/bun-bunsai/pull/784
• refactor(server): relocate aws-models to apps/server/models for npm packaging by @conao3 in https://github.com/conao3/bun-bunsai/pull/786
• feat(test): parity wave 10 - dynamodb PartiQL statements / update expressions / resource policy by @conao3 in https://github.com/conao3/bun-bunsai/pull/785
• feat(maint): add AWS CLI smoke script and CI job (M1) by @conao3 in https://github.com/conao3/bun-bunsai/pull/787
• fix(maint): unify impl counting in gen-status.ts with missing.ts logic (M1 step 5) by @conao3 in https://github.com/conao3/bun-bunsai/pull/788
• feat(s3): BucketAnalyticsConfiguration / BucketInventoryConfiguration / BucketMetricsConfiguration ops (CON-2246) by @conao3 in https://github.com/conao3/bun-bunsai/pull/789
• feat(s3): BucketIntelligentTieringConfiguration + BucketMetadata ops (CON-2247) by @conao3 in https://github.com/conao3/bun-bunsai/pull/791
• feat(maint): add startup/memory benchmark script vs LocalStack (M1) by @conao3 in https://github.com/conao3/bun-bunsai/pull/792
• feat(sts): implement AssumeRoot, GetAccessKeyInfo, GetDelegatedAccessToken, GetWebIdentityToken by @conao3 in https://github.com/conao3/bun-bunsai/pull/790
• ci: add release workflow building single binaries on tag push (M1) by @conao3 in https://github.com/conao3/bun-bunsai/pull/795
• feat(cloudfront): implement 60+ operations for new resource families by @conao3 in https://github.com/conao3/bun-bunsai/pull/793
• perf(server): lazy-load service model JSON to reduce startup time by @conao3 in https://github.com/conao3/bun-bunsai/pull/796
• feat(s3): implement chunk 3/4 missing ops (~11 ops) by @conao3 in https://github.com/conao3/bun-bunsai/pull/794
• feat(cloudfront): implement all 50 missing ops (missing 0/167) by @conao3 in https://github.com/conao3/bun-bunsai/pull/797
• feat(s3): implement chunk 4/4 missing ops — missing 0/111 achieved by @conao3 in https://github.com/conao3/bun-bunsai/pull/798
• fix(test): align cloudfront-7 e2e with SDK TrustStore and PublishFunction types by @conao3 in https://github.com/conao3/bun-bunsai/pull/799
• docs(readme): update README for M1 public quality by @conao3 in https://github.com/conao3/bun-bunsai/pull/800

New Contributors

• @conao3 made their first contribution in #4

Full Changelog: https://github.com/conao3/bun-bunsai/commits/v1.0.0