packages/aws/data_stream/config: guard against null API response fields

packages/aws/changelog.yml

@@ -1,4 +1,9 @@
 # newer versions go on top
+- version: "6.14.1"
+  changes:
+    - description: Handle null EvaluationResults in AWS Config GetComplianceDetailsByConfigRule response.
+      type: bugfix
+      link: https://github.com/elastic/integrations/pull/18787
 - version: "6.14.0"
   changes:
     - description: Enable agentless deployment for AWS RDS metrics.

packages/aws/data_stream/config/_dev/deploy/docker/files/config.yml

@@ -200,7 +200,7 @@ rules:
         body: |-
           {{ minify_json `
           {
-            "EvaluationResults": []
+            "EvaluationResults": null
           }
           `}}
   - path: /

packages/aws/data_stream/config/agent/stream/cel.yml.hbs

@@ -61,7 +61,7 @@ program: |
     :
     // Stage 1: Check if we have existing config rules to process
     // If we have worklist with ConfigRules, we already fetched rules and now need to get compliance details
-    has(state.?worklist.ConfigRules) && size(state.worklist.ConfigRules) > 0 ?
+    has(state.?worklist.ConfigRules) && state.worklist.ConfigRules != null && size(state.worklist.ConfigRules) > 0 ?
       {
         // State management: preserve existing state from previous iteration
         "worklist": state.worklist,
@@ -274,7 +274,7 @@ program: |
     // Stage 3: Process results - either exit early on failure or fetch compliance details
     !has(config_rules.worklist) ? // Exit early due to POST failure.
       config_rules
-    : has(config_rules.worklist.ConfigRules) && size(config_rules.worklist.ConfigRules) > 0 ?
+    : has(config_rules.worklist.ConfigRules) && config_rules.worklist.ConfigRules != null && size(config_rules.worklist.ConfigRules) > 0 ?
       // API Call: Execute GetComplianceDetailsByConfigRule for specific config rule
       post_request(
         state.url.trim_right("/"),
@@ -311,8 +311,8 @@ program: |
         // Response Processing: Successfully got compliance details
         bytes(resp.Body).decode_json().as(body,
           {
-            "events": (has(body.EvaluationResults) && size(body.EvaluationResults) > 0) ?
-              body.EvaluationResults.orValue([]).map(evt,
+            "events": (has(body.EvaluationResults) && body.EvaluationResults != null && size(body.EvaluationResults) > 0) ?
+              body.EvaluationResults.map(evt,
                 {
                   "message": evt.with(
                     {

packages/aws/manifest.yml

@@ -1,7 +1,7 @@
 format_version: 3.4.0
 name: aws
 title: AWS
-version: 6.14.0
+version: 6.14.1
 description: Collect logs and metrics from Amazon Web Services (AWS) with Elastic Agent.
 type: integration
 categories: