test(e2e): fix all ignored tests, drop duplicates

[vieiralucas]

Summary

• A hunt for #[ignore] tests turned up 6 stale ones in crates/fakecloud-e2e/. Three were duplicates of working tests in lambda_integration.rs (the EventBridge/SNS/S3 → Lambda cases) — deleted. The other three were unique coverage that's now un-ignored and passing.
• Fixed root causes for the un-ignored tests:
  • DynamoDB Streams → Lambda poller parsed \"/table/\" but stream ARNs use \":table/\" (colon prefix), so the table-name extraction silently dropped every mapping. One-character fix.
  • SecretsManager RotateSecret was pre-creating an AWSPENDING version with the rotation token, then the rotation Lambda's createSecret step would call PutSecretValue with the same token and hit ResourceExistsException. Real AWS leaves that creation to the Lambda. Removed the pre-creation; updated the no-op secretsmanager_rotation_invokes_lambda test (now asserts on rotation config, not on AWSPENDING existence); updated the rotation Lambda test code to DescribeSecret for RemoveFromVersionId on UpdateSecretVersionStage; and made the test poll for the rotated value (4 sequential cold-start invocations are slow). Two secretsmanager unit tests updated to match.
  • logs_subscription_filter_invokes_lambda baked 127.0.0.1 URLs into the inlined Python code, but the runtime only rewrites localhost in env vars (not in user code). Switched the test to use host.docker.internal explicitly and to poll instead of sleep(3).
• Also replaced a silent pytest.skip in sdks/python/tests/test_client.py with a hard RuntimeError when the fakecloud binary is missing — CI builds it before running pytest, so the skip path was dead code that just masked broken local runs.

Test plan

• cargo nextest run -p fakecloud-e2e for the 8 related Lambda tests, all green
• cargo run -p fakecloud-e2e --bin e2e_nextest_partitions check — partition coverage clean (799 tests covered exactly once)
• cargo test -p fakecloud-secretsmanager — 39/39 unit tests green
• cargo clippy --workspace --all-targets -- -D warnings — clean
• cargo fmt --all
• pytest sdks/python — 28/28 green
• grep -rn '#\\[ignore' crates/ — no matches

---

Summary by cubic

Unignored and fixed the last Lambda e2e tests, and removed duplicate tests. Also corrected DynamoDB Streams → Lambda polling and SecretsManager rotation to match AWS behavior.

• Bug Fixes

  • DynamoDB Streams → Lambda poller: parse stream ARNs using ":table/" (one-char fix) so table names resolve and mappings run.
  • SecretsManager RotateSecret: stop pre-creating AWSPENDING; aligns with AWS and avoids ResourceExistsException. Rotation test now calls DescribeSecret, passes RemoveFromVersionId on stage update, and polls until value flips.
  • CloudWatch Logs subscription test: replace hardcoded 127.0.0.1 with host.docker.internal and poll for SQS proof instead of a fixed sleep.

• Refactors

  • Deleted 3 duplicate ignored tests in crates/fakecloud-e2e/tests/cross_service.rs (EventBridge/SNS/S3 → Lambda). Kept working versions in lambda_integration.rs.
  • Unignored 3 unique tests: dynamodb_streams_to_lambda_executes_code, secretsmanager_rotation_lambda_executes, logs_subscription_filter_invokes_lambda.
  • In sdks/python/tests/test_client.py, replace silent pytest.skip with a RuntimeError when the fakecloud binary is missing to surface broken local runs.

^{Written for commit 45d8a62. Summary will update on new commits.}

[cubic-dev-ai]

No issues found across 6 files