v2.4.0

Release Notes — v2.4.0

✨ Features

Point a real aws-sdk-go-v2 / Azure / OCI SDK (or its CLI) at cloudemu and these services respond with full operation parity — atomic creates, typed exceptions, and deep-copied reads throughout.

AWS — Security & Compliance

1. KMS — customer keys with real cryptography: AES-256-GCM encrypt/decrypt, RSA/ECC sign & verify, HMAC, data keys, key rotation, aliases, grants, and imported key material.
2. ACM — certificate manager issuing genuine self-signed X.509 (RSA-2048/SHA-256), import/export, renewal, revocation, and DNS-validation records.
3. WAFv2 — Web ACLs, IP sets, rule groups, and regex pattern sets with LockToken optimistic concurrency and REGIONAL/CLOUDFRONT scoping.
4. CloudTrail — trails with logging status, event data stores, channels, dashboards, event/insight selectors, and CloudTrail Lake queries.
5. AWS Config — configuration & recording (configuration recorders, delivery channels), Config rules, conformance packs, aggregators, stored queries, and the SelectResourceConfig/SelectAggregateResourceConfig query surface.

AWS — Data, Analytics & Streaming

1. Kinesis Data Streams — shards with real MD5 hash-key routing, monotonic sequence numbers, shard iterators, resharding, and enhanced fan-out consumers (incl. SubscribeToShard).
2. OpenSearch Service — domains (config, versions), packages, VPC endpoints, data sources, applications, and cross-cluster connections.
3. Glue — the Data Catalog (databases, tables, partitions, connections, user-defined functions), crawlers, ETL jobs/triggers/workflows, ML transforms, and the Schema Registry.

AWS — Storage, Email & Orchestration

1. EFS — elastic file systems with mount targets, access points, and lifecycle / backup / replication policies.
2. SES v2 — email sending with identities, configuration sets, templates, and suppression lists.
3. Step Functions — state machines, executions + history, versions/aliases, and activities.

AWS — Networking & Connectivity

1. VPC Lattice — 73-operation SDK-compat parity (service networks, services, listeners, target groups, rules).
2. Route 53 Resolver — resolver endpoints, rules, and rule associations.

OCI (Oracle Cloud Infrastructure) — new provider

cloudemu gains a third cloud: a new OCI provider foundation (OCIDs, work requests, and the shared wire layer) plus its first three services.

1. Identity — users, groups, policies, and compartments.
2. Monitoring — metrics and alarms.
3. VCN (Virtual Cloud Network) — networks, subnets, route tables, gateways, and security lists.

Standalone emulator & operations

Run cloudemu as a real background service with durable state.

1. Lifecycle CLI — start / stop / status / logs / delete the emulator as a daemon.
2. State persistence — state survives restarts (snapshot on stop, restore on start).
3. Cloud snapshots — save / load / list named state snapshots on demand.
4. Init hooks — auto-seed fixtures on boot.
5. Topology CLI — check reachability with net can-connect / trace.
6. Cost preview — per-SKU, per-region monthly cost estimate.

Resource discovery & capability docs

1. Resource discovery (Workstream A) — the resources cloudemu already emulates (relational DB, Kubernetes, load balancers, cache, container registry, queues/notifications, secrets, DNS, IAM, networking sub-types, ML/GenAI, monitoring) now surface through Resource Explorer 2 / Resource Graph / Cloud Asset inventory APIs.
2. Generated capability coverage — docs/coverage/ (+ root llms.txt / AGENTS.md) is generated from the driver interfaces via go generate, so the published capability index can't drift from the code.

🔧 Enhancements

Repository structure & tooling

1. Role-based layout & naming convention — a services/ (drivers) · providers/ · server/ split that keeps each SDK-compat service a self-contained, drop-in package.

Technical Details

New AWS SDK-compat services (#369, #370, #371, #372, #373, #374, #375, #380, #381, #386, #387)

• #369 KMS, #370 EFS, #371 ACM, #372 Kinesis Data Streams, #373 SES v2, #374 WAFv2, #375 Step Functions, #380 OpenSearch Service, #381 CloudTrail, #386 AWS Config, #387 Glue — each with full aws-sdk-go-v2 operation parity, SetIfAbsent atomic creates, driver.APIError typed exceptions resolved via errors.As, deep-copied reads (race-clean), deterministic Clock/idgen, and real-SDK roundtrip tests.

Standalone emulator & operations (#335: #336, #337, #338, #339, #340, #341)

• #336 lifecycle CLI (start/stop/status/logs/delete), #337 state persistence (snapshot on stop / restore on start), #338 cloud snapshots (named save/load/list), #339 init hooks (seed fixtures on boot), #340 topology CLI (net can-connect / trace), #341 cost preview (per-SKU, per-region monthly estimate).

Discovery, coverage docs & new surfaces (#365, #382/#313, #384, #331, #328, #342, #366, #367, #368)

• #365 Resource Discovery Workstream A — walkers + type mappings so already-emulated resources appear in RE2 / Resource Graph / Cloud Asset.
• #382 (#313) generated capability-coverage docs (docs/coverage/, coverage.json, llms.txt, AGENTS.md) via go generate.
• #384 coverage-generator fix — networking now resolves to the full Networking driver instead of the narrower NetworkInterfaces capability, so the generated coverage index reports it accurately.
• #331 VPC Lattice (73 ops), #328 Route 53 Resolver, #342 OCI provider foundation (identity, OCIDs, work requests, wire layer).
• #367 OCI Identity (users, groups, policies, compartments), #366 OCI Monitoring (metrics + alarms), #368 OCI VCN (networks, subnets, gateways, security lists) — the first OCI services on the #342 foundation.

Structure (#333/#325)

• #333 repository structure & naming-convention refactor.

Full Changelog: v2.3.0...v2.4.0