mirror of
https://github.com/mulgadc/spinifex.git
synced 2026-11-03 17:54:42 +00:00
Josh Siviour
671a8a9ff5
* feat(sqs): run queue and message owners in the worker by signed pull The SQS worker's ready step now opens the queue and message owners on its dedicated store and serves owner calls it pulls from its node's gateway over the existing instance-role channel (PollWork, CompleteWork). Each poll and post is authorized against the current worker identity, and a result is accepted only from the identity that took the work. No payload crosses platform NATS. A receipt-signing key is created on the worker disk only under the first-store decision that creates the store key, and its fingerprint is bound in the store; a missing or changed key refuses to serve. Received messages are released only when the gateway proves the caller left; receives are capped so a worst-case result fits one post. The public relay is not registered in production. * fix: harden SQS relay results and bound pending bytes Unavailable outranks client faults when encoding owner errors, and wire errors carry fixed text only, never owner or backend text. The ingress rejects incomplete or mismatched success results as unavailable, and the relay bounds total pending input bytes as well as request count. Adds tests of every relay action against real owners, the receive claim limit, release, faulting work, the receipt-key fingerprint marker and the poll loop through gateway failures. * fix: refuse SQS serving outside a single-node host cluster DescribeStore now reports the gateway's declared cluster node count, and the worker refuses to serve, before reading keys, connecting or creating any store state, unless that count is exactly one. A gateway that reports no count reads as zero and is refused. * feat(sqs): record a store server key pin once per store instance Add the store role and its internal actions so the bound store instance can learn its claim and record the public pin of its TLS server key, once, without the platform holding the private key. The worker sees the store as bound only after a pin exists and must receive a valid pin. * refactor(sqs): serve store server keys from a separate capability Keep the worker Stores interface unchanged and give the store guest's actions their own ServerKeys dependency, so existing Stores fakes need no store-key methods. * feat(sqs): launch the store with a mgmt NIC, CA and scoped store role The store now boots with the region, gateway URL and the daemon's own cluster CA, a mgmt NIC to reach the gateway, and an sqsStoreRole profile granted only the store's two internal actions, so it can authenticate its server key pin. A store record that predates these fields refuses to relaunch; its volume is kept. * feat(sqs): keep the store TLS server key on its disk and record its pin The store image gains sqs-store-key, run after the data disk is mounted. It loads or creates a P-256 server key under the disk's tls directory, records only the key's public pin with the gateway as the bound store instance, and writes a self-signed certificate for it to the run directory. nats-server then requires TLS 1.3 with that key. A record for another volume, a recorded pin with a missing key, or a key that does not match the recorded pin refuses the store; no key is regenerated and nothing on the disk is deleted. Launch-not-yet-bound and lost replies are retried. The store role vocabulary moves to contracts/sqs/v1 so the guest agent does not import a domain. * feat(sqs): pin the worker's store connection to the recorded server key The worker's readiness check and serving connection now use TLS 1.3 and accept only the store server key whose pin the bound store recorded with the gateway. The pin is checked before the worker key or any queue or message data is sent, and on every reconnect. A store with another key, a plaintext store or a malformed pin is refused as final. The worker NKey client authentication is unchanged. The host still holds the store's data disk key, so the pin does not protect the store from a privileged host. * fix(sqs): retry store key bootstrap and track guest binary sources The store's server key check moves from sysinit into the respawned run step: a gateway or IMDS outage exits after a pause so init retries it, without remounting or creating a new key, while a missing, changed or wrong-store key is recorded as refused and never retried. Stop also ends a running key helper before unmounting. The guest helper and worker binaries now depend on every main-module package dir and file they link, from go list, so edits, additions, deletions and renames all rebuild them. * feat(sqs): operator enable and status with a signed ingress test Add a per-Region SQS service record (disabled by default, pinned to one node, refused on multi-node clusters before any write), gate the relay on it, and expose `spx admin sqs enable` and `spx admin sqs status`. The gateway now hands queued work to the polling worker and reports whether one is polling. The public SQS service stays unregistered in production until its capability profile is reviewed. An integration test registers it through the harness and drives real SigV4 and IAM requests to a real worker for create, send, receive and delete, asserting no SQS body crosses platform NATS. * fix(sqs): report readiness only from observed component state Status now reports whether the tenant SQS API is registered on this gateway and is never Ready while it is not. The worker stops polling while its store connection is down, so a worker that lost its store drops out of the gateway's poller window instead of looking healthy. * wip: sqs model inventory * wip: sqs public registration * wip: sqs registration review fixes * fix(sqs): refuse pre-API store and worker records on enable A store or worker record this release creates now carries an explicit contract. enable reads both records without creating a bucket and refuses any record without it before it writes desired state or launches anything; status names the record and is never Ready. A worker replacement keeps its predecessor's contract, since it reuses the same data volume. Missing metadata is only ever grounds to refuse: nothing is upgraded, inspected, emptied, replaced or deleted. Upgrading a pre-API dev install is not supported. * fix(sqs): describe the enable refusal as an unsupported launch contract A missing or unknown contract proves neither when a record was written nor that it predates authenticated bootstrap: an older writer can drop a newer field, and a future contract is not pre-API. The refusal is unchanged; its message, status field and docs now name a missing or unsupported launch contract and say any existing volume is kept. * wip: port reviewed SQS serving path onto dev without the store VM * wip: single SQS system VM * fix(sqs): retry receipt bootstrap under supervision and drop store install path Run the receipt-key boot step from the respawned store service so a transient gateway or IMDS outage recovers without a reboot; final key and volume refusals stay refused. Remove the separate store image install and staging path from setup. * fix(sqs): align worker ready config fields * fix(sqs): stop an in-progress boot before unmounting the worker disk The receipt-key boot step ran as an unrecorded child of the store shell, so shutdown stopped only the shell and could unmount the disk under a boot still talking to the gateway. Record the boot child like the other guest processes and stop it before unmounting; a survivor keeps the disk mounted. * fix(sqs): record the boot child before its stopping check The parent wrote boot.pid only after starting the child, so a shutdown in that gap could unmount under an unrecorded boot. The child now records itself and checks stopping before it runs sqs-worker boot.
44 KiB
44 KiB
AWS Model Operation Coverage (internal)
Generated by make aws-model-coverage. This file is not published: it carries the counts and the unimplemented operations that the pages under this directory deliberately leave out.
Not implemented is the candidate work. Not applicable is declared in pages.json and is not work: those operations describe something this platform will not have.
Pinned model source: github.com/aws/api-models-aws@e10d6a1c5ac3, 2026-10-28.
acm
2015-12-08 — 9 of 40 modelled operations implemented (22.5%), 0 stubbed, 0 not applicable, 0 registered outside the pinned model.
Not implemented
CreateAcmeDomainValidationCreateAcmeEndpointCreateAcmeExternalAccountBindingDeleteAcmeDomainValidationDeleteAcmeEndpointDeleteAcmeExternalAccountBindingDescribeAcmeAccountDescribeAcmeDomainValidationDescribeAcmeEndpointDescribeAcmeExternalAccountBindingExportCertificateGetAccountConfigurationGetAcmeExternalAccountBindingCredentialsListAcmeAccountsListAcmeDomainValidationsListAcmeEndpointsListAcmeExternalAccountBindingsListCertificateDomainValidationsListTagsForResourcePutAccountConfigurationRenewCertificateResendValidationEmailRevokeAcmeAccountRevokeAcmeExternalAccountBindingRevokeCertificateSearchCertificatesTagResourceUntagResourceUpdateAcmeDomainValidationUpdateAcmeEndpointUpdateCertificateOptions
ec2
2016-11-15 — 127 of 811 modelled operations implemented (15.7%), 0 stubbed, 39 not applicable, 0 registered outside the pinned model.
Not implemented
AcceptAddressTransferAcceptCapacityReservationBillingOwnershipAcceptReservedInstancesExchangeQuoteAcceptTransitGatewayClientVpnAttachmentAcceptTransitGatewayMulticastDomainAssociationsAcceptTransitGatewayPeeringAttachmentAcceptTransitGatewayVpcAttachmentAcceptVpcEndpointConnectionsAcceptVpcPeeringConnectionAdvertiseByoipCidrAllocateHostsAllocateIpamPoolCidrApplySecurityGroupsToClientVpnTargetNetworkAssignIpv6AddressesAssignPrivateIpAddressesAssignPrivateNatGatewayAddressAssociateApplicationStatusCheckAssociateCapacityReservationBillingOwnerAssociateClientVpnTargetNetworkAssociateDhcpOptionsAssociateEnclaveCertificateIamRoleAssociateInstanceEventWindowAssociateIpamByoasnAssociateIpamResourceDiscoveryAssociateNatGatewayAddressAssociateRouteServerAssociateSecurityGroupVpcAssociateSubnetCidrBlockAssociateTransitGatewayMulticastDomainAssociateTransitGatewayPolicyTableAssociateTransitGatewayRouteTableAssociateTrunkInterfaceAssociateVpcCidrBlockAttachImageWatermarkAttachVerifiedAccessTrustProviderAttachVpnGatewayAuthorizeClientVpnIngressBatchModifyIpamRoutingPolicyRegistrationsBundleInstanceCancelBundleTaskCancelCapacityReservationFleetsCancelConversionTaskCancelDeclarativePoliciesReportCancelExportTaskCancelImageLaunchPermissionCancelImportTaskCancelSpotFleetRequestsCopyVolumesCreateApplicationStatusCheckCreateCapacityManagerDataExportCreateCapacityReservationBySplittingCreateCapacityReservationCancellationQuoteCreateCapacityReservationDateChangeQuoteCreateCapacityReservationFleetCreateClientVpnEndpointCreateClientVpnRouteCreateCoipCidrCreateCoipPoolCreateCustomerGatewayCreateDefaultSubnetCreateDefaultVpcCreateDelegateMacVolumeOwnershipTaskCreateDhcpOptionsCreateFleetCreateFlowLogsCreateImageUsageReportCreateInstanceConnectEndpointCreateInstanceEventWindowCreateInstanceExportTaskCreateInterruptibleCapacityReservationAllocationCreateIpamCreateIpamExternalResourceVerificationTokenCreateIpamInternetRegistryAssociationCreateIpamPolicyCreateIpamPoolCreateIpamPrefixListResolverCreateIpamPrefixListResolverTargetCreateIpamResourceDiscoveryCreateIpamRoutingPolicyRegistrationCreateIpamScopeCreateLocalGatewayRouteCreateLocalGatewayRouteTableCreateLocalGatewayRouteTableVirtualInterfaceGroupAssociationCreateLocalGatewayRouteTableVpcAssociationCreateLocalGatewayVirtualInterfaceCreateLocalGatewayVirtualInterfaceGroupCreateMacSystemIntegrityProtectionModificationTaskCreateManagedPrefixListCreateNetworkAclCreateNetworkAclEntryCreateNetworkInsightsAccessScopeCreateNetworkInsightsPathCreateNetworkInterfacePermissionCreatePublicIpv4PoolCreateReplaceRootVolumeTaskCreateRestoreImageTaskCreateRouteServerCreateRouteServerEndpointCreateRouteServerPeerCreateSecondaryNetworkCreateSecondarySubnetCreateSnapshotsCreateSpotDatafeedSubscriptionCreateStoreImageTaskCreateSubnetCidrReservationCreateTrafficMirrorFilterCreateTrafficMirrorFilterRuleCreateTrafficMirrorSessionCreateTrafficMirrorTargetCreateTransitGatewayCreateTransitGatewayConnectCreateTransitGatewayConnectPeerCreateTransitGatewayMeteringPolicyCreateTransitGatewayMeteringPolicyEntryCreateTransitGatewayMulticastDomainCreateTransitGatewayPeeringAttachmentCreateTransitGatewayPolicyTableCreateTransitGatewayPolicyTableEntryCreateTransitGatewayPrefixListReferenceCreateTransitGatewayRouteCreateTransitGatewayRouteTableCreateTransitGatewayRouteTableAnnouncementCreateTransitGatewayVpcAttachmentCreateVerifiedAccessEndpointCreateVerifiedAccessGroupCreateVerifiedAccessInstanceCreateVerifiedAccessTrustProviderCreateVpcBlockPublicAccessExclusionCreateVpcEncryptionControlCreateVpcEndpointCreateVpcEndpointConnectionNotificationCreateVpcEndpointServiceConfigurationCreateVpcPeeringConnectionCreateVpnConcentratorCreateVpnConnectionCreateVpnConnectionRouteCreateVpnGatewayDeleteApplicationStatusCheckDeleteCapacityManagerDataExportDeleteClientVpnEndpointDeleteClientVpnEndpointAuthorizationPolicyDeleteClientVpnRouteDeleteCoipCidrDeleteCoipPoolDeleteCustomerGatewayDeleteDhcpOptionsDeleteFleetsDeleteFlowLogsDeleteImageUsageReportDeleteInstanceConnectEndpointDeleteInstanceEventWindowDeleteIpamDeleteIpamExternalResourceVerificationTokenDeleteIpamInternetRegistryAssociationDeleteIpamPolicyDeleteIpamPoolDeleteIpamPrefixListResolverDeleteIpamPrefixListResolverTargetDeleteIpamResourceDiscoveryDeleteIpamRoutingPolicyRegistrationDeleteIpamScopeDeleteLocalGatewayRouteDeleteLocalGatewayRouteTableDeleteLocalGatewayRouteTableVirtualInterfaceGroupAssociationDeleteLocalGatewayRouteTableVpcAssociationDeleteLocalGatewayVirtualInterfaceDeleteLocalGatewayVirtualInterfaceGroupDeleteManagedPrefixListDeleteNetworkAclDeleteNetworkAclEntryDeleteNetworkInsightsAccessScopeDeleteNetworkInsightsAccessScopeAnalysisDeleteNetworkInsightsAnalysisDeleteNetworkInsightsPathDeleteNetworkInterfacePermissionDeletePublicIpv4PoolDeleteQueuedReservedInstancesDeleteRouteServerDeleteRouteServerEndpointDeleteRouteServerPeerDeleteSecondaryNetworkDeleteSecondarySubnetDeleteSpotDatafeedSubscriptionDeleteSubnetCidrReservationDeleteTrafficMirrorFilterDeleteTrafficMirrorFilterRuleDeleteTrafficMirrorSessionDeleteTrafficMirrorTargetDeleteTransitGatewayDeleteTransitGatewayClientVpnAttachmentDeleteTransitGatewayConnectDeleteTransitGatewayConnectPeerDeleteTransitGatewayMeteringPolicyDeleteTransitGatewayMeteringPolicyEntryDeleteTransitGatewayMulticastDomainDeleteTransitGatewayPeeringAttachmentDeleteTransitGatewayPolicyTableDeleteTransitGatewayPolicyTableEntryDeleteTransitGatewayPrefixListReferenceDeleteTransitGatewayRouteDeleteTransitGatewayRouteTableDeleteTransitGatewayRouteTableAnnouncementDeleteTransitGatewayVpcAttachmentDeleteVerifiedAccessEndpointDeleteVerifiedAccessGroupDeleteVerifiedAccessInstanceDeleteVerifiedAccessTrustProviderDeleteVpcBlockPublicAccessExclusionDeleteVpcEncryptionControlDeleteVpcEndpointConnectionNotificationsDeleteVpcEndpointServiceConfigurationsDeleteVpcEndpointsDeleteVpcPeeringConnectionDeleteVpnConcentratorDeleteVpnConnectionDeleteVpnConnectionRouteDeleteVpnGatewayDeprovisionByoipCidrDeprovisionIpamByoasnDeprovisionIpamPoolCidrDeprovisionPublicIpv4PoolCidrDeregisterInstanceEventNotificationAttributesDeregisterTransitGatewayMulticastGroupMembersDeregisterTransitGatewayMulticastGroupSourcesDescribeAccountVpcEncryptionControlDescribeAddressTransfersDescribeApplicationStatusDescribeApplicationStatusCheckAssociationsDescribeApplicationStatusChecksDescribeBundleTasksDescribeByoipCidrsDescribeCapacityBlockExtensionHistoryDescribeCapacityBlockExtensionOfferingsDescribeCapacityBlockOfferingsDescribeCapacityBlockStatusDescribeCapacityBlocksDescribeCapacityManagerDataExportsDescribeCapacityReservationBillingRequestsDescribeCapacityReservationCancellationQuotesDescribeCapacityReservationDateChangeQuotesDescribeCapacityReservationFleetsDescribeCapacityReservationTopologyDescribeClientVpnAuthorizationRulesDescribeClientVpnConnectionsDescribeClientVpnEndpointsDescribeClientVpnRoutesDescribeClientVpnTargetNetworksDescribeCoipPoolsDescribeConversionTasksDescribeCustomerGatewaysDescribeDeclarativePoliciesReportsDescribeDhcpOptionsDescribeExportImageTasksDescribeExportTasksDescribeFastLaunchImagesDescribeFastSnapshotRestoresDescribeFleetHistoryDescribeFleetInstancesDescribeFleetsDescribeFlowLogsDescribeHostReservationOfferingsDescribeHostReservationsDescribeHostsDescribeImageReferencesDescribeImageUsageReportEntriesDescribeImageUsageReportsDescribeImportImageTasksDescribeImportSnapshotTasksDescribeInstanceConnectEndpointsDescribeInstanceEventNotificationAttributesDescribeInstanceEventWindowsDescribeInstanceImageMetadataDescribeInstanceSqlHaHistoryStatesDescribeInstanceSqlHaStatesDescribeInstanceTopologyDescribeIpamByoasnDescribeIpamExternalResourceVerificationTokensDescribeIpamInternetRegistryAssociationsDescribeIpamPoliciesDescribeIpamPoolAllocationsDescribeIpamPoolsDescribeIpamPrefixListResolverTargetsDescribeIpamPrefixListResolversDescribeIpamResourceDiscoveriesDescribeIpamResourceDiscoveryAssociationsDescribeIpamScopesDescribeIpamsDescribeIpv6PoolsDescribeLocalGatewayRouteTableVirtualInterfaceGroupAssociationsDescribeLocalGatewayRouteTableVpcAssociationsDescribeLocalGatewayRouteTablesDescribeLocalGatewayVirtualInterfaceGroupsDescribeLocalGatewayVirtualInterfacesDescribeLocalGatewaysDescribeLockedSnapshotsDescribeMacHostsDescribeMacModificationTasksDescribeManagedPrefixListsDescribeNetworkAclsDescribeNetworkInsightsAccessScopeAnalysesDescribeNetworkInsightsAccessScopesDescribeNetworkInsightsAnalysesDescribeNetworkInsightsPathsDescribeNetworkInterfaceAttributeDescribeNetworkInterfacePermissionsDescribeOutpostLagsDescribePrefixListsDescribePublicIpv4PoolsDescribeReplaceRootVolumeTasksDescribeReservedInstancesDescribeReservedInstancesModificationsDescribeReservedInstancesOfferingsDescribeRouteServerEndpointsDescribeRouteServerPeersDescribeRouteServersDescribeScheduledInstanceAvailabilityDescribeScheduledInstancesDescribeSecondaryInterfacesDescribeSecondaryNetworksDescribeSecondarySubnetsDescribeSecurityGroupReferencesDescribeSecurityGroupVpcAssociationsDescribeServiceLinkVirtualInterfacesDescribeSnapshotAttributeDescribeSnapshotTierStatusDescribeSpotDatafeedSubscriptionDescribeSpotFleetInstancesDescribeSpotFleetRequestHistoryDescribeSpotFleetRequestsDescribeStaleSecurityGroupsDescribeStoreImageTasksDescribeTrafficMirrorFilterRulesDescribeTrafficMirrorFiltersDescribeTrafficMirrorSessionsDescribeTrafficMirrorTargetsDescribeTransitGatewayAttachmentsDescribeTransitGatewayConnectPeersDescribeTransitGatewayConnectsDescribeTransitGatewayMeteringPoliciesDescribeTransitGatewayMulticastDomainsDescribeTransitGatewayPeeringAttachmentsDescribeTransitGatewayPolicyTablesDescribeTransitGatewayRouteTableAnnouncementsDescribeTransitGatewayRouteTablesDescribeTransitGatewayVpcAttachmentsDescribeTransitGatewaysDescribeTrunkInterfaceAssociationsDescribeVerifiedAccessEndpointsDescribeVerifiedAccessGroupsDescribeVerifiedAccessInstanceLoggingConfigurationsDescribeVerifiedAccessInstancesDescribeVerifiedAccessTrustProvidersDescribeVolumeAttributeDescribeVpcBlockPublicAccessExclusionsDescribeVpcBlockPublicAccessOptionsDescribeVpcEncryptionControlsDescribeVpcEndpointAssociationsDescribeVpcEndpointConnectionNotificationsDescribeVpcEndpointConnectionsDescribeVpcEndpointServiceConfigurationsDescribeVpcEndpointServicePermissionsDescribeVpcEndpointServicesDescribeVpcPeeringConnectionsDescribeVpnConcentratorsDescribeVpnConnectionsDescribeVpnGatewaysDetachImageWatermarkDetachVerifiedAccessTrustProviderDetachVpnGatewayDisableAddressTransferDisableAllowedImagesSettingsDisableApplicationStatusCheckSuppressionDisableCapacityManagerDisableFastLaunchDisableFastSnapshotRestoresDisableImageDisableImageBlockPublicAccessDisableImageDeprecationDisableImageDeregistrationProtectionDisableInstanceSqlHaStandbyDetectionsDisableIpamOrganizationAdminAccountDisableIpamPolicyDisableRouteServerPropagationDisableSnapshotBlockPublicAccessDisableTransitGatewayRouteTablePropagationDisableVgwRoutePropagationDisassociateApplicationStatusCheckDisassociateCapacityReservationBillingOwnerDisassociateClientVpnTargetNetworkDisassociateEnclaveCertificateIamRoleDisassociateInstanceEventWindowDisassociateIpamByoasnDisassociateIpamResourceDiscoveryDisassociateNatGatewayAddressDisassociateRouteServerDisassociateSecurityGroupVpcDisassociateSubnetCidrBlockDisassociateTransitGatewayMulticastDomainDisassociateTransitGatewayPolicyTableDisassociateTransitGatewayRouteTableDisassociateTrunkInterfaceDisassociateVpcCidrBlockEnableAddressTransferEnableAllowedImagesSettingsEnableApplicationStatusCheckSuppressionEnableCapacityManagerEnableFastLaunchEnableFastSnapshotRestoresEnableImageEnableImageBlockPublicAccessEnableImageDeprecationEnableImageDeregistrationProtectionEnableInstanceSqlHaStandbyDetectionsEnableIpamInternetRegistryAssociationEnableIpamOrganizationAdminAccountEnableIpamPolicyEnableReachabilityAnalyzerOrganizationSharingEnableRouteServerPropagationEnableSnapshotBlockPublicAccessEnableTransitGatewayRouteTablePropagationEnableVgwRoutePropagationEnableVolumeIOExportClientVpnClientCertificateRevocationListExportClientVpnClientConfigurationExportImageExportTransitGatewayRoutesExportVerifiedAccessInstanceClientConfigurationGetActiveVpnTunnelStatusGetAllowedImagesSettingsGetAssociatedEnclaveCertificateIamRolesGetAssociatedIpv6PoolCidrsGetCapacityManagerAttributesGetCapacityManagerMetricDataGetCapacityManagerMetricDimensionsGetCapacityManagerMonitoredTagKeysGetCapacityManagerSupportabilityScoresGetCapacityReservationUsageGetClientVpnEndpointAuthorizationPolicyGetCoipPoolUsageGetConsoleScreenshotGetDeclarativePoliciesReportSummaryGetDefaultCreditSpecificationGetEbsDefaultKmsKeyIdGetEnabledIpamPolicyGetFlowLogsIntegrationTemplateGetGroupsForCapacityReservationGetHostReservationPurchasePreviewGetImageAncestryGetImageBlockPublicAccessStateGetImageFindingsGetInstanceMetadataDefaultsGetInstanceTpmEkPubGetInstanceTypesFromInstanceRequirementsGetInstanceUefiDataGetIpamAddressHistoryGetIpamDiscoveredAccountsGetIpamDiscoveredPublicAddressesGetIpamDiscoveredResourceCidrsGetIpamDiscoveredRoutesGetIpamInternetRegistryAssociationAsnsGetIpamInternetRegistryAssociationCidrsGetIpamPolicyAllocationRulesGetIpamPolicyOrganizationTargetsGetIpamPoolAllocationsGetIpamPoolCidrsGetIpamPrefixListResolverRulesGetIpamPrefixListResolverVersionEntriesGetIpamPrefixListResolverVersionsGetIpamResourceCidrsGetIpamRouteOriginAuthorizationsGetIpamRouteProtectionFindingsGetIpamRoutingPolicyRegistrationDeltasGetIpamRoutingPolicyRegistrationsGetLaunchTemplateDataGetManagedPrefixListAssociationsGetManagedPrefixListEntriesGetManagedResourceVisibilityGetNetworkInsightsAccessScopeAnalysisFindingsGetNetworkInsightsAccessScopeContentGetReservedInstancesExchangeQuoteGetRouteServerAssociationsGetRouteServerPropagationsGetRouteServerRoutingDatabaseGetSnapshotBlockPublicAccessStateGetSpotPlacementScoresGetSubnetCidrReservationsGetTransitGatewayAttachmentNatConfigurationGetTransitGatewayAttachmentPropagationsGetTransitGatewayMeteringPolicyEntriesGetTransitGatewayMulticastDomainAssociationsGetTransitGatewayPolicyTableAssociationsGetTransitGatewayPolicyTableEntriesGetTransitGatewayPrefixListReferencesGetTransitGatewayRouteTableAssociationsGetTransitGatewayRouteTablePropagationsGetVerifiedAccessEndpointPolicyGetVerifiedAccessEndpointTargetsGetVerifiedAccessGroupPolicyGetVpcResourcesBlockingEncryptionEnforcementGetVpnConnectionDeviceSampleConfigurationGetVpnConnectionDeviceTypesGetVpnTunnelReplacementStatusImportClientVpnClientCertificateRevocationListImportImageImportInstanceImportSnapshotImportVolumeListImagesInRecycleBinListSnapshotsInRecycleBinListVolumesInRecycleBinLockSnapshotModifyAccountVpcEncryptionControlModifyAddressAttributeModifyApplicationStatusCheckModifyAvailabilityZoneGroupModifyCapacityReservationModifyCapacityReservationFleetModifyClientVpnEndpointModifyClientVpnEndpointAuthorizationPolicyModifyDefaultCreditSpecificationModifyEbsDefaultKmsKeyIdModifyFleetModifyHostsModifyInstanceCapacityReservationAttributesModifyInstanceConnectEndpointModifyInstanceCpuOptionsModifyInstanceCreditSpecificationModifyInstanceEventStartTimeModifyInstanceEventWindowModifyInstanceMaintenanceOptionsModifyInstanceMetadataDefaultsModifyInstanceNetworkPerformanceOptionsModifyInstancePlacementModifyIpamModifyIpamPolicyAllocationRulesModifyIpamPoolModifyIpamPoolAllocationModifyIpamPrefixListResolverModifyIpamPrefixListResolverTargetModifyIpamResourceCidrModifyIpamResourceDiscoveryModifyIpamRoutingPolicyRegistrationModifyIpamScopeModifyLocalGatewayRouteModifyManagedPrefixListModifyManagedResourceVisibilityModifyPrivateDnsNameOptionsModifyPublicIpDnsNameOptionsModifyReservedInstancesModifyRouteServerModifySnapshotAttributeModifySnapshotTierModifySpotFleetRequestModifyTrafficMirrorFilterNetworkServicesModifyTrafficMirrorFilterRuleModifyTrafficMirrorSessionModifyTransitGatewayModifyTransitGatewayAttachmentNatConfigurationModifyTransitGatewayMeteringPolicyModifyTransitGatewayPolicyTableEntryModifyTransitGatewayPrefixListReferenceModifyTransitGatewayVpcAttachmentModifyVerifiedAccessEndpointModifyVerifiedAccessEndpointPolicyModifyVerifiedAccessGroupModifyVerifiedAccessGroupPolicyModifyVerifiedAccessInstanceModifyVerifiedAccessInstanceLoggingConfigurationModifyVerifiedAccessTrustProviderModifyVolumeAttributeModifyVpcBlockPublicAccessExclusionModifyVpcBlockPublicAccessOptionsModifyVpcEncryptionControlModifyVpcEndpointModifyVpcEndpointConnectionNotificationModifyVpcEndpointPayerResponsibilityModifyVpcEndpointServiceConfigurationModifyVpcEndpointServicePayerResponsibilityModifyVpcEndpointServicePermissionsModifyVpcPeeringConnectionOptionsModifyVpcTenancyModifyVpnConnectionModifyVpnConnectionOptionsModifyVpnTunnelCertificateModifyVpnTunnelOptionsMoveByoipCidrToIpamMoveCapacityReservationInstancesProvisionByoipCidrProvisionIpamByoasnProvisionIpamPoolCidrProvisionPublicIpv4PoolCidrPurchaseCapacityBlockPurchaseCapacityBlockExtensionPurchaseHostReservationPurchaseReservedInstancesOfferingPurchaseScheduledInstancesRegisterInstanceEventNotificationAttributesRegisterTransitGatewayMulticastGroupMembersRegisterTransitGatewayMulticastGroupSourcesRejectCapacityReservationBillingOwnershipRejectTransitGatewayClientVpnAttachmentRejectTransitGatewayMulticastDomainAssociationsRejectTransitGatewayPeeringAttachmentRejectTransitGatewayVpcAttachmentRejectVpcEndpointConnectionsRejectVpcPeeringConnectionReleaseHostsReleaseIpamPoolAllocationReplaceImageCriteriaInAllowedImagesSettingsReplaceImageInstanceTypeSpecificationReplaceNetworkAclAssociationReplaceNetworkAclEntryReplaceTransitGatewayRouteReplaceVpnTunnelRequestSpotFleetResetAddressAttributeResetEbsDefaultKmsKeyIdResetInstanceAttributeResetNetworkInterfaceAttributeResetSnapshotAttributeRestoreImageFromRecycleBinRestoreManagedPrefixListVersionRestoreSnapshotFromRecycleBinRestoreSnapshotTierRestoreVolumeFromRecycleBinRevokeClientVpnIngressRunScheduledInstancesSearchLocalGatewayRoutesSearchTransitGatewayMulticastGroupsSearchTransitGatewayRoutesSendDiagnosticInterruptStartDeclarativePoliciesReportStartNetworkInsightsAccessScopeAnalysisStartNetworkInsightsAnalysisStartVpcEndpointServicePrivateDnsVerificationTerminateClientVpnConnectionsUnassignIpv6AddressesUnassignPrivateIpAddressesUnassignPrivateNatGatewayAddressUnlockSnapshotUpdateCapacityManagerMonitoredTagKeysUpdateCapacityManagerOrganizationsAccessUpdateInterruptibleCapacityReservationAllocationValidateSecurityGroupQuotasForInterfaceWithdrawByoipCidr
Not applicable — do not build
aws-backbone: These report performance across AWS's own global network between its regions and zones.
DescribeAwsNetworkPerformanceMetricSubscriptionsDisableAwsNetworkPerformanceMetricSubscriptionEnableAwsNetworkPerformanceMetricSubscriptionGetAwsNetworkPerformanceData
aws-edge: Carrier gateways route to a telecommunications carrier's 5G network in an AWS Wavelength Zone.
CreateCarrierGatewayDeleteCarrierGatewayDescribeCarrierGateways
aws-support: Reporting an instance as impaired files a report with AWS support about AWS hardware.
ReportInstanceStatus
ec2-classic: EC2-Classic is the pre-VPC network AWS retired in 2022. Every instance here is in a VPC.
AttachClassicLinkVpcDescribeClassicLinkInstancesDescribeMovingAddressesDescribeVpcClassicLinkDescribeVpcClassicLinkDnsSupportDetachClassicLinkVpcDisableVpcClassicLinkDisableVpcClassicLinkDnsSupportEnableVpcClassicLinkEnableVpcClassicLinkDnsSupportMoveAddressToVpcRestoreAddressToClassic
fpga: FPGA images are built and ingested through AWS's own AFI pipeline for its F1 instances.
CopyFpgaImageCreateFpgaImageDeleteFpgaImageDescribeFpgaImageAttributeDescribeFpgaImagesModifyFpgaImageAttributeResetFpgaImageAttribute
id-format: These switched resource IDs between the short and long forms during AWS's 2016 migration, which has long since finished.
DescribeAggregateIdFormatDescribeIdFormatDescribeIdentityIdFormatDescribePrincipalIdFormatModifyIdFormatModifyIdentityIdFormat
marketplace: Product codes belong to AWS Marketplace, which has no equivalent here.
ConfirmProductInstance
retired-accelerators: Elastic Graphics was retired by AWS, and attached nothing but an AWS-hosted accelerator while it existed.
DescribeElasticGpus
ri-marketplace: The Reserved Instance Marketplace resells a reservation to another AWS customer, so AWS is the counterparty.
CancelReservedInstancesListingCreateReservedInstancesListingDescribeReservedInstancesListings
spot-price: On owned hardware there is no spot-to-on-demand price differential, so any figure would be invented.
DescribeSpotPriceHistory
ecr
2015-09-21 — 23 of 62 modelled operations implemented (37.1%), 10 stubbed, 0 not applicable, 3 registered outside the pinned model.
Not implemented
CreatePullThroughCacheRuleCreateRepositoryCreationTemplateDeletePullThroughCacheRuleDeleteRegistryPolicyDeleteRepositoryCreationTemplateDeleteSigningConfigurationDeregisterPullTimeUpdateExclusionDescribeImageReplicationStatusDescribeImageSigningStatusDescribePullThroughCacheRulesDescribeReplicationBackfillResultsDescribeRepositoryCreationTemplatesGetAccountSettingGetSigningConfigurationListImageReferrersListPullTimeUpdateExclusionsListReplicationBackfillsPutAccountSettingPutSigningConfigurationRegisterPullTimeUpdateExclusionStartReplicationBackfillStopReplicationBackfillUpdateImageStorageClassUpdatePullThroughCacheRuleUpdateRepositoryCreationTemplateValidatePullThroughCacheRule
Stubbed
BatchCheckLayerAvailabilityCompleteLayerUploadGetDownloadUrlForLayerGetRegistryPolicyInitiateLayerUploadListRepositoriesPutRegistryPolicyPutReplicationConfigurationReplicateImageUploadLayerPart
Registered and refused
BatchGetRepositoryScanningConfigurationDescribeImageScanFindingsGetImageScanningConfigurationGetRegistryScanningConfigurationPutRegistryScanningConfigurationStartImageScan
Registered outside the pinned model
GetImageScanningConfigurationListRepositoriesReplicateImage
ecs
2014-11-13 — 31 of 88 modelled operations implemented (35.2%), 5 stubbed, 0 not applicable, 3 registered outside the pinned model.
Not implemented
AssociateGatewayWithClusterContinueServiceDeploymentCreateDaemonCreateExpressGatewayServiceCreateGatewayCreateTaskSetDeleteAccountSettingDeleteAttributesDeleteDaemonDeleteDaemonTaskDefinitionDeleteExpressGatewayServiceDeleteGatewayDeleteTaskDefinitionsDeleteTaskSetDescribeDaemonDescribeDaemonDeploymentsDescribeDaemonRevisionsDescribeDaemonTaskDefinitionDescribeExpressGatewayServiceDescribeGatewayDescribeGatewayResourcesDescribeGatewayRouteDescribeServiceDeploymentsDescribeServiceRevisionsDescribeTaskSetsDisassociateGatewayFromClusterDiscoverPollEndpointExecuteCommandGetTaskProtectionListAttributesListDaemonDeploymentsListDaemonTaskDefinitionsListDaemonsListGatewayClusterAssociationsListGatewayRoutesListGatewaysListServiceDeploymentsPutAccountSettingDefaultPutAttributesRegisterDaemonTaskDefinitionStopServiceDeploymentSubmitAttachmentStateChangesSubmitContainerStateChangeUpdateCapacityProviderUpdateClusterSettingsUpdateContainerAgentUpdateDaemonUpdateExpressGatewayServiceUpdateGatewayUpdateServicePrimaryTaskSetUpdateTaskProtectionUpdateTaskSet
Stubbed
ListAccountSettingsListServicesByNamespaceListTaskDefinitionFamiliesPutAccountSettingUpdateCluster
Registered outside the pinned model
PollAssignmentsProvisionCapacityReportTaskGPU
eks
2017-11-01 — 27 of 70 modelled operations implemented (38.6%), 0 stubbed, 0 not applicable, 4 registered outside the pinned model.
Not implemented
ActivateCertificateAuthorityAssociateEncryptionConfigAssociateIdentityProviderConfigCancelUpdateCreateCapabilityCreateCertificateAuthorityCreateEksAnywhereSubscriptionCreateFargateProfileCreatePodIdentityAssociationDeleteCapabilityDeleteCertificateAuthorityDeleteEksAnywhereSubscriptionDeleteFargateProfileDeletePodIdentityAssociationDeregisterClusterDescribeAddonConfigurationDescribeCapabilityDescribeCertificateAuthorityDescribeClusterVersionsDescribeEksAnywhereSubscriptionDescribeFargateProfileDescribeIdentityProviderConfigDescribeInsightDescribeInsightsRefreshDescribePodIdentityAssociationDescribeUpdateDisassociateIdentityProviderConfigListCapabilitiesListCertificateAuthoritiesListEksAnywhereSubscriptionsListFargateProfilesListIdentityProviderConfigsListInsightsListPodIdentityAssociationsListUpdatesRegisterClusterStartInsightsRefreshUpdateCapabilityUpdateClusterConfigUpdateClusterVersionUpdateEksAnywhereSubscriptionUpdateNodegroupVersionUpdatePodIdentityAssociation
Registered outside the pinned model
GetRecoveryDirectiveListInternalAddonsPublishInternalWebhookTokenReview
elasticloadbalancingv2
2015-12-01 — 36 of 51 modelled operations implemented (70.6%), 0 stubbed, 0 not applicable, 2 registered outside the pinned model.
Not implemented
AddTrustStoreRevocationsCreateTrustStoreDeleteSharedTrustStoreAssociationDeleteTrustStoreDescribeCapacityReservationDescribeTrustStoreAssociationsDescribeTrustStoreRevocationsDescribeTrustStoresGetResourcePolicyGetTrustStoreCaCertificatesBundleGetTrustStoreRevocationContentModifyCapacityReservationModifyIpPoolsModifyTrustStoreRemoveTrustStoreRevocations
Registered outside the pinned model
GetLBConfigLBAgentHeartbeat
iam
2010-05-08 — 81 of 180 modelled operations implemented (45.0%), 0 stubbed, 19 not applicable, 0 registered outside the pinned model.
Not implemented
AcceptDelegationRequestAcquireRoleAddClientIDToOpenIDConnectProviderAssociateDelegationRequestChangePasswordCreateAccountAliasCreateDelegationRequestCreateLoginProfileCreateSAMLProviderCreateVirtualMFADeviceDeactivateMFADeviceDeleteAccountAliasDeleteAccountPasswordPolicyDeleteLoginProfileDeleteRolePermissionsBoundaryDeleteSAMLProviderDeleteServerCertificateDeleteUserPermissionsBoundaryDeleteVirtualMFADeviceDisableOrganizationsRootCredentialsManagementDisableOrganizationsRootSessionsDisableOutboundWebIdentityFederationEnableMFADeviceEnableOrganizationsRootCredentialsManagementEnableOrganizationsRootSessionsEnableOutboundWebIdentityFederationGenerateCredentialReportGenerateServiceLastAccessedDetailsGetAccessKeyLastUsedGetAccountAuthorizationDetailsGetAccountPasswordPolicyGetAccountPropertiesGetContextKeysForCustomPolicyGetContextKeysForPrincipalPolicyGetCredentialReportGetDelegationRequestGetHumanReadableSummaryGetLoginProfileGetMFADeviceGetOutboundWebIdentityFederationInfoGetRoleTemplateVersionGetSAMLProviderGetServerCertificateGetServiceLastAccessedDetailsGetServiceLastAccessedDetailsWithEntitiesListDelegationRequestsListMFADeviceTagsListMFADevicesListOrganizationsFeaturesListPoliciesGrantingServiceAccessListSAMLProviderTagsListSAMLProvidersListServerCertificateTagsListServerCertificatesListVirtualMFADevicesPutAccountPropertiesPutRolePermissionsBoundaryPutUserPermissionsBoundaryRejectDelegationRequestRemoveClientIDFromOpenIDConnectProviderResyncMFADeviceSendDelegationTokenSetSecurityTokenServicePreferencesSimulateCustomPolicySimulatePrincipalPolicyTagMFADeviceTagSAMLProviderTagServerCertificateUntagMFADeviceUntagSAMLProviderUntagServerCertificateUpdateAccountPasswordPolicyUpdateDelegationRequestUpdateGroupUpdateLoginProfileUpdateOpenIDConnectProviderThumbprintUpdateSAMLProviderUpdateServerCertificateUpdateUserUploadServerCertificate
Not applicable — do not build
codecommit: CodeCommit credentials and SSH keys; the service does not exist here.
CreateServiceSpecificCredentialDeleteSSHPublicKeyDeleteServiceSpecificCredentialGetSSHPublicKeyListSSHPublicKeysListServiceSpecificCredentialsResetServiceSpecificCredentialUpdateSSHPublicKeyUpdateServiceSpecificCredentialUploadSSHPublicKey
organizations: AWS Organizations is not offered, so there is no organization to report on.
GenerateOrganizationsAccessReportGetOrganizationsAccessReport
service-linked-roles: Service-linked roles exist for AWS service principals, which this platform has none of.
CreateServiceLinkedRoleDeleteServiceLinkedRoleGetServiceLinkedRoleDeletionStatus
signing-certificates: X.509 signing certificates are an EC2-Classic SOAP credential, retired by AWS.
DeleteSigningCertificateListSigningCertificatesUpdateSigningCertificateUploadSigningCertificate
rds
2014-10-31 — 27 of 168 modelled operations implemented (16.1%), 0 stubbed, 4 not applicable, 5 registered outside the pinned model.
Not implemented
AddRoleToDBClusterAddRoleToDBInstanceAddSourceIdentifierToSubscriptionApplyPendingMaintenanceActionAuthorizeDBSecurityGroupIngressBacktrackDBClusterCancelDBCapacityReservationCancelExportTaskCopyDBClusterParameterGroupCopyDBClusterSnapshotCopyDBParameterGroupCopyDBSnapshotCopyOptionGroupCreateBlueGreenDeploymentCreateCustomDBEngineVersionCreateDBCapacityReservationCreateDBClusterEndpointCreateDBClusterParameterGroupCreateDBClusterSnapshotCreateDBProxyCreateDBProxyEndpointCreateDBSecurityGroupCreateDBShardGroupCreateEventSubscriptionCreateGlobalClusterCreateIntegrationCreateTenantDatabaseDeleteBlueGreenDeploymentDeleteCustomDBEngineVersionDeleteDBClusterAutomatedBackupDeleteDBClusterEndpointDeleteDBClusterParameterGroupDeleteDBClusterSnapshotDeleteDBInstanceAutomatedBackupDeleteDBProxyDeleteDBProxyEndpointDeleteDBSecurityGroupDeleteDBShardGroupDeleteEventSubscriptionDeleteGlobalClusterDeleteIntegrationDeleteTenantDatabaseDeregisterDBProxyTargetsDescribeAccountAttributesDescribeBlueGreenDeploymentsDescribeCertificatesDescribeDBCapacityReservationsDescribeDBClusterAutomatedBackupsDescribeDBClusterBacktracksDescribeDBClusterEndpointsDescribeDBClusterParameterGroupsDescribeDBClusterParametersDescribeDBClusterSnapshotAttributesDescribeDBClusterSnapshotsDescribeDBLogFilesDescribeDBMajorEngineVersionsDescribeDBProxiesDescribeDBProxyEndpointsDescribeDBProxyTargetGroupsDescribeDBProxyTargetsDescribeDBRecommendationsDescribeDBSecurityGroupsDescribeDBShardGroupsDescribeDBSnapshotAttributesDescribeDBSnapshotTenantDatabasesDescribeEngineDefaultClusterParametersDescribeEngineDefaultParametersDescribeEventCategoriesDescribeEventSubscriptionsDescribeExportTasksDescribeGlobalClustersDescribeIntegrationsDescribeOptionGroupOptionsDescribePendingMaintenanceActionsDescribeReservedDBInstancesDescribeReservedDBInstancesOfferingsDescribeServerlessV2PlatformVersionsDescribeSourceRegionsDescribeTenantDatabasesDescribeValidDBInstanceModificationsDisableHttpEndpointDownloadDBLogFilePortionEnableHttpEndpointFailoverGlobalClusterModifyActivityStreamModifyCertificatesModifyCurrentDBClusterCapacityModifyCustomDBEngineVersionModifyDBCapacityReservationModifyDBClusterEndpointModifyDBClusterParameterGroupModifyDBClusterSnapshotAttributeModifyDBProxyModifyDBProxyEndpointModifyDBProxyTargetGroupModifyDBRecommendationModifyDBShardGroupModifyDBSnapshotModifyDBSnapshotAttributeModifyEventSubscriptionModifyGlobalClusterModifyIntegrationModifyTenantDatabasePromoteReadReplicaDBClusterPurchaseReservedDBInstancesOfferingRebootDBClusterRebootDBShardGroupRegisterDBProxyTargetsRemoveFromGlobalClusterRemoveRoleFromDBClusterRemoveRoleFromDBInstanceRemoveSourceIdentifierFromSubscriptionResetDBClusterParameterGroupResetDBParameterGroupRestoreDBClusterFromS3RestoreDBClusterFromSnapshotRestoreDBClusterToPointInTimeRestoreDBInstanceFromS3RevokeDBSecurityGroupIngressStartActivityStreamStartDBClusterStartDBInstanceAutomatedBackupsReplicationStartExportTaskStopActivityStreamStopDBClusterStopDBInstanceAutomatedBackupsReplicationSwitchoverBlueGreenDeploymentSwitchoverGlobalClusterSwitchoverReadReplica
Registered and refused
CreateDBClusterCreateDBInstanceReadReplicaDeleteDBClusterDescribeDBClustersFailoverDBClusterModifyDBClusterPromoteReadReplicaRestoreDBInstanceToPointInTime
Registered outside the pinned model
AcknowledgeDBBootstrapGetDBBootstrapConfigPollDBCommandsRegisterDBInstanceSubmitDBStateChange
Not applicable — do not build
option-groups: Option groups configure engine add-ons for engines this platform does not offer, such as Oracle and SQL Server.
CreateOptionGroupDeleteOptionGroupDescribeOptionGroupsModifyOptionGroup
route53
2013-04-01 — 13 of 71 modelled operations implemented (18.3%), 0 stubbed, 0 not applicable, 0 registered outside the pinned model.
Not implemented
ActivateKeySigningKeyAssociateVPCWithHostedZoneChangeCidrCollectionCreateCidrCollectionCreateHealthCheckCreateKeySigningKeyCreateQueryLoggingConfigCreateReusableDelegationSetCreateTrafficPolicyCreateTrafficPolicyInstanceCreateTrafficPolicyVersionCreateVPCAssociationAuthorizationDeactivateKeySigningKeyDeleteCidrCollectionDeleteHealthCheckDeleteKeySigningKeyDeleteQueryLoggingConfigDeleteReusableDelegationSetDeleteTrafficPolicyDeleteTrafficPolicyInstanceDeleteVPCAssociationAuthorizationDisableHostedZoneDNSSECDisassociateVPCFromHostedZoneEnableHostedZoneDNSSECGetAccountLimitGetCheckerIpRangesGetDNSSECGetGeoLocationGetHealthCheckGetHealthCheckCountGetHealthCheckLastFailureReasonGetHealthCheckStatusGetHostedZoneLimitGetQueryLoggingConfigGetReusableDelegationSetGetReusableDelegationSetLimitGetTrafficPolicyGetTrafficPolicyInstanceGetTrafficPolicyInstanceCountListCidrBlocksListCidrCollectionsListCidrLocationsListGeoLocationsListHealthChecksListHostedZonesByVPCListQueryLoggingConfigsListReusableDelegationSetsListTrafficPoliciesListTrafficPolicyInstancesListTrafficPolicyInstancesByHostedZoneListTrafficPolicyInstancesByPolicyListTrafficPolicyVersionsListVPCAssociationAuthorizationsTestDNSAnswerUpdateHealthCheckUpdateHostedZoneFeaturesUpdateTrafficPolicyCommentUpdateTrafficPolicyInstance
s3
2006-03-01 — 26 of 112 modelled operations implemented (23.2%), 0 stubbed, 6 not applicable, 0 registered outside the pinned model.
Not implemented
CreateBucketMetadataConfigurationCreateBucketMetadataTableConfigurationDeleteBucketAnalyticsConfigurationDeleteBucketCorsDeleteBucketEncryptionDeleteBucketIntelligentTieringConfigurationDeleteBucketInventoryConfigurationDeleteBucketLifecycleDeleteBucketMetadataConfigurationDeleteBucketMetadataTableConfigurationDeleteBucketMetricsConfigurationDeleteBucketOwnershipControlsDeleteBucketPolicyDeleteBucketReplicationDeleteBucketWebsiteDeleteObjectAnnotationDeleteObjectTaggingDeletePublicAccessBlockGetBucketAbacGetBucketAclGetBucketAnalyticsConfigurationGetBucketCorsGetBucketEncryptionGetBucketIntelligentTieringConfigurationGetBucketInventoryConfigurationGetBucketLifecycleConfigurationGetBucketLoggingGetBucketMetadataConfigurationGetBucketMetadataTableConfigurationGetBucketMetricsConfigurationGetBucketNotificationConfigurationGetBucketOwnershipControlsGetBucketPolicyGetBucketPolicyStatusGetBucketReplicationGetBucketWebsiteGetObjectAclGetObjectAnnotationGetObjectAttributesGetObjectLegalHoldGetObjectLockConfigurationGetObjectRetentionGetObjectTaggingGetObjectTorrentGetPublicAccessBlockListBucketAnalyticsConfigurationsListBucketIntelligentTieringConfigurationsListBucketInventoryConfigurationsListBucketMetricsConfigurationsListDirectoryBucketsListObjectAnnotationsPutBucketAbacPutBucketAclPutBucketAnalyticsConfigurationPutBucketCorsPutBucketEncryptionPutBucketIntelligentTieringConfigurationPutBucketInventoryConfigurationPutBucketLifecycleConfigurationPutBucketLoggingPutBucketMetricsConfigurationPutBucketNotificationConfigurationPutBucketOwnershipControlsPutBucketPolicyPutBucketReplicationPutBucketWebsitePutObjectAclPutObjectAnnotationPutObjectLegalHoldPutObjectLockConfigurationPutObjectRetentionPutObjectTaggingPutPublicAccessBlockRenameObjectRestoreObjectSelectObjectContentUpdateBucketMetadataAnnotationTableConfigurationUpdateBucketMetadataInventoryTableConfigurationUpdateBucketMetadataJournalTableConfigurationUpdateObjectEncryption
Not applicable — do not build
accelerate: Transfer acceleration routes uploads over AWS edge locations, which an on-premise deployment has none of.
GetBucketAccelerateConfigurationPutBucketAccelerateConfiguration
express-one-zone: Sessions authenticate S3 Express One Zone directory buckets, a storage class this platform does not offer.
CreateSession
object-lambda: S3 Object Lambda rewrites a response from a Lambda function, and Lambda is not offered.
WriteGetObjectResponse
request-payment: Requester Pays shifts transfer charges to the caller, which needs AWS billing behind it.
GetBucketRequestPaymentPutBucketRequestPayment
sqs
2012-11-05 — 15 of 23 modelled operations implemented (65.2%), 0 stubbed, 0 not applicable, 0 registered outside the pinned model.
Not implemented
AddPermissionCancelMessageMoveTaskDeleteQueueListDeadLetterSourceQueuesListMessageMoveTasksPurgeQueueRemovePermissionStartMessageMoveTask
sts
2011-06-15 — 5 of 11 modelled operations implemented (45.5%), 0 stubbed, 0 not applicable, 0 registered outside the pinned model.
Not implemented
AssumeRoleWithSAMLAssumeRootDecodeAuthorizationMessageGetDelegatedAccessTokenGetFederationTokenGetWebIdentityToken