pin AWS operator AMI base image to last known-good AL2023

The latest AL2023 base image (most_recent=true) regressed SSM session
stability: the Packer build hangs on a task transition until SSM's 20-min
idle timeout fires, then dies with StartSession 403 (no AMI produced).

Pin source_ami per region to the May 25 green build:
  us-east-1 (UID2)    ami-0236922087fa98b6e
  eu-central-1 (EUID) ami-08b013271cfc23534

The most_recent filter is left commented in source.pkr.hcl for an easy
revert once the SSM connection regression is resolved.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

Author: swibi-ttd

scripts/aws/uid2-operator-ami/euid.pkrvars.hcl

@@ -1,5 +1,7 @@
 region          = "eu-central-1"
 identity_scope  = "euid"
+# Pinned to last known-good AL2023 base (May 25 green build); see source.pkr.hcl
+source_ami      = "ami-08b013271cfc23534"
 subnet_id       = "subnet-0edbf47b073de1c79"
 vpc_id          = "vpc-065000fb9082c6a90"
 ami_ou_arns    = [

scripts/aws/uid2-operator-ami/source.pkr.hcl

@@ -1,14 +1,20 @@
 source "amazon-ebs" "linux" {
 
   # source parameters
-  source_ami_filter {
-    filters = {
-      name                = "al2023-ami-2023*-x86_64"
-      root-device-type    = "ebs"
-    }
-    most_recent = true
-    owners      = ["amazon"]
-  }
+  # TEMPORARY PIN (swi-fix-ami-timeout): the latest AL2023 base image regressed SSM
+  # session stability, hanging the Packer build until SSM's 20-min idle timeout fires.
+  # Pinned to the last known-good base AMI (May 25 green build) per region, set in the
+  # *.pkrvars.hcl files. Revert to the most_recent filter below once the SSM connection
+  # issue is resolved.
+  source_ami = var.source_ami
+  # source_ami_filter {
+  #   filters = {
+  #     name                = "al2023-ami-2023*-x86_64"
+  #     root-device-type    = "ebs"
+  #   }
+  #   most_recent = true
+  #   owners      = ["amazon"]
+  # }
 
   # disable ami creation for testing
   # skip_create_ami = true

scripts/aws/uid2-operator-ami/uid2.pkrvars.hcl

@@ -1,5 +1,7 @@
 region          = "us-east-1"
 identity_scope  = "uid2"
+# Pinned to last known-good AL2023 base (May 25 green build); see source.pkr.hcl
+source_ami      = "ami-0236922087fa98b6e"
 # Default VPC in us-east-1
 vpc_id          = "vpc-ec832d91"
 subnet_id       = "subnet-99019ec6"

scripts/aws/uid2-operator-ami/vars.pkr.hcl

@@ -18,6 +18,10 @@ variable "region" {
   default     = "us-east-1"
 }
 
+variable "source_ami" {
+  description = "Base AMI to build on. Pinned per region in *.pkrvars.hcl while the latest AL2023 image has the SSM session-stability regression (swi-fix-ami-timeout)."
+}
+
 variable "instance_type" {
   description = "instance type to build on"
   default     = "m5.2xlarge"