initial code generated by Gemini

Author: whummer

aws-proxy/AGENTS.md

@@ -29,3 +29,9 @@ To run a single test via `pytest` (say, `test_my_logic` in `test_s3.py`), use th
 ```
 TEST_PATH=tests/test_s3.py::test_my_logic make test
 ```
+
+When adding new integration tests, consider the following:
+* Include a mix of positive and negative assertions (e., presence and absence of resources).
+* Include a mix of different configuration options, e.g., the `read_only: true` flag can be specified in the proxy service configuration YAML, enabling read-only mode (which should be covered by tests as well).
+* Make sure to either use fixtures (preferred), or reliable cleanups for removing the resources; several fixtures for creating AWS resources are available in the `localstack.testing.pytest.fixtures` module
+* If a test uses multiple resources with interdependencies (e.g., an SQS queue connected to an SNS topic), then the test needs to ensure that both resource types are proxied (i.e., created in real AWS), to avoid a situation where a resource in AWS is attempting to reference a local resource in LocalStack (using account ID `000000000000` in their ARN).

aws-proxy/aws_proxy/server/aws_request_forwarder.py

@@ -128,6 +128,11 @@ def _request_matches_resource(
                     if re.match(resource_name_pattern, candidate):
                         return True
                 return False
+            if service_name == "sns":
+                topic_arn = context.service_request.get("TopicArn") or ""
+                if not topic_arn:
+                    return False
+                return bool(re.match(resource_name_pattern, topic_arn))
             if service_name == "secretsmanager":
                 secret_id = context.service_request.get("SecretId") or ""
                 secret_arn = secretsmanager_secret_arn(