feat(aws): real SigV4 signing for the 8 AWS-family connectors (#118)

Self-contained AWS4-HMAC-SHA256 signer (node:crypto, no SDK) wired into the declarative-REST path via credentialPlacement 'aws-sigv4'. Credentials = JSON bundle {accessKeyId,secretAccessKey,region[,sessionToken,endpoint]} in the api-key field; region drives the {region} host template. KAT-pinned (IAM ListUsers + S3 GetObject). Follow-ups: #120, #121, #122. Closes #113.

Author: AtelyPham

src/connectors/adapters/amazon-bedrock.ts

@@ -10,23 +10,27 @@ import { declarativeRestConnector } from './declarative-rest.js'
 // per-prompt action wrappers) because that's what an agent needs to compose
 // arbitrary generation flows on top of.
 //
-// Region is supplied through connection metadata (metadata.region, e.g. us-east-1)
-// so the same connector can target any AWS region without rebuilding the manifest.
+// Region comes from the credential bundle in the api-key field (falling back to
+// metadata.region, then us-east-1) and is substituted into the {region} host
+// templates below, so the same connector targets any AWS region. Each request is
+// signed with AWS Signature V4 (`credentialPlacement: aws-sigv4`, service
+// `bedrock`).
 
 export const amazonBedrockConnector = declarativeRestConnector({
   kind: 'amazon-bedrock',
   displayName: 'Amazon Bedrock',
   description: 'Invoke AWS Bedrock foundation models for text generation, image analysis, image generation, and embeddings; list available foundation models.',
-  auth: { kind: 'api-key', hint: 'AWS access key id / secret access key pair (the connection should also carry metadata.region; requests are signed with AWS Signature V4 at the gateway).' },
+  auth: { kind: 'api-key', hint: 'AWS credentials as JSON: {"accessKeyId":"AKIA…","secretAccessKey":"…","region":"us-east-1"}. Optional "sessionToken" and "endpoint". Requests are signed with AWS Signature V4; the region selects the bedrock-runtime.<region>.amazonaws.com endpoint.' },
   category: 'other',
   // Bedrock model invocations are non-idempotent generative calls; the manifest
   // surfaces are advisory (best-effort), not authoritative state.
   defaultConsistencyModel: 'advisory',
   // bedrock-runtime is the workhorse endpoint for invoke/converse. Control-plane
   // listing operations override the host on a per-capability basis below.
-  baseUrl: { metadataKey: 'runtimeEndpoint', fallback: 'https://bedrock-runtime.us-east-1.amazonaws.com' },
+  credentialPlacement: { kind: 'aws-sigv4', service: 'bedrock' },
+  baseUrl: { metadataKey: 'runtimeEndpoint', fallback: 'https://bedrock-runtime.{region}.amazonaws.com' },
   defaultHeaders: { 'content-type': 'application/json', accept: 'application/json' },
-  test: { method: 'GET', path: '/foundation-models', headers: { host: 'bedrock.us-east-1.amazonaws.com' } },
+  test: { method: 'GET', path: '/foundation-models', headers: { host: 'bedrock.{region}.amazonaws.com' } },
   capabilities: [
     {
       name: 'models.list',
@@ -48,9 +52,10 @@ export const amazonBedrockConnector = declarativeRestConnector({
           byOutputModality: '{byOutputModality}',
           byInferenceType: '{byInferenceType}',
         },
-        // Control-plane host override; declarative-rest forwards the header to
-        // the gateway, which rewrites the upstream Host for SigV4.
-        headers: { host: 'bedrock.us-east-1.amazonaws.com' },
+        // Control-plane host override: the runtime folds this `host` header into
+        // the request URL (region substituted) so SigV4 signs the bedrock.<region>
+        // control-plane host, not the bedrock-runtime base host.
+        headers: { host: 'bedrock.{region}.amazonaws.com' },
       },
     },
     {
@@ -67,7 +72,7 @@ export const amazonBedrockConnector = declarativeRestConnector({
       request: {
         method: 'GET',
         path: '/foundation-models/{modelIdentifier}',
-        headers: { host: 'bedrock.us-east-1.amazonaws.com' },
+        headers: { host: 'bedrock.{region}.amazonaws.com' },
       },
     },
     {

src/connectors/adapters/amazon-s3.ts

@@ -6,11 +6,15 @@ export const amazonS3Connector = declarativeRestConnector({
   description: 'Scalable storage in the cloud. Read, upload, delete, and manage files in S3 buckets.',
   auth: {
     kind: 'api-key',
-    hint: 'AWS Access Key ID and Secret Access Key. Provide credentials for IAM user with S3 permissions.',
+    hint: 'AWS credentials as JSON: {"accessKeyId":"AKIA…","secretAccessKey":"…","region":"us-east-1"} for an IAM principal with S3 permissions. Optional "sessionToken" and "endpoint" (S3-compatible stores). Requests are signed with AWS Signature V4; the region selects the s3.<region>.amazonaws.com endpoint.',
   },
   category: 'storage',
   defaultConsistencyModel: 'authoritative',
-  baseUrl: 'https://s3.amazonaws.com',
+  // S3 REST API, path-style. Each request is signed with AWS Signature V4
+  // (service `s3`, which signs the request path verbatim); the bundle's region
+  // is substituted into the `{region}` host template.
+  credentialPlacement: { kind: 'aws-sigv4', service: 's3' },
+  baseUrl: 'https://s3.{region}.amazonaws.com',
   test: { method: 'GET', path: '/' },
   capabilities: [
     {

src/connectors/adapters/amazon-secrets-manager.ts

@@ -1,22 +1,25 @@
 import { declarativeRestConnector } from './declarative-rest.js'
 
-// AWS Secrets Manager Query Protocol endpoint. Region is bound into the
-// host at credential-mint time; the metadataKey indirection lets callers
-// override per-tenant without touching the manifest.
+// AWS Secrets Manager JSON 1.1 protocol endpoint. Each request is signed with
+// AWS Signature V4 (`credentialPlacement: aws-sigv4`) from the credential
+// bundle in the api-key field; the bundle's region is substituted into the
+// `{region}` host template, and the metadataKey indirection still lets callers
+// override the host per-tenant without touching the manifest.
 export const amazonSecretsManagerConnector = declarativeRestConnector({
   kind: 'amazon-secrets-manager',
   displayName: 'AWS Secrets Manager',
   description:
     'Create, read, update, find, and delete secrets in AWS Secrets Manager, or generate a random password.',
   auth: {
     kind: 'api-key',
-    hint: 'AWS access key id + secret access key + region (api-key field carries the SigV4 credential bundle).',
+    hint: 'AWS credentials as JSON: {"accessKeyId":"AKIA…","secretAccessKey":"…","region":"us-east-1"}. Optional "sessionToken" and "endpoint". Requests are signed with AWS Signature V4; the region selects the secretsmanager.<region>.amazonaws.com endpoint.',
   },
   category: 'other',
   defaultConsistencyModel: 'authoritative',
+  credentialPlacement: { kind: 'aws-sigv4', service: 'secretsmanager' },
   baseUrl: {
     metadataKey: 'endpoint',
-    fallback: 'https://secretsmanager.us-east-1.amazonaws.com',
+    fallback: 'https://secretsmanager.{region}.amazonaws.com',
   },
   defaultHeaders: {
     'Content-Type': 'application/x-amz-json-1.1',

src/connectors/adapters/amazon-ses.ts

@@ -20,11 +20,15 @@ export const amazonSesConnector = declarativeRestConnector({
   description: 'Send transactional and templated email and manage SES email templates via the Amazon SES v2 REST API.',
   auth: {
     kind: 'api-key',
-    hint: 'AWS access key ID + secret access key with ses:SendEmail / ses:SendTemplatedEmail / template-management permissions. The region selects the SES endpoint (e.g. us-east-1).',
+    hint: 'AWS credentials as JSON: {"accessKeyId":"AKIA…","secretAccessKey":"…","region":"us-east-1"} (the key needs ses:SendEmail / ses:SendTemplatedEmail / template-management permissions). Optional "sessionToken" and "endpoint". Requests are signed with AWS Signature V4; the region selects the email.<region>.amazonaws.com (SES v2) endpoint.',
   },
   category: 'comms',
   defaultConsistencyModel: 'authoritative',
-  baseUrl: { metadataKey: 'endpoint' },
+  // SES v2 REST API: the SigV4 signing name is `ses`, but the regional host is
+  // the `email.` subdomain. metadata.endpoint still overrides when a tenant
+  // pins a host.
+  credentialPlacement: { kind: 'aws-sigv4', service: 'ses' },
+  baseUrl: { metadataKey: 'endpoint', fallback: 'https://email.{region}.amazonaws.com' },
   test: { method: 'GET', path: '/v2/email/identities' },
   capabilities: [
     {

src/connectors/adapters/amazon-sns.ts

@@ -1,25 +1,26 @@
 import { declarativeRestConnector } from './declarative-rest.js'
 
 // Amazon SNS uses the AWS Query Protocol (form/query string parameters with
-// Action=<Op>&Version=2010-03-31). Region is bound into the host at
-// credential-mint time; the `metadataKey: 'endpoint'` indirection lets a
-// caller pin region per tenant without rewriting the manifest. SigV4 is
-// performed by the credential layer; the api-key field carries the
-// SigV4 credential bundle (accessKeyId + secretAccessKey + region).
+// Action=<Op>&Version=2010-03-31). Each request is signed with AWS Signature V4
+// (`credentialPlacement: aws-sigv4`) from the credential bundle in the api-key
+// field; the bundle's region is substituted into the `{region}` host template,
+// and the `metadataKey: 'endpoint'` indirection still lets a caller pin a host
+// per tenant without rewriting the manifest.
 export const amazonSnsConnector = declarativeRestConnector({
   kind: 'amazon-sns',
   displayName: 'Amazon SNS',
   description:
     'Publish messages to Amazon Simple Notification Service topics, manage topics, and manage subscriptions.',
   auth: {
     kind: 'api-key',
-    hint: 'AWS access key id + secret access key + region (api-key field carries the SigV4 credential bundle).',
+    hint: 'AWS credentials as JSON: {"accessKeyId":"AKIA…","secretAccessKey":"…","region":"us-east-1"}. Optional "sessionToken" and "endpoint". Requests are signed with AWS Signature V4; the region selects the sns.<region>.amazonaws.com endpoint.',
   },
   category: 'comms',
   defaultConsistencyModel: 'authoritative',
+  credentialPlacement: { kind: 'aws-sigv4', service: 'sns' },
   baseUrl: {
     metadataKey: 'endpoint',
-    fallback: 'https://sns.us-east-1.amazonaws.com',
+    fallback: 'https://sns.{region}.amazonaws.com',
   },
   defaultHeaders: {
     'Content-Type': 'application/x-www-form-urlencoded; charset=utf-8',

src/connectors/adapters/amazon-sqs.ts

@@ -1,10 +1,11 @@
 import { declarativeRestConnector } from './declarative-rest.js'
 
 // AWS SQS JSON protocol (sqs.<region>.amazonaws.com). All actions are POST to
-// the service root with X-Amz-Target: AmazonSQS.<Action> and JSON body; the
-// gateway signs requests with SigV4 using the credential bundle in the api-key
-// field. Region is bound into the host via metadata.endpoint at credential-mint
-// time so the same manifest targets any AWS region.
+// the service root with X-Amz-Target: AmazonSQS.<Action> and a JSON body. Each
+// request is signed with AWS Signature V4 (`credentialPlacement: aws-sigv4`)
+// from the credential bundle in the api-key field; the bundle's region is
+// substituted into the `{region}` host template so one manifest targets any
+// AWS region.
 //
 // The activepieces catalog surfaces only send.message, but a usable SQS adapter
 // for an agent must cover the full messaging primitive: send / receive / delete
@@ -19,16 +20,17 @@ export const amazonSqsConnector = declarativeRestConnector({
     'Send, receive, and delete messages on AWS SQS queues, and discover queue URLs and attributes.',
   auth: {
     kind: 'api-key',
-    hint: 'AWS access key id + secret access key + region (api-key field carries the SigV4 credential bundle; metadata.endpoint may override the regional host).',
+    hint: 'AWS credentials as JSON: {"accessKeyId":"AKIA…","secretAccessKey":"…","region":"us-east-1"}. Optional "sessionToken" (STS temp creds) and "endpoint" (override host). Requests are signed with AWS Signature V4; the region selects the sqs.<region>.amazonaws.com endpoint.',
   },
   category: 'other',
   // SQS is an at-least-once durable queue: sends, deletes, and queue-attribute
   // reads are authoritative against the service. Receive returns a transient
   // visibility-locked view, but the queue state itself is authoritative.
   defaultConsistencyModel: 'authoritative',
+  credentialPlacement: { kind: 'aws-sigv4', service: 'sqs' },
   baseUrl: {
     metadataKey: 'endpoint',
-    fallback: 'https://sqs.us-east-1.amazonaws.com',
+    fallback: 'https://sqs.{region}.amazonaws.com',
   },
   defaultHeaders: {
     'Content-Type': 'application/x-amz-json-1.0',

src/connectors/adapters/amazon-textract.ts

@@ -2,9 +2,11 @@ import { declarativeRestConnector } from './declarative-rest.js'
 
 // AWS Textract is exposed via the JSON 1.1 query protocol: a single POST to /
 // with the X-Amz-Target header naming the operation
-// (Textract.AnalyzeDocument, Textract.DetectDocumentText, etc.). Region binds
-// into the host at credential-mint time; metadataKey 'endpoint' allows
-// per-tenant override (textract.<region>.amazonaws.com).
+// (Textract.AnalyzeDocument, Textract.DetectDocumentText, etc.). Each request is
+// signed with AWS Signature V4 (`credentialPlacement: aws-sigv4`) from the
+// credential bundle in the api-key field; the bundle's region is substituted
+// into the `{region}` host template, and metadataKey 'endpoint' still allows a
+// per-tenant host override (textract.<region>.amazonaws.com).
 //
 // The catalog enumerates 5 actions (AnalyzeDocument, DetectDocumentText,
 // AnalyzeExpense, AnalyzeId, AnalyzeDocumentAsync). The async path returns a
@@ -24,13 +26,14 @@ export const amazonTextractConnector = declarativeRestConnector({
     'Extract text, forms, tables, signatures, and structured data (expense, identity) from documents using AWS Textract.',
   auth: {
     kind: 'api-key',
-    hint: 'AWS access key id + secret access key + region (api-key field carries the SigV4 credential bundle; the gateway signs each request).',
+    hint: 'AWS credentials as JSON: {"accessKeyId":"AKIA…","secretAccessKey":"…","region":"us-east-1"}. Optional "sessionToken" and "endpoint". Requests are signed with AWS Signature V4; the region selects the textract.<region>.amazonaws.com endpoint.',
   },
   category: 'other',
   defaultConsistencyModel: 'authoritative',
+  credentialPlacement: { kind: 'aws-sigv4', service: 'textract' },
   baseUrl: {
     metadataKey: 'endpoint',
-    fallback: 'https://textract.us-east-1.amazonaws.com',
+    fallback: 'https://textract.{region}.amazonaws.com',
   },
   defaultHeaders: {
     'Content-Type': 'application/x-amz-json-1.1',