{ "contract": "sourcey.site-record/v1alpha1", "release_id": "sha256:1042b2f7b6130b564b0059e00560960c50db2d7578dfa5178d401e5d14d9b11f", "snapshot_id": "sha256:696d9730d13ebc723115e4a92f695a0f26345d4350d440a417805b69d1b209e4", "artifact_sha256": "sha256:a695609a4d6872bd447e3125d912e7f84e605d0f064df0b08e62a9f24d9d2e80", "data": { "entity_id": "ent_01kyh8fpe10b164tj935t8k5zb", "entity_slug": "aws", "profile": { "projection_contract": "sourcey.agent-readiness-projection/v1alpha1", "agent_readiness_profile_id": "arp_01kzez1rxy9f1wce0r3p6yd35y", "entity_id": "ent_01kyh8fpe10b164tj935t8k5zb", "scope": { "product": { "key": "aws-cloud", "name": "AWS Cloud" }, "funnel": { "key": "api-resource-management", "name": "API resource management" } }, "catalog_binding": { "base_release_id": "sha256:5082ec07047a2324648f569d234cc64342ce2707b2f3d77fde8fc06af517cee6", "entity_revision_digest": "sha256:dca08f2f9410a83d7a9baaeb4e32f36a3828dadb9cf563a07ff5c25fb9f5d236" }, "declaration_revision_digest": "sha256:0a86612369fdcd30e58214ca76e746512ab8754380f1de22a7da6e8689c9ec89", "declaration": { "declaration_id": "declaration_aws_cloud_api_resource_management", "provenance": { "repository": "sourcey/agent-ready-services", "commit": "00f00edd170194cc1cf3081b97b218474537ffdb", "path": "vendors/aw/aws.yaml", "git_blob_oid": "521f2310bdb48ef36adcf70016dd2db9e5c63ef9", "blob_digest": "sha256:e157df398d903b061874b86bd1a04f67fcb4f549c9451126ab178de9fa94dd75" }, "status": "community_declared" }, "surface_catalog": { "participants": [ { "participant_id": "aws", "roles": [ "access_operator", "identity_provider", "operations_provider", "payment_provider", "provisioning_provider", "subject" ], "identity": { "entity_id": "ent_01kyh8fpe10b164tj935t8k5zb" } } ], "resources": [ { "resource_id": "account-creation", "uri": "https://signin.aws.amazon.com/signup?request_type=register", "roles": [ "checkout", "sign_up" ], "operated_by_participant_id": "aws", "standard_bindings": [] }, { "resource_id": "account-creation-troubleshooting", "uri": "https://docs.aws.amazon.com/accounts/latest/reference/troubleshooting_create-account.html", "roles": [ "documentation", "recovery", "sign_up" ], "operated_by_participant_id": "aws", "standard_bindings": [] }, { "resource_id": "cloud-control-create-api", "uri": "https://docs.aws.amazon.com/cloudcontrolapi/latest/APIReference/API_CreateResource.html", "roles": [ "documentation", "provisioning" ], "operated_by_participant_id": "aws", "standard_bindings": [] }, { "resource_id": "cloud-control-endpoints", "uri": "https://docs.aws.amazon.com/general/latest/gr/cloudcontrolapi.html", "roles": [ "documentation" ], "operated_by_participant_id": "aws", "standard_bindings": [] }, { "resource_id": "cloud-control-getting-started", "uri": "https://docs.aws.amazon.com/cloudcontrolapi/latest/userguide/getting-started.html", "roles": [ "documentation", "provisioning", "status" ], "operated_by_participant_id": "aws", "standard_bindings": [] }, { "resource_id": "cloud-control-overview", "uri": "https://docs.aws.amazon.com/cloudcontrolapi/latest/userguide/what-is-cloudcontrolapi.html", "roles": [ "discovery", "documentation", "operations" ], "operated_by_participant_id": "aws", "standard_bindings": [] }, { "resource_id": "cloud-control-resource-operations", "uri": "https://docs.aws.amazon.com/cloudcontrolapi/latest/userguide/resource-operations.html", "roles": [ "documentation", "operations", "status" ], "operated_by_participant_id": "aws", "standard_bindings": [] }, { "resource_id": "cloud-control-status-api", "uri": "https://docs.aws.amazon.com/cloudcontrolapi/latest/APIReference/API_GetResourceRequestStatus.html", "roles": [ "documentation", "status" ], "operated_by_participant_id": "aws", "standard_bindings": [] }, { "resource_id": "price-list-api", "uri": "https://docs.aws.amazon.com/awsaccountbilling/latest/aboutv2/price-changes.html", "roles": [ "documentation", "operations", "pricing" ], "operated_by_participant_id": "aws", "standard_bindings": [] }, { "resource_id": "pricing", "uri": "https://aws.amazon.com/pricing/", "roles": [ "pricing" ], "operated_by_participant_id": "aws", "standard_bindings": [] }, { "resource_id": "request-signing", "uri": "https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_sigv.html", "roles": [ "documentation" ], "operated_by_participant_id": "aws", "standard_bindings": [] }, { "resource_id": "service-terms", "uri": "https://aws.amazon.com/service-terms/", "roles": [ "terms" ], "operated_by_participant_id": "aws", "standard_bindings": [] }, { "resource_id": "sign-in-recovery", "uri": "https://docs.aws.amazon.com/signin/latest/userguide/troubleshooting-sign-in-issues.html", "roles": [ "documentation", "recovery" ], "operated_by_participant_id": "aws", "standard_bindings": [] }, { "resource_id": "temporary-credentials", "uri": "https://docs.aws.amazon.com/IAM/latest/UserGuide/id_credentials_temp_request.html", "roles": [ "descriptor", "documentation" ], "operated_by_participant_id": "aws", "standard_bindings": [] } ], "endpoints": [ { "endpoint_id": "cloud-control-api", "uri": "https://cloudcontrolapi.us-east-1.amazonaws.com", "transport": "http", "roles": [ "service", "status" ], "operated_by_participant_id": "aws", "standard_bindings": [] }, { "endpoint_id": "pricing-api", "uri": "https://api.pricing.us-east-1.amazonaws.com", "transport": "http", "roles": [ "service" ], "operated_by_participant_id": "aws", "standard_bindings": [] }, { "endpoint_id": "security-token-service", "uri": "https://sts.amazonaws.com", "transport": "http", "roles": [ "authorization", "token" ], "operated_by_participant_id": "aws", "standard_bindings": [] } ], "interfaces": [ { "interface_id": "cloud-control", "capabilities": [ "api", "tools" ], "endpoint_ids": [ "cloud-control-api" ], "resource_ids": [ "cloud-control-create-api", "cloud-control-endpoints", "cloud-control-getting-started", "cloud-control-overview", "cloud-control-resource-operations", "cloud-control-status-api" ], "operated_by_participant_id": "aws", "standard_bindings": [] }, { "interface_id": "public-pricing", "capabilities": [ "api", "commerce" ], "endpoint_ids": [ "pricing-api" ], "resource_ids": [ "price-list-api", "pricing" ], "operated_by_participant_id": "aws", "standard_bindings": [] }, { "interface_id": "workload-authentication", "capabilities": [ "api", "authentication" ], "endpoint_ids": [ "security-token-service" ], "resource_ids": [ "request-signing", "temporary-credentials" ], "operated_by_participant_id": "aws", "standard_bindings": [] } ], "relations": [ { "relation_id": "account-precedes-authentication", "kind": "precedes", "from": { "node_kind": "resource", "node_id": "account-creation" }, "to": { "node_kind": "interface", "node_id": "workload-authentication" } }, { "relation_id": "authentication-authenticates-cloud-control", "kind": "authenticates", "from": { "node_kind": "interface", "node_id": "workload-authentication" }, "to": { "node_kind": "interface", "node_id": "cloud-control" } }, { "relation_id": "cloud-control-docs-describe-interface", "kind": "describes", "from": { "node_kind": "resource", "node_id": "cloud-control-overview" }, "to": { "node_kind": "interface", "node_id": "cloud-control" } }, { "relation_id": "getting-started-precedes-resource-operations", "kind": "precedes", "from": { "node_kind": "resource", "node_id": "cloud-control-getting-started" }, "to": { "node_kind": "resource", "node_id": "cloud-control-resource-operations" } }, { "relation_id": "pricing-docs-describe-interface", "kind": "describes", "from": { "node_kind": "resource", "node_id": "price-list-api" }, "to": { "node_kind": "interface", "node_id": "public-pricing" } }, { "relation_id": "request-signing-describes-authentication", "kind": "describes", "from": { "node_kind": "resource", "node_id": "request-signing" }, "to": { "node_kind": "interface", "node_id": "workload-authentication" } } ] }, "lifecycle": "active", "effective_from": "2026-08-08T02:06:52.645Z", "revision_digest": "sha256:1732396e5c31f0ccf00e6081d81b624ffbfa3bf34b739a3ae4eca0b977ed426c", "policy_digest": "sha256:334e56852b5c38e178fcea839cfba680fb82dd96693842d933776baed21d63df", "policy_version": "service-lifecycle-2026-08-08-calibrated", "policy_as_of": "2026-08-06T00:00:00Z", "overall_outcome": "constrained", "public_state": "limited", "state_label": "Limited", "grade": "B", "grade_derivation": { "label": "Agent Readiness service-use grade", "explanation": "Complete, fresh evidence for the core service lifecycle first applies hard stage severity, then grades the share of applicable evidenced signals that are constrained. Optional blocker probes affect the grade when established and remain visible as unknown when public evidence cannot establish them.", "coverage_rule": "Any incomplete, contradictory, unsupported, or non-fresh required evidence produces an unrated profile.", "outcome_rule": "A failed Evaluate, Sign up, or Pay stage derives D; a failed Provision or Operate stage derives F; otherwise constrained-signal ratio derives A+ through C." }, "publication": { "visibility": "discoverable", "reasons": [] }, "first_autonomy_break": { "stage": "evaluate", "stage_label": "Evaluate", "public_state": "limited", "finding": { "signal_code": "structured_terms", "condition": "Structured terms limited", "finding": "Only part of the applicable terms is machine-readable." } }, "stages": [ { "stage": "evaluate", "stage_label": "Evaluate", "outcome": "constrained", "public_state": "limited", "state_label": "Limited", "primary_finding": { "signal_code": "structured_terms", "condition": "Structured terms limited", "finding": "Only part of the applicable terms is machine-readable." }, "secondary_context": [ { "signal_code": "ard_declaration", "condition": "ARD declaration unknown", "finding": "An ARD declaration has not been established." }, { "signal_code": "machine_discovery", "condition": "Machine discovery", "finding": "An agent can discover the product and funnel from the tested public entrypoints." }, { "signal_code": "decidable_eligibility", "condition": "Decidable eligibility", "finding": "Eligibility can be decided from explicit public criteria." }, { "signal_code": "readable_pricing", "condition": "Readable pricing", "finding": "Pricing or the absence of a charge is explicit and machine-readable." } ], "signals": [ { "signal_code": "ard_declaration", "evaluation_role": "informational", "required": false, "value": "unknown", "value_label": "Unknown", "outcome": "unknown", "public_state": "unknown", "condition": "ARD declaration unknown", "finding": "An ARD declaration has not been established.", "evidence_status": "missing", "freshness": "unknown", "tested_surfaces": [] }, { "signal_code": "decidable_eligibility", "evaluation_role": "graded", "required": false, "value": "yes", "value_label": "Ready", "outcome": "pass", "public_state": "ready", "condition": "Decidable eligibility", "finding": "Eligibility can be decided from explicit public criteria.", "evidence_status": "supported", "freshness": "fresh", "observed_at": "2026-08-07T20:39:04.293Z", "tested_surfaces": [ { "node_kind": "resource", "node_id": "service-terms" } ], "assessment_method": { "name": "http", "version": "1", "method_digest": "sha256:2d2f445064222c234cbaf541a627226a2c4be06a90e226b98a4389cb49e2d66b" }, "note": "AWS publishes clear Universal Service Terms and criteria governing account usage, eligibility verification, and compliance across its services." }, { "signal_code": "machine_discovery", "evaluation_role": "graded", "required": true, "value": "yes", "value_label": "Ready", "outcome": "pass", "public_state": "ready", "condition": "Machine discovery", "finding": "An agent can discover the product and funnel from the tested public entrypoints.", "evidence_status": "supported", "freshness": "fresh", "observed_at": "2026-08-07T20:39:00.538Z", "tested_surfaces": [ { "node_kind": "resource", "node_id": "cloud-control-overview" } ], "assessment_method": { "name": "http", "version": "1", "method_digest": "sha256:2d2f445064222c234cbaf541a627226a2c4be06a90e226b98a4389cb49e2d66b" }, "note": "AWS Cloud Control API provides machine-discoverable standardized APIs and AWS CLI commands for CRUD-L operations on supported resources." }, { "signal_code": "readable_pricing", "evaluation_role": "graded", "required": true, "value": "yes", "value_label": "Ready", "outcome": "pass", "public_state": "ready", "condition": "Readable pricing", "finding": "Pricing or the absence of a charge is explicit and machine-readable.", "evidence_status": "supported", "freshness": "fresh", "observed_at": "2026-08-07T20:39:02.870Z", "tested_surfaces": [ { "node_kind": "resource", "node_id": "pricing" } ], "assessment_method": { "name": "http", "version": "1", "method_digest": "sha256:2d2f445064222c234cbaf541a627226a2c4be06a90e226b98a4389cb49e2d66b" }, "note": "AWS provides explicit public pricing models including pay-as-you-go, flat rate, and tiered pricing along with the AWS Pricing Calculator." }, { "signal_code": "structured_terms", "evaluation_role": "graded", "required": true, "value": "partial", "value_label": "Limited", "outcome": "constrained", "public_state": "limited", "condition": "Structured terms limited", "finding": "Only part of the applicable terms is machine-readable.", "evidence_status": "supported", "freshness": "fresh", "observed_at": "2026-08-07T20:39:04.293Z", "tested_surfaces": [ { "node_kind": "resource", "node_id": "service-terms" } ], "assessment_method": { "name": "http", "version": "1", "method_digest": "sha256:2d2f445064222c234cbaf541a627226a2c4be06a90e226b98a4389cb49e2d66b" }, "negative_coverage": { "kind": "complete-response-inspection", "scope": "exact-resource", "covered_surfaces": [ { "node_kind": "resource", "node_id": "service-terms" } ] }, "note": "AWS service terms are provided as web-based text documentation rather than a fully machine-readable structured format.", "remediation": { "signal_code": "structured_terms", "code": "improve.evaluate.structured_terms", "instruction": "Publish complete applicable terms in a stable machine-readable document." } } ], "blockers": [], "remediations": [ { "signal_code": "structured_terms", "code": "improve.evaluate.structured_terms", "instruction": "Publish complete applicable terms in a stable machine-readable document." } ] }, { "stage": "sign_up", "stage_label": "Sign up", "outcome": "pass", "public_state": "ready", "state_label": "Ready", "primary_finding": { "signal_code": "stable_entrypoint", "condition": "Stable signup entrypoint", "finding": "A stable signup entrypoint is available." }, "secondary_context": [ { "signal_code": "phone_verification_free", "condition": "Phone-free signup unknown", "finding": "Whether phone verification is required has not been established." }, { "signal_code": "machine_operable_form", "condition": "Machine-operable signup", "finding": "The tested signup flow exposes machine-operable controls." }, { "signal_code": "captcha_free", "condition": "CAPTCHA-free signup", "finding": "No CAPTCHA was encountered on the tested signup path." }, { "signal_code": "supported_identity_flow", "condition": "Supported identity flow", "finding": "A scoped, revocable machine identity flow is documented, including explicit human authorization boundaries." } ], "signals": [ { "signal_code": "captcha_free", "evaluation_role": "graded", "required": false, "value": "yes", "value_label": "Ready", "outcome": "pass", "public_state": "ready", "condition": "CAPTCHA-free signup", "finding": "No CAPTCHA was encountered on the tested signup path.", "evidence_status": "supported", "freshness": "fresh", "observed_at": "2026-08-07T23:26:27.092Z", "tested_surfaces": [ { "node_kind": "resource", "node_id": "account-creation" } ], "assessment_method": { "name": "headless", "version": "1", "method_digest": "sha256:5c58a6d3f59d1910064324a215209f16f177b8021442dcbf1465f4c3ccd78ed1" }, "note": "The signup page rendered without a CAPTCHA blocking initial email and account name entry." }, { "signal_code": "machine_operable_form", "evaluation_role": "graded", "required": false, "value": "yes", "value_label": "Ready", "outcome": "pass", "public_state": "ready", "condition": "Machine-operable signup", "finding": "The tested signup flow exposes machine-operable controls.", "evidence_status": "supported", "freshness": "fresh", "observed_at": "2026-08-07T23:26:27.092Z", "tested_surfaces": [ { "node_kind": "resource", "node_id": "account-creation" } ], "assessment_method": { "name": "headless", "version": "1", "method_digest": "sha256:5c58a6d3f59d1910064324a215209f16f177b8021442dcbf1465f4c3ccd78ed1" }, "note": "The signup form contains standard input fields for root email address and account name." }, { "signal_code": "phone_verification_free", "evaluation_role": "graded", "required": false, "value": "unknown", "value_label": "Unknown", "outcome": "unknown", "public_state": "unknown", "condition": "Phone-free signup unknown", "finding": "Whether phone verification is required has not been established.", "evidence_status": "supported", "freshness": "fresh", "observed_at": "2026-08-07T23:26:27.092Z", "tested_surfaces": [ { "node_kind": "resource", "node_id": "account-creation" } ], "assessment_method": { "name": "headless", "version": "1", "method_digest": "sha256:5c58a6d3f59d1910064324a215209f16f177b8021442dcbf1465f4c3ccd78ed1" }, "note": "The initial signup page capture does not show phone verification requirements, but subsequent steps are not established in the evidence." }, { "signal_code": "stable_entrypoint", "evaluation_role": "graded", "required": true, "value": "yes", "value_label": "Ready", "outcome": "pass", "public_state": "ready", "condition": "Stable signup entrypoint", "finding": "A stable signup entrypoint is available.", "evidence_status": "supported", "freshness": "fresh", "observed_at": "2026-08-07T23:27:07.416Z", "tested_surfaces": [ { "node_kind": "resource", "node_id": "account-creation" } ], "assessment_method": { "name": "http", "version": "1", "method_digest": "sha256:2d2f445064222c234cbaf541a627226a2c4be06a90e226b98a4389cb49e2d66b" }, "note": "The AWS Console Signup endpoint returned a valid response with stable signup metadata." }, { "signal_code": "supported_identity_flow", "evaluation_role": "graded", "required": true, "value": "yes", "value_label": "Ready", "outcome": "pass", "public_state": "ready", "condition": "Supported identity flow", "finding": "A scoped, revocable machine identity flow is documented, including explicit human authorization boundaries.", "evidence_status": "supported", "freshness": "fresh", "observed_at": "2026-08-07T20:39:22.831Z", "tested_surfaces": [ { "node_kind": "resource", "node_id": "temporary-credentials" } ], "assessment_method": { "name": "headless", "version": "1", "method_digest": "sha256:5c58a6d3f59d1910064324a215209f16f177b8021442dcbf1465f4c3ccd78ed1" }, "note": "AWS STS documentation details scoped, short-term, and revocable credential request flows for IAM roles and identities." } ], "blockers": [], "remediations": [] }, { "stage": "pay", "stage_label": "Pay", "outcome": "constrained", "public_state": "limited", "state_label": "Limited", "primary_finding": { "signal_code": "machine_operable_checkout", "condition": "Machine-operable checkout limited", "finding": "Checkout is only partly machine-operable or requires human intervention." }, "secondary_context": [ { "signal_code": "supported_payment_rail", "condition": "Supported payment rail unknown", "finding": "A supported payment rail has not been established." }, { "signal_code": "explicit_price", "condition": "Explicit price", "finding": "The required price or no-charge status is explicit before commitment." }, { "signal_code": "sales_intervention_free", "condition": "Sales-free purchase", "finding": "The tested funnel can complete without sales intervention." } ], "signals": [ { "signal_code": "explicit_price", "evaluation_role": "graded", "required": true, "value": "yes", "value_label": "Ready", "outcome": "pass", "public_state": "ready", "condition": "Explicit price", "finding": "The required price or no-charge status is explicit before commitment.", "evidence_status": "supported", "freshness": "fresh", "observed_at": "2026-08-07T20:39:02.870Z", "tested_surfaces": [ { "node_kind": "resource", "node_id": "pricing" } ], "assessment_method": { "name": "http", "version": "1", "method_digest": "sha256:2d2f445064222c234cbaf541a627226a2c4be06a90e226b98a4389cb49e2d66b" }, "note": "AWS provides explicit pay-as-you-go, flat-rate, and tiered pricing details publicly prior to account sign-up." }, { "signal_code": "machine_operable_checkout", "evaluation_role": "graded", "required": false, "value": "partial", "value_label": "Limited", "outcome": "constrained", "public_state": "limited", "condition": "Machine-operable checkout limited", "finding": "Checkout is only partly machine-operable or requires human intervention.", "evidence_status": "supported", "freshness": "fresh", "observed_at": "2026-08-07T23:26:27.092Z", "tested_surfaces": [ { "node_kind": "resource", "node_id": "account-creation" } ], "assessment_method": { "name": "headless", "version": "1", "method_digest": "sha256:5c58a6d3f59d1910064324a215209f16f177b8021442dcbf1465f4c3ccd78ed1" }, "negative_coverage": { "kind": "bounded-rendered-flow-inspection", "scope": "tested-surfaces", "covered_surfaces": [ { "node_kind": "resource", "node_id": "account-creation" } ] }, "note": "The initial sign-up flow captures account registration details via standard web forms, but complete machine-operable automated checkout without human intervention is limited.", "remediation": { "signal_code": "machine_operable_checkout", "code": "improve.pay.machine_operable_checkout", "instruction": "Expose documented, labelled checkout controls or an agent-compatible commerce interface." } }, { "signal_code": "sales_intervention_free", "evaluation_role": "graded", "required": false, "value": "yes", "value_label": "Ready", "outcome": "pass", "public_state": "ready", "condition": "Sales-free purchase", "finding": "The tested funnel can complete without sales intervention.", "evidence_status": "supported", "freshness": "fresh", "observed_at": "2026-08-07T23:26:27.092Z", "tested_surfaces": [ { "node_kind": "resource", "node_id": "account-creation" } ], "assessment_method": { "name": "headless", "version": "1", "method_digest": "sha256:5c58a6d3f59d1910064324a215209f16f177b8021442dcbf1465f4c3ccd78ed1" }, "note": "Users can independently register and sign up for AWS Cloud accounts via self-service online registration without required sales intervention." }, { "signal_code": "supported_payment_rail", "evaluation_role": "graded", "required": false, "value": "unknown", "value_label": "Unknown", "outcome": "unknown", "public_state": "unknown", "condition": "Supported payment rail unknown", "finding": "A supported payment rail has not been established.", "evidence_status": "supported", "freshness": "fresh", "observed_at": "2026-08-07T23:26:27.092Z", "tested_surfaces": [ { "node_kind": "resource", "node_id": "account-creation" } ], "assessment_method": { "name": "headless", "version": "1", "method_digest": "sha256:5c58a6d3f59d1910064324a215209f16f177b8021442dcbf1465f4c3ccd78ed1" }, "note": "The initial registration page presented does not explicitly state the specific supported payment rails for checkout." } ], "blockers": [], "remediations": [ { "signal_code": "machine_operable_checkout", "code": "improve.pay.machine_operable_checkout", "instruction": "Expose documented, labelled checkout controls or an agent-compatible commerce interface." } ] }, { "stage": "provision", "stage_label": "Provision", "outcome": "pass", "public_state": "ready", "state_label": "Ready", "primary_finding": { "signal_code": "automatic_activation", "condition": "Automatic activation", "finding": "Successful onboarding automatically activates usable access." }, "secondary_context": [ { "signal_code": "bounded_delay", "condition": "Bounded provisioning delay unknown", "finding": "A bounded provisioning delay has not been established." }, { "signal_code": "credential_delivery", "condition": "Credential delivery", "finding": "Usable credentials or delegated access are delivered through a documented flow." }, { "signal_code": "machine_readable_status", "condition": "Machine-readable provisioning status", "finding": "Provisioning exposes machine-readable progress, terminal states, and reconciliation." } ], "signals": [ { "signal_code": "automatic_activation", "evaluation_role": "graded", "required": false, "value": "yes", "value_label": "Ready", "outcome": "pass", "public_state": "ready", "condition": "Automatic activation", "finding": "Successful onboarding automatically activates usable access.", "evidence_status": "supported", "freshness": "fresh", "observed_at": "2026-08-07T23:26:37.328Z", "tested_surfaces": [ { "node_kind": "resource", "node_id": "cloud-control-getting-started" } ], "assessment_method": { "name": "headless", "version": "1", "method_digest": "sha256:5c58a6d3f59d1910064324a215209f16f177b8021442dcbf1465f4c3ccd78ed1" }, "note": "Cloud Control API supports automatic activation for supported public AWS resource types, which are public and always activated by default in an AWS account." }, { "signal_code": "bounded_delay", "evaluation_role": "graded", "required": false, "value": "unknown", "value_label": "Unknown", "outcome": "unknown", "public_state": "unknown", "condition": "Bounded provisioning delay unknown", "finding": "A bounded provisioning delay has not been established.", "evidence_status": "supported", "freshness": "fresh", "observed_at": "2026-08-07T20:39:05.238Z", "tested_surfaces": [ { "node_kind": "resource", "node_id": "cloud-control-resource-operations" } ], "assessment_method": { "name": "http", "version": "1", "method_digest": "sha256:2d2f445064222c234cbaf541a627226a2c4be06a90e226b98a4389cb49e2d66b" }, "note": "Documentation provides guidance on asynchronous resource requests and polling status, but does not publish a explicit maximum bounded provisioning delay." }, { "signal_code": "credential_delivery", "evaluation_role": "graded", "required": true, "value": "yes", "value_label": "Ready", "outcome": "pass", "public_state": "ready", "condition": "Credential delivery", "finding": "Usable credentials or delegated access are delivered through a documented flow.", "evidence_status": "supported", "freshness": "fresh", "observed_at": "2026-08-07T20:39:22.831Z", "tested_surfaces": [ { "node_kind": "resource", "node_id": "temporary-credentials" } ], "assessment_method": { "name": "headless", "version": "1", "method_digest": "sha256:5c58a6d3f59d1910064324a215209f16f177b8021442dcbf1465f4c3ccd78ed1" }, "note": "AWS Security Token Service (STS) provides temporary credential delivery via API calls such as AssumeRole, GetSessionToken, and GetFederationToken." }, { "signal_code": "machine_readable_status", "evaluation_role": "graded", "required": false, "value": "yes", "value_label": "Ready", "outcome": "pass", "public_state": "ready", "condition": "Machine-readable provisioning status", "finding": "Provisioning exposes machine-readable progress, terminal states, and reconciliation.", "evidence_status": "supported", "freshness": "fresh", "observed_at": "2026-08-07T20:39:05.238Z", "tested_surfaces": [ { "node_kind": "resource", "node_id": "cloud-control-resource-operations" } ], "assessment_method": { "name": "http", "version": "1", "method_digest": "sha256:2d2f445064222c234cbaf541a627226a2c4be06a90e226b98a4389cb49e2d66b" }, "note": "Cloud Control API provides machine-readable ProgressEvent objects containing tracking tokens and status states like IN_PROGRESS and SUCCESS." } ], "blockers": [], "remediations": [] }, { "stage": "operate", "stage_label": "Operate", "outcome": "constrained", "public_state": "limited", "state_label": "Limited", "primary_finding": { "signal_code": "delegated_recovery", "condition": "Delegated recovery limited", "finding": "Recovery is available only for some failure modes or requires human intervention." }, "secondary_context": [ { "signal_code": "agent_protocol_interface", "condition": "Agent protocol interface unknown", "finding": "An agent protocol interface has not been established." }, { "signal_code": "api_tool_access", "condition": "API or tool access", "finding": "A documented API or tool interface is available for operation." }, { "signal_code": "usable_authentication", "condition": "Usable authentication", "finding": "Authentication is documented and usable within an agent authorization boundary." }, { "signal_code": "documented_limits_errors", "condition": "Documented limits and errors", "finding": "Limits, structured errors, retry behavior, and idempotency semantics are documented where applicable." } ], "signals": [ { "signal_code": "agent_protocol_interface", "evaluation_role": "informational", "required": false, "value": "unknown", "value_label": "Unknown", "outcome": "unknown", "public_state": "unknown", "condition": "Agent protocol interface unknown", "finding": "An agent protocol interface has not been established.", "evidence_status": "missing", "freshness": "unknown", "tested_surfaces": [] }, { "signal_code": "api_tool_access", "evaluation_role": "graded", "required": true, "value": "yes", "value_label": "Ready", "outcome": "pass", "public_state": "ready", "condition": "API or tool access", "finding": "A documented API or tool interface is available for operation.", "evidence_status": "supported", "freshness": "fresh", "observed_at": "2026-08-07T20:39:00.538Z", "tested_surfaces": [ { "node_kind": "resource", "node_id": "cloud-control-overview" } ], "assessment_method": { "name": "http", "version": "1", "method_digest": "sha256:2d2f445064222c234cbaf541a627226a2c4be06a90e226b98a4389cb49e2d66b" }, "note": "AWS Cloud Control API provides a documented uniform API and CLI interface (such as CreateResource, DeleteResource, and GetResource) for managing cloud resources." }, { "signal_code": "delegated_recovery", "evaluation_role": "graded", "required": true, "value": "partial", "value_label": "Limited", "outcome": "constrained", "public_state": "limited", "condition": "Delegated recovery limited", "finding": "Recovery is available only for some failure modes or requires human intervention.", "evidence_status": "supported", "freshness": "fresh", "observed_at": "2026-08-07T23:26:17.536Z", "tested_surfaces": [ { "node_kind": "resource", "node_id": "account-creation-troubleshooting" } ], "assessment_method": { "name": "http", "version": "1", "method_digest": "sha256:2d2f445064222c234cbaf541a627226a2c4be06a90e226b98a4389cb49e2d66b" }, "negative_coverage": { "kind": "complete-response-inspection", "scope": "exact-resource", "covered_surfaces": [ { "node_kind": "resource", "node_id": "account-creation-troubleshooting" } ] }, "note": "AWS account creation troubleshooting provides reference guidance for common activation and verification issues, but directs several failure paths to external support and community resources.", "remediation": { "signal_code": "delegated_recovery", "code": "improve.operate.delegated_recovery", "instruction": "Provide delegated credential rotation, revocation, retry, and recovery paths without requiring unrestricted human intervention." } }, { "signal_code": "documented_limits_errors", "evaluation_role": "graded", "required": true, "value": "yes", "value_label": "Ready", "outcome": "pass", "public_state": "ready", "condition": "Documented limits and errors", "finding": "Limits, structured errors, retry behavior, and idempotency semantics are documented where applicable.", "evidence_status": "supported", "freshness": "fresh", "observed_at": "2026-08-07T20:39:05.238Z", "tested_surfaces": [ { "node_kind": "resource", "node_id": "cloud-control-resource-operations" } ], "assessment_method": { "name": "http", "version": "1", "method_digest": "sha256:2d2f445064222c234cbaf541a627226a2c4be06a90e226b98a4389cb49e2d66b" }, "note": "Cloud Control API documents operational considerations, idempotency via client-token parameters, and non-rollback behavior on request failure." }, { "signal_code": "usable_authentication", "evaluation_role": "graded", "required": true, "value": "yes", "value_label": "Ready", "outcome": "pass", "public_state": "ready", "condition": "Usable authentication", "finding": "Authentication is documented and usable within an agent authorization boundary.", "evidence_status": "supported", "freshness": "fresh", "observed_at": "2026-08-07T20:39:06.952Z", "tested_surfaces": [ { "node_kind": "resource", "node_id": "temporary-credentials" } ], "assessment_method": { "name": "http", "version": "1", "method_digest": "sha256:2d2f445064222c234cbaf541a627226a2c4be06a90e226b98a4389cb49e2d66b" }, "note": "AWS STS provides programmatic methods such as AssumeRole, AssumeRoleWithWebIdentity, and GetSessionToken to obtain temporary credentials within an authorized agent boundary." } ], "blockers": [], "remediations": [ { "signal_code": "delegated_recovery", "code": "improve.operate.delegated_recovery", "instruction": "Provide delegated credential rotation, revocation, retry, and recovery paths without requiring unrestricted human intervention." } ] } ], "coverage": { "status": "complete", "required_signals": 11, "covered_signals": 11, "ratio": 1 }, "last_tested_at": "2026-08-07T23:27:07.416Z", "freshness": "fresh", "provenance": { "tier": "observed", "freshness": "fresh", "dispute": "none", "coverage_policy_digest": "sha256:334e56852b5c38e178fcea839cfba680fb82dd96693842d933776baed21d63df", "freshness_policy_digest": "sha256:f4e31a29c2ce994bb8c3009207294ffa086e82b8e0d695abc95d6d6bdb30c2e5", "basis_event_ids": [ "sha256:02dcb2caa30dbe09943d90567cf28a38f2eb14a63619899173279d4bbe4f5e28", "sha256:14cd92f7f82a5c2da6fa8007b038ae27dce6001945ff8f5b9484b29b8065dc4e", "sha256:15f158e6495a54e2fbb368d907f6f619e4025c58f4a34972c3a3a24753ff2708", "sha256:181bdde0e92b7b3f141178b9f88cca441d6c73b2403105fe59c4b141d2f06023", "sha256:1845728cf4ef158e9cb9dcd5bfe2e507ff4458485fb2517f439ad735dceae881", "sha256:27503d0f1441444aa939a6da928898615acd5e18ba6503b3ca6d62567c62201f", "sha256:352356f99ffcd4550117f2115dfce8a730018f74ffc00af514155ac63f1cf1e5", "sha256:47067268e64c6d666d297eacce8f3f3820c9c2869feec4e233c8f0300f2200d5", "sha256:54806fab8c8acae05ae3fe1c639ea43706b1bebb532ae297c78c00571aefb77b", "sha256:59e1015c0b0bc2891e3a4dc42f0de4e441046602b8aff673df747f30f314af1d", "sha256:5b342b605f7469f96697bbcb5b03d1508958f466ed548ff048555308eebeb1ab", "sha256:60c2bf57925c23e5d06ec27d4a3de04d95d95c5026054b8f3b7440e3b8b68a54", "sha256:839fa7f7717a06dc5848cb9fb8b79bc5557cf1889d9b8e5434fcc660ea55aec5", "sha256:92f93d75ace9d6e7082b3961e69a39eff50da8128ccc184722f22577eee56ab9", "sha256:9b81a2a0e9ee256f5086cae90a6aff3da95fe975cd1bb4ea23f5dd31e2714e01", "sha256:b835549b141a7d09a46ba6fa60b2d7126264402720168df1dbd43cde6a7381cf", "sha256:d7a7380dfbb3fa6261477edff4a44fc0b8ce62651022a9406f8311553007243d", "sha256:d8185490e1592f13ee76d2a88c04f9a4528df63a39976aec8751471a359f1e74", "sha256:e041abf46db999629369a6d7cc3558de92e1e3ce44b04b6902e4617b72a34a20", "sha256:ea9a7047bb643ae1c0dcb9f07f5b9c07f44b207ccbe81f6e5f586405e5125bc2", "sha256:f7ed940a0bfef2106d603c47fe0cbf823c0488258637e600402f0290fff7ed3a" ], "fields": [ { "path": "/signals/0", "supporting_event_ids": [ "sha256:92f93d75ace9d6e7082b3961e69a39eff50da8128ccc184722f22577eee56ab9" ], "contradicting_event_ids": [], "accepted_proof_kinds": [ "observed" ], "evidence_proof_kinds": [ "observed" ], "latest_observation_at": "2026-08-07T20:39:04.293Z", "freshness": "fresh" }, { "path": "/signals/1", "supporting_event_ids": [ "sha256:15f158e6495a54e2fbb368d907f6f619e4025c58f4a34972c3a3a24753ff2708" ], "contradicting_event_ids": [], "accepted_proof_kinds": [ "observed" ], "evidence_proof_kinds": [ "observed" ], "latest_observation_at": "2026-08-07T20:39:00.538Z", "freshness": "fresh" }, { "path": "/signals/2", "supporting_event_ids": [ "sha256:d7a7380dfbb3fa6261477edff4a44fc0b8ce62651022a9406f8311553007243d" ], "contradicting_event_ids": [], "accepted_proof_kinds": [ "observed" ], "evidence_proof_kinds": [ "observed" ], "latest_observation_at": "2026-08-07T20:39:02.870Z", "freshness": "fresh" }, { "path": "/signals/3", "supporting_event_ids": [ "sha256:839fa7f7717a06dc5848cb9fb8b79bc5557cf1889d9b8e5434fcc660ea55aec5" ], "contradicting_event_ids": [], "accepted_proof_kinds": [ "observed" ], "evidence_proof_kinds": [ "observed" ], "latest_observation_at": "2026-08-07T20:39:04.293Z", "freshness": "fresh" }, { "path": "/signals/4", "supporting_event_ids": [ "sha256:9b81a2a0e9ee256f5086cae90a6aff3da95fe975cd1bb4ea23f5dd31e2714e01" ], "contradicting_event_ids": [], "accepted_proof_kinds": [ "observed" ], "evidence_proof_kinds": [ "observed" ], "latest_observation_at": "2026-08-07T23:26:27.092Z", "freshness": "fresh" }, { "path": "/signals/5", "supporting_event_ids": [ "sha256:5b342b605f7469f96697bbcb5b03d1508958f466ed548ff048555308eebeb1ab" ], "contradicting_event_ids": [], "accepted_proof_kinds": [ "observed" ], "evidence_proof_kinds": [ "observed" ], "latest_observation_at": "2026-08-07T23:26:27.092Z", "freshness": "fresh" }, { "path": "/signals/6", "supporting_event_ids": [ "sha256:02dcb2caa30dbe09943d90567cf28a38f2eb14a63619899173279d4bbe4f5e28" ], "contradicting_event_ids": [], "accepted_proof_kinds": [ "observed" ], "evidence_proof_kinds": [ "observed" ], "latest_observation_at": "2026-08-07T23:26:27.092Z", "freshness": "fresh" }, { "path": "/signals/7", "supporting_event_ids": [ "sha256:59e1015c0b0bc2891e3a4dc42f0de4e441046602b8aff673df747f30f314af1d" ], "contradicting_event_ids": [], "accepted_proof_kinds": [ "observed" ], "evidence_proof_kinds": [ "observed" ], "latest_observation_at": "2026-08-07T23:27:07.416Z", "freshness": "fresh" }, { "path": "/signals/8", "supporting_event_ids": [ "sha256:14cd92f7f82a5c2da6fa8007b038ae27dce6001945ff8f5b9484b29b8065dc4e" ], "contradicting_event_ids": [], "accepted_proof_kinds": [ "observed" ], "evidence_proof_kinds": [ "observed" ], "latest_observation_at": "2026-08-07T20:39:22.831Z", "freshness": "fresh" }, { "path": "/signals/9", "supporting_event_ids": [ "sha256:27503d0f1441444aa939a6da928898615acd5e18ba6503b3ca6d62567c62201f" ], "contradicting_event_ids": [], "accepted_proof_kinds": [ "observed" ], "evidence_proof_kinds": [ "observed" ], "latest_observation_at": "2026-08-07T20:39:02.870Z", "freshness": "fresh" }, { "path": "/signals/10", "supporting_event_ids": [ "sha256:181bdde0e92b7b3f141178b9f88cca441d6c73b2403105fe59c4b141d2f06023" ], "contradicting_event_ids": [], "accepted_proof_kinds": [ "observed" ], "evidence_proof_kinds": [ "observed" ], "latest_observation_at": "2026-08-07T23:26:27.092Z", "freshness": "fresh" }, { "path": "/signals/11", "supporting_event_ids": [ "sha256:352356f99ffcd4550117f2115dfce8a730018f74ffc00af514155ac63f1cf1e5" ], "contradicting_event_ids": [], "accepted_proof_kinds": [ "observed" ], "evidence_proof_kinds": [ "observed" ], "latest_observation_at": "2026-08-07T23:26:27.092Z", "freshness": "fresh" }, { "path": "/signals/12", "supporting_event_ids": [ "sha256:47067268e64c6d666d297eacce8f3f3820c9c2869feec4e233c8f0300f2200d5" ], "contradicting_event_ids": [], "accepted_proof_kinds": [ "observed" ], "evidence_proof_kinds": [ "observed" ], "latest_observation_at": "2026-08-07T23:26:27.092Z", "freshness": "fresh" }, { "path": "/signals/13", "supporting_event_ids": [ "sha256:d8185490e1592f13ee76d2a88c04f9a4528df63a39976aec8751471a359f1e74" ], "contradicting_event_ids": [], "accepted_proof_kinds": [ "observed" ], "evidence_proof_kinds": [ "observed" ], "latest_observation_at": "2026-08-07T23:26:37.328Z", "freshness": "fresh" }, { "path": "/signals/14", "supporting_event_ids": [ "sha256:54806fab8c8acae05ae3fe1c639ea43706b1bebb532ae297c78c00571aefb77b" ], "contradicting_event_ids": [], "accepted_proof_kinds": [ "observed" ], "evidence_proof_kinds": [ "observed" ], "latest_observation_at": "2026-08-07T20:39:05.238Z", "freshness": "fresh" }, { "path": "/signals/15", "supporting_event_ids": [ "sha256:1845728cf4ef158e9cb9dcd5bfe2e507ff4458485fb2517f439ad735dceae881" ], "contradicting_event_ids": [], "accepted_proof_kinds": [ "observed" ], "evidence_proof_kinds": [ "observed" ], "latest_observation_at": "2026-08-07T20:39:22.831Z", "freshness": "fresh" }, { "path": "/signals/16", "supporting_event_ids": [ "sha256:b835549b141a7d09a46ba6fa60b2d7126264402720168df1dbd43cde6a7381cf" ], "contradicting_event_ids": [], "accepted_proof_kinds": [ "observed" ], "evidence_proof_kinds": [ "observed" ], "latest_observation_at": "2026-08-07T20:39:05.238Z", "freshness": "fresh" }, { "path": "/signals/17", "supporting_event_ids": [ "sha256:f7ed940a0bfef2106d603c47fe0cbf823c0488258637e600402f0290fff7ed3a" ], "contradicting_event_ids": [], "accepted_proof_kinds": [ "observed" ], "evidence_proof_kinds": [ "observed" ], "latest_observation_at": "2026-08-07T20:39:00.538Z", "freshness": "fresh" }, { "path": "/signals/18", "supporting_event_ids": [ "sha256:ea9a7047bb643ae1c0dcb9f07f5b9c07f44b207ccbe81f6e5f586405e5125bc2" ], "contradicting_event_ids": [], "accepted_proof_kinds": [ "observed" ], "evidence_proof_kinds": [ "observed" ], "latest_observation_at": "2026-08-07T23:26:17.536Z", "freshness": "fresh" }, { "path": "/signals/19", "supporting_event_ids": [ "sha256:e041abf46db999629369a6d7cc3558de92e1e3ce44b04b6902e4617b72a34a20" ], "contradicting_event_ids": [], "accepted_proof_kinds": [ "observed" ], "evidence_proof_kinds": [ "observed" ], "latest_observation_at": "2026-08-07T20:39:05.238Z", "freshness": "fresh" }, { "path": "/signals/20", "supporting_event_ids": [ "sha256:60c2bf57925c23e5d06ec27d4a3de04d95d95c5026054b8f3b7440e3b8b68a54" ], "contradicting_event_ids": [], "accepted_proof_kinds": [ "observed" ], "evidence_proof_kinds": [ "observed" ], "latest_observation_at": "2026-08-07T20:39:06.952Z", "freshness": "fresh" } ] }, "canonical_url": "https://sourcey.com/agent-readiness/aws/aws-cloud/api-resource-management", "projection_digest": "sha256:c6a27956aaf2372602b156a92e90760a77816f1060caf0c2bc6af1735f44f399" } } }