{ "contract": "sourcey.site-record/v1alpha1", "release_id": "sha256:5f55a0147eca9a82d821b7cfb73339dd8059c146b9acbb6ed66c9e3d40a8e1b0", "snapshot_id": "sha256:fbf4583b80f8936d9b7b75906adc86f38f5612cd0a7329839daea7b71ad2b9ce", "artifact_sha256": "sha256:ec393385ec4e7be15a393d925f0df78d54a12787f2995a84fad1b570583dac06", "data": { "entity_id": "ent_01kyh8fpe10b164tj935t8k5zb", "entity_slug": "aws", "profile": { "projection_contract": "sourcey.agent-readiness-projection/v1alpha1", "agent_readiness_profile_id": "arp_01kzez1rxy9f1wce0r3p6yd35y", "entity_id": "ent_01kyh8fpe10b164tj935t8k5zb", "scope": { "product": { "key": "aws-cloud", "name": "AWS Cloud" }, "funnel": { "key": "api-resource-management", "name": "API resource management" } }, "catalog_binding": { "base_release_id": "sha256:8986cb1640fd748dd005e5c94c7b02d3f44a3d39ff6b72573091bd81af84c61e", "entity_revision_digest": "sha256:dca08f2f9410a83d7a9baaeb4e32f36a3828dadb9cf563a07ff5c25fb9f5d236" }, "declaration_revision_digest": "sha256:0a626e30371202e5a17b20a0c3b3a9cfdaedf33be48b1dbb081867c46256ffb1", "declaration": { "declaration_id": "declaration_aws_cloud_api_resource_management", "provenance": { "repository": "sourcey/agent-ready-services", "commit": "ca383f7867c18d91567fcb8326be55f7411d9554", "path": "entities/aw/aws.yaml", "git_blob_oid": "c472d2ca9134f37df33dbb04d4602760b982b7e0", "blob_digest": "sha256:dfb37ab23c815a3c79e77b8c93252a41399f79228c05c96e3165e4e3cd7c3330" }, "status": "community_declared" }, "surface_catalog": { "assessment_targets": [ { "target_id": "cost-visibility", "name": "AWS Cloud cost visibility", "interface_ids": [ "public-pricing" ] }, { "target_id": "service-use", "name": "Create and reconcile AWS resources through Cloud Control API", "interface_ids": [ "cloud-control" ] } ], "participants": [ { "participant_id": "aws", "roles": [ "access_operator", "identity_provider", "operations_provider", "payment_provider", "provisioning_provider", "subject" ], "identity": { "entity_id": "ent_01kyh8fpe10b164tj935t8k5zb" } } ], "resources": [ { "resource_id": "account-creation", "uri": "https://signin.aws.amazon.com/signup?request_type=register", "roles": [ "access" ], "operated_by_participant_id": "aws", "standard_bindings": [] }, { "resource_id": "account-creation-troubleshooting", "uri": "https://docs.aws.amazon.com/accounts/latest/reference/troubleshooting_create-account.html", "roles": [ "access", "documentation", "recovery" ], "operated_by_participant_id": "aws", "standard_bindings": [] }, { "resource_id": "account-plan-activation", "uri": "https://docs.aws.amazon.com/accounts/latest/reference/getting-started.html", "roles": [ "access", "checkout", "documentation" ], "operated_by_participant_id": "aws", "standard_bindings": [] }, { "resource_id": "billing-checkout", "uri": "https://docs.aws.amazon.com/awsaccountbilling/latest/aboutv2/manage-payments.html", "roles": [ "checkout", "documentation" ], "operated_by_participant_id": "aws", "standard_bindings": [] }, { "resource_id": "cloud-control-create-api", "uri": "https://docs.aws.amazon.com/cloudcontrolapi/latest/APIReference/API_CreateResource.html", "roles": [ "documentation", "provisioning", "recovery" ], "operated_by_participant_id": "aws", "standard_bindings": [] }, { "resource_id": "cloud-control-endpoints", "uri": "https://docs.aws.amazon.com/general/latest/gr/cloudcontrolapi.html", "roles": [ "documentation" ], "operated_by_participant_id": "aws", "standard_bindings": [] }, { "resource_id": "cloud-control-getting-started", "uri": "https://docs.aws.amazon.com/cloudcontrolapi/latest/userguide/getting-started.html", "roles": [ "documentation", "provisioning", "status" ], "operated_by_participant_id": "aws", "standard_bindings": [] }, { "resource_id": "cloud-control-overview", "uri": "https://docs.aws.amazon.com/cloudcontrolapi/latest/userguide/what-is-cloudcontrolapi.html", "roles": [ "discovery", "documentation", "operations" ], "operated_by_participant_id": "aws", "standard_bindings": [] }, { "resource_id": "cloud-control-resource-operations", "uri": "https://docs.aws.amazon.com/cloudcontrolapi/latest/userguide/resource-operations.html", "roles": [ "documentation", "operations", "status" ], "operated_by_participant_id": "aws", "standard_bindings": [] }, { "resource_id": "cloud-control-status-api", "uri": "https://docs.aws.amazon.com/cloudcontrolapi/latest/APIReference/API_GetResourceRequestStatus.html", "roles": [ "documentation", "provisioning", "recovery", "status" ], "operated_by_participant_id": "aws", "standard_bindings": [] }, { "resource_id": "price-list-api", "uri": "https://docs.aws.amazon.com/awsaccountbilling/latest/aboutv2/price-changes.html", "roles": [ "documentation", "operations", "pricing" ], "operated_by_participant_id": "aws", "standard_bindings": [] }, { "resource_id": "pricing", "uri": "https://aws.amazon.com/pricing/", "roles": [ "pricing" ], "operated_by_participant_id": "aws", "standard_bindings": [] }, { "resource_id": "readiness-914498557291a986d5a6b102afef10bb5c0c85d7d80c2791cb316fc2b3abf984", "uri": "https://docs.aws.amazon.com/organizations/latest/userguide/orgs_manage_accounts_create.html", "roles": [ "access", "documentation" ], "operated_by_participant_id": "aws", "standard_bindings": [] }, { "resource_id": "request-signing", "uri": "https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_sigv.html", "roles": [ "documentation" ], "operated_by_participant_id": "aws", "standard_bindings": [] }, { "resource_id": "service-terms", "uri": "https://aws.amazon.com/service-terms/", "roles": [ "terms" ], "operated_by_participant_id": "aws", "standard_bindings": [] }, { "resource_id": "sign-in-recovery", "uri": "https://docs.aws.amazon.com/signin/latest/userguide/troubleshooting-sign-in-issues.html", "roles": [ "documentation", "recovery" ], "operated_by_participant_id": "aws", "standard_bindings": [] }, { "resource_id": "temporary-credentials", "uri": "https://docs.aws.amazon.com/IAM/latest/UserGuide/id_credentials_temp_request.html", "roles": [ "authentication", "descriptor", "documentation" ], "operated_by_participant_id": "aws", "standard_bindings": [] } ], "endpoints": [ { "endpoint_id": "cloud-control-api", "uri": "https://cloudcontrolapi.us-east-1.amazonaws.com", "transport": "http", "roles": [ "service", "status" ], "operated_by_participant_id": "aws", "standard_bindings": [] }, { "endpoint_id": "pricing-api", "uri": "https://api.pricing.us-east-1.amazonaws.com", "transport": "http", "roles": [ "service" ], "operated_by_participant_id": "aws", "standard_bindings": [] }, { "endpoint_id": "registration", "uri": "https://signin.aws.amazon.com/signup?request_type=register", "transport": "http", "roles": [ "registration" ], "operated_by_participant_id": "aws", "standard_bindings": [] }, { "endpoint_id": "security-token-service", "uri": "https://sts.amazonaws.com", "transport": "http", "roles": [ "authorization", "token" ], "operated_by_participant_id": "aws", "standard_bindings": [] } ], "interfaces": [ { "interface_id": "cloud-control", "modality": "network_api", "functions": [ "service_operation" ], "endpoint_ids": [ "cloud-control-api" ], "resource_ids": [ "cloud-control-create-api", "cloud-control-endpoints", "cloud-control-getting-started", "cloud-control-overview", "cloud-control-resource-operations", "cloud-control-status-api" ], "operated_by_participant_id": "aws", "standard_bindings": [] }, { "interface_id": "public-pricing", "modality": "network_api", "functions": [ "commerce", "service_operation" ], "endpoint_ids": [ "pricing-api" ], "resource_ids": [ "price-list-api", "pricing" ], "operated_by_participant_id": "aws", "standard_bindings": [] }, { "interface_id": "workload-authentication", "modality": "network_api", "functions": [ "authentication", "service_operation" ], "endpoint_ids": [ "security-token-service" ], "resource_ids": [ "request-signing", "temporary-credentials" ], "operated_by_participant_id": "aws", "standard_bindings": [] } ], "relations": [ { "relation_id": "account-precedes-authentication", "kind": "precedes", "from": { "node_kind": "resource", "node_id": "account-creation" }, "to": { "node_kind": "interface", "node_id": "workload-authentication" } }, { "relation_id": "authentication-authenticates-cloud-control", "kind": "authenticates", "from": { "node_kind": "interface", "node_id": "workload-authentication" }, "to": { "node_kind": "interface", "node_id": "cloud-control" } }, { "relation_id": "cloud-control-docs-describe-interface", "kind": "describes", "from": { "node_kind": "resource", "node_id": "cloud-control-overview" }, "to": { "node_kind": "interface", "node_id": "cloud-control" } }, { "relation_id": "getting-started-precedes-resource-operations", "kind": "precedes", "from": { "node_kind": "resource", "node_id": "cloud-control-getting-started" }, "to": { "node_kind": "resource", "node_id": "cloud-control-resource-operations" } }, { "relation_id": "pricing-docs-describe-interface", "kind": "describes", "from": { "node_kind": "resource", "node_id": "price-list-api" }, "to": { "node_kind": "interface", "node_id": "public-pricing" } }, { "relation_id": "request-signing-describes-authentication", "kind": "describes", "from": { "node_kind": "resource", "node_id": "request-signing" }, "to": { "node_kind": "interface", "node_id": "workload-authentication" } } ], "surface_exclusions": [ { "exclusion_id": "separate-eligibility-resource", "role": "eligibility", "rationale": "Applicable access conditions are published within the service terms; no separate eligibility resource is declared." } ] }, "lifecycle": "active", "effective_from": "2026-09-06T08:47:58Z", "revision_digest": "sha256:e14777240e6f92c347315ce52789514667bd3ab32421946a97fc0c9644390aca", "policy_digest": "sha256:fc9e8f046d86fcf19ab2f1bc547219e503cdc11ffa135d020db7285965cd7d1d", "policy_version": "service-use-2026-09-07-blocking-barriers-r12", "policy_as_of": "2026-09-07T00:00:00Z", "assessment_basis": { "principal": "authorized_human_or_organization", "initial_state": { "product_specific_account": false, "product_credentials": false, "paid_subscription": false, "provisioned_resource": false, "external_identity": "only_when_declared_by_exact_funnel" }, "permitted_human_boundaries": [ "account_ownership_confirmation", "delegated_identity_consent", "regulated_approval", "final_payment_or_irreversible_commitment" ], "required_handoff_properties": [ "exact_disclosure", "resumable_handoff", "deterministic_continuation" ], "forbidden_substitutions": [ "captcha_solving", "human_password_or_session_sharing", "concealed_agent_identity", "invented_eligibility", "unbound_out_of_band_code", "vendor_policy_bypass", "unapproved_consequential_action" ], "success": { "target_coverage": "every_declared_target", "interface_coverage": "at_least_one_declared_alternative", "authority": "scoped", "failure_semantics": "documented", "recovery": "supported" }, "observed_assessment": { "allowed_sources": [ "public_documentation", "public_metadata", "public_endpoints", "non_mutating_interaction", "operator_attested_public_observation" ], "consequential_claims": "certification_required" } }, "overall_outcome": "constrained", "public_state": "limited", "state_label": "Limited", "grade": "B+", "grade_derivation": { "label": "Five-stage Agent Readiness report card", "explanation": "A through C grades count Limited stages; D and F reflect Blocked stages by lifecycle severity.", "coverage_rule": "Coverage is complete only when every graded signal has supported, fresh, non-conflicting evidence. Barrier and informational signals do not change coverage; only fresh, supported barrier values that passed their admission evidence rule participate in stage outcomes.", "outcome_rule": "Each stage takes its worst graded signal or verified barrier. A fresh, supported mandatory barrier that passed its admission evidence rule can block that stage; incomplete or stale barrier evidence remains context only. The overall grade is derived from the five stage states." }, "publication": { "visibility": "discoverable", "reasons": [] }, "primary_finding": { "stage": "provision", "stage_label": "Provision", "public_state": "limited", "finding": { "signal_code": "provisioning_completion", "condition": "Can an agent determine successful provisioning completion and reconcile asynchronous failure?", "finding": "Completion is observable, but an asynchronous path omits a material terminal, bound, or reconciliation property.", "context": "AWS Cloud Control API provides progress tracking via get-resource-request-status, returning ProgressEvent objects with OperationStatus (e.g., IN_PROGRESS, SUCCESS) and RequestToken. However, explicit failure reconciliation contracts or explicit time bounds are not fully established in the retained text." } }, "limitations": [ { "stage": "provision", "stage_label": "Provision", "finding": { "signal_code": "provisioning_completion", "condition": "Can an agent determine successful provisioning completion and reconcile asynchronous failure?", "finding": "Completion is observable, but an asynchronous path omits a material terminal, bound, or reconciliation property.", "context": "AWS Cloud Control API provides progress tracking via get-resource-request-status, returning ProgressEvent objects with OperationStatus (e.g., IN_PROGRESS, SUCCESS) and RequestToken. However, explicit failure reconciliation contracts or explicit time bounds are not fully established in the retained text." }, "remediation": { "signal_code": "provisioning_completion", "code": "improve.provision.provisioning_completion", "instruction": "Expose bounded machine-readable terminal status and reconciliation semantics." } }, { "stage": "operate", "stage_label": "Operate", "finding": { "signal_code": "failure_contract", "condition": "Can an agent handle applicable failure modes safely?", "finding": "Safe failure handling is documented only partially.", "context": "AWS Cloud Control API documents idempotent ClientToken requests, handler error codes and request status tracking through ProgressEvent; the selected quotes do not establish cancellation semantics for a resource request." }, "remediation": { "signal_code": "failure_contract", "code": "improve.operate.failure_contract", "instruction": "Document applicable structured errors, retry, cancellation, and reconciliation semantics." } }, { "stage": "operate", "stage_label": "Operate", "finding": { "signal_code": "credential_lifecycle", "condition": "Can an agent manage credential expiry, rotation, revocation, compromise, and recovery?", "finding": "Only part of the credential lifecycle is agent-operable.", "context": "AWS STS documentation explicitly details requesting temporary security credentials with defined expiry durations (DurationSeconds parameter between 15 minutes and 36 hours) and session policies. However, full credential lifecycle management including rotation, revocation, compromise response, and recovery procedures across all credential types is not fully established." }, "remediation": { "signal_code": "credential_lifecycle", "code": "improve.operate.credential_lifecycle", "instruction": "Provide scoped expiry, rotation, revocation, compromise, and recovery operations." } } ], "stages": [ { "stage": "evaluate", "stage_label": "Evaluate", "outcome": "pass", "public_state": "ready", "state_label": "Ready", "primary_finding": { "signal_code": "service_discovery", "condition": "Can an agent find the exact service and its stable entrypoints?", "finding": "The exact service and stable evaluation or access entrypoints are publicly discoverable.", "context": "AWS Cloud Control API is publicly discoverable as a standardized API service for performing CRUD-L operations on supported resources in an AWS account, accessible via the AWS Command Line Interface (AWS CLI)." }, "secondary_context": [ { "signal_code": "structured_evaluation_discovery", "condition": "Are verified structured discovery artifacts available?", "finding": "Current admissible evidence does not resolve this finding.", "context": "The retained excerpts for AWS Cloud are human documentation pages; they contain no first-party statement that structured discovery artifacts are absent, and no artifact was captured or verified either way." }, { "signal_code": "verified_web_agent_access", "condition": "Does the vendor deliberately describe access for web agents?", "finding": "Current admissible evidence does not resolve this finding.", "context": "The retained excerpts for AWS Cloud do not state a web-agent or crawler access policy for the assessed resources in either direction." }, { "signal_code": "eligibility_decidability", "condition": "Can an agent decide every material eligibility condition before commitment?", "finding": "Only some material eligibility conditions are decidable before commitment.", "context": "AWS Service Terms state specific eligibility requirements for accounts, such as AWS UK Switching Addendum for Eligible Accounts, and explicit eligibility requirements for AWS GovCloud (US) Regions including accurate registration information, but general eligibility requirements across all services are not fully detailed in the provided text." }, { "signal_code": "terms_access", "condition": "Can an agent retrieve and understand the applicable commitment terms?", "finding": "Applicable terms are stable, readable, retrievable, and materially complete.", "context": "Applicable AWS Service Terms are retrievable, stable, and readable online via Amazon Web Services, Inc." }, { "signal_code": "pricing_decidability", "condition": "Can an agent estimate cost or confirm no-charge status before commitment?", "finding": "Price or no-charge status, variables, currency, and material conditions are explicit.", "context": "AWS provides explicit pricing information including a pay-as-you-go model with no long-term contracts, tiered volume-based discounts where usage increases reduce cost per GB, free data transfer IN, and programmatic access to product pricing and Free Tier catalog via the AWS Price List API." } ], "signals": [ { "signal_code": "eligibility_decidability", "evaluation_role": "informational", "required": false, "value": "partial", "value_label": "Limited", "outcome": "constrained", "public_state": "limited", "condition": "Can an agent decide every material eligibility condition before commitment?", "finding": "Only some material eligibility conditions are decidable before commitment.", "evidence_status": "supported", "freshness": "fresh", "observed_at": "2026-09-06T08:50:41.371Z", "tested_surfaces": [ { "node_kind": "resource", "node_id": "service-terms" } ], "assessment_method": { "name": "public-semantic-assessment", "version": "2026-09-06", "method_digest": "sha256:02ec902925d3816c86a32a3d15dc2e7af6ce9931c24b9cf264063e596952d1c4" }, "determination_bases": [ { "kind": "explicit_first_party_declaration", "captures": [ { "retained_capture_digest": "sha256:7fcba7f0796d426f27adc6e9aad4b7254c13d472421428ff92a166ef601f4cf4", "capture_rung": "http" } ], "artifact_digests": [ "sha256:061ef847a261b428acacb0483e282beba5fd13b9dc1eaef4159e1203b28c64a7", "sha256:304cb42761403527932234e58dcbd4c2bac9a548642433bd63738cf7c9d1c3b1", "sha256:3e91668d68f59f915cb3d3d7c4dc30f5a9d329b67d1886bdcbf2dc7b3301c794", "sha256:996da167a2fe7fa2e696be636e3bc948eac90ba0354019dccbfc536e9f869c33" ], "source_surface": { "node_kind": "resource", "node_id": "service-terms" }, "locators": [ { "artifact_digest": "sha256:061ef847a261b428acacb0483e282beba5fd13b9dc1eaef4159e1203b28c64a7", "start_byte": 101469, "end_byte": 102268, "value_digest": "sha256:814ab6bb3ef4b78fbd57e7013ab2c5aa16afbb9962f57a85b38e40cfec131a80" }, { "artifact_digest": "sha256:061ef847a261b428acacb0483e282beba5fd13b9dc1eaef4159e1203b28c64a7", "start_byte": 40491, "end_byte": 41285, "value_digest": "sha256:4ada0d8a6d2eb4d8a496a2130b18b2ba402a7a60d4552d6b116f50dc0f01857a" } ] } ], "note": "AWS Service Terms state specific eligibility requirements for accounts, such as AWS UK Switching Addendum for Eligible Accounts, and explicit eligibility requirements for AWS GovCloud (US) Regions including accurate registration information, but general eligibility requirements across all services are not fully detailed in the provided text." }, { "signal_code": "pricing_decidability", "evaluation_role": "graded", "required": true, "value": "yes", "value_label": "Ready", "outcome": "pass", "public_state": "ready", "condition": "Can an agent estimate cost or confirm no-charge status before commitment?", "finding": "Price or no-charge status, variables, currency, and material conditions are explicit.", "evidence_status": "supported", "freshness": "fresh", "observed_at": "2026-09-06T08:50:58.573Z", "tested_surfaces": [ { "node_kind": "resource", "node_id": "price-list-api" }, { "node_kind": "resource", "node_id": "pricing" } ], "assessment_method": { "name": "public-semantic-assessment", "version": "2026-09-06", "method_digest": "sha256:02ec902925d3816c86a32a3d15dc2e7af6ce9931c24b9cf264063e596952d1c4" }, "determination_bases": [ { "kind": "explicit_first_party_declaration", "captures": [ { "retained_capture_digest": "sha256:d3ceff76456cfea97237753cd7e9beacbca77770cb37de2f106d04687e3f048e", "capture_rung": "http" } ], "artifact_digests": [ "sha256:2b9ff113600c9b1b6f00448388417e587380966594ec9a7cdaef6697b1500c3d", "sha256:4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945", "sha256:5ce3083f8d4eaae0bbae481d740e59d01deac9d01c01f1c47c8094a15f85f106", "sha256:fbe7b0554ee04f19d476a8b6180f8c162bb947d7ea6f06f918b9282d48bbf1f9" ], "source_surface": { "node_kind": "resource", "node_id": "price-list-api" }, "locators": [ { "artifact_digest": "sha256:2b9ff113600c9b1b6f00448388417e587380966594ec9a7cdaef6697b1500c3d", "start_byte": 3475, "end_byte": 4272, "value_digest": "sha256:5c5b7972913be3be07bb7a22ab4e12c0ccc43fdcba093c73c26ff616e83bdf9f" } ] }, { "kind": "explicit_first_party_declaration", "captures": [ { "retained_capture_digest": "sha256:e7c1cfa24c1d56337d3523992c4a2f1b62a20ec1f210932790e8ab4b013829c0", "capture_rung": "http" } ], "artifact_digests": [ "sha256:1ba63750f6bfc8add1ccfcd4d3bbf334d58f38a3e81636b09dba7be8eed1e717", "sha256:5378d8a5d9969c32f3a31b5a1be465f99fad50114f9e90dc44bdcd7ee7a8068d", "sha256:651901a5b1bfbf332b17b7207ebda2f4b82e3e98051c28f66ddfcf5e0492beb5", "sha256:d174d08757031537f850b60c444500450db8daed05bcb56f031de32b5ae0b985" ], "source_surface": { "node_kind": "resource", "node_id": "pricing" }, "locators": [ { "artifact_digest": "sha256:5378d8a5d9969c32f3a31b5a1be465f99fad50114f9e90dc44bdcd7ee7a8068d", "start_byte": 20756, "end_byte": 21554, "value_digest": "sha256:b0f877a7745ec8c62108906a193180bb0f69272add0aaea0267fbc651e21ccd9" } ] } ], "note": "AWS provides explicit pricing information including a pay-as-you-go model with no long-term contracts, tiered volume-based discounts where usage increases reduce cost per GB, free data transfer IN, and programmatic access to product pricing and Free Tier catalog via the AWS Price List API." }, { "signal_code": "service_discovery", "evaluation_role": "graded", "required": true, "value": "yes", "value_label": "Ready", "outcome": "pass", "public_state": "ready", "condition": "Can an agent find the exact service and its stable entrypoints?", "finding": "The exact service and stable evaluation or access entrypoints are publicly discoverable.", "evidence_status": "supported", "freshness": "fresh", "observed_at": "2026-09-06T08:50:01.663Z", "tested_surfaces": [ { "node_kind": "resource", "node_id": "cloud-control-overview" } ], "assessment_method": { "name": "public-semantic-assessment", "version": "2026-09-06", "method_digest": "sha256:02ec902925d3816c86a32a3d15dc2e7af6ce9931c24b9cf264063e596952d1c4" }, "determination_bases": [ { "kind": "explicit_first_party_declaration", "captures": [ { "retained_capture_digest": "sha256:78f263b7c317f1bba21066a88d913f628afa1ac2d54d71ddb248a84d35889e1c", "capture_rung": "http" } ], "artifact_digests": [ "sha256:4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945", "sha256:76367b335dfb7a7a2538a6ce265a0dffbdd669afb7d07863ebc4e6c9f2ca63d3", "sha256:c54cf3b4a65fe2388f5a749d69692c763a55cac89b02db18b9a6d7a00332568d", "sha256:fb707b069eb5a8aaa0970fbfc2458949281107964c378ae7520d503fcddbeb21" ], "source_surface": { "node_kind": "resource", "node_id": "cloud-control-overview" }, "locators": [ { "artifact_digest": "sha256:c54cf3b4a65fe2388f5a749d69692c763a55cac89b02db18b9a6d7a00332568d", "start_byte": 4277, "end_byte": 5064, "value_digest": "sha256:532a9520252bb0407b949f40b83a124eb58d1f8cb6d3e2aa52ca3e244986fa47" }, { "artifact_digest": "sha256:c54cf3b4a65fe2388f5a749d69692c763a55cac89b02db18b9a6d7a00332568d", "start_byte": 6655, "end_byte": 7417, "value_digest": "sha256:6a4885bb3e222f35df08a672dd77712d0f6e2a12ab7af12964d0ffa29c107949" } ] } ], "note": "AWS Cloud Control API is publicly discoverable as a standardized API service for performing CRUD-L operations on supported resources in an AWS account, accessible via the AWS Command Line Interface (AWS CLI)." }, { "signal_code": "structured_evaluation_discovery", "evaluation_role": "informational", "required": false, "value": "unknown", "value_label": "Unknown", "outcome": "unknown", "public_state": "unknown", "condition": "Are verified structured discovery artifacts available?", "finding": "Current admissible evidence does not resolve this finding.", "evidence_status": "supported", "freshness": "fresh", "observed_at": "2026-09-06T08:50:39.491Z", "tested_surfaces": [ { "node_kind": "resource", "node_id": "cloud-control-overview" }, { "node_kind": "resource", "node_id": "temporary-credentials" } ], "assessment_method": { "name": "public-semantic-assessment", "version": "2026-09-06", "method_digest": "sha256:02ec902925d3816c86a32a3d15dc2e7af6ce9931c24b9cf264063e596952d1c4" }, "determination_bases": [], "note": "The retained excerpts for AWS Cloud are human documentation pages; they contain no first-party statement that structured discovery artifacts are absent, and no artifact was captured or verified either way." }, { "signal_code": "terms_access", "evaluation_role": "informational", "required": false, "value": "yes", "value_label": "Ready", "outcome": "pass", "public_state": "ready", "condition": "Can an agent retrieve and understand the applicable commitment terms?", "finding": "Applicable terms are stable, readable, retrievable, and materially complete.", "evidence_status": "supported", "freshness": "fresh", "observed_at": "2026-09-06T08:50:41.371Z", "tested_surfaces": [ { "node_kind": "resource", "node_id": "service-terms" } ], "assessment_method": { "name": "public-semantic-assessment", "version": "2026-09-06", "method_digest": "sha256:02ec902925d3816c86a32a3d15dc2e7af6ce9931c24b9cf264063e596952d1c4" }, "determination_bases": [ { "kind": "explicit_first_party_declaration", "captures": [ { "retained_capture_digest": "sha256:7fcba7f0796d426f27adc6e9aad4b7254c13d472421428ff92a166ef601f4cf4", "capture_rung": "http" } ], "artifact_digests": [ "sha256:061ef847a261b428acacb0483e282beba5fd13b9dc1eaef4159e1203b28c64a7", "sha256:3e91668d68f59f915cb3d3d7c4dc30f5a9d329b67d1886bdcbf2dc7b3301c794", "sha256:531b72df701d9acf6696451bde2e100a8d266c294cf711f2a3fb60967dac937b", "sha256:996da167a2fe7fa2e696be636e3bc948eac90ba0354019dccbfc536e9f869c33" ], "source_surface": { "node_kind": "resource", "node_id": "service-terms" }, "locators": [ { "artifact_digest": "sha256:061ef847a261b428acacb0483e282beba5fd13b9dc1eaef4159e1203b28c64a7", "start_byte": 19656, "end_byte": 20450, "value_digest": "sha256:edc0aefe421a330e930fd526b9685b1235fb70cae20873e2d43fade38a738830" }, { "artifact_digest": "sha256:061ef847a261b428acacb0483e282beba5fd13b9dc1eaef4159e1203b28c64a7", "start_byte": 0, "end_byte": 779, "value_digest": "sha256:96f0690b2463d400a8d6ab2de1979a8ac1e39044136050aed085c73e73267ebb" } ] } ], "note": "Applicable AWS Service Terms are retrievable, stable, and readable online via Amazon Web Services, Inc." }, { "signal_code": "verified_web_agent_access", "evaluation_role": "informational", "required": false, "value": "unknown", "value_label": "Unknown", "outcome": "unknown", "public_state": "unknown", "condition": "Does the vendor deliberately describe access for web agents?", "finding": "Current admissible evidence does not resolve this finding.", "evidence_status": "supported", "freshness": "fresh", "observed_at": "2026-09-06T08:50:39.491Z", "tested_surfaces": [ { "node_kind": "resource", "node_id": "cloud-control-overview" }, { "node_kind": "resource", "node_id": "temporary-credentials" } ], "assessment_method": { "name": "public-semantic-assessment", "version": "2026-09-06", "method_digest": "sha256:02ec902925d3816c86a32a3d15dc2e7af6ce9931c24b9cf264063e596952d1c4" }, "determination_bases": [], "note": "The retained excerpts for AWS Cloud do not state a web-agent or crawler access policy for the assessed resources in either direction." } ], "blockers": [], "remediations": [] }, { "stage": "sign_up", "stage_label": "Sign up", "outcome": "pass", "public_state": "ready", "state_label": "Ready", "primary_finding": { "signal_code": "access_entrypoint_stability", "condition": "Is there a stable route to begin obtaining service access?", "finding": "A stable canonical route begins the required access bootstrap.", "context": "AWS provides a stable canonical signup entrypoint allowing users to enter a root user email address and account name to begin account registration." }, "secondary_context": [ { "signal_code": "access_control_operability", "condition": "Can an agent operate the access controls and safe handoffs deterministically?", "finding": "Current admissible evidence does not resolve this finding.", "context": "The signup endpoint displays email and account name fields with a verify email button, but retained evidence does not establish complete access-control operability, validation, and safe handoffs." }, { "signal_code": "captcha_compatible_access", "condition": "Can an agent obtain access without an unsupported CAPTCHA boundary?", "finding": "Current admissible evidence does not resolve this finding.", "context": "Retained evidence across all evaluated targets does not explicitly state whether CAPTCHA challenges are required or provide an agent-compatible alternative." }, { "signal_code": "phone_verification_compatible", "condition": "Can required phone verification be completed through a supported boundary?", "finding": "Current admissible evidence does not resolve this finding.", "context": "Documentation indicates that identity confirmation via phone SMS verification is required, but it does not establish a safe explicit resumable handoff for an agent." }, { "signal_code": "delegated_identity_access", "condition": "Can an agent obtain scoped, revocable authority for this service?", "finding": "Scoped revocable credentials or delegated authorization have explicit consent and resumption boundaries.", "context": "AWS STS supports requesting temporary security credentials using AssumeRole or AssumeRoleWithWebIdentity (OIDC), providing scoped, revocable credentials with explicit consent boundaries." } ], "signals": [ { "signal_code": "access_control_operability", "evaluation_role": "barrier", "required": false, "value": "unknown", "value_label": "Unknown", "outcome": "unknown", "public_state": "unknown", "condition": "Can an agent operate the access controls and safe handoffs deterministically?", "finding": "Current admissible evidence does not resolve this finding.", "evidence_status": "supported", "freshness": "fresh", "observed_at": "2026-09-06T08:50:45.448Z", "tested_surfaces": [ { "node_kind": "endpoint", "node_id": "registration" } ], "assessment_method": { "name": "public-semantic-assessment", "version": "2026-09-06", "method_digest": "sha256:02ec902925d3816c86a32a3d15dc2e7af6ce9931c24b9cf264063e596952d1c4" }, "determination_bases": [], "note": "The signup endpoint displays email and account name fields with a verify email button, but retained evidence does not establish complete access-control operability, validation, and safe handoffs." }, { "signal_code": "access_entrypoint_stability", "evaluation_role": "graded", "required": true, "value": "yes", "value_label": "Ready", "outcome": "pass", "public_state": "ready", "condition": "Is there a stable route to begin obtaining service access?", "finding": "A stable canonical route begins the required access bootstrap.", "evidence_status": "supported", "freshness": "fresh", "observed_at": "2026-09-06T08:50:45.448Z", "tested_surfaces": [ { "node_kind": "resource", "node_id": "account-creation" }, { "node_kind": "resource", "node_id": "account-creation-troubleshooting" }, { "node_kind": "resource", "node_id": "account-plan-activation" }, { "node_kind": "resource", "node_id": "readiness-914498557291a986d5a6b102afef10bb5c0c85d7d80c2791cb316fc2b3abf984" } ], "assessment_method": { "name": "public-semantic-assessment", "version": "2026-09-06", "method_digest": "sha256:02ec902925d3816c86a32a3d15dc2e7af6ce9931c24b9cf264063e596952d1c4" }, "determination_bases": [ { "kind": "direct_observation", "captures": [ { "retained_capture_digest": "sha256:29fee81e9e692567b5f21712718a129760a138c86176923ce22b7f4fd78f19c0", "capture_rung": "headless" } ], "artifact_digests": [ "sha256:1b4cced45bb7d76defbbf1df977c5ace5384c76d62c323b7cc0b4d58dd96145e", "sha256:4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945", "sha256:a819b0d892c5d3879ac73304c47594cc899d61d1960bba1c75cb8ef0a67a3fb8", "sha256:b0bd13ab51ffb735d7a49385e81c65bf803395ce4a69479a034d4307cd78aad0", "sha256:d84535ecca1eb9bf11913debd81631f4a5860737f46641797a4682acbe8c7a64", "sha256:fbab05664c2652ad6769d3a836c587cc19be48750d0fc9c66e6fa1f0e27e7386" ], "locators": [ { "artifact_digest": "sha256:fbab05664c2652ad6769d3a836c587cc19be48750d0fc9c66e6fa1f0e27e7386", "start_byte": 1283, "end_byte": 2103, "value_digest": "sha256:3217e6df746fb4151b3cfaa5cdf3d0b051af41586526e39e265c144c8d87260f" } ] } ], "note": "AWS provides a stable canonical signup entrypoint allowing users to enter a root user email address and account name to begin account registration." }, { "signal_code": "captcha_compatible_access", "evaluation_role": "barrier", "required": false, "value": "unknown", "value_label": "Unknown", "outcome": "unknown", "public_state": "unknown", "condition": "Can an agent obtain access without an unsupported CAPTCHA boundary?", "finding": "Current admissible evidence does not resolve this finding.", "evidence_status": "supported", "freshness": "fresh", "observed_at": "2026-09-06T08:52:02.607Z", "tested_surfaces": [ { "node_kind": "endpoint", "node_id": "registration" }, { "node_kind": "resource", "node_id": "account-creation" }, { "node_kind": "resource", "node_id": "account-creation-troubleshooting" }, { "node_kind": "resource", "node_id": "account-plan-activation" }, { "node_kind": "resource", "node_id": "readiness-914498557291a986d5a6b102afef10bb5c0c85d7d80c2791cb316fc2b3abf984" } ], "assessment_method": { "name": "public-semantic-assessment", "version": "2026-09-06", "method_digest": "sha256:02ec902925d3816c86a32a3d15dc2e7af6ce9931c24b9cf264063e596952d1c4" }, "determination_bases": [], "note": "Retained evidence across all evaluated targets does not explicitly state whether CAPTCHA challenges are required or provide an agent-compatible alternative." }, { "signal_code": "delegated_identity_access", "evaluation_role": "graded", "required": true, "value": "yes", "value_label": "Ready", "outcome": "pass", "public_state": "ready", "condition": "Can an agent obtain scoped, revocable authority for this service?", "finding": "Scoped revocable credentials or delegated authorization have explicit consent and resumption boundaries.", "evidence_status": "supported", "freshness": "fresh", "observed_at": "2026-09-06T08:50:39.491Z", "tested_surfaces": [ { "node_kind": "resource", "node_id": "temporary-credentials" } ], "assessment_method": { "name": "public-semantic-assessment", "version": "2026-09-06", "method_digest": "sha256:02ec902925d3816c86a32a3d15dc2e7af6ce9931c24b9cf264063e596952d1c4" }, "determination_bases": [ { "kind": "explicit_first_party_declaration", "captures": [ { "retained_capture_digest": "sha256:dad212c6ed0dab19427cb746ac75e5aacc39e735b41619603beb843d174039c0", "capture_rung": "http" } ], "artifact_digests": [ "sha256:4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945", "sha256:77a5ee35758acc94c41809debe7bb4663379445b840c6212cfbc7abb2351f7be", "sha256:87b23d0bcdf7bf55aa985f86f96ecb5bb3f21837b1861c0f0708661103ded611", "sha256:e045f492f8225ce8b282d342a90f839e5b7d27d7a0351778b3a21d7c46bc455d" ], "source_surface": { "node_kind": "resource", "node_id": "temporary-credentials" }, "locators": [ { "artifact_digest": "sha256:87b23d0bcdf7bf55aa985f86f96ecb5bb3f21837b1861c0f0708661103ded611", "start_byte": 12229, "end_byte": 13029, "value_digest": "sha256:b5b1beb9d6e8bf07692cb68e1be16b101aedc5cdc237416a9bb44f3f27dfe8ad" }, { "artifact_digest": "sha256:87b23d0bcdf7bf55aa985f86f96ecb5bb3f21837b1861c0f0708661103ded611", "start_byte": 5088, "end_byte": 5887, "value_digest": "sha256:02ce800de780c67baf91380b42e314ea2a06c99fd3f0aa3c05b56d7d10286b4e" } ] } ], "note": "AWS STS supports requesting temporary security credentials using AssumeRole or AssumeRoleWithWebIdentity (OIDC), providing scoped, revocable credentials with explicit consent boundaries." }, { "signal_code": "phone_verification_compatible", "evaluation_role": "barrier", "required": false, "value": "unknown", "value_label": "Unknown", "outcome": "unknown", "public_state": "unknown", "condition": "Can required phone verification be completed through a supported boundary?", "finding": "Current admissible evidence does not resolve this finding.", "evidence_status": "supported", "freshness": "fresh", "observed_at": "2026-09-06T08:51:51.917Z", "tested_surfaces": [ { "node_kind": "resource", "node_id": "account-creation" }, { "node_kind": "resource", "node_id": "account-creation-troubleshooting" }, { "node_kind": "resource", "node_id": "account-plan-activation" }, { "node_kind": "resource", "node_id": "readiness-914498557291a986d5a6b102afef10bb5c0c85d7d80c2791cb316fc2b3abf984" } ], "assessment_method": { "name": "public-semantic-assessment", "version": "2026-09-06", "method_digest": "sha256:02ec902925d3816c86a32a3d15dc2e7af6ce9931c24b9cf264063e596952d1c4" }, "determination_bases": [], "note": "Documentation indicates that identity confirmation via phone SMS verification is required, but it does not establish a safe explicit resumable handoff for an agent." } ], "blockers": [], "remediations": [] }, { "stage": "pay", "stage_label": "Pay", "outcome": "pass", "public_state": "ready", "state_label": "Ready", "primary_finding": { "signal_code": "commitment_disclosure", "condition": "Is the exact commercial commitment disclosed before authorization?", "finding": "Charge or no-charge status, currency, recurrence, and material conditions are disclosed.", "context": "The evidence discloses AWS's pay-as-you-go pricing approach without requiring long-term contracts, alongside the availability of a catalog of products and prices via the AWS Price List API." }, "secondary_context": [ { "signal_code": "checkout_operability", "condition": "Can an agent construct checkout, hand off approval safely, and resume?", "finding": "Current admissible evidence does not resolve this finding.", "context": "Current admissible evidence does not establish an API or web flow for deterministic checkout construction, approval handoff, and resumption." }, { "signal_code": "payment_authorization", "condition": "Can payment be authorized within scoped agent or explicit human authority?", "finding": "Current admissible evidence does not resolve this finding.", "context": "Current admissible evidence indicates a payment method is required to sign up or open an AWS account, but it does not detail a rail supporting scoped delegation or explicit human-confirmed authorization with receipts." }, { "signal_code": "self_service_purchase", "condition": "Is a direct self-service path to paid access documented?", "finding": "A documented direct purchase path reaches paid access without a vendor decision point.", "context": "A direct self-service sign-up procedure is documented where users enter contact/billing information, choose an account/support plan, and complete activation without requiring a vendor decision point." } ], "signals": [ { "signal_code": "checkout_operability", "evaluation_role": "barrier", "required": false, "value": "unknown", "value_label": "Unknown", "outcome": "unknown", "public_state": "unknown", "condition": "Can an agent construct checkout, hand off approval safely, and resume?", "finding": "Current admissible evidence does not resolve this finding.", "evidence_status": "supported", "freshness": "fresh", "observed_at": "2026-09-06T08:51:19.009Z", "tested_surfaces": [ { "node_kind": "resource", "node_id": "account-plan-activation" }, { "node_kind": "resource", "node_id": "billing-checkout" } ], "assessment_method": { "name": "public-semantic-assessment", "version": "2026-09-06", "method_digest": "sha256:02ec902925d3816c86a32a3d15dc2e7af6ce9931c24b9cf264063e596952d1c4" }, "determination_bases": [], "note": "Current admissible evidence does not establish an API or web flow for deterministic checkout construction, approval handoff, and resumption." }, { "signal_code": "commitment_disclosure", "evaluation_role": "graded", "required": true, "value": "yes", "value_label": "Ready", "outcome": "pass", "public_state": "ready", "condition": "Is the exact commercial commitment disclosed before authorization?", "finding": "Charge or no-charge status, currency, recurrence, and material conditions are disclosed.", "evidence_status": "supported", "freshness": "fresh", "observed_at": "2026-09-06T08:50:58.573Z", "tested_surfaces": [ { "node_kind": "resource", "node_id": "price-list-api" }, { "node_kind": "resource", "node_id": "pricing" } ], "assessment_method": { "name": "public-semantic-assessment", "version": "2026-09-06", "method_digest": "sha256:02ec902925d3816c86a32a3d15dc2e7af6ce9931c24b9cf264063e596952d1c4" }, "determination_bases": [ { "kind": "explicit_first_party_declaration", "captures": [ { "retained_capture_digest": "sha256:d3ceff76456cfea97237753cd7e9beacbca77770cb37de2f106d04687e3f048e", "capture_rung": "http" } ], "artifact_digests": [ "sha256:2b9ff113600c9b1b6f00448388417e587380966594ec9a7cdaef6697b1500c3d", "sha256:4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945", "sha256:5ce3083f8d4eaae0bbae481d740e59d01deac9d01c01f1c47c8094a15f85f106", "sha256:fbe7b0554ee04f19d476a8b6180f8c162bb947d7ea6f06f918b9282d48bbf1f9" ], "source_surface": { "node_kind": "resource", "node_id": "price-list-api" }, "locators": [ { "artifact_digest": "sha256:2b9ff113600c9b1b6f00448388417e587380966594ec9a7cdaef6697b1500c3d", "start_byte": 3475, "end_byte": 4272, "value_digest": "sha256:5c5b7972913be3be07bb7a22ab4e12c0ccc43fdcba093c73c26ff616e83bdf9f" } ] }, { "kind": "explicit_first_party_declaration", "captures": [ { "retained_capture_digest": "sha256:e7c1cfa24c1d56337d3523992c4a2f1b62a20ec1f210932790e8ab4b013829c0", "capture_rung": "http" } ], "artifact_digests": [ "sha256:5378d8a5d9969c32f3a31b5a1be465f99fad50114f9e90dc44bdcd7ee7a8068d", "sha256:651901a5b1bfbf332b17b7207ebda2f4b82e3e98051c28f66ddfcf5e0492beb5", "sha256:cf6edfefe398ffc44831766fce22e71ebc7c546812018bc93b3651ba7ba9d2f1", "sha256:d174d08757031537f850b60c444500450db8daed05bcb56f031de32b5ae0b985" ], "source_surface": { "node_kind": "resource", "node_id": "pricing" }, "locators": [ { "artifact_digest": "sha256:5378d8a5d9969c32f3a31b5a1be465f99fad50114f9e90dc44bdcd7ee7a8068d", "start_byte": 0, "end_byte": 788, "value_digest": "sha256:39e4ca6776e420e4cbe72fea32953c94bbf88177e6b8b250e90ddb40e9b036e8" } ] } ], "note": "The evidence discloses AWS's pay-as-you-go pricing approach without requiring long-term contracts, alongside the availability of a catalog of products and prices via the AWS Price List API." }, { "signal_code": "payment_authorization", "evaluation_role": "barrier", "required": false, "value": "unknown", "value_label": "Unknown", "outcome": "unknown", "public_state": "unknown", "condition": "Can payment be authorized within scoped agent or explicit human authority?", "finding": "Current admissible evidence does not resolve this finding.", "evidence_status": "supported", "freshness": "fresh", "observed_at": "2026-09-06T08:51:19.009Z", "tested_surfaces": [ { "node_kind": "resource", "node_id": "account-plan-activation" }, { "node_kind": "resource", "node_id": "billing-checkout" } ], "assessment_method": { "name": "public-semantic-assessment", "version": "2026-09-06", "method_digest": "sha256:02ec902925d3816c86a32a3d15dc2e7af6ce9931c24b9cf264063e596952d1c4" }, "determination_bases": [], "note": "Current admissible evidence indicates a payment method is required to sign up or open an AWS account, but it does not detail a rail supporting scoped delegation or explicit human-confirmed authorization with receipts." }, { "signal_code": "self_service_purchase", "evaluation_role": "graded", "required": true, "value": "yes", "value_label": "Ready", "outcome": "pass", "public_state": "ready", "condition": "Is a direct self-service path to paid access documented?", "finding": "A documented direct purchase path reaches paid access without a vendor decision point.", "evidence_status": "supported", "freshness": "fresh", "observed_at": "2026-09-06T08:51:19.009Z", "tested_surfaces": [ { "node_kind": "resource", "node_id": "account-plan-activation" }, { "node_kind": "resource", "node_id": "billing-checkout" } ], "assessment_method": { "name": "public-semantic-assessment", "version": "2026-09-06", "method_digest": "sha256:02ec902925d3816c86a32a3d15dc2e7af6ce9931c24b9cf264063e596952d1c4" }, "determination_bases": [ { "kind": "explicit_first_party_declaration", "captures": [ { "retained_capture_digest": "sha256:964615fb6b8f989dd7464c65659dd5e392911d763909033f7c4e016cedc00fb9", "capture_rung": "http" } ], "artifact_digests": [ "sha256:4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945", "sha256:950c996135ade0551e7cb0397c09aaaa3a07eba7eeeff08bdb236d942b8f5cf7", "sha256:9ac51e9b38c11626e509214a07a922c7aaa8783487d3c4a0d7556aef8fa63fc2", "sha256:d2e2a11bafda3e1bb0924fc29c3a86fe0240ec089d7ccdd7c217618c213149e9" ], "source_surface": { "node_kind": "resource", "node_id": "account-plan-activation" }, "locators": [ { "artifact_digest": "sha256:950c996135ade0551e7cb0397c09aaaa3a07eba7eeeff08bdb236d942b8f5cf7", "start_byte": 7902, "end_byte": 8702, "value_digest": "sha256:edf66ba7b6ec8e7c5096dc120732564f85478246f0f544c05448a87549a67c03" }, { "artifact_digest": "sha256:950c996135ade0551e7cb0397c09aaaa3a07eba7eeeff08bdb236d942b8f5cf7", "start_byte": 8703, "end_byte": 9503, "value_digest": "sha256:0ae98688b7bf727974121338c6abdf01d66d604b2787817bc7f221c7a67b2622" } ] } ], "note": "A direct self-service sign-up procedure is documented where users enter contact/billing information, choose an account/support plan, and complete activation without requiring a vendor decision point." } ], "blockers": [], "remediations": [] }, { "stage": "provision", "stage_label": "Provision", "outcome": "constrained", "public_state": "limited", "state_label": "Limited", "primary_finding": { "signal_code": "provisioning_completion", "condition": "Can an agent determine successful provisioning completion and reconcile asynchronous failure?", "finding": "Completion is observable, but an asynchronous path omits a material terminal, bound, or reconciliation property.", "context": "AWS Cloud Control API provides progress tracking via get-resource-request-status, returning ProgressEvent objects with OperationStatus (e.g., IN_PROGRESS, SUCCESS) and RequestToken. However, explicit failure reconciliation contracts or explicit time bounds are not fully established in the retained text." }, "secondary_context": [ { "signal_code": "provisioning_operability", "condition": "Can provisioning be initiated within supported agent authority?", "finding": "Provisioning is machine-triggerable or follows deterministically from an allowed handoff.", "context": "Provisioning can be initiated within standard programmatic authority using the CreateResource API call or create-resource AWS CLI command." }, { "signal_code": "access_material_delivery", "condition": "Can usable access material be delivered securely to an authorized agent?", "finding": "Credentials, grants, or configuration are delivered through a documented agent-usable flow.", "context": "The AWS STS API operations return temporary security credentials programmatically, which include an access key ID, a secret key, and a session token." } ], "signals": [ { "signal_code": "access_material_delivery", "evaluation_role": "graded", "required": true, "value": "yes", "value_label": "Ready", "outcome": "pass", "public_state": "ready", "condition": "Can usable access material be delivered securely to an authorized agent?", "finding": "Credentials, grants, or configuration are delivered through a documented agent-usable flow.", "evidence_status": "supported", "freshness": "fresh", "observed_at": "2026-09-06T08:50:39.491Z", "tested_surfaces": [ { "node_kind": "resource", "node_id": "temporary-credentials" } ], "assessment_method": { "name": "public-semantic-assessment", "version": "2026-09-06", "method_digest": "sha256:02ec902925d3816c86a32a3d15dc2e7af6ce9931c24b9cf264063e596952d1c4" }, "determination_bases": [ { "kind": "explicit_first_party_declaration", "captures": [ { "retained_capture_digest": "sha256:dad212c6ed0dab19427cb746ac75e5aacc39e735b41619603beb843d174039c0", "capture_rung": "http" } ], "artifact_digests": [ "sha256:4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945", "sha256:87b23d0bcdf7bf55aa985f86f96ecb5bb3f21837b1861c0f0708661103ded611", "sha256:93514a0a476768c920d66df71a6156c959d07def7e72b93a534ca3f97a341d2f", "sha256:e045f492f8225ce8b282d342a90f839e5b7d27d7a0351778b3a21d7c46bc455d" ], "source_surface": { "node_kind": "resource", "node_id": "temporary-credentials" }, "locators": [ { "artifact_digest": "sha256:87b23d0bcdf7bf55aa985f86f96ecb5bb3f21837b1861c0f0708661103ded611", "start_byte": 6689, "end_byte": 7487, "value_digest": "sha256:2cedca06f6a7a6f2747e30bed4edd77a884b45846935617a9d16a33fabd6cded" } ] } ], "note": "The AWS STS API operations return temporary security credentials programmatically, which include an access key ID, a secret key, and a session token." }, { "signal_code": "provisioning_completion", "evaluation_role": "graded", "required": true, "value": "partial", "value_label": "Limited", "outcome": "constrained", "public_state": "limited", "condition": "Can an agent determine successful provisioning completion and reconcile asynchronous failure?", "finding": "Completion is observable, but an asynchronous path omits a material terminal, bound, or reconciliation property.", "evidence_status": "supported", "freshness": "fresh", "observed_at": "2026-09-06T08:51:37.594Z", "tested_surfaces": [ { "node_kind": "resource", "node_id": "cloud-control-getting-started" }, { "node_kind": "resource", "node_id": "cloud-control-status-api" } ], "assessment_method": { "name": "public-semantic-assessment", "version": "2026-09-06", "method_digest": "sha256:02ec902925d3816c86a32a3d15dc2e7af6ce9931c24b9cf264063e596952d1c4" }, "determination_bases": [ { "kind": "explicit_first_party_declaration", "captures": [ { "retained_capture_digest": "sha256:adc752a6087df02d775cfa64fe3643e37cdd46607c1f8184df6e53e2da07510f", "capture_rung": "http" } ], "artifact_digests": [ "sha256:0c6518dc62f859b1f557f70fa72657168528f42550734051f97d44f1f365e446", "sha256:19e5a19ed877d927a905d332a7cffd491e1c8e328958ecb0b662ae93af56acd1", "sha256:4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945", "sha256:90b0ff90b47b0eebf212dc2afc3fcd4fb7b443bdd65788440b6079bd8e9f05ac" ], "source_surface": { "node_kind": "resource", "node_id": "cloud-control-status-api" }, "locators": [ { "artifact_digest": "sha256:0c6518dc62f859b1f557f70fa72657168528f42550734051f97d44f1f365e446", "start_byte": 7642, "end_byte": 8436, "value_digest": "sha256:b4d90392d5a9f10f52c597ea29f5383411f9d11264a35eebbdae3ba0b97fd05c" } ] }, { "kind": "explicit_first_party_declaration", "captures": [ { "retained_capture_digest": "sha256:9f91cd3f44bdd202bd1e4f367ffe53b2f36f41cecfad3181067a265b3e25d33e", "capture_rung": "http" } ], "artifact_digests": [ "sha256:03b78e70298030f03ea81c386f49a20f3945a9e4031cce864592b06dfe494c7f", "sha256:046562658938f4c76f43227a46786bc5c7c51c2eda89891eb406a2922dc0fb50", "sha256:4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945", "sha256:62e33269a822f1f8faddcc4b9d11b3b7f8f39fada804b2babb0f8b29e3d54409" ], "source_surface": { "node_kind": "resource", "node_id": "cloud-control-getting-started" }, "locators": [ { "artifact_digest": "sha256:62e33269a822f1f8faddcc4b9d11b3b7f8f39fada804b2babb0f8b29e3d54409", "start_byte": 4028, "end_byte": 4818, "value_digest": "sha256:d155357bf3432061a072105ea41e0a21978ec27b1c3dfc3b4789c07926d00aae" } ] } ], "note": "AWS Cloud Control API provides progress tracking via get-resource-request-status, returning ProgressEvent objects with OperationStatus (e.g., IN_PROGRESS, SUCCESS) and RequestToken. However, explicit failure reconciliation contracts or explicit time bounds are not fully established in the retained text.", "remediation": { "signal_code": "provisioning_completion", "code": "improve.provision.provisioning_completion", "instruction": "Expose bounded machine-readable terminal status and reconciliation semantics." } }, { "signal_code": "provisioning_operability", "evaluation_role": "graded", "required": true, "value": "yes", "value_label": "Ready", "outcome": "pass", "public_state": "ready", "condition": "Can provisioning be initiated within supported agent authority?", "finding": "Provisioning is machine-triggerable or follows deterministically from an allowed handoff.", "evidence_status": "supported", "freshness": "fresh", "observed_at": "2026-09-06T08:51:37.594Z", "tested_surfaces": [ { "node_kind": "resource", "node_id": "cloud-control-create-api" }, { "node_kind": "resource", "node_id": "cloud-control-getting-started" }, { "node_kind": "resource", "node_id": "cloud-control-status-api" } ], "assessment_method": { "name": "public-semantic-assessment", "version": "2026-09-06", "method_digest": "sha256:02ec902925d3816c86a32a3d15dc2e7af6ce9931c24b9cf264063e596952d1c4" }, "determination_bases": [ { "kind": "explicit_first_party_declaration", "captures": [ { "retained_capture_digest": "sha256:9f91cd3f44bdd202bd1e4f367ffe53b2f36f41cecfad3181067a265b3e25d33e", "capture_rung": "http" } ], "artifact_digests": [ "sha256:03b78e70298030f03ea81c386f49a20f3945a9e4031cce864592b06dfe494c7f", "sha256:21ab43e5f3487d6f3f16834d8418bd333ceba9a4dd5354e5bc0fe58373c38ffb", "sha256:4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945", "sha256:62e33269a822f1f8faddcc4b9d11b3b7f8f39fada804b2babb0f8b29e3d54409" ], "source_surface": { "node_kind": "resource", "node_id": "cloud-control-getting-started" }, "locators": [ { "artifact_digest": "sha256:62e33269a822f1f8faddcc4b9d11b3b7f8f39fada804b2babb0f8b29e3d54409", "start_byte": 3230, "end_byte": 4027, "value_digest": "sha256:ad147c28946892e626af58c2b10a48c58b750ef79a484908626cabd98be192d0" } ] }, { "kind": "explicit_first_party_declaration", "captures": [ { "retained_capture_digest": "sha256:91b5ccd717d715148c7f5862c876663e85dd8793a8eaaaac8dc2632277b8d226", "capture_rung": "http" } ], "artifact_digests": [ "sha256:4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945", "sha256:a92df1b87a00176ea4ace80936387b7d0ffe02b18d99935b17111da92c0461d9", "sha256:a9ad74c36631d4ebd75c5202fa73eef0d4567c7e7baa32f5886054bcf38cfd91", "sha256:f5096e17a39e29aa6a3bac6df4a7975fdc4b813f5539035a1bdf0b3be7ccfa73" ], "source_surface": { "node_kind": "resource", "node_id": "cloud-control-create-api" }, "locators": [ { "artifact_digest": "sha256:a9ad74c36631d4ebd75c5202fa73eef0d4567c7e7baa32f5886054bcf38cfd91", "start_byte": 6080, "end_byte": 6877, "value_digest": "sha256:7ecd9fe25341c6720540bd124b2dc2da24361c3cc7850d1edc1ad947b48c46f3" } ] } ], "note": "Provisioning can be initiated within standard programmatic authority using the CreateResource API call or create-resource AWS CLI command." } ], "blockers": [], "remediations": [ { "signal_code": "provisioning_completion", "code": "improve.provision.provisioning_completion", "instruction": "Expose bounded machine-readable terminal status and reconciliation semantics." } ] }, { "stage": "operate", "stage_label": "Operate", "outcome": "constrained", "public_state": "limited", "state_label": "Limited", "primary_finding": { "signal_code": "failure_contract", "condition": "Can an agent handle applicable failure modes safely?", "finding": "Safe failure handling is documented only partially.", "context": "AWS Cloud Control API documents idempotent ClientToken requests, handler error codes and request status tracking through ProgressEvent; the selected quotes do not establish cancellation semantics for a resource request." }, "secondary_context": [ { "signal_code": "agent_protocol_interface", "condition": "Is an agent-native protocol interface verified against the essential targets?", "finding": "Current admissible evidence does not resolve this finding.", "context": "The retained excerpts describe REST or RPC interfaces, SDKs and CLIs for AWS Cloud; they contain no first-party statement that an agent-native protocol interface is absent, and several navigation excerpts mention MCP resources without establishing coverage of the assessed targets." }, { "signal_code": "credential_lifecycle", "condition": "Can an agent manage credential expiry, rotation, revocation, compromise, and recovery?", "finding": "Only part of the credential lifecycle is agent-operable.", "context": "AWS STS documentation explicitly details requesting temporary security credentials with defined expiry durations (DurationSeconds parameter between 15 minutes and 36 hours) and session policies. However, full credential lifecycle management including rotation, revocation, compromise response, and recovery procedures across all credential types is not fully established." }, { "signal_code": "target_interface_access", "condition": "Can an agent perform every essential assessment target through a usable interface?", "finding": "Every essential target has a stable documented agent-usable interface alternative.", "context": "Every essential target surface—including Cloud Control API CRUD-L operations, request status tracking, regional endpoints, Price List APIs, and pricing documentation—has documented, usable machine interfaces available through REST APIs, language-specific AWS SDKs, and the AWS CLI." }, { "signal_code": "operation_authentication", "condition": "Can an agent authenticate service operations with scoped authority?", "finding": "Request-time authentication is documented and usable under scoped agent authority.", "context": "AWS STS documentation explicitly describes requesting temporary security credentials (access key ID, secret access key, and session token) via AssumeRole, GetSessionToken, and federated identity calls to authenticate service operations under scoped permissions." }, { "signal_code": "operation_contract", "condition": "Are essential operation inputs, outputs, and effects stable and decidable?", "finding": "Essential operations have stable readable request, response, and effect semantics.", "context": "Across all evaluated assessment targets, essential operation inputs, outputs, schemas, HTTPS endpoints, CLI commands, and pay-as-you-go pricing models are clearly documented with stable, decidable request and response semantics." } ], "signals": [ { "signal_code": "agent_protocol_interface", "evaluation_role": "informational", "required": false, "value": "unknown", "value_label": "Unknown", "outcome": "unknown", "public_state": "unknown", "condition": "Is an agent-native protocol interface verified against the essential targets?", "finding": "Current admissible evidence does not resolve this finding.", "evidence_status": "supported", "freshness": "fresh", "observed_at": "2026-09-06T08:51:37.594Z", "tested_surfaces": [ { "node_kind": "interface", "node_id": "cloud-control" }, { "node_kind": "interface", "node_id": "public-pricing" }, { "node_kind": "interface", "node_id": "workload-authentication" } ], "assessment_method": { "name": "public-semantic-assessment", "version": "2026-09-06", "method_digest": "sha256:02ec902925d3816c86a32a3d15dc2e7af6ce9931c24b9cf264063e596952d1c4" }, "determination_bases": [], "note": "The retained excerpts describe REST or RPC interfaces, SDKs and CLIs for AWS Cloud; they contain no first-party statement that an agent-native protocol interface is absent, and several navigation excerpts mention MCP resources without establishing coverage of the assessed targets." }, { "signal_code": "credential_lifecycle", "evaluation_role": "graded", "required": true, "value": "partial", "value_label": "Limited", "outcome": "constrained", "public_state": "limited", "condition": "Can an agent manage credential expiry, rotation, revocation, compromise, and recovery?", "finding": "Only part of the credential lifecycle is agent-operable.", "evidence_status": "supported", "freshness": "fresh", "observed_at": "2026-09-06T08:50:39.491Z", "tested_surfaces": [ { "node_kind": "resource", "node_id": "temporary-credentials" } ], "assessment_method": { "name": "public-semantic-assessment", "version": "2026-09-06", "method_digest": "sha256:02ec902925d3816c86a32a3d15dc2e7af6ce9931c24b9cf264063e596952d1c4" }, "determination_bases": [ { "kind": "explicit_first_party_declaration", "captures": [ { "retained_capture_digest": "sha256:dad212c6ed0dab19427cb746ac75e5aacc39e735b41619603beb843d174039c0", "capture_rung": "http" } ], "artifact_digests": [ "sha256:4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945", "sha256:87b23d0bcdf7bf55aa985f86f96ecb5bb3f21837b1861c0f0708661103ded611", "sha256:c292eb1638869ed4169a8d19e8949a2fbee6826fa0ed2b6a78fb33bad7a90180", "sha256:e045f492f8225ce8b282d342a90f839e5b7d27d7a0351778b3a21d7c46bc455d" ], "source_surface": { "node_kind": "resource", "node_id": "temporary-credentials" }, "locators": [ { "artifact_digest": "sha256:87b23d0bcdf7bf55aa985f86f96ecb5bb3f21837b1861c0f0708661103ded611", "start_byte": 17791, "end_byte": 18590, "value_digest": "sha256:154f2b6f2a57b34052332ab102a796ddebdad7724b251388a5a4a068cb9e36d8" }, { "artifact_digest": "sha256:87b23d0bcdf7bf55aa985f86f96ecb5bb3f21837b1861c0f0708661103ded611", "start_byte": 5088, "end_byte": 5887, "value_digest": "sha256:02ce800de780c67baf91380b42e314ea2a06c99fd3f0aa3c05b56d7d10286b4e" } ] } ], "note": "AWS STS documentation explicitly details requesting temporary security credentials with defined expiry durations (DurationSeconds parameter between 15 minutes and 36 hours) and session policies. However, full credential lifecycle management including rotation, revocation, compromise response, and recovery procedures across all credential types is not fully established.", "remediation": { "signal_code": "credential_lifecycle", "code": "improve.operate.credential_lifecycle", "instruction": "Provide scoped expiry, rotation, revocation, compromise, and recovery operations." } }, { "signal_code": "failure_contract", "evaluation_role": "graded", "required": true, "value": "partial", "value_label": "Limited", "outcome": "constrained", "public_state": "limited", "condition": "Can an agent handle applicable failure modes safely?", "finding": "Safe failure handling is documented only partially.", "evidence_status": "supported", "freshness": "fresh", "observed_at": "2026-09-06T08:50:02.790Z", "tested_surfaces": [ { "node_kind": "resource", "node_id": "cloud-control-create-api" }, { "node_kind": "resource", "node_id": "cloud-control-status-api" } ], "assessment_method": { "name": "public-semantic-assessment", "version": "2026-09-06", "method_digest": "sha256:02ec902925d3816c86a32a3d15dc2e7af6ce9931c24b9cf264063e596952d1c4" }, "determination_bases": [ { "kind": "explicit_first_party_declaration", "captures": [ { "retained_capture_digest": "sha256:adc752a6087df02d775cfa64fe3643e37cdd46607c1f8184df6e53e2da07510f", "capture_rung": "http" } ], "artifact_digests": [ "sha256:0c6518dc62f859b1f557f70fa72657168528f42550734051f97d44f1f365e446", "sha256:13c079e12e5a21bbb2932831e53703b76f47338be4efb11e108e149e90be0afc", "sha256:4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945", "sha256:90b0ff90b47b0eebf212dc2afc3fcd4fb7b443bdd65788440b6079bd8e9f05ac" ], "source_surface": { "node_kind": "resource", "node_id": "cloud-control-status-api" }, "locators": [ { "artifact_digest": "sha256:0c6518dc62f859b1f557f70fa72657168528f42550734051f97d44f1f365e446", "start_byte": 6842, "end_byte": 7641, "value_digest": "sha256:34743a9b98497d47f5d2890624e172153fb1c1f703837f354f327016db9e0944" } ] }, { "kind": "explicit_first_party_declaration", "captures": [ { "retained_capture_digest": "sha256:91b5ccd717d715148c7f5862c876663e85dd8793a8eaaaac8dc2632277b8d226", "capture_rung": "http" } ], "artifact_digests": [ "sha256:4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945", "sha256:7cf44fb717a7241be50979a4d20df35a3849806701f46707c28e5df3ccad18da", "sha256:a92df1b87a00176ea4ace80936387b7d0ffe02b18d99935b17111da92c0461d9", "sha256:a9ad74c36631d4ebd75c5202fa73eef0d4567c7e7baa32f5886054bcf38cfd91" ], "source_surface": { "node_kind": "resource", "node_id": "cloud-control-create-api" }, "locators": [ { "artifact_digest": "sha256:a9ad74c36631d4ebd75c5202fa73eef0d4567c7e7baa32f5886054bcf38cfd91", "start_byte": 10794, "end_byte": 11587, "value_digest": "sha256:7bd94c2b2afe4281a42aa3a1c0b4f443f3f16745b58c840e42f8571caf796f5c" }, { "artifact_digest": "sha256:a9ad74c36631d4ebd75c5202fa73eef0d4567c7e7baa32f5886054bcf38cfd91", "start_byte": 6878, "end_byte": 7677, "value_digest": "sha256:82a735fc2fd0426d7a90f2190adc58e40315995b3706cbcd5d8f86c072c09e01" } ] } ], "note": "AWS Cloud Control API documents idempotent ClientToken requests, handler error codes and request status tracking through ProgressEvent; the selected quotes do not establish cancellation semantics for a resource request.", "remediation": { "signal_code": "failure_contract", "code": "improve.operate.failure_contract", "instruction": "Document applicable structured errors, retry, cancellation, and reconciliation semantics." } }, { "signal_code": "operation_authentication", "evaluation_role": "graded", "required": true, "value": "yes", "value_label": "Ready", "outcome": "pass", "public_state": "ready", "condition": "Can an agent authenticate service operations with scoped authority?", "finding": "Request-time authentication is documented and usable under scoped agent authority.", "evidence_status": "supported", "freshness": "fresh", "observed_at": "2026-09-06T08:50:39.491Z", "tested_surfaces": [ { "node_kind": "resource", "node_id": "temporary-credentials" } ], "assessment_method": { "name": "public-semantic-assessment", "version": "2026-09-06", "method_digest": "sha256:02ec902925d3816c86a32a3d15dc2e7af6ce9931c24b9cf264063e596952d1c4" }, "determination_bases": [ { "kind": "explicit_first_party_declaration", "captures": [ { "retained_capture_digest": "sha256:dad212c6ed0dab19427cb746ac75e5aacc39e735b41619603beb843d174039c0", "capture_rung": "http" } ], "artifact_digests": [ "sha256:4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945", "sha256:87b23d0bcdf7bf55aa985f86f96ecb5bb3f21837b1861c0f0708661103ded611", "sha256:dc656ec31ff51c9d498710901c820e06211034685d1707c27d18603879e576a1", "sha256:e045f492f8225ce8b282d342a90f839e5b7d27d7a0351778b3a21d7c46bc455d" ], "source_surface": { "node_kind": "resource", "node_id": "temporary-credentials" }, "locators": [ { "artifact_digest": "sha256:87b23d0bcdf7bf55aa985f86f96ecb5bb3f21837b1861c0f0708661103ded611", "start_byte": 5088, "end_byte": 5887, "value_digest": "sha256:02ce800de780c67baf91380b42e314ea2a06c99fd3f0aa3c05b56d7d10286b4e" } ] } ], "note": "AWS STS documentation explicitly describes requesting temporary security credentials (access key ID, secret access key, and session token) via AssumeRole, GetSessionToken, and federated identity calls to authenticate service operations under scoped permissions." }, { "signal_code": "operation_contract", "evaluation_role": "graded", "required": true, "value": "yes", "value_label": "Ready", "outcome": "pass", "public_state": "ready", "condition": "Are essential operation inputs, outputs, and effects stable and decidable?", "finding": "Essential operations have stable readable request, response, and effect semantics.", "evidence_status": "supported", "freshness": "fresh", "observed_at": "2026-09-06T08:51:37.594Z", "tested_surfaces": [ { "node_kind": "interface", "node_id": "cloud-control" }, { "node_kind": "interface", "node_id": "public-pricing" } ], "assessment_method": { "name": "public-semantic-assessment", "version": "2026-09-06", "method_digest": "sha256:02ec902925d3816c86a32a3d15dc2e7af6ce9931c24b9cf264063e596952d1c4" }, "determination_bases": [ { "kind": "explicit_first_party_declaration", "captures": [ { "retained_capture_digest": "sha256:8aa0c7aacd7d47398e1b25bd7b74284f40cb42ae7b1d94442d8a7f62a1089e2b", "capture_rung": "http" } ], "artifact_digests": [ "sha256:4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945", "sha256:6edcb5b1642a59e7f9146a3f18b0002e115738ba9ec864f7d704428a1073fb22", "sha256:7a56b42cd929668b80f55186c0f2a6871df5b12988b31049006a2af387d4d2a3", "sha256:9e62fc61704bfe22b1829c75c7e471e76aa521be047eae27b8e966788307ae45" ], "source_surface": { "node_kind": "resource", "node_id": "cloud-control-endpoints" }, "locators": [ { "artifact_digest": "sha256:6edcb5b1642a59e7f9146a3f18b0002e115738ba9ec864f7d704428a1073fb22", "start_byte": 2542, "end_byte": 3342, "value_digest": "sha256:a4766ad9b7381d18b02b32f30869cccac2b53123a99a001e0177aaeaf9b271bd" } ] }, { "kind": "explicit_first_party_declaration", "captures": [ { "retained_capture_digest": "sha256:9f91cd3f44bdd202bd1e4f367ffe53b2f36f41cecfad3181067a265b3e25d33e", "capture_rung": "http" } ], "artifact_digests": [ "sha256:03b78e70298030f03ea81c386f49a20f3945a9e4031cce864592b06dfe494c7f", "sha256:21ab43e5f3487d6f3f16834d8418bd333ceba9a4dd5354e5bc0fe58373c38ffb", "sha256:4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945", "sha256:62e33269a822f1f8faddcc4b9d11b3b7f8f39fada804b2babb0f8b29e3d54409" ], "source_surface": { "node_kind": "resource", "node_id": "cloud-control-getting-started" }, "locators": [ { "artifact_digest": "sha256:62e33269a822f1f8faddcc4b9d11b3b7f8f39fada804b2babb0f8b29e3d54409", "start_byte": 3230, "end_byte": 4027, "value_digest": "sha256:ad147c28946892e626af58c2b10a48c58b750ef79a484908626cabd98be192d0" } ] }, { "kind": "explicit_first_party_declaration", "captures": [ { "retained_capture_digest": "sha256:adc752a6087df02d775cfa64fe3643e37cdd46607c1f8184df6e53e2da07510f", "capture_rung": "http" } ], "artifact_digests": [ "sha256:0c6518dc62f859b1f557f70fa72657168528f42550734051f97d44f1f365e446", "sha256:4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945", "sha256:90b0ff90b47b0eebf212dc2afc3fcd4fb7b443bdd65788440b6079bd8e9f05ac", "sha256:d0afdc75fab271dee8be147507c465d82c274921ed41e4749dada34615b4bb93" ], "source_surface": { "node_kind": "resource", "node_id": "cloud-control-status-api" }, "locators": [ { "artifact_digest": "sha256:0c6518dc62f859b1f557f70fa72657168528f42550734051f97d44f1f365e446", "start_byte": 6052, "end_byte": 6841, "value_digest": "sha256:f78d9b5d961c83efb7c16d571b324713ccca03e7fa5e73f923c7c69b2b206c28" } ] }, { "kind": "explicit_first_party_declaration", "captures": [ { "retained_capture_digest": "sha256:78f263b7c317f1bba21066a88d913f628afa1ac2d54d71ddb248a84d35889e1c", "capture_rung": "http" } ], "artifact_digests": [ "sha256:4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945", "sha256:b602f2e7272c46399f7c405de40707bd766ce58a5716783e072c6120026beb88", "sha256:c54cf3b4a65fe2388f5a749d69692c763a55cac89b02db18b9a6d7a00332568d", "sha256:fb707b069eb5a8aaa0970fbfc2458949281107964c378ae7520d503fcddbeb21" ], "source_surface": { "node_kind": "resource", "node_id": "cloud-control-overview" }, "locators": [ { "artifact_digest": "sha256:c54cf3b4a65fe2388f5a749d69692c763a55cac89b02db18b9a6d7a00332568d", "start_byte": 4277, "end_byte": 5064, "value_digest": "sha256:532a9520252bb0407b949f40b83a124eb58d1f8cb6d3e2aa52ca3e244986fa47" } ] }, { "kind": "explicit_first_party_declaration", "captures": [ { "retained_capture_digest": "sha256:91b5ccd717d715148c7f5862c876663e85dd8793a8eaaaac8dc2632277b8d226", "capture_rung": "http" } ], "artifact_digests": [ "sha256:4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945", "sha256:a92df1b87a00176ea4ace80936387b7d0ffe02b18d99935b17111da92c0461d9", "sha256:a9ad74c36631d4ebd75c5202fa73eef0d4567c7e7baa32f5886054bcf38cfd91", "sha256:f5096e17a39e29aa6a3bac6df4a7975fdc4b813f5539035a1bdf0b3be7ccfa73" ], "source_surface": { "node_kind": "resource", "node_id": "cloud-control-create-api" }, "locators": [ { "artifact_digest": "sha256:a9ad74c36631d4ebd75c5202fa73eef0d4567c7e7baa32f5886054bcf38cfd91", "start_byte": 6080, "end_byte": 6877, "value_digest": "sha256:7ecd9fe25341c6720540bd124b2dc2da24361c3cc7850d1edc1ad947b48c46f3" } ] }, { "kind": "explicit_first_party_declaration", "captures": [ { "retained_capture_digest": "sha256:e7c1cfa24c1d56337d3523992c4a2f1b62a20ec1f210932790e8ab4b013829c0", "capture_rung": "http" } ], "artifact_digests": [ "sha256:1ba63750f6bfc8add1ccfcd4d3bbf334d58f38a3e81636b09dba7be8eed1e717", "sha256:5378d8a5d9969c32f3a31b5a1be465f99fad50114f9e90dc44bdcd7ee7a8068d", "sha256:651901a5b1bfbf332b17b7207ebda2f4b82e3e98051c28f66ddfcf5e0492beb5", "sha256:d174d08757031537f850b60c444500450db8daed05bcb56f031de32b5ae0b985" ], "source_surface": { "node_kind": "resource", "node_id": "pricing" }, "locators": [ { "artifact_digest": "sha256:5378d8a5d9969c32f3a31b5a1be465f99fad50114f9e90dc44bdcd7ee7a8068d", "start_byte": 20756, "end_byte": 21554, "value_digest": "sha256:b0f877a7745ec8c62108906a193180bb0f69272add0aaea0267fbc651e21ccd9" } ] }, { "kind": "explicit_first_party_declaration", "captures": [ { "retained_capture_digest": "sha256:c766771e6b451983fb26426df36de21e5cf0630bad05029661656bca433492ec", "capture_rung": "http" } ], "artifact_digests": [ "sha256:2988eb874aac2ad28045daff5e7ef70f368c889cc9c64e821ce440fe3a354726", "sha256:4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945", "sha256:5fbe4899b30bcdf3d1c810ea22bbb449c947d294f66a4c6dce263d62e5aa963a", "sha256:6fd2343b49ffc91884ddbca07b941781fd73b51fdf8f0b44b2459254ee1a0fe4" ], "source_surface": { "node_kind": "resource", "node_id": "cloud-control-resource-operations" }, "locators": [ { "artifact_digest": "sha256:5fbe4899b30bcdf3d1c810ea22bbb449c947d294f66a4c6dce263d62e5aa963a", "start_byte": 3239, "end_byte": 4035, "value_digest": "sha256:2a50ff2e7e6c0594277ccdc4e5e70c1ca06674b69252eeded39c4799220de3b8" } ] }, { "kind": "explicit_first_party_declaration", "captures": [ { "retained_capture_digest": "sha256:d3ceff76456cfea97237753cd7e9beacbca77770cb37de2f106d04687e3f048e", "capture_rung": "http" } ], "artifact_digests": [ "sha256:2b9ff113600c9b1b6f00448388417e587380966594ec9a7cdaef6697b1500c3d", "sha256:4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945", "sha256:5ce3083f8d4eaae0bbae481d740e59d01deac9d01c01f1c47c8094a15f85f106", "sha256:b3e5b450fd575b21b32911c10cebadb803e891feedb4d21c071a4c1dfcef12ef" ], "source_surface": { "node_kind": "resource", "node_id": "price-list-api" }, "locators": [ { "artifact_digest": "sha256:2b9ff113600c9b1b6f00448388417e587380966594ec9a7cdaef6697b1500c3d", "start_byte": 5043, "end_byte": 5841, "value_digest": "sha256:b38c2ec18980c425eb1553abb45e9a64850cb3572fd880918dedc40cb71cec53" } ] } ], "note": "Across all evaluated assessment targets, essential operation inputs, outputs, schemas, HTTPS endpoints, CLI commands, and pay-as-you-go pricing models are clearly documented with stable, decidable request and response semantics." }, { "signal_code": "target_interface_access", "evaluation_role": "graded", "required": true, "value": "yes", "value_label": "Ready", "outcome": "pass", "public_state": "ready", "condition": "Can an agent perform every essential assessment target through a usable interface?", "finding": "Every essential target has a stable documented agent-usable interface alternative.", "evidence_status": "supported", "freshness": "fresh", "observed_at": "2026-09-06T08:51:37.594Z", "tested_surfaces": [ { "node_kind": "interface", "node_id": "cloud-control" }, { "node_kind": "interface", "node_id": "public-pricing" } ], "assessment_method": { "name": "public-semantic-assessment", "version": "2026-09-06", "method_digest": "sha256:02ec902925d3816c86a32a3d15dc2e7af6ce9931c24b9cf264063e596952d1c4" }, "determination_bases": [ { "kind": "explicit_first_party_declaration", "captures": [ { "retained_capture_digest": "sha256:d3ceff76456cfea97237753cd7e9beacbca77770cb37de2f106d04687e3f048e", "capture_rung": "http" } ], "artifact_digests": [ "sha256:2b9ff113600c9b1b6f00448388417e587380966594ec9a7cdaef6697b1500c3d", "sha256:4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945", "sha256:5ce3083f8d4eaae0bbae481d740e59d01deac9d01c01f1c47c8094a15f85f106", "sha256:7514f4dff2140ecfcc063b4776b414b3772357a8bf933c31c6e6f404e68c4264" ], "source_surface": { "node_kind": "resource", "node_id": "price-list-api" }, "locators": [ { "artifact_digest": "sha256:2b9ff113600c9b1b6f00448388417e587380966594ec9a7cdaef6697b1500c3d", "start_byte": 6643, "end_byte": 7442, "value_digest": "sha256:52f322f1b6034b4c7b5762b9cf374f4fc0186aee5a4faa88af8c1164aebf9b43" } ] }, { "kind": "explicit_first_party_declaration", "captures": [ { "retained_capture_digest": "sha256:91b5ccd717d715148c7f5862c876663e85dd8793a8eaaaac8dc2632277b8d226", "capture_rung": "http" } ], "artifact_digests": [ "sha256:4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945", "sha256:8b0cb5e534b8e8839a86167088cdfc7f28943808005457e4cbaa54f030786a5a", "sha256:a92df1b87a00176ea4ace80936387b7d0ffe02b18d99935b17111da92c0461d9", "sha256:a9ad74c36631d4ebd75c5202fa73eef0d4567c7e7baa32f5886054bcf38cfd91" ], "source_surface": { "node_kind": "resource", "node_id": "cloud-control-create-api" }, "locators": [ { "artifact_digest": "sha256:a9ad74c36631d4ebd75c5202fa73eef0d4567c7e7baa32f5886054bcf38cfd91", "start_byte": 13177, "end_byte": 13961, "value_digest": "sha256:808e3795f657e1e3f4d5d4dee2951712f63d52717ccd5eea2be5fb54461d3412" } ] }, { "kind": "explicit_first_party_declaration", "captures": [ { "retained_capture_digest": "sha256:adc752a6087df02d775cfa64fe3643e37cdd46607c1f8184df6e53e2da07510f", "capture_rung": "http" } ], "artifact_digests": [ "sha256:041dcde2139fb47584d5559c82c9d03b5662cc44724a64bd7244b03a6c31c9c6", "sha256:0c6518dc62f859b1f557f70fa72657168528f42550734051f97d44f1f365e446", "sha256:4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945", "sha256:90b0ff90b47b0eebf212dc2afc3fcd4fb7b443bdd65788440b6079bd8e9f05ac" ], "source_surface": { "node_kind": "resource", "node_id": "cloud-control-status-api" }, "locators": [ { "artifact_digest": "sha256:0c6518dc62f859b1f557f70fa72657168528f42550734051f97d44f1f365e446", "start_byte": 9194, "end_byte": 9992, "value_digest": "sha256:475b24f60b969ec8993ad63072921bb6997e8c6a0bb3ea0e531b52b579ae30f0" } ] }, { "kind": "explicit_first_party_declaration", "captures": [ { "retained_capture_digest": "sha256:8aa0c7aacd7d47398e1b25bd7b74284f40cb42ae7b1d94442d8a7f62a1089e2b", "capture_rung": "http" } ], "artifact_digests": [ "sha256:4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945", "sha256:60eab99edcf9404701bd7807b1116f60fca038e2310ea763be0312318f5d969c", "sha256:6edcb5b1642a59e7f9146a3f18b0002e115738ba9ec864f7d704428a1073fb22", "sha256:9e62fc61704bfe22b1829c75c7e471e76aa521be047eae27b8e966788307ae45" ], "source_surface": { "node_kind": "resource", "node_id": "cloud-control-endpoints" }, "locators": [ { "artifact_digest": "sha256:6edcb5b1642a59e7f9146a3f18b0002e115738ba9ec864f7d704428a1073fb22", "start_byte": 3343, "end_byte": 4089, "value_digest": "sha256:6388a7db9d972c003e64702466705889048c399fb4b70b8babcdb8f99ca66ec2" } ] }, { "kind": "explicit_first_party_declaration", "captures": [ { "retained_capture_digest": "sha256:78f263b7c317f1bba21066a88d913f628afa1ac2d54d71ddb248a84d35889e1c", "capture_rung": "http" } ], "artifact_digests": [ "sha256:4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945", "sha256:59fd9c80829092e1d12daa3b8dc52d960398cd17bcfc809146582fb07715d046", "sha256:c54cf3b4a65fe2388f5a749d69692c763a55cac89b02db18b9a6d7a00332568d", "sha256:fb707b069eb5a8aaa0970fbfc2458949281107964c378ae7520d503fcddbeb21" ], "source_surface": { "node_kind": "resource", "node_id": "cloud-control-overview" }, "locators": [ { "artifact_digest": "sha256:c54cf3b4a65fe2388f5a749d69692c763a55cac89b02db18b9a6d7a00332568d", "start_byte": 6655, "end_byte": 7417, "value_digest": "sha256:6a4885bb3e222f35df08a672dd77712d0f6e2a12ab7af12964d0ffa29c107949" } ] }, { "kind": "explicit_first_party_declaration", "captures": [ { "retained_capture_digest": "sha256:9f91cd3f44bdd202bd1e4f367ffe53b2f36f41cecfad3181067a265b3e25d33e", "capture_rung": "http" } ], "artifact_digests": [ "sha256:03b78e70298030f03ea81c386f49a20f3945a9e4031cce864592b06dfe494c7f", "sha256:21ab43e5f3487d6f3f16834d8418bd333ceba9a4dd5354e5bc0fe58373c38ffb", "sha256:4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945", "sha256:62e33269a822f1f8faddcc4b9d11b3b7f8f39fada804b2babb0f8b29e3d54409" ], "source_surface": { "node_kind": "resource", "node_id": "cloud-control-getting-started" }, "locators": [ { "artifact_digest": "sha256:62e33269a822f1f8faddcc4b9d11b3b7f8f39fada804b2babb0f8b29e3d54409", "start_byte": 3230, "end_byte": 4027, "value_digest": "sha256:ad147c28946892e626af58c2b10a48c58b750ef79a484908626cabd98be192d0" } ] }, { "kind": "explicit_first_party_declaration", "captures": [ { "retained_capture_digest": "sha256:e7c1cfa24c1d56337d3523992c4a2f1b62a20ec1f210932790e8ab4b013829c0", "capture_rung": "http" } ], "artifact_digests": [ "sha256:5378d8a5d9969c32f3a31b5a1be465f99fad50114f9e90dc44bdcd7ee7a8068d", "sha256:651901a5b1bfbf332b17b7207ebda2f4b82e3e98051c28f66ddfcf5e0492beb5", "sha256:d174d08757031537f850b60c444500450db8daed05bcb56f031de32b5ae0b985", "sha256:f0069ec55ab1c2bfb2d06f3dc5426239492264b659f622013879cec8c0fd23c2" ], "source_surface": { "node_kind": "resource", "node_id": "pricing" }, "locators": [ { "artifact_digest": "sha256:5378d8a5d9969c32f3a31b5a1be465f99fad50114f9e90dc44bdcd7ee7a8068d", "start_byte": 19955, "end_byte": 20755, "value_digest": "sha256:a54f89d3e05d65e86261bd1777359d587d0a842488f0e445859f160408824c4c" } ] }, { "kind": "explicit_first_party_declaration", "captures": [ { "retained_capture_digest": "sha256:c766771e6b451983fb26426df36de21e5cf0630bad05029661656bca433492ec", "capture_rung": "http" } ], "artifact_digests": [ "sha256:2988eb874aac2ad28045daff5e7ef70f368c889cc9c64e821ce440fe3a354726", "sha256:4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945", "sha256:5fbe4899b30bcdf3d1c810ea22bbb449c947d294f66a4c6dce263d62e5aa963a", "sha256:6fd2343b49ffc91884ddbca07b941781fd73b51fdf8f0b44b2459254ee1a0fe4" ], "source_surface": { "node_kind": "resource", "node_id": "cloud-control-resource-operations" }, "locators": [ { "artifact_digest": "sha256:5fbe4899b30bcdf3d1c810ea22bbb449c947d294f66a4c6dce263d62e5aa963a", "start_byte": 3239, "end_byte": 4035, "value_digest": "sha256:2a50ff2e7e6c0594277ccdc4e5e70c1ca06674b69252eeded39c4799220de3b8" } ] } ], "note": "Every essential target surface—including Cloud Control API CRUD-L operations, request status tracking, regional endpoints, Price List APIs, and pricing documentation—has documented, usable machine interfaces available through REST APIs, language-specific AWS SDKs, and the AWS CLI." } ], "blockers": [], "remediations": [ { "signal_code": "failure_contract", "code": "improve.operate.failure_contract", "instruction": "Document applicable structured errors, retry, cancellation, and reconciliation semantics." }, { "signal_code": "credential_lifecycle", "code": "improve.operate.credential_lifecycle", "instruction": "Provide scoped expiry, rotation, revocation, compromise, and recovery operations." } ] } ], "coverage": { "status": "complete", "required_signals": 14, "covered_signals": 14, "ratio": 1, "barrier_signals": 5, "verified_barrier_signals": 0, "barrier_ratio": 0 }, "last_tested_at": "2026-09-06T08:52:02.607Z", "freshness": "fresh", "provenance": { "freshness": "fresh", "dispute": "none", "coverage_policy_digest": "sha256:fc9e8f046d86fcf19ab2f1bc547219e503cdc11ffa135d020db7285965cd7d1d", "freshness_policy_digest": "sha256:b71bacf415fdbef01024355fb3d080df7a9dca05d2cce9a2a1f691fe8a60f579", "basis_event_ids": [ "sha256:01a3e3db5d52eabcc1313e9a758fe8f7a4c34a29ac3b38c203f8fb7ddc67e76e", "sha256:052f0d234db938524b8d4003b2eb07430d6b371e9fdf8277ccdeb865edc7b4fd", "sha256:06a5065300862b4a65fcbe609da9fb3aa2a84f3ad36ac596a4c579508535e930", "sha256:0b46476cca3389acb783d31cff1310d18c03b0eebd034f02d2a1bc97690827ad", "sha256:0c1744b4ffffcb09e5ee7c7d758d44e8cc633b2c6532e141ae8a41952168a516", "sha256:0c1d910fb6617e9c852459a99846648d5d33e86a362ff7d4f1f656d18497fc73", "sha256:12e4ff0a9ddeebeecf6534d0db7119c836b5db9668d5d251e3721fbc04af0ee6", "sha256:139345d3e7dcb8121c2f97126ee66de571a242cd7710f4f509a05526be48f314", "sha256:198bafe58d7a148bbee175d995f5457a965b1e6a455ae89d047dbac110685f00", "sha256:1bf0db82c083e433436ba7872701a3f59603447e0068a64f7c6846a35221281c", "sha256:203095c9f6da14a51b29641839ca6b2dedd1f2793ef1de46f07143f2c0a2b82e", "sha256:206a07280872c5d257f845cab1740fdadb016de26dddb000c3bc53624e338399", "sha256:24b6984c82e7b11250ba41f49cb4d12c3e9f85a5e35f2d0be04ab050fbdba70e", "sha256:3154a257820a7136452bc839a96417a2c3717830b6a4482d9674727d155bfaf5", "sha256:397566542c9c887160c60584b342c7a9ca639529822fa66852b53248c0daf08a", "sha256:3bffa73bc464bfa7bde6f3777631faaad75753dd6b77e615723994df436749d6", "sha256:3caad9fec460af742fbf83c23721460c7b460e7a15cca7c0a5e12ce27a8fcb89", "sha256:4242b10dfc7f2c56abcde21245a68c648f27d8860da0d11f7280b97f5c8aab19", "sha256:42da00c1f71397c555a762f18a03d237d4d4b07062b2bc70ed2ea85842813d87", "sha256:4ad5208bd873577f16b785d906f82de98a0fc73b6cd009f9b4da899b3dab90fd", "sha256:52d3d9f58d32b0388524559d9b6157a45e2a4eaf812f22083b59b7e06c22cd74", "sha256:5bec0cc1334f12839fc3dcb6865506125f8e5b940c77f30258e637fb3c0f7fbd", "sha256:63683e7a4677298574a5816a64270c8f71ec6a2f33a80d38b3ca8b70d9d84ede", "sha256:6cd121de72e1bedeaad4b297a1adeaa92c45b201749e85a4db31758f6c71f5f6", "sha256:6e5b3ae7f7bd5ce2b93103ff95ef5465bfba634828a68ea4549353b32d9aee0e", "sha256:6f6dc5fcc2c71c768498b613b4d242db3314a1c7f24db4676e5464b91e0e959e", "sha256:71de6721858ee67fff12858afbdc1048584b62f13251abdf7b2c209b78b31efb", "sha256:7c5601ccf3060dc1e1e4c4e116ebb717aaee1ac878d46d808d73eb0717006b5c", "sha256:7de490d95f861982b4fb5f8b177cd040243d06e6c420f8764dc3ddbb3a0e8707", "sha256:81b27ecb544b420680c127ee16ea44ac449f1f984c4d0275d8637126cc40b611", "sha256:84e2ccd489cca923297a61cc83f4bf222f4d3988fbb86ed38575d1cdbc9b021b", "sha256:85b49178b939457548ba2a5476900185807d231aa798bbdd3dc814f29cb6ae3b", "sha256:8d281315ee01ba289cd84baae8e2b7015c919668e7d5c41bb7bb2ef37f9ee426", "sha256:91d645a0defe5d4a9bb408599efcb6382ad5cf19315d9eae6a064e39494589ff", "sha256:950d020be95b103d4f1b84af4eefa8237e259bbe0eddfb8f1c8ea44102ab759a", "sha256:9c2ed9b86a423e7289504e338ccdbaa020b2d5ba65ba48d0e9e6415e44789381", "sha256:9f6b846ca7b11dec10f7f09425b27e447b7f508755aa99d987e6b05e28edebe6", "sha256:a36b3376a532faf5b6b5575f242e24b3ae0ef245486bde15f0a37ccfb34b988d", "sha256:a75041377c70abaf8a890a39b77f33a22abf629c7a7685282adfcce269194f8f", "sha256:a9b29c61ca5e4744b54a9c64bd29b196586b6e50e747159d9c0a7f1d82406e8a", "sha256:ad5698badec9d1efad9ec6d964eb9c00d15cddb7ae6108f50eb43a06c40486a1", "sha256:af702a183983cc66296d758509904e26f1ffb36a9ed25ca3fd47f59fd401e2ce", "sha256:b0c3f7f868e56ba67fb683391242dcbfa0c8862343302b85ef61f8b69afd237f", "sha256:b1f8b7d419584e510ea30a58a2d417e9d5ba633352c8e9721c7a2c8ad60e98a7", "sha256:b27badccf319d04348896c6564bc800a4951556c77fa605f028df232032811a3", "sha256:b7e3ce12ceef1097e3640059879d202e7dda129f051da9311c790d8e414d247f", "sha256:ba8d83b0aeadcd25e253dcf682c67b8cacc95728c3dcfac114fd9fac475fa862", "sha256:c74493741ba9d544ee81463733ceae6ac41efc41a51672820473c4b279c63e5e", "sha256:c8eb20f5550cc60c3ed87057ce93edc60a2da54acb51717447825b7624c790e5", "sha256:d3cb7581feff100d4d0c462acdaa0e9d98bc7f351d78dc87417df30ac81475c6", "sha256:da95bb89f569ae9796a3546aff29ddf6f396e3e9aced0635641e76df4b83ff2f", "sha256:eb0f996d67376ad0737373e59072aefc317c477f6c0db2dad47618351182c196", "sha256:f123d618e0cfc2db1c395f4b597021cd4eba27dd721a58b40bb1b489c1fdf5a3", "sha256:f1f76354ebf0c76a12c7540c989f6799e93479a262919d0a00f8e03ccd28383a", "sha256:f4ce32018755fcf6f87f04b1d2ccb0c6799104a49955b46f3b55126560e6266d", "sha256:f78531bd9910e690c5c5b4b8486c1dc66719c252eb49a6660046ef3a74f00034", "sha256:f9173c2d4ae8f2906f9c31620998038597d24e9ec2316609a4bcbd43aec66c27", "sha256:faec2e7d89bf97271b4e8f21bfba5c3c9122226aa6dd5a9c74e39c785c5ea099", "sha256:fd8fbfa9a5e5a7ef4da3c93f89ff49a6ef48f35407bf6a04fc4a574d48864920" ], "fields": [ { "path": "/signals/0", "supporting_event_ids": [ "sha256:9c2ed9b86a423e7289504e338ccdbaa020b2d5ba65ba48d0e9e6415e44789381" ], "contradicting_event_ids": [], "accepted_proof_kinds": [ "observed" ], "evidence_proof_kinds": [ "observed" ], "latest_observation_at": "2026-09-06T08:50:41.371Z", "freshness": "fresh" }, { "path": "/signals/1", "supporting_event_ids": [ "sha256:42da00c1f71397c555a762f18a03d237d4d4b07062b2bc70ed2ea85842813d87", "sha256:f78531bd9910e690c5c5b4b8486c1dc66719c252eb49a6660046ef3a74f00034" ], "contradicting_event_ids": [], "accepted_proof_kinds": [ "observed" ], "evidence_proof_kinds": [ "observed" ], "latest_observation_at": "2026-09-06T08:50:58.573Z", "freshness": "fresh" }, { "path": "/signals/2", "supporting_event_ids": [ "sha256:b27badccf319d04348896c6564bc800a4951556c77fa605f028df232032811a3" ], "contradicting_event_ids": [], "accepted_proof_kinds": [ "observed" ], "evidence_proof_kinds": [ "observed" ], "latest_observation_at": "2026-09-06T08:50:01.663Z", "freshness": "fresh" }, { "path": "/signals/3", "supporting_event_ids": [ "sha256:f9173c2d4ae8f2906f9c31620998038597d24e9ec2316609a4bcbd43aec66c27", "sha256:faec2e7d89bf97271b4e8f21bfba5c3c9122226aa6dd5a9c74e39c785c5ea099" ], "contradicting_event_ids": [], "accepted_proof_kinds": [ "observed" ], "evidence_proof_kinds": [ "observed" ], "latest_observation_at": "2026-09-06T08:50:39.491Z", "freshness": "fresh" }, { "path": "/signals/4", "supporting_event_ids": [ "sha256:3caad9fec460af742fbf83c23721460c7b460e7a15cca7c0a5e12ce27a8fcb89" ], "contradicting_event_ids": [], "accepted_proof_kinds": [ "observed" ], "evidence_proof_kinds": [ "observed" ], "latest_observation_at": "2026-09-06T08:50:41.371Z", "freshness": "fresh" }, { "path": "/signals/5", "supporting_event_ids": [ "sha256:0c1d910fb6617e9c852459a99846648d5d33e86a362ff7d4f1f656d18497fc73", "sha256:ad5698badec9d1efad9ec6d964eb9c00d15cddb7ae6108f50eb43a06c40486a1" ], "contradicting_event_ids": [], "accepted_proof_kinds": [ "observed" ], "evidence_proof_kinds": [ "observed" ], "latest_observation_at": "2026-09-06T08:50:39.491Z", "freshness": "fresh" }, { "path": "/signals/6", "supporting_event_ids": [ "sha256:7de490d95f861982b4fb5f8b177cd040243d06e6c420f8764dc3ddbb3a0e8707" ], "contradicting_event_ids": [], "accepted_proof_kinds": [ "observed" ], "evidence_proof_kinds": [ "observed" ], "latest_observation_at": "2026-09-06T08:50:45.448Z", "freshness": "fresh" }, { "path": "/signals/7", "supporting_event_ids": [ "sha256:91d645a0defe5d4a9bb408599efcb6382ad5cf19315d9eae6a064e39494589ff" ], "contradicting_event_ids": [], "accepted_proof_kinds": [ "observed" ], "evidence_proof_kinds": [ "observed" ], "latest_observation_at": "2026-09-06T08:50:45.448Z", "freshness": "fresh" }, { "path": "/signals/8", "supporting_event_ids": [ "sha256:198bafe58d7a148bbee175d995f5457a965b1e6a455ae89d047dbac110685f00", "sha256:397566542c9c887160c60584b342c7a9ca639529822fa66852b53248c0daf08a", "sha256:52d3d9f58d32b0388524559d9b6157a45e2a4eaf812f22083b59b7e06c22cd74", "sha256:b1f8b7d419584e510ea30a58a2d417e9d5ba633352c8e9721c7a2c8ad60e98a7", "sha256:da95bb89f569ae9796a3546aff29ddf6f396e3e9aced0635641e76df4b83ff2f" ], "contradicting_event_ids": [], "accepted_proof_kinds": [ "observed" ], "evidence_proof_kinds": [ "observed" ], "latest_observation_at": "2026-09-06T08:52:02.607Z", "freshness": "fresh" }, { "path": "/signals/9", "supporting_event_ids": [ "sha256:06a5065300862b4a65fcbe609da9fb3aa2a84f3ad36ac596a4c579508535e930" ], "contradicting_event_ids": [], "accepted_proof_kinds": [ "observed" ], "evidence_proof_kinds": [ "observed" ], "latest_observation_at": "2026-09-06T08:50:39.491Z", "freshness": "fresh" }, { "path": "/signals/10", "supporting_event_ids": [ "sha256:203095c9f6da14a51b29641839ca6b2dedd1f2793ef1de46f07143f2c0a2b82e" ], "contradicting_event_ids": [], "accepted_proof_kinds": [ "observed" ], "evidence_proof_kinds": [ "observed" ], "latest_observation_at": "2026-09-06T08:51:51.917Z", "freshness": "fresh" }, { "path": "/signals/11", "supporting_event_ids": [ "sha256:b0c3f7f868e56ba67fb683391242dcbfa0c8862343302b85ef61f8b69afd237f" ], "contradicting_event_ids": [], "accepted_proof_kinds": [ "observed" ], "evidence_proof_kinds": [ "observed" ], "latest_observation_at": "2026-09-06T08:51:19.009Z", "freshness": "fresh" }, { "path": "/signals/12", "supporting_event_ids": [ "sha256:3154a257820a7136452bc839a96417a2c3717830b6a4482d9674727d155bfaf5", "sha256:4242b10dfc7f2c56abcde21245a68c648f27d8860da0d11f7280b97f5c8aab19" ], "contradicting_event_ids": [], "accepted_proof_kinds": [ "observed" ], "evidence_proof_kinds": [ "observed" ], "latest_observation_at": "2026-09-06T08:50:58.573Z", "freshness": "fresh" }, { "path": "/signals/13", "supporting_event_ids": [ "sha256:ba8d83b0aeadcd25e253dcf682c67b8cacc95728c3dcfac114fd9fac475fa862", "sha256:f123d618e0cfc2db1c395f4b597021cd4eba27dd721a58b40bb1b489c1fdf5a3" ], "contradicting_event_ids": [], "accepted_proof_kinds": [ "observed" ], "evidence_proof_kinds": [ "observed" ], "latest_observation_at": "2026-09-06T08:51:19.009Z", "freshness": "fresh" }, { "path": "/signals/14", "supporting_event_ids": [ "sha256:f4ce32018755fcf6f87f04b1d2ccb0c6799104a49955b46f3b55126560e6266d" ], "contradicting_event_ids": [], "accepted_proof_kinds": [ "observed" ], "evidence_proof_kinds": [ "observed" ], "latest_observation_at": "2026-09-06T08:51:19.009Z", "freshness": "fresh" }, { "path": "/signals/15", "supporting_event_ids": [ "sha256:fd8fbfa9a5e5a7ef4da3c93f89ff49a6ef48f35407bf6a04fc4a574d48864920" ], "contradicting_event_ids": [], "accepted_proof_kinds": [ "observed" ], "evidence_proof_kinds": [ "observed" ], "latest_observation_at": "2026-09-06T08:50:39.491Z", "freshness": "fresh" }, { "path": "/signals/16", "supporting_event_ids": [ "sha256:0c1744b4ffffcb09e5ee7c7d758d44e8cc633b2c6532e141ae8a41952168a516", "sha256:81b27ecb544b420680c127ee16ea44ac449f1f984c4d0275d8637126cc40b611" ], "contradicting_event_ids": [], "accepted_proof_kinds": [ "observed" ], "evidence_proof_kinds": [ "observed" ], "latest_observation_at": "2026-09-06T08:51:37.594Z", "freshness": "fresh" }, { "path": "/signals/17", "supporting_event_ids": [ "sha256:3bffa73bc464bfa7bde6f3777631faaad75753dd6b77e615723994df436749d6", "sha256:7c5601ccf3060dc1e1e4c4e116ebb717aaee1ac878d46d808d73eb0717006b5c" ], "contradicting_event_ids": [], "accepted_proof_kinds": [ "observed" ], "evidence_proof_kinds": [ "observed" ], "latest_observation_at": "2026-09-06T08:51:37.594Z", "freshness": "fresh" }, { "path": "/signals/18", "supporting_event_ids": [ "sha256:01a3e3db5d52eabcc1313e9a758fe8f7a4c34a29ac3b38c203f8fb7ddc67e76e", "sha256:0b46476cca3389acb783d31cff1310d18c03b0eebd034f02d2a1bc97690827ad", "sha256:4ad5208bd873577f16b785d906f82de98a0fc73b6cd009f9b4da899b3dab90fd", "sha256:63683e7a4677298574a5816a64270c8f71ec6a2f33a80d38b3ca8b70d9d84ede", "sha256:84e2ccd489cca923297a61cc83f4bf222f4d3988fbb86ed38575d1cdbc9b021b", "sha256:8d281315ee01ba289cd84baae8e2b7015c919668e7d5c41bb7bb2ef37f9ee426", "sha256:9f6b846ca7b11dec10f7f09425b27e447b7f508755aa99d987e6b05e28edebe6", "sha256:a36b3376a532faf5b6b5575f242e24b3ae0ef245486bde15f0a37ccfb34b988d", "sha256:c8eb20f5550cc60c3ed87057ce93edc60a2da54acb51717447825b7624c790e5", "sha256:eb0f996d67376ad0737373e59072aefc317c477f6c0db2dad47618351182c196" ], "contradicting_event_ids": [], "accepted_proof_kinds": [ "observed" ], "evidence_proof_kinds": [ "observed" ], "latest_observation_at": "2026-09-06T08:51:37.594Z", "freshness": "fresh" }, { "path": "/signals/19", "supporting_event_ids": [ "sha256:d3cb7581feff100d4d0c462acdaa0e9d98bc7f351d78dc87417df30ac81475c6" ], "contradicting_event_ids": [], "accepted_proof_kinds": [ "observed" ], "evidence_proof_kinds": [ "observed" ], "latest_observation_at": "2026-09-06T08:50:39.491Z", "freshness": "fresh" }, { "path": "/signals/20", "supporting_event_ids": [ "sha256:1bf0db82c083e433436ba7872701a3f59603447e0068a64f7c6846a35221281c", "sha256:6f6dc5fcc2c71c768498b613b4d242db3314a1c7f24db4676e5464b91e0e959e" ], "contradicting_event_ids": [], "accepted_proof_kinds": [ "observed" ], "evidence_proof_kinds": [ "observed" ], "latest_observation_at": "2026-09-06T08:50:02.790Z", "freshness": "fresh" }, { "path": "/signals/21", "supporting_event_ids": [ "sha256:71de6721858ee67fff12858afbdc1048584b62f13251abdf7b2c209b78b31efb" ], "contradicting_event_ids": [], "accepted_proof_kinds": [ "observed" ], "evidence_proof_kinds": [ "observed" ], "latest_observation_at": "2026-09-06T08:50:39.491Z", "freshness": "fresh" }, { "path": "/signals/22", "supporting_event_ids": [ "sha256:12e4ff0a9ddeebeecf6534d0db7119c836b5db9668d5d251e3721fbc04af0ee6", "sha256:206a07280872c5d257f845cab1740fdadb016de26dddb000c3bc53624e338399", "sha256:24b6984c82e7b11250ba41f49cb4d12c3e9f85a5e35f2d0be04ab050fbdba70e", "sha256:a9b29c61ca5e4744b54a9c64bd29b196586b6e50e747159d9c0a7f1d82406e8a", "sha256:af702a183983cc66296d758509904e26f1ffb36a9ed25ca3fd47f59fd401e2ce", "sha256:b7e3ce12ceef1097e3640059879d202e7dda129f051da9311c790d8e414d247f", "sha256:c74493741ba9d544ee81463733ceae6ac41efc41a51672820473c4b279c63e5e", "sha256:f1f76354ebf0c76a12c7540c989f6799e93479a262919d0a00f8e03ccd28383a" ], "contradicting_event_ids": [], "accepted_proof_kinds": [ "observed" ], "evidence_proof_kinds": [ "observed" ], "latest_observation_at": "2026-09-06T08:51:37.594Z", "freshness": "fresh" }, { "path": "/signals/23", "supporting_event_ids": [ "sha256:052f0d234db938524b8d4003b2eb07430d6b371e9fdf8277ccdeb865edc7b4fd", "sha256:139345d3e7dcb8121c2f97126ee66de571a242cd7710f4f509a05526be48f314", "sha256:5bec0cc1334f12839fc3dcb6865506125f8e5b940c77f30258e637fb3c0f7fbd", "sha256:6cd121de72e1bedeaad4b297a1adeaa92c45b201749e85a4db31758f6c71f5f6", "sha256:6e5b3ae7f7bd5ce2b93103ff95ef5465bfba634828a68ea4549353b32d9aee0e", "sha256:85b49178b939457548ba2a5476900185807d231aa798bbdd3dc814f29cb6ae3b", "sha256:950d020be95b103d4f1b84af4eefa8237e259bbe0eddfb8f1c8ea44102ab759a", "sha256:a75041377c70abaf8a890a39b77f33a22abf629c7a7685282adfcce269194f8f" ], "contradicting_event_ids": [], "accepted_proof_kinds": [ "observed" ], "evidence_proof_kinds": [ "observed" ], "latest_observation_at": "2026-09-06T08:51:37.594Z", "freshness": "fresh" } ], "vendor_attestation": { "status": "none" } }, "canonical_url": "https://sourcey.com/log/aws/agent-readiness/aws-cloud/api-resource-management", "projection_digest": "sha256:812d15400a8fa09f9b14c039320a0db139736ff63240cae4dcee57697543a12f" } } }