The AWS Serverless Application Model (SAM) Transformer is a Python library that converts SAM templates into AWS CloudFormation templates. It serves as the core transformation engine for the AWS SAM CLI, enabling developers to define serverless applications using SAM syntax that gets expanded to standard CloudFormation resources. The system follows a modular architecture with distinct layers for parsing, validation, transformation, and resource generation, featuring an extensible plugin system for adding custom transformation logic. Key capabilities include intrinsic function resolution (!Ref, !GetAtt, !Sub), globals and conditions processing, policy template expansion, and resource-specific transformations for AWS services like Lambda, API Gateway, Step Functions, and more.

s2n-tls is a C99 implementation of the TLS/SSL protocols designed by AWS for simplicity, small size, and security. It supports TLS 1.2 and 1.3, including features like 0-RTT early data, session tickets, post-quantum KEMs (ML-KEM, ML-DSA), and QUIC transport integration. The library provides a public C API (api/s2n.h) and multiple libcrypto backends (OpenSSL, AWS-LC, BoringSSL, LibreSSL). Extensive formal verification (CBMC, SAW, SideTrail) and fuzz testing ensure memory safety and constant-time execution. The architecture is highly modular with a stuffer buffer abstraction, blob/array utilities, a table-driven TLS extension framework, and a robust error-handling macro system. Rust bindings are first-class, offering safe wrappers (s2n-tls), async Tokio integration (s2n-tls-tokio), an HTTP client connector for Hyper (s2n-tls-hyper), and a metrics subscriber for handshake analysis. The library is used by AWS services like S3 and KMS, and includes interoperability tests against OpenSSL, GnuTLS, Java, and rustls. It is actively maintained with a sophisticated CI pipeline covering unit, integration, fuzz, formal proof, and performance regression tests across multiple platforms and libcrypto versions.

This repository is the official AWS Toolkit extension for Visual Studio Code, providing deep integration with Amazon Web Services directly within the IDE. It enables developers to browse and manage AWS resources (S3, Lambda, CloudFormation, EC2, ECS, IoT, and dozens more), invoke Lambda functions, deploy serverless applications using AWS SAM, debug Lambda functions locally, and access Amazon Q (formerly CodeWhisperer) for AI-powered code suggestions, chat, security scanning, and code transformation. The codebase is a large monorepo organized into packages including the core extension logic, generated streaming API clients, a custom ESLint plugin, and webview-based UIs built with Vue.js. The architecture follows a modular activation pattern with centralized command registration, tree view providers for resource exploration, a wizard/prompter framework for multi-step user flows, and a telemetry system for operational metrics. It supports both Node.js and web (browser) extension targets. Despite its size, the codebase maintains consistent patterns, extensive test coverage, and clear separation of concerns, making it a well-crafted enterprise-grade IDE extension.

This repository is the open-source CLI client for Amazon Q Developer (formerly CodeWhisperer), now deprecated in favor of the closed-source Kiro CLI. It is a Rust workspace with approximately 2000 files, building two main binaries: `q` (terminal chat assistant) and `qchat` (legacy chat binary). The codebase is dominated by auto-generated AWS SDK client crates (amzn-codewhisperer-client, amzn-codewhisperer-streaming-client, amzn-qdeveloper-streaming-client, amzn-consolas-client, amzn-toolkit-telemetry-client), which are Smithy-generated and checked in. Hand-written code includes the chat CLI interactive loop, an agent framework with MCP (Model Context Protocol) support, a semantic search client using local ONNX models (MiniLM) and BM25 indexing, authentication (OIDC with device grant flow), telemetry, and an OS abstraction layer. The architecture is essentially a monolithic CLI application with multiple supporting libraries. About 90% of the source files are generated code, which means the hand-crafted components are relatively small. The project was previously actively maintained but is now effectively archived; the README states only critical security fixes will be accepted.

This repository provides a comprehensive CLI toolkit and programmatic interface (Python SDK and notebook clients) for creating, deploying, managing, monitoring, and evaluating AI agents on Amazon Bedrock AgentCore. The system supports multiple agent frameworks (Strands, LangChain/LangGraph, CrewAI, AutoGen, OpenAI Agents, Google ADK) and infrastructure-as-code options (CDK, Terraform). Key capabilities include project scaffolding via Jinja2 templates, runtime lifecycle management (configure, launch, destroy, invoke), memory management (short-term/long-term, semantic, user preference), observability (CloudWatch-based trace and log querying with OpenTelemetry span parsing), evaluation (LLM-as-a-judge with built-in and custom evaluators), policy engine CRUD, gateway management (MCP, API key, Cognito OAuth), and identity federation setup. The codebase is well-structured with a clear three-layer architecture (CLI -> operations -> services), extensive test coverage, and consistent error handling. However, the project is explicitly deprecated in favor of the @aws/agentcore NPM CLI, meaning future development is minimal and users are encouraged to migrate. Despite the deprecation, the reusable abstractions (e.g., CloudWatch query builder, trace processor, strategy models, configuration schemas) demonstrate solid software craftsmanship.

This repository is the official AWS SDK for Kotlin, a multi-platform SDK providing generated service clients for all AWS services, runtime libraries for credential resolution, HTTP signing, retries, and telemetry, as well as a high-level DynamoDB mapper with compile-time schema generation. The architecture is a multi-module Gradle project with code generation from Smithy models (via smithy-kotlin), runtime modules (aws-config, aws-http, aws-core, aws-endpoint, telemetry-cloudwatch), and a high-level library layer (hll/ddb-mapper). Key entry points for users are the generated service clients (e.g., S3Client.create), credential providers (DefaultChainCredentialsProvider), and the DynamoDbMapper. The SDK supports JVM, Android, and Kotlin Multiplatform. The codebase demonstrates strong engineering practices: extensive unit and integration tests, binary compatibility validation, a type-safe expression DSL for DynamoDB, a composable credential provider chain with caching, and a clean interceptor pipeline for the DynamoDB mapper. It is actively maintained with frequent releases and a well-defined versioning policy.