internal/

Package acm emulates AWS Certificate Manager (JSON 1.1).

Package amp is the data plane of Amazon Managed Service for Prometheus: it stores the samples that arrive by remote write (snappy-compressed protobuf) and answers the Prometheus query API for them.

Package apigateway emulates Amazon API Gateway: the v1 (REST APIs) and v2 (HTTP and WebSocket APIs) management APIs over REST-JSON, and the execute-api data plane that serves deployed APIs from Lambda functions, HTTP backends and mocks.

Package appautoscaling emulates Application Auto Scaling over JSON 1.1: scalable targets, step and target tracking policies (CloudWatch alarms run them, through Auto Scaling, which owns the policy ARN namespace), scheduled actions, activities and tags.

Package appconfig emulates AWS AppConfig and AppConfigData in one service: both are REST-JSON signed "appconfig", and AppConfigData owns /configurationsessions and /configuration.

Package appsync emulates AWS AppSync GraphQL APIs: the REST-JSON control plane (APIs, API keys, schemas, data sources, functions, resolvers), the GraphQL endpoint on <apiId>.appsync-api.localhost that runs VTL and APPSYNC_JS resolvers against Lambda, DynamoDB, HTTP, RDS and NONE data sources, and real-time subscriptions on <apiId>.appsync-realtime-api.localhost.

Package athena emulates Amazon Athena over JSON 1.1: workgroups, named queries, prepared statements, data catalogs and query executions.

Package autoscaling emulates Amazon EC2 Auto Scaling over the Query protocol: groups launching from launch templates, mixed instances policies or launch configurations, kept at their desired capacity through EC2 (hub.Call) and registered with ELBv2 target groups; simple, step and target tracking policies run by CloudWatch alarms or ExecutePolicy; scheduled actions, lifecycle hooks (stored), suspended processes, tags and warm pools (metadata).

Package batch emulates AWS Batch over REST-JSON: compute environments, job queues, scheduling policies, job definitions and jobs.

Package cloudformation emulates AWS CloudFormation (Query protocol): stacks, change sets, YAML/JSON templates with intrinsic functions, conditions, mappings, rules and SSM-typed parameters, exports, nested stacks and custom resources, deploying through pogi's own services.

Package cloudfront emulates Amazon CloudFront (REST-XML, global): distributions with their invalidations, tags and monitoring subscriptions; cache, origin request and response headers policies (the managed ones built in); origin access controls and identities; key groups and public keys; and CloudFront Functions.

Package cloudtrail emulates AWS CloudTrail (JSON 1.1): trails with event and insight selectors, event data stores as metadata, LookupEvents built from pogi's request log, and logging trails that deliver gzipped log files to S3 and CloudWatch Logs.

Package cloudwatch emulates Amazon CloudWatch metrics, alarms and dashboards over every protocol its SDKs speak: RPCv2-CBOR (Go, Java), JSON 1.0 (Python, JS, CLI) and the legacy Query protocol.

Package codebuild emulates AWS CodeBuild over JSON 1.1: projects (with report groups and webhooks as metadata) and builds that run real buildspecs in Docker, with the source from S3, git or none, logs in CloudWatch Logs and artifacts in S3.

Package codedeploy emulates AWS CodeDeploy (JSON 1.1): applications, deployment groups, deployment configs and deployments.

Package codepipeline emulates AWS CodePipeline (JSON 1.1): V1 and V2 pipelines with variables and namespaces, and executions that run their stages through pogi's own services: S3 and ECR sources, CodeBuild builds, CloudFormation, S3, CodeDeploy and ECS deploys, manual approvals, and Lambda and Step Functions invokes.

Package cognito emulates Amazon Cognito user pools over JSON 1.1: pools, app clients, users, groups, domains and resource servers; sign-up, confirmation and recovery codes kept in an outbox; password, SRP, refresh, custom and admin auth with challenges; RS256 JWTs with JWKS and OIDC discovery; a minimal hosted login page and OAuth2 endpoints; and the user pool Lambda triggers.

Package cognitoidentity emulates Amazon Cognito identity pools (JSON 1.1): pools with their roles and role mappings; identities that sign in with Cognito user pool ID tokens (checked against pogi's pool JWKS), OIDC tokens (checked against the issuer's JWKS), developer logins, or none at all; STS credentials for the role the pool picks; and RS256 OpenID tokens, whose JWKS is served at /_aws/cognito-identity/.well-known/jwks_uri.

Package dynamodb emulates Amazon DynamoDB and DynamoDB Streams over JSON 1.0: tables with global and local secondary indexes, every expression type, conditional writes, batches, transactions, TTL expiry and change streams.

Package ec2 emulates Amazon EC2 over the EC2 Query protocol: regions and zones, a default VPC per region (subnets, security group, internet gateway, main route table and network ACL), VPCs, subnets, security groups and rules, tags, key pairs, an AMI catalog, instances (containers when an engine runs, see instances.go) with their metadata service (imds.go), launch templates, EBS volumes and instance types.

Package ecr emulates Amazon ECR: the control plane (JSON 1.1) with repositories, images, policies and auth tokens, and the OCI registry that docker push and pull use (registry.go).

Package ecs emulates Amazon ECS (JSON 1.1): clusters, capacity providers, task definitions, tasks, services and container instances.

Package eks emulates Amazon EKS (REST-JSON).

Package elasticache emulates Amazon ElastiCache over the Query protocol and runs the real thing: Redis, Valkey and Memcached cache clusters, replication groups and serverless caches start as Docker containers on localhost.

Package elbv2 emulates Elastic Load Balancing v2 over the Query protocol: application, network and gateway load balancers, listeners and rules, target groups with health checks, and a data plane.

Package events emulates Amazon EventBridge over JSON 1.1: event buses, rules with event patterns and schedules, targets with input transformation, archives and replays, connections and API destinations.

Package firehose emulates Amazon Data Firehose over JSON 1.1.

Package fis emulates AWS Fault Injection Service (REST-JSON): experiment templates, and experiments whose actions drive pogi's chaos rules (API errors for the calls of target IAM roles, Lambda invocation errors and delays) or stop EC2 instances and ECS tasks, halted by CloudWatch alarm stop conditions.

Package generic emulates AWS services from their botocore models.

Package glue emulates the AWS Glue Data Catalog over JSON 1.1: databases, tables with versions, partitions with expression filters, and crawlers that infer tables from CSV, JSON and Parquet files in S3.

Package iam emulates AWS IAM over the Query protocol: users, access keys, groups, roles, managed and inline policies, instance profiles, identity providers, server certificates and account settings.

Package iot emulates AWS IoT Core.

Package kafka emulates Amazon MSK (REST-JSON).

Package kinesis emulates Amazon Kinesis Data Streams over JSON 1.1: streams and shards, records routed by the MD5 of their partition key, sequence numbers, shard iterators, retention, resharding, consumers with SubscribeToShard event streams, tags and resource policies.

Package kms emulates AWS KMS over JSON 1.1 with real stdlib cryptography: symmetric (AES-256-GCM), RSA, ECC and HMAC keys, aliases, key policies, tags, rotation and scheduled deletion.

Package lambda emulates AWS Lambda (REST-JSON): functions, versions, aliases, layers, permissions, function URLs and event source mappings.

Package logs emulates Amazon CloudWatch Logs over JSON 1.1: log groups and streams, events with retention, filter patterns, metric and subscription filters, tags and a Logs Insights subset.

Package memorydb emulates Amazon MemoryDB over JSON 1.1.

Package mq emulates Amazon MQ (REST-JSON): brokers, their users and configurations.

Package opensearch emulates Amazon OpenSearch Service (REST-JSON, 2021-01-01) and the legacy Elasticsearch Service API (2015-01-01) over one store of domains.

Package organizations emulates AWS Organizations (JSON 1.1): one organization per management account, with a root, OUs, member accounts, policies and their attachments, invitations, delegated administrators and trusted service access.

Package pattern implements EventBridge event patterns, which SNS filter policies (and Lambda event filters) share: literals, prefix, suffix, anything-but, numeric, exists, equals-ignore-case, wildcard, cidr and $or.

Package pipes emulates Amazon EventBridge Pipes (REST-JSON): pipes poll SQS, Kinesis and DynamoDB Streams, filter with event patterns, enrich through Lambda, Step Functions, API Gateway or API destinations, and deliver to the targets EventBridge rules reach.

Package pricelist is pogi's small embedded AWS price list: on-demand prices for a dozen EC2 instance types, S3, Lambda, DynamoDB, RDS and SQS, in a few regions.

Package rds emulates Amazon RDS over the Query protocol and runs the real thing: PostgreSQL, MySQL and MariaDB instances and Aurora clusters start as Docker containers published on localhost.

Package rdsdata emulates the RDS Data API (REST-JSON): SQL statements, batches and transactions on the databases of pogi's Aurora clusters, with credentials from Secrets Manager.

Package redshift emulates Amazon Redshift over the Query protocol.

Package redshiftdata emulates the Amazon Redshift Data API over JSON 1.1.

Package redshiftserverless emulates Amazon Redshift Serverless over JSON 1.1.

Package resourceexplorer emulates AWS Resource Explorer (REST-JSON): indexes, views and search, in the Resource Explorer query language, over the resources that every service lists through tagging.Tagged.

Package route53 emulates Amazon Route 53 (REST-XML, global): hosted zones with their SOA and NS records, record set changes, tags and health checks.

Package s3 emulates Amazon S3 (REST-XML): buckets, objects, versioning, multipart uploads, checksums, aws-chunked bodies, CORS, presigned URLs, bucket configuration and event notifications.

Package s3io reads and writes objects in pogi's own S3 for the services that store files there (Transfer Family, DataSync, S3 Tables).

Package s3vectors emulates Amazon S3 Vectors (REST-JSON): vector buckets with their policies, indexes, and vectors with exact nearest-neighbour queries and metadata filters.

Package scheduler emulates Amazon EventBridge Scheduler (REST-JSON): schedule groups and one-time, rate and cron schedules whose targets are reached through the hub.

Package secretsmanager emulates AWS Secrets Manager over JSON 1.1: secrets with versions and staging labels, rotation through a Lambda function, random passwords, resource policies, tags, replica metadata and scheduled deletion.

Package servicediscovery emulates AWS Cloud Map (JSON 1.1): HTTP, private DNS and public DNS namespaces (the DNS ones are Route 53 hosted zones), services, instances (with their A, AAAA, CNAME and SRV records in Route 53), custom health, DiscoverInstances, tags, and operations that succeed at once.

Package ses emulates Amazon SES v1 (Query) and SES v2 (REST-JSON under /v2/email/) in one service.

Package sns emulates Amazon SNS over the Query protocol: standard and FIFO topics, subscriptions with filter policies and raw delivery, fan-out to SQS, Lambda, Firehose and HTTP(S) endpoints, and an outbox for email, SMS and mobile push, which have no local destination.

Package sqs emulates Amazon SQS over JSON 1.0 and the legacy Query protocol: standard and FIFO queues, visibility timeouts, long polling, delays, dead-letter queues and redrive, batches and tags.

Package ssm emulates AWS Systems Manager over JSON 1.1.

Package stepfunctions emulates AWS Step Functions over JSON 1.0: state machines, activities and an ASL interpreter that runs each execution in the background (Lambda and service integrations, callbacks, Retry/Catch, Parallel, Map, intrinsics) and records its full history.

Package sts emulates AWS STS (Query protocol).

Package tagging emulates the Resource Groups Tagging API (JSON 1.1).

Package timestreaminfluxdb emulates Amazon Timestream for InfluxDB over JSON 1.0: DB instances run InfluxDB 2 in Docker, set up with the instance's user, organization and bucket, and their auth parameters (with the admin token) go to a Secrets Manager secret, as on AWS.

Package transfer is the SFTP server of AWS Transfer Family: users log in with an SSH key and see S3 objects as files.

Package verifiedpermissions emulates Amazon Verified Permissions (JSON 1.0) with real Cedar evaluation (cedar-go): policy stores, Cedar JSON schemas (STRICT stores validate policies against them), static and template-linked policies, policy templates and Cognito identity sources.

Package aci emulates Azure Container Instances: the management plane of Microsoft.ContainerInstance/containerGroups (an arm.Provider) and the containers of a group, which run in Docker: image, command, environment, ports, memory and CPU limits, restart policy.

Package acr emulates Azure Container Registry: the management plane of Microsoft.ContainerRegistry/registries (an arm.Provider) and the sign-in endpoints of `az acr login`.

Package aks is the Azure Resource Manager management plane of Azure Kubernetes Service: Microsoft.ContainerService/managedClusters and their agentPools.

Package apim emulates Azure API Management: the management plane (services, APIs with operations, policies and schemas, backends, products with their APIs and policies, subscriptions with keys, named values, and the service-level policy) as resource-manager Providers, and the gateway that serves the APIs.

Package appconfig emulates the Azure App Configuration data plane (REST, api-version 1.0 to 2023-10-01): key-values with labels, tags, content types, ETag conditions, locks, history (revisions and Accept-Datetime), snapshots and feature flags (key-values under .appconfig.featureflag/), plus a store registry with access keys and connection strings.

Package appservice emulates Azure App Service web apps: the sites of Microsoft.Web/sites that are not function apps, and their configuration children (config/web, appsettings, connectionstrings, publishing credentials, ...).

Package arm is pogi's Azure Resource Manager control plane.

Package armres is what the resource-manager Providers of the Azure services share: a store of resources as ARM returns them, and helpers for the endpoints, keys and in-process calls that Providers need.

Package armtest is what tests of Azure management planes share: a pogi with the Resource Manager and the sign-in services, and client options that trust its CA and sign in with client credentials.

Package blob emulates Azure Blob Storage on Azurite's port (10000): containers, block/append/page blobs, block lists, ranges, metadata, properties, tags, leases, snapshots, copies and CORS.

Package compute emulates the Azure Compute management plane: virtual machines, managed disks, availability sets and SSH public keys, all ARM Providers, and the instance metadata service (IMDS) of virtual machines.

Package containerapps emulates Azure Container Apps: the management plane of Microsoft.App/managedEnvironments, containerApps (with their revisions) and jobs (with their executions), all arm.Providers, and the containers.

Package cosmos emulates Azure Cosmos DB for NoSQL in gateway mode: the database account, databases, containers (hash partition keys, unique keys, TTL), items with ETags and partial updates, SQL queries with paging and query plans, transactional batches, the change feed, throughput offers, and stored procedure/trigger/UDF definitions.

Package databases is the Azure Resource Manager management plane of Azure SQL, PostgreSQL and MySQL servers and Cache for Redis.

Package email emulates Azure Communication Services Email: POST /emails:send takes an EmailMessage and answers 202 with an operation-location; GET /emails/operations/<id> reports Succeeded.

Package entra emulates Microsoft Entra ID's sign-in side (login.microsoftonline.com on pogi's main port) and Azure Managed Identity: the OAuth2 token endpoints (client credentials with a secret or a client assertion, password, refresh token, device code), OIDC discovery and the JWKS, and the token endpoints that VMs and App Service hand to managed identities (IMDS and IDENTITY_ENDPOINT).

Package eventgrid emulates Azure Event Grid: custom topics, domains (with domain topics) and system topics, event subscriptions with filters, retries and dead-lettering, and the data plane that publishes events (POST /api/events, in the Event Grid or CloudEvents schema).

Package eventhubs emulates Azure Event Hubs: namespaces, event hubs with partitions, consumer groups and retention, over AMQP 1.0 (the official azeventhubs SDK) with an optional Kafka endpoint on Redpanda.

Package files emulates Azure Files over REST, at <account>.file.localhost on pogi's main port: shares (quota, metadata), directories and files with ranges.

Package functions emulates Azure Functions apps by running the real Functions host.

Package generic is the Azure resource-manager engine: it serves any listed resource type through ARM from what Microsoft's REST API specs say about it, the way internal/aws/generic serves AWS services from their models.

Package graph emulates the part of Microsoft Graph that the azuread Terraform provider and `az ad` use: applications, service principals, users and groups (create, read, update, delete, filter), client secrets (addPassword, removePassword), owners and members, /me, /organization and /domains, on /v1.0 and /beta of pogi's main port.

Package keyvault emulates the Azure Key Vault data plane: secrets, keys (RSA, EC and oct, with real stdlib cryptography) and self-signed certificates, with versions, soft delete, recovery, purge and backup/restore.

Package monitor emulates Azure Monitor: Log Analytics workspaces (with custom tables), data collection endpoints and rules, the Logs Ingestion API, the Log Analytics query API on a KQL subset (see kql.go), Application Insights components with telemetry ingestion, metrics, and stored action groups and alert rules.

Package network emulates the Azure Virtual Network management plane: virtual networks and subnets, network security groups and rules, public IP addresses, network interfaces, route tables and routes, NAT gateways, and Private DNS zones with their record sets and virtual network links.

Package odata reads an OData $filter and applies it to a JSON object.

Package queue emulates Azure Queue Storage on Azurite's port (10001): queues with metadata and access policies, and messages with visibility timeouts, TTLs, pop receipts, peek, update and clear.

Package rbac is Azure role-based access control for pogi: with `pogi start --iam soft|strict` every request carrying a bearer token of a service principal or managed identity that the user created is checked against its role assignments (a role definition's actions and notActions for Resource Manager calls, dataActions and notDataActions for the data plane).

Package servicebus emulates Azure Service Bus: queues, topics and subscriptions with SQL and correlation rules, peek-lock and receive-and-delete, settlement, dead-lettering, sessions, scheduled and deferred messages, duplicate detection, forwarding, lock renewal, and the ATOM management API that azservicebus/admin speaks.

Package signalr emulates Azure SignalR Service in the default and serverless shapes that need no app server: clients negotiate (POST /client/negotiate?hub=<hub>), then connect over WebSocket with the SignalR JSON hub protocol; apps drive them through the REST API (/api/v1/hubs/<hub>/...

Package table emulates Azure Table Storage on Azurite's port (10002): tables, entities with typed (EDM) properties, insert, update, merge, upsert and delete with ETags, OData $filter/$select/$top queries with continuation tokens, and entity group transactions ($batch).

Package dockertest fakes the Docker Engine API, so tests of services that run containers pass without an engine.

Package artifactregistry emulates Artifact Registry (v1) over gRPC and its REST mirror: repositories (create, get, list, update, delete, IAM) and the Docker images in them.

Package bigquery emulates BigQuery's REST API (v2): datasets, tables with nested schemas, views, streaming inserts, and jobs that query, load from and extract to Cloud Storage, and copy.

Package bigtable emulates Cloud Bigtable.

Package compute emulates Compute Engine: the REST API at /compute/v1/projects/<p>/...

Package datastore emulates Cloud Firestore in Datastore mode over gRPC (google.datastore.v1.Datastore) and its REST mirror, like the official emulator: point clients at it with DATASTORE_EMULATOR_HOST=localhost:7644 (any credentials are accepted).

Package eventarc emulates Google Eventarc (v1) over gRPC and its REST mirror: triggers (long-running operations that finish at once), channels, channel connections and providers.

Package firebaseauth emulates Firebase Authentication like the official Auth emulator: point clients at it with FIREBASE_AUTH_EMULATOR_HOST=localhost:7644.

Package firestore emulates Cloud Firestore in Native mode over gRPC, like the official emulator: point clients at it with FIRESTORE_EMULATOR_HOST=localhost:7644 (any credentials are accepted).

Package functions emulates Cloud Functions (v2 API) over gRPC and its REST mirror, and runs Python functions with the Functions Framework: natively when it is installed (see "pogi lambda-sdks" or put functions-framework on PATH), otherwise in a python container.

Package gapi holds what Google Cloud services share: the REST mirror that maps JSON/HTTP calls onto a service's gRPC handlers, Google-style errors, and the long-running operations service (google.longrunning.Operations).

Package generic serves Google Cloud REST APIs from their discovery documents, the way internal/aws/generic serves AWS services from their models.

Package gke emulates Google Kubernetes Engine (container.googleapis.com v1 and v1beta1) over gRPC and its REST mirror: clusters, node pools and GKE's own Operation resource.

Package iam emulates Google Cloud IAM over gRPC and REST.

Package kms emulates Cloud KMS over gRPC and its REST mirror, with real cryptography: key rings, crypto keys (symmetric, RSA and EC signing, RSA decryption, HMAC), versions (rotation, primary, disable, scheduled destruction), AES-256-GCM encrypt/decrypt with AAD and CRC32C checks, asymmetric sign/decrypt, public keys, MACs, random bytes and IAM policies.

Package logging emulates Google Cloud Logging (v2) over gRPC and its REST mirror: log entries (write, list with the Logging query language, tail), logs, sinks that deliver to Pub/Sub, Cloud Storage and BigQuery, exclusions, log-based metrics and log buckets.

Package managedkafka emulates Google Cloud Managed Service for Apache Kafka (managedkafka.googleapis.com v1) over gRPC and its REST mirror: clusters (long-running operations), topics and consumer groups.

Package memorystore emulates Memorystore for Redis (redis.googleapis.com v1) over gRPC and its REST mirror.

Package monitoring emulates Google Cloud Monitoring (v3) over gRPC and its REST mirror: custom metric descriptors, time series (written with CreateTimeSeries, read with filters, alignment and cross-series reduction), monitored resource descriptors, and alert policies, notification channels and uptime checks, which are only stored.

Package oauth emulates Google's OAuth2 token endpoint (/token and /oauth2/v4/token), its tokeninfo and certificate endpoints, and the Security Token Service (POST /v1/token).

Package pubsub emulates Google Cloud Pub/Sub: the gRPC API the client libraries use (PUBSUB_EMULATOR_HOST=localhost:7644) and its REST mirror.

Package resourcemanager emulates Cloud Resource Manager: projects over the v3 gRPC and REST APIs, and over the v1 REST API that Terraform's google provider uses; IAM policies on projects (stored, not enforced); and read-only folders and organizations.

Package run emulates Google Cloud Run's Admin API v2 over gRPC and its REST mirror (services, revisions, jobs, executions) and runs the containers.

Package scheduler emulates Google Cloud Scheduler (v1) over gRPC and its REST mirror: unix-cron jobs with time zones that fire at HTTP targets (with OIDC or OAuth tokens) and Pub/Sub topics, with retries, pause, resume and run.

Package secretmanager emulates Google Cloud Secret Manager over gRPC and its REST mirror: secrets (replication, labels, annotations, expiry, version aliases, etags), versions (CRC32C-checked payloads; enable, disable, destroy) and IAM policies.

Package serverless is what Cloud Run and Cloud Functions share: running an HTTP container, waiting until it listens, proxying requests to it and the message-to-HTTP mapping of Hub.Deliver.

Package serviceusage emulates Service Usage v1: which Google APIs a project has enabled.

Package spanner runs Google's own Cloud Spanner emulator in Docker behind pogi's port.

Package sql emulates the Cloud SQL Admin API (sqladmin v1beta4 and v1, REST JSON): instances, databases, users, SSL certificates, operations, flags and tiers, with connectSettings and generateEphemeralCert for the connectors.

Package storage emulates Google Cloud Storage: the JSON API (buckets, objects, media/multipart/resumable uploads, copy/rewrite/compose, generations and preconditions, notifications to Pub/Sub) and the XML API paths client libraries use for downloads and signed URLs.

Package tasks emulates Google Cloud Tasks (v2) over gRPC and its REST mirror: queues (rate limits, retry config, pause, resume, purge) and HTTP tasks that a dispatch loop delivers with Google's headers, OIDC and OAuth tokens, exponential backoff and tombstoned task names.

Package workflows emulates Google Cloud Workflows (v1) and the Workflow Executions API (v1) over gRPC and their REST mirrors.