title: AWS
tagline: The whole local AWS as ONE service — with its web console.
category: cloud
engine: aws
port: 4566
example: |-
    aws "local" {
      port = 4566

      bucket "uploads" { versioning = true }
      queue  "emails"  { dlq = "auto"  max_receives = 5 }
      queue  "orders"  { fifo = true  content_dedup = true }

      topic "signups" {
        subscribe { queue = "emails"  raw = true }
      }

      table "sessions" {
        key = "session_id:S"
        ttl = "expires_at"
      }

      function "resize" {
        code    = "./functions/resize"   # dir with a provided.al2 bootstrap
        timeout = 10
      }

      rule "order_placed" {
        pattern = "{\"source\":[\"shop.checkout\"]}"
        targets = ["lambda:resize", "queue:emails"]
      }

      key "app_key" {}
      secret "db_password" { value = "s3cr3t" }
      parameter "/app/feature/banner" { value = "hello" }

      state_machine "order_flow" {
        definition = <<-ASL
          {
            "StartAt": "Resize",
            "States": {
              "Resize": {
                "Type": "Task",
                "Resource": "arn:aws:lambda:us-east-1:000000000000:function:resize",
                "Retry": [{"ErrorEquals": ["States.TaskFailed"], "MaxAttempts": 2}],
                "Next": "Notify"
              },
              "Notify": {
                "Type": "Task",
                "Resource": "arn:aws:states:::sqs:sendMessage",
                "Parameters": {"QueueUrl": "http://localhost:4566/000000000000/emails", "MessageBody.$": "$"},
                "End": true
              }
            }
          }
        ASL
      }
    }
exampleLabel: local
description: Every doze-aws service — S3, SQS, SNS, DynamoDB, Lambda, EventBridge, Step Functions, Kinesis, API Gateway, CloudFormation, IAM, KMS, SSM, Secrets Manager, STS — behind one gateway on one endpoint, as one doze instance. Declare buckets, queues, topics, tables, functions, rules, keys, secrets, parameters and state machines as nested blocks (the same resource graph doze-aws compiles a CloudFormation template down to); doze converges them on boot. A stock SDK or the aws CLI points AWS_ENDPOINT_URL at the one endpoint; the web console at /_console manages everything, with the live Flows graph and a Traffic tail capturing every call. One process, no Docker, no JVM, no LocalStack.
homepage: https://github.com/doze-dev/doze-aws/tree/main/module
source: doze/aws
config:
    arguments: []
    blocks:
        - name: bucket
          desc: One S3 bucket (the label is the bucket name).
          arguments:
            - name: versioning
              type: bool
              default: "false"
              desc: Enable object versioning.
            - name: object_lock
              type: bool
              default: "false"
              desc: Enable object lock (implies versioning).
        - name: queue
          desc: One SQS queue; dlq = "auto" creates and wires a dead-letter companion.
          arguments:
            - name: fifo
              type: bool
              default: "false"
              desc: FIFO queue (name gets .fifo).
            - name: dlq
              type: string
              desc: '"auto" or an existing queue name.'
            - name: max_receives
              type: number
              desc: Receives before dead-lettering.
        - name: topic
          desc: One SNS topic with subscribe blocks (queue/lambda/http, filter, raw).
          arguments: []
        - name: table
          desc: One DynamoDB table; key uses the "pk:S sk:N" shorthand, plus gsi/lsi blocks.
          arguments: []
        - name: function
          desc: One Lambda function running as a real local process (code = local dir).
          arguments: []
        - name: rule
          desc: One EventBridge rule; targets use "queue:name"/"topic:name"/"lambda:name".
          arguments: []
        - name: key
          desc: One KMS key with real local crypto.
          arguments: []
        - name: secret
          desc: One Secrets Manager secret (never stomped without force).
          arguments: []
        - name: parameter
          desc: One SSM parameter (the label is the full /path).
          arguments: []
        - name: state_machine
          desc: One Step Functions state machine, run locally against the stack's functions, queues and topics.
          arguments:
            - name: definition
              type: string
              desc: The States Language document — a heredoc, or file("./flow.asl.json").
              required: true
            - name: role
              type: string
              desc: Role ARN; the API requires one and nothing local evaluates it, so it defaults.
            - name: type
              type: string
              default: STANDARD
              desc: STANDARD or EXPRESS (Express executions arrive after Standard ones).