Merge branch 'main' into aws-amplify

Signed-off-by: Alain Krok <alkrok@amazon.com>

Author: krokoko

.claude-plugin/marketplace.json

@@ -65,6 +65,56 @@
       "source": "./plugins/aws-amplify",
       "tags": ["aws", "amplify", "fullstack"],
       "version": "1.0.0"
+    },
+    {
+      "category": "migration",
+      "description": "This no-cost tool assesses your current cloud provider's usage, geography, and billing data to estimate and compare AWS services and pricing, and recommends migration or continued use of your current provider. AWS pricing is based on current published pricing and may vary over time. The tool may generate a .migration folder containing comparison and migration execution data, which you may delete upon completion or use to migrate to AWS.",
+      "keywords": [
+        "aws",
+        "gcp",
+        "google-cloud",
+        "migration",
+        "cloud-migration",
+        "terraform",
+        "fargate",
+        "rds",
+        "eks"
+      ],
+      "name": "migration-to-aws",
+      "source": "./plugins/migration-to-aws",
+      "tags": ["aws", "gcp", "migration", "infrastructure"],
+      "version": "1.0.0"
+    },
+    {
+      "category": "development",
+      "description": "Design, build, deploy, test, and debug serverless applications with AWS Serverless services.",
+      "keywords": [
+        "aws",
+        "aws agent skills",
+        "amazon",
+        "serverless",
+        "lambda",
+        "durable functions",
+        "development",
+        "sam",
+        "api gateway",
+        "eventbridge",
+        "step functions"
+      ],
+      "name": "aws-serverless",
+      "source": "./plugins/aws-serverless",
+      "tags": [
+        "aws",
+        "serverless",
+        "lambda",
+        "durable functions",
+        "development",
+        "sam",
+        "api gateway",
+        "eventbridge",
+        "step functions"
+      ],
+      "version": "1.0.0"
     }
   ]
 }

.claude/settings.json

@@ -1,14 +1,14 @@
 {
-  "permissions": {
-    "allow": []
-  },
   "attribution": {
-    "pr": "🤖 Generated with [Claude Code](https://claude.com/claude-code)\n\n---\n\nBy submitting this pull request, I confirm that you can use, modify, copy, and redistribute this contribution, under the terms of the [project license](https://github.com/awslabs/agent-plugins/blob/main/LICENSE)."
+    "pr": "Generated with [Claude Code](https://claude.com/claude-code)\n\n---\n\nBy submitting this pull request, I confirm that you can use, modify, copy, and redistribute this contribution, under the terms of the [project license](https://github.com/awslabs/agent-plugins/blob/main/LICENSE)."
   },
   "enabledPlugins": {
-    "code-review@claude-plugins-official": true,
-    "pr-review-toolkit@claude-plugins-official": true,
     "claude-md-management@claude-plugins-official": true,
-    "plugin-dev@claude-plugins-official": true
+    "code-review@claude-plugins-official": true,
+    "plugin-dev@claude-plugins-official": true,
+    "pr-review-toolkit@claude-plugins-official": true
+  },
+  "permissions": {
+    "allow": []
   }
 }

.github/CODEOWNERS

@@ -32,7 +32,9 @@ tools/                              @awslabs/agent-plugins-admins
 
 plugins/amazon-location-service     @awslabs/agent-plugins-admins @awslabs/agent-plugins-maintainers  @awslabs/agent-plugins-agent-plugins-amazon-location-service
 plugins/aws-amplify                 @awslabs/agent-plugins-admins @awslabs/agent-plugins-maintainers  @awslabs/agent-plugins-amplify
+plugins/aws-serverless              @awslabs/agent-plugins-admins @awslabs/agent-plugins-maintainers  @awslabs/agent-plugins-aws-serverless
 plugins/deploy-on-aws               @awslabs/agent-plugins-admins @awslabs/agent-plugins-maintainers  @awslabs/agent-plugins-deploy-on-aws
+plugins/migration-to-aws            @awslabs/agent-plugins-admins @awslabs/agent-plugins-maintainers  @awslabs/agent-plugins-migrate-to-aws
 
 ## File must end with CODEOWNERS file
 

.github/workflows/build.yml

@@ -51,7 +51,7 @@ jobs:
 
       - name: Upload patch
         if: steps.self_mutation.outputs.self_mutation_happened
-        uses: actions/upload-artifact@b7c566a772e6b6bfb58ed0dc250532a479d7789f # v4.4.0
+        uses: actions/upload-artifact@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f # v4.4.0
         with:
           name: repo.patch
           path: repo.patch

.github/workflows/dependency-review.yml

@@ -9,7 +9,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
-      - uses: actions/dependency-review-action@05fe4576374b728f0c523d6a13d64c25081e0803 # v4.8.3
+      - uses: actions/dependency-review-action@2031cfc080254a8a887f58cffee85186f0e49e48 # v4.9.0
         with:
           config-file: amazon-ospo/dependency-review-config/default/dependency-review-config.yml@8e4c9fdde54d2b7c6a3a28b97eddd26c4cd90a66 # main
           # # distlib

.github/workflows/scorecard-analysis.yml

@@ -40,7 +40,7 @@ jobs:
       # uploads of run results in SARIF format to the repository Actions tab.
       # https://docs.github.com/en/actions/advanced-guides/storing-workflow-data-as-artifacts
       - name: "Upload artifact"
-        uses: actions/upload-artifact@b7c566a772e6b6bfb58ed0dc250532a479d7789f # v6.0.0
+        uses: actions/upload-artifact@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f # v7.0.0
         with:
           name: SARIF file
           path: scorecard-results.sarif

.github/workflows/security-scanners.yml

@@ -51,7 +51,7 @@ jobs:
           set -e
           echo "exit_code=$GITLEAKS_EXIT" >> "$GITHUB_OUTPUT"
           exit 0
-      - uses: actions/upload-artifact@b7c566a772e6b6bfb58ed0dc250532a479d7789f # v6.0.0
+      - uses: actions/upload-artifact@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f # v7.0.0
         if: always()
         with:
           name: gitleaks.sarif
@@ -90,7 +90,7 @@ jobs:
           set -e
           echo "exit_code=$BANDIT_EXIT" >> "$GITHUB_OUTPUT"
           exit 0
-      - uses: actions/upload-artifact@b7c566a772e6b6bfb58ed0dc250532a479d7789f # v6.0.0
+      - uses: actions/upload-artifact@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f # v7.0.0
         if: always()
         with:
           name: bandit.sarif
@@ -124,7 +124,7 @@ jobs:
           set -e
           echo "exit_code=$GRYPE_EXIT" >> "$GITHUB_OUTPUT"
           exit 0
-      - uses: actions/upload-artifact@b7c566a772e6b6bfb58ed0dc250532a479d7789f # v6.0.0
+      - uses: actions/upload-artifact@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f # v7.0.0
         if: always()
         with:
           name: grype.sarif
@@ -164,7 +164,7 @@ jobs:
           set -e
           echo "exit_code=$CHECKOV_EXIT" >> "$GITHUB_OUTPUT"
           exit 0
-      - uses: actions/upload-artifact@b7c566a772e6b6bfb58ed0dc250532a479d7789f # v6.0.0
+      - uses: actions/upload-artifact@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f # v7.0.0
         if: always()
         with:
           name: checkov.sarif
@@ -283,7 +283,7 @@ jobs:
               else . end
             ]
           ' semgrep-report_sarif.json > semgrep.sarif.tmp.json && mv semgrep.sarif.tmp.json semgrep-report_sarif.json
-      - uses: actions/upload-artifact@b7c566a772e6b6bfb58ed0dc250532a479d7789f # v6.0.0
+      - uses: actions/upload-artifact@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f # v7.0.0
         with:
           name: semgrep.sarif
           path: semgrep-report_sarif.json
@@ -328,7 +328,7 @@ jobs:
           clamdscan --version
       - run: |
           clamdscan --verbose --log=clamdscan.txt --stream --fdpass --multiscan .
-      - uses: actions/upload-artifact@b7c566a772e6b6bfb58ed0dc250532a479d7789f # v6.0.0
+      - uses: actions/upload-artifact@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f # v7.0.0
         if: always()
         with:
           name: clamdscan.txt
@@ -429,7 +429,7 @@ jobs:
           --url 'http://localhost:9000/api/issues/search?componentKeys=my-project&ps=500&p=1' \
           --header 'Authorization: Bearer ${{ env.SONAR_TOKEN }}' | tee sonar-issues.json | jq || exit 1
 
-    - uses: actions/upload-artifact@b7c566a772e6b6bfb58ed0dc250532a479d7789f # v6.0.0
+    - uses: actions/upload-artifact@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f # v7.0.0
       if: always()
       with:
           name: sonar-issues.json

.github/workflows/upgrade-main.yml

@@ -57,7 +57,7 @@ jobs:
 
       - name: Upload patch
         if: steps.create_patch.outputs.patch_created
-        uses: actions/upload-artifact@b7c566a772e6b6bfb58ed0dc250532a479d7789f # v4.4.0
+        uses: actions/upload-artifact@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f # v4.4.0
         with:
           name: repo.patch
           path: repo.patch
@@ -78,7 +78,7 @@ jobs:
           ref: main
 
       - name: Download patch
-        uses: actions/download-artifact@37930b1c2abaa49bbe596cd826c3c89aef350131 # v4.1.7
+        uses: actions/download-artifact@70fc10c6e5e1ce46ad2ea6f2b72d43f7d47b13c3 # v4.1.8.0.0
         with:
           name: repo.patch
           path: ${{ runner.temp }}

.markdownlint-cli2.yaml

@@ -19,7 +19,6 @@ globs:
 # Files to ignore
 ignores:
   - "**/node_modules/**"
-  - ".claude/docs/**"
 
 # Rule configuration
 config:

.url-check-ignore

@@ -0,0 +1,20 @@
+# URL patterns to skip during liveness checks.
+# Each line is a substring match — if the URL contains this string, it's skipped.
+
+# Localhost / example / placeholder URLs
+https://localhost
+https://127.0.0.1
+https://example.com
+https://your-
+https://my-
+https://myapp.
+
+# CloudFormation / SAM template variables in URLs
+${AWS::
+
+# API endpoints (not browsable)
+https://maps.geo.
+https://places.geo.
+https://routes.geo.
+https://geofencing.geo.
+https://tracking.geo.