ward-aws: author the aws CLI surface as an exec-dialect guardfile (open passthrough + aws-read gate) #82

New issue

Closed

opened 2026-06-10 18:53:40 +00:00 by coilysiren · 0 comments

coilysiren commented

2026-06-10 18:53:40 +00:00

Owner

What

Author the aws CLI surface as an exec-dialect guardfile (cmd/ward-aws/ward-aws.guardfile.kdl), the policy artifact for the coily ops aws passthrough's move into ward:

can run "*" - the open passthrough, keeping the funnel comprehensive (any aws service/operation routes through ward rather than around it).
gate aws-read - coily's sensitive-read gate as declarative policy: read-only verbs touching secrets / credentials / tfstate / backups / admin+root ARNs are denied pre-send, with the one-shot WARD_AWS_ALLOW_SENSITIVE_READ escape (the ward-named successor of coily's env override).

The engine side landed as cli-guard v0.12.0 (coilyco-flight-deck/cli-guard#132): awsgate package + execverb wildcard grants + the fail-closed gate registry, with tests proving this exact guardfile end-to-end (passthrough verbatim, sensitive read denied naming the pattern, writes untouched, env escape honored).

Wiring

The binary mounts when the no-code driver learns the exec transport (coilyco-flight-deck/cli-guard#131) or ward links execverb directly (#81). Until then this file is the reviewed policy of record for the surface.

## What Author the aws CLI surface as an exec-dialect guardfile (`cmd/ward-aws/ward-aws.guardfile.kdl`), the policy artifact for the coily `ops aws` passthrough's move into ward: * `can run "*"` - the open passthrough, keeping the funnel comprehensive (any aws service/operation routes through ward rather than around it). * `gate aws-read` - coily's sensitive-read gate as declarative policy: read-only verbs touching secrets / credentials / tfstate / backups / admin+root ARNs are denied pre-send, with the one-shot `WARD_AWS_ALLOW_SENSITIVE_READ` escape (the ward-named successor of coily's env override). The engine side landed as cli-guard v0.12.0 (https://forgejo.coilysiren.me/coilyco-flight-deck/cli-guard/issues/132): awsgate package + execverb wildcard grants + the fail-closed gate registry, with tests proving this exact guardfile end-to-end (passthrough verbatim, sensitive read denied naming the pattern, writes untouched, env escape honored). ## Wiring The binary mounts when the no-code driver learns the exec transport (https://forgejo.coilysiren.me/coilyco-flight-deck/cli-guard/issues/131) or ward links execverb directly (https://forgejo.coilysiren.me/coilyco-flight-deck/ward/issues/81). Until then this file is the reviewed policy of record for the surface.

coilysiren referenced this issue from a commit

2026-06-10 18:53:51 +00:00

feat(ward-aws): author the aws surface as exec-dialect policy

coilysiren closed this issue

2026-06-10 18:53:51 +00:00

coilysiren referenced this issue

2026-06-15 15:22:05 +00:00

Epic: coily -> ward -> ward-kdl consolidation (umbrella) #91

coilysiren added this to the coily to ward to ward-kdl consolidation milestone

2026-06-15 15:31:12 +00:00