feat(sandbox): proxy-side AWS SigV4 credential signing for CONNECT tunnels#1638

Draft

jhjaggars wants to merge 7 commits into

NVIDIA:mainfrom

jhjaggars:sigv4-credential-signing

Commits on May 29, 2026

feat(sandbox): proxy-side AWS SigV4 credential signing (POC)
jhjaggars
committed
refactor(sandbox): replace hand-rolled SigV4 with aws-sigv4 crate
jhjaggars
committed
feat(sandbox): add signing_service policy field, remove signing name guessing
jhjaggars
committed
fix(sandbox): sign only minimal headers and include payload checksum
jhjaggars
committed
feat(sandbox): support AWS session tokens in SigV4 signing
jhjaggars
committed
test(sandbox): add SigV4 integration test against real Bedrock
jhjaggars
committed
style(sandbox): fix clippy and rustfmt warnings in SigV4 code
jhjaggars
committed