feat: sqs md5 checksum validation

aws-runtime/aws-config/common/src/aws/sdk/kotlin/runtime/config/profile/AwsProfile.kt

@@ -221,6 +221,30 @@ public inline fun <reified T : Enum<T>> AwsProfile.getEnumOrNull(key: String, su
         )
     }
 
+/**
+ * Parse a config value as an enum set.
+ */
+@InternalSdkApi
+public inline fun <reified T : Enum<T>> AwsProfile.getEnumSetOrNull(key: String, subKey: String? = null): Set<T>? =
+    getOrNull(key, subKey)?.let { rawValue ->
+        rawValue.split(",")
+            .map { it.trim() }
+            .map { value ->
+                enumValues<T>().firstOrNull {
+                    it.name.equals(value, ignoreCase = true)
+                } ?: throw ConfigurationException(
+                    buildString {
+                        append(key)
+                        append(" '")
+                        append(value)
+                        append("' is not supported, should be one of: ")
+                        enumValues<T>().joinTo(this) { it.name.lowercase() }
+                    },
+                )
+            }.toSet()
+            .takeIf { it.isNotEmpty() }
+    }
+
 internal fun AwsProfile.getUrlOrNull(key: String, subKey: String? = null): Url? =
     getOrNull(key, subKey)?.let {
         try {

codegen/aws-sdk-codegen/src/main/kotlin/aws/sdk/kotlin/codegen/customization/sqs/ClientConfigIntegration.kt

@@ -0,0 +1,92 @@
+/*
+ * Copyright Amazon.com, Inc. or its affiliates. All Rights Reserved.
+ * SPDX-License-Identifier: Apache-2.0
+ */
+package aws.sdk.kotlin.codegen.customization.sqs
+
+import aws.sdk.kotlin.codegen.ServiceClientCompanionObjectWriter
+import software.amazon.smithy.kotlin.codegen.KotlinSettings
+import software.amazon.smithy.kotlin.codegen.core.CodegenContext
+import software.amazon.smithy.kotlin.codegen.integration.AppendingSectionWriter
+import software.amazon.smithy.kotlin.codegen.integration.KotlinIntegration
+import software.amazon.smithy.kotlin.codegen.integration.SectionWriterBinding
+import software.amazon.smithy.kotlin.codegen.lang.KotlinTypes
+import software.amazon.smithy.kotlin.codegen.model.buildSymbol
+import software.amazon.smithy.kotlin.codegen.model.expectShape
+import software.amazon.smithy.kotlin.codegen.rendering.util.ConfigProperty
+import software.amazon.smithy.model.Model
+import software.amazon.smithy.model.shapes.ServiceShape
+
+class ClientConfigIntegration : KotlinIntegration {
+    override fun enabledForService(model: Model, settings: KotlinSettings): Boolean =
+        model.expectShape<ServiceShape>(settings.service).isSqs
+
+    companion object {
+        val ValidationEnabledProp: ConfigProperty = ConfigProperty {
+            name = "checksumValidationEnabled"
+            symbol = buildSymbol {
+                name = "ValidationEnabled"
+                namespace = "aws.sdk.kotlin.services.sqs.internal"
+                documentation = """
+                    Specifies when MD5 checksum validation should be performed for SQS messages. This controls the automatic 
+                    calculation and validation of checksums during message operations.
+                    
+                    Valid values:
+                    - ALWAYS (default) - Checksums are calculated and validated for both sending and receiving operations 
+                      (SendMessage, SendMessageBatch, and ReceiveMessage)
+                    - WHEN_SENDING - Checksums are only calculated and validated during send operations 
+                      (SendMessage and SendMessageBatch)
+                    - WHEN_RECEIVING - Checksums are only calculated and validated during receive operations 
+                      (ReceiveMessage)
+                    - NEVER - No checksum calculation or validation is performed
+                """.trimIndent()
+            }
+        }
+
+        private val validationScope = buildSymbol {
+            name = "ValidationScope"
+            namespace = "aws.sdk.kotlin.services.sqs.internal"
+        }
+
+        val ValidationScopeProp: ConfigProperty = ConfigProperty {
+            name = "checksumValidationScopes"
+            symbol = KotlinTypes.Collections.set(validationScope, default = "emptySet()")
+            documentation = """
+                Specifies which parts of an SQS message should undergo MD5 checksum validation. This configuration 
+                accepts a set of validation scopes that determine which message components to validate.
+                
+                Valid values:
+                - MESSAGE_ATTRIBUTES - Validates checksums for message attributes
+                - MESSAGE_SYSTEM_ATTRIBUTES - Validates checksums for message system attributes 
+                  (Note: Not available for ReceiveMessage operations as SQS does not calculate checksums for 
+                  system attributes during message receipt)
+                - MESSAGE_BODY - Validates checksums for the message body
+                
+                Default: All three scopes (MESSAGE_ATTRIBUTES, MESSAGE_SYSTEM_ATTRIBUTES, MESSAGE_BODY)
+            """.trimIndent()
+        }
+    }
+
+    override fun additionalServiceConfigProps(ctx: CodegenContext): List<ConfigProperty> =
+        listOf(
+            ValidationEnabledProp,
+            ValidationScopeProp,
+        )
+
+    override val sectionWriters: List<SectionWriterBinding>
+        get() = listOf(
+            SectionWriterBinding(
+                ServiceClientCompanionObjectWriter.FinalizeEnvironmentalConfig,
+                finalizeSqsConfigWriter,
+            ),
+        )
+
+    // add Sqs-specific config finalization
+    private val finalizeSqsConfigWriter = AppendingSectionWriter { writer ->
+        val finalizeSqsConfig = buildSymbol {
+            name = "finalizeSqsConfig"
+            namespace = "aws.sdk.kotlin.services.sqs.internal"
+        }
+        writer.write("#T(builder, sharedConfig)", finalizeSqsConfig)
+    }
+}

codegen/aws-sdk-codegen/src/main/kotlin/aws/sdk/kotlin/codegen/customization/sqs/SqsMd5ChecksumValidationIntegration.kt

@@ -0,0 +1,50 @@
+/*
+ * Copyright Amazon.com, Inc. or its affiliates. All Rights Reserved.
+ * SPDX-License-Identifier: Apache-2.0
+ */
+package aws.sdk.kotlin.codegen.customization.sqs
+
+import software.amazon.smithy.kotlin.codegen.KotlinSettings
+import software.amazon.smithy.kotlin.codegen.core.KotlinWriter
+import software.amazon.smithy.kotlin.codegen.integration.KotlinIntegration
+import software.amazon.smithy.kotlin.codegen.model.buildSymbol
+import software.amazon.smithy.kotlin.codegen.model.expectShape
+import software.amazon.smithy.kotlin.codegen.rendering.protocol.ProtocolGenerator
+import software.amazon.smithy.kotlin.codegen.rendering.protocol.ProtocolMiddleware
+import software.amazon.smithy.model.Model
+import software.amazon.smithy.model.shapes.OperationShape
+import software.amazon.smithy.model.shapes.ServiceShape
+
+/**
+ * Register interceptor to handle SQS message MD5 checksum validation.
+ */
+class SqsMd5ChecksumValidationIntegration : KotlinIntegration {
+    override fun enabledForService(model: Model, settings: KotlinSettings): Boolean =
+        model.expectShape<ServiceShape>(settings.service).isSqs
+
+    override fun customizeMiddleware(
+        ctx: ProtocolGenerator.GenerationContext,
+        resolved: List<ProtocolMiddleware>,
+    ): List<ProtocolMiddleware> = resolved + listOf(SqsMd5ChecksumValidationMiddleware)
+}
+
+internal object SqsMd5ChecksumValidationMiddleware : ProtocolMiddleware {
+    override fun isEnabledFor(ctx: ProtocolGenerator.GenerationContext, op: OperationShape): Boolean = when (op.id.name) {
+        "ReceiveMessage",
+        "SendMessage",
+        "SendMessageBatch",
+        -> true
+        else -> false
+    }
+
+    override val name: String = "SqsMd5ChecksumValidationInterceptor"
+
+    override fun render(ctx: ProtocolGenerator.GenerationContext, op: OperationShape, writer: KotlinWriter) {
+        val symbol = buildSymbol {
+            name = this@SqsMd5ChecksumValidationMiddleware.name
+            namespace = "aws.sdk.kotlin.services.sqs"
+        }
+
+        writer.write("op.interceptors.add(#T(config.checksumValidationEnabled, config.checksumValidationScopes,))", symbol)
+    }
+}

codegen/aws-sdk-codegen/src/main/kotlin/aws/sdk/kotlin/codegen/customization/sqs/SqsModelUtils.kt

@@ -0,0 +1,14 @@
+/*
+ * Copyright Amazon.com, Inc. or its affiliates. All Rights Reserved.
+ * SPDX-License-Identifier: Apache-2.0
+ */
+package aws.sdk.kotlin.codegen.customization.sqs
+
+import aws.sdk.kotlin.codegen.sdkId
+import software.amazon.smithy.model.shapes.ServiceShape
+
+/**
+ * Returns true if the service is Sqs
+ */
+val ServiceShape.isSqs: Boolean
+    get() = sdkId.lowercase() == "sqs"

codegen/aws-sdk-codegen/src/main/resources/META-INF/services/software.amazon.smithy.kotlin.codegen.integration.KotlinIntegration

@@ -49,3 +49,5 @@ aws.sdk.kotlin.codegen.smoketests.SmokeTestsDenyListIntegration
 aws.sdk.kotlin.codegen.smoketests.testing.SmokeTestSuccessHttpEngineIntegration
 aws.sdk.kotlin.codegen.smoketests.testing.SmokeTestFailHttpEngineIntegration
 aws.sdk.kotlin.codegen.customization.AwsQueryModeCustomization
+aws.sdk.kotlin.codegen.customization.sqs.ClientConfigIntegration
+aws.sdk.kotlin.codegen.customization.sqs.SqsMd5ChecksumValidationIntegration

codegen/aws-sdk-codegen/src/test/kotlin/aws/sdk/kotlin/codegen/customization/sqs/SqsMd5ChecksumValidationIntegrationTest.kt

@@ -0,0 +1,52 @@
+/*
+ * Copyright Amazon.com, Inc. or its affiliates. All Rights Reserved.
+ * SPDX-License-Identifier: Apache-2.0
+ */
+package aws.sdk.kotlin.codegen.customization.sqs
+
+import aws.sdk.kotlin.codegen.testutil.model
+import org.junit.jupiter.api.Test
+import software.amazon.smithy.kotlin.codegen.core.KotlinWriter
+import software.amazon.smithy.kotlin.codegen.rendering.protocol.ProtocolGenerator
+import software.amazon.smithy.kotlin.codegen.rendering.protocol.ProtocolMiddleware
+import software.amazon.smithy.kotlin.codegen.test.defaultSettings
+import software.amazon.smithy.kotlin.codegen.test.newTestContext
+import software.amazon.smithy.model.shapes.OperationShape
+import kotlin.test.assertEquals
+import kotlin.test.assertFalse
+import kotlin.test.assertTrue
+import kotlin.test.fail
+
+class SqsMd5ChecksumValidationIntegrationTest {
+    @Test
+    fun testNotExpectedForNonSqsModel() {
+        val model = model("NotSqs")
+        val actual = SqsMd5ChecksumValidationIntegration().enabledForService(model, model.defaultSettings())
+
+        assertFalse(actual)
+    }
+
+    @Test
+    fun testExpectedForSqsModel() {
+        val model = model("Sqs")
+        val actual = SqsMd5ChecksumValidationIntegration().enabledForService(model, model.defaultSettings())
+
+        assertTrue(actual)
+    }
+
+    @Test
+    fun testMiddlewareAddition() {
+        val model = model("Sqs")
+        val preexistingMiddleware = listOf(FooMiddleware)
+        val ctx = model.newTestContext("Sqs")
+        val actual = SqsMd5ChecksumValidationIntegration().customizeMiddleware(ctx.generationCtx, preexistingMiddleware)
+
+        assertEquals(listOf(FooMiddleware, SqsMd5ChecksumValidationMiddleware), actual)
+    }
+}
+
+object FooMiddleware : ProtocolMiddleware {
+    override val name: String = "FooMiddleware"
+    override fun render(ctx: ProtocolGenerator.GenerationContext, op: OperationShape, writer: KotlinWriter) =
+        fail("Unexpected call to `FooMiddleware.render")
+}