Merge branch 'main' into feature/sdk-php

Author: mwunderl

.doc_gen/validation.yaml

@@ -1,5 +1,6 @@
 allow_list:
   - "bPxRfiCYEXAMPLEKEY/wJalrXUtnFEMI/K7MDENG"
   - "role/AmazonEC2ContainerServiceforEC2Role"
+  - "========================================"
 sample_files:
   - "README.md"

.gitignore

@@ -0,0 +1,26 @@
+*.log
+*.pem
+aws-eump-logs/
+dynamodb-tutorial-logs/
+Dockerfile
+document.png
+dashboard-body-*.json
+comprehend-policy.json
+hello-world.json
+input.json
+query-results.csv
+sentiment-*.json
+step-functions-trust-policy.json
+stepfunctions-policy.json
+textract-*.json
+updated-hello-world.json
+webserver-template-*.yaml
+qbusiness-*.json
+datazone_script_v3_fixed.log
+idc_setup_*.log
+workspaces_creation.log
+logs/
+*.csv
+*.png
+Dockerfile
+cfn/

BRANCH.md

@@ -0,0 +1,25 @@
+# feature/non-interactive
+
+## What's in this branch
+42 tutorial scripts made non-interactive by the DocBash pipeline (run_group: non-interactive-20260427-1821).
+Plus 5 scripts fixed locally before the pipeline run (013-ec2, 019-lambda, 033-ses, 035-workspaces, 047-firewall).
+
+All `read -p` and `read -r` user prompts replaced with auto-answers:
+- Cleanup confirmations → y
+- Press Enter → removed or sleep
+- Runtime/config selection → first option
+- Email/name/domain → generated values
+- VPC/subnet selection → first option or auto-detect
+
+## Status
+- 44/70 tutorials passing (42 pipeline + 2 retry)
+- 5 fixed locally (on main, included here)
+- 21 remaining failures — all environment quota limits (VpcLimitExceeded, AddressLimitExceeded)
+
+## Before publishing
+- [ ] Rerun the 21 failures after VPC cleanup completes
+- [ ] Verify no `read` prompts remain in passing scripts (spot check)
+- [ ] Update REVISION-HISTORY.md for each modified tutorial
+
+## After publishing
+- [ ] Rebase feature/resource-tagging off this branch (tagging needs non-interactive as prereq)

cleanup.sh

@@ -0,0 +1,25 @@
+#!/bin/bash
+# pre-push hook: block push if tutorial files changed without REVISION-HISTORY.md update
+# Install: cp hooks/pre-push .git/hooks/pre-push && chmod +x .git/hooks/pre-push
+
+REMOTE="$1"
+RANGE=$(git merge-base HEAD origin/main)..HEAD
+
+# Find tutorial directories with changes (excluding REVISION-HISTORY itself)
+CHANGED_TUTS=$(git diff --name-only "$RANGE" -- 'tuts/' | grep -v REVISION-HISTORY | sed 's|tuts/\([^/]*\)/.*|\1|' | sort -u)
+
+MISSING=""
+for tut in $CHANGED_TUTS; do
+    if ! git diff --name-only "$RANGE" -- "tuts/$tut/REVISION-HISTORY.md" | grep -q .; then
+        MISSING="$MISSING  tuts/$tut/REVISION-HISTORY.md\n"
+    fi
+done
+
+if [ -n "$MISSING" ]; then
+    echo ""
+    echo "ERROR: Tutorial files changed without updating REVISION-HISTORY.md:"
+    echo -e "$MISSING"
+    echo "Update the revision history before pushing (AGENTS.md rule 7)."
+    echo "To bypass: git push --no-verify"
+    exit 1
+fi

deploy.sh

@@ -0,0 +1,25 @@
+# Shared tutorial S3 bucket
+
+Creates a shared S3 bucket used by tutorials that need object storage. Tutorials check for this stack automatically — if it exists, they use the shared bucket instead of creating their own.
+
+## Deploy
+
+```bash
+bash tuts/000-prereqs-bucket/prereqs-bucket.sh
+```
+
+## Clean up
+
+```bash
+bash tuts/000-prereqs-bucket/cleanup-prereqs-bucket.sh
+```
+
+## Resources created
+
+- S3 bucket (named `tutorial-bucket-<account>-<region>`)
+- CloudFormation stack `tutorial-prereqs-bucket` (exports the bucket name)
+
+## Used by
+
+Tutorials that create S3 buckets check for this stack first:
+003, 005, 028, 037, 053, 061, 074

hooks/pre-push

@@ -0,0 +1,7 @@
+# Revision History: 000-prereqs-bucket
+
+## Shell (setup/cleanup scripts)
+
+### 2026-04-20 v1 published
+- Type: functional
+- Initial version: CLI bucket creation + thin CFN stack for exports