Note

Medium Risk
Touches multiple AWS enumerators (IAM, API Gateway, EC2/EKS/RDS, Route53, WAF, load balancers, S3, Lambda) to change pagination and error semantics, which can affect completeness/performance and downstream expectations. IAM now fetches attached policy documents for all policies and adds a new exclude flag, increasing API call volume and potential permission/throttling failures.

Overview
Improves AWS resource enumeration robustness by adding missing pagination (API Gateway v1/v2 routes/domains/keys/plans, EKS clusters, WAF WebACLs) and switching several list helpers to return partial results plus accumulated errors instead of failing fast (EC2, RDS, Route53, load balancers, Route53 DNS records).

Renames IAM’s exclude option from default roles to AWS-managed roles (exclude-aws-managed-roles), updates the Fern config schema accordingly, and removes the isCustomerManaged policy flag while attempting to retrieve policy documents for all attached role policies.

Hardens multiple enumerators against nil fields and improves context propagation (e.g., Lambda container functions with nil Handler, optional VPC/timeout/memory/ephemeral storage, EKS certificate authority checks, SecurityGroup referenced group fields, and using request ctx for S3/Lambda paginators).

^{Written by Cursor Bugbot for commit 995b6a3. This will update automatically on new commits. Configure here.}