4566). All services use the real AWS wire protocol — your existing AWS CLI commands and SDK clients work without modification.
Service Matrix
| Service | Operations | Runtime | Protocol | Notable Features |
|---|---|---|---|---|
| SSM Parameter Store | 12 | Floci | JSON 1.1 | Version history, labels, SecureString, tagging |
| SQS | 20 | Floci | Query / JSON | Standard & FIFO, DLQ, visibility timeout, batch, tagging |
| SNS | 17 | Floci | Query / JSON | Topics, subscriptions, SQS / Lambda / HTTP delivery, tagging |
| S3 | 50+ | Floci | REST XML | Versioning, multipart upload, pre-signed URLs, Object Lock, event notifications |
| DynamoDB | 20 | Floci | JSON 1.1 | GSI / LSI, Query, Scan, TTL, transactions, batch operations |
| DynamoDB Streams | 4 | Floci | JSON 1.1 | Shard iterators, records, Lambda ESM trigger |
| Lambda | 18 | Docker | REST JSON | Warm pool, aliases, SQS / Kinesis / DDB Streams ESM |
| API Gateway REST | 40+ | Floci | REST JSON | Resources, methods, stages, Lambda proxy, MOCK integrations |
| API Gateway v2 (HTTP) | 20 | Floci | REST JSON | Routes, integrations, JWT authorizers, stages |
| IAM | 65+ | Floci | Query | Users, roles, groups, policies, instance profiles, access keys |
| STS | 7 | Floci | Query | AssumeRole, WebIdentity, SAML, GetFederationToken, GetSessionToken |
| Cognito | 24 | Floci | JSON 1.1 | User pools, app clients, auth flows, JWKS / OpenID well-known endpoints |
| KMS | 18 | Floci | JSON 1.1 | Encrypt / decrypt, sign / verify, data keys, aliases |
| Kinesis | 21 | Floci | JSON 1.1 | Streams, shards, enhanced fan-out, split / merge |
| Secrets Manager | 14 | Floci | JSON 1.1 | Versioning, resource policies, tagging |
| Step Functions | 12 | Floci | JSON 1.1 | ASL execution, task tokens, execution history |
| CloudFormation | 20 | Floci | Query | Stacks, change sets, resource provisioning |
| EventBridge | 14 | Floci | JSON 1.1 | Custom buses, rules, targets (SQS / SNS / Lambda) |
| CloudWatch Logs | 14 | Floci | JSON 1.1 | Log groups, streams, ingestion, filtering |
| CloudWatch Metrics | 8 | Floci | Query / JSON | Custom metrics, statistics, alarms |
| ElastiCache | 8 | Docker | Query + RESP | Redis / Valkey, IAM auth, SigV4 validation |
| RDS | 13 | Docker | Query + wire | PostgreSQL & MySQL & MariaDB, IAM auth, JDBC-compatible |
| ACM | 12 | Floci | JSON 1.1 | Certificate issuance, validation lifecycle |
| SES | 14 | Floci | Query | Send email / raw email, identity verification, DKIM attributes |
| OpenSearch | 24 | Floci | REST JSON | Domain CRUD, tags, versions, instance types, upgrade stubs |
Lambda, ElastiCache, and RDS spin up real Docker containers. They require the Docker socket to be mounted:
Common Setup
Before calling any service, configure your AWS client to point to Floci:http://localhost:4566. Any region name and any credentials work — Floci does not validate them.
Service Categories
Compute
Lambda, API Gateway v1 (REST), and API Gateway v2 (HTTP)
Messaging
SQS, SNS, EventBridge, and Kinesis
Storage
S3, DynamoDB, DynamoDB Streams, Secrets Manager, and SSM Parameter Store
Security
IAM, STS, Cognito, KMS, and ACM
Networking
SES and OpenSearch
Observability
CloudWatch Logs, CloudWatch Metrics, Step Functions, and CloudFormation
Databases
ElastiCache (Redis / Valkey) and RDS (PostgreSQL / MySQL / MariaDB)