[AWS] Implement the selected managed-service component #56

Outcome

Manage the first stateful service with explicit encryption, backup, retention, network, and deletion safeguards.

Scope

• Implement the A1 mapping, credential references, sizing, encryption, backup, retention, observation, drift, update, and deletion policy.

Acceptance criteria

• Encryption is the default.
• Destructive deletion requires explicit policy and retention/restore behavior is documented.
• Lifecycle, quota, drift, cost, and recovery cases pass conformance.

Test and evidence

• Sandbox lifecycle, restore/retention, cost, and cleanup tests.

Dependencies

• Blocked by #52.
• Blocked by #53.
• Blocked by #42.
• Blocked by #43.

References

• Architecture overview
• Security model