[AWS] Qualify rate limits, quotas, cost, drift, recovery, and full sandbox teardown #57

Outcome

Prove the combined AWS slice under least privilege and realistic service failure.

Scope

• Run complete network/identity/compute/managed-service lifecycles with throttling, quota, drift, interruption, cancellation, deletion, and cleanup cases.

Acceptance criteria

• Lifecycle passes with the documented minimum policy.
• Throttling and quota behavior is bounded and cost metadata is populated or explicitly unknown.
• Automated cleanup proves zero residual billable or privileged resources.

Test and evidence

• Sandbox report, policy proof, resource inventory before/after, and cost record.

Dependencies

• Blocked by #53.
• Blocked by #54.
• Blocked by #55.
• Blocked by #56.
• Blocked by #40.
• Blocked by #41.
• Blocked by #42.
• Blocked by #36.
• Blocked by #15.
• Blocked by #28.

References

• Delivery roadmap
• Security model