Expand description
The two calls outside the MicroVMs API that ensure_image makes: the caller’s account,
for the image ARN, and the artifact upload (#221, IMAGE-8).
BuildServices is the port. Sandbox::with_build_services takes one, a test records
the calls and answers them, and production gets SignedBuildServices (in
microvms-edges, re-exported as microvms_core::control::SignedBuildServices) through the
plane’s adapters on the first ensure_image. The account comes from STS because
GetMicrovmImage takes an ARN and the service rejects a bare name; GetCallerIdentity
answers the account for any identity and needs no permission to make.
Traits§
- Build
Services - The seam
ensure_imagereaches STS and S3 through.