chore(deps): Update dependency source-aws to v35 (#1737)

This PR contains the following updates:

| Package | Update | Change |
|---|---|---|
| [source-aws](https://hub.cloudquery.io) | major | `v34.9.0` → `v35.0.0` |

---

### Configuration

📅 **Schedule**: (UTC)

- Branch creation
  - At any time (no schedule defined)
- Automerge
  - At any time (no schedule defined)

🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update again.

---

 - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box

---

This PR has been generated by [Mend Renovate](https://redirect.github.com/renovatebot/renovate).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4xOTUuMiIsInVwZGF0ZWRJblZlciI6IjQzLjE5NS4yIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6W119-->

Author: cloudquery-ci[bot]

.github/workflows/transformations_aws_compliance_premium.yml

@@ -156,6 +156,7 @@ jobs:
         if: needs.prepare.outputs.s3 == 'true'
         run: |
           cloudquery migrate tests/s3.yml
+          ./tests/create_athena_tables.sh
           uv run dbt run --target dev-athena --profiles-dir ./tests
       - name: Setup Node.js
         uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7

transformations/aws/asset-inventory-free/tests/clickhouse.yml

@@ -3,7 +3,7 @@ spec:
   name: aws
   path: cloudquery/aws
   registry: cloudquery
-  version: "v34.9.0" # latest version of source aws plugin
+  version: "v35.0.0" # latest version of source aws plugin
   destinations: ["clickhouse"]
   tables: ["*"]
 ---

transformations/aws/asset-inventory-free/tests/postgres.yml

@@ -3,7 +3,7 @@ spec:
   name: aws
   path: cloudquery/aws
   registry: cloudquery
-  version: "v34.9.0" # latest version of source aws plugin
+  version: "v35.0.0" # latest version of source aws plugin
   destinations: ["postgresql"]
   tables: ["*"]
 ---

transformations/aws/asset-inventory-free/tests/snowflake.yml

@@ -3,7 +3,7 @@ spec:
   name: aws
   path: cloudquery/aws
   registry: cloudquery
-  version: "v34.9.0" # latest version of source aws plugin
+  version: "v35.0.0" # latest version of source aws plugin
   destinations: ["snowflake"]
   tables: ["*"]
 ---

transformations/aws/compliance-premium/README.md

@@ -134,7 +134,7 @@ spec:
           "aws_iam_user_policies",
           "aws_cloudwatchlogs_metric_filters",
           "aws_cloudtrail_trails",
-          "aws_cloudwatch_alarms",
+          "aws_cloudwatch_metric_alarms",
           "aws_ec2_flow_logs",
           "aws_iam_virtual_mfa_devices",
           "aws_ec2_vpcs",
@@ -224,7 +224,7 @@ tables: ["aws_iam_password_policies",
 "aws_iam_user_policies",
 "aws_cloudwatchlogs_metric_filters",
 "aws_cloudtrail_trails",
-"aws_cloudwatch_alarms",
+"aws_cloudwatch_metric_alarms",
 "aws_ec2_flow_logs",
 "aws_iam_virtual_mfa_devices",
 "aws_ec2_vpcs",
@@ -261,7 +261,7 @@ tables: ["aws_securityhub_hubs",
 "aws_iam_user_access_keys",
 "aws_cloudtrail_trails",
 "aws_efs_filesystems",
-"aws_cloudwatch_alarms",
+"aws_cloudwatch_metric_alarms",
 "aws_accessanalyzer_analyzers",
 "aws_ec2_vpcs",
 "aws_s3_bucket_versionings",
@@ -313,7 +313,7 @@ tables: ["aws_securityhub_hubs",
 "aws_iam_user_access_keys",
 "aws_cloudtrail_trails",
 "aws_efs_filesystems",
-"aws_cloudwatch_alarms",
+"aws_cloudwatch_metric_alarms",
 "aws_accessanalyzer_analyzers",
 "aws_ec2_vpcs",
 "aws_s3_bucket_versionings",
@@ -493,7 +493,7 @@ tables: ["aws_ec2_eips",
 "aws_iam_policies",
 "aws_s3_bucket_encryption_rules",
 "aws_cloudtrail_trails",
-"aws_cloudwatch_alarms",
+"aws_cloudwatch_metric_alarms",
 "aws_ec2_vpcs",
 "aws_iam_accounts",
 "aws_rds_cluster_snapshots",

transformations/aws/compliance-premium/dbt_project.yml

@@ -44,7 +44,7 @@ vars:
     - aws_ec2_security_groups
     - aws_sns_subscriptions
     - aws_cloudwatchlogs_metric_filters
-    - aws_cloudwatch_alarms
+    - aws_cloudwatch_metric_alarms
   cis_v2_0_0:
     - aws_iam_password_policies
     - aws_iam_user_attached_policies
@@ -89,7 +89,7 @@ vars:
     - aws_sns_subscriptions
     - aws_ec2_network_acls
     - aws_cloudwatchlogs_metric_filters
-    - aws_cloudwatch_alarms
+    - aws_cloudwatch_metric_alarms
     - aws_iam_policy_default_versions
   cis_v3_0_0:
     - aws_iam_password_policies
@@ -133,7 +133,7 @@ vars:
     - aws_cloudwatchlogs_metric_filters
     - aws_sns_subscriptions
     - aws_ec2_network_acls
-    - aws_cloudwatch_alarms
+    - aws_cloudwatch_metric_alarms
     - aws_kms_key_rotation_statuses
     - aws_iam_policy_default_versions
   foundational_security:
@@ -299,7 +299,7 @@ vars:
     - aws_s3_accounts
     - aws_ec2_security_groups
     - aws_sns_subscriptions
-    - aws_cloudwatch_alarms
+    - aws_cloudwatch_metric_alarms
     - aws_cloudwatchlogs_metric_filters
     - aws_kms_key_rotation_statuses
   imds_v2:
@@ -450,5 +450,5 @@ vars:
     - aws_s3_bucket_lifecycles
     - aws_cloudwatchlogs_metric_filters
     - aws_sns_subscriptions
-    - aws_cloudwatch_alarms
+    - aws_cloudwatch_metric_alarms
     - aws_kms_key_rotation_statuses

transformations/aws/compliance-premium/tests/bigquery.yml

@@ -3,7 +3,7 @@ spec:
   name: aws
   path: cloudquery/aws
   registry: cloudquery
-  version: "v34.9.0" # latest version of source aws plugin
+  version: "v35.0.0" # latest version of source aws plugin
   destinations: ["bigquery"]
   tables: ["*"]
 ---

transformations/aws/compliance-premium/tests/create_athena_tables.sh

@@ -0,0 +1,41 @@
+#!/usr/bin/env bash
+set -euo pipefail
+
+DATABASE="athena_integration"
+DATA_LOCATION="s3://cq-integration-tests/aws-compliance-athena/data"
+OUTPUT_LOCATION="s3://cq-integration-tests/dbt/"
+
+run_query() {
+  local query="$1"
+  local execution_id
+  execution_id=$(aws athena start-query-execution \
+    --query-string "$query" \
+    --query-execution-context Database="$DATABASE" \
+    --result-configuration OutputLocation="$OUTPUT_LOCATION" \
+    --output text --query QueryExecutionId)
+
+  while true; do
+    local state
+    state=$(aws athena get-query-execution --query-execution-id "$execution_id" --output text --query QueryExecution.Status.State)
+    case "$state" in
+      SUCCEEDED) return 0 ;;
+      FAILED | CANCELLED)
+        aws athena get-query-execution --query-execution-id "$execution_id" --output text --query QueryExecution.Status.StateChangeReason >&2
+        return 1
+        ;;
+    esac
+    sleep 2
+  done
+}
+
+run_query "CREATE EXTERNAL TABLE IF NOT EXISTS aws_cloudwatch_metric_alarms (
+  account_id string,
+  region string,
+  arn string,
+  alarm_name string,
+  actions_enabled boolean,
+  alarm_actions array<string>,
+  metrics string
+)
+STORED AS PARQUET
+LOCATION '${DATA_LOCATION}/aws_cloudwatch_metric_alarms/'"

transformations/aws/compliance-premium/tests/postgres.yml

@@ -3,7 +3,7 @@ spec:
   name: aws
   path: cloudquery/aws
   registry: cloudquery
-  version: "v34.9.0" # latest version of source aws plugin
+  version: "v35.0.0" # latest version of source aws plugin
   destinations: ["postgresql"]
   tables: ["*"]
 ---

transformations/aws/compliance-premium/tests/s3.yml

@@ -3,7 +3,7 @@ spec:
   name: aws
   path: cloudquery/aws
   registry: cloudquery
-  version: "v34.9.0" # latest version of source aws plugin
+  version: "v35.0.0" # latest version of source aws plugin
   destinations: ["s3"]
   tables: ["*"]
 ---