[backend] Configure proxy on AWS SDK (#14703)

[xfournet]

Proposed changes

• use aws-sdk-v3-proxy to configure AWS clients with proxies
• activate only if aws:proxy_enabled / AWS__PROXY_ENABLED is set to true

Related issues

• Fix AWS SDK proxy support #14703

Checklist

• I consider the submitted work as finished
• I tested the code for its functionality
• I wrote test cases for the relevant uses case (coverage and e2e)
• I added/update the relevant documentation (either on github or on notion)
• Where necessary I refactored code to improve the overall quality

[Copilot]

Pull request overview

Adds AWS SDK v3 proxy support to the GraphQL backend so AWS-backed integrations (S3/STS usage) can be routed through configured HTTP(S) proxies.

Changes:

• Add aws-sdk-v3-proxy dependency.
• Introduce src/utils/awsSdk.ts helper to apply proxy settings to AWS clients and STS role assumers.
• Wire proxy-aware AWS setup into S3 file storage and OpenSearch AWS credential flow.

Reviewed changes

Copilot reviewed 4 out of 5 changed files in this pull request and generated 7 comments.

Show a summary per file

File	Description
opencti-platform/opencti-graphql/package.json	Adds aws-sdk-v3-proxy dependency.
opencti-platform/opencti-graphql/yarn.lock	Locks new dependency tree for aws-sdk-v3-proxy and related Smithy packages.
opencti-platform/opencti-graphql/src/utils/awsSdk.ts	New utility to apply proxy configuration to AWS SDK clients / STS role assumer.
opencti-platform/opencti-graphql/src/database/raw-file-storage.ts	Wraps S3 client initialization to apply proxy settings; uses proxy-aware role assumer.
opencti-platform/opencti-graphql/src/database/engine.ts	Uses proxy-aware role assumer for OpenSearch AWS SigV4 credential resolution.

[codecov]

Codecov Report

❌ Patch coverage is 48.14815% with 14 lines in your changes missing coverage. Please review.
✅ Project coverage is 32.22%. Comparing base (820a5b0) to head (45219f5).
⚠️ Report is 2 commits behind head on master.

Files with missing lines	Patch %	Lines
...encti-platform/opencti-graphql/src/utils/awsSdk.ts	45.45%	12 Missing ⚠️
...ti-platform/opencti-graphql/src/database/engine.ts	50.00%	1 Missing ⚠️
...m/opencti-graphql/src/database/raw-file-storage.ts	66.66%	1 Missing ⚠️

Additional details and impacted files

@@            Coverage Diff             @@
##           master   #14733      +/-   ##
==========================================
- Coverage   32.36%   32.22%   -0.14%     
==========================================
  Files        3107     3108       +1     
  Lines      211587   211607      +20     
  Branches    38362    38330      -32     
==========================================
- Hits        68472    68185     -287     
- Misses     143115   143422     +307     

Flag	Coverage Δ
opencti-client-python	45.48% <ø> (ø)
opencti-front	2.82% <ø> (ø)
opencti-graphql	67.33% <48.14%> (-0.34%)	⬇️

Flags with carried forward coverage won't be shown. Click here to find out more.

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
• 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.

[Copilot]

Pull request overview

Copilot reviewed 5 out of 6 changed files in this pull request and generated 7 comments.

[Copilot]

Copilot encountered an error and was unable to review this pull request. You can try again by re-requesting a review.

[Copilot]

Pull request overview

Copilot reviewed 6 out of 7 changed files in this pull request and generated no new comments.