[backend] Configure proxy on AWS SDK (#14703)

[xfournet]

Proposed changes

• use aws-sdk-v3-proxy to configure AWS clients with proxies
• activate only if aws:proxy_enabled / AWS__PROXY_ENABLED is set to true

Related issues

• Fix AWS SDK proxy support #14703

Checklist

• I consider the submitted work as finished
• I tested the code for its functionality
• I wrote test cases for the relevant uses case (coverage and e2e)
• I added/update the relevant documentation (either on github or on notion)
• Where necessary I refactored code to improve the overall quality

[Copilot]

Pull request overview

Adds AWS SDK v3 proxy support to the GraphQL backend so AWS-backed integrations (S3/STS usage) can be routed through configured HTTP(S) proxies.

Changes:

• Add aws-sdk-v3-proxy dependency.
• Introduce src/utils/awsSdk.ts helper to apply proxy settings to AWS clients and STS role assumers.
• Wire proxy-aware AWS setup into S3 file storage and OpenSearch AWS credential flow.

Reviewed changes

Copilot reviewed 4 out of 5 changed files in this pull request and generated 7 comments.

Show a summary per file

File	Description
opencti-platform/opencti-graphql/package.json	Adds aws-sdk-v3-proxy dependency.
opencti-platform/opencti-graphql/yarn.lock	Locks new dependency tree for aws-sdk-v3-proxy and related Smithy packages.
opencti-platform/opencti-graphql/src/utils/awsSdk.ts	New utility to apply proxy configuration to AWS SDK clients / STS role assumer.
opencti-platform/opencti-graphql/src/database/raw-file-storage.ts	Wraps S3 client initialization to apply proxy settings; uses proxy-aware role assumer.
opencti-platform/opencti-graphql/src/database/engine.ts	Uses proxy-aware role assumer for OpenSearch AWS SigV4 credential resolution.

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 2.83%. Comparing base (f7e084c) to head (193331c).
⚠️ Report is 2 commits behind head on master.

❗ There is a different number of reports uploaded between BASE (f7e084c) and HEAD (193331c). Click for more details.

HEAD has 6 uploads less than BASE

Flag	BASE (f7e084c)	HEAD (193331c)
opencti-graphql	3	0
opencti-client-python	3	0

Additional details and impacted files

@@             Coverage Diff             @@
##           master   #14733       +/-   ##
===========================================
- Coverage   32.37%    2.83%   -29.55%     
===========================================
  Files        3098     2191      -907     
  Lines      211027   111144    -99883     
  Branches    38244    30333     -7911     
===========================================
- Hits        68312     3146    -65166     
+ Misses     142715   107998    -34717     

Flag	Coverage Δ
opencti-client-python	?
opencti-front	2.83% <ø> (ø)
opencti-graphql	?

Flags with carried forward coverage won't be shown. Click here to find out more.

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
• 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.

[Copilot]

Pull request overview

Copilot reviewed 5 out of 6 changed files in this pull request and generated 7 comments.

[Copilot]

Copilot encountered an error and was unable to review this pull request. You can try again by re-requesting a review.