Amazon EC2

Create network, security-group and instance records, and inspect their local state.

Plan: Free695 of 807 operations implemented

Network and instance records don't demonstrate routed traffic or a booted guest; in testing of Vera 1.2.0 preview, only their recorded state changed.

Example checked on Vera 1.2.2, 8 November 2026. Each coverage note names its own evidence and date.

Connect

This Free service needs no license key. Start Vera as in Get started, then run this in a terminal of its own, from an empty scratch directory. It gives the official AWS CLI dummy credentials and a config file of its own, so no AWS account is needed and your own AWS profile isn't touched.

export VERA_ENDPOINT="http://localhost:5003"
export AWS_ACCESS_KEY_ID=test AWS_SECRET_ACCESS_KEY=test
export AWS_REGION=us-east-1 AWS_DEFAULT_REGION=us-east-1
export AWS_SHARED_CREDENTIALS_FILE=/dev/null
export AWS_EC2_METADATA_DISABLED=true
export AWS_PAGER="" AWS_CLI_AUTO_PROMPT=off
unset AWS_PROFILE AWS_DEFAULT_PROFILE
unset AWS_SESSION_TOKEN AWS_SECURITY_TOKEN
unset AWS_WEB_IDENTITY_TOKEN_FILE AWS_ROLE_ARN AWS_ROLE_SESSION_NAME
unset AWS_CONTAINER_CREDENTIALS_FULL_URI
unset AWS_CONTAINER_CREDENTIALS_RELATIVE_URI
cat > vera-aws-config <<'EOF'
[default]
region = us-east-1
output = json
cli_binary_format = base64
s3 =
    addressing_style = path
EOF
export AWS_CONFIG_FILE="$PWD/vera-aws-config"

When you've finished every example in this terminal, close it and delete vera-aws-config, not before.

Use the AWS CLI’s ec2 commands. The emulator serves the 2016-11-15 API over the EC2 Query protocol, and the examples use us-east-1.

Example

Create a VPC with a subnet and a security group, then allow HTTPS in from 198.51.100.0/24. The addresses are documentation ranges, and the commands keep each generated ID in a variable for the steps after them.

VPC_ID=$(aws --endpoint-url "$VERA_ENDPOINT" ec2 create-vpc \
  --cidr-block 192.0.2.0/24 --query Vpc.VpcId --output text)
SUBNET_ID=$(aws --endpoint-url "$VERA_ENDPOINT" ec2 create-subnet \
  --vpc-id "$VPC_ID" --cidr-block 192.0.2.0/25 \
  --query Subnet.SubnetId --output text)
GROUP_ID=$(aws --endpoint-url "$VERA_ENDPOINT" ec2 create-security-group \
  --vpc-id "$VPC_ID" --group-name vera-docs-web \
  --description 'Documentation example' --query GroupId --output text)
aws --endpoint-url "$VERA_ENDPOINT" ec2 authorize-security-group-ingress \
  --group-id "$GROUP_ID" --protocol tcp --port 443 --cidr 198.51.100.0/24

The emulator accepts the rule. These are selected fields from the last command’s output. The GroupId differs on every run:

{
  "Return": true,
  "SecurityGroupRules": [
    {
      "GroupId": "sg-203223ccd2dc4e498",
      "IpProtocol": "tcp",
      "FromPort": 443,
      "ToPort": 443,
      "CidrIpv4": "198.51.100.0/24"
    }
  ]
}

Read the group back. Its description includes the rule:

aws --endpoint-url "$VERA_ENDPOINT" ec2 describe-security-groups --group-ids "$GROUP_ID"

To clean up, revoke the rule, then delete the security group, the subnet and the VPC:

aws --endpoint-url "$VERA_ENDPOINT" ec2 revoke-security-group-ingress \
  --group-id "$GROUP_ID" --protocol tcp --port 443 --cidr 198.51.100.0/24
aws --endpoint-url "$VERA_ENDPOINT" ec2 delete-security-group --group-id "$GROUP_ID"
aws --endpoint-url "$VERA_ENDPOINT" ec2 delete-subnet --subnet-id "$SUBNET_ID"
aws --endpoint-url "$VERA_ENDPOINT" ec2 delete-vpc --vpc-id "$VPC_ID"

Supported features

VPCs, subnets and security groups: create, describe and delete, with ingress rules authorized, read back and revoked.
An EBS-backed instance lifecycle, as records. In a separate check, a volume, a snapshot of it and an image registered with that snapshot as /dev/sda1 gave an image with RootDeviceType ebs. An instance launched from it was started, stopped, started again and terminated. Its recorded state went from running (16) to stopped (80), running (16) and terminated (48). The image was then deregistered, and the snapshot and volume deleted.
Listed in the earlier implementation inventory; not rechecked since: Elastic IP addresses, network interfaces, route tables, internet and NAT gateways, network ACLs, VPC endpoints and peering, launch templates, key pairs, Spot Instances and fleets, reservations and Dedicated Hosts, transit gateways, VPNs, IPAM, flow logs and tags.

Limitations

The main limits are below. A few more apply to every service, and the API coverage notes cover smaller differences.

Records, not infrastructure. VPCs, subnets and security groups were stored and described, but no packets were routed and no security group rule was enforced.
Instance states are recorded, not run. An EBS-backed instance record was started, stopped, started again and terminated in testing of Vera 1.2.0 preview. Its recorded state changed from running to stopped, running and terminated. This doesn’t establish a booted operating system, SSH, guest execution, disk I/O or routed traffic. Only that one image and instance were checked.
Instance-store instances can’t be stopped. In earlier testing, StopInstances answered UnsupportedOperation for an instance launched from an instance-store image. That case is separate from the EBS-backed lifecycle above.
Only a small slice ran. The example’s VPC, subnet and security group calls ran against Vera 1.2.2. The volume, snapshot, image and instance calls described on this page ran against Vera 1.2.0 preview. EC2’s hundreds of other operations weren’t rechecked.

API coverage

Every operation in AWS's published 2016-11-15 API (SDK model, botocore 1.43.105), and whether the emulator implements it. Availability combines the earlier implementation inventory with the dated observations below; checking a page's example does not verify every operation. Each note names its evidence first; an observation given without a build or date comes from earlier testing, on 3 November 2026. What the statuses mean

Operation	Status	Notes
AcceptAddressTransfer	Implemented
AcceptCapacityReservationBillingOwnership	Implemented
AcceptReservedInstancesExchangeQuote	Implemented
AcceptTransitGatewayClientVpnAttachment	Implemented
AcceptTransitGatewayMulticastDomainAssociations	Implemented
AcceptTransitGatewayPeeringAttachment	Implemented
AcceptTransitGatewayVpcAttachment	Implemented
AcceptVpcEndpointConnections	Implemented
AcceptVpcPeeringConnection	Implemented
AdvertiseByoipCidr	Implemented
AllocateAddress	Implemented
AllocateHosts	Implemented
AllocateIpamPoolCidr	Implemented
ApplySecurityGroupsToClientVpnTargetNetwork	Implemented
AssignIpv6Addresses	Implemented
AssignPrivateIpAddresses	Implemented
AssignPrivateNatGatewayAddress	Implemented
AssociateAddress	Implemented
AssociateApplicationStatusCheck	Not implemented
AssociateCapacityReservationBillingOwner	Implemented
AssociateClientVpnTargetNetwork	Implemented
AssociateDhcpOptions	Implemented
AssociateEnclaveCertificateIamRole	Not implemented
AssociateIamInstanceProfile	Implemented
AssociateInstanceEventWindow	Implemented
AssociateIpamByoasn	Implemented
AssociateIpamResourceDiscovery	Implemented
AssociateNatGatewayAddress	Implemented
AssociateRouteServer	Implemented
AssociateRouteTable	Implemented
AssociateSecurityGroupVpc	Implemented
AssociateSubnetCidrBlock	Implemented
AssociateTransitGatewayMulticastDomain	Implemented
AssociateTransitGatewayPolicyTable	Implemented
AssociateTransitGatewayRouteTable	Implemented
AssociateTrunkInterface	Not implemented
AssociateVpcCidrBlock	Implemented
AttachClassicLinkVpc	Not implemented
AttachImageWatermark	Not implemented
AttachInternetGateway	Implemented
AttachNetworkInterface	Implemented
AttachVerifiedAccessTrustProvider	Implemented
AttachVolume	Implemented
AttachVpnGateway	Implemented
AuthorizeClientVpnIngress	Implemented
AuthorizeSecurityGroupEgress	Implemented
AuthorizeSecurityGroupIngress	Implemented
BatchModifyIpamRoutingPolicyRegistrations	Not implemented
BundleInstance	Implemented
CancelBundleTask	Implemented
CancelCapacityReservation	Implemented
CancelCapacityReservationFleets	Implemented
CancelConversionTask	Implemented
CancelDeclarativePoliciesReport	Implemented
CancelExportTask	Implemented
CancelImageLaunchPermission	Implemented
CancelImportTask	Implemented
CancelReservedInstancesListing	Implemented
CancelSpotFleetRequests	Implemented
CancelSpotInstanceRequests	Implemented
ConfirmProductInstance	Not implemented
CopyFpgaImage	Implemented
CopyImage	Implemented
CopySnapshot	Implemented
CopyVolumes	Implemented
CreateApplicationStatusCheck	Not implemented
CreateCapacityManagerDataExport	Not implemented
CreateCapacityReservation	Implemented
CreateCapacityReservationBySplitting	Implemented
CreateCapacityReservationCancellationQuote	Not implemented
CreateCapacityReservationDateChangeQuote	Not implemented
CreateCapacityReservationFleet	Implemented
CreateCarrierGateway	Implemented
CreateClientVpnEndpoint	Implemented
CreateClientVpnRoute	Implemented
CreateCoipCidr	Implemented
CreateCoipPool	Implemented
CreateCustomerGateway	Implemented
CreateDefaultSubnet	Implemented
CreateDefaultVpc	Implemented
CreateDelegateMacVolumeOwnershipTask	Implemented
CreateDhcpOptions	Implemented
CreateEgressOnlyInternetGateway	Implemented
CreateFleet	Implemented
CreateFlowLogs	Implemented
CreateFpgaImage	Implemented
CreateImage	Implemented
CreateImageUsageReport	Implemented
CreateInstanceConnectEndpoint	Implemented
CreateInstanceEventWindow	Implemented
CreateInstanceExportTask	Implemented
CreateInternetGateway	Implemented
CreateInterruptibleCapacityReservationAllocation	Not implemented
CreateIpam	Implemented
CreateIpamExternalResourceVerificationToken	Implemented
CreateIpamInternetRegistryAssociation	Not implemented
CreateIpamPolicy	Not implemented
CreateIpamPool	Implemented
CreateIpamPrefixListResolver	Not implemented
CreateIpamPrefixListResolverTarget	Not implemented
CreateIpamResourceDiscovery	Implemented
CreateIpamRoutingPolicyRegistration	Not implemented
CreateIpamScope	Implemented
CreateKeyPair	Implemented
CreateLaunchTemplate	Implemented
CreateLaunchTemplateVersion	Implemented
CreateLocalGatewayRoute	Implemented
CreateLocalGatewayRouteTable	Implemented
CreateLocalGatewayRouteTableVirtualInterfaceGroupAssociation	Implemented
CreateLocalGatewayRouteTableVpcAssociation	Implemented
CreateLocalGatewayVirtualInterface	Implemented
CreateLocalGatewayVirtualInterfaceGroup	Implemented
CreateMacSystemIntegrityProtectionModificationTask	Implemented
CreateManagedPrefixList	Implemented
CreateNatGateway	Implemented
CreateNetworkAcl	Implemented
CreateNetworkAclEntry	Implemented
CreateNetworkInsightsAccessScope	Implemented
CreateNetworkInsightsPath	Implemented
CreateNetworkInterface	Implemented
CreateNetworkInterfacePermission	Implemented
CreatePlacementGroup	Implemented
CreatePublicIpv4Pool	Implemented
CreateReplaceRootVolumeTask	Implemented
CreateReservedInstancesListing	Implemented
CreateRestoreImageTask	Implemented
CreateRoute	Implemented
CreateRouteServer	Implemented
CreateRouteServerEndpoint	Implemented
CreateRouteServerPeer	Implemented
CreateRouteTable	Implemented
CreateSecondaryNetwork	Implemented
CreateSecondarySubnet	Implemented
CreateSecurityGroup	Implemented
CreateSnapshot	Implemented	Local observation: Vera 1.2.0 preview, 5 November 2026 — created a snapshot of that volume, which became the image's root device. No data was copied or checked.
CreateSnapshots	Implemented
CreateSpotDatafeedSubscription	Implemented
CreateStoreImageTask	Implemented
CreateSubnet	Implemented
CreateSubnetCidrReservation	Implemented
CreateTags	Implemented
CreateTrafficMirrorFilter	Implemented
CreateTrafficMirrorFilterRule	Implemented
CreateTrafficMirrorSession	Implemented
CreateTrafficMirrorTarget	Implemented
CreateTransitGateway	Implemented
CreateTransitGatewayConnect	Implemented
CreateTransitGatewayConnectPeer	Implemented
CreateTransitGatewayMeteringPolicy	Not implemented
CreateTransitGatewayMeteringPolicyEntry	Not implemented
CreateTransitGatewayMulticastDomain	Implemented
CreateTransitGatewayPeeringAttachment	Implemented
CreateTransitGatewayPolicyTable	Implemented
CreateTransitGatewayPolicyTableEntry	Not implemented
CreateTransitGatewayPrefixListReference	Implemented
CreateTransitGatewayRoute	Implemented
CreateTransitGatewayRouteTable	Implemented
CreateTransitGatewayRouteTableAnnouncement	Implemented
CreateTransitGatewayVpcAttachment	Implemented
CreateVerifiedAccessEndpoint	Implemented
CreateVerifiedAccessGroup	Implemented
CreateVerifiedAccessInstance	Implemented
CreateVerifiedAccessTrustProvider	Implemented
CreateVolume	Implemented	Local observation: Vera 1.2.0 preview, 5 November 2026 — created the source volume for an EBS-backed image in an instance lifecycle check. The volume is a record: no disk I/O was checked.
CreateVpc	Implemented
CreateVpcBlockPublicAccessExclusion	Implemented
CreateVpcEncryptionControl	Not implemented
CreateVpcEndpoint	Implemented
CreateVpcEndpointConnectionNotification	Implemented
CreateVpcEndpointServiceConfiguration	Implemented
CreateVpcPeeringConnection	Implemented
CreateVpnConcentrator	Implemented
CreateVpnConnection	Implemented
CreateVpnConnectionRoute	Implemented
CreateVpnGateway	Implemented
DeleteApplicationStatusCheck	Not implemented
DeleteCapacityManagerDataExport	Not implemented
DeleteCarrierGateway	Implemented
DeleteClientVpnEndpoint	Implemented
DeleteClientVpnEndpointAuthorizationPolicy	Not implemented
DeleteClientVpnRoute	Implemented
DeleteCoipCidr	Implemented
DeleteCoipPool	Implemented
DeleteCustomerGateway	Implemented
DeleteDhcpOptions	Implemented
DeleteEgressOnlyInternetGateway	Implemented
DeleteFleets	Implemented
DeleteFlowLogs	Implemented
DeleteFpgaImage	Implemented
DeleteImageUsageReport	Implemented
DeleteInstanceConnectEndpoint	Implemented
DeleteInstanceEventWindow	Implemented
DeleteInternetGateway	Implemented
DeleteIpam	Implemented
DeleteIpamExternalResourceVerificationToken	Implemented
DeleteIpamInternetRegistryAssociation	Not implemented
DeleteIpamPolicy	Not implemented
DeleteIpamPool	Implemented
DeleteIpamPrefixListResolver	Not implemented
DeleteIpamPrefixListResolverTarget	Not implemented
DeleteIpamResourceDiscovery	Implemented
DeleteIpamRoutingPolicyRegistration	Not implemented
DeleteIpamScope	Implemented
DeleteKeyPair	Implemented
DeleteLaunchTemplate	Implemented
DeleteLaunchTemplateVersions	Implemented
DeleteLocalGatewayRoute	Implemented
DeleteLocalGatewayRouteTable	Implemented
DeleteLocalGatewayRouteTableVirtualInterfaceGroupAssociation	Implemented
DeleteLocalGatewayRouteTableVpcAssociation	Implemented
DeleteLocalGatewayVirtualInterface	Implemented
DeleteLocalGatewayVirtualInterfaceGroup	Implemented
DeleteManagedPrefixList	Implemented
DeleteNatGateway	Implemented
DeleteNetworkAcl	Implemented
DeleteNetworkAclEntry	Implemented
DeleteNetworkInsightsAccessScope	Implemented
DeleteNetworkInsightsAccessScopeAnalysis	Implemented
DeleteNetworkInsightsAnalysis	Implemented
DeleteNetworkInsightsPath	Implemented
DeleteNetworkInterface	Implemented
DeleteNetworkInterfacePermission	Implemented
DeletePlacementGroup	Implemented
DeletePublicIpv4Pool	Implemented
DeleteQueuedReservedInstances	Implemented
DeleteRoute	Implemented
DeleteRouteServer	Implemented
DeleteRouteServerEndpoint	Implemented
DeleteRouteServerPeer	Implemented
DeleteRouteTable	Implemented
DeleteSecondaryNetwork	Implemented
DeleteSecondarySubnet	Implemented
DeleteSecurityGroup	Implemented
DeleteSnapshot	Implemented	Local observation: Vera 1.2.0 preview, 5 November 2026 — deleted the image's snapshot after the image was deregistered.
DeleteSpotDatafeedSubscription	Implemented
DeleteSubnet	Implemented
DeleteSubnetCidrReservation	Implemented
DeleteTags	Implemented
DeleteTrafficMirrorFilter	Implemented
DeleteTrafficMirrorFilterRule	Implemented
DeleteTrafficMirrorSession	Implemented
DeleteTrafficMirrorTarget	Implemented
DeleteTransitGateway	Implemented
DeleteTransitGatewayClientVpnAttachment	Implemented
DeleteTransitGatewayConnect	Implemented
DeleteTransitGatewayConnectPeer	Implemented
DeleteTransitGatewayMeteringPolicy	Not implemented
DeleteTransitGatewayMeteringPolicyEntry	Not implemented
DeleteTransitGatewayMulticastDomain	Implemented
DeleteTransitGatewayPeeringAttachment	Implemented
DeleteTransitGatewayPolicyTable	Implemented
DeleteTransitGatewayPolicyTableEntry	Not implemented
DeleteTransitGatewayPrefixListReference	Implemented
DeleteTransitGatewayRoute	Implemented
DeleteTransitGatewayRouteTable	Implemented
DeleteTransitGatewayRouteTableAnnouncement	Implemented
DeleteTransitGatewayVpcAttachment	Implemented
DeleteVerifiedAccessEndpoint	Implemented
DeleteVerifiedAccessGroup	Implemented
DeleteVerifiedAccessInstance	Implemented
DeleteVerifiedAccessTrustProvider	Implemented
DeleteVolume	Implemented	Local observation: Vera 1.2.0 preview, 5 November 2026 — deleted the snapshot's source volume.
DeleteVpc	Implemented
DeleteVpcBlockPublicAccessExclusion	Implemented
DeleteVpcEncryptionControl	Not implemented
DeleteVpcEndpointConnectionNotifications	Implemented
DeleteVpcEndpointServiceConfigurations	Implemented
DeleteVpcEndpoints	Implemented
DeleteVpcPeeringConnection	Implemented
DeleteVpnConcentrator	Implemented
DeleteVpnConnection	Implemented
DeleteVpnConnectionRoute	Implemented
DeleteVpnGateway	Implemented
DeprovisionByoipCidr	Implemented
DeprovisionIpamByoasn	Implemented
DeprovisionIpamPoolCidr	Implemented
DeprovisionPublicIpv4PoolCidr	Implemented
DeregisterImage	Implemented	Local observation: Vera 1.2.0 preview, 5 November 2026 — deregistered the EBS-backed image after its instance was terminated.
DeregisterInstanceEventNotificationAttributes	Implemented
DeregisterTransitGatewayMulticastGroupMembers	Implemented
DeregisterTransitGatewayMulticastGroupSources	Implemented
DescribeAccountAttributes	Implemented
DescribeAccountVpcEncryptionControl	Not implemented
DescribeAddressTransfers	Implemented
DescribeAddresses	Implemented
DescribeAddressesAttribute	Implemented
DescribeAggregateIdFormat	Implemented
DescribeApplicationStatus	Not implemented
DescribeApplicationStatusCheckAssociations	Not implemented
DescribeApplicationStatusChecks	Not implemented
DescribeAvailabilityZones	Implemented
DescribeAwsNetworkPerformanceMetricSubscriptions	Implemented
DescribeBundleTasks	Implemented
DescribeByoipCidrs	Implemented
DescribeCapacityBlockExtensionHistory	Implemented
DescribeCapacityBlockExtensionOfferings	Implemented
DescribeCapacityBlockOfferings	Implemented
DescribeCapacityBlockStatus	Implemented
DescribeCapacityBlocks	Implemented
DescribeCapacityManagerDataExports	Not implemented
DescribeCapacityReservationBillingRequests	Implemented
DescribeCapacityReservationCancellationQuotes	Not implemented
DescribeCapacityReservationDateChangeQuotes	Not implemented
DescribeCapacityReservationFleets	Implemented
DescribeCapacityReservationTopology	Implemented
DescribeCapacityReservations	Implemented
DescribeCarrierGateways	Implemented
DescribeClassicLinkInstances	Not implemented
DescribeClientVpnAuthorizationRules	Implemented
DescribeClientVpnConnections	Implemented
DescribeClientVpnEndpoints	Implemented
DescribeClientVpnRoutes	Implemented
DescribeClientVpnTargetNetworks	Implemented
DescribeCoipPools	Implemented
DescribeConversionTasks	Implemented
DescribeCustomerGateways	Implemented
DescribeDeclarativePoliciesReports	Implemented
DescribeDhcpOptions	Implemented
DescribeEgressOnlyInternetGateways	Implemented
DescribeElasticGpus	Implemented
DescribeExportImageTasks	Implemented
DescribeExportTasks	Implemented
DescribeFastLaunchImages	Implemented
DescribeFastSnapshotRestores	Implemented
DescribeFleetHistory	Implemented
DescribeFleetInstances	Implemented
DescribeFleets	Implemented
DescribeFlowLogs	Implemented
DescribeFpgaImageAttribute	Implemented
DescribeFpgaImages	Implemented
DescribeHostReservationOfferings	Implemented
DescribeHostReservations	Implemented
DescribeHosts	Implemented
DescribeIamInstanceProfileAssociations	Implemented
DescribeIdFormat	Implemented
DescribeIdentityIdFormat	Implemented
DescribeImageAttribute	Implemented
DescribeImageReferences	Implemented
DescribeImageUsageReportEntries	Implemented
DescribeImageUsageReports	Implemented
DescribeImages	Implemented
DescribeImportImageTasks	Implemented
DescribeImportSnapshotTasks	Implemented
DescribeInstanceAttribute	Implemented
DescribeInstanceConnectEndpoints	Implemented
DescribeInstanceCreditSpecifications	Implemented
DescribeInstanceEventNotificationAttributes	Implemented
DescribeInstanceEventWindows	Implemented
DescribeInstanceImageMetadata	Implemented
DescribeInstanceSqlHaHistoryStates	Not implemented
DescribeInstanceSqlHaStates	Not implemented
DescribeInstanceStatus	Implemented
DescribeInstanceTopology	Implemented
DescribeInstanceTypeOfferings	Implemented
DescribeInstanceTypes	Implemented
DescribeInstances	Implemented	Local observation: Vera 1.2.0 preview, 5 November 2026 — read the EBS-backed instance record's state after each change: `running` (16), `stopped` (80), `running` (16) and `terminated` (48). No guest execution was checked.
DescribeInternetGateways	Implemented
DescribeIpamByoasn	Implemented
DescribeIpamExternalResourceVerificationTokens	Implemented
DescribeIpamInternetRegistryAssociations	Not implemented
DescribeIpamPolicies	Not implemented
DescribeIpamPoolAllocations	Implemented
DescribeIpamPools	Implemented
DescribeIpamPrefixListResolverTargets	Not implemented
DescribeIpamPrefixListResolvers	Not implemented
DescribeIpamResourceDiscoveries	Implemented
DescribeIpamResourceDiscoveryAssociations	Implemented
DescribeIpamScopes	Implemented
DescribeIpams	Implemented
DescribeIpv6Pools	Implemented
DescribeKeyPairs	Implemented
DescribeLaunchTemplateVersions	Implemented
DescribeLaunchTemplates	Implemented
DescribeLocalGatewayRouteTableVirtualInterfaceGroupAssociations	Implemented
DescribeLocalGatewayRouteTableVpcAssociations	Implemented
DescribeLocalGatewayRouteTables	Implemented
DescribeLocalGatewayVirtualInterfaceGroups	Implemented
DescribeLocalGatewayVirtualInterfaces	Implemented
DescribeLocalGateways	Implemented
DescribeLockedSnapshots	Implemented
DescribeMacHosts	Implemented
DescribeMacModificationTasks	Implemented
DescribeManagedPrefixLists	Implemented
DescribeMovingAddresses	Not implemented
DescribeNatGateways	Implemented
DescribeNetworkAcls	Implemented
DescribeNetworkInsightsAccessScopeAnalyses	Implemented
DescribeNetworkInsightsAccessScopes	Implemented
DescribeNetworkInsightsAnalyses	Implemented
DescribeNetworkInsightsPaths	Implemented
DescribeNetworkInterfaceAttribute	Implemented
DescribeNetworkInterfacePermissions	Implemented
DescribeNetworkInterfaces	Implemented
DescribeOutpostLags	Implemented
DescribePlacementGroups	Implemented
DescribePrefixLists	Implemented
DescribePrincipalIdFormat	Implemented
DescribePublicIpv4Pools	Implemented
DescribeRegions	Implemented
DescribeReplaceRootVolumeTasks	Implemented
DescribeReservedInstances	Implemented
DescribeReservedInstancesListings	Implemented
DescribeReservedInstancesModifications	Implemented
DescribeReservedInstancesOfferings	Implemented
DescribeRouteServerEndpoints	Implemented
DescribeRouteServerPeers	Implemented
DescribeRouteServers	Implemented
DescribeRouteTables	Implemented
DescribeScheduledInstanceAvailability	Implemented
DescribeScheduledInstances	Implemented
DescribeSecondaryInterfaces	Implemented
DescribeSecondaryNetworks	Implemented
DescribeSecondarySubnets	Implemented
DescribeSecurityGroupReferences	Implemented
DescribeSecurityGroupRules	Implemented
DescribeSecurityGroupVpcAssociations	Implemented
DescribeSecurityGroups	Implemented
DescribeServiceLinkVirtualInterfaces	Implemented
DescribeSnapshotAttribute	Implemented
DescribeSnapshotTierStatus	Implemented
DescribeSnapshots	Implemented
DescribeSpotDatafeedSubscription	Implemented
DescribeSpotFleetInstances	Implemented
DescribeSpotFleetRequestHistory	Implemented
DescribeSpotFleetRequests	Implemented
DescribeSpotInstanceRequests	Implemented
DescribeSpotPriceHistory	Implemented
DescribeStaleSecurityGroups	Implemented
DescribeStoreImageTasks	Implemented
DescribeSubnets	Implemented
DescribeTags	Implemented
DescribeTrafficMirrorFilterRules	Implemented
DescribeTrafficMirrorFilters	Implemented
DescribeTrafficMirrorSessions	Implemented
DescribeTrafficMirrorTargets	Implemented
DescribeTransitGatewayAttachments	Implemented
DescribeTransitGatewayConnectPeers	Implemented
DescribeTransitGatewayConnects	Implemented
DescribeTransitGatewayMeteringPolicies	Not implemented
DescribeTransitGatewayMulticastDomains	Implemented
DescribeTransitGatewayPeeringAttachments	Implemented
DescribeTransitGatewayPolicyTables	Implemented
DescribeTransitGatewayRouteTableAnnouncements	Implemented
DescribeTransitGatewayRouteTables	Implemented
DescribeTransitGatewayVpcAttachments	Implemented
DescribeTransitGateways	Implemented
DescribeTrunkInterfaceAssociations	Not implemented
DescribeVerifiedAccessEndpoints	Implemented
DescribeVerifiedAccessGroups	Implemented
DescribeVerifiedAccessInstanceLoggingConfigurations	Implemented
DescribeVerifiedAccessInstances	Implemented
DescribeVerifiedAccessTrustProviders	Implemented
DescribeVolumeAttribute	Implemented
DescribeVolumeStatus	Implemented
DescribeVolumes	Implemented
DescribeVolumesModifications	Implemented
DescribeVpcAttribute	Implemented
DescribeVpcBlockPublicAccessExclusions	Implemented
DescribeVpcBlockPublicAccessOptions	Implemented
DescribeVpcClassicLink	Not implemented
DescribeVpcClassicLinkDnsSupport	Not implemented
DescribeVpcEncryptionControls	Not implemented
DescribeVpcEndpointAssociations	Implemented
DescribeVpcEndpointConnectionNotifications	Implemented
DescribeVpcEndpointConnections	Implemented
DescribeVpcEndpointServiceConfigurations	Implemented
DescribeVpcEndpointServicePermissions	Implemented
DescribeVpcEndpointServices	Implemented
DescribeVpcEndpoints	Implemented
DescribeVpcPeeringConnections	Implemented
DescribeVpcs	Implemented
DescribeVpnConcentrators	Implemented
DescribeVpnConnections	Implemented
DescribeVpnGateways	Implemented
DetachClassicLinkVpc	Not implemented
DetachImageWatermark	Not implemented
DetachInternetGateway	Implemented
DetachNetworkInterface	Implemented
DetachVerifiedAccessTrustProvider	Implemented
DetachVolume	Implemented
DetachVpnGateway	Implemented
DisableAddressTransfer	Implemented
DisableAllowedImagesSettings	Implemented
DisableApplicationStatusCheckSuppression	Not implemented
DisableAwsNetworkPerformanceMetricSubscription	Implemented
DisableCapacityManager	Not implemented
DisableEbsEncryptionByDefault	Implemented
DisableFastLaunch	Implemented
DisableFastSnapshotRestores	Implemented
DisableImage	Implemented
DisableImageBlockPublicAccess	Implemented
DisableImageDeprecation	Implemented
DisableImageDeregistrationProtection	Implemented
DisableInstanceSqlHaStandbyDetections	Not implemented
DisableIpamOrganizationAdminAccount	Implemented
DisableIpamPolicy	Not implemented
DisableRouteServerPropagation	Implemented
DisableSerialConsoleAccess	Implemented
DisableSnapshotBlockPublicAccess	Implemented
DisableTransitGatewayRouteTablePropagation	Implemented
DisableVgwRoutePropagation	Implemented
DisableVpcClassicLink	Not implemented
DisableVpcClassicLinkDnsSupport	Not implemented
DisassociateAddress	Implemented
DisassociateApplicationStatusCheck	Not implemented
DisassociateCapacityReservationBillingOwner	Implemented
DisassociateClientVpnTargetNetwork	Implemented
DisassociateEnclaveCertificateIamRole	Not implemented
DisassociateIamInstanceProfile	Implemented
DisassociateInstanceEventWindow	Implemented
DisassociateIpamByoasn	Implemented
DisassociateIpamResourceDiscovery	Implemented
DisassociateNatGatewayAddress	Implemented
DisassociateRouteServer	Implemented
DisassociateRouteTable	Implemented
DisassociateSecurityGroupVpc	Implemented
DisassociateSubnetCidrBlock	Implemented
DisassociateTransitGatewayMulticastDomain	Implemented
DisassociateTransitGatewayPolicyTable	Implemented
DisassociateTransitGatewayRouteTable	Implemented
DisassociateTrunkInterface	Not implemented
DisassociateVpcCidrBlock	Implemented
EnableAddressTransfer	Implemented
EnableAllowedImagesSettings	Implemented
EnableApplicationStatusCheckSuppression	Not implemented
EnableAwsNetworkPerformanceMetricSubscription	Implemented
EnableCapacityManager	Not implemented
EnableEbsEncryptionByDefault	Implemented
EnableFastLaunch	Implemented
EnableFastSnapshotRestores	Implemented
EnableImage	Implemented
EnableImageBlockPublicAccess	Implemented
EnableImageDeprecation	Implemented
EnableImageDeregistrationProtection	Implemented
EnableInstanceSqlHaStandbyDetections	Not implemented
EnableIpamInternetRegistryAssociation	Not implemented
EnableIpamOrganizationAdminAccount	Implemented
EnableIpamPolicy	Not implemented
EnableReachabilityAnalyzerOrganizationSharing	Implemented
EnableRouteServerPropagation	Implemented
EnableSerialConsoleAccess	Implemented
EnableSnapshotBlockPublicAccess	Implemented
EnableTransitGatewayRouteTablePropagation	Implemented
EnableVgwRoutePropagation	Implemented
EnableVolumeIO	Implemented
EnableVpcClassicLink	Not implemented
EnableVpcClassicLinkDnsSupport	Not implemented
ExportClientVpnClientCertificateRevocationList	Implemented
ExportClientVpnClientConfiguration	Implemented
ExportImage	Implemented
ExportTransitGatewayRoutes	Implemented
ExportVerifiedAccessInstanceClientConfiguration	Implemented
GetActiveVpnTunnelStatus	Implemented
GetAllowedImagesSettings	Implemented
GetAssociatedEnclaveCertificateIamRoles	Not implemented
GetAssociatedIpv6PoolCidrs	Implemented
GetAwsNetworkPerformanceData	Implemented
GetCapacityManagerAttributes	Not implemented
GetCapacityManagerMetricData	Not implemented
GetCapacityManagerMetricDimensions	Not implemented
GetCapacityManagerMonitoredTagKeys	Not implemented
GetCapacityReservationUsage	Implemented
GetClientVpnEndpointAuthorizationPolicy	Not implemented
GetCoipPoolUsage	Implemented
GetConsoleOutput	Implemented
GetConsoleScreenshot	Implemented
GetDeclarativePoliciesReportSummary	Implemented
GetDefaultCreditSpecification	Implemented
GetEbsDefaultKmsKeyId	Implemented
GetEbsEncryptionByDefault	Implemented
GetEnabledIpamPolicy	Not implemented
GetFlowLogsIntegrationTemplate	Implemented
GetGroupsForCapacityReservation	Implemented
GetHostReservationPurchasePreview	Implemented
GetImageAncestry	Implemented
GetImageBlockPublicAccessState	Implemented
GetInstanceMetadataDefaults	Implemented
GetInstanceTpmEkPub	Implemented
GetInstanceTypesFromInstanceRequirements	Implemented
GetInstanceUefiData	Implemented
GetIpamAddressHistory	Implemented
GetIpamDiscoveredAccounts	Implemented
GetIpamDiscoveredPublicAddresses	Implemented
GetIpamDiscoveredResourceCidrs	Implemented
GetIpamDiscoveredRoutes	Not implemented
GetIpamInternetRegistryAssociationAsns	Not implemented
GetIpamInternetRegistryAssociationCidrs	Not implemented
GetIpamPolicyAllocationRules	Not implemented
GetIpamPolicyOrganizationTargets	Not implemented
GetIpamPoolAllocations	Implemented
GetIpamPoolCidrs	Implemented
GetIpamPrefixListResolverRules	Not implemented
GetIpamPrefixListResolverVersionEntries	Not implemented
GetIpamPrefixListResolverVersions	Not implemented
GetIpamResourceCidrs	Implemented
GetIpamRouteOriginAuthorizations	Not implemented
GetIpamRouteProtectionFindings	Not implemented
GetIpamRoutingPolicyRegistrationDeltas	Not implemented
GetIpamRoutingPolicyRegistrations	Not implemented
GetLaunchTemplateData	Implemented
GetManagedPrefixListAssociations	Implemented
GetManagedPrefixListEntries	Implemented
GetManagedResourceVisibility	Not implemented
GetNetworkInsightsAccessScopeAnalysisFindings	Implemented
GetNetworkInsightsAccessScopeContent	Implemented
GetPasswordData	Implemented
GetReservedInstancesExchangeQuote	Implemented
GetRouteServerAssociations	Implemented
GetRouteServerPropagations	Implemented
GetRouteServerRoutingDatabase	Implemented
GetSecurityGroupsForVpc	Implemented
GetSerialConsoleAccessStatus	Implemented
GetSnapshotBlockPublicAccessState	Implemented
GetSpotPlacementScores	Implemented
GetSubnetCidrReservations	Implemented
GetTransitGatewayAttachmentPropagations	Implemented
GetTransitGatewayMeteringPolicyEntries	Not implemented
GetTransitGatewayMulticastDomainAssociations	Implemented
GetTransitGatewayPolicyTableAssociations	Implemented
GetTransitGatewayPolicyTableEntries	Implemented
GetTransitGatewayPrefixListReferences	Implemented
GetTransitGatewayRouteTableAssociations	Implemented
GetTransitGatewayRouteTablePropagations	Implemented
GetVerifiedAccessEndpointPolicy	Implemented
GetVerifiedAccessEndpointTargets	Implemented
GetVerifiedAccessGroupPolicy	Implemented
GetVpcResourcesBlockingEncryptionEnforcement	Not implemented
GetVpnConnectionDeviceSampleConfiguration	Implemented
GetVpnConnectionDeviceTypes	Implemented
GetVpnTunnelReplacementStatus	Implemented
ImportClientVpnClientCertificateRevocationList	Implemented
ImportImage	Implemented
ImportInstance	Implemented
ImportKeyPair	Implemented
ImportSnapshot	Implemented
ImportVolume	Implemented
ListImagesInRecycleBin	Implemented
ListSnapshotsInRecycleBin	Implemented
ListVolumesInRecycleBin	Implemented
LockSnapshot	Implemented
ModifyAccountVpcEncryptionControl	Not implemented
ModifyAddressAttribute	Implemented
ModifyApplicationStatusCheck	Not implemented
ModifyAvailabilityZoneGroup	Implemented
ModifyCapacityReservation	Implemented
ModifyCapacityReservationFleet	Implemented
ModifyClientVpnEndpoint	Implemented
ModifyClientVpnEndpointAuthorizationPolicy	Not implemented
ModifyDefaultCreditSpecification	Implemented
ModifyEbsDefaultKmsKeyId	Implemented
ModifyFleet	Implemented
ModifyFpgaImageAttribute	Implemented
ModifyHosts	Implemented
ModifyIdFormat	Implemented
ModifyIdentityIdFormat	Implemented
ModifyImageAttribute	Implemented
ModifyInstanceAttribute	Implemented
ModifyInstanceCapacityReservationAttributes	Implemented
ModifyInstanceConnectEndpoint	Implemented
ModifyInstanceCpuOptions	Implemented
ModifyInstanceCreditSpecification	Implemented
ModifyInstanceEventStartTime	Implemented
ModifyInstanceEventWindow	Implemented
ModifyInstanceMaintenanceOptions	Implemented
ModifyInstanceMetadataDefaults	Implemented
ModifyInstanceMetadataOptions	Implemented
ModifyInstanceNetworkPerformanceOptions	Implemented
ModifyInstancePlacement	Implemented
ModifyIpam	Implemented
ModifyIpamPolicyAllocationRules	Not implemented
ModifyIpamPool	Implemented
ModifyIpamPoolAllocation	Implemented
ModifyIpamPrefixListResolver	Not implemented
ModifyIpamPrefixListResolverTarget	Not implemented
ModifyIpamResourceCidr	Implemented
ModifyIpamResourceDiscovery	Implemented
ModifyIpamRoutingPolicyRegistration	Not implemented
ModifyIpamScope	Implemented
ModifyLaunchTemplate	Implemented
ModifyLocalGatewayRoute	Implemented
ModifyManagedPrefixList	Implemented
ModifyManagedResourceVisibility	Not implemented
ModifyNetworkInterfaceAttribute	Implemented
ModifyPrivateDnsNameOptions	Implemented
ModifyPublicIpDnsNameOptions	Implemented
ModifyReservedInstances	Implemented
ModifyRouteServer	Implemented
ModifySecurityGroupRules	Implemented
ModifySnapshotAttribute	Implemented
ModifySnapshotTier	Implemented
ModifySpotFleetRequest	Implemented
ModifySubnetAttribute	Implemented
ModifyTrafficMirrorFilterNetworkServices	Implemented
ModifyTrafficMirrorFilterRule	Implemented
ModifyTrafficMirrorSession	Implemented
ModifyTransitGateway	Implemented
ModifyTransitGatewayMeteringPolicy	Not implemented
ModifyTransitGatewayPolicyTableEntry	Not implemented
ModifyTransitGatewayPrefixListReference	Implemented
ModifyTransitGatewayVpcAttachment	Implemented
ModifyVerifiedAccessEndpoint	Implemented
ModifyVerifiedAccessEndpointPolicy	Implemented
ModifyVerifiedAccessGroup	Implemented
ModifyVerifiedAccessGroupPolicy	Implemented
ModifyVerifiedAccessInstance	Implemented
ModifyVerifiedAccessInstanceLoggingConfiguration	Implemented
ModifyVerifiedAccessTrustProvider	Implemented
ModifyVolume	Implemented
ModifyVolumeAttribute	Implemented
ModifyVpcAttribute	Implemented
ModifyVpcBlockPublicAccessExclusion	Implemented
ModifyVpcBlockPublicAccessOptions	Implemented
ModifyVpcEncryptionControl	Not implemented
ModifyVpcEndpoint	Implemented
ModifyVpcEndpointConnectionNotification	Implemented
ModifyVpcEndpointPayerResponsibility	Not implemented
ModifyVpcEndpointServiceConfiguration	Implemented
ModifyVpcEndpointServicePayerResponsibility	Implemented
ModifyVpcEndpointServicePermissions	Implemented
ModifyVpcPeeringConnectionOptions	Implemented
ModifyVpcTenancy	Implemented
ModifyVpnConnection	Implemented
ModifyVpnConnectionOptions	Implemented
ModifyVpnTunnelCertificate	Implemented
ModifyVpnTunnelOptions	Implemented
MonitorInstances	Implemented
MoveAddressToVpc	Not implemented
MoveByoipCidrToIpam	Implemented
MoveCapacityReservationInstances	Implemented
ProvisionByoipCidr	Implemented
ProvisionIpamByoasn	Implemented
ProvisionIpamPoolCidr	Implemented
ProvisionPublicIpv4PoolCidr	Implemented
PurchaseCapacityBlock	Implemented
PurchaseCapacityBlockExtension	Implemented
PurchaseHostReservation	Implemented
PurchaseReservedInstancesOffering	Implemented
PurchaseScheduledInstances	Implemented
RebootInstances	Implemented
RegisterImage	Implemented	Local observation: Vera 1.2.0 preview, 5 November 2026 — registered an image with the snapshot as `/dev/sda1`; it reported `RootDeviceType` `ebs`.
RegisterInstanceEventNotificationAttributes	Implemented
RegisterTransitGatewayMulticastGroupMembers	Implemented
RegisterTransitGatewayMulticastGroupSources	Implemented
RejectCapacityReservationBillingOwnership	Implemented
RejectTransitGatewayClientVpnAttachment	Implemented
RejectTransitGatewayMulticastDomainAssociations	Implemented
RejectTransitGatewayPeeringAttachment	Implemented
RejectTransitGatewayVpcAttachment	Implemented
RejectVpcEndpointConnections	Implemented
RejectVpcPeeringConnection	Implemented
ReleaseAddress	Implemented
ReleaseHosts	Implemented
ReleaseIpamPoolAllocation	Implemented
ReplaceIamInstanceProfileAssociation	Implemented
ReplaceImageCriteriaInAllowedImagesSettings	Implemented
ReplaceImageInstanceTypeSpecification	Not implemented
ReplaceNetworkAclAssociation	Implemented
ReplaceNetworkAclEntry	Implemented
ReplaceRoute	Implemented
ReplaceRouteTableAssociation	Implemented
ReplaceTransitGatewayRoute	Implemented
ReplaceVpnTunnel	Implemented
ReportInstanceStatus	Implemented
RequestSpotFleet	Implemented
RequestSpotInstances	Implemented
ResetAddressAttribute	Implemented
ResetEbsDefaultKmsKeyId	Implemented
ResetFpgaImageAttribute	Implemented
ResetImageAttribute	Implemented
ResetInstanceAttribute	Implemented
ResetNetworkInterfaceAttribute	Implemented
ResetSnapshotAttribute	Implemented
RestoreAddressToClassic	Not implemented
RestoreImageFromRecycleBin	Implemented
RestoreManagedPrefixListVersion	Implemented
RestoreSnapshotFromRecycleBin	Implemented
RestoreSnapshotTier	Implemented
RestoreVolumeFromRecycleBin	Implemented
RevokeClientVpnIngress	Implemented
RevokeSecurityGroupEgress	Implemented
RevokeSecurityGroupIngress	Implemented
RunInstances	Implemented	Local observation: Vera 1.2.0 preview, 5 November 2026 — launched an instance record from that EBS-backed image, recorded as `running` (16). No guest booted.
RunScheduledInstances	Implemented
SearchLocalGatewayRoutes	Implemented
SearchTransitGatewayMulticastGroups	Implemented
SearchTransitGatewayRoutes	Implemented
SendDiagnosticInterrupt	Implemented
StartDeclarativePoliciesReport	Implemented
StartInstances	Implemented	Local observation: Vera 1.2.0 preview, 5 November 2026 — an EBS-backed instance record completed the running/stopped/running/terminated lifecycle; no guest execution was checked.
StartNetworkInsightsAccessScopeAnalysis	Implemented
StartNetworkInsightsAnalysis	Implemented
StartVpcEndpointServicePrivateDnsVerification	Implemented
StopInstances	Implemented	In earlier testing, answered `UnsupportedOperation` for an instance launched from an instance-store image. Local observation: Vera 1.2.0 preview, 5 November 2026 — an EBS-backed instance record completed the running/stopped/running/terminated lifecycle; no guest execution was checked.
TerminateClientVpnConnections	Implemented
TerminateInstances	Implemented	Local observation: Vera 1.2.0 preview, 5 November 2026 — an EBS-backed instance record completed the running/stopped/running/terminated lifecycle; no guest execution was checked.
UnassignIpv6Addresses	Implemented
UnassignPrivateIpAddresses	Implemented
UnassignPrivateNatGatewayAddress	Implemented
UnlockSnapshot	Implemented
UnmonitorInstances	Implemented
UpdateCapacityManagerMonitoredTagKeys	Not implemented
UpdateCapacityManagerOrganizationsAccess	Not implemented
UpdateInterruptibleCapacityReservationAllocation	Not implemented
UpdateSecurityGroupRuleDescriptionsEgress	Implemented
UpdateSecurityGroupRuleDescriptionsIngress	Implemented
ValidateSecurityGroupQuotasForInterface	Not implemented
WithdrawByoipCidr	Implemented