feat(chaos-engineering): add stress test lambda functions for Aurora, ElastiCache, FIS, and Lambda layer module

[itsharshvb]

Summary

Open-sources the internal chaos-engineering / resilience-testing modules into hyperswitch-suite so they can be reused by downstream projects.

Modules added

Module	Path	Purpose
aurora-fault-injection	terraform/aws/modules/composition/aurora-fault-injection/	Lambda-based fault injection (crash, replica failure, disk failure/congestion) and stress tests for Aurora PostgreSQL
elasticache-stress-test	terraform/aws/modules/composition/elasticache-stress-test/	Lambda-based Redis/Valkey stress tests: CPU burn, mixed open-loop workload, memory pressure, connection exhaustion, failover, cleanup
fis-experiments	terraform/aws/modules/composition/fis-experiments/	AWS FIS experiment templates for Aurora, ElastiCache, EC2, network latency, and stress-under-failure
lambda-layer	terraform/aws/modules/composition/lambda-layer/	Generic Lambda layer publisher; used to ship redis-py and psycopg2 dependencies for the stress-test lambdas

Validation performed

• terraform fmt -recursive -write=true
• terraform validate for aurora-fault-injection, elasticache-stress-test, fis-experiments, and lambda-layer
• python3 -m py_compile on all Lambda source files

Usage note

The lambda-layer module consumes a pre-built zip. Typical usage is to publish redis-py for the Redis/Valkey stress lambdas and psycopg2 for the Aurora fault-injection/stress lambdas.

[sentinelone-cnapp-aps1]

SentinelOne IaC Issues Detector

❌ Detected 7 issue(s) in your pull request

Here are the detected issues.

Resource	File	Issue Message	Severity
aws_cloudwatch_log_group.fault_injection	main.tf	Terraform - Multiple AWS CloudWatch Log Groups have been detected without encryption	HIGH
aws_cloudwatch_log_group.stress_test	main.tf	Terraform - Multiple AWS CloudWatch Log Groups have been detected without encryption	HIGH
aws_cloudwatch_log_group.stress_test	main.tf	Terraform - Multiple AWS CloudWatch Log Groups have been detected without encryption	HIGH
aws_lambda_function.fault_injection	main.tf	Terraform - A Lambda Function with Privileged Role Detected	HIGH
aws_lambda_function.stress_test	main.tf	Terraform - A Lambda Function with Privileged Role Detected	HIGH
aws_lambda_function.stress_test	main.tf	Terraform - A Lambda Function with Privileged Role Detected	HIGH
aws_kms_key.this	main.tf	Terraform - KMS key policy should not allow access to all principals	MEDIUM

---

SentinelOne CNS is a cloud-agnostic, agentless CSPM & CWPP solution that continuously detects and prevents vulnerabilities that have the highest probability of being exploited in Azure, AWS, Google Cloud, and Kubernetes.