Services

Every service is reached through its normal boto3 client (or native driver). This page lists what each one provides and where it diverges from AWS.

AI / ML

Service	Description	Limitations
Bedrock (runtime)	bedrock-runtime invoke_model / converse, translated to Ollama (offline) or OpenRouter (real frontier models with your key).	Local model quality ≠ frontier unless using the OpenRouter backend.
Bedrock (control plane)	bedrock: foundation-model catalog + batch model-invocation jobs.	Catalog is curated, not the full AWS list.
Bedrock embeddings	Ollama + nomic-embed-text for RAG vectors.	Embedding dims/model differ from Titan/Cohere.
Bedrock Agents	Agent loop with local tool calls (Ollama + SAM local).	No managed orchestration; tool-calling quality is model-dependent.
Bedrock AgentCore (Runtime)	Local agent on the /invocations + /ping contract via the bedrock-agentcore SDK.	Runtime only, Gateway/Memory/Identity are managed-only.
Bedrock Knowledge Bases	Vector search with k-NN over OpenSearch.	Retrieval only; no managed ingestion pipeline.
SageMaker	SDK local mode: real Docker training containers (instance_type="local").	Needs oblako[sagemaker] (v2 SDK) + Docker; local mode only.
SageMaker MLflow	Managed MLflow tracking-server container (SigV4 auth, boto3-style creds).	Needs oblako[mlflow].

Storage & databases

Service	Description	Limitations
S3	S3 API over the local filesystem (S3Proxy).	No flexible-checksum / aws-chunked; oblako sets checksum calc when_required.
S3 Tables / Iceberg	Iceberg REST catalog with tables on S3Proxy.	Iceberg-on-S3; not the managed S3 Tables maintenance (compaction etc.).
DynamoDB	Amazon’s DynamoDB Local.	Single local instance; no Streams→Lambda wiring.
Kinesis	Kinesis Data Streams via kinesalite (saidsef/aws-kinesis-local).	Streams only; no Firehose / Managed Flink.
Redshift	PostgreSQL 16 image impersonating Redshift; redshift-connector/dbt-redshift connect natively (no proxy).	Physical DDL (DISTKEY/SORTKEY/ENCODE, late-binding views, SUPER) runs on PostgreSQL semantics; Python UDFs are Python 3.
Redshift (control plane)	redshift clusters/nodes/endpoints/snapshots via moto.	Metadata only, the cluster endpoint isn’t the queryable engine.
Redshift Data API	redshift-data; SQL executes for real against the engine.	Statement results buffered in memory.
Redshift ML	CREATE MODEL trains in a SageMaker local container; predict UDF runs in-DB.	Needs oblako[sagemaker] + Docker; pure-Python predict UDF.
RDS / Aurora	moto control plane + a real PostgreSQL engine.	Engine is PostgreSQL regardless of the requested engine type.
RDS Data API	rds-data: synchronous SQL + transactions against the engine.	PostgreSQL semantics.

Analytics

Service	Description	Limitations
Athena	Athena-style SQL over the Iceberg REST catalog (= S3 Tables), via Trino.	Trino SQL dialect, not Athena/Presto-exact; no workgroups/federation.
Glue (jobs)	PySpark jobs in the official amazon/aws-glue-libs:5 image (per-job container).	~5 GB image; sequential workflows only (no full DAGs/crawlers).
Glue Data Catalog	boto3 glue client bridged to the Iceberg REST catalog.	Catalog operations over Iceberg; not the full Glue catalog surface.

Orchestration & compute

Service	Description	Limitations
Step Functions	Amazon’s aws-stepfunctions-local.	Lambda-backed states need a running SAM CLI.
Lambda	Control plane + real Docker-based invocation.	x86_64 + python3.12 runtime image; SAM CLI for the dev-loop.
API Gateway	External, AWS SAM CLI (sam local start-api) routing HTTP to your functions.	oblako doesn’t manage it; bring your own SAM CLI.

Management & control planes

Service	Description	Limitations
CloudFormation	cloudformation (+ aws cloudformation deploy / sam deploy) provisions real oblako resources.	Subset of resource types (S3, DynamoDB, Redshift, RDS, …).
IAM / STS	moto control plane + oblako’s policy evaluator.	Policy evaluation is a best-effort reimplementation.
EC2	moto control plane + real container-backed instances.	describe_* fidelity; instances are containers, not VMs.
OpenSearch	OpenSearch single-node (Knowledge Bases / RAG).	Security plugin disabled for local use.
AppConfig	Python reimplementation (control + data plane + rule evaluation).	Reimplementation, not the AWS engine.

---

The deep dives below cover the services with the most local-specific behavior.

Redshift

A PostgreSQL 16 image (deburky/redshift-local) that impersonates Amazon Redshift. A small shared_preload extension accepts the Redshift-only startup parameters Amazon’s redshift-connector driver sends and reports server_version 8.0.2, so the driver, and dbt-redshift, connect natively, no proxy. It ships the Redshift system tables, SET query_group, and the JSON/scalar UDFs.

from oblako.services import RedshiftService
con = RedshiftService().connect()   # psycopg2 to the engine on 5439

dbt-redshift: a type: redshift profile pointed at host: localhost, port: 5439, sslmode: disable.

Limitations

• Redshift-physical DDL (DISTKEY/SORTKEY/ENCODE, late-binding views, SUPER/VARBYTE) runs on PostgreSQL semantics, that syntax is rejected.

• Python UDFs run as Python 3 (real Redshift’s are Python 2, which Amazon is sunsetting); LANGUAGE plpythonu is aliased to the Python 3 handler.

• It’s a PostgreSQL engine underneath, no columnar storage, distribution, or the Redshift query planner.

S3

S3 API backed by S3Proxy over the local filesystem.

Limitations

• S3Proxy doesn’t implement the AWS SDK v2 default flexible checksums (x-amz-checksum-* over aws-chunked); oblako sets checksum calculation to when_required so uploads work.

SageMaker

Runs the SageMaker SDK’s local mode, instance_type="local" launches real Docker training containers.

Limitations

• Requires pip install 'oblako[sagemaker]' (pinned to the v2 SDK, v3 dropped local mode) and Docker.