feat(prefect-aws): Add AWS CodeCommit git credential support

[bdalpe]

Summary

Adds support for authenticating Git operations with AWS CodeCommit using SigV4 signing. Introduces a new AwsCodeCommitCredentials block that generates authenticated Git URLs for CodeCommit repositories.

Changes

• New AwsCodeCommitCredentials block (src/integrations/prefect-aws/prefect_aws/credentials.py)

  • Uses SigV4 signing to generate authenticated Git URLs
  • Extracts region and repository info from CodeCommit URLs
  • Supports temporary credentials (session tokens)
  • Provides a format_git_credentials() method that returns a fully authenticated URL
  • Includes a get_client() method for authenticated CodeCommit client access

• Test coverage (src/integrations/prefect-aws/tests/test_credentials.py)

  • Tests for basic credential formatting with SigV4 signatures
  • Tests for session token support
  • Tests for instance role credentials
  • Tests for error handling when credentials are missing

• Module exports (src/integrations/prefect-aws/prefect_aws/__init__.py)

  • Exports AwsCodeCommitCredentials in the public API

Usage

The credentials block can be used in Prefect deployment configurations:

pull:
    - prefect.deployments.steps.git_clone:
        repository: https://git-codecommit.us-east-1.amazonaws.com/v1/repos/my-repo
        credentials: "{{ prefect.blocks.aws-codecommit-credentials.my-codecommit-credentials-block }}"

Technical Details

The implementation uses botocore's SigV4Auth to sign Git requests to CodeCommit. The signature is embedded in the Git URL format: https://{username}:{signature}@git-codecommit.{region}.amazonaws.com/v1/repos/{repository} where the username contains the AWS access key (and optional session token), and the signature is a SigV4 signature generated for the Git operation.

Resolves #19832

Checklist

• This pull request references any related issue by including "closes <link to issue>"
  • If no issue exists and your change is not a small fix, please create an issue first.
• If this pull request adds new functionality, it includes unit tests that cover the changes
• If this pull request removes docs files, it includes redirect settings in mint.json.
• If this pull request adds functions or classes, it includes helpful docstrings.

[github-actions]

This pull request is stale because it has been open 14 days with no activity. To keep this pull request open remove stale label or comment.