chore(langgraph-checkpoint-aws): Skip DynamoDB checkpointer tests if 403 (#748)

Author: michaelnchin

libs/langgraph-checkpoint-aws/tests/integration_tests/checkpoint/dynamodb/test_langgraph_dynamodb_integration.py

@@ -23,6 +23,21 @@
 
 logger = logging.getLogger(__name__)
 
+
+def skip_on_aws_403(call_fn, action_description: str):
+    try:
+        return call_fn()
+    except ClientError as e:
+        code = e.response["Error"]["Code"]
+        if code in ("AccessDenied", "AccessDeniedException", "403"):
+            pytest.skip(
+                f"Insufficient permissions to execute "
+                f"{action_description}, skipping test."
+            )
+        else:
+            raise
+
+
 # Configuration
 AWS_REGION = os.getenv("AWS_REGION", "eu-west-1")
 DYNAMODB_TABLE = os.getenv(
@@ -61,45 +76,56 @@ def aws_resources():
 
     # Create DynamoDB table if not exists
     try:
-        dynamodb.describe_table(TableName=DYNAMODB_TABLE)
+        skip_on_aws_403(
+            lambda: dynamodb.describe_table(TableName=DYNAMODB_TABLE),
+            f"DynamoDB DescribeTable on {DYNAMODB_TABLE}",
+        )
         logger.info(f"DynamoDB table '{DYNAMODB_TABLE}' already exists")
     except ClientError as e:
         if e.response["Error"]["Code"] == "ResourceNotFoundException":
             logger.info(f"Creating DynamoDB table '{DYNAMODB_TABLE}'...")
-            dynamodb.create_table(
-                TableName=DYNAMODB_TABLE,
-                KeySchema=[
-                    {"AttributeName": "PK", "KeyType": "HASH"},
-                    {"AttributeName": "SK", "KeyType": "RANGE"},
-                ],
-                AttributeDefinitions=[
-                    {"AttributeName": "PK", "AttributeType": "S"},
-                    {"AttributeName": "SK", "AttributeType": "S"},
-                ],
-                BillingMode="PAY_PER_REQUEST",
+            skip_on_aws_403(
+                lambda: dynamodb.create_table(
+                    TableName=DYNAMODB_TABLE,
+                    KeySchema=[
+                        {"AttributeName": "PK", "KeyType": "HASH"},
+                        {"AttributeName": "SK", "KeyType": "RANGE"},
+                    ],
+                    AttributeDefinitions=[
+                        {"AttributeName": "PK", "AttributeType": "S"},
+                        {"AttributeName": "SK", "AttributeType": "S"},
+                    ],
+                    BillingMode="PAY_PER_REQUEST",
+                ),
+                "DynamoDB CreateTable",
             )
-            # Wait for table to be active
             waiter = dynamodb.get_waiter("table_exists")
-            waiter.wait(TableName=DYNAMODB_TABLE)
+            skip_on_aws_403(
+                lambda: waiter.wait(TableName=DYNAMODB_TABLE), "DynamoDB GetWaiter"
+            )
             logger.info(f"DynamoDB table '{DYNAMODB_TABLE}' created successfully")
         else:
             raise
 
     # Create S3 bucket if not exists
     try:
-        s3.head_bucket(Bucket=S3_BUCKET)
+        skip_on_aws_403(lambda: s3.head_bucket(Bucket=S3_BUCKET), "S3 HeadBucket")
         logger.info(f"S3 bucket '{S3_BUCKET}' already exists")
     except ClientError as e:
         error_code = e.response["Error"]["Code"]
         if error_code == "404":
             logger.info(f"Creating S3 bucket '{S3_BUCKET}'...")
-            if AWS_REGION == "us-east-1":
-                s3.create_bucket(Bucket=S3_BUCKET)
-            else:
-                s3.create_bucket(
-                    Bucket=S3_BUCKET,
-                    CreateBucketConfiguration={"LocationConstraint": AWS_REGION},
-                )
+
+            def create_bucket():
+                if AWS_REGION == "us-east-1":
+                    s3.create_bucket(Bucket=S3_BUCKET)
+                else:
+                    s3.create_bucket(
+                        Bucket=S3_BUCKET,
+                        CreateBucketConfiguration={"LocationConstraint": AWS_REGION},
+                    )
+
+            skip_on_aws_403(create_bucket, "S3 CreateBucket")
             logger.info(f"S3 bucket '{S3_BUCKET}' created successfully")
         else:
             raise