feat(rules): add AWS IaC cost review rules

[dannysteenman]

Summary

• What changed?
  Added new AWS IaC cost review rules for S3, ECR, EBS, EC2, DynamoDB, Lambda, and RDS, and extended the existing ECS and Redshift rules to support IaC scans. The SDK static registry now normalizes the additional Terraform and CloudFormation shapes those rules need.
• Why was this needed?
  This expands pre-deploy cost coverage for AWS infrastructure that is easy to detect statically in Terraform and CloudFormation before expensive defaults or wasteful configurations reach runtime.

Diagram

flowchart LR
  IaC["Terraform / CloudFormation"] --> Registry["AWS static registry"]
  Registry --> Datasets["Normalized AWS static datasets"]
  Datasets --> Rules["AWS cost review rules"]
  Rules --> Findings["IaC findings"]

Loading

Scope

• cloudburn (cli)
• @cloudburn/sdk
• @cloudburn/rules
• docs/community files

Release Notes

• Added a .changeset/*.md file for published package changes
• No published package changes in this PR

Verification

• pnpm lint
• pnpm typecheck
• pnpm test
• pnpm build
• pnpm verify

Boundary Checks

• No engine/parser/provider logic added to @cloudburn/rules
• CLI delegates scan logic to SDK
• README/CONTRIBUTING/docs updated when behavior changed

Related Issues

None found via gh issue list.

[axonstone]

roborev: Combined Review (aff9c3f)

Verdict: No High or Critical findings identified.

No deduplicated findings met the High/Critical threshold for inclusion.

Medium/Low issues were reported by some reviewers, but are omitted here per instruction.

---

Synthesized from 4 reviews (agents: claude-code, codex | types: default, security)

[axonstone]

Re: comment 4144486377

Already addressed. The combined review reported no actionable high or critical findings, so no code change was required for that summary comment.

[axonstone]

Re: comment 4144486377

No actionable findings were included in this synthesized review note, so there was nothing to change on the branch. I re-verified the PR state locally with pnpm verify while closing out the remaining review threads.

[axonstone]

Re: comment 4144486377

Reviewed. This synthesized summary did not include any actionable findings, so no code changes were needed.