arnmatch 2026.2.0__tar.gz → 2026.2.2__tar.gz

{arnmatch-2026.2.0 → arnmatch-2026.2.2}/.github/workflows/workflow.yml

@@ -3,7 +3,7 @@ name: Release
 on:
   push:
     tags:
-      - "v*"
+      - "20[0-9][0-9].[0-9]*.[0-9]*"
 
 jobs:
   release:

{arnmatch-2026.2.0 → arnmatch-2026.2.2}/CLAUDE.md

@@ -12,14 +12,13 @@ arnmatch is a zero-dependency Python library that parses AWS ARNs into structure
 make lint       # Run ruff linter
 make test       # Run pytest tests
 make check      # Run lint and test
+make generate   # Regenerate patterns from AWS docs (runs codegen pipeline)
 make build      # Copy generated patterns to src + build wheel/tarball
 make publish    # Build and upload to PyPI
 make clean      # Remove build artifacts
-```
 
-Run codegen to regenerate patterns from AWS docs:
-```bash
-uv run codegen/codegen.py
+# Integration test (requires AWS credentials + Resource Explorer)
+make test-integration
 ```
 
 Test locally:
@@ -32,30 +31,32 @@ uv run arnmatch <arn>
 ### Core Library (`src/arnmatch/`)
 
 - `__init__.py` - Main module with `arnmatch(arn)` function and `ARN` dataclass
-- `arn_patterns.py` - Generated file containing compiled regex patterns indexed by service and AWS SDK services mapping
+- `arn_patterns.py` - Generated file containing compiled regex patterns indexed by service, SDK services mapping, and CloudFormation resource types
 
-The `arnmatch()` function splits the ARN, looks up patterns by service, and returns an `ARN` with partition, service, region, account, resource_type, and captured groups. The `resource_id` and `resource_name` properties use heuristics (prefer groups ending in "Id" or "Name"). The `aws_sdk_services` property returns boto3 client names for the service.
+The `arnmatch()` function splits the ARN, looks up patterns by service, and returns an `ARN` with partition, service, region, account, resource_type, and captured groups. Key properties: `resource_id`/`resource_name` use heuristics (prefer groups ending in "Id" or "Name"), `aws_sdk_service` returns the specific boto3 client for this resource type, `cloudformation_resource` returns the CFN type (e.g., `AWS::Lambda::Function`).
 
 ### Code Generation (`codegen/`)
 
 - `scraper.py` - Scrapes AWS service authorization reference pages, caches results with joblib
-- `codegen.py` - Processes resources and generates `arn_patterns.py`
-- `index_sdk.py` - Maps ARN service names to AWS SDK (boto3) client names
+- `codegen.py` - Main orchestrator: processes resources and generates `arn_patterns.yaml`
+- `codegen_python.py` - Converts YAML to Python with compiled regex patterns
+- `index_*.py` - Indexers for ARN patterns, SDK clients, and CloudFormation types
+- `transform.py` - Normalizes resource type names (e.g., `loadbalancer/app/` → `loadbalancer-app`)
 
-Data flow: AWS docs → `scraper.py` → raw resources → `codegen.py` + `index_sdk.py` → `codegen/build/arn_patterns.py` → (copied by `make build`) → `src/arnmatch/arn_patterns.py`
+Data flow: AWS docs → `scraper.py` → raw resources → `codegen.py` → `arn_patterns.yaml` → `codegen_python.py` → `codegen/build/arn_patterns.py` → (copied by `make build`) → `src/arnmatch/arn_patterns.py`
 
 ### Key Design Decisions
 
 1. **Pattern ordering**: Patterns sorted by specificity (more literal segments first) for correct matching
 2. **Service index**: O(1) lookup by service before pattern matching
 3. **Overrides in codegen.py**: `PATTERN_OVERRIDES` fixes AWS docs that use wildcards instead of capture groups; `PATTERN_INCLUDES` adds patterns not in docs (EKS k8s resources, Inspector legacy)
-4. **SDK service mapping**: `index_sdk.py` maps ARN service names to boto3 client names using botocore metadata (signingName/endpointPrefix), with manual overrides for edge cases and excludes for discontinued/console-only services
+4. **SDK service mapping**: `index_sdk.py` maps ARN service names to boto3 client names using botocore metadata (signingName/endpointPrefix), with manual overrides for edge cases and excludes for discontinued/console-only services. Rules are stored in `codegen/rules/*.json`
 5. **Zero runtime dependencies**: Only codegen has external deps (requests, beautifulsoup4, joblib, boto3)
 
 ## Build Notes
 
 - Uses `uv` for package management (not pip)
 - Build system is hatchling with dynamic version from `src/arnmatch/__init__.py`
-- **Versioning**: CalVer format `YYYY.0M.MICRO` (e.g., `2026.01.0`)
+- **Versioning**: CalVer format `YYYY.MM.MICRO` (e.g., `2026.2.0`)
 - Always run `make build` before publishing to ensure patterns are current
 - Scraper cache lives in `.cache/` - delete if AWS docs change significantly

arnmatch-2026.2.2/LICENSE

@@ -0,0 +1,182 @@
+Copyright 2026 Andrey Gubarev
+
+Apache License
+Version 2.0, January 2004
+http://www.apache.org/licenses/
+
+TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
+
+1. Definitions.
+
+"License" shall mean the terms and conditions for use, reproduction, and
+distribution as defined by Sections 1 through 9 of this document.
+
+"Licensor" shall mean the copyright owner or entity authorized by the
+copyright owner that is granting the License.
+
+"Legal Entity" shall mean the union of the acting entity and all other
+entities that control, are controlled by, or are under common control with
+that entity. For the purposes of this definition, "control" means (i) the
+power, direct or indirect, to cause the direction or management of such
+entity, whether by contract or otherwise, or (ii) ownership of fifty percent
+(50%) or more of the outstanding shares, or (iii) beneficial ownership of
+such entity.
+
+"You" (or "Your") shall mean an individual or Legal Entity exercising
+permissions granted by this License.
+
+"Source" form shall mean the preferred form for making modifications,
+including but not limited to software source code, documentation source,
+and configuration files.
+
+"Object" form shall mean any form resulting from mechanical transformation
+or translation of a Source form, including but not limited to compiled
+object code, generated documentation, and conversions to other media types.
+
+"Work" shall mean the work of authorship, whether in Source or Object form,
+made available under the License, as indicated by a copyright notice that
+is included in or attached to the work (an example is provided in the
+Appendix below).
+
+"Derivative Works" shall mean any work, whether in Source or Object form,
+that is based on (or derived from) the Work and for which the editorial
+revisions, annotations, elaborations, or other modifications represent, as
+a whole, an original work of authorship. For the purposes of this License,
+Derivative Works shall not include works that remain separable from, or
+merely link (or bind by name) to the interfaces of, the Work and Derivative
+Works thereof.
+
+"Contribution" shall mean any work of authorship, including the original
+version of the Work and any modifications or additions to that Work or
+Derivative Works thereof, that is intentionally submitted to Licensor for
+inclusion in the Work by the copyright owner or by an individual or Legal
+Entity authorized to submit on behalf of the copyright owner. For the
+purposes of this definition, "submitted" means any form of electronic,
+verbal, or written communication sent to the Licensor or its
+representatives, including but not limited to communication on electronic
+mailing lists, source code control systems, and issue tracking systems that
+are managed by, or on behalf of, the Licensor for the purpose of discussing
+and improving the Work, but excluding communication that is conspicuously
+marked or otherwise designated in writing by the copyright owner as
+"Not a Contribution."
+
+"Contributor" shall mean Licensor and any individual or Legal Entity on
+behalf of whom a Contribution has been received by Licensor and subsequently
+incorporated within the Work.
+
+2. Grant of Copyright License.
+
+Subject to the terms and conditions of this License, each Contributor hereby
+grants to You a perpetual, worldwide, non-exclusive, no-charge, royalty-free,
+irrevocable copyright license to reproduce, prepare Derivative Works of,
+publicly display, publicly perform, sublicense, and distribute the Work and
+such Derivative Works in Source or Object form.
+
+3. Grant of Patent License.
+
+Subject to the terms and conditions of this License, each Contributor hereby
+grants to You a perpetual, worldwide, non-exclusive, no-charge, royalty-free,
+irrevocable (except as stated in this section) patent license to make, have
+made, use, offer to sell, sell, import, and otherwise transfer the Work,
+where such license applies only to those patent claims licensable by such
+Contributor that are necessarily infringed by their Contribution(s) alone
+or by combination of their Contribution(s) with the Work to which such
+Contribution(s) was submitted. If You institute patent litigation against
+any entity (including a cross-claim or counterclaim in a lawsuit) alleging
+that the Work or a Contribution incorporated within the Work constitutes
+direct or contributory patent infringement, then any patent licenses granted
+to You under this License for that Work shall terminate as of the date such
+litigation is filed.
+
+4. Redistribution.
+
+You may reproduce and distribute copies of the Work or Derivative Works
+thereof in any medium, with or without modifications, and in Source or
+Object form, provided that You meet the following conditions:
+
+(a) You must give any other recipients of the Work or Derivative Works a
+    copy of this License; and
+
+(b) You must cause any modified files to carry prominent notices stating
+    that You changed the files; and
+
+(c) You must retain, in the Source form of any Derivative Works that You
+    distribute, all copyright, patent, trademark, and attribution notices
+    from the Source form of the Work, excluding those notices that do not
+    pertain to any part of the Derivative Works; and
+
+(d) If the Work includes a "NOTICE" text file as part of its distribution,
+    then any Derivative Works that You distribute must include a readable
+    copy of the attribution notices contained within such NOTICE file,
+    excluding those notices that do not pertain to any part of the
+    Derivative Works, in at least one of the following places: within a
+    NOTICE text file distributed as part of the Derivative Works; within
+    the Source form or documentation, if provided along with the Derivative
+    Works; or, within a display generated by the Derivative Works, if and
+    wherever such third-party notices normally appear. The contents of the
+    NOTICE file are for informational purposes only and do not modify the
+    License. You may add Your own attribution notices within Derivative
+    Works that You distribute, alongside or as an addendum to the NOTICE
+    text from the Work, provided that such additional attribution notices
+    cannot be construed as modifying the License.
+
+You may add Your own copyright statement to Your modifications and may
+provide additional or different license terms and conditions for use,
+reproduction, or distribution of Your modifications, or for any such
+Derivative Works as a whole, provided Your use, reproduction, and
+distribution of the Work otherwise complies with the conditions stated
+in this License.
+
+5. Submission of Contributions.
+
+Unless You explicitly state otherwise, any Contribution intentionally
+submitted for inclusion in the Work by You to the Licensor shall be under
+the terms and conditions of this License, without any additional terms or
+conditions. Notwithstanding the above, nothing herein shall supersede or
+modify the terms of any separate license agreement you may have executed
+with Licensor regarding such Contributions.
+
+6. Trademarks.
+
+This License does not grant permission to use the trade names, trademarks,
+service marks, or product names of the Licensor, except as required for
+reasonable and customary use in describing the origin of the Work and
+reproducing the content of the NOTICE file.
+
+7. Disclaimer of Warranty.
+
+Unless required by applicable law or agreed to in writing, Licensor provides
+the Work (and each Contributor provides its Contributions) on an "AS IS"
+BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
+implied, including, without limitation, any warranties or conditions of
+TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A PARTICULAR
+PURPOSE. You are solely responsible for determining the appropriateness of
+using or redistributing the Work and assume any risks associated with Your
+exercise of permissions under this License.
+
+8. Limitation of Liability.
+
+In no event and under no legal theory, whether in tort (including
+negligence), contract, or otherwise, unless required by applicable law
+(such as deliberate and grossly negligent acts) or agreed to in writing,
+shall any Contributor be liable to You for damages, including any direct,
+indirect, special, incidental, or consequential damages of any character
+arising as a result of this License or out of the use or inability to use
+the Work (including but not limited to damages for loss of goodwill, work
+stoppage, computer failure or malfunction, or any and all other commercial
+damages or losses), even if such Contributor has been advised of the
+possibility of such damages.
+
+9. Accepting Warranty or Additional Liability.
+
+While redistributing the Work or Derivative Works thereof, You may choose
+to offer, and charge a fee for, acceptance of support, warranty, indemnity,
+or other liability obligations and/or rights consistent with this License.
+However, in accepting such obligations, You may act only on Your own behalf
+and on Your sole responsibility, not on behalf of any other Contributor,
+and only if You agree to indemnify, defend, and hold each Contributor
+harmless for any liability incurred by, or claims asserted against, such
+Contributor by reason of your accepting any such warranty or additional
+liability.
+
+END OF TERMS AND CONDITIONS

arnmatch-2026.2.2/PKG-INFO

@@ -0,0 +1,144 @@
+Metadata-Version: 2.4
+Name: arnmatch
+Version: 2026.2.2
+Summary: Parse AWS ARNs into structured data (2000+ resource types)
+Author-email: Andrey Gubarev <andrey@andreygubarev.com>
+License-Expression: Apache-2.0
+License-File: LICENSE
+Requires-Python: >=3.10
+Description-Content-Type: text/markdown
+
+# arnmatch
+
+Parse AWS ARNs into structured data.
+
+![Python 3.10+](https://img.shields.io/badge/python-3.10%2B-blue)
+[![PyPI](https://img.shields.io/pypi/v/arnmatch)](https://pypi.org/project/arnmatch/)
+
+## Overview
+
+Working with AWS at scale raises questions that are surprisingly hard to answer:
+
+1. **What resource does this ARN represent?** - ARN formats vary across services with no consistent parsing rules
+2. **What ARN formats exist?** - No single source documents all valid ARN patterns
+3. **What resource types exist on AWS?** - Scattered across 300+ service documentation pages
+4. **What CloudFormation type maps to this ARN?** - No direct ARN-to-CFN mapping exists
+
+arnmatch answers these questions by:
+- Parsing ARNs into structured components (service, region, account, resource type, resource ID)
+- Providing a complete index of 2000+ resource types from 300+ AWS services
+- Mapping ARNs to CloudFormation resource types (e.g., `arn:aws:lambda:...:function:X` → `AWS::Lambda::Function`)
+
+Patterns are auto-generated from [AWS Service Authorization Reference](https://docs.aws.amazon.com/service-authorization/latest/reference/).
+
+## Features
+
+- Zero runtime dependencies
+- 300+ AWS services, 2000+ resource types
+- Patterns auto-generated from AWS official documentation
+- CLI and library interface
+- CloudFormation resource type mapping
+- Boto3 SDK service name mapping
+
+## Installation
+
+```bash
+pip install arnmatch
+```
+
+## Quick Start
+
+### CLI
+
+```bash
+$ arnmatch "arn:aws:lambda:us-east-1:123456789012:function:my-function"
+aws_service: lambda
+aws_sdk_service: lambda
+aws_sdk_services: lambda
+aws_region: us-east-1
+aws_account: 123456789012
+resource_type: function
+resource_id: my-function
+resource_name: my-function
+cloudformation_resource: AWS::Lambda::Function
+```
+
+### Library
+
+```python
+from arnmatch import arnmatch
+
+result = arnmatch("arn:aws:lambda:us-east-1:123456789012:function:my-function")
+
+result.aws_service            # "lambda"
+result.aws_region             # "us-east-1"
+result.aws_account            # "123456789012"
+result.resource_type          # "function"
+result.resource_id            # "my-function"
+result.resource_name          # "my-function"
+result.cloudformation_resource  # "AWS::Lambda::Function"
+result.aws_sdk_service        # "lambda"
+
+# Get a boto3 client for the service
+client = result.client()
+client.get_function(FunctionName=result.resource_name)
+```
+
+## API Reference
+
+### `arnmatch(arn: str) -> ARN`
+
+Parse an ARN string and return structured data.
+
+Raises `ARNError` if the ARN format is invalid or no pattern matches.
+
+### `ARN`
+
+Dataclass with parsed ARN components:
+
+| Field | Type | Description |
+|-------|------|-------------|
+| `aws_partition` | `str` | AWS partition (aws, aws-cn, aws-us-gov) |
+| `aws_service` | `str` | AWS service name |
+| `aws_region` | `str` | AWS region (may be empty for global resources) |
+| `aws_account` | `str` | AWS account ID |
+| `resource_type` | `str` | Canonical resource type from AWS docs |
+| `resource_types` | `list[str]` | All known names for this resource type |
+| `attributes` | `dict[str, str]` | All captured attributes from the ARN |
+| `aws_sdk_service` | `str \| None` | Primary boto3 client name |
+| `cloudformation_resource` | `str \| None` | CloudFormation resource type |
+
+Properties:
+
+| Property | Description |
+|----------|-------------|
+| `resource_id` | Resource identifier (prefers attributes ending in `Id`, then `Name`, then last attribute) |
+| `resource_name` | Resource name (prefers attributes ending in `Name`, falls back to `resource_id`) |
+| `aws_sdk_services` | List of boto3 client names (e.g., `['elb', 'elbv2']` for elasticloadbalancing) |
+
+Methods:
+
+| Method | Description |
+|--------|-------------|
+| `client(session=None)` | Returns a boto3 client for the resource's service. Pass an optional `boto3.Session` or uses default. Raises `ValueError` if no SDK mapping exists. |
+
+### `ARNError`
+
+Exception raised when ARN parsing fails. Inherits from `ValueError`.
+
+## Development
+
+Prerequisites: [uv](https://github.com/astral-sh/uv)
+
+```bash
+make lint       # Run ruff linter
+make test       # Run pytest tests
+make check      # Run lint and test
+make generate   # Regenerate patterns from AWS docs
+make build      # Build wheel and tarball
+make publish    # Build and upload to PyPI
+```
+
+## Versioning
+
+[CalVer](https://calver.org/) format `YYYY.MM.MICRO` (e.g., `2026.2.0`).

arnmatch-2026.2.2/README.md

@@ -0,0 +1,134 @@
+# arnmatch
+
+Parse AWS ARNs into structured data.
+
+![Python 3.10+](https://img.shields.io/badge/python-3.10%2B-blue)
+[![PyPI](https://img.shields.io/pypi/v/arnmatch)](https://pypi.org/project/arnmatch/)
+
+## Overview
+
+Working with AWS at scale raises questions that are surprisingly hard to answer:
+
+1. **What resource does this ARN represent?** - ARN formats vary across services with no consistent parsing rules
+2. **What ARN formats exist?** - No single source documents all valid ARN patterns
+3. **What resource types exist on AWS?** - Scattered across 300+ service documentation pages
+4. **What CloudFormation type maps to this ARN?** - No direct ARN-to-CFN mapping exists
+
+arnmatch answers these questions by:
+- Parsing ARNs into structured components (service, region, account, resource type, resource ID)
+- Providing a complete index of 2000+ resource types from 300+ AWS services
+- Mapping ARNs to CloudFormation resource types (e.g., `arn:aws:lambda:...:function:X` → `AWS::Lambda::Function`)
+
+Patterns are auto-generated from [AWS Service Authorization Reference](https://docs.aws.amazon.com/service-authorization/latest/reference/).
+
+## Features
+
+- Zero runtime dependencies
+- 300+ AWS services, 2000+ resource types
+- Patterns auto-generated from AWS official documentation
+- CLI and library interface
+- CloudFormation resource type mapping
+- Boto3 SDK service name mapping
+
+## Installation
+
+```bash
+pip install arnmatch
+```
+
+## Quick Start
+
+### CLI
+
+```bash
+$ arnmatch "arn:aws:lambda:us-east-1:123456789012:function:my-function"
+aws_service: lambda
+aws_sdk_service: lambda
+aws_sdk_services: lambda
+aws_region: us-east-1
+aws_account: 123456789012
+resource_type: function
+resource_id: my-function
+resource_name: my-function
+cloudformation_resource: AWS::Lambda::Function
+```
+
+### Library
+
+```python
+from arnmatch import arnmatch
+
+result = arnmatch("arn:aws:lambda:us-east-1:123456789012:function:my-function")
+
+result.aws_service            # "lambda"
+result.aws_region             # "us-east-1"
+result.aws_account            # "123456789012"
+result.resource_type          # "function"
+result.resource_id            # "my-function"
+result.resource_name          # "my-function"
+result.cloudformation_resource  # "AWS::Lambda::Function"
+result.aws_sdk_service        # "lambda"
+
+# Get a boto3 client for the service
+client = result.client()
+client.get_function(FunctionName=result.resource_name)
+```
+
+## API Reference
+
+### `arnmatch(arn: str) -> ARN`
+
+Parse an ARN string and return structured data.
+
+Raises `ARNError` if the ARN format is invalid or no pattern matches.
+
+### `ARN`
+
+Dataclass with parsed ARN components:
+
+| Field | Type | Description |
+|-------|------|-------------|
+| `aws_partition` | `str` | AWS partition (aws, aws-cn, aws-us-gov) |
+| `aws_service` | `str` | AWS service name |
+| `aws_region` | `str` | AWS region (may be empty for global resources) |
+| `aws_account` | `str` | AWS account ID |
+| `resource_type` | `str` | Canonical resource type from AWS docs |
+| `resource_types` | `list[str]` | All known names for this resource type |
+| `attributes` | `dict[str, str]` | All captured attributes from the ARN |
+| `aws_sdk_service` | `str \| None` | Primary boto3 client name |
+| `cloudformation_resource` | `str \| None` | CloudFormation resource type |
+
+Properties:
+
+| Property | Description |
+|----------|-------------|
+| `resource_id` | Resource identifier (prefers attributes ending in `Id`, then `Name`, then last attribute) |
+| `resource_name` | Resource name (prefers attributes ending in `Name`, falls back to `resource_id`) |
+| `aws_sdk_services` | List of boto3 client names (e.g., `['elb', 'elbv2']` for elasticloadbalancing) |
+
+Methods:
+
+| Method | Description |
+|--------|-------------|
+| `client(session=None)` | Returns a boto3 client for the resource's service. Pass an optional `boto3.Session` or uses default. Raises `ValueError` if no SDK mapping exists. |
+
+### `ARNError`
+
+Exception raised when ARN parsing fails. Inherits from `ValueError`.
+
+## Development
+
+Prerequisites: [uv](https://github.com/astral-sh/uv)
+
+```bash
+make lint       # Run ruff linter
+make test       # Run pytest tests
+make check      # Run lint and test
+make generate   # Regenerate patterns from AWS docs
+make build      # Build wheel and tarball
+make publish    # Build and upload to PyPI
+```
+
+## Versioning
+
+[CalVer](https://calver.org/) format `YYYY.MM.MICRO` (e.g., `2026.2.0`).

{arnmatch-2026.2.0 → arnmatch-2026.2.2}/pyproject.toml

@@ -7,6 +7,7 @@ authors = [
     { name = "Andrey Gubarev", email = "andrey@andreygubarev.com" }
 ]
 requires-python = ">=3.10"
+license = "Apache-2.0"
 dependencies = []
 
 [project.scripts]
@@ -21,6 +22,7 @@ path = "src/arnmatch/__init__.py"
 
 [dependency-groups]
 dev = [
+    "boto3>=1.42.41",
     "pytest>=9.0.2",
     "ruff>=0.14.14",
 ]

{arnmatch-2026.2.0 → arnmatch-2026.2.2}/src/arnmatch/__init__.py

@@ -1,6 +1,6 @@
 """ARN pattern matching using regex patterns."""
 
-__version__ = "2026.02.0"
+__version__ = "2026.2.2"
 
 import sys
 from dataclasses import dataclass
@@ -90,6 +90,28 @@ class ARN:
         """
         return AWS_SDK_SERVICES.get(self.aws_service, [])
 
+    def client(self, session: "boto3.Session | None" = None):  # noqa: F821
+        """Return a boto3 client for this resource's service.
+
+        Args:
+            session: Optional boto3 Session. If None, creates a new session.
+
+        Returns:
+            boto3 client for the service.
+
+        Raises:
+            ValueError: If no SDK service mapping exists for this ARN's service.
+        """
+        if self.aws_sdk_service is None:
+            raise ValueError(f"No SDK service mapping for service '{self.aws_service}'")
+
+        import boto3
+
+        if session is None:
+            session = boto3.Session()
+
+        return session.client(self.aws_sdk_service)
+
 
 def arnmatch(arn: str) -> ARN:
     """Match ARN against patterns.

{arnmatch-2026.2.0 → arnmatch-2026.2.2}/tests/test_arnmatch.py

@@ -1,5 +1,8 @@
 """Tests for ARN pattern matching."""
 
+import boto3
+import pytest
+
 from arnmatch import arnmatch
 
 
@@ -452,3 +455,30 @@ def test_wafv2():
     assert result.attributes["Scope"] == "regional"
     assert result.attributes["Name"] == "webacl-production-acl"
     assert result.attributes["Id"] == "aaaaaaaa-bbbb-cccc-dddd-eeeeeeeeeeee"
+
+
+class TestClient:
+    """Tests for ARN.client() method."""
+
+    def test_client_returns_correct_service(self):
+        """Test client() returns a client for the correct service."""
+        result = arnmatch(
+            "arn:aws:lambda:us-east-1:012345678901:function:my-function"
+        )
+        client = result.client()
+        assert client.meta.service_model.service_name == "lambda"
+
+    def test_client_uses_provided_session(self):
+        """Test client() uses the provided session."""
+        session = boto3.Session()
+        result = arnmatch("arn:aws:s3:::my-bucket")
+        client = result.client(session=session)
+        assert client.meta.service_model.service_name == "s3"
+
+    def test_client_raises_when_no_sdk_mapping(self):
+        """Test client() raises ValueError when no SDK service mapping exists."""
+        # 'a4b' (Alexa for Business) has no SDK mapping
+        result = arnmatch("arn:aws:a4b:us-east-1:012345678901:address-book/aaaaaaaa-bbbb-cccc-dddd-eeeeeeeeeeee")
+
+        with pytest.raises(ValueError, match="No SDK service mapping"):
+            result.client()