Services:
- AppConfig (application + environment + config profile)
- EventBridge Pipes (SQS to target)
- IoT Events (input + detector model)
- Fraud Detector (variables)
- Security Lake (data lake)
- Connect Cases (domain)
- IoT SiteWise (asset model)
- HealthOmics (sequence store)
- Entity Resolution (schema mapping)
- Resilience Hub (application)
- Proton (environment template)
- Billing Conductor (pricing rule)
- Lake Formation (resource registration)
- MediaPackage v2 (channel group)
- Well-Architected (workload review)
- DataZone (domain listing)
- Transfer Family (SFTP server)

First pass: 14/20 (70%), after retry: 17/20 (85%)
Failures: Chatbot (no endpoint), Internet Monitor (AccessDenied), Audit Manager (AccessDenied)

Services: AppConfig, Billing Conductor, Connect Cases, Entity Resolution,
Fraud Detector, IoT SiteWise, Lake Formation, MediaPackage v2, HealthOmics,
EventBridge Pipes, Proton, Resilience Hub, Security Lake, Transfer, Well-Architected

Full pipeline: Python ref + CLI help + preprocessing + agent iteration
15/17 pass. Failures: DataZone (param validation), IoT Events (false pass)

Refined: appconfig, iotevents, connectcases, iotsitewise, omics,
entityresolution, proton, billingconductor, lakeformation, mediapackagev2,
wellarchitected, transfer. All pass testing.

Failures (4): pipes (invalid param), frauddetector (param validation),
securitylake (param validation), resiliencehub (validation exception)

Tags: Key=project,Value=doc-smith Key=tutorial,Value={service}-gs
- Inline --tags on create for services that support it
- Separate tag-resource calls for others
- JSON format for map-type tags, Key=Value for list-type
- 13/14 pass Babu tests (connectcases hits quota limit, not tag issue)
- securitylake and lakeformation skipped (no create commands)

Merged versions take:
- From v2: TUTORIAL_ROLE_ARN env var, instructive prints, proper structure
- From v1: concise API calls, working patterns, tags

14/17 pass testing. 12/17 pass PR review (5 false positives on sts get-caller-identity).
3 test failures: frauddetector, lakeformation, transfer (permission-gated services).