abnormal_security,aws_bedrock,crowdstrike,nvidia_gpu: add required variables in system tests (#15832)

Fix system tests for abnormal_security, aws_bedrock, crowdstrike, nvidia_gpu integrations

Author: moxarth-rathod

packages/abnormal_security/data_stream/ai_security_mailbox_not_analyzed/manifest.yml

@@ -18,7 +18,7 @@ streams:
         type: text
         title: Recent Message Grace Interval 
         multi: false
-        required: true
+        required: false
         show_user: true
         description: How long to wait before attempting to collect recent messages. This option allows the Abnormal AI API to complete analysis of messages before the agent attempts to collect them. This should not be greater than the initial interval. Supported units for this parameter are h/m/s.
       - name: interval

packages/abnormal_security/data_stream/ai_security_mailbox_not_analyzed/sample_event.json

@@ -17,22 +17,22 @@
         }
     },
     "agent": {
-        "ephemeral_id": "835b49c2-b5f8-4cd3-9915-0257c60f59ad",
-        "id": "129fb3a1-34d7-4b0f-8248-d13d3a7d46f6",
-        "name": "elastic-agent-18300",
+        "ephemeral_id": "ea5725c7-abdf-4082-aa3f-38a44243aced",
+        "id": "bde1501c-c6c1-49fe-9125-c805f917c934",
+        "name": "elastic-agent-45073",
         "type": "filebeat",
         "version": "8.19.0"
     },
     "data_stream": {
         "dataset": "abnormal_security.ai_security_mailbox_not_analyzed",
-        "namespace": "26882",
+        "namespace": "98484",
         "type": "logs"
     },
     "ecs": {
         "version": "8.11.0"
     },
     "elastic_agent": {
-        "id": "129fb3a1-34d7-4b0f-8248-d13d3a7d46f6",
+        "id": "bde1501c-c6c1-49fe-9125-c805f917c934",
         "snapshot": false,
         "version": "8.19.0"
     },
@@ -51,7 +51,7 @@
         ],
         "dataset": "abnormal_security.ai_security_mailbox_not_analyzed",
         "id": "-1234567891234567891",
-        "ingested": "2025-09-16T10:25:44Z",
+        "ingested": "2025-10-30T07:35:02Z",
         "kind": "event",
         "original": "{\"abx_message_id\":-1234567891234567891,\"not_analyzed_reason\":\"PHISHING_SIMULATION\",\"recipient\":{\"email\":\"[email protected]\",\"name\":\"Phishing Test\"},\"reported_datetime\":\"2025-03-04T17:03:55Z\",\"reporter\":{\"email\":\"[email protected]\",\"name\":\"Info Test\"},\"subject\":\"Fwd: Forwarded email\"}",
         "reason": "PHISHING_SIMULATION",

packages/abnormal_security/docs/README.md

@@ -219,22 +219,22 @@ An example event for `ai_security_mailbox_not_analyzed` looks as following:
         }
     },
     "agent": {
-        "ephemeral_id": "835b49c2-b5f8-4cd3-9915-0257c60f59ad",
-        "id": "129fb3a1-34d7-4b0f-8248-d13d3a7d46f6",
-        "name": "elastic-agent-18300",
+        "ephemeral_id": "ea5725c7-abdf-4082-aa3f-38a44243aced",
+        "id": "bde1501c-c6c1-49fe-9125-c805f917c934",
+        "name": "elastic-agent-45073",
         "type": "filebeat",
         "version": "8.19.0"
     },
     "data_stream": {
         "dataset": "abnormal_security.ai_security_mailbox_not_analyzed",
-        "namespace": "26882",
+        "namespace": "98484",
         "type": "logs"
     },
     "ecs": {
         "version": "8.11.0"
     },
     "elastic_agent": {
-        "id": "129fb3a1-34d7-4b0f-8248-d13d3a7d46f6",
+        "id": "bde1501c-c6c1-49fe-9125-c805f917c934",
         "snapshot": false,
         "version": "8.19.0"
     },
@@ -253,7 +253,7 @@ An example event for `ai_security_mailbox_not_analyzed` looks as following:
         ],
         "dataset": "abnormal_security.ai_security_mailbox_not_analyzed",
         "id": "-1234567891234567891",
-        "ingested": "2025-09-16T10:25:44Z",
+        "ingested": "2025-10-30T07:35:02Z",
         "kind": "event",
         "original": "{\"abx_message_id\":-1234567891234567891,\"not_analyzed_reason\":\"PHISHING_SIMULATION\",\"recipient\":{\"email\":\"[email protected]\",\"name\":\"Phishing Test\"},\"reported_datetime\":\"2025-03-04T17:03:55Z\",\"reporter\":{\"email\":\"[email protected]\",\"name\":\"Info Test\"},\"subject\":\"Fwd: Forwarded email\"}",
         "reason": "PHISHING_SIMULATION",

packages/aws_bedrock/data_stream/invocation/_dev/test/system/test-default-config.yml

@@ -12,5 +12,6 @@ data_stream:
     queue_url: '{{TF_OUTPUT_queue_url}}'
     preserve_original_event: true
     preserve_duplicate_custom_fields: true
+    file_selectors: []
 assert:
   hit_count: 348

packages/aws_bedrock/data_stream/invocation/sample_event.json

@@ -8,7 +8,6 @@ inputs:
       streams:
         - data_stream:
             dataset: crowdstrike.fdr
-            type: logs
           fields:
             _conf:
                 enable_deduplication: false
@@ -83,7 +82,7 @@ inputs:
                 fields:
                     - crowdstrike
           publisher_pipeline.disable_host: true
-          queue_url: null
+          queue_url: ""
           sqs.notification_parsing_script.source: |
             function parse(n) {
               var m = JSON.parse(n);

packages/crowdstrike/data_stream/fdr/_dev/test/policy/test-default.expected

@@ -5,5 +5,6 @@ vars:
   token_url: http://host.tld/oauth2/token
 data_stream:
   vars:
+    queue_url: ""
     preserve_original_event: true
     preserve_duplicate_custom_fields: true