1)Does Aware's implementation support PUT, PATCH and DELETE actions as well or just GET & POST?
Yes
2) Does Aware block any JS attack coming from the REST provider into Aware's object before they get saved?
Aware IM handles a reply on the server. Any JS will be ignored
3) I assume all the objects we create to retain JSON data are "Persisted" objects. In other systems these objects are generally "Memory" objects that are disposed once the REST call is done and methods have ended.
What's the prescribed process for disposing the content of the persisted objects after each REST call within Aware has completed?
It's up to you. You can delete the objects right after the call or in a scheduled process
4) How does Aware handle different status codes returned by REST provider in cases of 400 (like 404) or 500 or 200?
And if it is captured by Aware, how does Aware developer get a hold of these status codes to do something about it, like 404 or 500?
Usually these status codes are accompanied with an error message sent by the provider to an error stream. You will be getting an error from your service request and the error message will be captured
5) Can Aware store images sent within the body of a REST call as an image into Aware's folder?
If a provider returns bytes of the image then you can probably save them in a file
