Open
Conversation
renovate
bot
force-pushed
the
renovate/all-patch
branch
2 times, most recently
from
f3cefa7 to
c43cd7d
Compare
renovate
bot
changed the title
renovate
bot
force-pushed
the
renovate/all-patch
branch
3 times, most recently
from
bd2fa33 to
63e625b
Compare
renovate
bot
force-pushed
the
renovate/all-patch
branch
from
63e625b to
96603fc
Compare
renovate
bot
force-pushed
the
renovate/all-patch
branch
6 times, most recently
from
c10f30c to
bad8c9e
Compare
renovate
bot
force-pushed
the
renovate/all-patch
branch
4 times, most recently
from
eeb8289 to
3f29d9f
Compare
renovate
bot
changed the title
renovate
bot
force-pushed
the
renovate/all-patch
branch
5 times, most recently
from
82327b4 to
9a6186a
Compare
renovate
bot
force-pushed
the
renovate/all-patch
branch
5 times, most recently
from
14c56fe to
216bca6
Compare
renovate
bot
force-pushed
the
renovate/all-patch
branch
11 times, most recently
from
9bd8def to
eac3984
Compare
renovate
bot
force-pushed
the
renovate/all-patch
branch
8 times, most recently
from
3a50e47 to
55a503e
Compare
renovate
bot
force-pushed
the
renovate/all-patch
branch
2 times, most recently
from
eb172a7 to
beab459
Compare
renovate
bot
force-pushed
the
renovate/all-patch
branch
from
beab459 to
9269753
Compare
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
This PR contains the following updates:
1.44.55→1.44.781.42.65→1.42.888.3.1→8.3.26.0.12.20250915→6.0.12.202604082.9.0.20251115→2.9.0.20260408Review
Release Notes
aws/aws-cli (awscli)
v1.44.78Compare Source
=======
connect: Conversational Analytics for Emaildevops-agent: Devops Agent now supports associate Splunk, Datadog and custom MCP server to an Agent Space.ecs: Minor updates to exceptions for completenessimagebuilder: Image pipelines can now automatically apply tags to images they create. Set the imageTags property when creating or updating your pipelines to get started.mediaconvert: Adds support for MV-HEVC video output and clear lead for AV1 DRM output.observabilityadmin: CloudWatch Observability Admin adds support for multi-region telemetry evaluation and telemetry enablement rules.rtbfabric: Adds optional health check configuration for Responder Gateways with ASG Managed Endpoints. When provided, RTB Fabric continuously probes customers' instance IPs and routes traffic only to healthy ones, reducing errors during deployments, scaling events, and instance failures.sagemaker: Support new SageMaker StartClusterHealthCheck API for on-demand DHC on Hyperpod EKS cluster. Support updated CreateCluster, UpdateCluster, DescribeCluster, BatchAddClusterNodes APIs for flexible instance group on HyperPod clusterv1.44.77Compare Source
=======
bcm-dashboards: Scheduled email reports of Billing and Cost Management Dashboardsbedrock-agentcore: Introducing support for SearchRegistryRecords API on AgentCoreRegistrybedrock-agentcore-control: Initial release for CRUDL in AgentCore Registry Servicemediaconnect: Adds support for MediaLive Channel-type Router Inputs.redshift-data: The BatchExecuteStatement API now supports named SQL parameters, enabling secure batch queries with parameterized values. This enhancement helps prevent SQL injection vulnerabilities and improves query reusability.sagemaker: Release support for g7e instance types for SageMaker HyperPodv1.44.76Compare Source
=======
backup: Adding EKS specific backup vault notification types for AWS Backup.drs: This changes adds support for modifying the replication configuration to support data replication using IPv6.ecr: Add UnableToListUpstreamImageReferrersException in ListImageReferrersendpoint-rules: Update endpoint-rules command to latest versionivs-realtime: Adds support for Amazon IVS real-time streaming redundant ingest.marketplace-discovery: AWS Marketplace Discovery API provides an interface that enables programmatic access to the AWS Marketplace catalog, including searching and browsing listings, retrieving product details and fulfillment options, and accessing public and private offer pricing and terms.medialive: MediaLive is adding support for MediaConnect Router by supporting a new output type called MEDIACONNECT ROUTER. This new output type will provide seamless encrypted transport between your MediaLive channel and MediaConnect Router.outposts: Add AWS Outposts APIs to view renewal pricing options and submit renewal requests for Outpost contractsiam: Tighten file permissions for virtual MFA bootstrap outputv1.44.75Compare Source
=======
accessanalyzer: Revert previous additions of API changes.bedrock-agentcore: This release includes support for 1) InvokeBrowser API, enabling OS-level control of AgentCore Browser Tool sessions through mouse actions, keyboard input, and screenshots. 2) Added documentation noting that empty sessions are automatically deleted after one day in the ListSessions API.braket: Added support for t3, g6, and g6e instance types for Hybrid Jobs.connect: The voice enhancement mode used by the agent can now be viewed on the contact record via the DescribeContact api.datasync: Allow IAM role ARNs with IAM Paths for "SecretAccessRoleArn" field in "CustomSecretConfig"datazone: Update Configurations and registerS3AccessGrantLocation as public attributes for cfnec2: EC2 Capacity Manager adds new dimensions for grouping and filtering capacity metrics, including tag-based dimensions and Account Name.ecs: This release provides the functionality of mounting Amazon S3 Files to Amazon ECS tasks by adding support for the new S3FilesVolumeConfiguration parameter in ECS RegisterTaskDefinition API.eks: EKS MNG WarmPool feature to support ASG WarmPool feature.endpoint-rules: Update endpoint-rules command to latest versionlambda: Launching Lambda integration with S3 Files as a new file system configuration.outposts: This change allows listAssets to surface pending and non-compute asset information. Adds the INSTALLING asset state enum and the STORAGE, POWERSHELF, SWITCH, and NETWORKING AssetTypes.rtbfabric: AWS RTB Fabric External Responder gateways now support HTTP in addition to HTTPS for inbound external links. Gateways can accept bid requests on port 80 or serve both protocols simultaneously via listener configuration, giving customers flexible transport options for their bidding infrastructures3: Updated list of the valid AWS Region values for the LocationConstraint parameter for general purpose buckets.s3files: Support for S3 Files, a new shared file system that connects any AWS compute directly with your data in Amazon S3. It provides fast, direct access to all of your S3 data as files with full file system semantics and low-latency performance, without your data ever leaving S3.v1.44.74Compare Source
=======
accessanalyzer: Brookie helps customers preview the impact of SCPs before deployment using historical access activity. It evaluates attached policies and proposed policy updates using collected access activity through CloudTrail authorization events and reports where currently allowed access will be denied.deadline: Added 8 batch APIs (BatchGetJob, BatchGetStep, BatchGetTask, BatchGetSession, BatchGetSessionAction, BatchGetWorker, BatchUpdateJob, BatchUpdateTask) for bulk operations. Monitors can now use an Identity Center instance in a different region via the identityCenterRegion parameter.dlm: This release adds support for Fast Snapshot Restore AvailabilityZone Ids in Amazon Data Lifecycle Manager EBS snapshot lifecycle policies.geo-maps: This release updates API reference documentation for Amazon Location Service Maps APIs to reflect regional restrictions for Grab Maps usersguardduty: Migrated to Smithy. No functional changeslightsail: This release adds support for the Asia Pacific (Malaysia) (ap-southeast-5) Region.mediatailor: This change adds support for Tagging the resource types Programs and Prefetch Schedulesqconnect: Added optional originRequestId parameter to SendMessageRequest and ListSpans response in Amazon Q in Connect to support request tracing across service boundaries.transfer: AWS Transfer Family Connectors now support IPv6 connectivity, enabling outbound connections to remote SFTP or AS2 servers using IPv4-only or dual-stack (IPv4 and IPv6) configurations based on network requirements.v1.44.73Compare Source
=======
bedrock: Amazon Bedrock Guardrails enforcement configuration APIs now support selective guarding controls for system prompts as well as user and assistant messages, along with SDK support for Amazon Bedrock resource policy APIs.bedrock-agent: Added strict parameter to ToolSpecification to allow users to enforce strict JSON schema adherence for tool input schemas.bedrock-agentcore-control: Documentation Update for Adds support for three-legged (Authorization Code grant type) OAuth along with predefined MCP tool schema configuration for Amazon Bedrock AgentCore gateway MCP server targets.imagebuilder: Updated pagination token validation for ListContainerRecipes API to support maximum size of 65K characterslightsail: Add support for tagging of Alarm resource typelogs: Added queryDuration, bytesScanned, and userIdentity fields to the QueryInfo response object returned by DescribeQueries. Customers can now view detailed query cost information including who ran the query, how long it took, and the volume of data scanned.medialive: AWS Elemental MediaLive released a new features that allows customers to use HLG 2020 as a color space for AV1 video codec.organizations: Updates close Account quota for member accounts in an Organization.payment-cryptography: Adds optional support to retrieve previously generated import and export tokens to simplify import and export functionsv1.44.72Compare Source
=======
appstream: Amazon WorkSpaces Applications now supports drain mode for instances in multi-session fleets. This capability allows administrators to instruct individual fleet instances to stop accepting new user sessions while allowing existing sessions to continue uninterrupted.bedrock-agentcore-control: Adds support for three-legged (Authorization Code grant type) OAuth along with predefined MCP tool schema configuration for Amazon Bedrock AgentCore gateway MCP server targets.bedrock-data-automation: Data Automation Library is a BDA capability that lets you create reusable entity resources to improve extraction accuracy. Libraries support Custom Vocabulary entities that enhance speech recognition for audio and video content with domain-specific terminology shared across projectsbedrock-runtime: Relax ToolUseId pattern to allow dots and colonscloudwatch: CloudWatch now supports OTel enrichment to make vended metrics for supported AWS resources queryable via PromQL with resource ARN and tag labels, and PromQL alarms for metrics ingested via the OTLP endpoint with multi-contributor evaluation.connect: Include CUSTOMER to evaluation target and participant role. Support Korean, Japanese and Simplified Chinese in evaluation forms.deadline: AWS Deadline Cloud now supports configurable scheduling on each queue. The scheduling configuration controls how workers are distributed across jobs.endpoint-rules: Update endpoint-rules command to latest versiongamelift: Amazon GameLift Servers now includes a ComputeName field in game session API responses, making it easier to identify which compute is hosting a game session without cross-referencing IP addresses.geo-places: This release updates API reference documentation for Amazon Location Service Places APIs to reflect regional restrictions for Grab Maps users in ReverseGeocode, Suggest, SearchText, and GetPlace operationslogs: We are pleased to announce that our logs transformation csv processor now has a destination field, allowing you to specify under which parent node parsed columns be placed under.pricing: This release increases the MaxResults parameter of the GetAttributeValues API from 100 to 10000.v1.44.71Compare Source
=======
bedrock: Adds support for Bedrock Batch Inference Job Progress Monitoringbedrock-agentcore: Added the ability to filter out empty sessions when listing sessions. Customers can now retrieve only sessions that still contain events, eliminating the need to check each session individually. No changes required for existing integrations.bedrock-agentcore-control: Adds support for VPC egress private endpoints for Amazon Bedrock AgentCore gateway targets, enabling private connectivity through managed VPC Lattice resources. Also adds IAM credential provider for gateway targets, enabling IAM-based authentication to target endpointsecs: Amazon ECS now supports Managed Daemons with dedicated APIs for registering daemon task definitions, creating daemons, and managing daemon deployments.elasticache: Updated SnapshotRetentionLimit documentation for ServerlessCache to correctly describe the parameter as number of days (max 35) instead of number of snapshots.endpoint-rules: Update endpoint-rules command to latest versiones: Adding Policy-Min-TLS-1-2-RFC9151-FIPS-2024-08 as TLS Policy in Supported Regionsgeo-routes: This release makes RoutingBoundary optional in CalculateRouteMatrix, set StopDuration with a maximum value of 49999 for CalculateRoutes, set TrailerCount with a maximum value of 4, and introduces region restrictions for Grab Maps users.medical-imaging: Added new boolean flag to persist metadata updates to all primary image sets in the same study as the requested image set.opensearch: Adding Policy-Min-TLS-1-2-RFC9151-FIPS-2024-08 as TLS Policy in Supported Regionss3: Fix handling of SSE-C keys when copying unencrypted to encrypted objects or objects with different encryption keysv1.44.70Compare Source
=======
acm: Adds support for searching for ACM certificates using the new SearchCertificates API.cloudfront: This release adds bring your own IP (BYOIP) IPv6 support to CloudFront's CreateAnycastIpList and UpdateAnycastIpList API through the IpamCidrConfigs field.dataexchange: Support Tags for AWS Data Exchange resource Assetsdatazone: Adds environmentConfigurationName field to CreateEnvironmentInput and UpdateEnvironmentInput, so that Domain Owners can now recover orphaned environments by recreating deleted configurations with the same name, and will auto-recover orphaned environmentsdevops-agent: AWS DevOps Agent service General Availability release.dms: To successfully connect to the IBM DB2 LUW database server, you may need to specify additional security parameters that are passed to the JDBC driver. These parameters are EncryptionAlgorithm and SecurityMechanism. Both parameters accept integer values.ec2: This release updates the examples in the documentation for DescribeRegions and DescribeAvailabilityZones.endpoint-rules: Update endpoint-rules command to latest versiongeo-maps: This release expands map customization options with adjustable contour line density, dark mode support for Hybrid and Satellite views, enhanced traffic information across multiple map styles, and transit and truck travel modes for Monochrome and Hybrid map styles.kinesisanalyticsv2: Support for Flink 2.2 in Managed Service for Apache Flinkmailmanager: Amazon SES Mail Manager now supports optional TLS policy for accepting unencrypted connections and mTLS authentication for ingress endpoints with configurable trust stores. Two new rule actions are available, Bounce for sending non-delivery reports and Lambda invocation for custom email processing.marketplace-agreement: This release adds 8 new APIs for AWS Marketplace sellers. 4 APIs for Cancellations (Send, List, Get, Cancel action on AgreementCancellationRequest), 3 APIs for Billing Adjustments (BatchCreate, List, Get action on BillingAdjustmentRequest), and 1 API to List Invoices (ListAgreementInvoiceLineItems)observabilityadmin: This release adds the Bedrock and Security Hub resource types for Omnia Enablement launch for March 31.odb: Adds support for EC2 Placement Group integration with ODB Network. The GetOdbNetwork and ListOdbNetworks API responses now include the ec2PlacementGroupIds field.opensearch: Support RegisterCapability, GetCapability, DeregisterCapability API for AI Assistant feature management for OpenSearch UI Applicationsorganizations: Added Path field to Account and OrganizationalUnit objects in AWS Organizations API responses.partnercentral-selling: Adding EURO Currency for MRR Amountpinpoint-sms-voice-v2: This release adds RCS for Business messaging and Notify support. RCS lets you create and manage agents, send and receive messages in the US and Canada via SendTextMessage API, and configure SMS fallback. Notify lets you send templated OTP messages globally in minutes with no phone number required.quicksight: Adds StartAutomationJob and DescribeAutomationJob APIs for automation jobs. Adds three custom permission capabilities that allow admins to control whether users can manage Spaces and chat agents. Adds an OAuthClientCredentials structure to provide OAuth 2.0 client credentials inline to data sources.s3: Add Bucket Metrics configuration support to directory bucketss3control: Adding an optional auditContext parameter to S3 Access Grants credential vending API GetDataAccess to enable job-level audit correlation in S3 CloudTrail logss3tables: S3 Tables now supports nested types when creating tables. Users can define complex column schemas using struct, list, and map types. These types can be composed together to model complex, hierarchical data structures within table schemas.securityagent: AWS Security Agent is a service that proactively secures applications throughout the development lifecycle with automated security reviews and on-demand penetration testing.sustainability: This is the first release of the AWS Sustainability SDK, which enables customers to access their sustainability impact data via API.configure setcommand to return an error when newline or carriage-return characters are specified in the value.v1.44.69Compare Source
=======
appstream: Add support for URL Redirectionautoscaling: Adds support for new instance lifecycle states introduced by the instance lifecycle policy and replace root volume features.bedrock-agentcore: Adds Ground Truth support for AgentCore Evaluations (Evaluate)deadline: AWS Deadline Cloud now supports three new fleet auto scaling settings. With scale out rate, you can configure how quickly workers launch. With worker idle duration, you can set how long workers wait before shutting down. With standby worker count, you can keep idle workers ready for fast job start.devops-agent: AWS DevOps Agent General Availability.ecs: Adding Local Storage support for ECS Managed Instances by introducing a new field "localStorageConfiguration" for CreateCapacityProvider and UpdateCapacityProvider APIs.endpoint-rules: Update endpoint-rules command to latest versiongamelift: Update CreateScript API documentation.lakeformation: Add setSourceIdentity to DataLakeSettings Parameterslogs: Adds Lookup Tables to CloudWatch Logs for log enrichment using CSV key-value data with KMS encryption support.opensearch: Added Cluster Insights API's In OpenSearch Service SDK.partnercentral-account: KYB Supplemental Form enables partners who fail business verification to submit additional details and supporting documentation through a self-service form, triggering an automated re-verification without requiring manual intervention from support teams.sagemaker: Added support for placement strategy and consolidation for SageMaker inference component endpoints. Customers can now configure how inference component copies are distributed across instances and availability zones (AZs), and enable automatic consolidation to optimizes resource utilization.s3: Added support for opting out of Amazon S3 Express session authentication via the newAWS_S3_DISABLE_EXPRESS_SESSION_AUTHenvironment variable, or thes3_disable_express_session_authshared configuration setting.v1.44.68Compare Source
=======
bedrock-agentcore: Adding AgentCore Code Interpreter Node.js Runtime Support with an optional runtime fieldbedrock-agentcore-control: Adds support for custom code-based evaluators using customer-managed Lambda functions.neptunedata: Minor formatting changes to remove unnecessary symbols.omics: AWS HealthOmics now supports VPC networking, allowing users to connect runs to external resources with NAT gateway, AWS VPC resources, and more. New Configuration APIs support configuring VPC settings. StartRun API now accepts networkingMode and configurationName parameters to enable VPC networking.v1.44.67Compare Source
=======
bcm-data-exports: With this release we are providing an option to accounts to have their export delivered to an S3 bucket that is not owned by the account.emr: Add StepExecutionRoleArn to RunJobFlow APIlogs: This release adds parameter support to saved queries in CloudWatch Logs Insights. Define reusable query templates with named placeholders, invoke them using start query. Available in Console, CLI and SDKsagemaker: Release support for ml.r5d.16xlarge instance types for SageMaker HyperPodtimestream-influxdb: Timestream for InfluxDB adds support for customer defined maintenance windows. This allows customers to define maintenance schedule during resource creation and updatesv1.44.66Compare Source
=======
apigatewayv2: Added DISABLE IN PROGRESS and DISABLE FAILED Portal statuses.application-signals: This release adds support for creating SLOs on RUM appMonitors, Synthetics canaries and services.batch: Documentation-only update for AWS Batch.endpoint-rules: Update endpoint-rules command to latest versionmarketplace-agreement: The Variable Payments APIs enable AWS Marketplace Sellers to perform manage their payment requests (send, get, list, cancel).polly: Add support for Mu-law and A-law codecs for output formatuxc: GA release of AccountCustomizations, used to manage account color, visible services, and visible regions settings in the AWS Management Console.v1.44.65Compare Source
=======
bedrock-agentcore-control: Adds SDK support for 1) Persist session state in AgentCore Runtime via filesystemConfigurations in CreateAgentRuntime, UpdateAgentRuntime, and GetAgentRuntime APIs, 2) Optional name-based filtering on AgentCore ListBrowserProfiles API.gamelift: Amazon GameLift Servers launches UDP ping beacons in the Beijing and Ningxia (China) Regions to help measure real-time network latency for multiplayer games. The ListLocations API is now available in these regions to provide endpoint domain and port information as part of the locations list.mediapackagev2: Reduces the minimum allowed value for startOverWindowSeconds from 60 to 0, allowing customers to effectively disable the start-over window.opensearchserverless: Adds support for updating the vector options field for existing collections.pcs: This release adds support for custom slurmdbd and cgroup configuration in AWS PCS. Customers can now specify slurmdbd and cgroup settings to configure database accounting and reporting for their HPC workloads, and control resource allocation and limits for compute jobs.rds: Adds support in Aurora PostgreSQL serverless databases for express configuration based creation through WithExpressConfiguration in CreateDbCluster API, and for restoring clusters using RestoreDBClusterToPointInTime and RestoreDBClusterFromSnapshot APIs.v1.44.64Compare Source
=======
batch: AWS Batch AMI Visibility feature support. Adds read-only batchImageStatus to Ec2Configuration to provide visibility on the status of Batch-vended AMIs used by Compute Environments.connectcases: You can now use the UpdateRelatedItem API to update the content of comments and custom related items associated with a case.lightsail: Add support for tagging of ContactMethod resource typeomics: Adds support for batch workflow runs in Amazon Omics, enabling users to submit, manage, and monitor multiple runs as a single batch. Includes APIs to create, cancel, and delete batches, track submission statuses and counts, list runs within a batch, and configure default settings.v1.44.63Compare Source
=======
backup: Fix Typo for S3Backup Options ( S3BackupACLs to BackupACLs)dynamodb: Adding ReplicaArn to ReplicaDescription of a global table replicaendpoint-rules: Update endpoint-rules command to latest versionopensearch: Added support for Amazon Managed Service for Prometheus (AMP) as a connected data source in OpenSearch UI. Now users can analyze Prometheus metrics in OpenSearch UI without data copy.verifiedpermissions: Adds support for Policy Store Aliases, Policy Names, and Policy Template Names. These are customizable identifiers that can be used in place of Policy Store ids, Policy ids, and Policy Template ids respectively in Amazon Verified Permissions APIs.v1.44.62Compare Source
=======
batch: AWS Batch now supports quota management, enabling administrators to allocate shared compute resources across teams and projects through quota shares with capacity limits, resource-sharing strategies, and priority-based preemption - currently available for SageMaker Training job queues.bedrock-agentcore: This release includes SDK support for the following new features on AgentCore Built In Tools. 1. Enterprise Policies for AgentCore Browser Tool. 2. Root CA Configuration Support for AgentCore Browser Tool and Code Interpreter. 3. API changes to AgentCore Browser Profile APIsbedrock-agentcore-control: Adds support for the following new features. 1. Enterprise Policies support for AgentCore Browser Tool. 2. Root CA Configuration support for AgentCore Browser Tool and Code Interpreter.ec2: Amazon EC2 Fleet instant mode now supports launching instances into Interruptible Capacity Reservations, enabling customers to use spare capacity shared by Capacity Reservation owners within their AWS Organization.observabilityadmin: Adding a new field in the CreateCentralizationRuleForOrganization, UpdateCentralizationRuleForOrganization API and updating the GetCentralizationRuleForOrganization API response to include the new fieldpolly: Added bi-directional streaming functionality through a new API, StartSpeechSynthesisStream. This API allows streaming input text through inbound events and receiving audio as part of an output stream simultaneously.v1.44.61Compare Source
=======
ec2: The DescribeInstanceTypes API now returns default connection tracking timeout values for TCP, UDP, and UDP stream via the new connectionTrackingConfiguration field on NetworkInfo.mediaconvert: This update adds additional bitrate options for Dolby AC-4 audio outputs.v1.44.60Compare Source
=======
bedrock-agentcore-control: Deprecating namespaces field and adding namespaceTemplates.emr: Add S3LoggingConfiguration to Control LogUploadsglue: Provide approval to overwrite existing Lake Formation permissions on all child resources with the default permissions specified in 'CreateTableDefaultPermissions' and 'CreateDatabaseDefaultPermissions' when updating catalog. Allowed values are ["Accept","Deny"] .v1.44.59Compare Source
=======
bedrock: You can now generate policy scenarios on demand using the new GENERATE POLICY SCENARIOS build workflow type. Scenarios will no longer be automatically generated during INGEST CONTENT, REFINE POLICY, and IMPORT POLICY workflows, resulting in faster completion times for these operations.bedrock-agentcore: Provide support to perform deterministic operations on agent runtime through shell command executions via the new InvokeAgentRuntimeCommand APIbedrock-agentcore-control: Supporting hosting of public ECR Container Images in AgentCore Runtimeecs: Amazon ECS now supports configuring whether tags are propagated to the EC2 Instance Metadata Service (IMDS) for instances launched by the Managed Instances capacity provider. This gives customers control over tag visibility in IMDS when using ECS Managed Instances.v1.44.58Compare Source
=======
apigateway: API Gateway now supports an additional security policy "SecurityPolicy-TLS13-1-2-FIPS-PFS-PQ-2025-09" for REST APIs and custom domain names. The new policy is compliant with TLS 1.3, Federal Information Processing Standards (FIPS), Perfect Forward Secrecy (PFS), and post-quantum (PQ) cryptographyconfig: Fix pagination support for DescribeConformancePackCompliance, and update OrganizationConfigRule InputParameters max length to match ConfigRule.connect: Deprecating PredefinedNotificationID fieldgameliftstreams: Feature launch that enables customers to connect streaming sessions to their own VPCs running in AWS.glue: Add QuerySessionContext to BatchGetPartitionRequestivs-realtime: Updates maximum reconnect window seconds from 60 to 300 for participant replicationmediaconvert: This update adds support for Dolby AC-4 audio output, frame rate conversion between non-Dolby Vision inputs to Dolby Vision outputs, and clear lead CMAF HLS output.medialive: Documents the VideoDescription.ScalingBehavior.SMART(underscore)CROP enum value.mgn: Network Migration APIs are now publicly available for direct programmatic access. Customers can now call Network Migration APIs directly without going through AWS Transform (ATX), enabling automation, integration with existing tools, and self-service migration workflows.quicksight: The change adds a new capability named ManageSharedFolders in Custom Permissionsv1.44.57Compare Source
=======
datasync: DataSync's 3 location types, Hadoop Distributed File System (HDFS), FSx for Windows File Server (FSx Windows), and FSx for NetApp ONTAP (FSx ONTAP) now have credentials managed via Secrets Manager, which may be encrypted with service keys or be configured to use customer-managed keys or secret.ecr: Add Chainguard to PTC upstreamRegistry enums3: Adds support for account regional namespaces for general purpose buckets. The account regional namespace is a reserved subdivision of the global bucket namespace where only your account can create general purpose buckets.s3: Add support for specifying tags on buckets during bucket creation using theaws s3 mbcommand via a new--tagsflag.v1.44.56Compare Source
=======
customer-profiles: Today, Amazon Connect is announcing the ability to filter (include or exclude) recommendations based on properties of items and interactions.eks: Adds support for a new tier in controlPlaneScalingConfig on EKS Clusters.endpoint-rules: Update endpoint-rules command to latest versionpolly: Added support for the new voices - Ambre (fr-FR), Beatrice (it-IT), Florian (fr-FR), Lennart (de-DE), Lorenzo (it-IT) and Tiffany (en-US). They are available as a Generative voices only.sagemaker: SageMaker training plans allow you to extend your existing training plans to avoid workload interruptions without workload reconfiguration. When a training plan is approaching expiration, you can extend it directly through the SageMaker AI console or programmatically using the API or AWS CLI.simpledbv2: Introduced Amazon SimpleDB export functionality enabling domain data export to S3 in JSON format. Added three new APIs StartDomainExport, GetExport, and ListExports via SimpleDBv2 service. Supports cross-region exports and KMS encryption.workspaces: Added WINDOWS SERVER 2025 OperatingSystemName.boto/boto3 (boto3)
v1.42.88Compare Source
=======
connect: [botocore] Conversational Analytics for Emaildevops-agent: [botocore] Devops Agent now supports associate Splunk, Datadog and custom MCP server to an Agent Space.ecs: [botocore] Minor updates to exceptions for completenessimagebuilder: [botocore] Image pipelines can now automatically apply tags to images they create. Set the imageTags property when creating or updating your pipelines to get started.mediaconvert: [botocore] Adds support for MV-HEVC video output and clear lead for AV1 DRM output.observabilityadmin: [botocore] CloudWatch Observability Admin adds support for multi-region telemetry evaluation and telemetry enablement rules.rtbfabric: [botocore] Adds optional health check configuration for Responder Gateways with ASG Managed Endpoints. When provided, RTB Fabric continuously probes customers' instance IPs and routes traffic only to healthy ones, reducing errors during deployments, scaling events, and instance failures.sagemaker: [botocore] Support new SageMaker StartClusterHealthCheck API for on-demand DHC on Hyperpod EKS cluster. Support updated CreateCluster, UpdateCluster, DescribeCluster, BatchAddClusterNodes APIs for flexible instance group on HyperPod clusterv1.42.87Compare Source
=======
bcm-dashboards: [botocore] Scheduled email reports of Billing and Cost Management Dashboardsbedrock-agentcore: [botocore] Introducing support for SearchRegistryRecords API on AgentCoreRegistrybedrock-agentcore-control: [botocore] Initial release for CRUDL in AgentCore Registry Servicemediaconnect: [botocore] Adds support for MediaLive Channel-type Router Inputs.redshift-data: [botocore] The BatchExecuteStatement API now supports named SQL parameters, enabling secure batch queries with parameterized values. This enhancement helps prevent SQL injection vulnerabilities and improves query reusability.sagemaker: [botocore] Release support for g7e instance types for SageMaker HyperPodv1.42.86Compare Source
=======
backup: [botocore] Adding EKS specific backup vault notification types for AWS Backup.drs: [botocore] This changes adds support for modifying the replication configuration to support data replication using IPv6.ecr: [botocore] Add UnableToListUpstreamImageReferrersException in ListImageReferrersendpoint-rules: [botocore] Update endpoint-rules client to latest versionivs-realtime: [botocore] Adds support for Amazon IVS real-time streaming redundant ingest.marketplace-discovery: [botocore] AWS Marketplace Discovery API provides an interface that enables programmatic access to the AWS Marketplace catalog, including searching and browsing listings, retrieving product details and fulfillment options, and accessing public and private offer pricing and terms.medialive: [botocore] MediaLive is adding support for MediaConnect Router by supporting a new output type called MEDIACONNECT ROUTER. This new output type will provide seamless encrypted transport between your MediaLive channel and MediaConnect Router.outposts: [botocore] Add AWS Outposts APIs to view renewal pricing options and submit renewal requests for Outpost contractsv1.42.85Compare Source
=======
accessanalyzer: [botocore] Revert previous additions of API changes.bedrock-agentcore: [botocore] This release includes support for 1) InvokeBrowser API, enabling OS-level control of AgentCore Browser Tool sessions through mouse actions, keyboard input, and screenshots. 2) Added documentation noting that empty sessions are automatically deleted after one day in the ListSessions API.braket: [botocore] Added support for t3, g6, and g6e instance types for Hybrid Jobs.connect: [botocore] The voice enhancement mode used by the agent can now be viewed on the contact record via the DescribeContact api.datasync: [botocore] Allow IAM role ARNs with IAM Paths for "SecretAccessRoleArn" field in "CustomSecretConfig"datazone: [botocore] Update Configurations and registerS3AccessGrantLocation as public attributes for cfnec2: [botocore] EC2 Capacity Manager adds new dimensions for grouping and filtering capacity metrics, including tag-based dimensions and Account Name.ecs: [botocore] This release provides the functionality of mounting Amazon S3 Files to Amazon ECS tasks by adding support for the new S3FilesVolumeConfiguration parameter in ECS RegisterTaskDefinition API.eks: [botocore] EKS MNG WarmPool feature to support ASG WarmPool feature.endpoint-rules: [botocore] Update endpoint-rules client to latest versionlambda: [botocore] Launching Lambda integration with S3 Files as a new file system configuration.outposts: [botocore] This change allows listAssets to surface pending and non-compute asset information. Adds the INSTALLING asset state enum and the STORAGE, POWERSHELF, SWITCH, and NETWORKING AssetTypes.rtbfabric: [botocore] AWS RTB Fabric External Responder gateways now support HTTP in addition to HTTPS for inbound external links. Gateways can accept bid requests on port 80 or serve both protocols simultaneously via listener configuration, giving customers flexible transport options for their bidding infrastructures3: [botocore] Updated list of the valid AWS Region values for the LocationConstraint parameter for general purpose buckets.s3files: [botocore] Support for S3 Files, a new shared file system that connects any AWS compute directly with your data in Amazon S3. It provides fast, direct access to all of your S3 data as files with full file system semantics and low-latency performance, without your data ever leaving S3.botocore] Fixsigv4a_signing_region_setconfig being ignored when SigV4a is selected viaauth_scheme_preference. The configured region set is now correctly applied to the signing context regardless of how SigV4a is resolved.v1.42.84Compare Source
=======
accessanalyzer: [botocore] Brookie helps customers preview the impact of SCPs before deployment using historical access activity. It evaluates attached policies and proposed policy updates using collected access activity through CloudTrail authorization events and reports where currently allowed access will be denied.deadline: [botocore] Added 8 batch APIs (BatchGetJob, BatchGetStep, BatchGetTask, BatchGetSession, BatchGetSessionAction, BatchGetWorker, BatchUpdateJob, BatchUpdateTask) for bulk operations. Monitors can now use an Identity Center instance in a different region via the identityCenterRegion parameter.dlm: [botocore] This release adds support for Fast Snapshot Restore AvailabilityZone Ids in Amazon Data Lifecycle Manager EBS snapshot lifecycle policies.geo-maps: [botocore] This release updates API reference documentation for Amazon Location Service Maps APIs to reflect regional restrictions for Grab Maps usersguardduty: [botocore] Migrated to Smithy. No functional changeslightsail: [botocore] This release adds support for the Asia Pacific (Malaysia) (ap-southeast-5) Region.mediatailor: [botocore] This change adds support for Tagging the resource types Programs and Prefetch Schedulesqconnect: [botocore] Added optional originRequestId parameter to SendMessageRequest and ListSpans response in Amazon Q in Connect to support request tracing across service boundaries.transfer: [botocore] AWS Transfer Family Connectors now support IPv6 connectivity, enabling outbound connections to remote SFTP or AS2 servers using IPv4-only or dual-stack (IPv4 and IPv6) configurations based on network requirements.v1.42.83Compare Source
=======
bedrock: [botocore] Amazon Bedrock Guardrails enforcement configuration APIs now support selective guarding controls for system prompts as well as user and assistant messages, along with SDK support for Amazon Bedrock resource policy APIs.bedrock-agent: [botocore] Added strict parameter to ToolSpecification to allow users to enforce strict JSON schema adherence for tool input schemas.bedrock-agentcore-control: [botocore] Documentation Update for Adds support for three-legged (Authorization Code grant type) OAuth along with predefined MCP tool schema configuration for Amazon Bedrock AgentCore gateway MCP server targets.imagebuilder: [botocore] Updated pagination token validation for ListContainerRecipes API to support maximum size of 65K characterslightsail: [botocore] Add support for tagging of Alarm resource typelogs: [botocore] Added queryDuration, bytesScanned, and userIdentity fields to the QueryInfo response object returned by DescribeQueries. Customers can now view detailed query cost information including who ran the query, how long it took, and the volume of data scanned.medialive: [botocore] AWS Elemental MediaLive released a new features that allows customers to use HLG 2020 as a color space for AV1 video codec.organizations: [botocore] Updates close Account quota for member accounts in an Organization.payment-cryptography: [botocore] Adds optional support to retrieve previously generated import and export tokens to simplify import and export functionsv1.42.82Compare Source
=======
appstream: [botocore] Amazon WorkSpaces Applications now supports drain mode for instances in multi-session fleets. This capability allows administrators to instruct individual fleet instances to stop accepting new user sessions while allowing existing sessions to continue uninterrupted.bedrock-agentcore-control: [botocore] Adds support for three-legged (Authorization Code grant type) OAuth along with predefined MCP tool schema configuration for Amazon Bedrock AgentCore gateway MCP server targets.bedrock-data-automation: [botocore] Data Automation Library is a BDA capability that lets you create reusable entity resources to improve extraction accuracy. Libraries support Custom Vocabulary entities that enhance speech recognition for audio and video content with domain-specific terminology shared across projectsbedrock-runtime: [botocore] Relax ToolUseId pattern to allow dots and colonscloudwatch: [botocore] CloudWatch now supports OTel enrichment to make vended metrics for supported AWS resources queryable via PromQL with resource ARN and tag labels, and PromQL alarms for metrics ingested via the OTLP endpoint with multi-contributor evaluation.connect: [botocore] Include CUSTOMER to evaluation target and participant role. Support Korean, Japanese and Simplified Chinese in evaluation forms.deadline: [botocore] AWS Deadline Cloud now supports configurable scheduling on each queue. The scheduling configuration controls how workers are distributed across jobs.endpoint-rules: [botocore] Update endpoint-rules client to latest versiongamelift: [botocore] Amazon GameLift Servers now includes a ComputeName field in game session API responses, making it easier to identify which compute is hosting a game session without cross-referencing IP addresses.geo-places: [botocore] This release updates API reference documentation for Amazon Location Service Places APIs to reflect regional restrictions for Grab Maps users in ReverseGeocode, Suggest, SearchText, and GetPlace operationslogs: [botocore] We are pleased to announce that our logs transformation csv processor now has a destination field, allowing you to specify under which parent node parsed columns be placed under.pricing: [botocore] This release increases the MaxResults parameter of the GetAttributeValues API from 100 to 10000.v1.42.81Compare Source
=======
bedrock: [botocore] Adds support for Bedrock Batch Inference Job Progress Monitoringbedrock-agentcore: [botocore] Added the ability to filter out empty sessions when listing sessions. Customers can now retrieve only sessions that still contain events, eliminating the need to check each session individually. No changes required for existing integrations.bedrock-agentcore-control: [botocore] Adds support for VPC egress private endpoints for Amazon Bedrock AgentCore gateway targets, enabling private connectivity through managed VPC Lattice resources. Also adds IAM credential provider for gateway targets, enabling IAM-based authentication to target endpointsecs: [botocore] Amazon ECS now supports Managed Daemons with dedicated APIs for registering daemon task definitions, creating daemons, and managing daemon deployments.elasticache: [botocore] Updated SnapshotRetentionLimit documentation for ServerlessCache to correctly describe the parameter as number of days (max 35) instead of number of snapshots.endpoint-rules: [botocore] Update endpoint-rules client to latest versiones: [botocore] Adding Policy-Min-TLS-1-2-RFC9151-FIPS-2024-08 as TLS Policy in Supported Regionsgeo-routes: [botocore] This release makes RoutingBoundary optional in CalculateRouteMatrix, set StopDuration with a maximum value of 49999 for CalculateRoutes, set TrailerCount with a maximum value of 4, and introduces region restrictions for Grab Maps users.medical-imaging: [botocore] Added new boolean flag to persist metadata updates to all primary image sets in the same study as the requested image set.opensearch: [botocore] Adding Policy-Min-TLS-1-2-RFC9151-FIPS-2024-08 as TLS Policy in Supported Regionsv1.42.80Compare Source
=======
acm: [botocore] Adds support for searching for ACM certificates using the new SearchCertificates API.cloudfront: [botocore] This release adds bring your own IP (BYOIP) IPv6 support to CloudFront's CreateAnycastIpList and UpdateAnycastIpList API through the IpamCidrConfigs field.dataexchange: [botocore] Support Tags for AWS Data Exchange resource Assetsdatazone: [botocore] Adds environmentConfigurationName field to CreateEnvironmentInput and UpdateEnvironmentInput, so that Domain Owners can now recover orphaned environments by recreating deleted configurations with the same name, and will auto-recover orphaned environmentsdevops-agent: [botocore] AWS DevOps Agent service General Availability release.dms: [botocore] To successfully connect to the IBM DB2 LUW database server, you may need to specify additional security parameters that are passed to the JDBC driver. These parameters are EncryptionAlgorithm and SecurityMechanism. Both parameters accept integer values.ec2: [botocore] This release updates the examples in the documentation for DescribeRegions and DescribeAvailabilityZones.endpoint-rules: [botocore] Update endpoint-rules client to latest versiongeo-maps: [botocore] This release expands map customization options with adjustable contour line density, dark mode support for Hybrid and Satellite views, enhanced traffic information across multiple map styles, and transit and truck travel modes for Monochrome and Hybrid map styles.kinesisanalyticsv2: [botocore] Support for Flink 2.2 in Managed Service for Apache Flinkmailmanager: [botocore] Amazon SES Mail Manager now supports optional TLS policy for accepting unencrypted connections and mTLS authentication for ingress endpoints with configurable trust stores. Two new rule actions are available, Bounce for sending non-delivery reports and Lambda invocation for cuConfiguration
📅 Schedule: (in timezone America/Montreal)
🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.
👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.
This PR was generated by Mend Renovate. View the repository job log.