1.5.4

What's Changed

• test(compat): gate Lambda dispatch tests on container availability by @hampsterx in #387
• fix(elasticache): scope single-arg AUTH to default user per Redis ACL spec by @hampsterx in #390
• fix: updating dependencies by @hectorvent in #391
• chore(deps): pin json-schema-validator below 2.0.0 by @hampsterx in #388
• fix(auth): bind SigV4 token identity and use timing-safe comparison by @hampsterx in #389
• fix(apigatewayv2): add missing JSON handler operations and stageName auto-deploy by @hampsterx in #393
• fix(cloudformation): populate SQS queue ARN in resource attributes by @zeka001 in #396
• chore: align config between YAML files and docs; add missing service sections by @hampsterx in #397
• fix(elasticache,rds): prevent orphaned Docker containers on shutdown and restart by @hampsterx in #398
• test(apigatewayv2): add QuarkusTest integration test for HTTP API v2 by @hampsterx in #399
• feat(iam): seed AWS managed policies at startup by @dulltz in #400
• fix(s3): remove XML declaration from GetBucketLocation response by @ctnnguyen in #403
• feat(s3): preserve Content-Disposition on object responses by @sf-jin-ku in #408
• fix(lambda): resolve handler paths with subdirectories in deployment package by @ctnnguyen in #404
• feat(sfn): add SQS sendMessage integrations by @sf-jin-ku in #409
• fix(iam): enforce iam when it turned on by @hectorvent in #411
• fix(dynamodb): implement DELETE action for set attributes (#312) by @hampsterx in #415
• ci(compat): parallelize sdk-test-awscli bats execution by @hampsterx in #414
• fix(sqs): use queue-level VisibilityTimeout as fallback in ReceiveMes… by @klosowskiMikolaj in #413
• feat(kinesis): implement EnableEnhancedMonitoring and DisableEnhancedMonitoring by @hampsterx in #417
• fix(lambda): raise Jackson maxStringLength for large inline zip uploads (#412) by @hampsterx in #418
• fix(dynamodb): support REMOVE for nested map paths (#402) by @hampsterx in #421
• fix(cognito): return only description fields in ListUserPoolClients by @hampsterx in #420
• feat: implement Amazon MSK service with Redpanda orchestration by @hectorvent in #419
• fix(s3): honor canned object ACLs on write paths by @sf-jin-ku in #422
• feat(dynamodb): add EnableKinesisStreamingDestination support by @balista-yu in #427
• refactor(test): narrow Lambda dispatch probe to transport-level exceptions by @hampsterx in #395
• feat(lambda): enforce reserved and per-region concurrency by @okinaka in #424
• fix: fall back to named volume for ECR registry when host-persistent-path is unset in containers by @cahna in #442
• refactor(dynamodb): extract KinesisStreamingForwarder from DynamoDbStreamService by @balista-yu in #428
• fix(kinesis): return time-based MillisBehindLatest by @hampsterx in #444
• feat(eventbridge): implement TagResource and UntagResource by @ctnnguyen in #453
• fix(lambda): accept name, partial ARN, and full ARN for {FunctionName} by @hampsterx in #450
• fix(dynamodb): accept newline as UpdateExpression clause separator by @hampsterx in #449
• fix: filter esms in sqs poller by @bkindersleytrulioo in #447
• feat(cloudwatch): implement GetMetricData by @nowke in #451
• fix(cognito): add aud claim to ID tokens by @ctnnguyen in #454
• feat(cognito-idp): adding create/list/delete user pool client secret cognito-idp actions by @danielabeledo in #345
• feat(ec2): implement CreateVolume, DescribeVolumes, DeleteVolume by @nowke in #455
• fix: implement S3 bucket ownership controls by @hampsterx in #456
• fix(dynamodb): support UpdateContinuousBackups and DescribeContinuousBackups (#437) by @hampsterx in #458
• feat: implement local Data Lake stack (Athena, Glue, and Firehose) by @hectorvent in #429
• fix(kinesis): accept AWS SDK v2 CBOR content type by @hampsterx in #457
• feat(tagging): implement Resource Groups Tagging API by @nowke in #459
• fix: DynamoDB expression evaluation, UpdateExpression paths, and ConsumedCapacity by @diopolgg in #197
• test: decouple CloudFormation vhost test from DNS setup by @cahna in #467
• fix(lambda): include LastUpdateStatus in function configuration responses by @ctnnguyen in #463
• fix: add log rotation by default to all floci-launched containers by @cahna in #466
• feat(bedrock-runtime): stub Converse and InvokeModel for #87 by @hampsterx in #486
• fix(sqs): honor queue-level DelaySeconds on FIFO queues by @tmchow in #476
• feat(lambda): add support for UpdateFunctionConfiguration AWS API by @edwintian in #472
• feat: support DynamoDB UPDATED_OLD and UPDATED_NEW ReturnValues by @bkindersleytrulioo in #477
• docs(readme): add direct Docker run instructions by @fredpena in #473
• fix(ecr): fixing port and network issues on ecr by @hectorvent in #483
• fix(logging): include stack trace in AwsJson11Controller catch-all by @hampsterx in #487
• feat(kinesis): implement UpdateStreamMode by @hampsterx in #488
• feat(lambda): support ScalingConfig.MaximumConcurrency on SQS event source mappings by @okinaka in #490
• fix(s3-control): accept URL-encoded ARNs and return XML errors (#435) by @hampsterx in #491
• test(s3): add integration coverage for bucket lifecycle configuration by @hampsterx in #492

New Contributors

• @dulltz made their first contribution in #400
• @sf-jin-ku made their first contribution in #408
• @klosowskiMikolaj made their first contribution in #413
• @nowke made their first contribution in #451
• @danielabeledo made their first contribution in #345
• @diopolgg made their first contribution in #197

Full Changelog: 1.5.3...1.5.4

1.5.3

What's Changed

• feat: adding appconfig service by @hectorvent in #324
• docs: comprehensive audit sweep + CHANGELOG backfill (1.1.0-1.5.2) by @hampsterx in #326
• feat(lambda): add PutFunctionConcurrency stub by @okinaka in #325
• fix(s3): return XML error responses for presigned POST failures by @Meemaw in #327
• chore: add .coderabbit.yaml for automated PR reviews by @hampsterx in #349
• feat: add HEALTHCHECK to all Dockerfiles by @Meemaw in #328
• refactor(apigateway): centralize /tags/{arn} routing in SharedTagsController by @okinaka in #330
• fix(sqs): make per-queue message operations atomic by @BSchneppe in #333
• fix(eventbridge): apply InputPath when delivering events to targets by @ctnnguyen in #335
• feat: ecr by @cahna in #337
• fix: topologically sort CloudFormation resources before provisioning by @ctnnguyen in #332
• fix(s3): return empty LocationConstraint for us-east-1 buckets by @ctnnguyen in #336
• feat: integrate ContainerDetector for improved container detection in ElastiCache, ECS, and RDS managers by @cfranzen in #343
• fix(dynamodb): attach X-Amz-Crc32 header to JSON protocol responses by @okinaka in #347
• fix(cognito): return sub UUID as UserSub in SignUp response by @hampsterx in #351
• fix(kinesis): accept same-value Increase/DecreaseStreamRetentionPeriod (#342) by @hampsterx in #352
• fix(sns): recognize attributes set during creation of a subscription by @cfranzen in #353
• fix(ecr,s3): fix CDK compatibility and resolve macOS ECR port conflict by @hectorvent in #354
• fix(kms): implement real asymmetric sign/verify and GetPublicKey by @hectorvent in #355
• refactor(core): unify service metadata behind descriptor-backed catalog by @hampsterx in #357
• fix(eventbridge): implement advanced content filtering operators by @hectorvent in #356
• fix(cognito): correct HMAC signature computation in USER_SRP_AUTH by @hectorvent in #358
• fix(s3): include non-versioned objects in ListObjectVersions response by @hectorvent in #359
• fix(secretsmanager): resolve partial ARNs without random suffix by @hectorvent in #360
• test(auth): add SigV4 validator unit tests for RDS and ElastiCache proxies by @hampsterx in #361
• test(rds): expand query handler and service unit coverage by @hampsterx in #362
• fix(lambda): correct Function URL config path from /url-config to /url by @hectorvent in #364
• test(appconfig): edge case coverage for polling, deployments, empty configs by @hampsterx in #365
• test(rds): JDBC-based IAM auth compat suite for RDS proxy by @hampsterx in #366
• fix(elasticache): scope user auth to groups, use StorageFactory, throw NotFoundFault by @hampsterx in #367
• chore(ci): CI hygiene batch (concurrency, timeouts, action pinning, Dependabot) by @hampsterx in #375
• fix(apigatewayv2): fix route matching for path-parameter routes by @hampsterx in #368
• test(apigatewayv2): management API compat suite with deploymentId fix by @hampsterx in #371
• chore(deps): bump actions/upload-artifact from 4 to 7 by @dependabot[bot] in #376
• chore(deps): bump actions/setup-java from 4 to 5 by @dependabot[bot] in #377
• chore(deps): bump docker/login-action from 3.7.0 to 4.1.0 by @dependabot[bot] in #378
• chore(deps): bump actions/download-artifact from 4 to 8 by @dependabot[bot] in #382
• test(apigatewayv2): execute-api dispatch compat suite by @hampsterx in #372
• fix(s3): implement S3 Control ListTagsForResource, TagResource, Untag… by @hectorvent in #363
• chore(deps): bump docker/build-push-action from 6.19.2 to 7.1.0 by @dependabot[bot] in #383
• chore(deps): bump actions/setup-python from 5 to 6 by @dependabot[bot] in #379
• chore(deps): bump actions/checkout from 4 to 6 by @dependabot[bot] in #384
• test(elasticache): internal Quarkus integration test with cross-group isolation by @hampsterx in #369
• chore(deps): bump docker/setup-buildx-action from 3.12.0 to 4.0.0 by @dependabot[bot] in #385
• test(elasticache): SDK compat suite for replication groups and users by @hampsterx in #370
• fix(cloudformation): resolve stacks by ARN in addition to name by @hectorvent in #386

New Contributors

• @ctnnguyen made their first contribution in #335
• @dependabot[bot] made their first contribution in #376

Full Changelog: 1.5.2...1.5.3

1.5.2

What's Changed

• chore: updating release strategy and actions by @hectorvent in #78
• feat: add ACM support by @cahna in #21
• fix: load storage after backend is created in StorageFactory by @GuanZitong in #71
• fix: align S3 CreateBucket and HeadBucket region behavior with AWS by @levan-giguashvili-lmnd in #75
• feat: implement GetRandomPassword for Secrets Manager (#76) by @danjee in #80
• docs: add slack community links to readme by @fredpena in #85
• fix(sns): add PublishBatch support to JSON protocol handler by @rpalcolea in #52
• feat: add HOSTNAME_EXTERNAL support for multi-container Docker setups by @justmeben in #82
• feat: add SES (Simple Email Service) emulation by @daphid4 in #14
• feat: Adding/Fixing support for virtual hosts by @ByronLudwig in #88
• feat: add JSONata query language support for Step Functions by @thegagne in #84
• fix: DynamoDB table creation compatibility with Terraform AWS provider v6 by @kurtmc in #89
• fix(KMS): Allow arn and alias to encrypt by @MasatoshiTada in #69
• ci: add compatibility tests workflow and fix JVM Dockerfile permissions by @kurtmc in #100
• docs(contributing): add canonical agent guide reference by @cristiandlahoz in #104
• ci: scope workflow triggers to relevant file changes by @cristiandlahoz in #106
• Add GitHub Contributors badge to README by @fredpena in #111
• feat(s3): add conditional request headers (If-Match, If-None-Match, If-Modified-Since, If-Unmodified-Since) by @rpalcolea in #48
• fix: resolve compatibility test failures across multiple services by @kurtmc in #109
• fix(s3): allow upload up to 512MB by default. close #19 by @hectorvent in #110
• docs(github): add pull request review instructions by @cristiandlahoz in #107
• fix(dynamodb): respect if_not_exists for update_item by @bruderj15 in #102
• feat(s3): add Range header support for GetObject by @rpalcolea in #44
• feat(SFN): add DynamoDB AWS SDK integration and complete optimized updateItem by @thegagne in #103
• feat: docker image with awscli Closes: #66) by @danjee in #95
• feat(lifecycle): add support for startup and shutdown initialization hooks by @cyrilschumacher in #128
• feat: add Kinesis ListShards operation by @balista-yu in #61
• feat(APIGW): OpenAPI/Swagger import, models, and request validation by @thegagne in #113
• fix(dynamodb): apply filter expressions in Query by @paseri3739 in #123
• fix: added versionId to S3 notifications for versioning enabled buckets. by @LDall in #135
• fix(s3): memory mode and storage defaults by @hectorvent in #117
• feat(s3): add presigned POST upload support by @Meemaw in #120
• feat(APIGW): add AWS integration type for REST v1 by @thegagne in #108
• feat: add OpenSearch Service emulation (#6) by @hectorvent in #132
• fix: for no-such-key with non-ascii key by @hectorvent in #112
• fix(s3): expose inMemory flag in test constructor to fix S3 by @juandiii in #136
• docs: add stars chart history to README.md by @cristiandlahoz in #142
• fix(core): inject x-amz-request-id headers globally to properly support SDK ResponseMetadata by @dixitrathod16 in #146
• fix(sns) Allow to publish SMS using phone-number by @MasatoshiTada in #138
• docs: expand community section with GitHub Discussions by @fredpena in #150
• fix(sns): enforce FilterPolicy on message delivery by @rpalcolea in #53
• fix(s3): persist Content-Encoding header on S3 objects by @rpalcolea in #57
• fix(sqs): translate Query-protocol error codes to JSON __type equivalents by @rpalcolea in #59
• docs: improve initialization hooks documentation by @cyrilschumacher in #144
• fix: adding aws-cli in its own floci image hectorvent/floci:x.y.z-aws by @hectorvent in #151
• Cognito OAuth/OIDC parity for RS256/JWKS, /oauth2/token, and OAuth app-client settings by @aquanow-jeffen in #97
• fix(sns): honor RawMessageDelivery attribute for SQS subscriptions by @rpalcolea in #54
• feat(cognito): add group management support by @Ruanrls in #149
• fix(sqs): route queue URL path requests to SQS handler by @hectorvent in #153
• fix(dynamodb): fix FilterExpression for BOOL types, List/Set contains, and nested attribute paths by @nakano16180 in #137
• feat: support GSI and LSI in CloudFormation DynamoDB table provisioning by @yoyo-real in #125
• feat: add support of Cloudformation mapping and Fn::FindInMap function by @grunxen in #101
• feat: implement UploadPartCopy for S3 multipart uploads by @vintitres in #98
• fix: defer startup hooks until HTTP server is ready by @Simi24 in #159
• feat: officially support Docker named volumes for Native images by @dixitrathod16 in #155
• Feat/cfn auto physical name generation by @yoyo-real in #163
• fix: support DynamoDB Query BETWEEN and ScanIndexForward=false by @fredpena in #160
• docs: fix initialization hooks Docker image names and AWS CLI instructions by @xingzihai in #169
• docs: clean up named volume examples in docker-compose docs by @herder in #161
• fix(s3): resolve file/folder name collision on persistent filesystem by @beytullah-gunduz in #134
• fix: resolve CloudFormation Lambda Code.S3Key base64 decode error by @rhrlima in #62
• fix(s3): list part for multipart upload by @hectorvent in #164
• fix(sqs): support binary message attributes and fix MD5OfMessageAttri… by @hectorvent in #168
• docs: add SES documentation by @cyrilschumacher in #181
• feat: health endpoint by @Meemaw in #139
• fix(sns): pass messageDeduplicationId from FIFO topics to SQS FIFO queues by @BSchneppe in #171
• fix(s3): return CommonPrefixes in ListObjects when delimiter is specified by @beytullah-gunduz in #133
• feat(s3): support Filter rules in PutBucketNotificationConfiguration by @fguery in #178
• fix(s3): Evaluate S3 CORS against incoming HTTP Requests by @bruderj15 in #131
• feat(cloudwatch-logs): add ListTagsForResource, TagResource, and UntagResource by @tmchow in #172
• Feature/ecr env var by @j0hnc0yne in #189
• Remove private modifier on injected field by @geoand in #186
• feat: support GenerateSecretString and Description for AWS::SecretsManager::Secret in CloudFormation by @yoyo-real in #176
• fix(lambda): copy function code to /var/runtime for provided runtimes #114 by @hectorvent in #191
• Polish HealthController by @geoand in #188
• fix: resolve numeric ExpressionAttributeNames in DynamoDB expressions by @fredpena in #192
• Cleanup quarkus dependencies by @geoand in #187
• fix(cognito): auto-generate sub, fix JWT sub claim, add AdminUserGlob… by @hectorvent in #183
• fix(cognito): enrich User Pool responses and implement MfaConfig stub (#177) by @hectorvent in #198
• fix: return stable cursor tokens in GetLogEvents to fix SDK paginatio… by @hectorvent in #184
• feat(lambda): implement ListVersionsByFunction API (#182) by @hectorvent in #193
• fix(sm): return KmsKeyId in DescribeSecret and improve ListSecrets by @hectorvent in https://github.com/floci-io/f...

1.5.1

1.5.1 (2026-04-09)

Bug Fixes

• merge branch 'main' into release/1.x (b2075be)
• native image build failure due to SecureRandom in CognitoSrpHelper (e83f6d6)

1.5.0

1.5.0 (2026-04-09)

Bug Fixes

• append march x86-64-v2 (#303) (ddccbe0)
• DynamoDB DescribeTable returns Projection.NonKeyAttributes (#300) (552e71e)
• implement missing RDS resource identifiers and fix filtering (#231) (#302) (7af3600)
• Implement S3 Lambda notifications (#278) (04cbeb5)
• implement SRP-6a authentication for Cognito (#284) (#298) (7c6e6a6)
• merge branch 'main' into release/1.x (f32f4a9)
• register Xerces XML resource bundles for native image (#293) (#296) (0bad933)
• s3: use case-insensitive field lookup for presigned POST policy validation (#289) (3d2cc1c)
• s3: use ConfigProvider for runtime config lookup in S3VirtualHostFilter (#288) (944fddf)

Features

• cloudformation: add AWS::Events::Rule provisioning support (#261) (c475e52)
• eventbridge: add InputTransformer support and S3 event notifications (#294) (9ca82e5), closes #140
• load persisted dynamodb streams on start up (#299) (ae49bfb)

1.4.0

1.4.0 (2026-04-08)

Bug Fixes

• add list_append support to DynamoDB update expressions (#277) (b723a9c)
• default shell executable to /bin/sh for Alpine compatibility (#241) (d02a1d9)
• drain warm pool containers on server shutdown (#274) (caabf46)
• dynamodb support add function multiple values (#263) (1ddc8a3)
• handle base64-encoded ACM cert imports (#248) (1391691)
• include ProvisionedThroughput in DynamoDB GSI responses (#273) (399a96d)
• issues 226 227 (#257) (81f1a01)
• make EmulatorLifecycle use more idiomatic Quarkus code (#190) (7ea586e)
• merge branch 'main' into release/1.x (1feec3a)
• removing log file (17841d2)
• resolve Cognito auth, token, and user lookup issues (#218 #220 #228 #229 #233 #234 #235) (#279) (5e8b39c)
• return 400 when encoded s3 copy source is malformed (#244) (f4f1752)
• s3: enforce presigned POST policy conditions (eq, starts-with, content-type) (#203) (cd1759a)
• s3: versioning IsTruncated, PublicAccessBlock, ListObjectsV2 pagination, K8s virtual host routing (#276) (6d5839b)

Features

• add KMS GetKeyPolicy, PutKeyPolicy and fix CreateKey Tags (#258 #259 #269) (#280) (4724db9)
• add SES V2 REST JSON protocol support (#265) (e7ab687)
• lambda: add missing runtimes, fix handler validation, long path… (#256) (0ef6f87)
• scheduler: add EventBridge Scheduler service (#260) (48b6ca3)
• secretsmanager: add support for BatchGetSecretValue (#115) (#264) (37026b7)
• sfn: nested state machine execution and activity support (#254, #91) (#266) (18bee5b)
• use AWS-specific content type within the response of all JSON-based controllers (#240) (b4afdbb)

1.3.0

1.3.0 (2026-04-06)

Bug Fixes

• compilation issue (10edd2b)
• fall back to Docker bridge IP when host.docker.internal is unresolvable (#216) (b973b70)
• lambda: copy code to TASK_DIR for provided runtimes (#206) (0de7931)
• lambda: honour ReportBatchItemFailures in SQS ESM (#208) (55b2f29)
• lambda: support Code.S3Bucket + Code.S3Key in CreateFunction and UpdateFunctionCode (#219) (d4ebc8e)
• merge branch 'main' into release/1.x (82d3184)
• ses: add missing Result element to query protocol responses (#207) (80e2054)
• sns: make Subscribe idempotent for same topic+protocol+endpoint (#185) (858775c)

Features

• add GlobalSecondaryIndexUpdates support in DynamoDB UpdateTable (#222) (4e6e953), closes #221
• add scheduled rules support for EventBridge Rules (#217) (e8c6440)
• dynamodb: add ScanFilter support for Scan operation (#175) (fe4ffd1)
• ec2: add EC2 service with 61 operations, integration tests, and docs (#213) (2859d25)
• ecs: adding ecs service (#209) (07a7a97)
• eventbridge: forward resources array and support resources pattern matching (#210) (6d49f09)
• lambda: add AddPermission, GetPolicy, ListTags, ListLayerVersions, etc endpoints (#223) (c79f02f)
• sfn: JSONata improvements, States.* intrinsics, DynamoDB ConditionExpression, StartSyncExecution (#205) (53dd7a6)

1.2.0

1.2.0 (2026-04-04)

Bug Fixes

• adding aws-cli in its own floci image hectorvent/floci:x.y.z-aws (#151) (aba9593)
• cognito: auto-generate sub, fix JWT sub claim, add AdminUserGlobalSignOut (#68) (#183) (9d6181c)
• cognito: enrich User Pool responses and implement MfaConfig stub (#198) (441d9f1)
• Cognito: OAuth/OIDC parity for RS256/JWKS, /oauth2/token, and OAuth app-client settings (#97) (a4af506)
• core: globally inject aws request-id headers for sdk compatibility (#146) (35e129d), closes #145
• defer startup hooks until HTTP server is ready (#157) (#159) (59c24c5)
• dynamodb: fix FilterExpression for BOOL types, List/Set contains, and nested attribute paths (#137) (453555a), closes #126
• lambda: copy function code to /var/runtime for provided runtimes (#114) (a5ad6cf)
• merge branch 'main' into release/1.x (0105e36)
• polish HealthController (#188) (084237d)
• remove private modifier on injected field (#186) (ebc0661)
• resolve CloudFormation Lambda Code.S3Key base64 decode error (#62) (78be523)
• resolve numeric ExpressionAttributeNames in DynamoDB expressions (#192) (d93296a)
• return stable cursor tokens in GetLogEvents to fix SDK pagination loop (#90) (#184) (7354663)
• s3: Evaluate S3 CORS against incoming HTTP Requests (#131) (e78c833)
• s3: list part for multipart upload (#164) (7253559)
• s3: persist Content-Encoding header on S3 objects (#57) (ff2f68d)
• s3: prevent S3VirtualHostFilter from hijacking non-S3 requests (#199) (59cdc3f)
• s3: resolve file/folder name collision on persistent filesystem (#134) (020a546)
• s3: return CommonPrefixes in ListObjects when delimiter is specified (#133) (845ac85)
• secretsmanager: return KmsKeyId in DescribeSecret and improve ListSecrets (#195) (1e44f39)
• sns: enforce FilterPolicy on message delivery (#53) (2f875d4), closes #49
• sns: honor RawMessageDelivery attribute for SQS subscriptions (#54) (b762bec)
• sns: pass messageDeduplicationId from FIFO topics to SQS FIFO queues (#171) (4529823)
• sqs: route queue URL path requests to SQS handler (#153) (6bbc9d9), closes #99 #17
• sqs: support binary message attributes and fix MD5OfMessageAttributes (#168) (5440ae8)
• sqs: translate Query-protocol error codes to JSON __type equivalents (#59) (7d6cf61)
• support DynamoDB Query BETWEEN and ScanIndexForward=false (#160) (cf2c705)
• wrong method call in test (665af53)

Features

• add support of Cloudformation mapping and Fn::FindInMap function (#101) (eef6698)
• cloudwatch-logs: add ListTagsForResource, TagResource, and UntagResource support (#172) (835f8c6), closes #77
• cognito: add group management support (#149) (75bf3c3)
• health endpoint (#139) (fb42087)
• implement UploadPartCopy for S3 multipart uploads (#98) (d1b9a9c)
• lambda: implement ListVersionsByFunction API (#182) (#193) (ecf25d4)
• officially support Docker named volumes for Native images (#155) (4fc9398)
• s3: support Filter rules in PutBucketNotificationConfiguration (#178) (ef06fc3)
• support GenerateSecretString and Description for AWS::SecretsManager::Secret in CloudFormation (#176) (f994b95)
• support GSI and LSI in CloudFormation DynamoDB table provisioning (#125) (48bee44)

1.1.0

1.1.0 (2026-03-31)

Bug Fixes

• added versionId to S3 notifications for versioning enabled buckets. (#135) (3d67bc4)
• align S3 CreateBucket and HeadBucket region behavior with AWS (#75) (8380166)
• DynamoDB table creation compatibility with Terraform AWS provider v6 (#89) (7b87bf2)
• dynamodb: apply filter expressions in Query (#123) (8b6f4fa)
• dynamodb: respect if_not_exists for update_item (#102) (8882a8e)
• for no-such-key with non-ascii key (#112) (ab072cf)
• KMS: Allow arn and alias to encrypt (#69) (fa4e107)
• resolve compatibility test failures across multiple services (#109) (1377868)
• s3: allow upload up to 512MB by default. close #19 (#110) (3891232)
• s3: expose inMemory flag in test constructor to fix S3 disk-persistence tests (#136) (522b369)
• sns: add PublishBatch support to JSON protocol handler (543df05)
• Storage load after backend is created (#71) (c95dd10)
• storage: fix storage global config issue and memory s3 directory creation (b84a128)

Features

• add ACM support (#21) (8a8d55d)
• add HOSTNAME_EXTERNAL support for multi-container Docker setups (#82) (20b40c1), closes #81
• add JSONata query language support for Step Functions (#84) (f82b370)
• add Kinesis ListShards operation (#61) (6ff8190)
• add opensearch service emulation (#85) (#132) (68b8ed8)
• add SES (Simple Email Service) emulation (#14) (9bf23d5)
• Adding/Fixing support for virtual hosts (#88) (26facf2)
• APIGW: add AWS integration type for API Gateway REST v1 (#108) (bb4f000)
• APIGW: OpenAPI/Swagger import, models, and request validation (#113) (d1d7ec3)
• docker image with awscli Closes: #66) (#95) (823770e)
• implement GetRandomPassword for Secrets Manager (#76) (#80) (c57d9eb)
• lifecycle: add support for startup and shutdown initialization hooks (#128) (7b2576f)
• s3: add conditional request headers (If-Match, If-None-Match, If-Modified-Since, If-Unmodified-Since) (#48) (66af545), closes #46
• s3: add presigned POST upload support (#120) (1e59f8d)
• s3: add Range header support for GetObject (#44) (b0f5ae2), closes #40
• SFN: add DynamoDB AWS SDK integration and complete optimized updateItem (#103) (4766a7e)

1.0.11

1.0.11 (2026-03-24)

Bug Fixes

• add S3 GetObjectAttributes and metadata parity (#29) (7d5890a)