@aws-sdk/credential-provider-login

Chores

• bump '@smithy/*' dependencies (#7822) (8ddd544)
• set downlevel types to be used in typescript@'<4.5' (#7817) (03dad66)

Chores

• credential-provider-login: update dependencies.

Chores

• credential-provider-login: update dependencies.

Chores

• packages: reapply eslint rules (#7789) (ab81c73)

Chores

• codegen: sync for checksum algorithm extensions (#7781) (ae4f994)

Chores

• packages: use open version range for additional packages (#7774) (3f776c3)
• codegen: sync for checksum stream backpressure (#7776) (14fc571)

Chores

• credential-provider-login: update dependencies.

Chores

• credential-provider-login: update dependencies.

Chores

• credential-provider-login: update dependencies.

Chores

• credential-provider-login: update dependencies.

Chores

• credential-provider-login: update dependencies.

Chores

• credential-provider-login: update dependencies.

Chores

• credential-provider-login: update dependencies.

Chores

• use yarn workspace versioning for monorepo packages (#7693) (b951130)

Chores

• packages-internal: update metadata url paths (#7679) (c3a351c)

Chores

• packages: move package folders for internal pkgs (#7670) (ce66606)

3.972.0(2026-01-20)

Chores

• replace rimraf with premove (#7669) (e0b484fa)

New Features

• clients: update client endpoints as of 2026-01-20 (3266a28d)
• client-workspaces-instances: Added billing configuration support for WorkSpaces Instances with monthly and hourly billing modes, including new filtering capabilities for instance type searches. (a660c503)
• client-odb: Adds support for associating and disassociating IAM roles with Autonomous VM cluster resources through the AssociateIamRoleToResource and DisassociateIamRoleFromResource APIs. The GetCloudAutonomousVmCluster and ListCloudAutonomousVmClusters API responses now include the iamRoles field. (f906d762)
• client-bedrock-runtime: Added support for extended prompt caching with one hour TTL. (2cc679ff)
• client-keyspaces: Adds support for managing table pre-warming in Amazon Keyspaces (for Apache Cassandra) (a7d41c3f)
• client-auto-scaling: This release adds support for three new filters when describing scaling activities, StartTimeLowerBound, StartTimeUpperBound, and Status. (5ca740f5)
• client-verifiedpermissions: Amazon Verified Permissions now supports encryption of resources by a customer managed KMS key. Customers can now create new encrypted policy stores by passing in their customer managed key during policy store creation. (3fe5ed93)

---

For list of updated packages, view updated-packages.md in assets-3.972.0.zip

3.971.0(2026-01-16)

Chores

• deps-dev: bump vitest to 4.x (#7662) (e4af3e38)
• codegen: tag maven release 0.42.0 (#7664) (eea2ef45)

Documentation Changes

• client-sagemaker: Adding security consideration comments for lcc accessing execution role under root access (83b0e783)
• client-glacier: Documentation updates for Amazon Glacier's maintenance mode (18674f5d)

New Features

• clients: update client endpoints as of 2026-01-16 (5149b6b0)
• client-datazone: This release adds support for numeric filtering and complex free-text searches cases for the Search and SearchListings APIs. (3ce55674)
• client-connect: Adds support to allow customers to create form with Dispute configuration (faedfc8b)
• client-launch-wizard: Added UpdateDeployment, ListDeploymentPatternVersions and GetDeploymentPatternVersion APIs for Launch Wizard (5126f41e)
• client-resource-explorer-2: Added ViewName to View-related responses and ServiceViewName to GetServiceView response. (e0212a10)

---

For list of updated packages, view updated-packages.md in assets-3.971.0.zip

3.970.0(2026-01-15)

Chores

• util-endpoints: update aws partitions.json (057ed943)
• endpoints: update endpoints model (27bb9e6d)
• models: update API models (e4aef87d)
• codegen: update for handling __type in cbor structs (#7663) (2104fe9e)

Documentation Changes

• client-ec2: This release includes documentation updates to support up to four Elastic Volume modifications per Amazon EBS volume within a rolling 24-hour period. (0e4c5b5c)

New Features

• client-ecs: Adds support for configuring FIPS in AWS GovCloud (US) Regions via a new ECS Capacity Provider field fipsEnabled. When enabled, instances launched by the capacity provider will use a FIPS-140 enabled AMI. Instances will use FIPS-140 compliant cryptographic modules and AWS FIPS endpoints. (0ebb2f22)
• client-evs: A new GetVersions API has been added to retrieve VCF, ESX versions, and EC2 instances provided by Amazon EVS. The CreateEnvironment API now allows you to select a VCF version and the CreateEnvironmentHost API introduces a optional esxVersion parameter. (4f6b30a2)
• client-deadline: AWS Deadline Cloud now supports tagging Budget resources with ABAC for permissions management and selecting up to 16 filter values in the monitor and Search API. (bb46d258)
• client-cleanrooms: This release adds support for parameters in PySpark analysis templates. (bc4219bf)
• client-opensearchserverless: Collection groups in Amazon OpenSearch Serverless enables to organize multiple collections and enable compute resource sharing across collections with different KMS keys. This shared compute model reduces costs by eliminating the need for separate OpenSearch Compute Units (OCUs) for each KMS key. (bfdce6ab)
• client-lakeformation: API Changes for GTCForLocation feature. Includes a new API, GetTemporaryDataLocationCredentials and updates to the APIs RegisterResource and UpdateResource (493fd840)
• client-qconnect: Fix inference configuration shapes for the CreateAIPrompt and UpdateAIPrompt APIs, Modify Text Length Limit for SendMessage API (c54736e1)

Bug Fixes

• core/protocols: custom behavior for __type in structure (#7661) (22c3a671)

---

For list of updated packages, view updated-packages.md in assets-3.970.0.zip

3.969.0(2026-01-14)

Chores

• codegen: sync for required member count (#7655) (85f86da8)
• clients: prettier ignore only 'src' folder and README (#7652) (51d2b8fc)

Documentation Changes

• client-cost-explorer: Cost Categories added support to BillingView data filter expressions through the new costCategories parameter, enabling users to filter billing views by AWS Cost Categories for more granular cost management and allocation. (7bee7245)
• update version number requiring Node.js v20 (#7651) (8221f99e)

New Features

• clients: update client endpoints as of 2026-01-14 (2e57c021)
• client-connect: Amazon Connect makes it easier to manage contact center operating hours by enabling automated scheduling for recurring events like holidays and maintenance windows. Set up recurring patterns (weekly, monthly, etc.) or link to another hours of operation to inherit overrides. (224e5859)
• client-eks: Added support for BOTTLEROCKET NVIDIA FIPS AMIs to AMI types in US regions. (9ab0b4d2)
• client-socialmessaging: This release clarifies WhatsApp template operations as a resource-authenticated operation via the parent WhatsApp Business Account. It also introduces new parameters for parameter format, CTA URL link tracking, and template body examples, and increases the phone number ID length. (5d9010bf)
• client-redshift-serverless: Adds support for enabling extra compute resources for automatic optimization during create and update operations in Amazon Redshift Serverless workgroups. (74186ff4)
• client-redshift: Adds support for enabling extra compute resources for automatic optimization during create and modify operations in Amazon Redshift clusters. (83a2d07e)
• client-rds: no feature changes. model migrated to Smithy (75005b77)

Tests

• client-s3: add test with empty input stream (#7649) (ce79a75e)
• client-cloudwatch: set alarm name in describe command (#7653) (d6e582c9)

---

For list of updated packages, view updated-packages.md in assets-3.969.0.zip

3.968.0(2026-01-13)

Chores

• drop support for Node.js 18.x (#7647) (b97d3208)
• ci:
  • remove deprecated --es-module-specifier-resolution=node (#7646) (ded452c8)
  • increment pre-commit hook node-version to 20 (#7634) (91008dce)
• clients: bump '@smithy/*' versions (#7645) (e13b43e4)
• scripts: use custom changelog updater for free-range packages (#7644) (de24e02b)

New Features

• client-bedrock: This change will increase TestCase guardContent input size from 1024 to 2028 characters and PolicyBuildDocumentDescription from 2000 to 4000 characters (2efd6864)
• client-datazone: Adds support for IAM role subscriptions to Glue table listings via CreateSubscriptionRequest API. Also adds owningIamPrincipalArn filter to List APIs and subscriptionGrantCreationMode parameter to subscription target APIs for controlling grant creation behavior. (db299d3e)

---

For list of updated packages, view updated-packages.md in assets-3.968.0.zip

3.967.0(2026-01-12)

Chores

• continue on lerna changed exit code 1 (#7643) (8575e93c)
• fix build versioning (#7642) (bc103bf3)
• customize lerna versioning actions (#7635) (03e689b4)
• codegen: update for hostPrefix fix (#7639) (eb666b56)

New Features

• clients: update client endpoints as of 2026-01-12 (691a3a43)
• client-billing: Cost Categories filtering support to BillingView data filter expressions through the new costCategories parameter, enabling users to filter billing views by AWS Cost Categories for more granular cost management and allocation. (419d38bf)
• client-sagemaker: Added ultraServerType to the UltraServerInfo structure to support server type identification for SageMaker HyperPod (ed0201e3)
• client-iot-managed-integrations: This release introduces WiFi Simple Setup (WSS) enabling device provisioning via barcode scanning with automated network discovery, authentication, and credential provisioning. Additionally, it introduces 2P Device Capability Rediscovery for updating hub-managed device capabilities post-onboarding. (0c3b5726)

Tests

• core: add required CollectionName parameter to listGeofences (#7640) (a51203c4)
• core/protocols: add integration test for hostPrefix (#7638) (da9b2a9a)

---

For list of updated packages, view updated-packages.md in assets-3.967.0.zip

3.966.0(2026-01-09)

Chores

• codegen:
  • release smithy-typescript-aws-codegen v0.41.1 (#7633) (f5048a66)
  • set rimraf to 5.0.10 (#7630) (367465e7)
• util-arn-parser: mark arn parser internal (#7629) (7baf559c)
• scripts: script to get changed package list (#7628) (a470a0e1)

New Features

• clients: update client endpoints as of 2026-01-09 (060fef34)
• client-medialive: MediaPackage v2 output groups in MediaLive can now accept one additional destination for single pipeline channels and up to two additional destinations for standard channels. MediaPackage v2 destinations now support sending to cross region MediaPackage channels. (ce039310)
• client-bedrock-agentcore-control: Adds optional field "view" to GetMemory API input to give customers control over whether CMK encrypted data such as strategy decryption or override prompts is returned or not. (c68a59e8)
• client-transcribe: Adds waiters to Amazon Transcribe. (93eb18c5)
• client-glue: Adding MaterializedViews task run APIs (d430d646)
• client-cloudfront: Added EntityLimitExceeded exception handling to the following API operations AssociateDistributionWebACL, AssociateDistributionTenantWebACL, UpdateDistributionWithStagingConfig (858e6e8b)

---

For list of updated packages, view updated-packages.md in assets-3.966.0.zip

3.965.0(2026-01-07)

Chores

• upgrade rimraf (#7626) (9a090faf)

New Features

• clients: update client endpoints as of 2026-01-07 (a77238b4)
• client-workspaces: Add StateMessage and ProgressPercentage fields to DescribeCustomWorkspaceImageImport API response. (fe652fb5)

Tests

• core: reduce nesting depth of test structures (#7624) (552e8329)

---

For list of updated packages, view updated-packages.md in assets-3.965.0.zip

3.964.0(2026-01-06)

Chores

• core: ensure package build order (#7623) (3fa6ead6)

New Features

• client-cost-explorer: This release updates existing reservation recommendations API to support deployment model. (c9e728da)
• client-emr-serverless: Added support for enabling disk encryption using customer managed AWS KMS keys to CreateApplication, UpdateApplication and StartJobRun APIs. (9d932c38)

Bug Fixes

• core: make CREDENTIALS_CODE mutually exclusive with other credential sources (#7615) (05e017ef)

---

For list of updated packages, view updated-packages.md in assets-3.964.0.zip

3.962.0(2026-01-02)

Chores

• codegen:
  • update release tag for 0.41.0 (#7617) (61ed97dd)
  • sync for waiter codegen fix (#7614) (dbc6c8b3)
  • release smithy-typescript-aws-codegen v0.41.0 (#7609) (e4d9a938)
  • sync for default schema generation (#7608) (a5096088)

New Features

• client-identitystore: This change introduces "Roles" attribute for User entities supported by AWS Identity Store SDK. (80de895d)
• client-cleanrooms: Added support for publishing detailed metrics to CloudWatch for operational monitoring of collaborations, including query performance and resource utilization. (762ac213)
• codegen: include lib package versions in sdkVersions.properties file (#7616) (978a0720)

Tests

• credential-provider-login: mock Date for determinism (#7613) (287d8e47)

---

For list of updated packages, view updated-packages.md in assets-3.962.0.zip

3.958.0(2025-12-23)

Chores

• client-elastic-transcoder: remove elastic transcoder due to service shutdown (#7602) (4381b2dc)
• build: generate clients without formatting prettier/eslint (#7599) (da9c913a)
• codegen: bump codegen version to 0.40.0 (#7601) (4dc2bcb7)

New Features

• clients: update client endpoints as of 2025-12-23 (f5aa61b9)
• client-s3: Add additional validation to Outpost bucket names. (2f30457f)
• client-geo-places: Adds support for InferredSecondaryAddress place type, Designator in SecondaryAddressComponent and Heading in ReverseGeocode. (1c6374da)
• client-pinpoint-sms-voice-v2: This release adds support for the Registration Reviewer feature, which provides generative AI feedback on a phone number or sender ID registration to ensure completeness before sending to downstream (carrier) review. (ac0c236b)

Tests

• client-sqs: increase timeout from 5s to 60s (#7603) (c140520a)

---

For list of updated packages, view updated-packages.md in assets-3.958.0.zip

3.957.0(2025-12-22)

Chores

• move crc64NvmeCrtContainer to '@aws-sdk/crc64-nvme' (#7600) (69196b71)
• move e2e tests from cucumber to vitest (#7539) (561b8900)
• build: replace lerna partial-tree build with turbo (#7597) (04bdba3e)

Documentation Changes

• client-pcs: Change API Reference Documentation for default Mode in Accounting and SlurmRest (966f60ac)

New Features

• client-config-service: Added supported resourceTypes for Config from July to November 2025 (2c7dab27)
• client-ec2: Adds support for linkedGroupId on the CreatePlacementGroup and DescribePlacementGroups APIs. The linkedGroupId parameter is reserved for future use. (a492f734)
• client-guardduty: Make accountIds a required field in GetRemainingFreeTrialDays API to reflect service behavior. (53e59c65)
• middleware-flexible-checksums: use CRC64NVME JS implementation if CRT is not available (#7595) (4c6ad409)

Bug Fixes

• middleware-flexible-checksums: advise user on InvalidChunkSizeError (#7598) (6fa3b4cc)

---

For list of updated packages, view updated-packages.md in assets-3.957.0.zip

3.956.0(2025-12-19)

Chores

• crc64-nvme: add pure JS CRC64NVME implementation (#7592) (03019927)
• codegen:
  • differentiate union and struct schema (#7594) (a3f02028)
  • update for $unknown union member handling (#7591) (2c738294)
  • upgrade smithy to 1.65.0 (#7588) (8e9ad476)

Documentation Changes

• supplemental-docs: typo fixes (#7590) (0f23c869)

New Features

• clients: update client endpoints as of 2025-12-19 (e0360a8f)
• client-wickr: AWS Wickr now provides a suite of admin APIs to allow you to programmatically manage secure communication for Wickr networks at scale. These APIs enable you to automate administrative workflows including user lifecycle management, network configuration, and security group administration. (d105e0ef)
• client-arc-region-switch: Automatic Plan Execution Reports allow customers to maintain a concise record of their Region switch Plan executions. This enables customer SREs and leadership to have a clear view of their recovery posture based on the generated reports for their Plan executions. (33dbf8d8)
• client-workspaces-web: Add support for WebAuthn under user settings. (a42b84c4)
• client-iot: This release adds event-based logging feature that enables granular event logging controls for AWS IoT logs. (bbbf580b)
• client-qbusiness: It is a internal bug fix for region expansion (42a80dd7)
• client-connect: Adding support for Custom Metrics and Pre-Defined Attributes to GetCurrentMetricData API. (43dab925)
• client-emr-serverless: Added JobLevelCostAllocationConfiguration field to enable cost allocation reporting at the job level, providing more granular visibility into EMR Serverless charges (e95db238)

Bug Fixes

• ec2-metadata-service: add configurable options for ttl and port precedence (#7584) (184cf70c)
• core/protocols: $unknown union member support (#7593) (596fc405)

---

For list of updated packages, view updated-packages.md in assets-3.956.0.zip

3.955.0(2025-12-18)

Chores

• codegen: downgrade spotless to 7.2.1 (#7587) (ef66a21f)
• clients: export star from models_N (#7586) (e9b7f20a)

New Features

• clients: update client endpoints as of 2025-12-18 (11335218)
• client-ec2: This release adds AvailabilityZoneId support for CreateFleet, ModifyFleet, DescribeFleets, RequestSpotFleet, ModifySpotFleetRequests and DescribeSpotFleetRequests APIs. (4d1a66b9)
• client-ecs: Adding support for Event Windows via a new ECS account setting "fargateEventWindows". When enabled, ECS Fargate will use the configured event window for patching tasks. Introducing "CapacityOptionType" for CreateCapacityProvider API, allowing support for Spot capacity for ECS Managed Instances. (751c797f)
• client-arc-region-switch: New API to list Route 53 health checks created by ARC region switch for a plan in a specific AWS Region using the Region switch Regional data plane. (406035c4)
• client-bedrock-agentcore-control: Feature to support header exchanges between Bedrock AgentCore Gateway Targets and client, along with propagating query parameter to the configured targets. (800275ca)
• client-appstream: Added support for new operating systems (1) Ubuntu 24.04 Pro LTS on Elastic fleets, and (2) Microsoft Server 2025 on Always-On and On-Demand fleets (a94e6d55)
• client-cleanrooms: Adding support for collaboration change requests requiring an approval workflow. Adding support for change requests that grant or revoke results receiver ability and modifying auto approved change types in an existing collaboration. (26987932)
• client-artifact: Add support for ListReportVersions API for the calling AWS account. (8247b183)
• client-iot: This release adds message batching for the IoT Rules Engine HTTP action. (aa2dc069)
• client-sesv2: Amazon SES introduces Email Validation feature which checks email addresses for syntax errors, domain validity, and risky addresses to help maintain deliverability and protect sender reputation. SES also adds resource tagging and ABAC support for EmailTemplates and CustomVerificationEmailTemplates. (7412e741)
• client-bedrock-data-automation: Blueprint Optimization (BPO) is a new Amazon Bedrock Data Automation (BDA) capability that improves blueprint inference accuracy using example content assets and ground truth data. BPO works by generating better instructions for fields in the Blueprint using provided data. (3f901e7c)
• client-ecr: Adds support for ECR Create On Push (620e820d)
• client-opensearch: Amazon OpenSearch Service adds support for warm nodes, enabling new multi-tier architecture. (e574a591)
• client-ssm-sap: Added "Stopping" for the HANA Database Status. (393a8516)

---

For list of updated packages, view updated-packages.md in assets-3.955.0.zip

3.954.0(2025-12-17)

Chores

• core: add license file (#7096) (4d7bd08b)
• codegen:
  • bump jreleaser to 1.21.0 (#7585) (7b9ec0f7)
  • changes for handling conflicting params (#7549) (1978c68f)
• ci: scope down GitHub Token permissions for lock.yml (#7555) (b0bd47fa)
• clients: bump '@smithy/*' versions (#7582) (b654d972)

Documentation Changes

• core/protocols: add docs for schemas and protocols (#7583) (16628667)

New Features

• clients: update client endpoints as of 2025-12-17 (cf14f274)
• client-mediapackagev2: This release adds support for SPEKE V2 content key encryption in MediaPackage v2 Origin Endpoints. (988aac9d)
• client-inspector-scan: Adds an additional OutputFormat (fb2ca52a)
• client-guardduty: Add support for dbiResourceId in finding. (50534058)
• client-kafkaconnect: Support dual-stack network connectivity for connectors via NetworkType field. (04719ac2)
• client-sagemaker: Adding the newly launched p6-b300.48xlarge ec2 instance support in Sagemaker(Hyperpod,Training and Sceptor) (9833262e)
• client-payment-cryptography-data: Support for AS2805 standard. New API GenerateAs2805KekValidation and changes to translate pin, GenerateMac and VerifyMac to support AS2805 key variants. (fc2784b4)
• client-payment-cryptography: Support for AS2805 standard. Modifications to import-key and export-key to support AS2805 variants. (1d7c22e4)
• client-gameliftstreams: Added new stream group operation parameters for scale-on-demand capacity with automatic prewarming. Added new Gen6 stream classes based on the EC2 G6 instance family. Added new StartStreamSession parameter for exposure of real-time performance stats to clients. (94316515)
• client-mediaconvert: Adds support for tile encoding in HEVC and audio for video overlays. (010a9f7d)
• ec2-metadata-service: add retries for IMDS requests (#7569) (4b9a0ea9)

---

For list of updated packages, view updated-packages.md in assets-3.954.0.zip

3.953.0(2025-12-16)

Chores

• build: set cjs->es dependency in turbo (#7581) (0ddef7f7)
• build cjs rollup without typescript (#7580) (4359e405)

New Features

• clients:
  • update client endpoints as of 2025-12-16 (5c0fba3d)
  • allow protocol selection by class constructor (#7568) (5c5fd2e6)
• client-iot: Add support for dynamic payloads in IoT Device Management Commands (991cba08)
• client-timestream-influxdb: This release adds support for rebooting InfluxDB DbInstances and DbClusters (a8b712bb)

---

For list of updated packages, view updated-packages.md in assets-3.953.0.zip

3.952.0(2025-12-15)

Chores

• codegen: apply spotless eclipse formatting (#7573) (7e8a34ea)

Documentation Changes

• client-bedrock-agentcore-control: This release updates broken links for AgentCore Policy APIs in the AWS CLI and SDK resources. (6207cfae)

New Features

• client-service-quotas: Add support for SQ Dashboard Api (bcc5261c)
• client-entityresolution: Support Customer Profiles Integration for AWS Entity Resolution (32903b15)
• client-health: Updating Health API endpoint generation for dualstack only regions (c8be328f)
• client-s3: This release adds support for the new optional field 'LifecycleExpirationDate' in S3 Inventory configurations. (55955e01)
• client-ec2: EC2 Capacity Manager now supports SpotTotalCount, SpotTotalInterruptions and SpotInterruptionRate metrics for both vCPU and instance units. (f5db7c3c)
• client-cloudwatch-logs: This release allows you to import your historical CloudTrail Lake data into CloudWatch with a few steps, enabling you to easily consolidate operational, security, and compliance data in one place. (23d7db9d)
• client-route53resolver: Adds support for enabling detailed metrics on Route 53 Resolver endpoints using RniEnhancedMetricsEnabled and TargetNameServerMetricsEnabled in the CreateResolverEndpoint and UpdateResolverEndpoint APIs, providing enhanced visibility into Resolver endpoint and target name server performance. (93737551)
• client-glacier: Documentation updates for Amazon Glacier's maintenance mode (069dcf44)
• client-connect: Amazon Connect now supports outbound WhatsApp contacts via the Send message block or StartOutboundChatContact API. Send proactive messages for surveys, reminders, and updates. Offer customers the option to switch to WhatsApp while in queue, eliminating hold time. (c9b56eb0)
• client-mediatailor: Added support for Ad Decision Server Configuration enabling HTTP POST requests with custom bodies, headers, GZIP compression, and dynamic variables. No changes required for existing GET request configurations. (d0aae6dd)

Bug Fixes

• client-sts: warn sts default region only when used (#7579) (6512de50)
• credential-provider-ini: pass requestHandler from client to login provider (#7577) (a0bd362c)

---

For list of updated packages, view updated-packages.md in assets-3.952.0.zip

3.948.0(2025-12-09)

Chores

• middleware-recursion-detection: upgrade lambda-invoke-store dependency (#7559) (dbc65195)

New Features

• clients: update client endpoints as of 2025-12-09 (012e1f9a)
• client-mgn: Added parameters encryption, IPv4/IPv6 protocol configuration, and enhanced tagging support for replication operations. (a0a347c6)
• client-guardduty: Adding support for Ec2LaunchTemplate Version field (4903763d)
• client-appsync: Update Event API to require EventConfig parameter in creation and update requests. (6298ec44)
• client-route-53: Amazon Route 53 now supports the EU (Germany) Region (eusc-de-east-1) for latency records, geoproximity records, and private DNS for Amazon VPCs in that region (c21e90bc)
• client-account: This release adds a new API (GetGovCloudAccountInformation) used to retrieve information about a linked GovCloud account from the standard AWS partition. (ae9e6fce)
• client-ivs-realtime: Token Exchange introduces seamless token exchange capabilities for IVS RTX, enabling customers to upgrade or downgrade token capabilities and update token attributes within the IVS client SDK without forcing clients to disconnect and reconnect. (db225910)

---

For list of updated packages, view updated-packages.md in assets-3.948.0.zip

3.947.0(2025-12-08)

Chores

• codegen: service closure knowledge index (#7554) (731dbfef)
• core/client: emit warning for Node.js 18.x end-of-support (#7540) (fee7ba1d)

Documentation Changes

• add support policy section for Node.js/ECMAScript versions (#7556) (bf1f6e0b)

New Features

• clients: update client endpoints as of 2025-12-08 (7e0d61b2)
• client-cost-explorer: Add support for Cost Category resource associations including filtering by resource type on ListCostCategoryDefinitions and new ListCostCategoryResourceAssociations API. (011b4f65)
• client-sesv2: Update Mail Manager Archive ARN validation (18c203b2)
• client-redshift-serverless: Added GetIdentityCenterAuthToken API to retrieve encrypted authentication tokens for Identity Center integrated serverless workgroups. This API enables programmatic access to secure Identity Center tokens with proper error handling and parameter validation across supported SDK languages. (c3d27769)
• client-identitystore: Updating AWS Identity Store APIs to support Attribute Extensions capability, with the first release adding Enterprise Attributes. This launch aligns Identity Store APIs with SCIM for enterprise attributes, reducing cases when customers are forced to use SCIM due to lack of SigV4 API support. (14887fde)
• client-rds: Adding support for tagging RDS Instance/Cluster Automated Backups (41b9a139)
• client-partnercentral-selling: Deal Sizing Service for AI-based deal size estimation with AWS service-level breakdown, supporting Expansion and Migration deals across Technology, and Reseller partner cohorts, including Pricing Calculator AddOn for MAP deals and funding incentives. (867598e2)
• client-rolesanywhere: Increases certificate string length for trust anchor source data to support ML-DSA certificates. (481b863e)
• client-ec2: Amazon EC2 P6-B300 instances provide 8x NVIDIA Blackwell Ultra GPUs with 2.1 TB high bandwidth GPU memory, 6.4 Tbps EFA networking, 300 Gbps dedicated ENA throughput, and 4 TB of system memory. Amazon EC2 C8a instances are powered by 5th Gen AMD EPYC processors with a maximum frequency of 4.5 GHz. (229ff011)

Tests

• core/protocols: add test and additional condition for xml declaration (#7552) (c83c986a)

---

For list of updated packages, view updated-packages.md in assets-3.947.0.zip

3.946.0(2025-12-05)

Chores

• codegen:
  • release smithy-aws-typescript-codegen 0.39.0 (#7548) (abaca492)
  • sync for typescript formatting (#7546) (da6eee73)
  • type imports and index tests (#7545) (eb4e29bd)
• deps: bump jws from 3.2.2 to 3.2.3 (#7544) (a934dcb7)

Documentation Changes

• client-ecs: Updating stop-task API to encapsulate containers with custom stop signal (d7a58e20)

New Features

• client-iam: Adding the ExpirationTime attribute to the delegation request resource. (2de73924)
• client-inspector2: This release adds a new ScanStatus called "Unsupported Code Artifacts". This ScanStatus will be returned when a Lambda function was not code scanned because it has unsupported code artifacts. (30b100c9)
• client-partnercentral-account: Adding Verification API's to Partner Central Account SDK. (b9bad198)
• client-sesv2: Updating the desired url for PutEmailIdentityDkimSigningAttributes from v1 to v2 (4e8746ff)

Bug Fixes

• core/protocols:
  • conditionally append xml declaration (#7551) (f9245def)
  • awsQueryCompatibility error structuring (#7541) (ab683956)
• ec2-metadata-service: discard response body stream on failed request (#7543) (2dc10c6f)

---

For list of updated packages, view updated-packages.md in assets-3.946.0.zip

3.943.0(2025-12-02)

Chores

• core/protocols: dynamodb serde performance adjustments (#7536) (ae3e73d8)

New Features

• clients: update client endpoints as of 2025-12-02 (2f1ed327)
• client-s3-control: Add support for S3 Storage Lens Advanced Performance Metrics, Expanded Prefixes metrics report, and export to S3 Tables. (a8737778)
• client-observabilityadmin: CloudWatch Observability Admin adds pipelines configuration for third party log ingestion and transformation of all logs ingested, integration of CloudWatch logs with S3 Tables, and AWS account or organization level enablement for 7 AWS services. (1e20b0fe)
• client-fsx: S3 Access Points support for FSx for NetApp ONTAP (cb2d0f30)
• client-datazone: Amazon DataZone now supports exporting Catalog datasets as Amazon S3 tables, and provides automatic business glossary term suggestions for data assets. (f82c5bd4)
• client-sagemaker: Added support for serverless MLflow Apps. (99cda6cb)
• client-securityhub: ITSM enhancements: DRYRUN mode for testing ticket creation, ServiceNow now uses AWS Secrets Manager for credentials, ConnectorRegistrationsV2 renamed to RegisterConnectorV2, added ServiceQuotaExceededException error, and ConnectorStatus visibility in CreateConnectorV2. (45c4bd14)
• client-bedrock-agentcore-control: Supports AgentCore Evaluations, Policy, Episodic Memory Strategy, Resource Based Policy for Runtime and Gateway APIs, API Gateway Rest API Targets and enhances JWT authorizer. (072c9ff2)
• client-bedrock-runtime: Adds support for Audio Blocks and Streaming Image Output plus new Stop Reasons of malformed_model_output and malformed_tool_use. (57bdac08)
• client-nova-act: Initial release of Nova Act SDK. The Nova Act service enables customers to build and manage fleets of agents for automating production UI workflows with high reliability, fastest time-to-value, and ease of implementation at scale. (f0544c31)
• client-opensearch: GPU-acceleration helps you build large-scale vector databases faster and more efficiently. You can enable this feature on new OpenSearch domains and OpenSearch Serverless collections. This feature uses GPU-acceleration to reduce the time needed to index data into vector indexes. (263dd4ca)
• client-cloudwatch-logs: CloudWatch Logs adds managed S3 Tables integration to access logs using other analytical tools, as well as facets and field indexing to simplify log analytics in CloudWatch Logs Insights. (f3383c4e)
• client-bedrock: Adds the audioDataDeliveryEnabled boolean field to the Model Invocation Logging Configuration. (c3ccd65d)
• client-guardduty: Adding support for extended threat detection for Amazon EC2 and Amazon ECS. Adding support for wild card suppression rules. (d338e8aa)
• client-s3: New S3 Storage Class FSX_ONTAP (56ffa40a)
• client-bedrock-agentcore: Support for AgentCore Evaluations and Episodic memory strategy for AgentCore Memory. (ff3003b7)
• client-savingsplans: Added support for Amazon Database Savings Plans (d93e9c41)
• client-opensearchserverless: GPU-acceleration helps you build large-scale vector databases faster and more efficiently. You can enable this feature on new OpenSearch domains and OpenSearch Serverless collections. This feature uses GPU-acceleration to reduce the time needed to index data into vector indexes. (ae1f36f7)
• client-cost-explorer: This release updates existing Savings Plans Purchase Analyzer and Recommendations APIs to support Database Savings Plans. (4dd5ecaa)
• client-lambda: Launching Lambda durable functions - a new feature to build reliable multi-step applications and AI workflows natively within the Lambda developer experience. (01476cf7)
• client-s3vectors: Amazon S3 Vectors provides cost-effective, elastic, and durable vector storage for queries based on semantic meaning and similarity. (b9835814)
• client-s3tables: Add storage class, replication, and table record expiration features to S3 Tables. (f73480a7)
• client-rds: RDS Oracle and SQL Server: Add support for adding, modifying, and removing additional storage volumes, offering up to 256TiB storage; RDS SQL Server: Support Developer Edition via custom engine versions for development and testing purposes; M7i/R7i instances with Optimize CPU for cost savings. (0fc234af)

Tests

• core/protocols: add Query error deserialization unit test (#7535) (88074553)

---

For list of updated packages, view updated-packages.md in assets-3.943.0.zip

3.940.0(2025-11-25)

New Features

• clients: update client endpoints as of 2025-11-25 (e2770904)
• client-network-firewall: Network Firewall release of the Proxy feature. (0eb20e88)
• client-organizations: Add support for policy operations on the S3_POLICY and BEDROCK_POLICY policy type. (75e196ee)
• client-route-53: Adds support for new route53 feature: accelerated recovery. (dbe0a58f)
• client-ec2: This release adds support to view Network firewall proxy appliances attached to an existing NAT Gateway via DescribeNatGateways API NatGatewayAttachedAppliance structure. (7d70b063)

Bug Fixes

• core/protocols: performance improvements for shape serde traversal (#7523) (b20a25ea)

Tests

• codegen: update codegen unit tests (#7525) (e43ff44c)

---

For list of updated packages, view updated-packages.md in assets-3.940.0.zip

3.939.0(2025-11-24)

Chores

• scripts: reduce api validation to packages/lib only (#7519) (eb74d6a0)

New Features

• client-cloudwatch-logs: New CloudWatch Logs feature - LogGroup Deletion Protection, a capability that allows customers to safeguard their critical CloudWatch log groups from accidental or unintended deletion. (02360329)
• client-cloudfront: Add TrustStore, ConnectionFunction APIs to CloudFront SDK (168505ee)

Bug Fixes

• clients: export enum objects for string shapes (#7521) (62f648df)
• cloudfront-signer: skip extended encoding for query parameters in the base url (#7515) (954d411e)

Tests

• increase beforeAll hook timeouts (#7518) (720ba4cd)

---

For list of updated packages, view updated-packages.md in assets-3.939.0.zip

3.936.0(2025-11-19)

New Features

• credential-provider-login: add login credential provider (#7512) (2c08b1e0)

---

For list of updated packages, view updated-packages.md in assets-3.936.0.zip