@aws-sdk/credential-provider-sso

3.907.0(2025-10-09)

Chores

• util-user-agent-browser: remove bowser from default UA provider (#7413) (a94d95f7)
• ci: run publish for codegen (#7415) (b2f1ac0c)

New Features

• clients: update client endpoints as of 2025-10-09 (98148915)
• client-wafv2: This release adds the ability to throw WafLimitsExceededException when the maximum number of Application Load Balancer (ALB) associations per AWS WAF v2 WebACL is exceeded. (33438d9d)
• client-quicksight: This release adds support for ActionConnector and Flow, which are new resources associated with Amazon Quick Suite. Additional updates include expanded Data Source options, further branding customization, and new capabilities that can be restricted by Admins. (72c12a09)

Tests

• core: modify request compression threshold values (#7414) (6b45d720)

---

For list of updated packages, view updated-packages.md in assets-3.907.0.zip

3.906.0(2025-10-08)

Chores

• core/protocols: inline schema number values (#7412) (99121e88)
• clients: use rollup for dist-cjs (#7406) (76423599)

New Features

• clients: update client endpoints as of 2025-10-08 (9f44c29c)
• client-license-manager-user-subscriptions: Released support for IPv6 and dual-stack active directories (288c63a8)
• client-outposts: This release adds the new StartOutpostDecommission API, which starts the decommission process to return Outposts racks or servers. (2bfac290)
• client-bedrock-agentcore-control: Adding support for authorizer type AWS_IAM to AgentCore Control Gateway. (c3b83d46)
• client-service-quotas: introduces Service Quotas Automatic Management. Users can opt-in to monitoring and managing service quotas, receive notifications when quota usage reaches thresholds, configure notification channels, subscribe to EventBridge events for automation, and view notifications in the AWS Health dashboard. (136894bf)

---

For list of updated packages, view updated-packages.md in assets-3.906.0.zip

3.901.0(2025-10-01)

Chores

• codegen:
  • bump Gradle to 9.0.0 (#7390) (1e004195)
  • bump codegen version to 0.36.0 (#7393) (d0a9cd8b)
• add more bundle types to the benchmark (#7392) (97078ce6)
• bump '@smithy/*' versions (#7391) (0a418cc2)

Documentation Changes

• client-ecs: This is a documentation only Amazon ECS release that adds additional information for health checks. (a5652334)
• client-database-migration-service: This is a doc-only update, revising text for kms-key-arns. (629c6306)

New Features

• client-chime-sdk-meetings: Add support to receive dual stack MediaPlacement URLs in Chime Meetings SDK (c32ced42)
• client-cleanroomsml: This release introduces data access budgets to view how many times an input channel can be used for ML jobs in a collaboration. (a6cc054b)
• client-cleanrooms: This release introduces data access budgets to control how many times a table can be used for queries and jobs in a collaboration. (783dbc10)
• client-pcs: Added the UpdateCluster API action to modify cluster configurations, and Slurm custom settings for queues. (3b9d480e)
• client-ivs-realtime: Remove incorrect ReadOnly trait on IVS RealTime ImportPublicKey API (8b79cdc1)

---

For list of updated packages, view updated-packages.md in assets-3.901.0.zip

3.899.0(2025-09-29)

Chores

• codegen:
  • git fetch smithy-ts only when necessary (#7380) (650b588b)
  • sync for separating error schema & ctor (#7377) (ad1514df)

New Features

• clients: update client endpoints as of 2025-09-29 (341145bf)
• client-imagebuilder: This release introduces several new features and improvements to enhance pipeline management, logging, and resource configuration. (3659afe3)
• client-bedrock: Release for fixing GetFoundationModel API behavior. Imported and custom models have their own exclusive API and GetFM should not accept those ARNS as input (e8e4a5d6)
• client-vpc-lattice: Adds support for specifying the number of IPv4 addresses in each ENI for the resource gateway for VPC Lattice. (7baea902)
• client-bedrock-runtime: New stop reason for Converse and ConverseStream (323c12bd)

Bug Fixes

• lib-storage: respect user-provided partSize option for Upload (#7381) (31fc9967)

---

For list of updated packages, view updated-packages.md in assets-3.899.0.zip

3.896.0(2025-09-24)

Chores

• core/protocols: preparatory fixes for schemas (#7374) (5284b82d)
• clients: replace 'uuid' with '@smithy/uuid' (#7372) (281c6667)
• private: add 'uuid' import only when necessary (#7369) (ef48329a)
• codegen: bump '@smithy/*' versions (#7370) (76ac1de2)

Documentation Changes

• client-neptune: Doc-only update to address customer use. (08c43a61)
• client-kms: Documentation only updates for KMS. (915892a5)
• client-appstream: G6f instance support for AppStream 2.0 (ec122646)

New Features

• client-cloudwatch: Fix default dualstack FIPS endpoints in AWS GovCloud(US) regions (b22faff8)
• client-dax: This release adds support for IPv6-only, DUAL_STACK DAX instances (d0290d54)

Bug Fixes

• lib-storage: add validation for partCount and contentLength for multipart upload (#7363) (0562a0d1)
• nested-clients: update latest changes from SSO/SSOOIDC (#7371) (6800db79)

Tests

• clients: update payload types in client tests (#7373) (f7eb085f)

---

For list of updated packages, view updated-packages.md in assets-3.896.0.zip

3.895.0(2025-09-23)

Chores

• util-endpoints: update aws partitions.json (e2d3b450)
• endpoints: update endpoints model (6ebbaa18)
• models: update API models (717ae5db)

New Features

• client-entityresolution: Support incremental id mapping workflow for AWS Entity Resolution (556772aa)
• client-cleanrooms: Added support for running incremental ID mapping for rule-based workflows. (f151936f)
• client-sso-oidc: This release includes exception definition and documentation updates. (6106ad2c)
• client-ec2: Add Amazon EC2 R8gn instance types (6368fb54)
• client-sso-admin: Add support for encryption at rest with Customer Managed KMS Key in AWS IAM Identity Center (b6c4746b)
• client-ssm: Added Dualstack support to GetDeployablePatchSnapshotForInstance (d5e44929)

---

For list of updated packages, view updated-packages.md in assets-3.895.0.zip

3.894.0(2025-09-22)

Chores

• clients: enable inliner build for new clients (#7365) (9e3a3e02)

Documentation Changes

• client-batch: Starting in JAN 2026, AWS Batch will change the default AMI for new Amazon ECS compute environments from Amazon Linux 2 to Amazon Linux 2023. We recommend migrating AWS Batch Amazon ECS compute environments to Amazon Linux 2023 to maintain optimal performance and security. (fd3b9072)

New Features

• clients: update client endpoints as of 2025-09-22 (182581c3)
• client-imagebuilder: Version ARNs are no longer required for the EC2 Image Builder list-image-build-version, list-component-build-version, and list-workflow-build-version APIs. Calling these APIs without the ARN returns all build versions for the given resource type in the requesting account. (ac6ffdfe)
• client-eks: Adds support for RepairConfig overrides and configurations in EKS Managed Node Groups. (8a8db628)
• xml-builder: use DOMParser for browser XML parsing (#7347) (af402500)

---

For list of updated packages, view updated-packages.md in assets-3.894.0.zip

3.893.0(2025-09-19)

Chores

• codegen:
  • release 0.35.0 (#7361) (4442dff7)
  • sync for Uint8Array genericity (#7359) (ef0345c2)
• pull request build on PR opened event (#7360) (c64f7f0e)
• packages: set sideEffects metadata (#7358) (c1611a07)

Documentation Changes

• client-sqs: Update invalid character handling documentation for SQS SendMessage API (4ff9d676)

New Features

• clients: update client endpoints as of 2025-09-19 (3726908c)
• client-bedrock-agentcore-control: Add tagging and VPC support to AgentCore Runtime, Code Interpreter, and Browser resources. Add support for configuring request headers in Runtime. Fix AgentCore Runtime shape names. (9ab54a28)
• client-config-service: Add UNKNOWN state to RemediationExecutionState and add IN_PROGRESS/EXITED/UNKNOWN states to RemediationExecutionStepState. (9b89d935)
• client-connect: This release adds a persistent connection field to UserPhoneConfig that maintains agent's softphone media connection for faster call connections. (59e863ba)
• client-license-manager-user-subscriptions: Added support for cross-account Active Directories. (22e49d10)
• client-medialive: Add MinBitrate for QVBR mode under H264/H265/AV1 output codec. Add GopBReference, GopNumBFrames, SubGopLength fields under H265 output codec. (25f22be2)

Tests

• rekognitionstreaming: remove outdated endpoint tests (#7362) (10b3d03f)

---

For list of updated packages, view updated-packages.md in assets-3.893.0.zip

3.891.0(2025-09-17)

Chores

• codegen: codegen sync for command doc update and retry trait (#7353) (29220637)

Documentation Changes

• update guidance on instanceof Exception checking (#7351) (70328726)

New Features

• client-ec2: Add mac-m4.metal and mac-m4pro.metal instance types. (542f2aba)
• client-pcs: Add support for Amazon EC2 Capacity Blocks for ML (28cf47d6)
• client-network-firewall: Network Firewall now prevents TLS handshakes with the target server until after the Server Name Indication (SNI) has been seen and verified. The monitoring dashboard now provides deeper insights into PrivateLink endpoint candidates and offers filters based on IP addresses and protocol. (11455fdf)

Tests

• normalize import of integ test mock (#7352) (8c20c066)
• client-s3: add integration test for selectObjectContent (#7325) (c65c2030)

---

For list of updated packages, view updated-packages.md in assets-3.891.0.zip

3.890.0(2025-09-16)

Chores

• scripts: turn off verdaccio benchmark script (#7350) (e5b756a3)
• codegen: sync for fs-mock and eventstream codegen fix (#7348) (60f5a8c8)

Documentation Changes

• update client configuration documentation (#7345) (bb982487)

New Features

• clients: update client endpoints as of 2025-09-16 (aef54eb6)
• client-osis: Adds support for cross-account ingestion for push-based sources. This includes resource policies for sharing pipelines across accounts and features for managing pipeline endpoints which enable accessing pipelines across different VPCs, including VPCs in other accounts. (de930e70)
• client-budgets: Add support for custom time periods in budget configuration (8d881364)
• client-ivs-realtime: IVS now offers customers the ability to control the positioning of participants in both grid and PiP layouts based on custom attribute values in participant tokens. (bac6c46e)
• client-cloudwatch-logs: Cloudwatch Logs added support for 2 new API parameters in metric and subscription filter APIs to filter log events based on system field values and emit system field values as dimensions and send them to customer destination as additional metadata. (8d9dd737)

Tests

• credential-provider-node: rewrite integ in vitest (#7349) (9eee6eb1)

---

For list of updated packages, view updated-packages.md in assets-3.890.0.zip

3.888.0(2025-09-12)

Chores

• ci:
  • run pull request workflow on ready for review and synchronize (#7341) (ad2b2ef0)
  • bump GitHub actions to use node 24 (#7339) (cf8d1f5e)
• deps:
  • bump gradle to 8.14 (#7340) (84f24f58)
  • use gradle/actions/wrapper-validation (#7338) (85153665)

New Features

• client-payment-cryptography: Add support for certificates to be signed by 3rd party certificate authorities. New API GetCertificateSigningRequest API and support for providing certificates at run-time for tr-34 import/export (bcb39c29)

Tests

• core/protocols: document testing (#7334) (9cd94157)

---

For list of updated packages, view updated-packages.md in assets-3.888.0.zip

3.887.0(2025-09-11)

Chores

• ci: cache gradle in GitHub workflow (#7337) (bac6f2d5)
• codegen: bump codegen version to 0.34.1 (#7329) (36807467)
• deps: bump @smithy/ dependency versions (#7328) (9963c983)

New Features

• clients: update client endpoints as of 2025-09-11 (d1fbb5ff)
• client-emr-containers: Added nodeLabel support in container provider to aid hardware isolation support for virtual cluster and security configuration. (b8451741)
• client-ecs: This release supports hook details for Amazon ECS lifecycle hooks. (e2c85d32)
• client-evs: CreateEnvironment API now supports parameters (isHcxPublic & hcxNetworkAclId) for HCX migration via public internet, adding flexibility for migration scenarios. New APIs have been added for associating (AssociateEipToVlan) & disassociating (DisassociateEipFromVlan) Elastic IP (EIP) addresses. (6147f353)
• client-medialive: AWS Elemental MediaLive adds a new feature in MediaPackage output group that enables MediaPackage V2 users to control HLS-related parameters directly in MediaLive. These parameter settings are then reflected in MediaPackage outputs, providing more streamlined control over HLS configurations. (36b2bf07)
• client-rds: Adds support for end-to-end IAM authentication in RDS Proxy for MySQL, MariaDB, and PostgreSQL engines. (31a35344)
• client-amp: Add Vended Logs APIs for Amazon Prometheus Managed Collector (4312d5be)
• client-quicksight: This release adds support for Account level custom permissions, additional Dashboard Options, and Null support for Q&A. (40a0cf05)
• client-datazone: adding IAM principal id to IAM user profile details (090fbf95)
• client-guardduty: Updated Java SDK implementation of entity set status in GuardDuty API. (6eb1c3d5)

Bug Fixes

• codegen: update deprecated APIs in build.gradle.kts (#7335) (127022cb)

---

For list of updated packages, view updated-packages.md in assets-3.887.0.zip

3.886.0(2025-09-10)

Chores

• middleware-recursion-detection:
  • read TraceID from Lambda Invoke Store (#7293) (ac324bb6)
  • add no-op middleware outside of Node.js (#7326) (9484757b)

New Features

• clients: update client endpoints as of 2025-09-10 (dc8054d1)
• client-payment-cryptography: AWS Payment Cryptography Service now supports Multi-Region key replication. Customers can choose to automatically distribute keys across AWS Regions. (6e51152f)
• client-networkflowmonitor: Added new enum value (AWS::Region) for type field under MonitorLocalResource and MonitorRemoteResource. Workload Insights and Monitor top contributors queries now support a new DestinationCategory (INTER_REGION). (08380595)

---

For list of updated packages, view updated-packages.md in assets-3.886.0.zip

3.883.0(2025-09-05)

Chores

• core/protocols: add fallback for schema short name (#7314) (f32c1f10)

Documentation Changes

• client-pcs: Documentation-only update to add AccountingStorageEnforce to SlurmCustomSetting. (18968522)
• client-ecs: This is a documentation only release that adds additional information for Amazon ECS Availability Zone rebalancing. (ada26715)

New Features

• client-sagemaker: Release IPv6 support with dualstack in SageMaker Notebooks, Tiered Storage Checkpointing Support in SageMaker HyperPod and P5.4xlarge instance type for SageMaker Hosting. (308df6ee)

Bug Fixes

• lib-storage: update Upload params type to intersection of all S3 upload command inputs (#7316) (1f7ccf09)
• ci: sanitize HEAD_REF using environment variable (#7315) (39f17133)
• middleware-sdk-s3: handle cross-region redirects for HeadBucket with 400 status (#7313) (bb9e455d)

---

For list of updated packages, view updated-packages.md in assets-3.883.0.zip

3.882.0(2025-09-04)

Chores

• private: set schema serde mode for duplicated protocol tests (#7309) (7f8420a9)
• codegen: sync for eventstream codegen, schema bucketing (#7306) (b0f91073)

New Features

• clients: update client endpoints as of 2025-09-04 (c19b98de)
• client-ec2: Add m8i, m8i-flex and i8ge instance types. (19e055a6)
• client-rds: Added new EndpointNetworkType and TargetConnectionNetworkType fields in Proxy APIs to support IPv6 (38f10e0b)
• client-verifiedpermissions: Amazon Verified Permissions / Features : Adds support for datetime and duration attribute values. (d4b1d361)
• client-cleanrooms: Add support for configurable compute sizes for PySpark jobs. (9a691611)
• client-cloudformation: ListHookResults API now supports retrieving invocation results for all CloudFormation Hooks (previously limited to create change set and Cloud Control operations) with new optional parameters for filtering by Hook status and ARN. (61ad5ad5)
• client-opensearchserverless: Add support for Federal Information Processing Standards (FIPS) and Federal Risk and Authorization Management Program (FedRAMP) compliance (0bdbd8e9)

Bug Fixes

• ci: rename pull-request-build-yml to pull-request-build.yml (#7307) (b3364f73)
• credential-provider-node: fix logger binding issue (#7302) (b5ca7c46)

---

For list of updated packages, view updated-packages.md in assets-3.882.0.zip

3.879.0(2025-08-29)

Chores

• util-endpoints: update aws partitions.json (123a6156)
• endpoints: update endpoints model (6e343508)
• models: update API models (25064f1b)
• scripts: support multi-commands in cli dispatcher (#7295) (e6cd7e41)
• remove duplicate model.json file (#7294) (f27ff649)
• core/protocols: improve body-len checking and awsQueryCompat for schema-serde (#7290) (0cc5678a)
• codegen: sync for schema-serde event-streams (#7291) (139aa8d0)

New Features

• client-xray: AWS X-Ray Features: Support Sampling Rate Boost On Anomaly (d3f17b83)
• client-ec2: Release shows new route types such as filtered and advertisement. (6f9b4a61)

Tests

• nestd-clients: add defaultProvider assertion (#7292) (f560a39c)

---

For list of updated packages, view updated-packages.md in assets-3.879.0.zip

3.876.0(2025-08-26)

Chores

• client-s3: bucket contextParam customization for schema-serde mode (#7250) (933c5c0f)

New Features

• clients: update client endpoints as of 2025-08-26 (2fe1e580)
• client-migration-hub-refactor-spaces: Remove incorrect endpoint tests (c9d7b9fe)
• client-service-catalog-appregistry: Remove incorrect endpoint tests (9a2e3722)
• client-elastic-transcoder: Remove incorrect endpoint tests (fae738b5)
• client-trustedadvisor: Remove incorrect endpoint tests (dcd32bb1)
• client-comprehendmedical: Remove incorrect endpoint tests (c72a2515)
• client-rds-data: Remove incorrect endpoint tests (49dfac40)
• client-imagebuilder: Remove incorrect endpoint tests (4c2ed6d5)
• client-apprunner: Remove incorrect endpoint tests (bee4cfb1)
• client-personalize-events: Remove incorrect endpoint tests (952c2643)
• client-sso-oidc: Remove incorrect endpoint tests (9fa49a83)
• client-ram: Remove incorrect endpoint tests (4b8e2c27)
• client-workspaces: Remove incorrect endpoint tests (b0282eaa)
• client-appconfig: Remove incorrect endpoint tests (6a9ecc9e)
• client-sagemaker-geospatial: Remove incorrect endpoint tests (1a94d3ba)
• client-geo-routes: Added RouteFerryNotice PotentialViolatedVehicleRestrictionUsage value for CalculateRoutes. This value indicates when the Route is potentially forbidden for the given vehicle profile. (37d295dd)
• client-cleanrooms: Remove incorrect endpoint tests (abf1b24c)
• client-license-manager-linux-subscriptions: Remove incorrect endpoint tests (ce80313b)
• client-evs: Remove incorrect endpoint tests (ebd2dd83)
• client-lookoutvision: Remove incorrect endpoint tests (7fe2eadd)
• client-ssm-sap: Remove incorrect endpoint tests (414bac09)
• client-ssm: Remove incorrect endpoint tests (43e41427)
• client-ec2: Add new APIs for viewing how your shared AMIs are used by other accounts, and identify resources in your account that are dependent on particular AMIs (40939d05)
• client-tnb: Remove incorrect endpoint tests (587c1ea6)
• client-route-53: Remove incorrect endpoint tests (713bb43e)
• client-bedrock-agentcore-control: Remove incorrect endpoint tests (334221fd)
• client-resource-explorer-2: Remove incorrect endpoint tests (0d62e92a)
• client-mq: Remove incorrect endpoint tests (96674919)
• client-kafka: Remove incorrect endpoint tests (e47bc610)
• client-gamelift: Remove incorrect endpoint tests (49cc48a0)
• client-arc-zonal-shift: This release adds new API options to enable allowed windows and multiple alarms for practice runs. (9f56f09e)
• client-route53-recovery-cluster: Remove incorrect endpoint tests (afe2b07a)
• client-codecommit: Remove incorrect endpoint tests (732894e9)
• client-waf-regional: Remove incorrect endpoint tests (ce166c08)
• client-m2: Remove incorrect endpoint tests (87d73e3c)
• client-pca-connector-scep: Remove incorrect endpoint tests (b18c315a)
• client-controlcatalog: Remove incorrect endpoint tests (26b7e079)
• client-pinpoint: Remove incorrect endpoint tests (5e53e2ce)
• client-socialmessaging: Remove incorrect endpoint tests (ee50cf15)
• client-iotsecuretunneling: Remove incorrect endpoint tests (fdd280f1)
• client-dlm: Remove incorrect endpoint tests (be8685e4)
• client-securityhub: Remove incorrect endpoint tests (2d19fdfd)
• client-iottwinmaker: Remove incorrect endpoint tests (88fa3ddf)
• client-connect-contact-lens: Remove incorrect endpoint tests (8acde8bc)
• client-glacier: Remove incorrect endpoint tests (8370a410)
• client-migration-hub: Remove incorrect endpoint tests (9048f523)
• client-signer: Remove incorrect endpoint tests (0ccbcd89)
• client-greengrass: Remove incorrect endpoint tests (1bd33297)
• client-finspace: Remove incorrect endpoint tests (7ff4b264)
• client-cloudwatch: Remove incorrect endpoint tests (c4405f39)
• client-codestar-connections: Remove incorrect endpoint tests (f0faf9b3)
• client-drs: Remove incorrect endpoint tests (e6a9d227)
• client-neptunedata: Remove incorrect endpoint tests (1eb52d2a)
• client-rbin: Remove incorrect endpoint tests (ef168a95)
• client-app-mesh: Remove incorrect endpoint tests (85e3e245)
• client-transfer: Remove incorrect endpoint tests (4b7e7076)
• client-identitystore: Remove incorrect endpoint tests (f6ed0993)
• client-iot-jobs-data-plane: Remove incorrect endpoint tests (9f0bd02f)
• client-secrets-manager: Remove incorrect endpoint tests (b083b5f0)
• client-polly: Remove incorrect endpoint tests (21df4508)
• client-global-accelerator: Remove incorrect endpoint tests (e590d59e)
• client-datasync: Remove incorrect endpoint tests (f4a9d255)
• client-connectparticipant: Amazon Connect Participant Service: Remove unused fields from WebRTCConnection (d28d5ff6)

---

For list of updated packages, view updated-packages.md in assets-3.876.0.zip

3.873.0(2025-08-21)

Chores

• util-endpoints: update aws partitions.json (6c73c897)
• endpoints: update endpoints model (3b2eccb3)
• models: update API models (f6e8bcc8)
• bump vitest to 3.x (#7270) (dd90501b)
• rename vitest.config.ts to *.mts (#7262) (011b38c0)
• private:
  • rename vitest.config.js to vitest.config.mts (#7271) (b585daac)
  • rename vite.config.js to vitest.config.mts (#7269) (16da6568)

Documentation Changes

• client-ecs: This is a documentation only release that adds additional information for the update-service request parameters. (2ccda781)
• client-ssm-contacts: Doc-only updates for Incident Manager Contacts August 2025 (977796ec)

New Features

• client-glue: Added support for preprocessing queries in Data Quality operations through new DataQualityGlueTable structure. (1ed08716)
• client-guardduty: Remove Pattern trait from email field (1d689d7f)
• client-gameliftstreams: The default application in a stream group can now be changed at any time using UpdateStreamGroup to update the DefaultApplicationIdentifier. (9341cdc1)

Tests

• aws-protocoltests-smithy-rpcv2-cbor-schema: skip tests not working in vitest 3.x (#7274) (fd48b62a)
• use accurate errors in testing (#7273) (97e916ee)
• aws-client-retry-test: use Lambda client for retry test (#7272) (ff22f5ef)

---

For list of updated packages, view updated-packages.md in assets-3.873.0.zip

3.872.0(2025-08-20)

Chores

• clients: use 'include' in tsconfig.json (#7266) (b2eec675)
• protocoltests: use schema log filter when available (#7261) (2e38b4e1)

New Features

• clients: update client endpoints as of 2025-08-20 (87f16686)
• client-route53-recovery-control-config: Remove incorrect endpoint tests (41b859ac)
• client-efs: Remove incorrect endpoint tests (fd49ae01)
• client-sagemaker: This release adds 1/ Launch ml.p5.4xlarge instance in Processing jobs, Training jobs and Training Plan 2/ Makes S3Uri to be required for S3FileSystem and S3FileSystemConfig. (bfd2fd25)
• client-iam: Remove incorrect endpoint tests (7be4068f)
• client-detective: Remove incorrect endpoint tests (43a4451a)
• client-billing: Clarify IPv4 and IPv6 endpoints (a5ebd35d)
• client-networkmanager: Remove incorrect endpoint tests (2d0793e7)
• client-sesv2: Remove incorrect endpoint tests (a4b659ed)
• client-kinesis: Remove incorrect endpoint tests (569d9f89)
• client-datazone: This release supports policy grant identifier for cloud formation integration (385adca1)
• client-dynamodb: Remove incorrect endpoint tests (16a3ca86)
• client-eks: EKS Add-ons Custom Namespace Support (b6126131)
• client-kinesis-analytics-v2: Adds Key Management Service (KMS) support allowing customer-managed key (CMK) encryption for Flink application data. (e39ef0e4)
• client-cognito-identity-provider: This release adds support for the new Terms APIs which allow displaying Terms of Use and Privacy Policy on the Managed Login user-registration page. (d7b8b115)
• client-marketplace-entitlement-service: Remove incorrect endpoint tests (a3abef00)
• client-cost-explorer: Remove incorrect endpoint tests (6fcdfaa6)
• client-marketplace-metering: Remove incorrect endpoint tests (3febc575)
• client-bedrock-runtime: Launch CountTokens API to allow token counting (e9e8d2d5)
• client-budgets: Remove incorrect endpoint tests (384a8db5)
• client-pinpoint-sms-voice-v2: This change added InternationalSendingEnbaled as part of describe/Update/Request phone number API response, and as part of update/Request phone number API request (8ea06052)

Bug Fixes

• aws-util-test: exclude '**/*.spec.ts' (#7268) (02674380)

---

For list of updated packages, view updated-packages.md in assets-3.872.0.zip

3.864.0(2025-08-08)

Chores

• core/protocols: correct x-amz-target header in schema protocols (#7248) (425c0037)

Documentation Changes

• client-transcribe: Update documentation to use key ARN only in OutputEncryptionKMSKeyId request parameter (aa5d9f03)

New Features

• clients: update client endpoints as of 2025-08-08 (3540d6ea)
• client-iot-data-plane: Adding DeleteConnection API to IoT Data Plane (8fd62429)
• client-s3vectors: Removed incorrect endpoint tests (c14f49d4)
• client-iot-managed-integrations: Removed incorrect endpoint tests (48cf435c)
• client-sagemaker: Adds support for GB200 UltraServers in Amazon SageMaker training jobs, training plans, and HyperPod clusters (b5dc676b)
• client-application-signals: Removed incorrect endpoint tests (794fce3b)
• client-networkflowmonitor: Removed incorrect endpoint tests (1a2f3527)
• client-invoicing: Removed incorrect endpoint tests (fa3eb01c)
• client-notificationscontacts: Removed incorrect endpoint tests (ea092358)
• client-keyspacesstreams: Removed incorrect endpoint tests (32d8e3cc)
• client-connect: This release adds a new API GetContactMetrics for Amazon Connect. (d2612b57)
• client-billing: Removed incorrect endpoint tests (d47a2b84)
• client-gameliftstreams: Removed incorrect endpoint tests (78d0339d)
• client-dsql: Removed incorrect endpoint tests (a3da5408)
• client-bcm-pricing-calculator: Removed incorrect endpoint tests (68d38d89)
• client-notifications: Removed incorrect endpoint tests (4194d2ad)
• client-backupsearch: Removed incorrect endpoint tests (0fc50afd)
• client-mpa: Removed incorrect endpoint tests (bbc9d0d5)
• client-security-ir: Removed incorrect endpoint tests (2b832bff)
• client-inspector2: Add CVSSV4 to Vulnerability Search API and update enable/disable account id list length to 5 (c6f99382)
• client-partnercentral-selling: Removed incorrect endpoint tests (4fe5c4a7)
• client-workspaces-instances: Removed incorrect endpoint tests (d412c8c5)

Tests

• lib-storage: increase timeout for checksum calculation (#7249) (0c9e1b89)

---

For list of updated packages, view updated-packages.md in assets-3.864.0.zip

3.863.0(2025-08-07)

Chores

• core/protocols: generate idempotencyTokens in ShapeSerializers (#7247) (35c2bf28)

Documentation Changes

• client-batch: This feature allows customers to use AWS Batch with Linux with ARM64 CPU Architecture with Fargate Spot compute support. (4f027296)
• client-gameliftstreams: Adds Proton 9.0-2 to the list of runtime environment options available when creating an Amazon GameLift Streams application (fee76f44)

New Features

• client-codebuild: AWS CodeBuild now supports comment-based pull request control. (14bb0367)
• client-guardduty: Added support for VPC owner account ID associated with DNS request in the GuardDuty finding. (79364bdb)
• client-glue: AWS Glue Data Catalog now supports Iceberg Optimization settings at the Catalog level, and supports new options to control the optimization job run rate. (5451046b)
• client-cloudfront: Added new viewer security policy, TLSv1.3_2025, for CloudFront. (100ddffa)

Tests

• bundlers: add e2e test for bundler tree-shaking (#7245) (7312c1b3)

---

For list of updated packages, view updated-packages.md in assets-3.863.0.zip

3.862.0(2025-08-06)

Chores

• codegen: sync for CborCodec idempotencyToken (#7246) (25b3eb16)

Documentation Changes

• client-appstream: Added support for G6 instances (2fb0a994)

New Features

• clients: update client endpoints as of 2025-08-06 (7bd2ce78)
• client-budgets: Adds support for billing views. Billing views let you control access to cost and usage data through an AWS resource, streamlining the process of sharing cost and usage data across account boundaries. With this release, you can now create and view budgets based on billing views. (360bf1cf)
• client-ec2: Mark Elastic Inference Accelerators and Elastic Graphics Processor parameters as deprecated on the RunInstances and LaunchTemplate APIs. (aa76eb44)
• client-qbusiness: Amazon Q Business now supports the GetDocumentContent() API that enables customers to securely access the source documents through clickable citation links at query time (aabc7a59)
• client-opensearchserverless: Features: add Index APIs in OpenSearchServerless to support managed semantic enrichment (9b2c5e66)

---

For list of updated packages, view updated-packages.md in assets-3.862.0.zip

3.859.0(2025-08-01)

Chores

• codegen: sync for omitting protocols files from schema-serde (#7242) (b25304f1)

Documentation Changes

• client-sns: Amazon SNS support for Amazon SQS fair queues (749eb139)
• client-acm-pca: Doc-only update to add more information to GetCertificate action. (0309a7ef)

New Features

• clients: update client endpoints as of 2025-08-01 (3c53767b)
• client-aiops: This release includes fix for InvestigationGroup timestamp conversion issue. (ec627aee)
• client-pcs: Add support for IPv6 Networking for Clusters. (e8774c17)
• client-observabilityadmin: CloudWatch Observability Admin adds the ability to enable telemetry on AWS resources such as Amazon VPCs (Flow Logs) in customers AWS Accounts and Organizations. The release introduces new APIs to manage telemetry rules, which define telemetry settings to be applied on AWS resources. (39e204f9)
• client-securityhub: Release new resource detail type CodeRepository (fb750f9a)
• client-lightsail: This release adds support for the Asia Pacific (Jakarta) (ap-southeast-3) Region. (32d73d71)
• client-auditmanager: Added a note to Framework APIs (CreateAssessmentFramework, GetAssessmentFramework, UpdateAssessmentFramework) clarifying that the Controls object returns a partial response when called through Framework APIs. Added documentation that the Framework's controlSources parameter is no longer supported. (dbff0ec3)
• client-arc-region-switch: This is the initial SDK release for Region switch (6cc73c6a)

Tests

• token-providers: add integ test for fromEnvSigningName (#7241) (08c6c214)

---

For list of updated packages, view updated-packages.md in assets-3.859.0.zip

3.858.0(2025-07-31)

Documentation Changes

• client-elastic-load-balancing-v2: This release enables secondary IP addresses for Network Load Balancers. (0a12a4ec)
• update PR template (#7240) (205fd3ca)

New Features

• clients: update client endpoints as of 2025-07-31 (38d91b61)
• client-sesv2: This release introduces support for Multi-tenant management (41eae73b)
• client-entityresolution: Add support for creating advanced rule-based matching workflows in AWS Entity Resolution. (f36fbb40)
• client-quicksight: Added Impala connector support (1af8f7e6)
• client-customer-profiles: The release updates standard profile with 2 new fields that supports account-level engagement. Updated APIs include CreateProfile, UpdateProfile, MergeProfiles, SearchProfiles, BatchGetProfile, GetSegmentMembership, CreateSegmentDefinition, CreateSegmentEstimate. (04e0957b)
• client-glue: Added support for Route node, S3 Iceberg sources/targets, catalog Iceberg sources, DynamoDB ELT connector, AutoDataQuality evaluation, enhanced PII detection with redaction, Kinesis fan-out support, and new R-series worker types. (3cf6f20a)
• client-workspaces-web: Added ability to log session activity on a portal to an S3 bucket. (1d75d430)
• client-ec2: Added support for the force option for the EC2 instance terminate command. This feature enables customers to recover resources associated with an instance stuck in the shutting-down state as a result of rare issues caused by a frozen operating system or an underlying hardware problem. (d8adec80)
• client-inspector2: Extend usage to include agentless hours and add CODE_REPOSITORY to aggregation resource type (91553bb9)
• client-opensearch: Granular access control support for NEO-SAML with IAMFederation for AOS data source (026ef659)
• client-s3-control: Add Tags field to CreateAccessPoint (4e13ff31)
• client-iot: This release allows AWS IoT Core users to use their own AWS KMS keys for data protection (c65f9eec)

Bug Fixes

• cloudfront-signer: do not use URL Object (#7237) (5a421d48)

Tests

• core: config file and defaults mode integ tests (#7239) (0ae45069)

---

For list of updated packages, view updated-packages.md in assets-3.858.0.zip

3.857.0(2025-07-30)

Chores

• codegen:
  • bump codegen version to 0.34.0 (#7235) (9e2e900d)
  • upgrade smithy to 1.61.0 (#7233) (750ced56)
• deps: bump @smithy/* to include fixes in core (#7232) (fe419e4c)

New Features

• clients: update client endpoints as of 2025-07-30 (81ae68e5)
• client-docdb: Add support for setting Serverless Scaling Configuration on clusters. (7601d95f)
• client-cloudfront: This release adds new origin timeout options: 1) ResponseCompletionTimeout and 2) OriginReadTimeout (for S3 origins) (85139ef1)
• client-ec2: Release to show the next hop IP address for routes propagated by VPC Route Server into VPC route tables. (ec57020f)
• client-iot-wireless: Added TxPowerIndexMin, TxPowerIndexMax, NbTransMin and NbTransMax params to ServiceProfile. (f8bbc34d)
• client-directory-service: This release adds support for AWS Managed Microsoft AD Hybrid Edition, introducing new operations: StartADAssessment, DescribeADAssessment, ListADAssessments, DeleteADAssessment, CreateHybridAD, UpdateHybridAD, and DescribeHybridADUpdate; and updated existing operation: DescribeDirectories. (33ce8f0d)

---

For list of updated packages, view updated-packages.md in assets-3.857.0.zip

3.856.0(2025-07-29)

New Features

• clients: update client endpoints as of 2025-07-29 (caa11b64)
• client-opensearchserverless: This is to support Granular access control support for SAML with IAMFedraton in AOSS (a440fc3c)
• client-location: This release 1) adds support for multi-polygon geofences with disconnected territories, and 2) enables polygon exclusion zones within geofences for more accurate representation of real-world boundaries. (a5908852)
• client-batch: AWS Batch for SageMaker Training jobs feature support. Includes new APIs for service job submission (e.g., SubmitServiceJob) and managing service environments (e.g., CreateServiceEnvironment) that enable queueing SageMaker Training jobs. (d1163fab)
• client-deadline: Adds support for tag management on monitors. (60d0fe6a)
• client-cleanrooms: This feature provides the ability to update the table reference and allowed columns on an existing configured table. (f72f1fc1)

Tests

• add assorted integ/e2e tests (#7230) (b1f31dd5)
• middleware-sdk-s3: increase hook timeout (#7231) (a746aa8b)

---

For list of updated packages, view updated-packages.md in assets-3.856.0.zip

3.855.0(2025-07-28)

Documentation Changes

• lib-dynamodb: example for performing table scan (#7227) (9c6a29eb)

New Features

• clients: update client endpoints as of 2025-07-28 (2d41ea6f)
• client-iotsitewise: Add support for native anomaly detection in IoT SiteWise using new Computation Model APIs (0b30d5cf)
• client-direct-connect: Enable MACSec support and features on Interconnects. (bee374c4)
• client-osis: Add Pipeline Role Arn as an optional parameter to the create / update pipeline APIs as an alternative to passing in the pipeline configuration body (36ca668d)

Tests

• core: new integration tests (#7229) (5c5e7cef)

---

For list of updated packages, view updated-packages.md in assets-3.855.0.zip

3.848.0(2025-07-17)

Documentation Changes

• client-keyspacesstreams: Doc only update for the Amazon Keyspaces Streams API. (299bd9d1)
• client-sfn: Align input with style guidelines. (f60fcf62)
• client-cloudfront: Doc only update for CloudFront that fixes some customer-reported issues (d866c056)

New Features

• clients: update client endpoints as of 2025-07-17 (6fad106c)
• client-ec2: AWS Free Tier Version2 Support (1356a462)
• client-mediaconvert: This release expands the range of supported audio outputs to include xHE, 192khz FLAC and the deprecation of dual mono for AC3. (dc5d4c46)
• client-synthetics: This feature allows AWS Synthetics customers to provide code dependencies using lambda layer while creating a canary (816322ac)
• client-mailmanager: Allow underscores in the local part of the input of the "Email recipients rewrite" action in rule sets. (d0c66111)
• client-cleanroomsml: This release introduces Parquet result format support for ML Input Channel models in AWS Clean Rooms ML. (2b8c1aae)

Tests

• util-endpoints: add AWS_ENDPOINT_URL integ test (#7209) (6eff848f)

---

For list of updated packages, view updated-packages.md in assets-3.848.0.zip

3.846.0(2025-07-16)

Chores

• core/protocols: fix for XML shape deser (#7160) (7061230a)

New Features

• clients: update client endpoints as of 2025-07-16 (6ce3f3c4)
• client-ecs: This release removes hookDetails for the Amazon ECS native blue/green deployments. (59ef1778)

---

For list of updated packages, view updated-packages.md in assets-3.846.0.zip

3.845.0(2025-07-15)

Chores

• packages: set sideEffects metadata (#7200) (b34b3887)
• codegen: bump codegen version to 0.33.0 (#7197) (a86564ba)

New Features

• clients: update client endpoints as of 2025-07-15 (8cbd7a20)
• client-pricing: This release adds support for new filter types in GetProducts API, including EQUALS, CONTAINS, ANY_OF, and NONE_OF. (0f1048c0)
• client-datazone: Removing restriction of environment profile identifier as required field, S3 feature release (5b32ed8e)
• client-dynamodb-streams: Added support for optional shard filter parameter in DescribeStream api that allows customers to fetch child shards of a read_only parent shard. (33f76e96)
• client-s3tables: Adds table bucket type to ListTableBucket and GetTableBucket API operations (5784238b)
• client-ec2: This release adds support for volume initialization status, which enables you to monitor when the initialization process for an EBS volume is completed. This release also adds IPv6 support to EC2 Instance Connect Endpoints, allowing you to connect to your EC2 Instance via a private IPv6 address. (ba3d8375)
• client-quicksight: Introduced custom instructions for topics. (261ae684)
• client-ecs: Amazon ECS supports native blue/green deployments, allowing you to validate new service revisions before directing production traffic to them. (26ec370f)
• client-bedrock-agent: Add support for S3 Vectors as a vector store. (62f309ed)
• client-sagemaker: This release adds support for a new Restricted instance group type to enable a specialized environment for running Nova customization jobs on SageMaker HyperPod clusters. This release also adds support for SageMaker pipeline versioning. (469f748a)
• client-s3: Amazon S3 Metadata live inventory tables provide a queryable inventory of all the objects in your general purpose bucket so that you can determine the latest state of your data. To help minimize your storage costs, use journal table record expiration to set a retention period for your records. (6f14868b)
• client-opensearch: AWS Opensearch adds support for enabling s3 vector engine options. After enabling this option, customers will be able to create indices with s3 vector engine. (076c2b75)
• client-eventbridge: Add customer-facing logging for the EventBridge Event Bus, enabling customers to better observe their events and extract insights about their EventBridge usage. (f9e43a06)
• client-repostspace: This release introduces Channels functionality with CreateChannel, GetChannel, ListChannels, and UpdateChannel operations. Channels provide dedicated collaboration spaces where teams can organize discussions and knowledge by projects, business units, or areas of responsibility. (9d93a265)
• client-s3vectors: Amazon S3 Vectors provides cost-effective, elastic, and durable vector storage for queries based on semantic meaning and similarity. (1a04801a)

Bug Fixes

• clients: upgrade @smithy/middleware-endpoint to fix file/env endpoint resolution (#7206) (37a62751)

Tests

• middleware-sdk-s3:
  • fix test bucket name (#7207) (fff035e9)
  • increase bucket name randomness (#7205) (1a23472f)
• aws-client-api-test: add type assertions to endpoint tests (#7194) (4b537de4)

---

For list of updated packages, view updated-packages.md in assets-3.845.0.zip

3.844.0(2025-07-09)

Chores

• codegen:
  • sync for isCustomEndpoint changes (#7193) (d65a730f)
  • use model service instead of iterating services (#7184) (b778ffff)
• scripts: reduce publish concurrency to fix socket hang up (#7189) (8bcaf94f)
• core: upgrade fast-xml-parser to 5.2.5 (#7176) (6cda13cf)

Documentation Changes

• client-opsworkscm: Removing content that refers to an S3 bucket that is no longer in use. (64c467c7)

New Features

• clients: update client endpoints as of 2025-07-09 (accc6e83)
• client-ec2: Adds support to Capacity Blocks for ML for purchasing EC2 P6e-GB200 UltraServers. Customers can now purchase u-p6e-gb200x72 and u-p6e-gb200x36 UltraServers. Adds new DescribeCapacityBlocks andDescribeCapacityBlockStatus APIs. Adds support for CapacityBlockId to DescribeInstanceTopology. (202ec5f1)
• client-freetier: This release introduces four new APIs: GetAccountPlanState and UpgradeAccountPlan for AWS account plan management; ListAccountActivities and GetAccountActivity that provide activity tracking capabilities. (5ad57558)

Bug Fixes

• codegen: generate default endpoint provider for default regional AWS endpoints (#7190) (27a66c0b)
• tests: prevent changeset race condition in parallel tests (#7183) (2d376dc2)

Tests

• aws-client-api-test: add new endpoint variation tests (#7192) (a37bd632)

---

For list of updated packages, view updated-packages.md in assets-3.844.0.zip

3.840.0(2025-06-30)

Chores

• token-providers: add feature ID 'BEARER_SERVICE_ENV_VARS' (#7168) (1b200b55)
• codegen: get token from environment if required (#7166) (0f3e62ff)
• clients: populate 'bedrock' signingName in loader config (#7167) (ec3d2753)

New Features

• clients: update client endpoints as of 2025-06-30 (04380044)
• client-outposts: Make ContactName and ContactPhoneNumber required fields when creating and updating Outpost Site Addresses. (c5cd4523)
• client-config-service: Updated ResourceType enum with new resource types onboarded by AWS Config as of June 2025 (48638057)
• client-transfer: Added support for dual-stack (IPv4 and IPv6) endpoints for SFTP public endpoints and VPC-internal endpoints (SFTP, FTPS, FTP, and AS2), enabling customers to configure new servers with IPv4 or dual-stack mode, convert existing servers to dual-stack, and use IPv6 with service APIs. (08fc8d39)
• client-cloudwatch-logs: Increase minimum length of queryId parameter to 1 character. (80e21320)
• client-medical-imaging: Added new fields to support the concept of primary image sets within the storage hierarchy. (b28be5c5)
• client-pcs: Fixed the validation pattern for an instance profile Amazon Resource Name (ARN) in AWS PCS. (cb270859)
• client-dataexchange: This release updates resource Id with alphanumeric constraint, including Asset id, Revision id, Data Set id, Job id, and Event Action id. (64051a9b)
• client-connect: This release introduces ChatMetrics to the model, providing comprehensive analytics insights for Amazon Connect chat conversations. Users can access these detailed metrics through the AWS Connect API by using the DescribeContact operation with their specific instance and contact IDs (171954c4)
• client-networkflowmonitor: Add ConflictExceptions to UpdateScope and DeleteScope operations for scopes being mutated. (417e1545)
• client-bedrock-runtime: Add API Key and document citations support for Bedrock Runtime APIs (3e92ce78)
• client-b2bi: Updated APIs to support inbound EDI split capabilities and additional Partnership-level configurations of generated EDI files' contents and format. (15f931b5)
• client-arc-zonal-shift: Added support for on-demand practice runs and balanced capacity checks in ARC autoshift practice. (95ccc935)
• client-cloudformation: Added support for UNKNOWN drift status. (80c8e5fb)
• client-ssm: Introduces AccessType, a new filter value for the DescribeSessions API. (daee31fb)
• client-glue: releasing source processing properties to support source properties for ODB integrations (aa10e5da)
• client-quicksight: Introduced custom permission capabilities for reporting content. Added menu option in exploration to preserve configuration data when textbox menu option is used. Added support for Athena trusted identity propagation. (2cd13e74)
• client-dynamodb: This change adds support for witnesses in global tables. It also adds a new table status, REPLICATION_NOT_AUTHORIZED. This status will indicate scenarios where global replicas table can't be utilized for data plane operations. (73ec7dca)
• client-eventbridge: Added support for EventBridge Dualstack endpoints in AWS GovCloud (US) regions (us-gov-east-1 and us-gov-west-1). The dualstack endpoints are identical for both FIPS and non-FIPS configurations, following the format: events.{region}.api.aws (b85b1f21)
• client-iam: Updated IAM ServiceSpecificCredential support to include expiration, API Key output format instead of username and password for services that will support API keys, and the ability to list credentials for all users in the account for a given service configuration. (cffa7110)
• client-bedrock: Add support for API Keys, Re-Ranker, implicit filter for RAG / KB evaluation for Bedrock APIs. (8587fbba)
• xhr-http-handler: add support for per-request/per-operation timeouts (#7159) (9c12aff1)

---

For list of updated packages, view updated-packages.md in assets-3.840.0.zip

3.839.0(2025-06-27)

Chores

• codegen client generation (#7157) (14bb646d)
• codegen:
  • bump codegen version to 0.32.0 (#7156) (145a68df)
  • sync codegen version (#7155) (1b139f82)

Documentation Changes

• client-config-service: Added important considerations to the PutConformancePack and PutOrganizationConformancPack APIs. (5be5c0b8)

New Features

• clients: update client endpoints as of 2025-06-27 (1e1395d5)
• client-connect: This release adds the following value to an InitiateAs enum: COMPLETED (9fe3f130)
• client-rds: StartDBCluster and StopDBCluster can now throw InvalidDBShardGroupStateFault. (807cec8a)
• client-sesv2: Added support for new SES regions (f221398d)
• client-qconnect: Adding UnauthorizedException to public SDK (7617f56d)
• client-glue: AWS Glue now supports schema, partition and sort management of Apache Iceberg tables using Glue SDK (022f2c1d)
• client-guardduty: Update JSON target for Kubernetes workload resource type. (d9cb698c)

Bug Fixes

• rds-signer: don't overwrite default config with undefined values (#6166) (c366275c)

---

For list of updated packages, view updated-packages.md in assets-3.839.0.zip

3.835.0(2025-06-23)

Chores

• codegen: codegen sync for endpoint-required config (#7143) (f438935a)
• add biome overrides, repair script (#7142) (f2789edd)

New Features

• clients: update client endpoints as of 2025-06-23 (34c34cad)
• client-glue: AWS Glue now supports sort and z-order strategy for managed automated compaction for Iceberg tables in addition to binpack. (19aaef44)
• client-s3tables: S3 Tables now supports sort and z-order compaction strategies for Iceberg tables in addition to binpack. (abce1d6c)
• client-workspaces-instances: Added support for Amazon WorkSpaces Instances API (add0ab29)

---

For list of updated packages, view updated-packages.md in assets-3.835.0.zip

3.830.0(2025-06-16)

Chores

• codegen: allow explicit undefined in EndpointParameters (#7131) (bfe38d00)

New Features

• client-network-firewall: You can now create firewalls using a Transit Gateway instead of a VPC, resulting in a TGW attachment. (01632923)
• client-bedrock: This release of the SDK has the API and documentation for the createcustommodel API. This feature lets you copy a Amazon SageMaker trained Amazon Nova model into Amazon Bedrock for inference. (c1459bc0)
• client-sagemaker: This release 1) adds a new S3DataType Converse for SageMaker training 2)adds C8g R7gd M8g C6in P6 P6e instance type for SageMaker endpoint 3) adds m7i, r7i, c7i instance type for SageMaker Training and Processing. (797e80ce)
• client-ecr: The DescribeImageScanning API now includes lastInUseAt and InUseCount fields that can be used to prioritize vulnerability remediation for images that are actively being used. (255a444a)

Other Changes

• clients: run endpoint tests in client mode (#7130) (280c07a0)

---

For list of updated packages, view updated-packages.md in assets-3.830.0.zip

3.828.0(2025-06-11)

Chores

• util-endpoints: update aws partitions.json (0f909916)
• endpoints: update endpoints model (636fa732)
• models: update API models (65f1b116)
• middleware-http-debug-log: add middleware timer (#7126) (74ea2198)

Documentation Changes

• client-rds: Updates Amazon RDS documentation for Amazon RDS for Db2 cross-Region replicas in standby mode. (bb7a56de)

New Features

• client-networkmanager: Add support for public DNS hostname resolution to private IP addresses across Cloud WAN-managed VPCs. Add support for security group referencing across Cloud WAN-managed VPCs. (de332cdb)
• client-wafv2: WAF now provides two DDoS protection options: resource-level monitoring for Application Load Balancers and the AWSManagedRulesAntiDDoSRuleSet managed rule group for CloudFront distributions. (8337d3be)
• client-eks: Release for EKS Pod Identity Cross Account feature and disableSessionTags flag. (52a85abb)
• client-controlcatalog: Introduced ListControlMappings API that retrieves control mappings. Added control aliases and governed resources fields in GetControl and ListControls APIs. New filtering capability in ListControls API, with implementation identifiers and implementation types. (125f9f68)
• client-lex-models-v2: Add support for the Assisted NLU feature to improve bot performance (ada2099a)

---

For list of updated packages, view updated-packages.md in assets-3.828.0.zip

3.826.0(2025-06-06)

Chores

• codegen: upgrade to smithy 1.58.0 (#7119) (d7e8fb4d)

New Features

• clients: update client endpoints as of 2025-06-06 (b879476b)
• client-route-53: Amazon Route 53 now supports the Asia Pacific (Taipei) Region (ap-east-2) for latency records, geoproximity records, and private DNS for Amazon VPCs in that region. (7fd50fe9)
• client-s3tables: S3 Tables now supports getting details about a table via its table ARN. (caebd1be)
• client-kms: Remove unpopulated KeyMaterialId from Encrypt Response (b0527049)
• client-bedrock-agent-runtime: This release introduces the PromptCreationConfigurations input parameter, which includes fields to control prompt population for InvokeAgent or InvokeInlineAgent requests. (f0f84e52)
• client-rds: Include Global Cluster Identifier in DBCluster if the DBCluster is a Global Cluster Member. (80906313)
• client-rekognition: Adds support for defining an ordered preference list of different Rekognition Face Liveness challenge types when calling CreateFaceLivenessSession. (a99b3528)
• client-rekognitionstreaming: adds support for defining an ordered preference list of different Rekognition Face Liveness challenge types when calling CreateFaceLivenessSession (#7118) (b17ba908)

---

For list of updated packages, view updated-packages.md in assets-3.826.0.zip

3.825.0(2025-06-05)

Chores

• codegen: update for TypeRegistry (#7116) (f7533ee2)

New Features

• clients: update client endpoints as of 2025-06-05 (56047de8)
• client-kms: AWS KMS announces the support for on-demand rotation of symmetric-encryption KMS keys with imported key material (EXTERNAL origin). (de7b7f07)
• client-bcm-pricing-calculator: Updating the minimum for List APIs to be 1 (instead of 0) (a79fcb1b)
• client-cloudformation: Add new warning type 'EXCLUDED_PROPERTIES' (29090b34)
• client-wafv2: AWS WAF adds support for ASN-based traffic filtering and support for ASN-based rate limiting. (5f85002f)

Tests

• protocols: add schema protocol tests (#7117) (8d8b922e)

---

For list of updated packages, view updated-packages.md in assets-3.825.0.zip

3.823.0(2025-06-03)

New Features

• client-apigatewayv2: Adds support to create routing rules and set the routing mode for a custom domain name. (adc341a7)
• client-emr-serverless: AWS EMR Serverless: Adds a new option in the CancelJobRun API in EMR 7.9.0+, to cancel a job with grace period. This feature is enabled by default with a 120-second grace period for streaming jobs and is not enabled by default for batch jobs. (a04fee3c)
• client-api-gateway: Adds support to set the routing mode for a custom domain name. (fa3d7b94)
• core/protocols: runtime protocol classes (#7110) (9babfac3)

---

For list of updated packages, view updated-packages.md in assets-3.823.0.zip

3.821.0(2025-05-30)

Chores

• codegen: update for schema testing (#7106) (6542d25b)

New Features

• clients: update client endpoints as of 2025-05-30 (fa658a01)
• client-sagemaker: Release new parameter CapacityReservationConfig in ProductionVariant (9ef66413)
• client-emr-serverless: This release adds the capability for users to specify an optional Execution IAM policy in the StartJobRun action. The resulting permissions assumed by the job run is the intersection of the permissions in the Execution Role and the specified Execution IAM Policy. (e886e87e)

Tests

• inspector: remove unused test (#7108) (4ffd36fa)

---

For list of updated packages, view updated-packages.md in assets-3.821.0.zip

3.817.0(2025-05-23)

Chores

• codegen:
  • use block for token provider call (#7099) (a38fab77)
  • use block for loaderConfig (#7098) (9f6a0b6c)

New Features

• clients: update client endpoints as of 2025-05-23 (8775c8f6)
• client-security-ir: Update PrincipalId pattern documentation to reflect what user should receive back from the API call (24515931)
• client-ec2: This release adds support for the C7i-flex, M7i-flex, I7i, I7ie, I8g, P6-b200, Trn2, C8gd, M8gd and R8gd instances (b99e6ed0)

---

For list of updated packages, view updated-packages.md in assets-3.817.0.zip

3.816.0(2025-05-22)

Chores

• token-providers: add provider to retrieve token from env var (#7097) (6c961b60)

New Features

• client-amp: Add QueryLoggingConfiguration APIs for Amazon Managed Prometheus (b889c42b)
• client-auditmanager: With this release, the AssessmentControl description field has been deprecated, as of May 19, 2025. Additionally, the UpdateAssessment API can now return a ServiceQuotaExceededException when applicable service quotas are exceeded. (4d7233a5)
• client-glue: This release supports additional ConversionSpec parameter as part of IntegrationPartition Structure in CreateIntegrationTableProperty API. This parameter is referred to apply appropriate column transformation for columns that are used for timestamp based partitioning (eeecd100)
• client-dsql: Features: support for customer managed encryption keys (f5e3e093)

---

For list of updated packages, view updated-packages.md in assets-3.816.0.zip

Bug Fixes

• core/protocols: read error code case-insensitively (#7085) (c13a2a0)

Features

• client-bedrock-data-automation-runtime: Add AssetProcessingConfiguration for video segment to InputConfiguration (bbf9999)
• client-bedrock-data-automation: Add support for VIDEO modality to BlueprintType enum. (5657cb1)
• client-codepipeline: CodePipeline now supports new API ListDeployActionExecutionTargets that lists the deployment target details for deploy action executions. (eb51d8f)
• client-emr: Added APIs for managing Application UIs: Access Persistent (serverless) UIs via CreatePersistentAppUI DescribePersistentAppUI & GetPersistentAppUIPresignedURL, and Cluster-based UIs through GetOnClusterAppUIPresignedURL. Supports Yarn, Spark History, and TEZ interfaces. (f1f82e1)
• client-glue: Changes include (1) Excel as S3 Source type and XML and Tableau's Hyper as S3 Sink types, (2) targeted number of partitions parameter in S3 sinks and (3) new compression types in CSV/JSON and Parquet S3 sinks. (a5f2aef)
• client-neptune: This release adds Global Cluster Switchover capability which enables you to change your global cluster's primary AWS Region, the region that serves writes, while preserving the replication between all regions in the global cluster. (ab547b0)
• client-service-quotas: This release introduces CreateSupportCase operation to SDK. (611d06e)
• clients: update client endpoints as of 2025-05-16 (9a8d9b5)

Features

• client-cloudwatch-logs: This release adds a new API "ListLogGroups" and an improvement in API "DescribeLogGroups" (9d801db)
• client-cognito-identity-provider: Add exceptions to WebAuthn operations. (d56b489)
• client-firehose: This release adds catalogARN support for s3 tables multi-catalog catalogARNs. (7f8490a)
• client-mediaconvert: This update enables cropping for video overlays and adds a new STL to Teletext upconversion toggle to preserve styling. (e87d8b4)

Features

• client-deadline: AWS Deadline Cloud service-managed fleets now support configuration scripts. Configuration scripts make it easy to install additional software, like plugins and packages, onto a worker. (1181966)
• client-ec2: EC2 - Adding support for AvailabilityZoneId (c7ea904)
• client-iam: Updating the endpoint list for the Identity and access management (IAM) service (854b130)
• client-medialive: Add support to the AV1 rate control mode (f8e9f56)
• client-mediatailor: Documenting that EnabledLoggingStrategies is always present in responses of PlaybackConfiguration read operations. (bf0301e)
• client-s3-control: Updates to support S3 Express zonal endpoints for directory buckets in AWS CLI (db31822)
• client-sagemaker: No API changes from previous release. This release migrated the model to Smithy keeping all features unchanged. (e06ca01)
• client-supplychain: Launch new AWS Supply Chain public APIs for DataIntegrationEvent, DataIntegrationFlowExecution and DatasetNamespace. Also add more capabilities to existing public APIs to support direct dataset event publish, data deduplication in DataIntegrationFlow, partition specification of custom datasets. (d647fdf)
• clients: update client endpoints as of 2025-05-12 (a476498)

Bug Fixes

• codegen: allow overwriting protocol priority order (#7066) (dc4edaa)

Features

• client-codepipeline: Add support for Secrets Manager and Plaintext environment variable types in Commands action (753bf4e)
• client-ec2: Launching the feature to support ENA queues offering flexibility to support multiple queues per Enhanced Network Interface (ENI) (b9b5b6c)
• client-glue: This new release supports customizable RefreshInterval for all Saas ZETL integrations from 15 minutes to 6 days. (d6e0049)
• client-sso-admin: Update PutPermissionBoundaryToPermissionSet API's managedPolicyArn pattern to allow valid ARN only. Update ApplicationName to allow white spaces. (bc0de81)
• clients: update client endpoints as of 2025-05-08 (ece09fe)

Features

• client-ec2: This release adds support for Amazon EBS Provisioned Rate for Volume Initialization, which lets you specify a volume initialization rate to ensure that your EBS volumes are initialized in a predictable amount of time. (03ae328)
• client-service-catalog: ServiceCatalog's APIs (DeleteServiceAction, DisassociateServiceActionFromProvisioningArtifact, AssociateServiceActionWithProvisioningArtifact) now throw InvalidParametersException when IdempotencyToken is invalid. (bb75d64)
• client-timestream-query: Add dualstack endpoints support and correct us-gov-west-1 FIPS endpoint. (9ff8904)
• client-timestream-write: Add dualstack endpoints support. (22b258a)
• clients: update client endpoints as of 2025-05-06 (c5846ed)

Features

• client-datazone: This release adds a new authorization policy to control the usage of custom AssetType when creating an Asset. Customer can now add new grant(s) of policyType USE_ASSET_TYPE for custom AssetTypes to apply authorization policy to projects members and domain unit owners. (c23b2fb)
• client-device-farm: Add an optional parameter to the GetDevicePoolCompatibility API to pass in project information to check device pool compatibility. (4c93f9a)
• client-ec2: This update introduces API operations to manage and create local gateway VIF and VIF groups. It also includes API operations to describe Outpost LAGs and service link VIFs. (0332513)
• client-mediaconvert: This release adds an optional sidecar per-frame video quality metrics report and an ALL_PCM option for audio selectors. It also changes the data type for Probe API response fields related to video and audio bitrate from integer to double. (c8dc773)
• clients: update client endpoints as of 2025-05-05 (ba7c2bf)

Features

• client-connectcases: Introduces CustomEntity as part of the UserUnion data type. This field is used to indicate the entity who is performing the API action. (9ee87df)
• client-kinesis: Amazon KDS now supports tagging and attribute-based access control (ABAC) for enhanced fan-out consumers. (942b693)
• client-pinpoint-sms-voice-v2: AWS End User Messaging has added MONITOR and FILTER functionality to SMS Protect. (73c2247)
• client-qbusiness: Add support for anonymous user access for Q Business applications (6197c7b)
• client-sagemaker-metrics: SageMaker Metrics Service now supports FIPS endpoint in all US and Canada Commercial regions. (08cb9ed)
• client-sagemaker: Introduced support for P5en instance types on SageMaker Studio for JupyterLab and CodeEditor applications. (219315a)
• client-ssm-guiconnect: This release adds API support for the connection recording GUI Connect feature of AWS Systems Manager (e581067)
• client-ssm: This release adds support for just-In-time node access in AWS Systems Manager. Just-in-time node access enables customers to move towards zero standing privileges by requiring operators to request access and obtain approval before remotely connecting to nodes managed by the SSM Agent. (ac4a855)
• clients: update client endpoints as of 2025-04-29 (b8fecfa)

Features

• client-acm: Add support for file-based HTTP domain control validation, available through Amazon CloudFront. (3d9e319)
• client-bedrock-runtime: This release adds native h2 support for the bedrock runtime API, the support is only limited to SDKs that support h2 requests natively. (3c9a894)
• client-cloudfront: Add distribution tenant, connection group, and multi-tenant distribution APIs to the CloudFront SDK. (fcac15c)
• client-imagebuilder: Add integration with SSM Parameter Store to Image Builder. (d20379b)
• clients: update client endpoints as of 2025-04-28 (1deb7c6)
• signature-v4-multi-region: add support for sigv4a package (#6267) (ecbba9f)

Features

• client-bedrock-runtime: You can now reference images and documents stored in Amazon S3 when using InvokeModel and Converse APIs with Amazon Nova Lite and Nova Pro. This enables direct integration of S3-stored multimedia assets in your model requests without manual downloading or base64 encoding. (25f581e)
• clients: update client endpoints as of 2025-04-25 (a6438dd)

Bug Fixes

• client-s3-control: remove host prefix behavior (#7025) (6c590fc)

Features

• client-apprunner: AWS App Runner adds Node.js 22 runtime. (15aea07)
• client-appsync: Add data source support to Event APIs (62af85a)
• client-bedrock-data-automation: Added support for modality routing and modality enablement on CreateDataAutomationProject and UpdateDataAutomationProject APIs (c1ae828)
• client-codebuild: Remove redundant validation check. (4b61b68)
• client-dynamodb: Add support for ARN-sourced account endpoint generation for TransactWriteItems. This will generate account endpoints for DynamoDB TransactWriteItems requests using ARN-sourced account ID when available. (34789ba)
• client-rds: This Amazon RDS release adds support for managed master user passwords for Oracle CDBs. (5ab41aa)

Features

• client-application-auto-scaling: Application Auto Scaling now supports horizontal scaling for Elasticache Memcached self-designed clusters using target tracking scaling policies and scheduled scaling. (38a22fb)
• client-elasticache: AWS ElastiCache SDK now supports using MemcachedUpgradeConfig parameter with ModifyCacheCluster API to enable updating Memcached cache node types. Please refer to updated AWS ElastiCache public documentation for detailed information on API usage and implementation. (7be3674)
• client-m2: Introduce three new APIs: CreateDataSetExportTask, GetDataSetExportTask and ListDataSetExportHistory. Add support for batch restart for Blu Age applications. (2c22fc3)
• client-medialive: AWS Elemental MediaLive / Features : Add support for CMAF Ingest CaptionLanguageMappings, TimedMetadataId3 settings, and Link InputResolution. (4f30f3e)
• client-qbusiness: Adds functionality to enable/disable a new Q Business Hallucination Reduction feature. If enabled, Q Business will detect and attempt to remove Hallucinations from certain Chat requests. (a7fb9d5)
• client-quicksight: Add support to analysis and sheet level highlighting in QuickSight. (fd1d5c3)

Features

• client-bedrock-agent: Added optional "customMetadataField" for Amazon Aurora knowledge bases, allowing single-column metadata. Also added optional "textIndexName" for MongoDB Atlas knowledge bases, enabling hybrid search support. (7a5625d)
• client-chime-sdk-voice: Added FOC date as an attribute of PhoneNumberOrder, added AccessDeniedException as a possible return type of ValidateE911Address (f6e45d7)
• client-mailmanager: Add support for Dual_Stack and PrivateLink types of IngressPoint. For configuration requests, SES Mail Manager will now accept both IPv4/IPv6 dual-stack endpoints and AWS PrivateLink VPC endpoints for email receiving. (308a75b)
• client-route-53: Added us-gov-east-1 and us-gov-west-1 as valid Latency Based Routing regions for change-resource-record-sets. (96d1403)
• client-sagemaker: Adds support for i3en, m7i, r7i instance types for SageMaker Hyperpod (3aaab37)
• client-sesv2: This release enables customers to provide attachments in the SESv2 SendEmail and SendBulkEmail APIs. (ff065ab)
• client-transcribe: This Feature Adds Support for the "zh-HK" Locale for Batch Operations (7f7181d)

Features

• client-batch: This release will enable two features: Firelens log driver, and Execute Command on Batch jobs on ECS. Both features will be passed through to ECS. (e7c7403)
• client-bcm-pricing-calculator: Added standaloneAccountRateTypeSelections for GetPreferences and UpdatePreferences APIs. Added STALE enum value to status attribute in GetBillScenario and UpdateBillScenario APIs. (f3fe1af)
• client-bedrock-agent-runtime: bedrock flow now support node action trace. (9621bd3)
• client-cloudformation: Adding support for the new parameter "ScanFilters" in the CloudFormation StartResourceScan API. When this parameter is included, the StartResourceScan API will initiate a scan limited to the resource types specified by the parameter. (2da6a12)
• client-datazone: This release adds new action type of Create Listing Changeset for the Metadata Enforcement Rule feature. (7b29a72)
• client-eks: Added support for BOTTLEROCKET FIPS AMIs to AMI types in US regions. (09d8cf0)
• client-gamelift: Amazon GameLift Servers add support for additional instance types. (a31949f)
• client-iam: Update IAM dual-stack endpoints for BJS, IAD and PDT partitions (678eaeb)
• client-sagemaker: add: recovery mode for SageMaker Studio apps (126e606)
• client-sso-oidc: This release adds AwsAdditionalDetails in the CreateTokenWithIAM API response. (ad60044)
• clients: update client endpoints as of 2025-03-27 (810fd8c)

Bug Fixes

• core/httpAuthSchemes: allow extensions to set signer credentials (#6971) (8b6fe4c)
• packages: maintain singleton config object (#6959) (6034850)

Features

• client-bedrock-agent: Adding support for Amazon OpenSearch Managed clusters as a vector database in Knowledge Bases for Amazon Bedrock (100062a)
• client-eks: Added support to override upgrade-blocking readiness checks via force flag when updating a cluster. (55f5a70)
• client-gameliftstreams: Minor updates to improve developer experience. (b6b01de)
• client-keyspaces: Removing replication region limitation for Amazon Keyspaces Multi-Region Replication APIs. (254cb39)
• client-marketplace-entitlement-service: This release enhances the GetEntitlements API to support new filter CUSTOMER_AWS_ACCOUNT_ID in request and CustomerAWSAccountId field in response. (17b1041)
• client-marketplace-metering: This release enhances the BatchMeterUsage API to support new field CustomerAWSAccountId in request and response and making CustomerIdentifier optional. CustomerAWSAccountId or CustomerIdentifier must be provided in request but not both. (540d2d0)
• client-sagemaker: This release adds support for customer-managed KMS keys in Amazon SageMaker Partner AI Apps (03a1150)
• client-workspaces-thin-client: Deprecate tags field in Get API responses (026ba53)
• clients: update client endpoints as of 2025-03-25 (5fd070a)

Bug Fixes

• pass through credentials parameters when wrapping the provider (#6961) (3f9fdc0)

Features

• client-iot-wireless: Mark EutranCid under LteNmr optional. (fb3f980)
• client-pcs: ClusterName/ClusterIdentifier, ComputeNodeGroupName/ComputeNodeGroupIdentifier, and QueueName/QueueIdentifier can now have 10 characters, and a minimum of 3 characters. The TagResource API action can now return ServiceQuotaExceededException. (31b766e)
• client-ssm: This release adds the AvailableSecurityUpdatesComplianceStatus field to patch baseline operations, as well as the AvailableSecurityUpdateCount and InstancesWithAvailableSecurityUpdates to patch state operations. Applies to Windows Server managed nodes only. (645466c)
• clients: update client endpoints as of 2025-03-24 (c2a10c4)

Bug Fixes

• cloudfront-signer: parse date using Date constructor (#6929) (a07b850)
• middleware-recursion-detection: case-insensitive trace ID header detection in middleware (#6946) (fcef09e)

Features

• client-amplify: Added appId field to Webhook responses (9a281ac)
• client-bedrock: With this release, Bedrock Evaluation will now support bring your own inference responses. (9515a90)
• client-mailmanager: Amazon SES Mail Manager. Extended rule string and boolean expressions to support analysis in condition evaluation. Extended ingress point string expression to support analysis in condition evaluation (a2b2570)
• client-network-firewall: You can now use flow operations to either flush or capture traffic monitored in your firewall's flow table. (a4ec1dd)
• clients: update client endpoints as of 2025-03-20 (3a2fd16)

Bug Fixes

• codegen: variable allocation in StringStore (#6903) (5deccb9)

Features

• client-bedrock-agent-runtime: Introduces Sessions (preview) to enable stateful conversations in GenAI applications. (f62fcc0)
• client-qbusiness: This release supports deleting attachments from conversations. (e5ad270)
• client-redshift-serverless: Add track support for Redshift Serverless workgroup. (a3fdee6)
• client-sagemaker: SageMaker HubService is introducing support for creating Training Jobs in Curated Hub (Private Hub). Additionally, it is introducing two new APIs: UpdateHubContent and UpdateHubContentReference. (5850cdd)
• client-storage-gateway: This release adds support to invoke a process that cleans the specified file share's cache of file entries that are failing upload to Amazon S3. (6ee1cf4)
• clients: update client endpoints as of 2025-02-27 (cee1e67)