@aws-sdk/nested-clients

Chores

• nested-clients: update dependencies.

Chores

• codegen: upgrade smithy 1.68.0 (#7806) (ab9e775)

Chores

• nested-clients: update dependencies.

Chores

• codegen: sync for checksum algorithm extensions (#7781) (ae4f994)

Chores

• packages: use open version range for additional packages (#7774) (3f776c3)

3.996.0(2026-02-23)

Chores

• build:
  • remove redundant client codegen test (#7761) (58b80de0)
  • disable snapshot write/compare (#7760) (4fadf483)

Documentation Changes

• client-controlcatalog: Updated ExemptedPrincipalArns parameter documentation for improved accuracy (dd772c6d)

New Features

• clients: update client endpoints as of 2026-02-23 (02d83401)
• client-wickr: AWS Wickr now provides APIs to manage your Wickr OpenTDF integration. These APIs enable you to test and save your OpenTDF configuration allowing you to manage rooms based on Trusted Data Format attributes. (750b4d86)
• client-bedrock: Automated Reasoning checks in Amazon Bedrock Guardrails now support fidelity report generation. The new workflow type assesses policy coverage and accuracy against customer documents. The GetAutomatedReasoningPolicyBuildWorkflowResultAssets API adds support for the three new asset types. (3fe66102)
• client-dynamodb: This change supports the creation of multi-account global tables. It adds one new arguments to UpdateTable, GlobalTableSettingsReplicationMode. (8e185cb4)
• client-quicksight: Adds support for SEMISTRUCT to InputColumn Type (581e9ea9)
• client-connectcases: SearchCases API can now accept 25 fields in the request and response as opposed to the previous limit of 10. DeleteField's hard limit of 100 fields per domain has been lifted. (21ae04f9)
• client-mediatailor: Updated endpoint rule set for dualstack endpoints. Added a new opt-in option to log raw ad decision server requests for Playback Configurations. (3068c8ee)
• client-datazone: Add workflow properties support to connections APIs (b76f82b3)

Bug Fixes

• core: handle empty error response body in AwsQuery protocol deserialization (#7766) (7d973147)
• scripts: disable Rollup externalLiveBindings to fix Jest auto-mocking (#7767) (95d1cc6c)
• protocols: handle missing error.Error in queryCompat mode (#7758) (15a27f99)

Other Changes

• build: revert - run partial package build prior to snapshot-write (#7768)" (#7775) (fb08e5f8)

Tests

• build: run partial package build prior to snapshot-write (#7768) (ce3811c8)
• clients: add snapshot tests (#7755) (6a275c28)

---

For list of updated packages, view updated-packages.md in assets-3.996.0.zip

3.995.0(2026-02-20)

Chores

• codegen: bump codegen version to 0.45.0 (#7752) (3c93f8ab)
• util-user-agent-node: populate metadata of alternative JavaScript runtimes (#7754) (79d2c235)
• make PR template checklist easier to edit (#7753) (be25ea35)

New Features

• clients: update client endpoints as of 2026-02-20 (aa23f1e0)
• client-appstream: Adding new attribute to disable IMDS v1 APIs for fleet, Image Builder and AppBlockBuilder instances. (72021889)
• client-sagemaker-runtime: Added support for S3OutputPathExtension and Filename parameters to the InvokeEndpointAsync API to allow users to customize the S3 output path and file name for async inference response payloads. (edac3d73)
• client-trustedadvisor: Adding a new enum attribute(statusReason) to TrustedAdvisorAPI response. This attribute explains reasoning behind check status for certain specific scenarios. (2d4a1eb4)
• client-ecs: Migrated to Smithy. No functional changes (20258a5f)
• client-ssm: Add support for AssociationDispatchAssumeRole in AWS SSM State Manager. (83535fc8)
• client-signer-data: This release introduces AWS Signer Data Plane SDK client supporting GetRevocationStatus API. The new client enables AWS PrivateLink connectivity with both private DNS and VPC endpoint URLs. (b03b059d)

---

For list of updated packages, view updated-packages.md in assets-3.995.0.zip

3.994.0(2026-02-19)

Chores

• codegen: bump Gradle to 9.3.1 (#7750) (9db72de8)

New Features

• client-pca-connector-scep: AWS Private CA Connector for SCEP now supports AWS PrivateLink, allowing your clients to request certificates from within your Amazon Virtual Private Cloud (VPC) without traversing the public internet. With this launch, you can create VPC endpoints to connect to your SCEP connector privately. (6ffd8f08)
• client-bcm-dashboards: The Billing and Cost Management GetDashboard API now returns identifier for each widget, enabling users to uniquely identify widgets within their dashboards. (4d6e1de7)
• client-ecr: Adds multiple artifact types filter support in ListImageReferrers API. (9335ea37)

---

For list of updated packages, view updated-packages.md in assets-3.994.0.zip

3.993.0(2026-02-18)

Chores

• bump fast-xml-parser to 5.3.6 (#7747) (74d03faf)
• codegen: fix undefined http binding top level members (#7741) (4b026420)

Documentation Changes

• client-connect: Correcting in-app notifications API documentation. (6220881a)

New Features

• clients: update client endpoints as of 2026-02-18 (c1adc9d8)
• client-cleanrooms: This release adds support for federated catalogs in Athena-sourced configured tables. (f657502f)

---

For list of updated packages, view updated-packages.md in assets-3.993.0.zip

3.992.0(2026-02-17)

New Features

• clients: update client endpoints as of 2026-02-17 (72c78059)
• client-ec2: Add Operator field to CreatePlacementGroup and DescribePlacementGroup APIs. (ccdf06ad)
• client-rds: Adds support for the StorageEncryptionType field to specify encryption type for DB clusters, DB instances, snapshots, automated backups, and global clusters. (976ce193)
• client-grafana: This release updates Amazon Managed Grafana's APIs to support customer managed KMS keys. (276a337c)
• client-workspaces-web: Adds support for branding customization without requiring a custom wallpaper. (dce78467)

---

For list of updated packages, view updated-packages.md in assets-3.992.0.zip

3.991.0(2026-02-16)

Documentation Changes

• client-arc-region-switch: Clarify documentation on ARC Region Switch start-plan-execution operation (c24d7a88)
• client-ecr: Adds support for enabling blob mounting, and removes support for Clair based image scanning (e3cf5218)
• client-ec2: Documentation updates for EC2 Secondary Networks (68029df3)

New Features

• clients: update client endpoints as of 2026-02-16 (c3afa911)
• client-qconnect: Update MessageType enum to include missing types. (9aaf67f2)
• client-kms: Added support for Decrypt and ReEncrypt API's to use dry run feature without ciphertext for authorization validation (492b2819)
• client-kafka: Amazon MSK now supports dual-stack connectivity (IPv4 and IPv6) for existing MSK clusters. You can enable dual-stack on existing clusters by specifying the NetworkType parameter in updateConnectivity API. (67a33d9a)

---

For list of updated packages, view updated-packages.md in assets-3.991.0.zip

3.990.0(2026-02-13)

New Features

• client-inspector2: Added .Net 10 (dotnet10) and Node 24.x (node24.x) runtime support for lambda package scanning (168caeb6)
• client-sagemaker: Enable g7e instance type support for SageMaker Processing, and enable single file configuration provisioning for HyperPod Slurm, where customers have the option to use HyperPod API to provide the provisioning parameters. (6f77d876)
• client-ec2: This release adds geography information to EC2 region and availability zone APIs. DescribeRegions now includes a Geography field, while DescribeAvailabilityZones includes both Geography and SubGeography fields, enabling better geographic classification for AWS regions and zones. (eed96c05)
• client-cloudwatch: Adding new evaluation states that provides information about the alarm evaluation process. Evaluation error Indicates configuration errors in alarm setup that require review and correction. Evaluation failure Indicates temporary CloudWatch issues. (5a085a8a)
• client-connect: API release for headerr notifications in the admin website. APIs allow customers to publish brief messages (including URLs) to a specified audience, and a new header icon will indicate when unread messages are available. (11a9568e)

Tests

• client-ec2: additional integ tests for ec2 (#7736) (fcd1430a)

---

For list of updated packages, view updated-packages.md in assets-3.990.0.zip

3.989.0(2026-02-12)

Chores

• codegen: uprgade smithy to 1.67.0 (#7735) (3d94ce9e)

New Features

• client-ec2: Launching nested virtualization. This feature allows you to run nested VMs inside virtual (non-bare metal) EC2 instances. (9541a839)

Bug Fixes

• client-ec2: fix ec2QueryName serialization (#7734) (05e3a621)

---

For list of updated packages, view updated-packages.md in assets-3.989.0.zip

3.988.0(2026-02-11)

Chores

• codegen: update for compositeErrorRegistries (#7728) (d20ea16f)

New Features

• client-kafkaconnect: Support configurable upper limits on task count during autoscaling operations via maxAutoscalingTaskCount parameter. (c996f67d)
• client-batch: Add support for listing jobs by share identifier and getting snapshots of active capacity utilization by job queue and share. (951d3634)
• client-eks: This release adds support for Windows Server 2025 in Amazon EKS Managed Node Groups. (6af8b6b9)
• client-s3tables: S3 Tables now supports setting partition specifications and sort orders on tables. Partition specs allow users to define how data is organized using transform functions. Sort order configurations enable users to specify sort directions and null ordering preferences for optimized data layout. (e6b5be09)
• client-ec2: R8i instances powered by custom Intel Xeon 6 processors available only on AWS with sustained all-core 3.9 GHz turbo frequency (72ad5262)

---

For list of updated packages, view updated-packages.md in assets-3.988.0.zip

3.987.0(2026-02-10)

Chores

• client-iotanalytics: remove iot analytics due to service shutdown (#7727) (e3140d04)
• client-evidently: remove evidently due to service shutdown (#7725) (5b9942f9)

New Features

• clients: update client endpoints as of 2026-02-10 (1bee3fec)
• client-rds: This release adds backup configuration for RDS and Aurora restores, letting customers set backup retention period and preferred backup window during restore. It also enables viewing backup settings when describing snapshots or automated backups for instances and clusters. (dfcf7f3d)
• client-bedrock-agentcore: Added AgentCore browser proxy configuration support, allowing routing of browser traffic through HTTP and HTTPS proxy servers with authentication and bypass rules. (9bdc1cf8)
• client-eks: Introducing an optional policy field, an IAM policy applied to pod identity associations in addition to IAM role policies. When specified, pod permissions are the intersection of IAM role policies and the policy field, ensuring the principle of least privilege. (c35168e3)
• client-connect: Amazon Connect now supports per-channel auto-accept and After Contact Work (ACW) timeouts. Configure agents with auto-accept and ACW timeout settings for chat, tasks, emails, and callbacks. Use the new UpdateUserConfig API to manage these settings. (9408c413)
• client-kafka: Amazon MSK adds three new APIs, CreateTopic, UpdateTopic, and DeleteTopic for managing Kafka topics in your MSK clusters. (cc06eb6f)

---

For list of updated packages, view updated-packages.md in assets-3.987.0.zip

3.986.0(2026-02-09)

Chores

• codegen: smithy-typescript-aws-codegen 0.44.0 (#7719) (1a8de1bf)

Documentation Changes

• client-lakeformation: Allow cross account v5 in put data lake settings (e10aebc6)
• client-transfer: This release adds a documentation update for MdnResponse of type "ASYNC" (a9087979)

New Features

• clients: update client endpoints as of 2026-02-09 (b81f169c)
• client-connectcampaignsv2: Add the missing event type for WhatsApp (6b19703e)
• client-pcs: Introduces RESUMING state for clusters, compute node groups, and queues. (78ec45d5)
• client-eks: Amazon EKS adds a new DescribeUpdate update type, VendedLogsUpdate, to support an integration between EKS Auto Mode and Amazon CloudWatch Vended Logs. (85135c4a)
• client-neptunedata: Added edgeOnlyLoad boolean parameter to Neptune bulk load request. When TRUE, files are loaded in order without scanning. When FALSE (default), the loader scans files first, then loads vertex files before edge files automatically. (012843ab)
• client-imagebuilder: EC2 Image Builder now supports wildcard patterns in lifecycle policies with recipes and enhances the experience of tag-scoped policies. (f015ab63)
• client-ec2: Amazon Secondary Networks is a networking feature that provides high-performance, low-latency connectivity for specialized workloads. (0ba27c28)

Tests

• middleware-websocket: improve integ test for websocket (#7718) (e25063ae)

---

For list of updated packages, view updated-packages.md in assets-3.986.0.zip

3.985.0(2026-02-06)

Chores

• codegen: generate caret versions for aws-sdk dependencies (#7714) (5682d095)

New Features

• client-bedrock-data-automation-runtime: Add OutputConfiguration to InvokeDataAutomation input and output to support S3 output (72c126f0)
• client-deadline: Adds support for tagging jobs during job creation (444dcec9)
• client-sagemaker: Adding g7e instance support in Sagemaker Training (01f57c15)
• client-partnercentral-selling: Releasing AWS Opportunity Snapshots for SDK release. (9b27cd2b)
• client-iot-managed-integrations: Adding support for Custom(General) Authorization in managed integrations for AWS IoT Device Management cloud connectors. (f683f7b9)

Bug Fixes

• core/protocols: nested Error objects in REST XML (#7717) (2c0d671f)

Tests

• client-glacier: remove glacier features test (#7716) (ae84a8cd)

---

For list of updated packages, view updated-packages.md in assets-3.985.0.zip

3.984.0(2026-02-05)

Chores

• eventstream-handler-node: eventstream code maintenance (#7708) (7163f9d8)

Documentation Changes

• client-neptune-graph: Minor neptune-graph documentation changes (33bf3cda)

New Features

• clients: update client endpoints as of 2026-02-05 (2a007c3a)
• client-arc-region-switch: Updates documentation for ARC Region switch and provides stronger validation for Amazon Aurora Global Database execution block parameters. (cb7bcf4f)
• client-medialive: Outputs using the AV1 codec in CMAF Ingest output groups in MediaLive now have the ability to specify a target bit depth of 8 or 10. (35dbef6f)
• client-glue: This release adds the capability to easily create custom AWS Glue connections to data sources with REST APIs. (a0839052)
• client-workspaces: Added support for 12 new graphics-optimized compute types - Graphics.g6 (xlarge, 2xlarge, 4xlarge, 8xlarge, 16xlarge), Graphics.gr6 (4xlarge, 8xlarge), Graphics.g6f (large, xlarge, 2xlarge, 4xlarge), and Graphics.gr6f (4xlarge). (8ba8054e)
• client-bedrock-agentcore: Support Browser profile persistence (cookies and local storage) across sessions for AgentCore Browser. (ed273539)
• client-athena: Reduces the minimum TargetDpus to create or update capacity reservations from 24 to 4. (19dc3bef)
• client-bedrock-agentcore-control: Support Browser profile persistence (cookies and local storage) across sessions for AgentCore Browser. (a4944540)
• client-ram: Added ListSourceAssociations API. Allows RAM resource share owners to list source associations that determine which sources can access resources through service principal associations. Supports filtering by resource share ARN, source ID, source type, or status, with pagination. (0e72d32d)
• client-transfer: Adds support for the customer to send custom HTTP headers and configure an AS2 Connector to receive Asynchronous MDNs from their trading partner (e14e08b3)

---

For list of updated packages, view updated-packages.md in assets-3.984.0.zip

3.983.0(2026-02-04)

Chores

• dynamodb-codec: remove peer dependency on client (#7711) (3116b7d1)

Documentation Changes

• client-eks: Update delete cluster description (f92e1d60)
• client-redshift: We have increased the maximum duration for a deferred maintenance window from 45 days to 60 days for Amazon Redshift provisioned clusters. This enhancement provides customers with greater flexibility in scheduling patching and maintenance activities while also maintaining security compliance. (78cd18f3)

New Features

• client-workspaces-web: Support for configuring and managing custom domain names for WorkSpaces Secure Browser portals. (afd41b46)
• client-connectcases: Amazon Connect Cases now supports larger, multi-line text fields with up to 4,100 characters. Administrators can use the Admin UI to select the appropriate configuration (single-line or multi-line) on a per-field basis, improving case documentation capabilities. (69bec694)
• client-medialive: AWS Elemental MediaLive now supports SRT listener mode for inputs and outputs, in addition to the existing SRT caller mode. (25287d4b)
• client-bedrock-runtime: Added support for structured outputs to Converse and ConverseStream APIs. (ff529d7e)

---

For list of updated packages, view updated-packages.md in assets-3.983.0.zip

3.982.0(2026-02-03)

Chores

• test new model generation in ci (#7689) (c449f590)
• scripts: update release script (#7707) (6c7353eb)

Documentation Changes

• client-organizations: Updated the CloseAccount description. (fadedac3)

New Features

• client-dynamodb: This change supports the creation of multi-account global tables. It adds two new arguments to CreateTable, GlobalTableSourceArn and GlobalTableSettingsReplicationMode. DescribeTable is also updated to include information about GlobalTableSettingsReplicationMode. (4bef08d4)
• client-marketplace-catalog: Adds support for Catalog API us-east-1 dualstack endpoint catalog-marketplace.us-east-1.api.aws (2c5c715a)
• client-sso-admin: Added new Region management APIs to support multi-Region replication in IAM Identity Center. (c16a6f46)
• client-batch: AWS Batch Array Job Visibility feature support. Includes new statusSummaryLastUpdatedAt for array job parent DescribeJobs responses for the last time the statusSummary was updated. Includes both statusSummary and statusSummaryLastUpdatedAt in ListJobs responses for array job parents. (08db9ebe)
• client-kinesis: Adds StreamId parameter to AWS Kinesis Data Streams APIs that is reserved for future use. (96d7f32b)
• client-geo-maps: Added support for optional style parameters in maps, including 3D terrain and 3D Buildings (59d8232a)

Bug Fixes

• eventstream-handler-node: fix uncatchable error in stream pipeline (#7703) (eb4e2dd4)
• middleware-websocket: establish stream pipeline prior to continuing with request (#7704) (52b25e84)

---

For list of updated packages, view updated-packages.md in assets-3.982.0.zip

3.981.0(2026-02-02)

Chores

• codegen: smithy-typescript-aws-codegen release 0.43.1 (#7694) (db453d37)

New Features

• clients: update client endpoints as of 2026-02-02 (df46365a)
• client-bedrock-agentcore-control: Adds tagging support for AgentCore Evaluations (evaluator and online evaluation config) (079aff01)
• client-cloudfront: Add OriginMTLS support to CloudFront Distribution APIs (4b7b074b)
• client-mpa: Updates to multi-party approval (MPA) service to add support for multi-factor authentication (MFA) for voting operations. (a8d95826)

Bug Fixes

• deps: bump fast-xml-parser from 5.2.5 to 5.3.4 (#7699) (37623f4c)

---

For list of updated packages, view updated-packages.md in assets-3.981.0.zip

3.980.0(2026-01-30)

Chores

• use yarn workspace versioning for monorepo packages (#7693) (b951130e)

New Features

• clients: update client endpoints as of 2026-01-30 (11699137)
• client-quicksight: Improve SessionTag usage guidelines in the GenerateEmbedURLForAnonymousUser API documentation. Update the GetIdentityContext document with the region support context. (cf53c93f)
• client-connect: This release adds Estimated Wait Time support to the GetContactMetrics API for Amazon Connect. (e7dbc0a5)

---

For list of updated packages, view updated-packages.md in assets-3.980.0.zip

3.978.0(2026-01-28)

Chores

• codegen:
  • smithy-typescript-aws-codegen release 0.43.0 (#7688) (f597b045)
  • update for aggregated paginators and waiters (#7685) (024c0731)

New Features

• client-s3-control: Adds support for the UpdateObjectEncryption API to change the server-side encryption type of objects in general purpose buckets. (8248439e)
• client-mediaconvert: This release adds a follow source mode for audio output channel count, an AES audio frame wrapping option for MXF outputs, and an option to signal DolbyVision compatibility using the SUPPLEMENTAL-CODECS tag in HLS manifests. (9ee45457)
• client-cognito-identity-provider: This release adds support for a new lambda trigger to transform federated user attributes during the authentication with external identity providers on Cognito Managed Login. (a291daef)
• client-connect: Adds support for filtering search results based on tags assigned to contacts. (c3e7a41b)
• client-ec2: SearchTransitGatewayRoutes API response now includes a NextToken field, enabling pagination when retrieving large sets of transit gateway routes. Pass the returned NextToken value in subsequent requests to retrieve the next page of results. (11fdee1e)
• client-mediaconnect: This release adds support for NDI flow sources in AWS Elemental MediaConnect. You can now send content to your MediaConnect transport streams directly from your NDI environment using the new NDI source type. Also adds support for LARGE 4X flow size, which can be used when creating CDI JPEG-XS flows. (a5e075c8)
• client-s3: Adds support for the UpdateObjectEncryption API to change the server-side encryption type of objects in general purpose buckets. (b56cea55)
• client-lambda: We are launching ESM Metrics and logging for Kafka ESM to allow customers to monitor Kafka event processing using CloudWatch Metrics and Logs. (af7d3d55)

Tests

• client-s3: add test for aggregate client paginator/waiter methods (#7687) (75ba48bc)

---

For list of updated packages, view updated-packages.md in assets-3.978.0.zip

3.975.0(2026-01-23)

Chores

• codegen: upgrade smithy to 1.66.0 (#7678) (784b9f3d)
• ci: use repo-specific IAM role for PR builds (#7680) (e392336c)

New Features

• client-connect: Amazon Connect now offers public APIs to programmatically configure and run automated tests for contact center experiences. Integrate testing into CICD pipelines, run multiple tests at scale, and retrieve results via API to automate validation of voice interactions and workflows. (718c3222)
• client-qconnect: Fixes incorrect types in the UpdateAssistantAIAgent API request, adds MESSAGE to TargetType enum, and other minor changes. (30cc5fa9)
• client-datazone: Added api for deleting data export configuration for a domain (089a6f1a)

---

For list of updated packages, view updated-packages.md in assets-3.975.0.zip

3.974.0(2026-01-22)

Chores

• codegen:
  • add new pkg folder to sdkVersions.properties (#7675) (766beed1)
  • sync for http label validation (#7671) (8536efc9)
• packages: move package folders for internal pkgs (#7670) (ce66606d)

Documentation Changes

• client-marketplace-metering: Customer Identifier parameter deprecation date has been removed. For new implementations, we recommend using the CustomerAWSAccountID. Your current integration will continue to work. When updating your implementation, consider migrating to CustomerAWSAccountID for improved integration. (fa72d80d)
• client-verifiedpermissions: Adding documentation to user guide and API documentation for how customers can create new encrypted policy stores by passing in their customer managed key during policy store creation. (6dac27bb)

New Features

• clients: update client endpoints as of 2026-01-22 (a8b7e9d8)
• client-gamelift: Amazon GameLift Servers Realtime now supports Node.js 24.x runtime on the Amazon Linux 2023 operating system. (fa6e74c6)
• client-guardduty: Adding new enum value for ScanStatusReason (a12c8c68)
• client-ec2: Add better support for fractional GPU instances in DescribeInstanceTypes API. The new fields, logicalGpuCount, gpuPartitionSize, and workload array enable better GPU resource selection and filtering for both full and fractional GPU instance types. (72b8a1cc)
• client-health: Updates the lower range for the maxResults request property for DescribeAffectedEntities, DescribeAffectedEntitiesForOrganization, DescribeEvents, and DescribeEventsForOrganization API request properties. (202b860d)
• client-budgets: Add Budget FilterExpression and Metrics fields to DescribeBudgetPerformanceHistory to support more granular filtering options. (5b7d3217)
• client-auto-scaling: This release adds support for Amazon EC2 Auto Scaling group deletion protection (ce97b637)
• client-dynamodb: Adds additional waiters to Amazon DynamoDB. (55f5f7fd)
• packages: support open version ranges for internal packages - move core & types (#7674) (a3cdc641)
• config: create config package (#7667) (943761cd)

---

For list of updated packages, view updated-packages.md in assets-3.974.0.zip

3.972.0(2026-01-20)

Chores

• replace rimraf with premove (#7669) (e0b484fa)

New Features

• clients: update client endpoints as of 2026-01-20 (3266a28d)
• client-workspaces-instances: Added billing configuration support for WorkSpaces Instances with monthly and hourly billing modes, including new filtering capabilities for instance type searches. (a660c503)
• client-odb: Adds support for associating and disassociating IAM roles with Autonomous VM cluster resources through the AssociateIamRoleToResource and DisassociateIamRoleFromResource APIs. The GetCloudAutonomousVmCluster and ListCloudAutonomousVmClusters API responses now include the iamRoles field. (f906d762)
• client-bedrock-runtime: Added support for extended prompt caching with one hour TTL. (2cc679ff)
• client-keyspaces: Adds support for managing table pre-warming in Amazon Keyspaces (for Apache Cassandra) (a7d41c3f)
• client-auto-scaling: This release adds support for three new filters when describing scaling activities, StartTimeLowerBound, StartTimeUpperBound, and Status. (5ca740f5)
• client-verifiedpermissions: Amazon Verified Permissions now supports encryption of resources by a customer managed KMS key. Customers can now create new encrypted policy stores by passing in their customer managed key during policy store creation. (3fe5ed93)

---

For list of updated packages, view updated-packages.md in assets-3.972.0.zip

3.971.0(2026-01-16)

Chores

• deps-dev: bump vitest to 4.x (#7662) (e4af3e38)
• codegen: tag maven release 0.42.0 (#7664) (eea2ef45)

Documentation Changes

• client-sagemaker: Adding security consideration comments for lcc accessing execution role under root access (83b0e783)
• client-glacier: Documentation updates for Amazon Glacier's maintenance mode (18674f5d)

New Features

• clients: update client endpoints as of 2026-01-16 (5149b6b0)
• client-datazone: This release adds support for numeric filtering and complex free-text searches cases for the Search and SearchListings APIs. (3ce55674)
• client-connect: Adds support to allow customers to create form with Dispute configuration (faedfc8b)
• client-launch-wizard: Added UpdateDeployment, ListDeploymentPatternVersions and GetDeploymentPatternVersion APIs for Launch Wizard (5126f41e)
• client-resource-explorer-2: Added ViewName to View-related responses and ServiceViewName to GetServiceView response. (e0212a10)

---

For list of updated packages, view updated-packages.md in assets-3.971.0.zip

3.970.0(2026-01-15)

Chores

• util-endpoints: update aws partitions.json (057ed943)
• endpoints: update endpoints model (27bb9e6d)
• models: update API models (e4aef87d)
• codegen: update for handling __type in cbor structs (#7663) (2104fe9e)

Documentation Changes

• client-ec2: This release includes documentation updates to support up to four Elastic Volume modifications per Amazon EBS volume within a rolling 24-hour period. (0e4c5b5c)

New Features

• client-ecs: Adds support for configuring FIPS in AWS GovCloud (US) Regions via a new ECS Capacity Provider field fipsEnabled. When enabled, instances launched by the capacity provider will use a FIPS-140 enabled AMI. Instances will use FIPS-140 compliant cryptographic modules and AWS FIPS endpoints. (0ebb2f22)
• client-evs: A new GetVersions API has been added to retrieve VCF, ESX versions, and EC2 instances provided by Amazon EVS. The CreateEnvironment API now allows you to select a VCF version and the CreateEnvironmentHost API introduces a optional esxVersion parameter. (4f6b30a2)
• client-deadline: AWS Deadline Cloud now supports tagging Budget resources with ABAC for permissions management and selecting up to 16 filter values in the monitor and Search API. (bb46d258)
• client-cleanrooms: This release adds support for parameters in PySpark analysis templates. (bc4219bf)
• client-opensearchserverless: Collection groups in Amazon OpenSearch Serverless enables to organize multiple collections and enable compute resource sharing across collections with different KMS keys. This shared compute model reduces costs by eliminating the need for separate OpenSearch Compute Units (OCUs) for each KMS key. (bfdce6ab)
• client-lakeformation: API Changes for GTCForLocation feature. Includes a new API, GetTemporaryDataLocationCredentials and updates to the APIs RegisterResource and UpdateResource (493fd840)
• client-qconnect: Fix inference configuration shapes for the CreateAIPrompt and UpdateAIPrompt APIs, Modify Text Length Limit for SendMessage API (c54736e1)

Bug Fixes

• core/protocols: custom behavior for __type in structure (#7661) (22c3a671)

---

For list of updated packages, view updated-packages.md in assets-3.970.0.zip

3.969.0(2026-01-14)

Chores

• codegen: sync for required member count (#7655) (85f86da8)
• clients: prettier ignore only 'src' folder and README (#7652) (51d2b8fc)

Documentation Changes

• client-cost-explorer: Cost Categories added support to BillingView data filter expressions through the new costCategories parameter, enabling users to filter billing views by AWS Cost Categories for more granular cost management and allocation. (7bee7245)
• update version number requiring Node.js v20 (#7651) (8221f99e)

New Features

• clients: update client endpoints as of 2026-01-14 (2e57c021)
• client-connect: Amazon Connect makes it easier to manage contact center operating hours by enabling automated scheduling for recurring events like holidays and maintenance windows. Set up recurring patterns (weekly, monthly, etc.) or link to another hours of operation to inherit overrides. (224e5859)
• client-eks: Added support for BOTTLEROCKET NVIDIA FIPS AMIs to AMI types in US regions. (9ab0b4d2)
• client-socialmessaging: This release clarifies WhatsApp template operations as a resource-authenticated operation via the parent WhatsApp Business Account. It also introduces new parameters for parameter format, CTA URL link tracking, and template body examples, and increases the phone number ID length. (5d9010bf)
• client-redshift-serverless: Adds support for enabling extra compute resources for automatic optimization during create and update operations in Amazon Redshift Serverless workgroups. (74186ff4)
• client-redshift: Adds support for enabling extra compute resources for automatic optimization during create and modify operations in Amazon Redshift clusters. (83a2d07e)
• client-rds: no feature changes. model migrated to Smithy (75005b77)

Tests

• client-s3: add test with empty input stream (#7649) (ce79a75e)
• client-cloudwatch: set alarm name in describe command (#7653) (d6e582c9)

---

For list of updated packages, view updated-packages.md in assets-3.969.0.zip

3.968.0(2026-01-13)

Chores

• drop support for Node.js 18.x (#7647) (b97d3208)
• ci:
  • remove deprecated --es-module-specifier-resolution=node (#7646) (ded452c8)
  • increment pre-commit hook node-version to 20 (#7634) (91008dce)
• clients: bump '@smithy/*' versions (#7645) (e13b43e4)
• scripts: use custom changelog updater for free-range packages (#7644) (de24e02b)

New Features

• client-bedrock: This change will increase TestCase guardContent input size from 1024 to 2028 characters and PolicyBuildDocumentDescription from 2000 to 4000 characters (2efd6864)
• client-datazone: Adds support for IAM role subscriptions to Glue table listings via CreateSubscriptionRequest API. Also adds owningIamPrincipalArn filter to List APIs and subscriptionGrantCreationMode parameter to subscription target APIs for controlling grant creation behavior. (db299d3e)

---

For list of updated packages, view updated-packages.md in assets-3.968.0.zip

3.967.0(2026-01-12)

Chores

• continue on lerna changed exit code 1 (#7643) (8575e93c)
• fix build versioning (#7642) (bc103bf3)
• customize lerna versioning actions (#7635) (03e689b4)
• codegen: update for hostPrefix fix (#7639) (eb666b56)

New Features

• clients: update client endpoints as of 2026-01-12 (691a3a43)
• client-billing: Cost Categories filtering support to BillingView data filter expressions through the new costCategories parameter, enabling users to filter billing views by AWS Cost Categories for more granular cost management and allocation. (419d38bf)
• client-sagemaker: Added ultraServerType to the UltraServerInfo structure to support server type identification for SageMaker HyperPod (ed0201e3)
• client-iot-managed-integrations: This release introduces WiFi Simple Setup (WSS) enabling device provisioning via barcode scanning with automated network discovery, authentication, and credential provisioning. Additionally, it introduces 2P Device Capability Rediscovery for updating hub-managed device capabilities post-onboarding. (0c3b5726)

Tests

• core: add required CollectionName parameter to listGeofences (#7640) (a51203c4)
• core/protocols: add integration test for hostPrefix (#7638) (da9b2a9a)

---

For list of updated packages, view updated-packages.md in assets-3.967.0.zip

3.966.0(2026-01-09)

Chores

• codegen:
  • release smithy-typescript-aws-codegen v0.41.1 (#7633) (f5048a66)
  • set rimraf to 5.0.10 (#7630) (367465e7)
• util-arn-parser: mark arn parser internal (#7629) (7baf559c)
• scripts: script to get changed package list (#7628) (a470a0e1)

New Features

• clients: update client endpoints as of 2026-01-09 (060fef34)
• client-medialive: MediaPackage v2 output groups in MediaLive can now accept one additional destination for single pipeline channels and up to two additional destinations for standard channels. MediaPackage v2 destinations now support sending to cross region MediaPackage channels. (ce039310)
• client-bedrock-agentcore-control: Adds optional field "view" to GetMemory API input to give customers control over whether CMK encrypted data such as strategy decryption or override prompts is returned or not. (c68a59e8)
• client-transcribe: Adds waiters to Amazon Transcribe. (93eb18c5)
• client-glue: Adding MaterializedViews task run APIs (d430d646)
• client-cloudfront: Added EntityLimitExceeded exception handling to the following API operations AssociateDistributionWebACL, AssociateDistributionTenantWebACL, UpdateDistributionWithStagingConfig (858e6e8b)

---

For list of updated packages, view updated-packages.md in assets-3.966.0.zip

3.965.0(2026-01-07)

Chores

• upgrade rimraf (#7626) (9a090faf)

New Features

• clients: update client endpoints as of 2026-01-07 (a77238b4)
• client-workspaces: Add StateMessage and ProgressPercentage fields to DescribeCustomWorkspaceImageImport API response. (fe652fb5)

Tests

• core: reduce nesting depth of test structures (#7624) (552e8329)

---

For list of updated packages, view updated-packages.md in assets-3.965.0.zip

3.964.0(2026-01-06)

Chores

• core: ensure package build order (#7623) (3fa6ead6)

New Features

• client-cost-explorer: This release updates existing reservation recommendations API to support deployment model. (c9e728da)
• client-emr-serverless: Added support for enabling disk encryption using customer managed AWS KMS keys to CreateApplication, UpdateApplication and StartJobRun APIs. (9d932c38)

Bug Fixes

• core: make CREDENTIALS_CODE mutually exclusive with other credential sources (#7615) (05e017ef)

---

For list of updated packages, view updated-packages.md in assets-3.964.0.zip

3.958.0(2025-12-23)

Chores

• client-elastic-transcoder: remove elastic transcoder due to service shutdown (#7602) (4381b2dc)
• build: generate clients without formatting prettier/eslint (#7599) (da9c913a)
• codegen: bump codegen version to 0.40.0 (#7601) (4dc2bcb7)

New Features

• clients: update client endpoints as of 2025-12-23 (f5aa61b9)
• client-s3: Add additional validation to Outpost bucket names. (2f30457f)
• client-geo-places: Adds support for InferredSecondaryAddress place type, Designator in SecondaryAddressComponent and Heading in ReverseGeocode. (1c6374da)
• client-pinpoint-sms-voice-v2: This release adds support for the Registration Reviewer feature, which provides generative AI feedback on a phone number or sender ID registration to ensure completeness before sending to downstream (carrier) review. (ac0c236b)

Tests

• client-sqs: increase timeout from 5s to 60s (#7603) (c140520a)

---

For list of updated packages, view updated-packages.md in assets-3.958.0.zip

3.957.0(2025-12-22)

Chores

• move crc64NvmeCrtContainer to '@aws-sdk/crc64-nvme' (#7600) (69196b71)
• move e2e tests from cucumber to vitest (#7539) (561b8900)
• build: replace lerna partial-tree build with turbo (#7597) (04bdba3e)

Documentation Changes

• client-pcs: Change API Reference Documentation for default Mode in Accounting and SlurmRest (966f60ac)

New Features

• client-config-service: Added supported resourceTypes for Config from July to November 2025 (2c7dab27)
• client-ec2: Adds support for linkedGroupId on the CreatePlacementGroup and DescribePlacementGroups APIs. The linkedGroupId parameter is reserved for future use. (a492f734)
• client-guardduty: Make accountIds a required field in GetRemainingFreeTrialDays API to reflect service behavior. (53e59c65)
• middleware-flexible-checksums: use CRC64NVME JS implementation if CRT is not available (#7595) (4c6ad409)

Bug Fixes

• middleware-flexible-checksums: advise user on InvalidChunkSizeError (#7598) (6fa3b4cc)

---

For list of updated packages, view updated-packages.md in assets-3.957.0.zip

3.956.0(2025-12-19)

Chores

• crc64-nvme: add pure JS CRC64NVME implementation (#7592) (03019927)
• codegen:
  • differentiate union and struct schema (#7594) (a3f02028)
  • update for $unknown union member handling (#7591) (2c738294)
  • upgrade smithy to 1.65.0 (#7588) (8e9ad476)

Documentation Changes

• supplemental-docs: typo fixes (#7590) (0f23c869)

New Features

• clients: update client endpoints as of 2025-12-19 (e0360a8f)
• client-wickr: AWS Wickr now provides a suite of admin APIs to allow you to programmatically manage secure communication for Wickr networks at scale. These APIs enable you to automate administrative workflows including user lifecycle management, network configuration, and security group administration. (d105e0ef)
• client-arc-region-switch: Automatic Plan Execution Reports allow customers to maintain a concise record of their Region switch Plan executions. This enables customer SREs and leadership to have a clear view of their recovery posture based on the generated reports for their Plan executions. (33dbf8d8)
• client-workspaces-web: Add support for WebAuthn under user settings. (a42b84c4)
• client-iot: This release adds event-based logging feature that enables granular event logging controls for AWS IoT logs. (bbbf580b)
• client-qbusiness: It is a internal bug fix for region expansion (42a80dd7)
• client-connect: Adding support for Custom Metrics and Pre-Defined Attributes to GetCurrentMetricData API. (43dab925)
• client-emr-serverless: Added JobLevelCostAllocationConfiguration field to enable cost allocation reporting at the job level, providing more granular visibility into EMR Serverless charges (e95db238)

Bug Fixes

• ec2-metadata-service: add configurable options for ttl and port precedence (#7584) (184cf70c)
• core/protocols: $unknown union member support (#7593) (596fc405)

---

For list of updated packages, view updated-packages.md in assets-3.956.0.zip

3.955.0(2025-12-18)

Chores

• codegen: downgrade spotless to 7.2.1 (#7587) (ef66a21f)
• clients: export star from models_N (#7586) (e9b7f20a)

New Features

• clients: update client endpoints as of 2025-12-18 (11335218)
• client-ec2: This release adds AvailabilityZoneId support for CreateFleet, ModifyFleet, DescribeFleets, RequestSpotFleet, ModifySpotFleetRequests and DescribeSpotFleetRequests APIs. (4d1a66b9)
• client-ecs: Adding support for Event Windows via a new ECS account setting "fargateEventWindows". When enabled, ECS Fargate will use the configured event window for patching tasks. Introducing "CapacityOptionType" for CreateCapacityProvider API, allowing support for Spot capacity for ECS Managed Instances. (751c797f)
• client-arc-region-switch: New API to list Route 53 health checks created by ARC region switch for a plan in a specific AWS Region using the Region switch Regional data plane. (406035c4)
• client-bedrock-agentcore-control: Feature to support header exchanges between Bedrock AgentCore Gateway Targets and client, along with propagating query parameter to the configured targets. (800275ca)
• client-appstream: Added support for new operating systems (1) Ubuntu 24.04 Pro LTS on Elastic fleets, and (2) Microsoft Server 2025 on Always-On and On-Demand fleets (a94e6d55)
• client-cleanrooms: Adding support for collaboration change requests requiring an approval workflow. Adding support for change requests that grant or revoke results receiver ability and modifying auto approved change types in an existing collaboration. (26987932)
• client-artifact: Add support for ListReportVersions API for the calling AWS account. (8247b183)
• client-iot: This release adds message batching for the IoT Rules Engine HTTP action. (aa2dc069)
• client-sesv2: Amazon SES introduces Email Validation feature which checks email addresses for syntax errors, domain validity, and risky addresses to help maintain deliverability and protect sender reputation. SES also adds resource tagging and ABAC support for EmailTemplates and CustomVerificationEmailTemplates. (7412e741)
• client-bedrock-data-automation: Blueprint Optimization (BPO) is a new Amazon Bedrock Data Automation (BDA) capability that improves blueprint inference accuracy using example content assets and ground truth data. BPO works by generating better instructions for fields in the Blueprint using provided data. (3f901e7c)
• client-ecr: Adds support for ECR Create On Push (620e820d)
• client-opensearch: Amazon OpenSearch Service adds support for warm nodes, enabling new multi-tier architecture. (e574a591)
• client-ssm-sap: Added "Stopping" for the HANA Database Status. (393a8516)

---

For list of updated packages, view updated-packages.md in assets-3.955.0.zip

3.954.0(2025-12-17)

Chores

• core: add license file (#7096) (4d7bd08b)
• codegen:
  • bump jreleaser to 1.21.0 (#7585) (7b9ec0f7)
  • changes for handling conflicting params (#7549) (1978c68f)
• ci: scope down GitHub Token permissions for lock.yml (#7555) (b0bd47fa)
• clients: bump '@smithy/*' versions (#7582) (b654d972)

Documentation Changes

• core/protocols: add docs for schemas and protocols (#7583) (16628667)

New Features

• clients: update client endpoints as of 2025-12-17 (cf14f274)
• client-mediapackagev2: This release adds support for SPEKE V2 content key encryption in MediaPackage v2 Origin Endpoints. (988aac9d)
• client-inspector-scan: Adds an additional OutputFormat (fb2ca52a)
• client-guardduty: Add support for dbiResourceId in finding. (50534058)
• client-kafkaconnect: Support dual-stack network connectivity for connectors via NetworkType field. (04719ac2)
• client-sagemaker: Adding the newly launched p6-b300.48xlarge ec2 instance support in Sagemaker(Hyperpod,Training and Sceptor) (9833262e)
• client-payment-cryptography-data: Support for AS2805 standard. New API GenerateAs2805KekValidation and changes to translate pin, GenerateMac and VerifyMac to support AS2805 key variants. (fc2784b4)
• client-payment-cryptography: Support for AS2805 standard. Modifications to import-key and export-key to support AS2805 variants. (1d7c22e4)
• client-gameliftstreams: Added new stream group operation parameters for scale-on-demand capacity with automatic prewarming. Added new Gen6 stream classes based on the EC2 G6 instance family. Added new StartStreamSession parameter for exposure of real-time performance stats to clients. (94316515)
• client-mediaconvert: Adds support for tile encoding in HEVC and audio for video overlays. (010a9f7d)
• ec2-metadata-service: add retries for IMDS requests (#7569) (4b9a0ea9)

---

For list of updated packages, view updated-packages.md in assets-3.954.0.zip

3.953.0(2025-12-16)

Chores

• build: set cjs->es dependency in turbo (#7581) (0ddef7f7)
• build cjs rollup without typescript (#7580) (4359e405)

New Features

• clients:
  • update client endpoints as of 2025-12-16 (5c0fba3d)
  • allow protocol selection by class constructor (#7568) (5c5fd2e6)
• client-iot: Add support for dynamic payloads in IoT Device Management Commands (991cba08)
• client-timestream-influxdb: This release adds support for rebooting InfluxDB DbInstances and DbClusters (a8b712bb)

---

For list of updated packages, view updated-packages.md in assets-3.953.0.zip

3.952.0(2025-12-15)

Chores

• codegen: apply spotless eclipse formatting (#7573) (7e8a34ea)

Documentation Changes

• client-bedrock-agentcore-control: This release updates broken links for AgentCore Policy APIs in the AWS CLI and SDK resources. (6207cfae)

New Features

• client-service-quotas: Add support for SQ Dashboard Api (bcc5261c)
• client-entityresolution: Support Customer Profiles Integration for AWS Entity Resolution (32903b15)
• client-health: Updating Health API endpoint generation for dualstack only regions (c8be328f)
• client-s3: This release adds support for the new optional field 'LifecycleExpirationDate' in S3 Inventory configurations. (55955e01)
• client-ec2: EC2 Capacity Manager now supports SpotTotalCount, SpotTotalInterruptions and SpotInterruptionRate metrics for both vCPU and instance units. (f5db7c3c)
• client-cloudwatch-logs: This release allows you to import your historical CloudTrail Lake data into CloudWatch with a few steps, enabling you to easily consolidate operational, security, and compliance data in one place. (23d7db9d)
• client-route53resolver: Adds support for enabling detailed metrics on Route 53 Resolver endpoints using RniEnhancedMetricsEnabled and TargetNameServerMetricsEnabled in the CreateResolverEndpoint and UpdateResolverEndpoint APIs, providing enhanced visibility into Resolver endpoint and target name server performance. (93737551)
• client-glacier: Documentation updates for Amazon Glacier's maintenance mode (069dcf44)
• client-connect: Amazon Connect now supports outbound WhatsApp contacts via the Send message block or StartOutboundChatContact API. Send proactive messages for surveys, reminders, and updates. Offer customers the option to switch to WhatsApp while in queue, eliminating hold time. (c9b56eb0)
• client-mediatailor: Added support for Ad Decision Server Configuration enabling HTTP POST requests with custom bodies, headers, GZIP compression, and dynamic variables. No changes required for existing GET request configurations. (d0aae6dd)

Bug Fixes

• client-sts: warn sts default region only when used (#7579) (6512de50)
• credential-provider-ini: pass requestHandler from client to login provider (#7577) (a0bd362c)

---

For list of updated packages, view updated-packages.md in assets-3.952.0.zip

3.948.0(2025-12-09)

Chores

• middleware-recursion-detection: upgrade lambda-invoke-store dependency (#7559) (dbc65195)

New Features

• clients: update client endpoints as of 2025-12-09 (012e1f9a)
• client-mgn: Added parameters encryption, IPv4/IPv6 protocol configuration, and enhanced tagging support for replication operations. (a0a347c6)
• client-guardduty: Adding support for Ec2LaunchTemplate Version field (4903763d)
• client-appsync: Update Event API to require EventConfig parameter in creation and update requests. (6298ec44)
• client-route-53: Amazon Route 53 now supports the EU (Germany) Region (eusc-de-east-1) for latency records, geoproximity records, and private DNS for Amazon VPCs in that region (c21e90bc)
• client-account: This release adds a new API (GetGovCloudAccountInformation) used to retrieve information about a linked GovCloud account from the standard AWS partition. (ae9e6fce)
• client-ivs-realtime: Token Exchange introduces seamless token exchange capabilities for IVS RTX, enabling customers to upgrade or downgrade token capabilities and update token attributes within the IVS client SDK without forcing clients to disconnect and reconnect. (db225910)

---

For list of updated packages, view updated-packages.md in assets-3.948.0.zip

3.947.0(2025-12-08)

Chores

• codegen: service closure knowledge index (#7554) (731dbfef)
• core/client: emit warning for Node.js 18.x end-of-support (#7540) (fee7ba1d)

Documentation Changes

• add support policy section for Node.js/ECMAScript versions (#7556) (bf1f6e0b)

New Features

• clients: update client endpoints as of 2025-12-08 (7e0d61b2)
• client-cost-explorer: Add support for Cost Category resource associations including filtering by resource type on ListCostCategoryDefinitions and new ListCostCategoryResourceAssociations API. (011b4f65)
• client-sesv2: Update Mail Manager Archive ARN validation (18c203b2)
• client-redshift-serverless: Added GetIdentityCenterAuthToken API to retrieve encrypted authentication tokens for Identity Center integrated serverless workgroups. This API enables programmatic access to secure Identity Center tokens with proper error handling and parameter validation across supported SDK languages. (c3d27769)
• client-identitystore: Updating AWS Identity Store APIs to support Attribute Extensions capability, with the first release adding Enterprise Attributes. This launch aligns Identity Store APIs with SCIM for enterprise attributes, reducing cases when customers are forced to use SCIM due to lack of SigV4 API support. (14887fde)
• client-rds: Adding support for tagging RDS Instance/Cluster Automated Backups (41b9a139)
• client-partnercentral-selling: Deal Sizing Service for AI-based deal size estimation with AWS service-level breakdown, supporting Expansion and Migration deals across Technology, and Reseller partner cohorts, including Pricing Calculator AddOn for MAP deals and funding incentives. (867598e2)
• client-rolesanywhere: Increases certificate string length for trust anchor source data to support ML-DSA certificates. (481b863e)
• client-ec2: Amazon EC2 P6-B300 instances provide 8x NVIDIA Blackwell Ultra GPUs with 2.1 TB high bandwidth GPU memory, 6.4 Tbps EFA networking, 300 Gbps dedicated ENA throughput, and 4 TB of system memory. Amazon EC2 C8a instances are powered by 5th Gen AMD EPYC processors with a maximum frequency of 4.5 GHz. (229ff011)

Tests

• core/protocols: add test and additional condition for xml declaration (#7552) (c83c986a)

---

For list of updated packages, view updated-packages.md in assets-3.947.0.zip

3.946.0(2025-12-05)

Chores

• codegen:
  • release smithy-aws-typescript-codegen 0.39.0 (#7548) (abaca492)
  • sync for typescript formatting (#7546) (da6eee73)
  • type imports and index tests (#7545) (eb4e29bd)
• deps: bump jws from 3.2.2 to 3.2.3 (#7544) (a934dcb7)

Documentation Changes

• client-ecs: Updating stop-task API to encapsulate containers with custom stop signal (d7a58e20)

New Features

• client-iam: Adding the ExpirationTime attribute to the delegation request resource. (2de73924)
• client-inspector2: This release adds a new ScanStatus called "Unsupported Code Artifacts". This ScanStatus will be returned when a Lambda function was not code scanned because it has unsupported code artifacts. (30b100c9)
• client-partnercentral-account: Adding Verification API's to Partner Central Account SDK. (b9bad198)
• client-sesv2: Updating the desired url for PutEmailIdentityDkimSigningAttributes from v1 to v2 (4e8746ff)

Bug Fixes

• core/protocols:
  • conditionally append xml declaration (#7551) (f9245def)
  • awsQueryCompatibility error structuring (#7541) (ab683956)
• ec2-metadata-service: discard response body stream on failed request (#7543) (2dc10c6f)

---

For list of updated packages, view updated-packages.md in assets-3.946.0.zip

3.943.0(2025-12-02)

Chores

• core/protocols: dynamodb serde performance adjustments (#7536) (ae3e73d8)

New Features

• clients: update client endpoints as of 2025-12-02 (2f1ed327)
• client-s3-control: Add support for S3 Storage Lens Advanced Performance Metrics, Expanded Prefixes metrics report, and export to S3 Tables. (a8737778)
• client-observabilityadmin: CloudWatch Observability Admin adds pipelines configuration for third party log ingestion and transformation of all logs ingested, integration of CloudWatch logs with S3 Tables, and AWS account or organization level enablement for 7 AWS services. (1e20b0fe)
• client-fsx: S3 Access Points support for FSx for NetApp ONTAP (cb2d0f30)
• client-datazone: Amazon DataZone now supports exporting Catalog datasets as Amazon S3 tables, and provides automatic business glossary term suggestions for data assets. (f82c5bd4)
• client-sagemaker: Added support for serverless MLflow Apps. (99cda6cb)
• client-securityhub: ITSM enhancements: DRYRUN mode for testing ticket creation, ServiceNow now uses AWS Secrets Manager for credentials, ConnectorRegistrationsV2 renamed to RegisterConnectorV2, added ServiceQuotaExceededException error, and ConnectorStatus visibility in CreateConnectorV2. (45c4bd14)
• client-bedrock-agentcore-control: Supports AgentCore Evaluations, Policy, Episodic Memory Strategy, Resource Based Policy for Runtime and Gateway APIs, API Gateway Rest API Targets and enhances JWT authorizer. (072c9ff2)
• client-bedrock-runtime: Adds support for Audio Blocks and Streaming Image Output plus new Stop Reasons of malformed_model_output and malformed_tool_use. (57bdac08)
• client-nova-act: Initial release of Nova Act SDK. The Nova Act service enables customers to build and manage fleets of agents for automating production UI workflows with high reliability, fastest time-to-value, and ease of implementation at scale. (f0544c31)
• client-opensearch: GPU-acceleration helps you build large-scale vector databases faster and more efficiently. You can enable this feature on new OpenSearch domains and OpenSearch Serverless collections. This feature uses GPU-acceleration to reduce the time needed to index data into vector indexes. (263dd4ca)
• client-cloudwatch-logs: CloudWatch Logs adds managed S3 Tables integration to access logs using other analytical tools, as well as facets and field indexing to simplify log analytics in CloudWatch Logs Insights. (f3383c4e)
• client-bedrock: Adds the audioDataDeliveryEnabled boolean field to the Model Invocation Logging Configuration. (c3ccd65d)
• client-guardduty: Adding support for extended threat detection for Amazon EC2 and Amazon ECS. Adding support for wild card suppression rules. (d338e8aa)
• client-s3: New S3 Storage Class FSX_ONTAP (56ffa40a)
• client-bedrock-agentcore: Support for AgentCore Evaluations and Episodic memory strategy for AgentCore Memory. (ff3003b7)
• client-savingsplans: Added support for Amazon Database Savings Plans (d93e9c41)
• client-opensearchserverless: GPU-acceleration helps you build large-scale vector databases faster and more efficiently. You can enable this feature on new OpenSearch domains and OpenSearch Serverless collections. This feature uses GPU-acceleration to reduce the time needed to index data into vector indexes. (ae1f36f7)
• client-cost-explorer: This release updates existing Savings Plans Purchase Analyzer and Recommendations APIs to support Database Savings Plans. (4dd5ecaa)
• client-lambda: Launching Lambda durable functions - a new feature to build reliable multi-step applications and AI workflows natively within the Lambda developer experience. (01476cf7)
• client-s3vectors: Amazon S3 Vectors provides cost-effective, elastic, and durable vector storage for queries based on semantic meaning and similarity. (b9835814)
• client-s3tables: Add storage class, replication, and table record expiration features to S3 Tables. (f73480a7)
• client-rds: RDS Oracle and SQL Server: Add support for adding, modifying, and removing additional storage volumes, offering up to 256TiB storage; RDS SQL Server: Support Developer Edition via custom engine versions for development and testing purposes; M7i/R7i instances with Optimize CPU for cost savings. (0fc234af)

Tests

• core/protocols: add Query error deserialization unit test (#7535) (88074553)

---

For list of updated packages, view updated-packages.md in assets-3.943.0.zip

3.940.0(2025-11-25)

New Features

• clients: update client endpoints as of 2025-11-25 (e2770904)
• client-network-firewall: Network Firewall release of the Proxy feature. (0eb20e88)
• client-organizations: Add support for policy operations on the S3_POLICY and BEDROCK_POLICY policy type. (75e196ee)
• client-route-53: Adds support for new route53 feature: accelerated recovery. (dbe0a58f)
• client-ec2: This release adds support to view Network firewall proxy appliances attached to an existing NAT Gateway via DescribeNatGateways API NatGatewayAttachedAppliance structure. (7d70b063)

Bug Fixes

• core/protocols: performance improvements for shape serde traversal (#7523) (b20a25ea)

Tests

• codegen: update codegen unit tests (#7525) (e43ff44c)

---

For list of updated packages, view updated-packages.md in assets-3.940.0.zip

3.939.0(2025-11-24)

Chores

• scripts: reduce api validation to packages/lib only (#7519) (eb74d6a0)

New Features

• client-cloudwatch-logs: New CloudWatch Logs feature - LogGroup Deletion Protection, a capability that allows customers to safeguard their critical CloudWatch log groups from accidental or unintended deletion. (02360329)
• client-cloudfront: Add TrustStore, ConnectionFunction APIs to CloudFront SDK (168505ee)

Bug Fixes

• clients: export enum objects for string shapes (#7521) (62f648df)
• cloudfront-signer: skip extended encoding for query parameters in the base url (#7515) (954d411e)

Tests

• increase beforeAll hook timeouts (#7518) (720ba4cd)

---

For list of updated packages, view updated-packages.md in assets-3.939.0.zip

3.936.0(2025-11-19)

New Features

• credential-provider-login: add login credential provider (#7512) (2c08b1e0)

---

For list of updated packages, view updated-packages.md in assets-3.936.0.zip

3.935.0(2025-11-19)

Chores

• codegen: update for smithy/core serde fixes (#7511) (ac2be518)

New Features

• clients: update client endpoints as of 2025-11-19 (d7b51c49)
• client-sts: IAM now supports outbound identity federation via the STS GetWebIdentityToken API, enabling AWS workloads to securely authenticate with external services using short-lived JSON Web Tokens. (f9fed01c)
• client-dynamodb: Extended Global Secondary Index (GSI) composite keys to support up to 8 attributes. (622ef038)
• client-medialive: MediaLive is adding support for MediaConnect Router by supporting a new input type called MEDIACONNECT_ROUTER. This new input type will provide seamless encrypted transport between MediaConnect Router and your MediaLive channel. (1667189e)
• client-bcm-pricing-calculator: Add GroupSharingPreference, CostCategoryGroupSharingPreferenceArn, and CostCategoryGroupSharingPreferenceEffectiveDate to Bill Estimate. Add GroupSharingPreference and CostCategoryGroupSharingPreferenceArn to Bill Scenario. (e0dc140c)
• client-backup: Amazon GuardDuty Malware Protection now supports AWS Backup, extending malware detection capabilities to EC2, EBS, and S3 backups. (498dcf3d)
• client-connectcampaignsv2: This release added support for ring timer configuration for campaign calls. (1155c3c4)
• client-ecs: Added support for Amazon ECS Managed Instances infrastructure optimization configuration. (2ee0c3f3)
• client-ecr: Add support for ECR archival storage class and Inspector org policy for scanning (ed5e232d)
• client-sagemaker: Added support for enhanced metrics for SageMaker AI Endpoints. This features provides Utilization Metrics at instance and container granularity and also provides easy configuration of metric publish frequency from 10 sec -> 5 mins (ad2587c7)
• client-apigatewayv2: Support for API Gateway portals and portal products. (fc064256)
• client-billingconductor: This release adds support for Billing Transfers, enabling management of billing transfers with billing groups on AWS Billing Conductor. (4e32b65d)
• client-cloudwatch-logs: Adding support for ocsf version 1.5, add optional parameter MappingVersion (2a15be86)
• client-api-gateway: API Gateway now supports response streaming and new security policies for REST APIs and custom domain names. (e1d2d6b1)
• client-cost-optimization-hub: Release ListEfficiencyMetrics API (2b031582)
• client-bedrock-runtime: This release includes support for Search Results. (40ffa77a)
• client-cloudtrail: AWS CloudTrail now supports Insights for data events, expanding beyond management events to automatically detect unusual activity on data plane operations. (f8570665)
• client-health: Adds actionability and personas properties to Health events exposed through DescribeEvents, DescribeEventsForOrganization, DescribeEventDetails, and DescribeEventTypes APIs. Adds filtering by actionabilities and personas in EventFilter, OrganizationEventFilter, EventTypeFilter. (c754b242)
• client-networkflowmonitor: Added new enum value (AWS::EKS::Cluster) for type field under MonitorLocalResource (66729787)
• client-invoicing: Add support for adding Billing transfers in Invoice configuration (2e493490)
• client-s3: Adds support for blocking SSE-C writes to general purpose buckets. (cee2e72f)
• client-network-firewall: Partner Managed Rulegroup feature support (2e8472d6)
• client-emr: Add CloudWatch Logs integration for Spark driver, executor and step logs (7e6e1684)
• client-fsx: Adding File Server Resource Manager configuration to FSx Windows (2e3c0c96)
• client-guardduty: Add support for scanning and viewing scan results for backup resource types (231cf06b)
• client-sfn: Adds support to TestState for mocked results and exceptions, along with additional inspection data. (1b18be75)
• client-partnercentral-channel: Initial GA launch of Partner Central Channel (b77d1682)
• client-secrets-manager: Adds support to create, update, retrieve, rotate, and delete managed external secrets. (c13b6f97)
• client-iam: Added the EnableOutboundWebIdentityFederation, DisableOutboundWebIdentityFederation and GetOutboundWebIdentityFederationInfo APIs for the IAM outbound federation feature. (5774faa2)
• client-cost-explorer: Add support for COST_CATEGORY, TAG, and LINKED_ACCOUNT AWS managed cost anomaly detection monitors (ab1e44d9)
• client-mediaconnect: This release adds support for global routing in AWS Elemental MediaConnect. You can now use router inputs and router outputs to manage global video and audio routing workflows both within the AWS-Cloud and over the public internet. (4a372d33)
• client-billing: Added name filtering support to ListBillingViews API through the new names parameter to efficiently filter billing views by name. (8c6af8c2)
• client-ec2: This launch adds support for two new features: Regional NAT Gateway and IPAM Policies. IPAM policies offers customers central control for public IPv4 assignments across AWS services. Regional NAT is a single NAT Gateway that automatically expands across AZs in a VPC to maintain high availability. (e6ed3823)
• client-signin: AWS Sign-In manages authentication for AWS services. This service provides secure authentication flows for accessing AWS resources from the console and developer tools. This release adds the CreateOAuth2Token API, which can be used to fetch OAuth2 access tokens and refresh tokens from Sign-In. (21a4dff3)
• client-inspector2: This release introduces BLOCKED_BY_ORGANIZATION_POLICY error code and IMAGE_ARCHIVED scanStatusReason. BLOCKED_BY_ORGANIZATION_POLICY error code is returned when an operation is blocked by an AWS Organizations policy. IMAGE_ARCHIVED scanStatusReason is returned when an Image is archived in ECR. (ccaf51bb)
• client-lambda: Added support for creating and invoking Tenant Isolated functions in AWS Lambda APIs. (fc517d86)
• client-datazone: Amazon DataZone now supports business metadata (readme and metadata forms) at the individual attribute (column) level, a new rule type for glossary terms, and the ability to update the owner of the root domain unit. (21f12b43)
• client-rum: CloudWatch RUM now supports mobile application monitoring for Android and iOS platforms (6513bd2a)
• client-route-53: Add dual-stack endpoint support for Route53 (6fbbbd3c)
• client-transcribe-streaming: This release adds support for additional locales in AWS transcribe streaming. (52dd1e7b)

---

For list of updated packages, view updated-packages.md in assets-3.935.0.zip

3.934.0(2025-11-18)

New Features

• clients: update client endpoints as of 2025-11-18 (0f989254)
• client-connect: This release added support for ring timer configuration for campaign calls. (ae3d7600)
• client-cloudwatch-logs: CloudWatch Logs updates: Added capability to setup a recurring schedule for log insights queries. Logs introduced Scheduled Queries (managed through Create/Update/Get/Delete/List/History Scheduled Query APIs). For more information, see CloudWatch Logs API documentation. (467947d4)
• client-wafv2: AssociateWebACL, UpdateWebACL and PutLoggingConfiguration will now throw WAFFeatureNotIncludedInPricingPlanException when the request contains a feature that is not included in the CloudFront pricing plan of the WebACL. (6da7a3db)
• client-storage-gateway: Adds support for European Sovereign Cloud ARNs in Storage Gateway API parameters. (c7dd6fd7)
• client-cloudformation: New CloudFormation DescribeEvents API with operation ID tracking and failure filtering capabilities to quickly identify root causes of deployment failures. Also, a DeploymentMode parameter for the CreateChangeSet API that enables creation of drift-aware change sets for safe drift management. (04624df2)
• client-kafka: Amazon MSK adds three new APIs, ListTopics, DescribeTopic, and DescribeTopicPartitions for viewing Kafka topics in your MSK clusters. (12ad701d)
• client-backup: AWS Backup now supports a low-cost warm storage tier for Amazon S3 backup data. (0b0c9b8f)
• client-iam: Added the AssociateDelegationRequest, GetDelegationRequest, AcceptDelegationRequest, RejectDelegatonRequest, ListDelegationRequests, UpdateDelegationRequest, SendDelegationToken and GetHumanReadableSummary APIs for the IAM temporary delegation feature. (b200679b)
• client-resource-groups-tagging-api: Add support for new ListRequiredTags API used to retrieve the required tags specified in a customer's effective tag policy. (fa505515)
• client-ec2: AWS Site-to-Site VPN now supports VPN Concentrator, a new feature that enables customers to connect multiple low-bandwidth sites connections through a single attachment, simplifying multi-site connectivity for distributed enterprises. (b94cadfd)
• client-bedrock-runtime: Amazon Bedrock Runtime Service Tier Support Launch (ea418df5)
• client-auto-scaling: This release adds the new LaunchInstances API, which can launch instances synchronously in an AutoScaling group. The API also returns instances info and launch error back immediately. (5d96b688)

Tests

• core/protocols: add json rpc perf baseline (#7505) (114920c6)

---

For list of updated packages, view updated-packages.md in assets-3.934.0.zip

3.933.0(2025-11-17)

Chores

• middleware-recursion-detection: upgrade aws/lambda-invoke-store to 0.2.0 (#7506) (7454bd81)

New Features

• clients: update client endpoints as of 2025-11-17 (a9869e99)
• client-bedrock: Automated Reasoning checks in Amazon Bedrock Guardrails now automatically generate Q&A tests for new Automated Reasoning policies. The GetAutomatedReasoningPolicyBuildWorkflowResultAssets API adds GENERATED_TEST_CASES asset type, allowing customers to retrieve tests generated by the build workflow. (0e347c45)
• client-database-migration-service: This release introduces the SAP ASE(Sybase) Data Provider for AWS Data Migration Service (DMS). In addition, DMS Schema Conversion now supports this provider, enabling customers to migrate SAP ASE(Sybase) databases to Amazon RDS for PostgreSQL or Aurora PostgreSQL seamlessly. (c44cfad0)
• client-mwaa-serverless: Amazon MWAA now offers serverless deployment, eliminating operational overhead while optimizing costs. The service supports YAML and Python-based workflows, with 80+ AWS Operators. It provides isolated execution, IAM permissions, and automatic scaling with pay-per-use pricing. (53dbffc3)
• client-device-farm: This release adds support for interacting with devices during a remote access session using the remoteDriverEndpoint interface (574b1897)
• client-ec2: This release introduces new APIs: DescribeInstanceSqlHaStates, DescribeInstanceSqlHaHistoryStates, EnableInstanceSqlHaStandbyDetections and DisableInstanceSqlHaStandbyDetections on Amazon EC2, allowing customers to enroll and monitor SQL Server licensing fee savings for their SQL HA EC2 instances. (c0076d8e)
• client-appstream: Adding support for additional instances and extended storage (ec6111c8)
• client-route53resolver: Adding DICTIONARY_DGA to dns-threat-protection as a new enum type. Customers can now set rules for dictionary dga protection (adec304c)
• client-medialive: Adds configurations for spatial/temporal adaptive quantization in AV1 codec, and conversion to HLG output color space in H265 codec. (d994f74e)
• client-opensearch: This release adds index operation APIs to support Automatic Semantic Enrichment feature (8e96aa9a)
• client-backup: AWS Backup now supports specifying a logically air-gapped backup vault as a primary backup target in backup plans and on-demand backup jobs. (8223f6d1)
• client-guardduty: Add S3 On-Demand Object Scanning (0d0b1aea)
• client-pcs: Added support for the managed Slurm REST API endpoint (2557db0f)
• client-lex-models-v2: Adds support for LLM as Primary, allowing usage of LLMs as the default NLU system. (f2bcb725)
• client-mediapackagev2: Add support for SCTE messages in Segment file output (67d2919f)
• client-glue: Amazon Glue Releasing 2 the new API ListIntegrationResourceProperties and DeleteIntegrationResourceProperty along with minor improvement on existing API(s). (266572c5)

Tests

• client-elastictranscoder: remove tests (#7508) (089081ad)

---

For list of updated packages, view updated-packages.md in assets-3.933.0.zip

3.932.0(2025-11-14)

New Features

• clients: update client endpoints as of 2025-11-14 (87473bd2)
• client-ec2: This release adds AvailabilityZoneId support for CreateInstanceConnectEndpoint, DescribeInstanceConnectEndpoints, and DeleteInstanceConnectEndpoint APIs. (5ba1cf64)
• client-datazone: Adds support for granting read and write access to Amazon S3 general purpose buckets using CreateSubscriptionRequest and AcceptSubscriptionRequest APIs. Also adds search filters for SSOUser and SSOGroup to ListSubscriptions APIs and deprecates "sortBy" parameter for ListSubscriptions APIs. (77488e77)
• client-medialive: Removed all the value constraint (min/max) for the shape definitions (e.g. integerMin0Max3600) on the C2j models to get rid of the need to request an exemption from the SDK team whenever a shape definition (e.g. integerMin0Max3600) is changed. (9bcaeef4)
• client-imagebuilder: EC2 Image Builder now supports invoking Lambda functions and executing Step Functions state machine through image workflows. (f8fe9d73)

Bug Fixes

• core/protocols: decorate service exceptions with unmodeled fields (#7504) (6de803d7)

---

For list of updated packages, view updated-packages.md in assets-3.932.0.zip

3.931.0(2025-11-13)

Chores

• add pkg api shape validation (#7498) (e501b6cf)

New Features

• client-sagemaker: Added support for minor version upgrades and AWS Identity Center integration for SageMaker Hadron Partner Apps, enabling automated version management and IdC group-based access control. (99fbf1f1)
• client-elastic-load-balancing-v2: QUIC and TCP_QUIC protocol support for Network Load Balancer (NLB). This capability enables customers to forward QUIC traffic to their targets with ultra-low latency while maintaining session stickiness using QUIC Connection IDs. (555b55de)
• client-ecr: Add Amazon ECR FIPS PrivateLink endpoint support (b2a1603e)
• client-cloudformation: CloudFormation now supports GetHookResult API with annotations to retrieve structured compliance check results and remediation guidance for each evaluated resource, replacing the previous single-message limitation with detailed validation outcomes. (326e5dda)
• client-rds: Updated endpoint and service metadata (b075f0ff)
• client-mediaconvert: Lowers minimum duration for black video generator. Adds support for embedding and signing C2PA content credentials in DASH and CMAF HLS outputs. (dc04e020)
• client-workspaces-web: Support for managing web content filtering for defining, tracking and regulating type of content accessed with WorkSpaces Secure Browser as part of browser settings. (36de0dee)
• client-controlcatalog: Added support for related control mappings with new RELATED_CONTROL mapping type in ListControlMappings API. (1333cd34)
• client-iot-wireless: Integration of Device Location with Amazon Sidewalk network for Amazon Sidewalk enabled devices (bcf811ef)
• client-ec2: Added support for new accelerator types ("media") and accelerator names ("L4", "L40s", "GAUDI_HL_205", "INFERENTIA2", "TRAINIUM", "TRAINIUM2", "U30") in Attributes Based Instance Type Selection for launched instance types. (69871860)
• clients: use schema-serde in AWS REST XML clients (#7499) (f806a2b9)

Bug Fixes

• core/protocols: rest-json default request body conditions (#7501) (37e8b0dd)

---

For list of updated packages, view updated-packages.md in assets-3.931.0.zip

3.930.0(2025-11-12)

Chores

• codegen: sync for idempotencyToken fix in http binding protocols (#7495) (6362fe25)

New Features

• client-sagemaker: Add support for trn2.3xlarge instance type for SageMaker Hyperpod (bf8d2ce3)
• client-redshift: Added GetIdentityCenterAuthToken API to retrieve encrypted authentication tokens for Identity Center integrated applications. This API enables programmatic access to secure Identity Center tokens with proper error handling and parameter validation across supported SDK languages. (145a8368)
• client-amp: Add VPC source configuration support enabling Amazon Managed Service for Prometheus Collector to collect metrics from MSK clusters. (4aca00ff)
• client-s3tables: Adds support for request metrics metrics APIs for S3 Tables (0cb01631)
• client-database-migration-service: Added support of SQL statements creation, metadata model discovery and selection rules transformation. (95bd643b)
• client-ec2: Adds complete AMI ancestry tracing from immediate parent through each preceding generation back to the root AMI (fa8c029b)
• client-elastic-load-balancing-v2: This release expands ALB Authentication to support JWT verification and adds support for a new JWT validation action in listener rule. (46928a72)
• client-connect: Updated Authentication Profile APIs to add support for automatic logout on user inactivity (99b0f8d9)
• clients: use schema-serde in AWS Query & EC2 Query clients (#7489) (e9b6da8f)

Tests

• client-cloudwatch: e2e test of protocol selection (#7491) (bb14b543)

---

For list of updated packages, view updated-packages.md in assets-3.930.0.zip

3.929.0(2025-11-11)

Documentation Changes

• client-batch: Documentation-only update: update API and doc descriptions per EKS ImageType default value switch from AL2 to AL2023. (42db21d3)

New Features

• client-bedrock-data-automation: Added support for Language Expansion feature for BDA Audio modality. (e2374dbd)
• client-medical-imaging: Added new fields in existing APIs. (8e8ee4a0)
• client-ec2: AWS Site-to-Site VPN now supports VPN connections with up to 5 Gbps bandwidth per tunnel, a 4x improvement from existing limit of 1.25 Gbps. (165cccca)
• client-security-ir: Added support for configuring communication preferences as well as clearly displaying case comment author identities. (6c2d4f91)
• client-rtbfabric: Added LogSettings and LinkAttribute fields to external links (5f3dd496)
• clients: use schema-serde in AWS REST JSON clients (#7485) (99a36932)
  • output objects having type ?: Uint8ArrayBlobAdapter (optionally present byte array) such as for Lambda::invoke or AppConfig::getLatestConfiguration now have nullish (null/undefined) values when no HTTP body was present in the response rather than an empty Uint8ArrayBlobAdapter container.
  • The full list of operations can be found with this search: https://github.com/search?q=repo%3Aaws%2Faws-sdk-js-v3%20%22%3F%3A%20Uint8ArrayBlobAdapter%3B%22&type=code

Tests

• client-s3vectors: add e2e test (#7487) (8d3df6ff)
• client-dynamodb: e2e test for type registry based error handling (#7486) (ba1aeb67)
• client-cloudwatch-logs: e2e test for live tail event streams (#7484) (3d7ac161)

---

For list of updated packages, view updated-packages.md in assets-3.929.0.zip

3.928.0(2025-11-10)

Chores

• core/protocols: set public release level for runtime protocols (#7482) (78a69dc8)

New Features

• client-verifiedpermissions: Amazon Verified Permissions / Features : Adds support for entity Cedar tags. (d635af58)
• client-appstream: AWS Appstream support for IPv6 (6fc319f4)
• client-datazone: Remove trackingServerName from DataZone Connection MLflowProperties (8c22eaae)
• client-acm-pca: Private Certificate Authority service now supports ML-DSA key algorithms. (1bd0b8f9)
• client-backup: AWS Backup supports backups of Amazon EKS clusters, including Kubernetes cluster state and persistent storage attached to the EKS cluster via a persistent volume claim (EBS volumes, EFS file systems, and S3 buckets). (d45f0ebc)
• client-guardduty: Include tags filed in CreatePublishingDestinationRequest and DescribePublishingDestinationResponse. (9b11c354)
• client-ec2: Amazon EC2 Fleet customers can now filter instance types based on encryption-in-transit support using Attribute-Based Instance Type Selection (ABIS), eliminating the manual effort of identifying and selecting compatible instance types for security-sensitive workloads. (2b4fb805)
• client-iam: Added CreateDelegationRequest API, which is not available for general use at this time. (a7579e45)
• client-sts: Added GetDelegatedAccessToken API, which is not available for general use at this time. (41552ed6)
• client-wafv2: AWS WAF now supports CLOUDWATCH_TELEMETRY_RULE_MANAGED as a LogScope option, enabling automated logging configuration through Amazon CloudWatch Logs for telemetry data collection and analysis. (79d73853)
• client-kafka: Amazon MSK now supports intelligent rebalancing for MSK Express brokers. (265e5dae)
• client-braket: Adds ExperimentalCapabilities field to CreateQuantumTask request and GetQuantumTask response objects. Enables use of experimental software capabilities when creating quantum tasks. (6c179ae7)
• client-invoicing: Added new invoicing get-invoice-pdf API Operation (de2f6799)
• client-dsql: Cluster endpoint added to CreateCluster and GetCluster API responses (647406db)
• clients: use schema-serde in AWS JSON RPC clients (#7483) (b0f07b49)

---

For list of updated packages, view updated-packages.md in assets-3.928.0.zip

3.927.0(2025-11-07)

New Features

• client-ec2: Adds PrivateDnsPreference and PrivateDnsSpecifiedDomains to control private DNS resolution for resource and service network VPC endpoints and IpamScopeExternalAuthorityConfiguration to integrate Amazon VPC IPAM with a third-party IPAM service (650aa6de)
• client-opensearch: This release introduces the Default Application feature, allowing users to set, change, or unset a preferred OpenSearch UI application on a per-region basis for a streamlined and consistent user experience. (ea5f4e47)
• client-vpc-lattice: Amazon VPC Lattice now supports custom domain name for resource configurations (f46fcf1f)
• client-controltower: Added Parent Identifier support to ListEnabledControls and GetEnabledControl API. Implemented RemediationType support for Landing Zone operations: CreateLandingZone, UpdateLandingZone and GetLandingZone APIs (89c1f79d)
• client-kms: Added support for new ECC_NIST_EDWARDS25519 AWS KMS key spec (1d8341db)

Bug Fixes

• client-elastic-beanstalk: differentiate modeled and synthesized service base exception name (5e1e54b4)

Tests

• core/protocols: add shape serde perf baselines (#7479) (40bc6005)

---

For list of updated packages, view updated-packages.md in assets-3.927.0.zip