awscli

api-change:batch: This feature allows customers to use AWS Batch with Linux with ARM64 CPU Architecture with Fargate Spot compute support.

api-change:cloudfront: Added new viewer security policy, TLSv1.3_2025, for CloudFront.

api-change:codebuild: AWS CodeBuild now supports comment-based pull request control.

api-change:gameliftstreams: Adds Proton 9.0-2 to the list of runtime environment options available when creating an Amazon GameLift Streams application

api-change:glue: AWS Glue Data Catalog now supports Iceberg Optimization settings at the Catalog level, and supports new options to control the optimization job run rate.

api-change:guardduty: Added support for VPC owner account ID associated with DNS request in the GuardDuty finding.

api-change:appstream: Added support for G6 instances

api-change:budgets: Adds support for billing views. Billing views let you control access to cost and usage data through an AWS resource, streamlining the process of sharing cost and usage data across account boundaries. With this release, you can now create and view budgets based on billing views.

api-change:ec2: Mark Elastic Inference Accelerators and Elastic Graphics Processor parameters as deprecated on the RunInstances and LaunchTemplate APIs.

api-change:opensearchserverless: Features: add Index APIs in OpenSearchServerless to support managed semantic enrichment

api-change:qbusiness: Amazon Q Business now supports the GetDocumentContent() API that enables customers to securely access the source documents through clickable citation links at query time

api-change:bedrock: This release introduces Automated Reasoning checks for Amazon Bedrock Guardrails. The feature adds new APIs for policy building, refinement, version management, and testing. Guardrail APIs now support Automated Reasoning policy configuration and validation output.

api-change:bedrock-runtime: This release adds support for Automated Reasoning checks output models for the Amazon Bedrock Guardrails ApplyGuardrail API.

api-change:eks: Add support for deletion protection on EKS clusters

api-change:rds: Adds a new Aurora Serverless v2 attribute to the DBCluster resource to expose the platform version. Also updates the attribute to be part of both the engine version and platform version descriptions.

api-change:sagemaker: Add support for SageMaker Hyperpod continuous scaling and custom AMI; Introduce new APIs: ListClusterEvents, DescribeClusterEvent, BatchAddClusterNodes

api-change:bedrock-agentcore: Remove superfluous field from API

api-change:codeconnections: New integration with Azure DevOps provider type.

api-change:evs: TagResource API now throws ServiceQuotaExceededException when the number of tags on the Amazon EVS resource exceeds the maximum allowed. TooManyTagsException is deprecated.

api-change:iotsitewise: Support Interface for IoT SiteWise Asset Modeling

api-change:sagemaker: This release adds the ability for customers to attach and detach their EBS volumes to EKS-orchestrated HyperPod cluster nodes.

api-change:acm-pca: Doc-only update to add more information to GetCertificate action.

api-change:aiops: This release includes fix for InvestigationGroup timestamp conversion issue.

api-change:arc-region-switch: This is the initial SDK release for Region switch

api-change:auditmanager: Added a note to Framework APIs (CreateAssessmentFramework, GetAssessmentFramework, UpdateAssessmentFramework) clarifying that the Controls object returns a partial response when called through Framework APIs. Added documentation that the Framework's controlSources parameter is no longer supported.

api-change:lightsail: This release adds support for the Asia Pacific (Jakarta) (ap-southeast-3) Region.

api-change:observabilityadmin: CloudWatch Observability Admin adds the ability to enable telemetry on AWS resources such as Amazon VPCs (Flow Logs) in customers AWS Accounts and Organizations. The release introduces new APIs to manage telemetry rules, which define telemetry settings to be applied on AWS resources.

api-change:pcs: Add support for IPv6 Networking for Clusters.

api-change:securityhub: Release new resource detail type CodeRepository

api-change:sns: Amazon SNS support for Amazon SQS fair queues

api-change:customer-profiles: The release updates standard profile with 2 new fields that supports account-level engagement. Updated APIs include CreateProfile, UpdateProfile, MergeProfiles, SearchProfiles, BatchGetProfile, GetSegmentMembership, CreateSegmentDefinition, CreateSegmentEstimate.

api-change:ec2: Added support for the force option for the EC2 instance terminate command. This feature enables customers to recover resources associated with an instance stuck in the shutting-down state as a result of rare issues caused by a frozen operating system or an underlying hardware problem.

api-change:elbv2: This release enables secondary IP addresses for Network Load Balancers.

api-change:entityresolution: Add support for creating advanced rule-based matching workflows in AWS Entity Resolution.

api-change:glue: Added support for Route node, S3 Iceberg sources/targets, catalog Iceberg sources, DynamoDB ELT connector, AutoDataQuality evaluation, enhanced PII detection with redaction, Kinesis fan-out support, and new R-series worker types.

api-change:inspector2: Extend usage to include agentless hours and add CODE_REPOSITORY to aggregation resource type

api-change:iot: This release allows AWS IoT Core users to use their own AWS KMS keys for data protection

api-change:opensearch: Granular access control support for NEO-SAML with IAMFederation for AOS data source

api-change:quicksight: Added Impala connector support

api-change:s3control: Add Tags field to CreateAccessPoint

api-change:sesv2: This release introduces support for Multi-tenant management

api-change:workspaces-web: Added ability to log session activity on a portal to an S3 bucket.

feature:sts: Updated the default sts service endpoint from legacy to regional. This behavior can be overridden using the sts_regional_endpoints setting in the shared AWS config file or the AWS_STS_REGIONAL_ENDPOINTS environment variable.

api-change:cloudfront: This release adds new origin timeout options: 1) ResponseCompletionTimeout and 2) OriginReadTimeout (for S3 origins)

api-change:docdb: Add support for setting Serverless Scaling Configuration on clusters.

api-change:ds: This release adds support for AWS Managed Microsoft AD Hybrid Edition, introducing new operations: StartADAssessment, DescribeADAssessment, ListADAssessments, DeleteADAssessment, CreateHybridAD, UpdateHybridAD, and DescribeHybridADUpdate; and updated existing operation: DescribeDirectories.

api-change:ec2: Release to show the next hop IP address for routes propagated by VPC Route Server into VPC route tables.

api-change:iotwireless: Added TxPowerIndexMin, TxPowerIndexMax, NbTransMin and NbTransMax params to ServiceProfile.

api-change:batch: AWS Batch for SageMaker Training jobs feature support. Includes new APIs for service job submission (e.g., SubmitServiceJob) and managing service environments (e.g., CreateServiceEnvironment) that enable queueing SageMaker Training jobs.

api-change:cleanrooms: This feature provides the ability to update the table reference and allowed columns on an existing configured table.

api-change:deadline: Adds support for tag management on monitors.

api-change:location: This release 1) adds support for multi-polygon geofences with disconnected territories, and 2) enables polygon exclusion zones within geofences for more accurate representation of real-world boundaries.

api-change:opensearchserverless: This is to support Granular access control support for SAML with IAMFedraton in AOSS

api-change:directconnect: Enable MACSec support and features on Interconnects.

api-change:iotsitewise: Add support for native anomaly detection in IoT SiteWise using new Computation Model APIs

api-change:osis: Add Pipeline Role Arn as an optional parameter to the create / update pipeline APIs as an alternative to passing in the pipeline configuration body

api-change:appintegrations: Amazon AppIntegrations introduces new configuration capabilities to enable customers to manage iframe permissions, control application refresh behavior (per contact or per browser/cross-contact), and run background applications (service).

api-change:budgets: Adds IPv6 and PrivateLink support for AWS Budgets in IAD.

api-change:config: Documentation improvements have been made to the EvaluationModel and DescribeConfigurationRecorders APIs.

api-change:ec2: Transit Gateway native integration with AWS Network Firewall. Adding new enum value for the new Transit Gateway Attachment type.

api-change:kms: Doc only update: fixed grammatical errors.

api-change:mediapackagev2: This release adds support for specifying a preferred input for channels using CMAF ingest.

api-change:socialmessaging: This release introduces new WhatsApp template management APIs that enable customers to programmatically create and submit templates for approval, monitor approval status, and manage the complete template lifecycle

api-change:sqs: Documentation updates for Amazon SQS fair queues feature.

api-change:datazone: This release adds support for 1) highlighting relevant text in returned results for Search and SearchListings APIs and 2) returning aggregated counts of values for specified attributes for SearchListings API.

api-change:omics: Add Git integration and README support for HealthOmics workflows

api-change:ec2: Added support for skip-os-shutdown option for the EC2 instance stop and terminate operations. This feature enables customers to bypass the graceful OS shutdown, supporting faster state transitions when instance data preservation isn't critical.

api-change:glue: AWS Glue now supports dynamic session policies for job executions. This feature allows you to specify custom, fine-grained permissions for each job run without creating multiple IAM roles.

api-change:workspaces-thin-client: Added the lastUserId parameter to the ListDevices and GetDevice API.

api-change:ecr: Add support for Image Tag Mutability Exception feature, allowing repositories to define wildcard-based patterns that override the default image tag mutability settings.

api-change:emr: This release adds new parameter 'ExtendedSupport' in AWS EMR RunJobFlow, ModifyCluster and DescribeCluster API.

api-change:lambda: This release migrated the model to Smithy keeping all features unchanged.

api-change:neptunedata: This release updates the supported regions for Neptune API to include current AWS regions.

enhancement:EMR: Updated create-cluster and describe-cluster commands to support --extended-support and --no-extended-support arguments

api-change:cloudfront: Add dualstack endpoint support

api-change:deadline: Add support for VPC resource endpoints in Service Managed Fleets

api-change:ec2: This release adds support for C8gn, F2 and P6e-GB200 Instance types

api-change:sagemaker: This release adds 1/ Support for S3FileSystem in CustomFileSystems 2/ The ability for a customer to select their preferred IpAddressType for use with private Workforces 3/ Support for p4de instance type in SageMaker Training Plans

api-change:timestream-influxdb: Timestream for InfluxDB adds support for db.influx.24xlarge instance type. This enhancement enables higher compute capacity for demanding workloads through CreateDbInstance, CreateDbCluster, UpdateDbInstance, and UpdateDbCluster APIs.

enhancement:cloudfront: This release adds automatic pagination to the list-origin-access-controls command. To disable this behavior, please use the --no-paginate flag.

api-change:auditmanager: Updated error handling for RegisterOrganizationAdminAccount API to properly translate TooManyExceptions to HTTP 429 status code. This enhancement improves error handling consistency and provides clearer feedback when request limits are exceeded.

api-change:logs: CloudWatchLogs launches GetLogObject API with streaming support for efficient log data retrieval. Logs added support for new AccountPolicy type METRIC_EXTRACTION_POLICY. For more information, see CloudWatch Logs API documentation

api-change:mediaconvert: This release adds support for TAMS server integration with MediaConvert inputs.

api-change:outposts: Add AWS Outposts API to surface customer billing information

api-change:sesv2: Added IP Visibility support for managed dedicated pools. Enhanced GetDedicatedIp and GetDedicatedIps APIs to return managed IP addresses.

api-change:ssm: July 2025 doc-only updates for Systems Manager.

api-change:cleanroomsml: This release introduces Parquet result format support for ML Input Channel models in AWS Clean Rooms ML.

api-change:cloudfront: Doc only update for CloudFront that fixes some customer-reported issues

api-change:ec2: AWS Free Tier Version2 Support

api-change:keyspacesstreams: Doc only update for the Amazon Keyspaces Streams API.

api-change:mailmanager: Allow underscores in the local part of the input of the "Email recipients rewrite" action in rule sets.

api-change:mediaconvert: This release expands the range of supported audio outputs to include xHE, 192khz FLAC and the deprecation of dual mono for AC3.

api-change:stepfunctions: Align input with style guidelines.

api-change:synthetics: This feature allows AWS Synthetics customers to provide code dependencies using lambda layer while creating a canary

api-change:bedrock: This release adds support for on-demand custom model inference through CustomModelDeployment APIs for Amazon Bedrock.

api-change:bedrock-agentcore: Initial release of Amazon Bedrock AgentCore SDK including Runtime, Built-In Tools, Memory, Gateway and Identity.

api-change:bedrock-agentcore-control: Initial release of Amazon Bedrock AgentCore SDK including Runtime, Built-In Tools, Memory, Gateway and Identity.

api-change:bedrock-runtime: document update to support on demand custom model.

api-change:datasync: AWS DataSync now supports IPv6 address inputs and outputs in create, update, and describe operations for NFS, SMB, and Object Storage locations

api-change:glue: AWS Glue now supports schema, partition and sort management of Apache Iceberg tables using Glue SDK

api-change:guardduty: Add expectedBucketOwner parameter to ThreatIntel and IPSet APIs.

api-change:iotwireless: FuotaTaskId is not a valid IdentifierType for EventConfiguration and is being removed from possible IdentifierType values.

api-change:logs: CloudWatch Logs updates: Added X-Ray tracing for Amazon Bedrock Agent resources. Logs introduced Log Group level resource policies (managed through Put/Delete/Describe Resource Policy APIs). For more information, see CloudWatch Logs API documentation.

api-change:mediapackagev2: This release adds support for CDN Authentication using Static Headers in MediaPackage v2.

api-change:networkflowmonitor: Introducing 2 new scope status types - DEACTIVATING and DEACTIVATED.

api-change:payment-cryptography-data: Expand length of message data field for Mac generation and validation to 8192 characters.

api-change:stepfunctions: Doc-only update to introduction, and edits to clarify input parameter and the set of control characters.

api-change:ecs: This release removes hookDetails for the Amazon ECS native blue/green deployments.

api-change:bedrock-agent: Add support for S3 Vectors as a vector store.

api-change:datazone: Removing restriction of environment profile identifier as required field, S3 feature release

api-change:dynamodbstreams: Added support for optional shard filter parameter in DescribeStream api that allows customers to fetch child shards of a read_only parent shard.

api-change:ec2: This release adds support for volume initialization status, which enables you to monitor when the initialization process for an EBS volume is completed. This release also adds IPv6 support to EC2 Instance Connect Endpoints, allowing you to connect to your EC2 Instance via a private IPv6 address.

api-change:ecs: Amazon ECS supports native blue/green deployments, allowing you to validate new service revisions before directing production traffic to them.

api-change:events: Add customer-facing logging for the EventBridge Event Bus, enabling customers to better observe their events and extract insights about their EventBridge usage.

api-change:opensearch: AWS Opensearch adds support for enabling s3 vector engine options. After enabling this option, customers will be able to create indices with s3 vector engine.

api-change:pricing: This release adds support for new filter types in GetProducts API, including EQUALS, CONTAINS, ANY_OF, and NONE_OF.

api-change:quicksight: Introduced custom instructions for topics.

api-change:repostspace: This release introduces Channels functionality with CreateChannel, GetChannel, ListChannels, and UpdateChannel operations. Channels provide dedicated collaboration spaces where teams can organize discussions and knowledge by projects, business units, or areas of responsibility.

api-change:s3: Amazon S3 Metadata live inventory tables provide a queryable inventory of all the objects in your general purpose bucket so that you can determine the latest state of your data. To help minimize your storage costs, use journal table record expiration to set a retention period for your records.

api-change:s3tables: Adds table bucket type to ListTableBucket and GetTableBucket API operations

api-change:s3vectors: Amazon S3 Vectors provides cost-effective, elastic, and durable vector storage for queries based on semantic meaning and similarity.

api-change:sagemaker: This release adds support for a new Restricted instance group type to enable a specialized environment for running Nova customization jobs on SageMaker HyperPod clusters. This release also adds support for SageMaker pipeline versioning.

api-change:ec2: Adds support to Capacity Blocks for ML for purchasing EC2 P6e-GB200 UltraServers. Customers can now purchase u-p6e-gb200x72 and u-p6e-gb200x36 UltraServers. Adds new DescribeCapacityBlocks andDescribeCapacityBlockStatus APIs. Adds support for CapacityBlockId to DescribeInstanceTopology.

api-change:freetier: This release introduces four new APIs: GetAccountPlanState and UpgradeAccountPlan for AWS account plan management; ListAccountActivities and GetAccountActivity that provide activity tracking capabilities.

api-change:opsworkscm: Removing content that refers to an S3 bucket that is no longer in use.

api-change:customer-profiles: This release introduces capability of create Segments via importing a CSV file directly. This consumes the CSV file and creates/updates corresponding profiles for the particular domain.

api-change:deadline: Added fields for output manifest reporting and task chunking parameters

api-change:ec2: This release adds GroupOwnerId as a response member to the DescribeSecurityGroupVpcAssociations API and also adds waiters for SecurityGroupVpcAssociations (SecurityGroupVpcAssociationAssociated and SecurityGroupVpcAssociationDisassociated).

api-change:mediapackagev2: This release adds support for Microsoft Smooth Streaming (MSS) and allows users to exclude DRM segment Metadata in MediaPackage v2 Origin Endpoints

api-change:route53: Amazon Route 53 now supports the iso-e regions for private DNS Amazon VPCs and cloudwatch healthchecks.

api-change:sagemaker: Changes include new StartSession API for SageMaker Studio spaces and CreateHubContentPresignedUrls API for SageMaker JumpStart.

api-change:connectcases: This release adds DeleteCase and DeleteRelatedItem APIs, which enable deleting cases and comments, undoing contact association, and removing service level agreements (SLAs) from cases. Contact center admins can use these APIs to delete cases when requested by customers and correct agent errors.

api-change:ec2: AWS Site-to-Site VPN now supports IPv6 addresses on outer tunnel IPs, making it easier for customers to build or transition to IPv6-only networks.

api-change:s3: Added support for directory bucket creation with tags and bucket ARN retrieval in CreateBucket, ListDirectoryBuckets, and HeadBucket operations

api-change:s3control: Added TagResource, UntagResource, and ListTagsForResource support for directory bucket

api-change:cleanroomsml: This release introduces support for incremental training and distributed training for custom models in AWS Clean Rooms ML.

api-change:datazone: Add support for the new optional domain-unit-id parameter in the UpdateProject API.

api-change:ec2: Add Context to GetInstanceTypesFromInstanceRequirements API

api-change:odb: This release adds API operations for Oracle Database@AWS. You can use the APIs to create Exadata infrastructure, ODB networks, and Exadata and Autonomous VM clusters inside AWS data centers. The infrastructure is managed by OCI. You can integrate these resources with AWS services.

api-change:qbusiness: New ChatResponseConfiguration to Customize Q Business chat responses for specific use cases and communication needs. Updated Boosting capability allowing admins to provide preference on date attributes for recency and/or provide a preferred data source.

api-change:rds: Amazon RDS Custom for Oracle now supports multi-AZ database instances.

api-change:sagemaker: Updated field validation requirements for InstanceGroups.

api-change:arc-zonal-shift: Added support for on-demand practice runs and balanced capacity checks in ARC autoshift practice.

api-change:b2bi: Updated APIs to support inbound EDI split capabilities and additional Partnership-level configurations of generated EDI files' contents and format.

api-change:bedrock: Add support for API Keys, Re-Ranker, implicit filter for RAG / KB evaluation for Bedrock APIs.

api-change:bedrock-runtime: Add API Key and document citations support for Bedrock Runtime APIs

api-change:cloudformation: Added support for UNKNOWN drift status.

api-change:config: Updated ResourceType enum with new resource types onboarded by AWS Config as of June 2025

api-change:connect: This release introduces ChatMetrics to the model, providing comprehensive analytics insights for Amazon Connect chat conversations. Users can access these detailed metrics through the AWS Connect API by using the DescribeContact operation with their specific instance and contact IDs

api-change:dataexchange: This release updates resource Id with alphanumeric constraint, including Asset id, Revision id, Data Set id, Job id, and Event Action id.

api-change:dynamodb: This change adds support for witnesses in global tables. It also adds a new table status, REPLICATION_NOT_AUTHORIZED. This status will indicate scenarios where global replicas table can't be utilized for data plane operations.

api-change:events: Added support for EventBridge Dualstack endpoints in AWS GovCloud (US) regions (us-gov-east-1 and us-gov-west-1). The dualstack endpoints are identical for both FIPS and non-FIPS configurations, following the format: events.{region}.api.aws

api-change:glue: releasing source processing properties to support source properties for ODB integrations

api-change:iam: Updated IAM ServiceSpecificCredential support to include expiration, API Key output format instead of username and password for services that will support API keys, and the ability to list credentials for all users in the account for a given service configuration.

api-change:logs: Increase minimum length of queryId parameter to 1 character.

api-change:medical-imaging: Added new fields to support the concept of primary image sets within the storage hierarchy.

api-change:networkflowmonitor: Add ConflictExceptions to UpdateScope and DeleteScope operations for scopes being mutated.

api-change:outposts: Make ContactName and ContactPhoneNumber required fields when creating and updating Outpost Site Addresses.

api-change:pcs: Fixed the validation pattern for an instance profile Amazon Resource Name (ARN) in AWS PCS.

api-change:quicksight: Introduced custom permission capabilities for reporting content. Added menu option in exploration to preserve configuration data when textbox menu option is used. Added support for Athena trusted identity propagation.

api-change:ssm: Introduces AccessType, a new filter value for the DescribeSessions API.

api-change:transfer: Added support for dual-stack (IPv4 and IPv6) endpoints for SFTP public endpoints and VPC-internal endpoints (SFTP, FTPS, FTP, and AS2), enabling customers to configure new servers with IPv4 or dual-stack mode, convert existing servers to dual-stack, and use IPv6 with service APIs.

feature:bedrock: Add support for retrieving a Bearer token from environment variables to enable bearer authentication with Bedrock services.

api-change:config: Added important considerations to the PutConformancePack and PutOrganizationConformancPack APIs.

api-change:connect: This release adds the following value to an InitiateAs enum: COMPLETED

api-change:glue: AWS Glue now supports schema, partition and sort management of Apache Iceberg tables using Glue SDK

api-change:guardduty: Update JSON target for Kubernetes workload resource type.

api-change:qconnect: Adding UnauthorizedException to public SDK

api-change:rds: StartDBCluster and StopDBCluster can now throw InvalidDBShardGroupStateFault.

api-change:sesv2: Added support for new SES regions

api-change:deadline: Added fields to track cumulative task retry attempts for steps and jobs

api-change:ec2: This release adds support for OdbNetworkArn as a target in VPC Route Tables

api-change:iot-managed-integrations: Adding managed integrations APIs for IoT Device Management to onboard and control devices across different manufacturers, connectivity protocols and third party vendor clouds. APIs include managed thing operations, provisioning profile management, and cloud connector operations.

api-change:keyspaces: This release provides change data capture (CDC) streams support through updates to the Amazon Keyspaces API.

api-change:keyspacesstreams: This release adds change data capture (CDC) streams support through the new Amazon Keyspaces Streams API.

api-change:kms: This release updates AWS CLI examples for KMS APIs.

api-change:qbusiness: Added support for App level authentication for QBusiness DataAccessor using AWS IAM Identity center Trusted Token issuer

api-change:workspaces: Updated modifyStreamingProperties to support PrivateLink VPC endpoints for directories

api-change:ecs: Updates for change to Amazon ECS default log driver mode from blocking to non-blocking

api-change:fsx: Add support for the ability to create Amazon S3 Access Points for Amazon FSx for OpenZFS file systems.

api-change:s3: Adds support for additional server-side encryption mode and storage class values for accessing Amazon FSx data from Amazon S3 using S3 Access Points

api-change:s3control: Add support for the ability to use Amazon S3 Access Points with Amazon FSx for OpenZFS file systems.

api-change:storagegateway: This release adds IPv6 support to the Storage Gateway APIs. APIs that previously only accept or return IPv4 address will now accept or return both IPv4 and IPv6 addresses.

api-change:textract: Add RotationAngle field to Geometry of WORD blocks for Textract AnalyzeDocument API

api-change:workspaces-thin-client: Remove Tags field from Get API responses

api-change:aiops: Adds support for cross account investigations for CloudWatch investigations AI Operations (AIOps).

api-change:batch: Add userdataType to LaunchTemplateSpecification and LaunchTemplateSpecificationOverride.

api-change:bedrock: We are making ListFoundationModelAgreementOffers, DeleteFoundationModelAgreement, CreateFoundationModelAgreement, GetFoundationModelAvailability, PutUseCaseForModelAccess and GetUseCaseForModelAccess APIs public, previously they were console.

api-change:ec2: This release allows you to create and register AMIs while maintaining their underlying EBS snapshots within Local Zones.

api-change:elbv2: Add Paginator for DescribeAccountLimits, and fix Paginators for DescribeTrustStoreAssociations, DescribeTrustStoreRevocations, and DescribeTrustStores

api-change:gamelift: Add support for UDP ping beacons to ListLocations API, including new PingBeacon and UDPEndpoint data types within its Locations return value. Use UDP ping beacon endpoints to help measure real-time network latency for multiplayer games.

api-change:license-manager: AWS License Manager now supports license type conversions for AWS Marketplace products. Customers can provide Marketplace codes in the source license context or destination license context in the CreateLicenseConversionTaskForResource requests.

api-change:rds: Adding support for RDS on Dedicated Local Zones, including local backup target, snapshot availability zone and snapshot target

api-change:route53resolver: Add support for iterative DNS queries through the new INBOUND_DELEGATION endpoint. Add delegation support through the Outbound Endpoints with DELEGATE rules.

api-change:transcribe: This Feature Adds Support for the "et-EE" Locale for Batch Operations

api-change:glue: AWS Glue now supports sort and z-order strategy for managed automated compaction for Iceberg tables in addition to binpack.

api-change:s3tables: S3 Tables now supports sort and z-order compaction strategies for Iceberg tables in addition to binpack.

api-change:workspaces-instances: Added support for Amazon WorkSpaces Instances API

api-change:bedrock: Add support for tiers in Content Filters and Denied Topics for Amazon Bedrock Guardrails.

api-change:ecs: Add ECS support for Windows Server 2025

api-change:geo-places: Geocode, ReverseGeocode, and GetPlace APIs added Intersections and SecondaryAddresses. To use, add to the AdditionalFeatures list in your request. This provides info about nearby intersections and secondary addresses that are associated with a main address. Also added MainAddress and ParsedQuery.

api-change:glue: AWS Glue Data Quality now provides aggregated metrics in evaluation results when publishAggregatedMetrics with row-level results are enabled. These metrics include summary statistics showing total counts of processed, passed, and failed rows and rules in a single view.

api-change:mediaconvert: This release adds a new SPECIFIED_OPTIMAL option for handling DDS when using DVB-Sub with high resolution video.

api-change:bedrock: This release of the SDK has the API and documentation for the createcustommodel API. This feature lets you copy a trained model into Amazon Bedrock for inference.

api-change:emr-serverless: This release adds the capability to enable IAM IdentityCenter Trusted Identity Propagation for users running Interactive Sessions on EMR Serverless Applications.

api-change:lambda: Support Schema Registry feature for Kafka Event Source Mapping. Customers can now configure a Schema Registry to enable schema validation and filtering for Avro, Protobuf, and JSON-formatted events in Lambda for Kafka Event Source.

api-change:payment-cryptography: Additional support for managing HMAC keys that adheres to changes documented in X9.143-2021 and provides better interoperability for key import/export

api-change:payment-cryptography-data: Additional support for managing HMAC keys that adheres to changes documented in X9.143-2021 and provides better interoperability for key import/export

api-change:sagemaker: This release introduces alternative support for utilizing CFN templates from S3 for SageMaker Projects.

api-change:aiops: This is the initial SDK release for Amazon AI Operations (AIOps). AIOps is a generative AI-powered assistant that helps you respond to incidents in your system by scanning your system's telemetry and quickly surface suggestions that might be related to your issue.

api-change:autoscaling: Add IncludeInstances parameter to DescribeAutoScalingGroups API

api-change:imagebuilder: Added paginators for imagebuilder.

api-change:logs: Added CloudWatch Logs Transformer support for converting CloudTrail, VPC Flow, EKS Audit, AWS WAF and Route53 Resolver logs to OCSF v1.1 format.

api-change:s3: Added support for renaming objects within the same bucket using the new RenameObject API.

api-change:sagemaker: Add support for p6-b200 instance type for SageMaker Hyperpod

api-change:accessanalyzer: We are launching a new analyzer type, internal access analyzer. The new analyzer will generate internal access findings, which help customers understand who within their AWS organization or AWS Account has access to their critical AWS resources.

api-change:acm: Adds support for Exportable Public Certificates

api-change:backup: AWS Backup is adding support for integration of its logically air-gapped vaults with the AWS Organizations Multi-party approval capability.

api-change:bedrock: This release of the SDK has the API and documentation for the createcustommodel API. This feature lets you copy a trained model into Amazon Bedrock for inference.

api-change:dms: Add "Virtual" field to Data Provider as well as "S3Path" and "S3AccessRoleArn" fields to DataProvider settings

api-change:guardduty: Adding support for extended threat detection for EKS Audit Logs and EKS Runtime Monitoring.

api-change:inspector2: Add Code Repository Scanning as part of AWS InspectorV2

api-change:mpa: This release enables customers to create Multi-party approval teams and approval requests to protect supported operations.

api-change:network-firewall: Release of Active Threat Defense in Network Firewall

api-change:organizations: Add support for policy operations on the SECURITYHUB_POLICY policy type.

api-change:securityhub: Adds operations, structures, and exceptions required for public preview release of Security Hub V2.

api-change:sts: The AWS Security Token Service APIs AssumeRoleWithSAML and AssumeRoleWithWebIdentity can now be invoked without pre-configured AWS credentials in the SDK configuration.

api-change:wafv2: AWS WAF can now suggest protection packs for you based on the application information you provide when you create a webACL.

api-change:bedrock: This release of the SDK has the API and documentation for the createcustommodel API. This feature lets you copy a Amazon SageMaker trained Amazon Nova model into Amazon Bedrock for inference.

api-change:ecr: The DescribeImageScanning API now includes lastInUseAt and InUseCount fields that can be used to prioritize vulnerability remediation for images that are actively being used.

api-change:network-firewall: You can now create firewalls using a Transit Gateway instead of a VPC, resulting in a TGW attachment.

api-change:sagemaker: This release 1) adds a new S3DataType Converse for SageMaker training 2)adds C8g R7gd M8g C6in P6 P6e instance type for SageMaker endpoint 3) adds m7i, r7i, c7i instance type for SageMaker Training and Processing.

api-change:apigateway: Documentation updates for Amazon API Gateway

api-change:apigatewayv2: Documentation updates for Amazon API Gateway

api-change:connectcampaignsv2: Added PutInstanceCommunicationLimits and GetInstanceCommunicationLimits APIs

api-change:ecs: This Amazon ECS release supports updating the capacityProviderStrategy parameter in update-service.

api-change:emr-serverless: This release adds support for retrieval of the optional executionIamPolicy field in the GetJobRun API response.

api-change:iotfleetwise: Add new status READY_FOR_CHECKIN used for vehicle synchronisation

api-change:kms: AWS KMS announces the support of ML-DSA key pairs that creates post-quantum safe digital signatures.

api-change:pcs: Fixed regex patterns for ARN fields.

api-change:controlcatalog: Introduced ListControlMappings API that retrieves control mappings. Added control aliases and governed resources fields in GetControl and ListControls APIs. New filtering capability in ListControls API, with implementation identifiers and implementation types.

api-change:eks: Release for EKS Pod Identity Cross Account feature and disableSessionTags flag.

api-change:lexv2-models: Add support for the Assisted NLU feature to improve bot performance

api-change:networkmanager: Add support for public DNS hostname resolution to private IP addresses across Cloud WAN-managed VPCs. Add support for security group referencing across Cloud WAN-managed VPCs.

api-change:rds: Updates Amazon RDS documentation for Amazon RDS for Db2 cross-Region replicas in standby mode.

api-change:wafv2: WAF now provides two DDoS protection options: resource-level monitoring for Application Load Balancers and the AWSManagedRulesAntiDDoSRuleSet managed rule group for CloudFront distributions.

api-change:gameliftstreams: Documentation updates for Amazon GameLift Streams to address formatting errors, correct resource ID examples, and update links to other guides

api-change:appsync: Deprecate atRestEncryptionEnabled and transitEncryptionEnabled attributes in CreateApiCache action. Encryption is always enabled for new caches.

api-change:ce: Support dual-stack endpoints for ce api

api-change:customer-profiles: This release introduces capability of Profile Explorer, using correct ingestion timestamp & using historical data for computing calculated attributes, and new standard objects for T&H as part of Amazon Connect Customer Profiles service.

api-change:ec2: Release to support Elastic VMware Service (Amazon EVS) Subnet and Amazon EVS Network Interface Types.

api-change:efs: Added support for Internet Protocol Version 6 (IPv6) on EFS Service APIs and mount targets.

api-change:marketplace-catalog: The ListEntities API now supports the EntityID, LastModifiedDate, ProductTitle, and Visibility filters for machine learning products. You can also sort using all of those filters.

api-change:workspaces-thin-client: Add ConflictException to UpdateEnvironment API

enhancement:cloudformation: High-level Cloudformation commands such as deploy and package will now fallback to SHA256 for checksumming if MD5 isn't present on the host

api-change:bedrock-agent-runtime: This release introduces the PromptCreationConfigurations input parameter, which includes fields to control prompt population for InvokeAgent or InvokeInlineAgent requests.

api-change:kms: Remove unpopulated KeyMaterialId from Encrypt Response

api-change:rds: Include Global Cluster Identifier in DBCluster if the DBCluster is a Global Cluster Member.

api-change:rekognition: Adds support for defining an ordered preference list of different Rekognition Face Liveness challenge types when calling CreateFaceLivenessSession.

api-change:route53: Amazon Route 53 now supports the Asia Pacific (Taipei) Region (ap-east-2) for latency records, geoproximity records, and private DNS for Amazon VPCs in that region.

api-change:s3tables: S3 Tables now supports getting details about a table via its table ARN.

api-change:bcm-pricing-calculator: Updating the minimum for List APIs to be 1 (instead of 0)

api-change:cloudformation: Add new warning type 'EXCLUDED_PROPERTIES'

api-change:kms: AWS KMS announces the support for on-demand rotation of symmetric-encryption KMS keys with imported key material (EXTERNAL origin).

api-change:wafv2: AWS WAF adds support for ASN-based traffic filtering and support for ASN-based rate limiting.

api-change:amplify: Update documentation for cacheConfig in CreateApp API

api-change:evs: Amazon Elastic VMware Service (Amazon EVS) allows you to run VMware Cloud Foundation (VCF) directly within your Amazon VPC including simplified self-managed migration experience with guided workflow in AWS console or via AWS CLI, get full access to their VCF deployment and VCF license portability.

api-change:invoicing: Added new Invoicing ListInvoiceSummaries API Operation

api-change:mediaconnect: This release updates the DescribeFlow API to show peer IP addresses. You can now identify the peer IP addresses of devices connected to your sources and outputs. This helps you to verify and troubleshoot your flow's active connections.

api-change:mediaconvert: This release includes support for embedding and signing C2PA content credentials in MP4 outputs.

api-change:network-firewall: You can now monitor flow and alert log metrics from the Network Firewall console.

api-change:sagemaker: Added support for p6-b200 instance type in SageMaker Training Jobs and Training Plans.

api-change:transcribe: AWS Healthscribe now supports new templates for the clinical note summary: BIRP, SIRP, DAP, BEHAVIORAL_SOAP, and PHYSICAL_SOAP

api-change:apigateway: Adds support to set the routing mode for a custom domain name.

api-change:apigatewayv2: Adds support to create routing rules and set the routing mode for a custom domain name.

api-change:emr-serverless: AWS EMR Serverless: Adds a new option in the CancelJobRun API in EMR 7.9.0+, to cancel a job with grace period. This feature is enabled by default with a 120-second grace period for streaming jobs and is not enabled by default for batch jobs.

api-change:athena: Add support for the managed query result in the workgroup APIs. The managed query result configuration enables users to store query results to Athena owned storage.

api-change:backup: You can now subscribe to Amazon SNS notifications and Amazon EventBridge events for backup indexing. You can now receive notifications when a backup index is created, deleted, or fails to create, enhancing your ability to monitor and track your backup operations.

api-change:bedrock-agent: This release adds the Agent Lifecycle Paused State feature to Amazon Bedrock agents. By using an agent's alias, you can temporarily suspend agent operations during maintenance, updates, or other situations.

api-change:compute-optimizer: This release enables AWS Compute Optimizer to analyze Amazon Aurora database clusters and generate Aurora I/O-Optimized recommendations.

api-change:cost-optimization-hub: Support recommendations for Aurora instance and Aurora cluster storage.

api-change:ecs: Updates Amazon ECS documentation to include note for upcoming default log driver mode change.

api-change:eks: Add support for filtering ListInsights API calls on MISCONFIGURATION insight category

api-change:entityresolution: Add support for generating match IDs in near real-time.

api-change:pcs: Introduces SUSPENDING and SUSPENDED states for clusters, compute node groups, and queues.

api-change:synthetics: Support for Java runtime handler pattern.

api-change:emr-serverless: This release adds the capability for users to specify an optional Execution IAM policy in the StartJobRun action. The resulting permissions assumed by the job run is the intersection of the permissions in the Execution Role and the specified Execution IAM Policy.

api-change:sagemaker: Release new parameter CapacityReservationConfig in ProductionVariant

api-change:amplify: Add support for customizable build instance sizes. CreateApp and UpdateApp operations now accept a new JobConfig parameter composed of BuildComputeType.

api-change:autoscaling: Add support for "apple" CpuManufacturer in ABIS

api-change:bcm-pricing-calculator: Add AFTER_DISCOUNTS_AND_COMMITMENTS to Workload Estimate Rate Type. Set ListWorkLoadEstimateUsage maxResults range to minimum of 0 and maximum of 300.

api-change:cloudtrail: CloudTrail Feature Release: Support for Enriched Events with Configurable Context for Event Data Store

api-change:connect: Amazon Connect Service Feature: Email Recipient Limit Increase

api-change:dataexchange: This release adds Tag support for Event Action resource, through which customers can create event actions with Tags and retrieve event actions with Tags.

api-change:datasync: AgentArns field is made optional for Object Storage and Azure Blob location create requests. Location credentials are now managed via Secrets Manager, and may be encrypted with service managed or customer managed keys. Authentication is now optional for Azure Blob locations.

api-change:fsx: FSx API changes to support the public launch of new Intelligent Tiering storage class on Amazon FSx for Lustre

api-change:ivs-realtime: IVS Real-Time now offers customers the participant replication that allow customers to copy a participant from one stage to another.

api-change:mwaa: Amazon MWAA now lets you choose a worker replacement strategy when updating an environment. This release adds two worker replacement strategies: FORCED (default), which stops workers immediately, and GRACEFUL, which allows workers to finish current tasks before shutting down.

api-change:s3: Adding checksum support for S3 PutBucketOwnershipControls API.

api-change:sagemaker: Add maintenance status field to DescribeMlflowTrackingServer API response

api-change:cost-optimization-hub: This release allows customers to modify their preferred commitment term and payment options.

api-change:ec2: Enable the option to automatically delete underlying Amazon EBS snapshots when deregistering Amazon Machine Images (AMIs)

api-change:events: Allow for more than 2 characters for location codes in EventBridge ARNs

api-change:network-firewall: You can now use VPC endpoint associations to create multiple firewall endpoints for a single firewall.

api-change:synthetics: Add support to change ephemeral storage. Add a new field "TestResult" under CanaryRunStatus.

api-change:ce: This release introduces Cost Comparison feature (GetCostAndUsageComparisons, GetCostComparisonDrivers) allowing you find cost variations across multiple dimensions and identify key drivers of spending changes.

api-change:deadline: AWS Deadline Cloud service-managed fleets now support storage profiles. With storage profiles, you can map file paths between a workstation and the worker hosts running the job.

api-change:ec2: This release adds three features - option to store AWS Site-to-Site VPN pre-shared keys in AWS Secrets Manager, GetActiveVpnTunnelStatus API to check the in-use VPN algorithms, and SampleType option in GetVpnConnectionDeviceSampleConfiguration API to get recommended sample configs for VPN devices.

api-change:ec2: This release adds support for the C7i-flex, M7i-flex, I7i, I7ie, I8g, P6-b200, Trn2, C8gd, M8gd and R8gd instances

api-change:security-ir: Update PrincipalId pattern documentation to reflect what user should receive back from the API call

api-change:amp: Add QueryLoggingConfiguration APIs for Amazon Managed Prometheus

api-change:auditmanager: With this release, the AssessmentControl description field has been deprecated, as of May 19, 2025. Additionally, the UpdateAssessment API can now return a ServiceQuotaExceededException when applicable service quotas are exceeded.

api-change:dsql: Features: support for customer managed encryption keys

api-change:glue: This release supports additional ConversionSpec parameter as part of IntegrationPartition Structure in CreateIntegrationTableProperty API. This parameter is referred to apply appropriate column transformation for columns that are used for timestamp based partitioning

api-change:application-autoscaling: Doc only update that addresses a customer reported issue.

api-change:bedrock-agent-runtime: Amazon Bedrock introduces asynchronous flows (in preview), which let you run flows for longer durations and yield control so that your application can perform other tasks and you don't have to actively monitor the flow's progress.

api-change:cloudwatch: Adds support for setting up Contributor Insight rules on logs transformed via Logs Transformation feature.

api-change:ec2: Release of Dualstack and Ipv6-only EC2 Public DNS hostnames

api-change:partnercentral-selling: Modified validation to allow expectedCustomerSpend array with zero elements in Partner Opportunity operations.

api-change:datasync: Remove Discovery APIs from the DataSync service

api-change:ec2: This release expands the ModifyInstanceMaintenanceOptions API to enable or disable instance migration during customer-initiated reboots for EC2 Scheduled Reboot Events.

api-change:glue: Enhanced AWS Glue ListConnectionTypes API Model with additional metadata fields.

api-change:inspector2: This release adds GetClustersForImage API and filter updates as part of the mapping of container images to running containers feature.

api-change:oam: Add IncludeTags field to GetLink, GetSink and UpdateLink API

api-change:rds: This release introduces the new DescribeDBMajorEngineVersions API for describing the properties of specific major versions of database engines.

api-change:dsql: CreateMultiRegionCluster and DeleteMultiRegionCluster APIs removed

api-change:ec2: This release includes new APIs for System Integrity Protection (SIP) configuration and automated root volume ownership delegation for EC2 Mac instances.

api-change:mediapackagev2: This release adds support for DVB-DASH, EBU-TT-D subtitle format, and non-compacted manifests for DASH in MediaPackage v2 Origin Endpoints.

api-change:bedrock-data-automation: Add support for VIDEO modality to BlueprintType enum.

api-change:bedrock-data-automation-runtime: Add AssetProcessingConfiguration for video segment to InputConfiguration

api-change:codepipeline: CodePipeline now supports new API ListDeployActionExecutionTargets that lists the deployment target details for deploy action executions.

api-change:ecs: This is an Amazon ECs documentation only release to support the change of the container exit "reason" field from 255 characters to 1024 characters.

api-change:emr: Added APIs for managing Application UIs: Access Persistent (serverless) UIs via CreatePersistentAppUI DescribePersistentAppUI & GetPersistentAppUIPresignedURL, and Cluster-based UIs through GetOnClusterAppUIPresignedURL. Supports Yarn, Spark History, and TEZ interfaces.

api-change:glue: Changes include (1) Excel as S3 Source type and XML and Tableau's Hyper as S3 Sink types, (2) targeted number of partitions parameter in S3 sinks and (3) new compression types in CSV/JSON and Parquet S3 sinks.

api-change:neptune: This release adds Global Cluster Switchover capability which enables you to change your global cluster's primary AWS Region, the region that serves writes, while preserving the replication between all regions in the global cluster.

api-change:service-quotas: This release introduces CreateSupportCase operation to SDK.

api-change:bedrock-agent: Amazon Bedrock Flows introduces DoWhile loops nodes, parallel node executions, and enhancements to knowledge base nodes.

api-change:codebuild: AWS CodeBuild now supports Docker Server capability

api-change:controltower: Updated the descriptions for the AWS Control Tower Baseline APIs to make them more intuitive.

api-change:dms: Introduces Data Resync feature to describe-table-statistics and IAM database authentication for MariaDB, MySQL, and PostgreSQL.

api-change:pcs: This release adds support for Slurm accounting. For more information, see the Slurm accounting topic in the AWS PCS User Guide. Slurm accounting is supported for Slurm 24.11 and later. This release also adds 24.11 as a valid value for the version parameter of the Scheduler data type.

api-change:workspaces: Added the new AlwaysOn running mode for WorkSpaces Pools. Customers can now choose between AlwaysOn (for instant access, with hourly usage billing regardless of connection status), or AutoStop (to optimize cost, with a brief startup delay) for their pools.

api-change:cognito-idp: Add exceptions to WebAuthn operations.

api-change:firehose: This release adds catalogARN support for s3 tables multi-catalog catalogARNs.

api-change:logs: This release adds a new API "ListLogGroups" and an improvement in API "DescribeLogGroups"

api-change:mediaconvert: This update enables cropping for video overlays and adds a new STL to Teletext upconversion toggle to preserve styling.

api-change:bedrock: Enable cross-Region inference for Amazon Bedrock Guardrails by using the crossRegionConfig parameter when calling the CreateGuardrail or UpdateGuardrail operation.

api-change:bedrock-agent-runtime: Changes for enhanced metadata in trace

api-change:controltower: AWS Control Tower now reports the inheritance drift status for EnabledBaselines through the GetEnabledBaseline and ListEnabledBaselines APIs. You can now filter EnabledBaselines by their enablement and drift status using the ListEnabledBaselines API to view accounts and OUs that require attention.

api-change:dsql: CreateMultiRegionClusters and DeleteMultiRegionClusters APIs marked as deprecated. Introduced new multi-Region clusters creation experience through multiRegionProperties parameter in CreateCluster API.

api-change:ecs: This release extends functionality for Amazon EBS volumes attached to Amazon ECS tasks by adding support for the new EBS volumeInitializationRate parameter in ECS RunTask/StartTask/CreateService/UpdateService APIs.

api-change:license-manager: Add Tagging feature to resources in the Managed Entitlements service. License and Grant resources can now be tagged.

api-change:deadline: AWS Deadline Cloud service-managed fleets now support configuration scripts. Configuration scripts make it easy to install additional software, like plugins and packages, onto a worker.

api-change:ec2: EC2 - Adding support for AvailabilityZoneId

api-change:iam: Updating the endpoint list for the Identity and access management (IAM) service

api-change:medialive: Add support to the AV1 rate control mode

api-change:mediatailor: Documenting that EnabledLoggingStrategies is always present in responses of PlaybackConfiguration read operations.

api-change:s3control: Updates to support S3 Express zonal endpoints for directory buckets in AWS CLI

api-change:sagemaker: No API changes from previous release. This release migrated the model to Smithy keeping all features unchanged.

api-change:supplychain: Launch new AWS Supply Chain public APIs for DataIntegrationEvent, DataIntegrationFlowExecution and DatasetNamespace. Also add more capabilities to existing public APIs to support direct dataset event publish, data deduplication in DataIntegrationFlow, partition specification of custom datasets.

api-change:athena: Minor API documentation updates

api-change:logs: We are pleased to announce limit increases to our grok processor logs transformation feature. Now you can define 20 Grok patterns in their configurations, with an expanded total pattern matching limit of 512 characters.

api-change:synthetics: Add support to retry a canary automatically after schedule run failures. Users can enable this feature by configuring the RetryConfig field when calling the CreateCanary or UpdateCanary API. Also includes changes in GetCanary and GetCanaryRuns to support retrieving retry configurations.

api-change:workspaces: Remove parameter EnableWorkDocs from WorkSpacesServiceModel due to end of support of Amazon WorkDocs service.