moto

Docker Digest for 5.2.2: sha256:d8ae5edc2bf080e7e4c13f9bd4b29b53ac3b4427e92956318db3dbe23ec43eb7

New Methods:
    * DS:
        * disable_radius()
        * enable_radius()

    * KinesisAnalyticsV2:
        * untag_resource()

    * Logs:
        * start_live_tail()

    * SESv2:
        * update_contact()
        * update_contact_list()

    * SWF:
        * tag_resource()
        * untag_resource()

Miscellaneous:
    * ACM: import_certificate() now accepts certificates without a CN
    * ACM: request_certificate() now preserves the default options when not all are provided
    * CloudFormation: Created Lambda resources now take the `use_docker`-configuration into account
    * CloudFormation: update_stack_instances() now validates that a StackInstance exists
    * Events: create_partner_event_source() now returns the EventSourceArn-attribute
    * Route53: list_resource_record_sets() no longer returns a TTL for aliases
    * S3: completed_multipart_upload() is now compatible with external tools like PyArrow
    * S3: get_object() now supports all Response* headers

Docker Digest for 5.2.1: sha256:fe6575dcd878842124f05d20e4ffde2d1126e1e38ad03e196353b9e53649bcdf

Miscellaneous:
    * DynamoDB: batch_write_item() now correctly handles PUT requests with Binary (B) attributes (broken in 5.2.0)
    * S3: Uploading files no longer fails with 'Unsupported protocol' (broken in 5.2.0)
    * S3: create_multipart_upload() is now compatible with Java SDK again (broken in 5.2.0)
    * Route53: update_health_check() now correctly updates falsy values (broken in 5.2.0)

Docker Digest for 5.2.0: sha256:d8d063e3e704d256cbe8165072fa273c17698be91311e49fc602b7716f459bea

General:
    * Drops support for Python 3.9
    * Lambda Containers now configure the AWS_ENDPOINT_URL, automatically intercepting requests to other AWS services

New Services:
    * Bedrock-AgentCore-Control:
        * create_agent_runtime()
        * create_agent_runtime_endpoint()
        * create_gateway()
        * create_gateway_target()
        * create_memory()
        * delete_agent_runtime()
        * delete_agent_runtime_endpoint()
        * delete_gateway()
        * delete_gateway_target()
        * delete_memory()
        * get_agent_runtime()
        * get_agent_runtime_endpoint()
        * get_gateway()
        * get_gateway_target()
        * get_memory()
        * list_agent_runtimes()
        * list_agent_runtime_endpoints()
        * list_agent_runtime_versions()
        * list_gateways()
        * list_gateway_targets()
        * list_memories()
        * list_tags_for_resource()
        * tag_resource()
        * update_agent_runtime()
        * update_agent_runtime_endpoint()
        * update_gateway()
        * update_gateway_target()
        * untag_resource()

    * Bedrock-Runtime:
        * invoke_model()

    * FIS:
        * create_experiment_template()
        * delete_experiment_template()
        * list_tags_for_resource()
        * tag_resource()
        * untag_resource()

New Methods:
    * Athena:
        * get_database()
        * list_databases()

    * DAX:
        * tag_resource()
        * untag_resource()

    * EC2:
        * create_traffic_mirror_filter()
        * create_traffic_mirror_target()
        * describe_traffic_mirror_filter()
        * describe_traffic_mirror_target()

    * Kafka:
        * delete_cluster_policy()
        * get_cluster_policy()
        * put_cluster_policy()

    * Pipes:
        * start_pipe()
        * stop_pipe()

    * StepFunctions:
        * create_state_machine_alias()
        * delete_state_machine_alias()
        * describe_state_machine_alias()
        * list_state_machine_aliases()
        * update_state_machine_alias()

    * SWF:
        * list_tags_for_resource()
        * tag_resource()
        * untag_resource()

    * Transfer:
        * create_connector()
        * delete_connector()
        * describe_connector()
        * list_connectors()
        * update_connector()

    * VPC Lattice:
        * create_listener()
        * create_target_group()
        * create_service_network_resource_association()
        * create_service_network_service_association()
        * get_listener()
        * get_target_group()
        * get_service_network_resource_association()
        * get_service_network_service_association()
        * list_listeners()
        * list_target_groups()
        * list_service_network_resource_associations()
        * list_service_network_service_associations()

Miscellaneous:
    * Autoscaling: delete_auto_scaling_group() now validates that the provided AutoScalingGroup exists
    * DMS: describe_replication_tasks() now behaves correctly without any Filters supplied
    * DynamoDB: ConditionExpressions are now validated for redundant parentheses, improving parity with AWS
    * DynamoDB: describe_export() now returns additional attributes: TableArn, S3Bucket and S3Prefix
    * DynamoDB: update_continuous_backups() now returns additional attributes: RecoveryPeriodInDays
    * DynamoDB: update_item() now correctly handles byte-records when throwing a `ConditionalCheckFailedException`
    * DynamoDB-Streams: get_records() now omits empty OldImage/NewImage records, improving parity with AWS
    * EC2: run_instances() now uses the following LaunchTemplateSpec-parameters: UserData, InstanceType, KeyName, SecurityGroups, SecurityGroupIds
    * ECS: describe_services() now returns the following attributes: rolloutState, rolloutStateReason and failedTasks (defaults to 0, configurable with env var `MOTO_ECS_SERVICE_FAILED_TASKS=1`
    * Events: list_rule_names_by_target() now deduplicates the results
    * KMS: generate_mac() now supports aliases
    * KMS: update_alias() now supports a full ARN as the TargetKeyId
    * Lambda now starts containers using shogo82148's images by default (https://hub.docker.com/r/shogo82148/lambda-python)
    * Logs: get_query_results() now returns the results in the correct order (either ascending or descending)
    * Pipes: The Pipe-class now supports 
    * RAM now accepts service principals and IAM ARNs as resource share principals
    * ResourceGroupsTaggingAPI: get_resources() now supports SWF domains
    * Route53Resolver: list_resolver_query_log_configs() now supports the Id-filter
    * S3 now correctly calculates checksums for individual MultiParts
    * S3 now supports the `use_dualstack_endpoint` and `use_fips_endpoint` configuration options
    * S3: create_bucket() now supports the parameter BucketNamespace="account-regional"
    * S3: complete_multipart_upload() now returns the attributes ChecksumAlgorithm and ChecksumType
    * S3: list_buckets() now supports the parameters BucketRegion, MaxBuckets and Prefix
    * SESv2: create_email_identity() now returns additional attributes: NextSigningKeyLength and SigningAttributesOrigin
    * SES: publish() now supports the `MessageGroupId`-parameter for standard queues, allowing use of SQS fair queues
    * SNS: Creation of FIFO queues with CloudFormation is now supported
    * SQS: receive_message() now supports additional `MessageAttributeNames`-patterns: ".*" and "<prefix>.*"
    * SWF: register_domain() now supports the tags-parameter
    * WAFv2: get_web_acl() now supports the ARN-parameter

Docker Digest for 5.1.22: sha256:1e3802c95726373544967b428201c548f0247c15b00db2d96a5ba0a77d8643b8

New Methods:
    * APIGateway:
        * delete_model()

    * Athena:
        * tag_resource()
        * untag_resource()

    * Pipes:
        * list_tags_for_resource()

    * OSIS:
        * delete_resource_policy()
        * get_resource_policy()
        * put_resource_policy()

    * RDS:
        * copy_db_cluster_parameter_group()

    * STS:
        * get_access_key_info()

    * Transfer:
        * list_servers()

Miscellaneous:
    * CloudFormation now supports the creation/update/deletion of AWS::CloudWatch::Dashboard resources
    * CloudFormation now supports the creation/update/deletion of AWS::KMS::Alias resources
    * CloudFormation now supports the creation/update/deletion of AWS::SSM::Document resources
    * EC2: create_fleet() now supports the parameters DryRun and LaunchTemplateConfigs.Overrides
    * EC2: describe_network_interfaces() now supports the 'attachment.attachment-id'-filter
    * EC2: Instances created from a LaunchTemplate now have the 'aws:ec2launchtemplate:id' and 'aws:ec2launchtemplate:version' tags
    * RDS: create_db_cluster_parameter_group() now validates the provided group name/description/familiy
    * RDS: delete_db_cluster_parameter_group() now validates that the provided group exists
    * S3: delete_object() now supports IfMatch
    * SecretsManager: create-secret() now throw ResourceExistsException for duplicate requests with different token (broken since 5.1.11)
    * SQS: send_message() now returns the SequenceNumber-attribute
    * VPCLattice: list_access_log_subscriptions() now also supports arns as resourceIdentifiers

Docker Digest for 5.1.21: sha256:93ad54da7badce7f9c13e5e6439c93564c764663c42872d2c39f718aa484047a

General:
    * Moto now supports the new AWS partition for the EU sovereign cloud ('eusc-de-east-1')

New Services:
    * Account:
        * delete_alternate_contact()
        * get_alternate_contact()
        * put_alternate_contact()

    * Connect:
        * associate_analytics_data_set()
        * create_instance()
        * delete_instance()
        * describe_instance()
        * disassociate_analytics_data_set()
        * list_analytics_data_associations()
        * list_instances()
        * list_tags_for_resource()
        * tag_resource()
        * untag_resource()

New Methods:
    * Backup:
        * create_report_plan()
        * delete_backup_vault()
        * delete_backup_vault_lock_configuration()
        * describe_backup_vault()
        * describe_report_plan()
        * list_report_plans()
        * put_backup_vault_lock_configuration()

    * EKS:
        * update_nodegroup_config()

    * Route53Resolver:
        * get_resolver_query_log_config_association()
        * list_resolver_query_log_configs()
        * list_resolver_query_log_config_associations()

    * SecurityHub:
        * get_master_account()

Miscellaneous:
    * DynamoDB now supports multi-attribute composite key support for GSIs
    * ELBv2: Internal load balancers can now be `dualstack`
    * IAM: Policy validation now correctly validates Boolean conditions and NULL-resources
    * Lambda: put_function_event_invoke_config() no longer requires the DestinationConfig-parameter
    * ResourceGroupsTaggingAPI: tag_resources() and untag_resources() now supports CloudFront resources
    * SageMaker: describe_domain() now returns the DomainSetting-attribute

Docker Digest for 5.1.20: sha256:d2711655244df58411ce0be34236c95736390db17886370d21e12ae2b1e36f79

New Methods:
    * EC2:
        * create_subnet_cidr_reservation()
        * delete_subnet_cidr_reservation()
        * get_instance_uefi_data() (Just a stub, no actual data is returned)
        * get_subnet_cidr_reservations()

    * IOT:
        * list_thing_principals_v2()

    * ResourceGroups:
        * cancel_tag_sync_task()
        * get_tag_sync_task()
        * list_tag_sync_tasks()
        * start_tag_sync_task()

    * Route53Resolver:
        * get_resolver_dnssec_config()
        * list_resolver_dnssec_configs()
        * update_resolver_dnssec_config()

    * S3Control:
        * create_multi_region_access_point()
        * delete_multi_region_access_point()
        * delete_storage_lens_configuration()
        * describe_multi_region_access_point_operation()
        * get_multi_region_access_point()
        * get_multi_region_access_point_policy()
        * get_multi_region_access_point_policy_status()
        * list_multi_region_access_points()
        * put_multi_region_access_point_policy()

    * SecurityHub:
        * create_members()
        * get_members()
        * list_members()

Miscellaneous:
    * ACM: import_certificate() now supports all key types, RSA and EC
    * APIGateway: update_rest_api() now supports `/endpointConfiguration/types`
    * Autoscaling: update_auto_scaling_group() now supports the MixedInstancesPolicy-parameter
    * Batch: register_job_definition() now supports the eksProperties-parameter
    * DMS: create_replication_task() now supports the Tags-parameter
    * Organizations: list_policies() now support pagination
    * Organizations now supports Resource Control Policy
    * Redshift: describe_clusters() now supports the TagKeys-parameter
    * Logs: put_subscription_filter() now supports other LogGroups

Docker Digest for 5.1.19: sha256:1bba01d147a15d14a5816b69ee6d346ba04bd43baab4a3a27a55c368ecc2bb90

General:
    * Removed support for ElasticTranscoder, now that AWS has also deprecated this service

New Methods:
    * ACM-PCA:
        * revoke_certificate()

    * DSQL:
        * delete_cluster()
        * get_vpc_endpoint_service_name()
        * list_tags_for_resource()

    * FSX:
        * describe_backups()

    * SESv2:
        * list_tags_for_resource()
        * tag_resource()
        * untag_resource()

    * VPC Lattice:
        * delete_auth_policy()
        * delete_resource_policy()
        * get_auth_policy()
        * get_resource_policy()
        * put_auth_policy()
        * put_resource_policy()

Miscellaneous:
    * DynamoDB: put_item() now correctly validates numeric and boolean values
    * EC2: describe_instances() now returns the correct status for BlockDeviceMappings.Ebs.Status (attached, instead of in-use)
    * EC2: describe_network_acls() now supports the 'association.association-id' Filter
    * ELBv2: modify_load_balancer_attributes() no longer fails when modifying the 'health_check_logs.s3.enabled' attribute
    * ResourceGroupsTaggingAPI: get_resources() now supports the SESv2 resources: ConfigurationSets, ContactLists, DedicatedIpPool, EmailIdentity
    * Route53: change_tags_for_resource() no longer throws an error for removing a non-existing tag
    * S3: list_object_versions() now correctly calculates the IsLatest-attribute
    * Scheduler: list_schedules() and list_schedule_groups() now support pagination
    * SecretsManager: batch_get_secret_value() now returns error handling for unknown secrets
    * SSM: put_parameter() now returns the Tier-attribute

Docker Digest for 5.1.18: sha256:c99ea4ab0881e1d95af5601c2cd42ef4dac15eefdf6597532c59d9631068818a

General:
    * Introduces two methods for enabling and disabling IAM authentication:
        from moto.core import disable_iam_authentication, enable_iam_authentication
      They behave the same as the `@set_initial_no_auth_action_count`-decorator, but can be used as a fixture/context manager

New Services:
    * Pipes:
        * create_pipe()
        * delete_pipe()
        * describe_pipe()
        * list_pipes()
        * tag_resource()
        * untag_resource()

New Methods:
    * S3Control:
        * list_tags_for_resource()
        * tag_resource()
        * untag_resource()

    * S3Vectors:
        * delete_vector_bucket_policy()
        * delete_vectors()
        * get_vector_bucket_policy()
        * get_vectors()
        * list_vectors()
        * put_vector_bucket_policy()
        * put_vectors()

Miscellaneous:
    * APIGateway: put_rest_api() now correctly creates integrations
    * AutoScaling: create_auto_scaling_group() now correctly calculates the InstancesDistribution for MixedInstancesPolicies
    * ResourceGroupsTaggingAPI: get_resources() now supports filtering by `sqs:queue`
    * SecretsManager: put_secret_value() now adds the AWSCURRENT-label if it's the first version of the Secret being added

Docker Digest for 5.1.17: sha256:0361ac8f0cc6687dcf3835da1d60e31cf457fb0d49229d56586f2aa5c510f170

General:
    * The MotoServer dashboard (available on http://localhost:5000/moto-api) now has an new and improved look, making it easier to search for and find your resources

New Methods:
    * CloudFront:
        * tag_resource()
        * untag_resource()

    * DMS:
        * create_replication_subnet_group()
        * describe_connection()
        * describe_replication_subnet_group()
        * delete_endpoint()
        * delete_replication_instance()
        * delete_replication_subnet_group()
        * test_endpoint()

    * EC2:
        * describe_reserved_instances_offerings()

    * RDS:
        * add_role_to_db_cluster()
        * add_role_to_db_instance()

    * S3Vectors:
        * create_index()
        * delete_index()
        * get_index()
        * list_indexes()

    * ServiceCatalog:
        * create_product()
        * describe_product()
        * delete_product()

Miscellaneous:
    * ACM-PCA: get_certificate() now returns the CertificateChain-attribute, if appropriate
    * DMS: Manual control of the State Transition is now available for the `dms:connection` and `dms:replicationinstance` models.
    * Organizations: describe_account() now returns the State-attribute.
    * ResourceGroupsTaggingAPI: get_resources() now supports all Comprehend models
    * StepFunctions: create_execution() now takes the execution input into account when checking idempotency.

Docker Digest for 5.1.16: sha256:f78c8e0370cabe2516395f351fb27e1df1aa6dc2d728d6de16d5dfbc9ccf595d

General:
    * Removed support for the RoboMaker and QLDB, now that AWS has also deprecated these services

New Services:
    * S3Vectors:
        * create_vector_bucket()
        * delete_vector_bucket()
        * get_vector_bucket()
        * list_vector_buckets()

New Methods:
    * Glue:
        * create_security_configuration()
        * delete_security_configuration()
        * get_security_configuration()
        * get_security_configurations()

    * FSx:
        * create_backup()
        * delete_backup()
        * list_tags_for_resource()

    * VPCLattice:
        * get_service()
        * get_service_network()
        * list_services()
        * list_service_networks()
        * list_tags_for_resource()
        * tag_resource()
        * untag_resource()

Miscellaneous:
    * ACM: list_certificates() now supports the 'keyTypes'-filter
    * APIGateway: get_stage() now supports stages that are URL encoded, like '$default'
    * DynamoDB now supports the WarmThroughput parameter on Tables and Indexes
    * DynamoDB: execute_statement() now supports querying indexes (both GSI and LSI)
    * EC2: create_volume() now supports the MultiAttachEnabled-parameter
    * EC2: modify_volume() now supports the parameters Iops, Throughput and MultiAttachEnabled
    * ElastiCache: create_cache_cluster() now validates that the mandatory parameter CacheNodeType is provided
    * ELBv2: describe_listener_certificates() now returns the IsDefault-field
    * Glue: create_connection() now supports the parameters ConnectionProperties, SparkProperties, AthenaProperties and PythonProperties
    * ResourceGroupsTaggingAPI: get_resources() now supports FSx resource types (Backups and FileSystems)
    * ResourceGroupsTaggingAPI: get_resources() now supports VPCLattice resource types (Services and Service Networks)
    * ResourceGroupsTaggingAPI: untag_resources() now supports RDS resource types
    * S3: put_object_tagging() now throws MethodNotAllowed when trying to tag a DeleteMarker
    * SSM: get_parameters_by_path() now validates that the maxResults-parameter is 10 at most

Docker Digest for 5.1.15: sha256:8860b18917e1ee4d067df19a406ae95dc26037e6965d5b499e1cffd33755b914

General:
    * Python 3.14 is now officially supported

New Methods:
    * IdentityStore:
        * get_user_id()

    * SESv2:
        * delete_email_identity()

    * VPCLattice:
        * create_access_log_subscription()
        * delete_access_log_subscription()
        * get_access_log_subscription()
        * list_access_log_subscriptions()
        * update_access_log_subscription()

Miscellaneous:
    * ACM: request_certificate() now supports the Option-parameter
    * ACM: list_certificates() now supports the Includes-parameter, supporting Exportable Public Certificates
    * APIGatewayV2: get_domain_name() now returns the DomainNameArn-attribute
    * Athena: Executions can now be delayed using state transitions
    * CloudFormation: validate_template() now supports short function refs (!Sub)
    * Config: Now supports "AWS::SNS::Topic"-resources
    * EC2: create_subnet() now supports the Ipv6Native-parameter
    * EC2: create_transit_gateway_vpc_attachment() now validates that the TransitGateway exists
    * EC2: create_transit_gateway_vpc_attachment() now validates that no other attachment to this VPC exists
    * EC2: create_transit_gateway_vpc_attachment() now automatically adds the attachment to the default RouteTable
    * EC2: create_transit_gateway_vpc_attachment() now correctly creates multiple attachments if called twice (for different VPC's)
    * EC2: create_vpn_connection() now validates that only one of [VPNGateway|TransitGateway] is provided
    * EC2: create_vpn_connection() now validates that the provided CustomerGateway and TransitGateway exists
    * EC2: create/modify/describe_vpc_endpoint_service_configuration now supports the SupportedRegions-param
    * EC2: describe_transit_gateway_attachments() now returns the correct RouteTableID
    * EC2: describe_vpc_endpoints() now supports the 'vpc-endpoint-state'-filter
    * Lambda: list_layer_versions() now returns the layers in the correct order - latest version first.
    * ResourceGroupsTaggingAPI: get_resources() now supports SSM Parameters
    * ResourceGroupsTaggingAPI: get_resources() now supports the 'kms:key' type
    * SESv2: send_email() can now use an email registered by `create_email_identity()`, instead of having the SESv1:verify_domain_identity()-method

Docker Digest for 5.1.14: sha256:800719627036dc38dc699e9f314f624f2c98ac3d8bb754db078cb2698f08ee77

New Services:
    * CloudWatch-Synthetics:
        * create_canary()
        * get_canary()
        * describe_canaries()
        * list_tags_for_resource()

    * MediaPackageV2:
        * create_channel()
        * create_channel_group()
        * delete_channel()
        * delete_channel_group()
        * get_channel()
        * get_channel_group()
        * list_channel_groups()

    * VPCLattice:
        * create_service()
        * create_service_network()
        * create_service_network_vpc_association()
        * create_rule()

New Methods:
    * Kinesis:
        * describe_limits()

    * Macie2:
        * disassociate_member()
        * enable_organization_admin_account()
        * list_organization_admin_accounts()

    * SecurityHub:
        * describe_hub()
        * disable_security_hub()
        * enable_security_hub()

    * ServiceHub-AppRegistry:
        * get_configuration()
        * put_configuration()

Miscellaneous:
    * IOTData: update_thing_shadow() now supports state=None
    * ResourceGroupsTaggingAPI: list_tags_for_resource() now returns ARN's for Athena resources, instead of names
    * ResourceGroupsTaggingAPI: list_tags_for_resource() now supports Kinesis Firehose resources
    * S3: put_object() now stores the correct (actual) content when using the Java SDK, and no longer include the checksum headers in the body
    * Shield: create_protection() now only allows ARN's of Elastic IP Addresses, instead of all EC2 resources

Docker Digest for 5.1.13: sha256:0503bdc569e122966fc5fceef43d4a9562ed21e4091cf865801dba90cbb62ea5

New Services:
    * Macie2:
        * accept_invitation()
        * create_invitations()
        * decline_invitations()
        * delete_member()
        * disable_macie()
        * enable_macie()
        * get_administrator_account()
        * get_macie_session()
        * list_invitations()
        * list_members()

New Methods:
    * Athena:
        * list_capacity_reservation()
        * update_capacity_reservation()

Miscellaneous:
    * CloudWatch: get_metric_data() now supports the ReturnData-parameter again (broken in 5.1.12)
    * CognitoIDP: admin_respond_to_auth_challenge() now returns the scope=aws.cognito.signin.user.admin in the AccessToken
    * ELB: modify_load_balancer_attributes() now supports the `secondary_ips.auto_assigned.per_subnet` attribute
    * IAM: get_server_certificate() now returns the CertificateChain-parameter
    * S3: put_bucket_lifecycle_configuration() now correctly processes a LifeCycleConfiguration with 0 Rules
    * SNS: publish_batch() now returns the original MessageAttributes provided by the user again (broken in 5.1.12)

Docker Digest for 5.1.12: sha256:e1cf8b624019e6eba25cb5b37efdf95a463fc24691978540a1c7008b7d02fda0

General:
    * Removed support for OpsWorks, now that AWS has also deprecated this service.
      https://docs.aws.amazon.com/opsworks/latest/userguide/stacks-eol-faqs.html

New Methods:
    * Glue:
        * batch_get_workflows()
        * create_workflow()
        * delete_workflow()
        * get_workflow()
        * get_workflow_run()
        * get_workflow_runs()
        * get_workflow_run_properties()
        * list_workflows()
        * put_workflow_run_properties()
        * start_workflow_run()
        * stop_workflow_run()
        * update_workflow()

    * IOT:
        * add_thing_to_billing_group()
        * create_billing_group()
        * delete_billing_group()
        * describe_billing_group()
        * list_billing_groups()
        * list_things_in_billing_group()
        * remove_thing_from_billing_group()
        * update_billing_group()

    * SES:
        * clone_receipt_rule_set()

    * SSM:
        * create_data_source()
        * deregister_patch_baseline_for_patch_group()
        * delete_data_source()
        * describe_data_source()
        * get_patch_baseline_for_patch_group()
        * list_data_sources()
        * list_tags_for_resource()
        * register_patch_baseline_for_patch_group()
        * update_data_source()
        * tag_resource()
        * untag_resource()

Miscellaneous:
    * EC2: describe_network_interfaces() now returns the attributes PublicIP, PublicDNSName and IpOwnerId
    * IOT: search_index() now supports logical expression handling in the queryString-parameter, with NOT, AND, OR and parentheses for complex queries
    * IOT: search_index() now supports thingGroupNames in the queryString-parameter
    * ResourceGroupsTaggingAPI: list_tags_for_resource() now supports QuickSight resources
    * ResourceGroupsTaggingAPI: tag_resource() now supports QuickSight resources
    * ResourceGroupsTaggingAPI: untag_resource() now supports QuickSight resources
    * SES: create_receipt_rule() now contains additional validation around the RuleSetName and the provided rule-actions
    * SES: create_receipt_rule() now supports the After-parameter
    * STS: assume_role() now validates that the length of the roleSessionName-parameter is max 64 characters long
    * QuickSight: create_data_set() now supports the Tags-parameter

Docker Digest for 5.1.11: sha256:8ca337023ebaa5c0b8b33503b178d4db3326fca184551d6f47b07b8dd8532644

New Methods:
    * Athena:
        * list_tags_for_resource()

    * Comprehend:
        * delete_resource_policy()
        * describe_document_classification_job()
        * describe_dominant_language_detection_job()
        * describe_entities_detection_job()
        * describe_events_detection_job()
        * describe_key_phrases_detection_job()
        * describe_pii_entities_detection_job()
        * describe_resource_policy()
        * describe_sentiment_detection_job()
        * describe_targeted_sentiment_detection_job()
        * describe_topics_detection_job()
        * list_document_classification_jobs()
        * list_dominant_language_detection_jobs()
        * list_entities_detection_jobs()
        * list_events_detection_jobs()
        * list_key_phrases_detection_jobs()
        * list_pii_entities_detection_jobs()
        * list_sentiment_detection_jobs()
        * list_targeted_sentiment_detection_jobs()
        * list_topics_detection_jobs()
        * put_resource_policy()
        * start_document_classification_job()
        * start_dominant_language_detection_job()
        * start_entities_detection_job()
        * start_events_detection_job()
        * start_key_phrases_detection_job()
        * start_pii_entities_detection_job()
        * start_sentiment_detection_job()
        * start_targeted_sentiment_detection_job()
        * start_topics_detection_job()
        * stop_dominant_language_detection_job()
        * stop_entities_detection_job()
        * stop_events_detection_job()
        * stop_key_phrases_detection_job()
        * stop_pii_entities_detection_job()
        * stop_sentiment_detection_job()
        * stop_targeted_sentiment_detection_job()

    * ElasticSearch:
        * describe_elasticsearch_domain_config()

    * Redshift:
        * describe_cluster_parameters()
        * describe_default_cluster_parameters()

    * S3Control:
        * list_access_points()

Miscellaneous:
    * DMS: describe_replication_tasks() now correctly supports the `Filters`-parameter
    * EC2: create_security_group() now returns the SecurityGroupArn-attribute
    * EC2: describe_network_interfaces() now returns the `RequesterId` and `RequesterManaged`-attributes
    * ECR: create_repository() now supports the imageTagMutabilityExclusionFilters-parameter
    * ECR: create_repository() now enforces the imageTagMutability-parameter
    * ECS: start_task() now supports the `group`-parameter
    * ECS: run_task() now supports the `group`-parameter
    * ElastiCache: create_user() now supports the `Tags`-parameter
    * ELBv2: ARNs are now unique for Listeners/LoadBalancers/TargetGroups
    * ELBv2: create_rule() now assigns a default Weight of 1, if not specified
    * ELBv2: create_target_group() now only returns the HealthCheckPort if the target is not 'lambda'
    * ELBv2: describe_load_balancer_attributes() now correctly returns an empty string for `access_logs.s3`-attributes
    * EMR: describe_cluster() now returns the correct Cluster.MasterPublicDnsName-attribute (if applicable)
    * EMR: run_job_flow() now supports the parameters `EbsRootVolumeSize`, `EbsRootVolumeIops` and `EbsRootVolumeThroughput`
    * Glue: start_job_run() now no longer returns mock-values for the parameters: `Arguments`, `NotificationProperty`, `SecurityConfiguration`, `Timeout` and `PreviousRunId`
    * MediaPackage: create_origin_endpoint() now supports the `WhiteList` and `TimeDelaySeconds`-parameters
    * ResourceGroupsTaggingAPI: get_resources() now supports Athena's CapacityReservations, Workgroups and DataCatalog resources
    * S3: complete_multipart_upload() now respects the IfNoneMatch-parameter for objects created by MultiPart-uploads
    * S3Control: get_storage_lens_configuration() now returns the `AccountLevel` and `StorageLensArn`-attributes
    * SecretsManager: create_secret() now supports the `ClientRequestToken`-parameter
    * SecretsManager: put_secret_value() now supports the `ClientRequestToken`-parameter
    * SecretsManager: update_secret() now supports the `ClientRequestToken`-parameter

Docker Digest for 5.1.10: sha256:c8d59f06ef51ed29ba1a6d008785e9538f0c32f636c2d77bb188b73dd21d8832

New Methods:
    * Glue:
        * delete_dev_endpoint()
        * list_crawls()

    * ElastiCache:
        * delete_replication_group()

    * EKS:
        * update_cluster_config()

    * ResourceGroupsTaggingAPI:
        * untag_resources() (Currently only supports Lambda and EFS resources)

    * S3Control:
        * get_storage_lens_configuration_tagging()
        * put_storage_lens_configuration_tagging()


Miscellaneous:
    * Batch: list_jobs() now supports filters with an asterisk
    * Batch: list_jobs() now ignores jobStatus when the filters parameter is provided, in parity with AWS
    * Batch: submit_job() now supports the tags-parameter
    * CloudFormation: describe_stack_resources() now supports the LogicalResourceId-parameter
    * EC2: describe_images() now returns the CreationDate-attribute in the correct format (RFC3339) (broken in 5.1.9)
    * EC2: describe_managed_prefix_lists() now no longer returns a StateMessage, in parity with AWS
    * EC2: describe_managed_prefix_lists() now returns 'AWS' in upper case for the OwnerId
    * EC2: modify_vpc_endpoint() now supports the parameters AddSecurityGroupId, RemoveSecurityGroupId and RemoveSubnetId
    * ELBv2: describe_load_balancers() now returns the CanonicalHostedZoneId again (broken in 5.1.9)
    * Events: put_targets() now supports StepFunctions
    * RDS: create_blue_green_deployment() now works correctly when ManageMasterUserPassword has been updated to False
    * RDS: create_database() now supports the DomainMembership parameters (Domain/DomainFqdn/DomainOu/DomainAuthSecretArn/DomainDnsIps)
    * ResourceGroupsTaggingAPI: get_resources() now supports DirectConnect resources
    * ResourceGroupsTaggingAPI: tag_resources() now supports Lambda and EFS resources
    * SES: describe_receipt_rule_set() now returns the Metadata.CreatedTimestamp field (broken in 5.1.9)
    * SQS: The max message size has been updated to 1MB, from 256KB (AWS updated this a week ago).
    * SQS: send_message() now no longer throws an error when supplying the MessageGroupId-parameter against a regular (non-FIFO) queues

Docker Digest for 5.1.9: sha256:1fae2f297efbd05522835fec12c20ae88cb4734e1c4c2b9297ddc3063858dcc4

General:
    * Docker Image is now based on Python 3.13.
      Various improvements have been made to reduce the total image size from 792MB to 523MB.
    * A large number of services have been refactored to streamline the generation of API responses, and to ensure that the format is equivalent to AWS'.
      This should not have any impact - but please let us know if you run into problems.

Miscellaneous:
    * CloudFormation: ChangeSets now no longer throw an error if the change set is created without the UsePreviousTemplate argument
    * CloudFormation: ChangeSets now also look at default parameters, instead of always expecting a parameter to be provided
    * EC2: describe_images() now supports the 'source-instance-id'-filter
    * Logs: describe_destinations() no longer treats the DestinationNamePrefix-parameter as mandatory
    * ResourceGroupsTaggingAPI: get_resources() now supports ECS: TaskDefinition resources
    * S3: Object notifications (to Lambda/SNS/SQS/etc) now send an URL-encoded key name

New Methods:
    * Athena:
        * create_capacity_reservation()
        * get_capacity_reservation()

    * ElastiCache:
        * create_replication_group()
        * describe_replication_groups()

    * EMR:
        * list_release_labels()
        * list_supported_instance_types()

    * RDS:
        * create_db_shard_group
        * describe_db_cluster_parameters()
        * describe_db_shard_groups()
        * modify_db_cluster_parameter_group()

Docker Digest for 5.1.8: sha256:b5d4a53fc2eefd264b3bfabfc40aa3a883c68c7751d738d490f4e6f2d0191f53

New Methods:

    * Connect-Campaigns:
        * get_campaign_state()
        * list_campaigns()
        * list_tags_for_resource()
        * pause_campaign()
        * resume_campaign()
        * start_campaign()
        * stop_campaign()
        * tag_resource()
        * untag_resource()

    * ECS:
        * delete_task_definitions()

    * ElastiCache:
        * create_cache_subnet_group()
        * describe_cache_subnet_groups()

    * RAM:
        * list_permissions()
        * list_resource_types()

    * RDS:
        * create_blue_green_deployment()
        * delete_blue_green_deployment()
        * describe_blue_green_deployments()
        * switchover_blue_green_deployment()

Miscellaneous:
    * Athena: get_query_execution() now returns some additional attributes: 'ResultReuseConfiguration', 'Status.CompletionDateTime', 'Status.ServicePreProcessingTimeInMillis', 'Status.ResultReuseInformation'
    * DynamoDB: query() now validates that all attributes in the KeyConditionExpression are actually keys
    * DynamoDB: update_item() now validates unused ExpressionAttributeNames/ExpressionAttributeValues
    * EC2: modify_vpc_attribute() now correctly handles the EnableDnsHostnames-attribute
    * ECS: list_task_definitions() now supports the status-parameter
    * ELB: describe_load_balancer_attributes() now returns the AdditionalAttributes-attribute
    * ElastiCache: list_tags_for_resource() now supports SubnetGroups
    * EventBridge: put_events() no longer throws a KeyError: 'time' for targets with a custom InputTemplate that do not specify the time
    * Logs: get_query_results() now returns values as strings, in-line with how AWS behaves
    * NetworkFirewall: describe_logging_configuration() no longer throws an error for LoggingConfigurations without tags
    * RDS: create_db_cluster() now supports the PubliclyAccessible-parameter
    * ResourceGroupTaggingAPI: get_resources() now supports resources from Comprehend: DocumentClassifiers and EntityRecognizers
    * ResourceGroupTaggingAPI: get_resources() now supports resources from ConnectCampaign: Campaigns
    * S3: get_bucket_cors() now returns the ID-attribute for CORS-rules
    * S3: get_object() no longer returns the ContentEncoding=aws-chunked
    * SecretsManager: list_secrets() now supports filtering by tags/description/owning-service for ReplicaSecrets
    * ServiceDiscovery: create_public_dns_namespace()/create_private_dns_namespace() now actually creates a HostedZone in Route53
    * SES: describe_configuration_set() now supports ConfigurationSetAttributeNames=["eventDestinations"] (other names are not yet supported)
    * SSM: describe_parameters() now correctly returns tag-updates from add_tags_to_resource() and remove_tags_from_resource()

Docker Digest for 5.1.6: sha256:0afd091e9d26ba1660ad54708ff1e853ffa1f437f057c91163b47d35155a852b

New Methods:
    * Athena:
        * get_query_statistics()

    * AppSync:
        * create_api()
        * create_channel_namespace()
        * delete_api()
        * delete_channel_namespace()
        * get_api()
        * list_apis()
        * list_channel_namespaces()

    * CloudDirectory:
        * apply_schema()
        * create_schema()
        * delete_schema()
        * list_development_schema_arns()
        * list_published_schema_arns()
        * publish_schema()

    * DirectConnect:
        * describe_tags()
        * tag_resource()
        * untag_resource()

    * EC2:
        * modify_security_group_rules()

    * Glue:
        * delete_resource_policy()

    * SecurityHub:
        * describe_organization_configuration()
        * enable_organization_admin_account()
        * get_administrator_account()
        * update_organization_configuration()

    * StepFunctions:
        * create_activity()
        * delete_activity()
        * describe_activity()
        * list_activities()

Miscellaneous:
    * CodeDeploy: get_deployment_group() now returns the deploymentGroupId-attribute
    * CognitoIDP: create_user_pool_client() now supports MOTO_COGNITO_IDP_USER_POOL_CLIENT_ID_STRATEGY=HASH to ensure predictable identifiers
    * Lambda: EventSourceMappings for FIFO queues now support custom batch sizes
    * Lambda: EventSourceMappings now support tagging
    * NetworkFirewall: describe_firewall() now returns the UpdateToken-parameter
    * OpenSearch: get_compatible_versions() now longer requires the DomainName-parameter
    * OpenSearch: describe_domain_config() now actually works (used to be completely broken)
    * Route53: change_tags_for_resource(): Validate ZoneId parameter
    * SNS: Now allows sending messages from standard topics to FIFO queues

Docker Digest for 5.1.5: sha256:b9dbd12d211c88e5799d023db15ec809bca4cc6df93a8aa78f26ccbfb073d18a

New Services:
    * Connect Campaign:
        * create_campaign()
        * delete_campaign()
        * describe_campaign()
        * get_connect_instance_config()
        * start_instance_onboarding_job()

    * CloudDirectory:
        * create_directory()
        * delete_directory()
        * get_directory()
        * list_directories()
        * list_tags_for_resource()
        * tag_resource()
        * untag_resource()

    * Network Firewall:
        * create_firewall()
        * describe_firewall()
        * describe_logging_configuration()
        * list_firewalls()
        * update_logging_configuration()

    * ServiceCatalog-AppRegistry:
        * associate_resource()
        * create_application()
        * list_applications()
        * list_associated_resources()

New Methods:
    * ACM PCA:
        * list_certificate_authorities()

    * CloudWatch:
        * delete_insight_rules()
        * describe_insight_rules()
        * disable_insight_rules()
        * enable_insight_rules()
        * put_insight_rule()

    * CodeDeploy:
        * list_tags_for_resource()
        * tag_resource()
        * untag_resource()

    * Comprehend:
        * create_document_classifier()
        * create_endpoint()
        * create_flywheel()
        * describe_document_classifier()
        * describe_endpoint()
        * describe_flywheel()
        * delete_document_classifier()
        * delete_endpoint()
        * delete_flywheel()
        * list_document_classifiers()
        * list_endpoints()
        * list_flywheels()
        * start_flywheel_iteration()
        * stop_training_document_classifier()
        * update_endpoint()

    * Config:
        * delete_resource_config()
        * put_resource_config()
        * select_resource_config()

    * DMS:
        * create_endpoint()
        * describe_endpoints()
        * list_tags_for_resource()

    * EC2:
        * modify_instance_metadata_options()

    * Glue:
        * get_resource_policy()
        * put_resource_policy()

    * RAM:
        * get_resource_share_associations()

    * S3:
        * get_bucket_inventory_configuration()
        * get_storage_lens_configuration()
        * list_bucket_inventory_configuration()
        * list_storage_lens_configurations()
        * put_bucket_inventory_configurations()
        * put_storage_lens_configuration()

    * Timestream InfluxDB:
        * create_db_cluster()
        * create_db_parameter_group()
        * get_db_cluster()
        * get_db_parameter_group()
        * list_db_clusters()
        * list_db_parameter_groups()

Miscellaneous:
    * ACMPCA: All SAN's are now passed through from the CSR to the certificate
    * APIGateway: delete_api_key()/update_api_key() now throw a ApiKeyNotFoundException (instead of a KeyError)
    * AppSync: create_graphql_api() now supports the tags-parameter
    * CloudFront: create_distribution() now correctly handles the CloudFrontDefaultCertificate-parameter
    * CodeDeploy: create_application() now supports the tags-parameter
    * CodeDeploy: create_deployment_group() now supports the tags-parameter
    * EC2: describe_instance_status() now correctly handles multiple filters and scenarios where both filters and InstanceIds are supplied
    * EC2: disassociate_iam_instance_profile() now actually removes the IAMInstanceProfile from the Instances
    * EC2: run_instances() now throws an error if now default Subnet is available and no SubnetId is supplied
    * EventBridge: describe_event_bus() now returns additional fields (CreationTime, LastModifiedTime, DeadLetterConfig, Description, KmsKeyIdentifier)
    * IOTData: update_thing_shadow() now correctly handles empty dicts
    * Neptune: create_db_instance() now supports the Neptune-engine
    * Organizations: create_policy() now supports TYPE=TAG_POLICY
    * ResourceGroups: delete_group()/get_group() now support ARNs as the GroupName-parameter
    * ResourceGroupsTaggingApi: get_resources now supports CloudWatch Alarms and InsightRules
    * S3: Calls now return Content-Type=application/xml headers where appropriate
    * S3: put_object() - IfMatch is now supported
    * SageMaker: create_endpoint_config() now supports the AsyncInferenceConfig-parameter
    * SageMaker: describe_transform_job() now returns the Arn-attribute
    * SQS: receive_message() now supports the MessageSystemAttributeNames-parameter
    * Textract: start_document_text_detection() now supports the NotificationChannel-parameter and integrates with SNS

Docker Digest for 5.1.4: sha256:32d7805d8bd4c81db789c4fff2c36f96a8837cbd8e7a3853116b6516b9490dde

New Services:
    * CodeDeploy:
        * batch_get_applications()
        * batch_get_deployments()
        * create_application()
        * create_deployment()
        * create_deployment_group()
        * get_application()
        * get_deployment()
        * get_deployment_group()
        * list_applications()
        * list_deployments()
        * list_deployment_groups()

New Methods:
    * ACM:
        * get_account_configuration()
        * put_account_configuration()

    * ACM PCA:
        * get_policy()
        * delete_policy()
        * put_policy()

    * EC2:
        * create_default_subnet()

    * Glue:
        * get_job_runs()

    * Route53 Resolver:
        * associate_resolver_query_log_config()
        * create_resolver_query_log_config()
        * get_resolver_query_log_config()

    * SES:
        * create_email_identity_policy()
        * delete_email_identity_policy()
        * get_email_identity_policies()
        * get_identity_dkim_attributes()
        * update_configuration_set_reputation_metrics_enabled()
        * update_email_identity_policy()

    * Textract:
        * get_document_analysis()
        * start_document_analysis()

    * WAFv2:
        * create_regex_pattern_set()
        * delete_regex_pattern_set()
        * get_regex_pattern_set()
        * list_regex_pattern_sets()
        * update_regex_pattern_set()


Miscellaneous:
    * If IAM validation is enabled, Moto now also validates the principal and ExternalId for assumed roles
    * ACM: describe_certificate() now return status=Expired if appropriate
    * ACM: describe_certificate() now always set status=Issued if the issuer=Amazon
    * ACM PCA: get_certificate_authority_certificate() now returns the CertificateChain in the correct format
    * Batch: create_compute_environment() now supports adding the instanceRole using the role name only, instead of the full ARN
    * Batch: create_job_queue() now supports adding the computeEnvironment using just the name, instead of the full ARN
    * CloudFormation: update_stack() now allows removal of resources in any order, regardless of dependencies
    * CloudFront now supports additional ViewerCertificate fields (IAMCertificateId, ACMCertificateARN, SSLSupportMethod)
    * CloudFront now supports TrustedSigners in the DefaultCacheBehaviour
    * CognitoIdentity: get_id() now supports identity pools in non-standard regions when using the CLI
    * EC2: create_fleet() now propagates instance-tags of type=instant
    * EC2: describe_security_group_rules() now correctly filters by group-id and tags
    * EC2: delete_vpc() now validates that all Subnets are deleted first
    * ECS: The pendingTasksCount and runningTasksCount-properties of a cluster are now updated accordingly when creating/updating services
    * ResourceGroupsTaggingAPI: get_resources() now supports KinesisAnalyticsV2' Applications
    * RDS: Identifiers of all resources are now case-insensitive
    * RDS: stop_db_instance() now creates a snapshot of type=manual, instead of automatic
    * S3: get_bucket_replication() now returns Destination.Account for cross-account replication
    * S3: get_object() can now retrieve objects in GLACIER_IR; support for EXPRESS_ONEZONE
    * SES, SESv2: list_configuration_sets() now supports pagination
    * SecretsManager: list_secrets() now supports the owning-service filter

Docker Digest for 5.1.3: sha256:c96adff67d2bf82c3a61a6f1155db5300be44d82a9403919a6ff994d0e5438b7

New Methods:
    * DMS:
        * create_replication_instance()
        * describe_replication_instances()

    * Service Catalog:
        * describe_portfolio()

Miscellaneous:
    * ACM: request_certificate() now correctly handles IPv4-addresses
    * DynamoDB: update_item(): Fixed a bug where the PathOverlap-exception was thrown erroneously
    * EC2: Improved the behaviour of SecurityGroupRules with multiple IP ranges
    * MediaConnect: create_flow() now supports the Maintenance-parameter
    * RDS: Managed Secrets are now actually created in Secrets Manager
    * S3: delete_objects(): The BypassGovernanceMode-parameter is now compatible with botocore==1.27.25
    * SNS: SMS messages are now exposed via the Moto API

Docker Digest for 5.1.2: sha256:3144ffd311b381594efde7ed4a41fb8fe2d66829ae5f3bf493f93f2ca1a8c82b

* New Services:
    * KinesisAnalyticsV2:
        * create_application()
        * describe_application()
        * list_applications()
        * list_tags_for_resource()
        * tag_resource()

    * Service Catalog:
        * create_portfolio()
        * create_portfolio_share()
        * delete_portfolio()
        * delete_portfolio_share()
        * describe_portfolio_shares()
        * list_portfolio_access()
        * list_portfolios()

* New Methods:
    * DirectoryServices:
        * create_log_subscription()
        * delete_log_subscription()
        * list_log_subscriptions()

    * EC2:
        * modify_launch_template()

    * Glue:
        * get_data_catalog_encryption_settings()
        * put_data_catalog_encryption_settings()

    * Lambda:
        * add_layer_version_permission()
        * get_layer_version_policy()
        * remove_layer_version_permission()

    * RDS:
        * copy_db_parameter_group()

    * SESv2:
        * create_email_identity()
        * get_email_identity()
        * list_email_identities()

    * QuickSight:
        * create_dashboard()
        * describe_account_settings()
        * describe_dashboard()
        * list_dashboards()
        * update_account_settings()
        * update_public_sharing_settings()

* Miscellaneous:
    * ApplicationAutoscaling: register_scalable_target() now returns the ScalableTargetARN-attribute
    * Autoscaling: create_auto_scaling_group() now supports the LaunchTemplate-parameter
    * DynamoDB: Add validation around attribute name use checks
    * DynamoDB: Add path overlap checks for all updates
    * ECS: create_service() now supports the role-parameter
    * ECR: describe_image_scan_findings() now allows the configuration of custom results
    * EKS: create_cluster() now supports the RemoteNetworkConfig-parameter
    * ElastiCache: create_cache_cluster() now supports parameters AutoMinorVersionUpgrade and TransitEncryptionEnabled
    * NetworkManager: list_core_networks() now returns the OwnerAccountId-attribute
    * ResourceGroupTaggingAPI: get_resources() now supports AppSync's GraphQL-API resources
    * ResourceGroupTaggingAPI: get_resources() now supports CloudFront's Distribution resources
    * RDS: create_db_cluster() now supports the AutoMinorVersionUpgrade-parameter
    * S3: get_object()/head_object() now return the 'x-amz-checksum-' header when appropriate
    * TimestreamWrite: list_tables() no longer requires the DatabaseName-parameter
    * WAF: Resources in CloudFront scope now use the us-east-1 region in the ARN, instead of 'global'

Docker Digest for 5.1.1: sha256:a4c04c53a892ad81741a2e006b85d0f98eab42ad988efb360429cb4ba6818323

* General:
    * Compatible with the new Account-based endpoint for DynamoDB (see https://github.com/boto/boto3/issues/4449)
    * Removed dependency on typing_extensions (introduced in 5.1.0)

* New Methods:
    * CognitoIDP:
        * delete_identity_pool()

    * Glue:
        * create_connection()
        * get_connection()
        * get_connections()

    * GuardDuty:
        * get_administrator_account()

* Miscellaneous:
    * ResourceGroupsTaggingAPI: get_resources() now supports EventBusses
    * RDS: create_db_instance() now throws an error when referencing a non-existent DBCluster

Docker Digest for 5.1.0: sha256:aaf5f4a72412b753b2115417e26360612564d3a29b1831f9316708e15138d699

* General:
    * Dropped support for Python 3.8

* New Services:
    * Lex V2 Models:
        * create_bot()
        * create_bot_alias()
        * create_resource_policy()
        * delete_bot()
        * delete_bot_alias()
        * delete_resource_policy()
        * describe_bot()
        * describe_bot_alias()
        * describe_resource_policy()
        * list_bots()
        * list_bot_aliases()
        * list_tags_for_resource()
        * tag_resource()
        * update_bot()
        * update_bot_alias()
        * update_resource_policy()
        * untag_resource()

    * CloudHSM V2:
        * create_cluster()
        * delete_cluster()
        * describe_backups()
        * describe_clusters()
        * get_resource_policy()
        * list_tags()
        * put_resource_policy()
        * tag_resource()
        * untag_resource()

* New Methods:
    * ElasticSearch:
        * add_tags()
        * list_tags()
        * remove_tags()

    * RDS:
        * describe_events()
        * describe_db_log_files()
        * failover_db_cluster()
        * restore_db_cluster_to_point_in_time()

    * SecurityHub:
        * batch_import_findings()
        * get_findings()

    * TimeStream InfluxDB:
        * create_db_instance()
        * delete_db_instance()
        * get_db_instance()
        * list_db_instances()
        * list_tags_for_resource()
        * tag_resource()
        * untag_resource()

* Miscellaneous:
    * CognitoIDP: AccessTokens and IDTokens now contain the jti and origin_jti values
    * DynamoDB: query()/scan() now handle pagination for GSI's correctly
    * EC2: The DisableApiStop-attribute is now propagated properly and respected
    * EC2: create_volume() now throws an error if the Size-parameter is not provided
    * EC2: describe_subnets() now correctly handles a Filter without a Value
    * ELBv2: create_listener() now validates the provided protocol against the LoadBalancer type
    * ECS: run_task() now contains the Container-info in the response
    * KMS: create_key() now supports the Origin-parameter
    * Lambda: EventSourceMappings now support all parameters
    * Lambda: list_functions() now works with the JS SDK
    * Lambda: Choosing the image repository is now deterministic - first a custom source, then mlupin, lambci last
    * RDS: Too many improvements to list, with many more supported features and bugfixes

Docker Digest for 5.0.28: sha256:d3532929e4c498334949a014e9f0af6617ec1e89d92be690cd192fa3354ad7e6

* General:
    * Bootstrapping a CDK project is now supported

* New Services:
    * S3 Tables:
        * create_namespace()
        * create_table()
        * create_table_bucket()
        * delete_namespace()
        * delete_table()
        * delete_table_bucket()
        * get_metadata_location()
        * get_table()
        * get_table_bucket()
        * list_namespaces()
        * list_table_buckets()
        * list_tables()
        * rename_table()
        * update_metadata_location()

* Miscellaneous:
    * DynamoDB: delete_item() now returns ConsumedCapacity
    * DynamoDB: transact_write_items() now returns a ReturnValuesOnConditionCheckFailure for all operations
    * ECR: Lifecycle Policies() now support the tagPatternList-parameter
    * S3: get_object() now returns the ETag when returning a 304 (Not Modified)
    * SecretsManager: get_secret_value() no longer throws an error after calling rotate_secret(RotateImmediately=False)
    * SecretsManager: list_secrets() now filters values with special chars correctly
    * Organizations: list_roots() now returns the roots of the parent organization, if called from within a child organization

Docker Digest for 5.0.27: sha256:ac5312f68c6b748b667526025f9e7a8c2e4112837c258eee68f96fa36d9dbbef

New Methods:
    * Glue:
        * create_dev_endpoint()
        * get_dev_endpoint()
        * get_dev_endpoints()

    * KMS:
        * generate_mac()
        * list_key_rotations()
        * rotate_key_on_demand()
        * verify_mac()

    * SES:
        * delete_configuration_set()
        * list_configuration_sets()

    * SESv2:
        * create_configuration_set()
        * create_dedicated_ip_pool()
        * delete_configuration_set()
        * delete_dedicated_ip_pool()
        * get_configuration_set()
        * get_dedicated_ip_pool()
        * list_configuration_sets()
        * list_dedicated_ip_pools()

Miscellaneous:
    * Introduced a new setting for ServerMode, `MOTO_DISABLE_GLOBAL_CORS`. Disabling the global CORS setting makes it possible to test the CORS-policies on S3 buckets
    * ElastiCache: create_user() now supports the AuthenticationMode-parameter
    * ElasticSearch/OpenSearch: list_domain_names() now returns domains from both services
    * Kafka: list_clusters_v2() now returns all parameters
    * Scheduler: The `schedule_expression_timezone` now defaults to UTC
    * RDS: create_db_instance() now throws an exception if an instance with that ID already exists
    * RDS: restore_db_instance_from_db_snapshot() now throws an exception if an instance with that ID already exists

Docker Digest for 5.0.26: sha256:1cae28be97cc87151ecabb531d1507b8dd3d52d3636b86143a16cccf4b5fcf43

New Services:
    * Kinesis:
        * delete_resource_policy()
        * get_resource_policy()
        * put_resource_policy()

Miscellaneous:
    * DynamoDB: transact_write_items() now validates empty ExpressionAttributeValues
    * Logs: describe_log_groups() now returns the logStreamArn-property
    * Organizations now has additional validation around creation and deletion of organizations and accounts
    * SecretsManager: list_secrets() now properly splits words when filtering
    * StepFunctions: describe_state_machine() now takes Version ARN's
    * StepFunctions: describe_state_machine() now returns the versionDescription

Docker Digest for 5.0.25: sha256:1ac2d89ce8c79a6cdfebffb37678a5bd8bb54a39dcbced069f6ac5e29e4cc752

New Services:
    * DSQL:
        * create_cluster()
        * get_cluster()

Miscellaneous:
    * IOTData: update_thing_shadow() now better calculates the delta between the desired and reported values
    * S3: select_object_content() now returns the proper Stats (BytesScanned, BytesReturned)
    * StepFunctions: Various upgrades for the emulated parser

Docker Digest for 5.0.24: sha256:68042b17e9a55c7a32347f802b7a02f2793201b4f1c788ca0e85084f5218c233

Miscellaneous:
    * EC2: Terminating instances will now release private ip addresses from the NIC's attached to the interface
    * S3: Fixes a bug in complete_multipart_upload() where it was no longer possible to overwrite an earlier multipart upload (Broken in 5.0.23)
    * S3: get_object_cors() now correctly returns the ExposeHeader-value

Docker Digest for 5.0.23: sha256:d41e007bb1f7d41b530959ae9cbed1edf42737ee839faf8da7e925bf19f63105

New Services:
    * Kafka:
        * create_cluster()
        * create_cluster_v2()
        * describe_cluster()
        * describe_cluster_v2()
        * delete_cluster()
        * list_clusters()
        * list_clusters_v2()
        * list_tags_for_resource()
        * tag_resource()
        * untag_resource()

New Methods:
    * DirectConnect:
        * associate_mac_sec_key()
        * create_lag()
        * describe_lags()
        * describe_settings()
        * disassociate_mac_sec_key()
        * update_settings()

    * EFS:
        * describe_file_system_policy()
        * put_file_system_policy()

    * ES:
        * describe_elasticsearch_domains()

    * OpenSearch:
        * describe_domains()

Miscellaneous:
    * Athena: list_query_executions() now supports the WorkGroup-parameter
    * Athena: start_query_execution() now supports the WorkGroup-parameter
    * CloudFormation: AWS::IAM::Role now supports updates
    * CognitoIDP: list_users() now correctly filters before applying the Limit
    * DirectConnect: describe_trusts() no longer requires a DirectoryId-parameter
    * DynamoDB: The DeleteProtectionEnabled can now be disabled
    * DynamoDB: update_item() can now return list of binaries
    * EC2: SecurityGroups now contain a SecurityGroupArn
    * EC2: update_route() now correctly handles DestinationPrefixListId
    * KMS: get_public_key() now supports passing in aliases
    * Lambda: publish_function() now publishes a function even if the updated code hasn't changed
    * MemoryDB: tag_resource/list_tags_for_resource() now supports Snapshots and SubnetGroups
    * RDS: copy_db_snapshot() now supports the CopyTags-parameter
    * RDS: copy_db_snapshot() now accepts ARN's as the SourceSnapshotIdentifier
    * RDS: restore_db_instance_from_db_snapshot() now accepts ARN's as the SourceSnapshotIdentifier
    * S3: complete_multipart_upload() now supports IfNoneMatch-parameter

Docker Digest for 5.0.22: sha256:a51561b8b9d94918788cb89799d37a34c4bcdf4669f081014b3a2df6b4fc0a11

Miscellaneous:
    * DS: enable_ldaps() is now supported for 'ADConnector' directory types
    * EC2: Resource identifiers are now 17 characters long, up from 8, in-line with the values that AWS returns
    * ECS: create_service() now supports and validates the networkConfiguration-parameter
    * ELBv2: register_targets() now validates that instances are running
    * IOTData: update_thing_shadow() now properly handles complex nested deltas
    * MediaLive: list_channels() and list_inputs() now support pagination
    * OpenSearch: create_domain() now returns the EngineVersion in the correct format
    * ResourceGroupsTaggingAPI: get_resources() now returns secrets from SecretsManager
    * S3: put_object_acl() now sends an EventBridge-notification
    * SecretsManager: list_secrets() no longer shows deleted secrets unless the `include_planned_deletion`-parameter is set
    * WAFv2: list_ip_sets(), list_logging_configurations(), list_rule_groups(), list_tags_for_resource(), list_web_acls() now all support pagination

Docker Digest for 5.0.21: sha256:9ba3753fddbe2445667a1261a04dc92e75d9c329a1f2d0610f1dd8bb1c4f4eca

New Methods:
    * IOT:
        * create_job_template()
        * create_role_alias()
        * delete_job_template()
        * delete_role_alias()
        * describe_job_template()
        * describe_role_alias()
        * get_indexing_configuration()
        * list_job_templates()
        * list_role_aliases()
        * update_indexing_configuration()
        * update_role_alias()

Miscellaneous:
    * Batch: list_jobs() now supports the arrayJobId-parameter
    * CloudFormation now supports the types AWS::IoT::JobTemplate, AWS::IoT::RoleAlias
    * DynamoDB: ProjectionExpressions are now validated for duplicate values
    * DynamoDB: scan() now supports parallelization using the Segment/TotalSegments parameters
    * DynamoDB: update_item() now validates when an ADD/DELETE occurs on the same set
    * EC2: create_fleet() now correctly handles Overrides with a single value
    * ECR: list_images() now lists images with multiple tags separately
    * IOT: create_job() now supports the parameters abortConfig, jobExecutionsRetryConfig, schedulingConfig, timeoutConfig
    * S3: get_object_attributes() no longer throws an error for Glacier objects

Docker Digest for 5.0.20: sha256:a1041f318c56ed341c70541647b256d40dae776ce654ca4db9d27d94600542a1

Miscellaneous:
    * Removed runtime-dependency on `typing_extensions`

Docker Digest for 5.0.19: sha256:5d857d7ce17a9b1dadea166d8e0d310771983f026334a555a9d2690a370cf904

New Methods:
    * ELBv2:
        * describe_listener_attributes()
        * modify_listener_attributes()

    * Panorama:
        * create_application_instance()
        * describe_application_instance()
        * describe_application_instance_details()
        * list_application_instances()

    * WAFv2:
        * create_rule_group()
        * delete_rule_group()
        * get_rule_group()
        * update_rule_group()

Miscellaneous:
    * CloudFormation now supports the types AWS::IoT::Thing, AWS::IoT::ThingType, AWS::IoT::Policy
    * EC2: Key Pairs now use the correct algorithm to calculate the fingerprint
    * ELBv2: modify_lb_attr() now supports zonal-shift config
    * ECS: create_task_set() now actually creates tasks
    * Lambda: The MOTO_DOCKER_LAMBDA_IMAGE config option now accepts full image names, including the tag
    * Lambda: Events send to DynamoDB now have the correct eventName
    * Organizations: describe_organization() now describes the parent account (if applicable)
    * WAFv2: create_web_acl() now supports additional parameters (AssociationConfig, CaptchaConfig, ChallengeConfig, CustomResponseBodies, TokenDomains)
    * WAFv2: delete_web_acl() now supports the LockToken-parameter
    * WAFv2: update_web_acl() now supports additional parameters (LockToken, AssociationConfig, CaptchaConfig, ChallengeConfig, CustomResponseBodies, TokenDomains)

Docker Digest for 5.0.18: sha256:62423941446f8863f499ebdfd04c1d1743b5afd84c3837799df7ce08ce3bb750

New Methods:
    * RDS:
        * delete_db_proxy()
        * deregister_db_proxy_targets()
        * describe_db_proxy_target_groups()
        * describe_db_proxy_targets()
        * modify_db_proxy_target_group()
        * register_db_proxy_targets()

Miscellaneous:
    * CloudFormation: create_change_set() now supports the UsePreviousTemplate-parameter
    * CognitoIDP: MFA-related features (like AssociateSoftwareToken) now also work with non-Python SDK's
    * ECS: update_service() now correctly sets the createdAt/updatedAt values when forceNewDeployment=True
    * ELBv2: remove_tags() now throws a ResourceNotFound Exception

Docker Digest for 5.0.17: sha256:39372432cb24ab46211ca45648ca787e104589070b0d0a13ea0d73c6eb550079

New Methods:
    * CloudFront:
        * create_key_group()
        * create_public_key()
        * delete_public_key()
        * get_key_group()
        * get_public_key()
        * list_key_groups()
        * list_public_keys()

    * QuickSight:
        * list_user_groups()
        * search_groups()
        * update_user()

    * Workspaces Web:
        * list_tags_for_resource()
        * tag_resource()
        * untag_resource()

Miscellaneous:
    * APIGateway: get_api_keys()/get_usage_plan_keys() now support the nameQuery param
    * AppSync: create_graphql_api() now supports the visibility-parameter
    * DynamoDB: delete_item() now returns the item when a ConditionalCheckFailed is thrown and ReturnValuesOnConditionCheckFailure == ALL_OLD
    * QuickSight: Users can now have special characters in their name
    * QuickSight: list_group_memberships() now supports pagination
    * QuickSight: list_groups() now supports pagination
    * QuickSight: list_users() now supports pagination
    * SageMaker: search() now also supports ModelPackages/Pipelines/Jobs/Executions
    * SecretsManager: delete_secret() now allows force deletion of already marked-for-delete secret
    * StepFunctions: create_state_machine() now supports the parameters encryptionConfiguration, tracingConfiguration, loggingConfiguration

Docker Digest for 5.0.16: sha256:9506ad3448a87082a436533855c61afaf3f1869e73f39f6575917db975569908

New Services:
    * OpenSearch Ingestion Service:
        * create_pipeline()
        * delete_pipeline()
        * get_pipeline()
        * list_pipelines()
        * list_tags_for_resource()
        * start_pipeline()
        * stop_pipeline()
        * tag_resource()
        * untag_resource()
        * update_pipeline()

New Methods:
    * CloudFront:
        * get_invalidation()

    * Directory Service:
        * create_trust()
        * delete_trust()
        * describe_ldaps_settings()
        * describe_trusts()
        * disable_ldaps()
        * enable_ldaps()

    * EC2: 
        * modify_ebs_default_kms_key_id()

Miscellaneous:
    * CloudFormation: AWS::ECS::TaskDefinition now correctly validates the provided memory parameters
    * EC2: create_network_acl_entry() now supports the Ipv6CidrBlock-parameter 
    * EC2: create_tags() now takes existing tags into account before throwing a TagLimitExceeded-exception
    * Firehose: put_record_batch() no longer fails when the SnowflakeDestinationConfiguration-parameter is set
    * FSx: The FileSystemID now uses the same pattern as AWS (fs-xxxxxxxx)
    * GuardDuty: create_detector() now supports the Features-parameter
    * Polly has been updated with the latest voices
    * RDS: modify_option_groups() now correctly parses OptionsToInclude
    * ResourceGroupsTaggingAPI: get_resources() now supports EC2 NAT Gateways, route tables, subnets
    * Scheduler: create_chedule() now validates the start_date-parameter for recurrent schedule expressions
    * SNS: publish() and publish_batch now support MessageStructure=json
    * WAFv2: associate_web_acl() now allows any resource to be associated

Docker Digest for 5.0.15: sha256:9d78f63668017ca6eb9bdb415418d8077e1e503a1e81edb4657f93cf7ff34be1

New Services:
    * MemoryDB:
        * create_cluster()
        * create_snapshot()
        * create_subnet_group()
        * delete_cluster()
        * delete_snapshot()
        * delete_subnet_group()
        * describe_clusters()
        * describe_snapshots()
        * describe_subnet_groups()
        * list_tags()
        * tag_resource()
        * untag_resource()
        * update_cluster()

    * WorkspacesWeb:
        * associate_browser_settings()
        * associate_network_settings()
        * associate_user_access_logging_settings()
        * associate_user_settings()
        * create_browser_settings()
        * create_network_settings()
        * create_portal()
        * create_user_access_logging_settings()
        * create_user_settings()
        * delete_browser_settings()
        * delete_network_settings()
        * delete_portal()
        * delete_user_access_logging_settings()
        * delete_user_settings()
        * get_browser_settings()
        * get_network_settings()
        * get_portal()
        * get_user_access_logging_settings()
        * get_user_settings()
        * list_browser_settings()
        * list_network_settings()
        * list_portals()
        * list_user_access_logging_settings()
        * list_user_settings()

New Methods:
    * ApiGateway:
        * get_account()
        * update_account()

    * AppSync:
        * create_api_cache()
        * delete_api_cache()
        * get_api_cache()

Miscellaneous:
    * DynamoDB: get/delete/update_item() now validates all provided keys exist
    * Firehose: create_delivery_stream() now supports the SnowflakeDestinationConfiguration-parameter
    * S3: put_object() now support conditional writes