Repository navigation
Releases
Releases · aws/aws-sdk-php
Version 3.403.5
Aws\- Parses the shared config file once per client construction instead of once for each setting resolved throughConfigurationResolver.Aws\Credentials- Adds configurable allowlists for retryable exceptions and HTTP status codes toEcsCredentialProvider.Aws\Credentials-LoginCredentialProvidernow sends token refresh requests to the region recorded in the cached login token, and no longer requires a separately configured region when the token has one.Aws\GameLiftStreams- Adds support for ApplicationStartedAt on stream sessions, a timestamp that indicates when the application launched for the stream session, returned by GetStreamSession and StartStreamSession. Also added streamingStartedAt and streamingEndedAt.Aws\CloudWatchOmni- Add aggregationTemporality and monotonicity to GetContextGraph MetricMetadataAws\Connect- This release adds a LastModifiedTime and LastModifiedRegion field to ListIntegrationAssociations so customers can see at what time and in which Region an IntegrationAssociation was last modified in.Aws\SecurityAgent- Adds support for cleanup strategy in CreatePentestInput and UpdatePentestInput.Aws\Route53- Amazon Route 53 now supports Record Set Protection, which blocks changes to protected records in a hosted zone.Aws\SageMaker- Adds CreatedBy and LastModifiedBy to the DescribeHub and DescribeHubContent responses and to HubContent records returned by the Search API, identifying the IAM identity or SageMaker Studio user profile that created or last modified a hub or hub content.Aws\SecretsManager- Adds support for cross-account replication with the new AssociateCrossAccountReplica, DisassociateCrossAccountReplica, and ListResourcePolicies APIs, CrossAccountPrimaryARN in CreateSecret, cross-account replication status in DescribeSecret, and PolicyName in the resource policy APIs.Aws\Lightsail- Amazon Lightsail now offers web addresses, so you can quickly make a website or application reachable at a name like mysite.amazonlightsail.com. A web address is free while attached to a Lightsail CDN, with no domain to register and no SSL TLS certificate to create or renew.Aws\Backup- Adding new notification types for SNS notificationsAws\Odb- ODB now supports scaling for Exadata Dedicated offerings. Customers can scale database and storage servers on Exadata infrastructure, resize VM clusters and Autonomous VM clusters, and add or remove virtual machines in a VM cluster.Aws\CleanRooms- Adds a retry signal to protected query and protected job errors that indicates whether running the same request again might succeed, and defines error codes that identify the category of the failure.Aws\MediaLive- AWS Elemental MediaLive now adds a caption language setting for MediaPackage V2 output groups that signals a stream carries no closed captions.Aws\MWAAServerless- Adds support for Airflow UI in MWAA ServerlessAws\AutoScaling- Amazon EC2 Auto Scaling now supports ASGAverageCPUUtilizationHighResolution as a predefined metric type for target tracking scaling policies.Aws\MediaConnect- MediaConnect adds four features. (1) RTMP Push on Router Input and Flows (RTMP, RTMPS, eRTMP). (2) PID Remapping on Router rewrites PIDs inline without transcoding. (3) Key Frame Switching transitions router inputs on video boundaries. (4) SRT Merge Input bonds redundant SRT streams.Aws\SSOAdmin- Adds support for Network Controls on IAM Identity Center instances. You can now require that access to your instance and AWS managed applications originate from VPC endpoints in your organization, and optionally narrow that perimeter to specific VPCs, IP ranges, or application exceptions.Aws\MWAA- Amazon MWAA now supports Airflow environments with IAM Identity Center (IDC) integration and exposes OSS Airflow Multi-Team feature. Users can configure individual IDC-backed identities and fine-grained authorization, and define Dags on per-team basis.Aws\MediaTailor- Add post origin manifest hook, add HLS tag processorAws\EMRContainers- This release updates range of maxInQueueDepth and maxConcurrency limit from 10000 to 1000.Aws\GuardDuty- Adds the ListInvestigationRecords API, which returns the step-by-step records of a completed investigation. Adds investigation scope details and an optional structured summary to GetInvestigation. Adds filter criteria and investigation type to ListInvestigations.Aws\EC2- This release adds support for multiple features, including EC2 Image Builder image recipes and container recipes in AMI usage reports, Amazon EC2 Detailed Monitoring adds opt-in metrics, and Global Accelerator and API Gateway V2 as resource exclusions for VPC Encryption Control.Aws\CloudWatch- Adds support for saving, retrieving, listing, and deleting CloudWatch metric data query definitions.
Version 3.403.4
Aws\S3- Adds support for configuring the multipart upload part size through the S3 Transferpart_sizeoption.Aws\NetworkFirewall- This release adds Smithy RPC v2 CBOR as an additional protocol alongside the existing AWS JSON 1.0. The SDK will prioritize its most performant protocol.Aws\BedrockAgentCoreControl- Adds private certificate authority (CA) support for AgentCore Identity custom OAuth2.0 credential providers and custom JWT authorizers, enabling connections to IdPs with private CAs. Support SigV4 request signing (cryptographically signed) in the Bedrock AgentCore Harness MCP connector tool.Aws\CodePipeline- This release adds Smithy RPC v2 CBOR as an additional protocol alongside the existing AWS JSON 1.1. The SDK will prioritize its most performant protocol.Aws\ServiceDiscovery- This release adds Smithy RPC v2 CBOR as an additional protocol alongside the existing AWS JSON 1.1. The SDK will prioritize its most performant protocol.Aws\ResourceGroupsTaggingAPI- This release adds Smithy RPC v2 CBOR as an additional protocol alongside the existing AWS JSON 1.1. The SDK will prioritize its most performant protocol.Aws\Route53Domains- This release adds Smithy RPC v2 CBOR as an additional protocol alongside the existing AWS JSON 1.1. The SDK will prioritize its most performant protocol.Aws\CodeDeploy- This release adds Smithy RPC v2 CBOR as an additional protocol alongside the existing AWS JSON 1.1. The SDK will prioritize its most performant protocol.Aws\TranscribeService- This release adds Smithy RPC v2 CBOR as an additional protocol alongside the existing AWS JSON 1.1. The SDK will prioritize its most performant protocol.Aws\CodeBuild- This release adds Smithy RPC v2 CBOR as an additional protocol alongside the existing AWS JSON 1.1. The SDK will prioritize its most performant protocol.Aws\imagebuilder- Update list operations to support wildcard name filtering and page sizes up to 100 results via MaxResultsAws\WorkSpaces- This release adds Smithy RPC v2 CBOR as an additional protocol alongside the existing AWS JSON 1.1. The SDK will prioritize its most performant protocol.Aws\IdentityStore- Updated ApiRestrictSourceVpcs in NetworkConfiguration to accept VPC ARNs in addition to VPC IDs.Aws\Textract- This release adds Smithy RPC v2 CBOR as an additional protocol alongside the existing AWS JSON 1.1. The SDK will prioritize its most performant protocol.Aws\ServiceCatalog- This release adds Smithy RPC v2 CBOR as an additional protocol alongside the existing AWS JSON 1.1. The SDK will prioritize its most performant protocol.Aws\EC2- Adds support for AWS Cloud WAN Flow Logs. The CreateFlowLogs API now accepts CoreNetwork, CoreNetworkEdge, and CoreNetworkAttachment resource types, enabling customers to capture information about IP traffic traversing their Cloud WAN core networks.Aws\Connect- Added support for 96 new languages for AI-powered automated evaluations. Chat interactions support all 96 languages. Voice interactions support 57 languages, those with transcription available through post-call conversational analytics.Aws\DataSync- This release adds Smithy RPC v2 CBOR as an additional protocol alongside the existing AWS JSON 1.1. The SDK will prioritize its most performant protocol.Aws\MediaPackageV2- This release adds the BandwidthReportingMode setting to DASH manifest configurations, which lets you choose whether the bandwidth attribute of video Representations in the DASH manifest reports the average (default) or peak bitrate of the video track.Aws\KinesisAnalyticsV2- This release adds support for Enhanced Snapshots in Amazon Managed Service for Apache Flink, enabling application state to be managed as a standalone resource that customers can export, import, and reuse across applications.Aws\ConnectCases- This release adds APIs that allow customers to merge cases to consolidate case history, and get the status of an ongoing case merge operation.Aws\Shield- This release adds Smithy RPC v2 CBOR as an additional protocol alongside the existing AWS JSON 1.1. The SDK will prioritize its most performant protocol.Aws\BedrockAgentCore- Support SigV4 request signing (cryptographically signed) in the Bedrock AgentCore Harness MCP connector tool.Aws\MemoryDB- This release adds Smithy RPC v2 CBOR as an additional protocol alongside the existing AWS JSON 1.1. The SDK will prioritize its most performant protocol.Aws\Comprehend- This release adds Smithy RPC v2 CBOR as an additional protocol alongside the existing AWS JSON 1.1. The SDK will prioritize its most performant protocol.Aws\MarketplaceMetering- AWS Marketplace Metering Service adds decimal quantity support to the MeterUsage and BatchMeterUsage APIs. This includes new request fields UsageQuantityAsDecimal (MeterUsage), QuantityAsDecimal (BatchMeterUsage), and AllocatedUsageQuantityAsDecimal (UsageAllocation for both APIs).Aws\CloudHSMV2- This release adds Smithy RPC v2 CBOR as an additional protocol alongside the existing AWS JSON 1.1. The SDK will prioritize its most performant protocol.Aws\DirectoryService- This release adds Smithy RPC v2 CBOR as an additional protocol alongside the existing AWS JSON 1.1. The SDK will prioritize its most performant protocol.Aws\DirectConnect- This release adds Smithy RPC v2 CBOR as an additional protocol alongside the existing AWS JSON 1.1. The SDK will prioritize its most performant protocol.Aws\ACMPCA- This release adds Smithy RPC v2 CBOR as an additional protocol alongside the existing AWS JSON 1.1. The SDK will prioritize its most performant protocol.Aws\CognitoIdentityProvider- This release adds session management operations that let user pool administrators and users list and revoke active sessions, and configure session tracking, per-user session limits, and SSO session validity per app client.Aws\ConfigService- AWS Config now supports connectors for Google Cloud. PutConnector accepts a Google Cloud connector configuration, and ListConnectors returns Google Cloud connector details.
Version 3.403.3
Aws\Retries- Retry settings from AWS_RETRY_MODE, AWS_MAX_ATTEMPTS and the shared config file are no longer ignored when a non-legacy defaults mode is configured.Aws\- Fixed SignatureV4 presigned URLs and RDS and DSQL auth tokens getting an expiry one hour too long when a relative expiry such as '+15 minutes' crossed a daylight saving time change in the default timezone.Aws\Api- Caches compiled REST request bindings (headers, query string, URI labels and payload) on each operation, reducing per-request serialization overhead for REST-JSON and REST-XML services. Request output is unchanged.Aws\Api- Caches compiled HTTP success-response binding metadata for headers, status codes, and payload routing on each operation, reducing repeated model processing when parsing REST-JSON and REST-XML responses. Response output is unchanged.Aws\Build- Derives client namespaces from the service model's serviceId instead of its display name.Aws\NetworkFirewall- Firewall Policy V2 for Network FirewallAws\Route53Profiles- Adds support for having multiple profiles on one VPC. This is done using a priority system to handle conflicts on the dataplane.Aws\GameLift- Amazon GameLift Servers adds game session placement insights. Logs show how the queue's priority configuration, along with player latency and cost data, are applied to each placement request. Use game session placement insights to diagnose why game session placements succeed, fail, or time out.Aws\Connect- Amazon Connect now returns Contact Lens conversational analytics configuration in the DescribeContact API. Customers can retrieve a contact's analytics, redaction, summarization, and sentiment settings, consistent with the configuration already available in contact trace records and contact events.Aws\CloudWatchOmni- Release of GetSpaceDataAccess API - Used to get temporary credentials, limited to the requested actions, for working with data in a space.Aws\ARCRegionSwitch- Adds RetryableConflictException to UpdatePlan so AWS SDKs automatically retry updates that conflict with a concurrent change.Aws\S3Tables- Adds support for server access logging for Amazon S3 table buckets with the new PutTableBucketLogging and GetTableBucketLogging APIs.Aws\LakeFormation- Adds support for governing AWS Glue user-defined functions with Lake Formation permissions. This release adds the UserDefinedFunction and AnyResource resources, the EXECUTE permission, and the GetTemporaryGlueFunctionCredentials and GetGlueFunctionSessionContext APIs.Aws\BedrockAgentCoreControl- Amazon Bedrock AgentCore Gateway now supports domainOverride so JWT-authorized gateways can advertise your public domain in OAuth discovery behind a proxy or custom domain. AgentCore Runtime adds warmup lifecycle hooks and specifying runtime memory via hooksConfiguration and resourceConfigurations.Aws\DeviceFarm- Adds the NONE insights type to disable insights generation for a run, a testPackageArn field in run details, and a new artifact type for device connect command logs.Aws\PCS- Added support for configuring AMIs, Amazon EC2 security groups, SSH key pairs, and launch template modes when creating or updating AWS PCS compute node groups.Aws\MarketplaceAgreement- This release adds the freeTrialSummary.trialEndTime field to DescribeAgreement and the freeTrialEndTime field to SearchAgreements results, so you can see when an agreement's free trial ends.Aws\VerifiedPermissions- Inconsequential changes to model formatting
Version 3.403.2
Aws\- Ensures checksum mode member is set for requests whose responses contain modeled checksums.Aws\Aws- Adds concise debug output for Command objects to prevent handler and service model internals from overwhelming var_dump() and print_r() output.Aws\Aws\DynamoDb- Adds precise PHPStan types to DynamoDB Marshaler methods so marshaled items are compatible with generated client argument shapes.Aws\S3/S3Transfer- Confines paths loaded from S3 resumable download files to the resume file directory while preserving explicitly configured download paths.Aws\TraceMiddleware- Defer closing the@http.debugresource for successful streamed responses. Fixes "fprintf(): supplied resource is not a valid stream resource" errors when using the S3 stream wrapper with debug enabled.Aws\Signin- Adds the CreateBearerToken API, which exchanges your IAM credentials for a bearer token that can be used to access supported AWS services.Aws\SageMaker- Adds support for pipelines that AWS manages, filter ListPipelines by ManagedBy and run them with your own role via RoleArn on StartPipelineExecution. Adds pipeline version aliases to reference versions by name. Adds HubContent step metadata to ListPipelineExecutionSteps.Aws\BedrockAgentCore- Adds the InvokeWebSearch API, which searches the web using the AWS-managed web search and returns ranked results with a text extract from each page. Results can be filtered by domain and by publication time.Aws\Evs- Amazon EVS adds support for r7i.metal-24xl and r7i.metal-48xl EC2 bare metal instance types for self-deployed VMware Cloud Foundation environments. These diskless instance types use customer-connected external NFS storage, such as Amazon FSx for NetApp ONTAP, instead of local NVMe and vSAN.Aws\S3Control- Adds support for cross-account access grants with InstanceScope parameter for GetDataAccess and ListCallerAccessGrants operations in S3 Access Grants.Aws\ElasticsearchService- Adds cloned blue-green upgrades for Amazon OpenSearch Service domains. UpgradeElasticsearchDomain accepts DeploymentStrategyOptions to upgrade on a cloned cluster, the new UpdateClone API shifts search traffic, cuts over and sets retention, and DescribeDomainChangeProgress reports upgrade details.Aws\DataZone- Adds support for Workday Data Connect and Workday Live Data Query connection types in Amazon DataZone connection APIs.Aws\Batch- Adds support for additional Amazon EKS security context settings in AWS Batch. Pod-level settings include fsGroup, runAsUser, runAsGroup, runAsNonRoot, and seccompProfile. Container-level settings add Linux capabilities and seccompProfile to existing runAsUser, runAsGroup, and runAsNonRoot support.Aws\Glue- We are releasing five new APIs to allow customers to enable Catalog-level data quality monitoring in AWS Glue Data Catalog, a new feature to perform data quality evaluation on collections of GDC tables selected by the customer, on a schedule or event-driven basis, using a custom or managed ruleset.Aws\ECS- Amazon ECS Managed Instances now supports isolated and confidential tasks, which run in AWS Nitro Sandboxes. Configure them with trustedExecutionConfiguration in task definitions and nitroEnclavesEnabled in capacity providers.Aws\OpenSearchService- Adds cloned blue-green upgrades for Amazon OpenSearch Service domains. UpgradeDomain accepts DeploymentStrategyOptions to upgrade on a cloned cluster, the new UpdateClone API shifts search traffic, cuts over and sets retention, and DescribeDomainChangeProgress reports the upgrade details.
Version 3.403.1
Aws\SSM- AWS Systems Manager now provides two new APIs - RegisterDefaultHostManagementConfiguration and DeregisterDefaultHostManagementConfiguration - along with a new DefaultHostManagementConfiguration CloudFormation resource type.Aws\Glue- Adds support for user-defined functions governed by AWS Lake Formation.Aws\EKSAuth- Added workloadIdentityProviderArn to the AssumeRoleForPodIdentity API response.Aws\Lightsail- Marking fields as sensitive in GetInstanceAccessDetails, CreateKeyPair, DownloadDefaultKeyPair, CreateBucketAccessKey, CreateContainerServiceRegistryLogin, and GetRelationalDatabase responses.Aws\Connect- Rules in Amazon Connect now support ending email contacts associated to a case based on case events.Aws\Athena- Added support for Athena System Tables which writes Athena usage data to AWS S3 managed tables in Apache Iceberg format. Adds CreateSystemTableConfiguration, UpdateSystemTableConfiguration, DeleteSystemTableConfiguration, GetSystemTableConfiguration, and ListSystemTableStatuses.Aws\DataZone- Adds support for updating OAuth 2.0 connection settings with UpdateConnection.Aws\RAM- Adds support for using managed permission template parameters, discovering shared customer-managed permissions, and managing customer-managed permission deprecation.Aws\AutoScaling- Amazon EC2 Auto Scaling now lets you exclude managed resources from describe API responses using the new optional IncludeManagedResources parameter. Set this parameter to false to exclude managed resources from the response. By default, managed resources are included.Aws\ConnectCases- Amazon Connect Cases adds two Bulk Case Actions operations. BatchCreateRelatedItem adds a Comment-type related item to up to 100 cases per request, BatchUpdateCase updates fields (title, status, customer ID, custom) on up to 100 cases. Same domain, per-case success and failure results returned.Aws\BedrockAgent- Add support for configuring searchability for metadata fields via UpdateKnowledgeBase request for Managed Knowledge Base. Once a field is marked as searchable it can be queried via query text and is factored into Managed Knowledge Base's ranking algorithm.Aws\MediaConvert- Smart subtitling uses AWS Elemental Inference to generate captions from your content's audio, in embedded, burn-in, DVB-Sub, IMSC, SMI, SRT, teletext, TTML, or WebVTT outputs. Also fixes HEVC passthrough writing an incomplete codecs string to DASH and HLS manifests.
Version 3.403.0
Aws\AgentRegistryControl- Adds support for OAuth2 Authorization Server Metadata (RFC 8414) discovery URLs in custom JWT authorizer.Aws\QConnect- Adds support for real-time agent assistance and self-service with Amazon Connect Global Resiliency, including cross-Region replication of supported AI agent resources and configurations.Aws\AccountAccessRuntime- Adds SDK support for Account Access user portal operations, enabling users to list out and get credentials for role assignments configured in AWS IAM Account Access Manager.Aws\Glue- AWS Glue Spark ETL jobs can now auto-upgrade to the latest version. Set GlueVersion to Auto, then track progress with the AutoVersionStatus field in GetJob. Use StartJobUpgradeAnalysis to approve or decline an upgrade, GetJobUpgradeAnalysis to view details, and StopJobUpgradeAnalysis to stop it.Aws\Route53Domains- Route 53 Domains now supports restoring domains. This release adds the RestoreDomain API to self-serve domain restoration.Aws\DataSync- Adds support for federated identity on Azure Blob Storage and object storage locations, enabling DataSync to authenticate to Azure and Google Cloud Storage using Workload Identity Federation (WIF) over OpenID Connect (OIDC) instead of stored long-lived credentials.Aws\CloudWatchLogs- Adds account-level retention policies with dry run preview and the Essentials log group class to Amazon CloudWatch LogsAws\SecurityAgent- Adds support for IAM Identity Center groups as Agent Space members. CreateMembership, DeleteMembership, and ListMemberships now accept the GROUP member type. ListMemberships can filter by USER, GROUP, or ALL, and returns group display name and description.Aws\BedrockAgentRuntime- Amazon Bedrock Managed Knowledge Base now supports an optional mediaId parameter in GetDocumentContent that you can use to retrieve images embedded in source documents.Aws\LambdaMicrovms- AWS Lambda MicroVMs now support the x86-64 CPU architecture, which you can select in addition to ARM64 (Graviton) when launching a MicroVM.Aws\QuickSight- Amazon QuickSight adds APIs to view account service role settings and switch to or replace a customer-managed IAM role.Aws\AppIntegrationsService- This release adds a LastModifiedRegion field to GetApplication and ListApplications so customers can see which Region an application was last modified in.Aws\WAFV2- AWS WAF customers who monetize AI traffic on Web ACLs can now configure payments through connected accounts (Stripe).Aws\SageMaker- Fixed the ImageDeleted and ImageVersionDeleted waiters to succeed on the ResourceNotFound error returned by DescribeImage and DescribeImageVersionAws\BedrockAgentCoreControl- Adds support for OAuth2 Authorization Server Metadata (RFC 8414) discovery URLs in custom JWT authorizer and OAuth2 credential provider configurations.
Version 3.402.6
Aws\Lambda- Stops applying the default Curl options to streamed commands such as InvokeWithResponseStream, which are served by a stream handler that rejects them.Aws\Connect- Adds support for retrieving associated cases in contact responses. The Contact object now includes a Cases field containing case IDs and reference numbers linked to the contact.Aws\mgn- This release adds Migration Planning artifacts as a source environment for network migration definitions, and an optional clientToken on CreateNetworkMigrationDefinition so that retried requests don't create duplicate definitions.Aws\EMR- Added StepAdditionalInfo on DescribeStep and ListSteps to surface YARN application IDs for steps.Aws\RDS- Adding support for copying and tagging option groups with cross-Region DB snapshot copies, in the same account or across accounts.Aws\ECS- Amazon ECS Managed Instances now supports the json-file log driver in task definitions. Daemon task definition volumes also support logDriverVolumeConfiguration, letting managed daemons read those logs.Aws\WorkSpaces- Add Ubuntu 24.04, Ubuntu 26.04, RHEL 9, RHEL10, Rocky 9 and Rocky 10 to OperatingSystemName and documentation update for WorkspaceProperties Protocols.Aws\DynamoDB- Adds StartBulkPutItems, DescribeBulkOperation, ListBulkOperations, and CancelBulkOperation for asynchronously loading Amazon S3 datasets into existing DynamoDB tables.Aws\Polly- Amazon Polly now supports tagging lexicons. Use the new TagResource, UntagResource and ListTagsForResource APIs, or add tags when creating a lexicon with PutLexicon, to organize lexicons and control access with tag-based (ABAC) IAM policies.Aws\SecurityHub- Release Software APIs- GetSoftwareV2, GetSoftwareStatisticsV2 and GetSoftwareResourcesV2 to list software packages with aggregated resource count, get aggregated software statistics, and find the resources that contain a specific software package.Aws\MWAAServerless- Adding support to Environment Variables in MWAA ServerlessAws\S3Tables- Amazon S3 Tables now supports migrating AWS Glue Data Catalog tables into S3 Table buckets. This release adds the StartTableMigration, SyncTableMigration, UpdateTableMigration, CompleteTableMigration, GetTableMigration, and ListTableMigrations APIs.Aws\TaxSettings- Adds Colombia additional information (responsibility codes, taxpayer type code, and RUT issue date) and a rejection reason (statusReason) to tax registration responses, and adds Argentina and Uruguay tax registration types.Aws\ConnectContactLens- Rules TBAC GA (Contact Lens V1) - Adds an optional ListFilter (CategoriesAttributeFilter with OrConditions, AndCondition and TagCondition) to ListRealtimeContactAnalysisSegments. This filters matched categories by rule tags. It also adds an optional RuleId to CategoryDetails in the response.Aws\IoTSiteWise- Adds support for an optional jobName on CreateDatasetExportJob. The jobName is returned by DescribeDatasetExportJob and ListDatasetExportJobs, making dataset export jobs easier to identify and track. If jobName is omitted, a default name is generated automatically.Aws\ElasticBeanstalk- Adds DefaultAmiList to DescribePlatformVersion to return the default AMI for each processor architecture that a platform version supports.Aws\EC2- Add the Unsupported SupportabilityScore to GetCapacityManagerSupportabilityScores.Aws\MarketplaceDiscovery- GetListing and SearchListings APIs now return G2 and PeerSpot review sources in review summaries.Aws\RolesAnywhere- Adds the crlDpRevocationEnabled field to enable automatic revocation checking using CRL distribution points in X.509 certificates.Aws\LookoutEquipment- Amazon Lookout for Equipment reached end of support on October 7, 2026. All Lookout for Equipment APIs are now marked as deprecated.
Version 3.402.5
Aws\- Fixed an issue in NonSeekableStreamDecodingEventStreamIterator where the final event was dropped when reading it reached the end of the stream.Aws\BedrockAgentRuntime- Adds the CodeExecution step and codeExecution action to AgenticRetrieveStream trace events, showing when the agent runs code and which documents it reads.Aws\PrometheusService- Managed Prometheus collectors now support Amazon MSK consumer-group metrics for Amazon Managed Service for Prometheus and CloudWatch.Aws\Connect- Amazon Connect adds tag-based access control for Contact Lens rules. ListRealtimeContactAnalysisSegmentsV2 adds a ListFilter to return only category segments whose rules match given tags. PreEvaluationFilter now supports contact evaluation resources for OnContactEvaluationSubmit rules.Aws\DocDB- Amazon DocumentDB now returns ServerlessV2PlatformVersion in DBCluster API responses and adds the DescribeServerlessV2PlatformVersions API to discover available platform versions and their capabilities.Aws\Omics- Adds the outputUriPrefixMode parameter to StartRun and GetRun. You can now write run outputs directly under outputUri, without the prefixes the service adds by default. When you opt in, outputs overwrite existing objects at the same keys.Aws\SageMaker- Create endpoints with AcceleratorPartitionLayouts on ProductionVariant and deploy inference components with AcceleratorPartitionType in ComputeResourceRequirements to divide accelerators into hardware-isolated NVIDIA MIG partitions, running multiple models per GPU. P4d, P5, G7, G7e.Aws\CloudWatchLogs- Adds support for account-level retention policies in Amazon CloudWatch Logs. Customers can now use PutAccountPolicy with the new RETENTION POLICY type to set default log retention across all log groups in an account. Includes dry-run mode to preview the impact of policy changes before applying them.Aws\Lambda- Adds ConsumptionMode to SelfManagedKafkaEventSourceConfig, letting Lambda event source mappings consume self-managed Apache Kafka topics as a queue. Set ConsumptionMode to Queue when creating an event source mapping.Aws\CustomerProfiles- Adds support for template ingestion controls in the GetProfileObjectTypeTemplate API response.Aws\TimestreamInfluxDB- Add DeploymentConfiguration field to CreateDbCluster and UpdateDbCluster APIs to support creation of heterogenous InfluxDB v3 Enterprise clusters.
Version 3.402.4
Aws\S3- The default S3 Express identity provider now creates sessions with the requesting client's credentials and caches them per bucket and per identity.Aws\imagebuilder- This release adds support for on-demand AMI scanning with Amazon Inspector.Aws\Lightsail- This release adds support for instance health status checks and system status checks.Aws\BedrockAgentCore- Adds AgentCore Runtime session endpoint support, including sessionEndpointUrl on the InvokeAgentRuntime responseAws\WAFV2- AWS WAF customers using Targeted Bot Control, ATP, or ACFP managed rule groups can now enable automatic Challenge JavaScript SDK injection. When enabled, Amazon CloudFront injects the script tag into HTML responses on your behalf, removing the need for manual integration.Aws\BedrockAgentCoreControl- Adds Session Endpoint Feature on AgentCore RuntimeAws\CleanRooms- Adds support for the PySpark 2.0 analysis template format and for choosing the file format (CSV or Parquet) of protected job results written to Amazon S3, including in a membership's default job result configuration.
Version 3.402.3
Aws\- Fixed AssumeRoleCredentialProvider throwing a TypeError and losing the original exception when the STS request fails with an exception that does not extend RuntimeException.Aws\Neptunedata- Get Storage API analyzes storage usage to identify database bloat and your storage footprint. Index Rebuild API triggers on-demand index reconstruction to eliminate bloat and restore query performance.Aws\MediaLive- AWS Elemental MediaLive now supports SMPTE 2022-7 seamless protection switching for multicast inputs on MediaLive Anywhere. Support for MulticastSettings sources to add a redundant copy of the stream received on a second network interface.Aws\Artifact- Update support mode for Assurance AssistanceAws\KafkaConnect- Amazon MSK Connect now supports updating a connector's custom plugin and worker configuration via the UpdateConnector API. MSK Connect checks connector and task health after the update and rolls back on failure. Each call returns an operation ARN to track with DescribeConnectorOperation.Aws\SecurityAgent- Adds support for attaching client certificates for mutual TLS (mTLS) authentication to penetration test target endpoints via the new ClientCertificates field on Assets, enabling pentesting of endpoints that require client certificate authentication.Aws\ACM- AWS Certificate Manager now supports the Automatic Certificate Management Environment (ACME) protocol in the AWS GovCloud (US-East) and AWS GovCloud (US-West) Regions.Aws\IVS- InsertAdBreak now allows setting a customized adBreakId on a request and also adds a new field targetStartAt for a delayed ad insertionAws\OpenSearchService- This release adds APIs to simplify setting up a replication relationship between OpenSearch clusters. The APIs include new Switchover and Failover actions for planned switchovers and unplanned failovers to ensure high availability for OpenSearch in the event of disaster in a single region.Aws\EC2- Amazon EC2 Capacity Manager adds supportability checks and capacity fulfillment metrics. Use GetCapacityManagerSupportabilityScores to score how well instance types and Availability Zones can support a capacity request, and GetCapacityManagerMetricData to retrieve fulfillment metrics.Aws\Connect- Amazon Connect APIs - CreateTaskTemplate and UpdateTaskTemplate accept a new ContactHooks parameter called WrapUpFlowId to identify the flow module that runs when an agent attempts to disconnect from a task created with the template. Use this to verify an agent's work or update external case repos.Aws\ConnectParticipant- Amazon Connect Participant Service now supports the optional UrlContentDisposition parameter on GetAttachment, which returns a pre-signed URL that renders a chat attachment inline in the browser instead of forcing a download.