1.6.1

What's Changed

Miscellaneous

• feat: LoginAWSCredentialIdentityResolver (#2063)

Full Changelog: 1.6.0...1.6.1

1.6.0

What's Changed

Service Features

• AWS Transcribe Streaming: This release adds support for additional locales in AWS transcribe streaming.
• AWS Route 53: Add dual-stack endpoint support for Route53
• AWS RUM: CloudWatch RUM now supports mobile application monitoring for Android and iOS platforms
• AWS DataZone: Amazon DataZone now supports business metadata (readme and metadata forms) at the individual attribute (column) level, a new rule type for glossary terms, and the ability to update the owner of the root domain unit.
• AWS Lambda: Added support for creating and invoking Tenant Isolated functions in AWS Lambda APIs.
• AWS Inspector2: This release introduces BLOCKED_BY_ORGANIZATION_POLICY error code and IMAGE_ARCHIVED scanStatusReason. BLOCKED_BY_ORGANIZATION_POLICY error code is returned when an operation is blocked by an AWS Organizations policy. IMAGE_ARCHIVED scanStatusReason is returned when an Image is archived in ECR.
• AWS EC2: This launch adds support for two new features: Regional NAT Gateway and IPAM Policies. IPAM policies offers customers central control for public IPv4 assignments across AWS services. Regional NAT is a single NAT Gateway that automatically expands across AZs in a VPC to maintain high availability.
• AWS Billing: Added name filtering support to ListBillingViews API through the new names parameter to efficiently filter billing views by name.
• AWS MediaConnect: This release adds support for global routing in AWS Elemental MediaConnect. You can now use router inputs and router outputs to manage global video and audio routing workflows both within the AWS-Cloud and over the public internet.
• AWS Cost Explorer: Add support for COST_CATEGORY, TAG, and LINKED_ACCOUNT AWS managed cost anomaly detection monitors
• AWS IAM: Added the EnableOutboundWebIdentityFederation, DisableOutboundWebIdentityFederation and GetOutboundWebIdentityFederationInfo APIs for the IAM outbound federation feature.
• AWS Secrets Manager: Adds support to create, update, retrieve, rotate, and delete managed external secrets.
• AWS SFN: Adds support to TestState for mocked results and exceptions, along with additional inspection data.
• AWS GuardDuty: Add support for scanning and viewing scan results for backup resource types
• AWS FSx: Adding File Server Resource Manager configuration to FSx Windows
• AWS EMR: Add CloudWatch Logs integration for Spark driver, executor and step logs
• AWS Network Firewall: Partner Managed Rulegroup feature support
• AWS S3: Adds support for blocking SSE-C writes to general purpose buckets.
• AWS Invoicing: Add support for adding Billing transfers in Invoice configuration
• AWS NetworkFlowMonitor: Added new enum value (AWS::EKS::Cluster) for type field under MonitorLocalResource
• AWS Health: Adds actionability and personas properties to Health events exposed through DescribeEvents, DescribeEventsForOrganization, DescribeEventDetails, and DescribeEventTypes APIs. Adds filtering by actionabilities and personas in EventFilter, OrganizationEventFilter, EventTypeFilter.
• AWS CloudTrail: AWS CloudTrail now supports Insights for data events, expanding beyond management events to automatically detect unusual activity on data plane operations.
• AWS Bedrock Runtime: This release includes support for Search Results.
• AWS Cost Optimization Hub: Release ListEfficiencyMetrics API
• AWS API Gateway: API Gateway now supports response streaming and new security policies for REST APIs and custom domain names.
• AWS CloudWatch Logs: Adding support for ocsf version 1.5, add optional parameter MappingVersion
• AWS billingconductor: This release adds support for Billing Transfers, enabling management of billing transfers with billing groups on AWS Billing Conductor.
• AWS ApiGatewayV2: Support for API Gateway portals and portal products.
• AWS SageMaker: Added support for enhanced metrics for SageMaker AI Endpoints. This features provides Utilization Metrics at instance and container granularity and also provides easy configuration of metric publish frequency from 10 sec -> 5 mins
• AWS ECR: Add support for ECR archival storage class and Inspector org policy for scanning
• AWS ECS: Added support for Amazon ECS Managed Instances infrastructure optimization configuration.
• AWS ConnectCampaignsV2: This release added support for ring timer configuration for campaign calls.
• AWS Backup: Amazon GuardDuty Malware Protection now supports AWS Backup, extending malware detection capabilities to EC2, EBS, and S3 backups.
• AWS BCM Pricing Calculator: Add GroupSharingPreference, CostCategoryGroupSharingPreferenceArn, and CostCategoryGroupSharingPreferenceEffectiveDate to Bill Estimate. Add GroupSharingPreference and CostCategoryGroupSharingPreferenceArn to Bill Scenario.
• AWS MediaLive: MediaLive is adding support for MediaConnect Router by supporting a new input type called MEDIACONNECT_ROUTER. This new input type will provide seamless encrypted transport between MediaConnect Router and your MediaLive channel.
• AWS DynamoDB: Extended Global Secondary Index (GSI) composite keys to support up to 8 attributes.
• AWS STS: IAM now supports outbound identity federation via the STS GetWebIdentityToken API, enabling AWS workloads to securely authenticate with external services using short-lived JSON Web Tokens.

Miscellaneous

• fix: Add retry mechanism to flakey tests due to IAM eventual consistency (#2061)

Full Changelog: 1.5.87...1.6.0

1.5.87

What's Changed

Service Features

• AWS Auto Scaling: This release adds the new LaunchInstances API, which can launch instances synchronously in an AutoScaling group. The API also returns instances info and launch error back immediately.
• AWS Bedrock Runtime: Amazon Bedrock Runtime Service Tier Support Launch
• AWS EC2: AWS Site-to-Site VPN now supports VPN Concentrator, a new feature that enables customers to connect multiple low-bandwidth sites connections through a single attachment, simplifying multi-site connectivity for distributed enterprises.
• AWS Resource Groups Tagging API: Add support for new ListRequiredTags API used to retrieve the required tags specified in a customer's effective tag policy.
• AWS IAM: Added the AssociateDelegationRequest, GetDelegationRequest, AcceptDelegationRequest, RejectDelegatonRequest, ListDelegationRequests, UpdateDelegationRequest, SendDelegationToken and GetHumanReadableSummary APIs for the IAM temporary delegation feature.
• AWS Backup: AWS Backup now supports a low-cost warm storage tier for Amazon S3 backup data.
• AWS Kafka: Amazon MSK adds three new APIs, ListTopics, DescribeTopic, and DescribeTopicPartitions for viewing Kafka topics in your MSK clusters.
• AWS CloudFormation: New CloudFormation DescribeEvents API with operation ID tracking and failure filtering capabilities to quickly identify root causes of deployment failures. Also, a DeploymentMode parameter for the CreateChangeSet API that enables creation of drift-aware change sets for safe drift management.
• AWS Storage Gateway: Adds support for European Sovereign Cloud ARNs in Storage Gateway API parameters.
• AWS WAFV2: AssociateWebACL, UpdateWebACL and PutLoggingConfiguration will now throw WAFFeatureNotIncludedInPricingPlanException when the request contains a feature that is not included in the CloudFront pricing plan of the WebACL.
• AWS CloudWatch Logs: CloudWatch Logs updates: Added capability to setup a recurring schedule for log insights queries. Logs introduced Scheduled Queries (managed through Create/Update/Get/Delete/List/History Scheduled Query APIs). For more information, see CloudWatch Logs API documentation.
• AWS Connect: This release added support for ring timer configuration for campaign calls.

Full Changelog: 1.5.86...1.5.87

1.5.86

What's Changed

Service Features

• AWS Glue: Amazon Glue Releasing 2 the new API ListIntegrationResourceProperties and DeleteIntegrationResourceProperty along with minor improvement on existing API(s).
• AWS MediaPackageV2: Add support for SCTE messages in Segment file output
• AWS Lex Models V2: Adds support for LLM as Primary, allowing usage of LLMs as the default NLU system.
• AWS PCS: Added support for the managed Slurm REST API endpoint
• AWS GuardDuty: Add S3 On-Demand Object Scanning
• AWS Backup: AWS Backup now supports specifying a logically air-gapped backup vault as a primary backup target in backup plans and on-demand backup jobs.
• AWS OpenSearch: This release adds index operation APIs to support Automatic Semantic Enrichment feature
• AWS MediaLive: Adds configurations for spatial/temporal adaptive quantization in AV1 codec, and conversion to HLG output color space in H265 codec.
• AWS Route53Resolver: Adding DICTIONARY_DGA to dns-threat-protection as a new enum type. Customers can now set rules for dictionary dga protection
• AWS AppStream: Adding support for additional instances and extended storage
• AWS EC2: This release introduces new APIs: DescribeInstanceSqlHaStates, DescribeInstanceSqlHaHistoryStates, EnableInstanceSqlHaStandbyDetections and DisableInstanceSqlHaStandbyDetections on Amazon EC2, allowing customers to enroll and monitor SQL Server licensing fee savings for their SQL HA EC2 instances.
• AWS Device Farm: This release adds support for interacting with devices during a remote access session using the remoteDriverEndpoint interface
• AWS Database Migration Service: This release introduces the SAP ASE(Sybase) Data Provider for AWS Data Migration Service (DMS). In addition, DMS Schema Conversion now supports this provider, enabling customers to migrate SAP ASE(Sybase) databases to Amazon RDS for PostgreSQL or Aurora PostgreSQL seamlessly.
• AWS Bedrock: Automated Reasoning checks in Amazon Bedrock Guardrails now automatically generate Q&A tests for new Automated Reasoning policies. The GetAutomatedReasoningPolicyBuildWorkflowResultAssets API adds GENERATED_TEST_CASES asset type, allowing customers to retrieve tests generated by the build workflow.

Full Changelog: 1.5.85...1.5.86

1.5.85

What's Changed

Service Features

• AWS imagebuilder: EC2 Image Builder now supports invoking Lambda functions and executing Step Functions state machine through image workflows.
• AWS MediaLive: Removed all the value constraint (min/max) for the shape definitions (e.g. integerMin0Max3600) on the C2j models to get rid of the need to request an exemption from the SDK team whenever a shape definition (e.g. integerMin0Max3600) is changed.
• AWS DataZone: Adds support for granting read and write access to Amazon S3 general purpose buckets using CreateSubscriptionRequest and AcceptSubscriptionRequest APIs. Also adds search filters for SSOUser and SSOGroup to ListSubscriptions APIs and deprecates "sortBy" parameter for ListSubscriptions APIs.
• AWS EC2: This release adds AvailabilityZoneId support for CreateInstanceConnectEndpoint, DescribeInstanceConnectEndpoints, and DeleteInstanceConnectEndpoint APIs.

Full Changelog: 1.5.84...1.5.85

1.5.84

What's Changed

Service Features

• AWS EC2: Added support for new accelerator types ("media") and accelerator names ("L4", "L40s", "GAUDI_HL_205", "INFERENTIA2", "TRAINIUM", "TRAINIUM2", "U30") in Attributes Based Instance Type Selection for launched instance types.
• AWS IoT Wireless: Integration of Device Location with Amazon Sidewalk network for Amazon Sidewalk enabled devices
• AWS ControlCatalog: Added support for related control mappings with new RELATED_CONTROL mapping type in ListControlMappings API.
• AWS WorkSpaces Web: Support for managing web content filtering for defining, tracking and regulating type of content accessed with WorkSpaces Secure Browser as part of browser settings.
• AWS MediaConvert: Lowers minimum duration for black video generator. Adds support for embedding and signing C2PA content credentials in DASH and CMAF HLS outputs.
• AWS RDS: Updated endpoint and service metadata
• AWS CloudFormation: CloudFormation now supports GetHookResult API with annotations to retrieve structured compliance check results and remediation guidance for each evaluated resource, replacing the previous single-message limitation with detailed validation outcomes.
• AWS ECR: Add Amazon ECR FIPS PrivateLink endpoint support
• AWS Elastic Load Balancing v2: QUIC and TCP_QUIC protocol support for Network Load Balancer (NLB). This capability enables customers to forward QUIC traffic to their targets with ultra-low latency while maintaining session stickiness using QUIC Connection IDs.
• AWS SageMaker: Added support for minor version upgrades and AWS Identity Center integration for SageMaker Hadron Partner Apps, enabling automated version management and IdC group-based access control.

Full Changelog: 1.5.83...1.5.84

1.5.83

What's Changed

Service Features

• AWS Connect: Updated Authentication Profile APIs to add support for automatic logout on user inactivity
• AWS Elastic Load Balancing v2: This release expands ALB Authentication to support JWT verification and adds support for a new JWT validation action in listener rule.
• AWS EC2: Adds complete AMI ancestry tracing from immediate parent through each preceding generation back to the root AMI
• AWS Database Migration Service: Added support of SQL statements creation, metadata model discovery and selection rules transformation.
• AWS S3Tables: Adds support for request metrics metrics APIs for S3 Tables
• AWS amp: Add VPC source configuration support enabling Amazon Managed Service for Prometheus Collector to collect metrics from MSK clusters.
• AWS Redshift: Added GetIdentityCenterAuthToken API to retrieve encrypted authentication tokens for Identity Center integrated applications. This API enables programmatic access to secure Identity Center tokens with proper error handling and parameter validation across supported SDK languages.
• AWS SageMaker: Add support for trn2.3xlarge instance type for SageMaker Hyperpod

Full Changelog: 1.5.82...1.5.83

1.5.82

What's Changed

Service Features

• AWS RTBFabric: Added LogSettings and LinkAttribute fields to external links
• AWS Security IR: Added support for configuring communication preferences as well as clearly displaying case comment author identities.
• AWS EC2: AWS Site-to-Site VPN now supports VPN connections with up to 5 Gbps bandwidth per tunnel, a 4x improvement from existing limit of 1.25 Gbps.
• AWS Medical Imaging: Added new fields in existing APIs.
• AWS Bedrock Data Automation: Added support for Language Expansion feature for BDA Audio modality.

Service Documentation

• AWS Batch: Documentation-only update: update API and doc descriptions per EKS ImageType default value switch from AL2 to AL2023.

Full Changelog: 1.5.81...1.5.82

1.5.81

What's Changed

Service Features

• AWS DSQL: Cluster endpoint added to CreateCluster and GetCluster API responses
• AWS Invoicing: Added new invoicing get-invoice-pdf API Operation
• AWS Braket: Adds ExperimentalCapabilities field to CreateQuantumTask request and GetQuantumTask response objects. Enables use of experimental software capabilities when creating quantum tasks.
• AWS Kafka: Amazon MSK now supports intelligent rebalancing for MSK Express brokers.
• AWS WAFV2: AWS WAF now supports CLOUDWATCH_TELEMETRY_RULE_MANAGED as a LogScope option, enabling automated logging configuration through Amazon CloudWatch Logs for telemetry data collection and analysis.
• AWS STS: Added GetDelegatedAccessToken API, which is not available for general use at this time.
• AWS IAM: Added CreateDelegationRequest API, which is not available for general use at this time.
• AWS EC2: Amazon EC2 Fleet customers can now filter instance types based on encryption-in-transit support using Attribute-Based Instance Type Selection (ABIS), eliminating the manual effort of identifying and selecting compatible instance types for security-sensitive workloads.
• AWS GuardDuty: Include tags filed in CreatePublishingDestinationRequest and DescribePublishingDestinationResponse.
• AWS Backup: AWS Backup supports backups of Amazon EKS clusters, including Kubernetes cluster state and persistent storage attached to the EKS cluster via a persistent volume claim (EBS volumes, EFS file systems, and S3 buckets).
• AWS ACM PCA: Private Certificate Authority service now supports ML-DSA key algorithms.
• AWS DataZone: Remove trackingServerName from DataZone Connection MLflowProperties
• AWS AppStream: AWS Appstream support for IPv6
• AWS VerifiedPermissions: Amazon Verified Permissions / Features : Adds support for entity Cedar tags.

Full Changelog: 1.5.80...1.5.81

1.5.80

What's Changed

Service Features

• AWS KMS: Added support for new ECC_NIST_EDWARDS25519 AWS KMS key spec
• AWS ControlTower: Added Parent Identifier support to ListEnabledControls and GetEnabledControl API. Implemented RemediationType support for Landing Zone operations: CreateLandingZone, UpdateLandingZone and GetLandingZone APIs
• AWS VPC Lattice: Amazon VPC Lattice now supports custom domain name for resource configurations
• AWS OpenSearch: This release introduces the Default Application feature, allowing users to set, change, or unset a preferred OpenSearch UI application on a per-region basis for a streamlined and consistent user experience.
• AWS EC2: Adds PrivateDnsPreference and PrivateDnsSpecifiedDomains to control private DNS resolution for resource and service network VPC endpoints and IpamScopeExternalAuthorityConfiguration to integrate Amazon VPC IPAM with a third-party IPAM service

Full Changelog: 1.5.79...1.5.80