3.1157.0(2026-10-26)

Chores

• codegen: sync for service default socket timeout and RPC v2 JSON (#8378) (f9d9119f)

Documentation Changes

• client-deadline: fix the sdk documenation issue only (e3bf3c6c)

New Features

• clients: update client endpoints as of 2026-10-26 (a95658fd)
• client-connect: Amazon Connect now automatically saves agents' in-progress email drafts preserving the message, recipients, and subject during browser or network interruptions so agents can return to the mail and continue instead of starting over. (d03e5700)
• client-appstream: Add Windows 11 to PlatformType enum (52666c31)
• client-lightsail: This release adds Web Application Firewall (WAF) support for Lightsail distribution. (1fee104e)
• client-marketplace-catalog: This release adds support for the SubsidiaryAuthorization entity type in the ListEntities operation, including entity-type filters with partial name search, sort options, and a summary returned for each subsidiary authorization. (a3f6ea1b)
• client-eks: This release adds support for EKS management of Gateway API CRDs (Custom Resource Definitions) (67c963fe)
• client-sso-admin: Added support for the RegionScope parameter on ListInstances, allowing you to list IAM Identity Center instances in the current Region or across all Regions. (6cc5db1b)
• client-medialive: AWS Elemental MediaLive now lets you control whether explicit weighted prediction is applied to H.264 outputs. It also introduces Perceptual Filter, a new noise reduction filter designed to improve video quality by increasing VMAF scores, now with Auto, None, and strength options. (b515e6cd)
• client-billing: Adds support for managing private pricing contracts and contractual investments including listing and associating contracts, retrieving contractual investments and their summaries, and creating, listing, and canceling contractual investment attestations (b4e7d786)
• client-taxsettings: Add Mexico Additional Info changes (88e365c5)
• client-ecr: Add support for ECR replication backfill (f5199b48)
• client-mediaconnect: This release adds support for managing and sharing endpoint across accounts in AWS Elemental MediaConnect. You can now register endpoints to represent external or service-managed sources and destinations, and share them across AWS accounts. (370e182f)
• client-signin: Adds support for the OAuth 2.0 Token Exchange grant (RFC 8693), enabling applications to exchange identity provider issued JSON Web Tokens (JWTs) for short-lived OAuth access tokens to access supported AWS services without managing separate AWS credentials. (28e1d4c8)
• client-odb: Adds support for Exascale storage with Oracle Exadata Database Service on Dedicated Infrastructure (c3b03d46)
• client-ivs: The release adds failover slate configurations, which show viewers a slate during temporary broadcaster network disruptions to reduce viewer drop-off and refresh storms. (dc8e6587)
• client-sagemaker: Amazon SageMaker HyperPod adds the MultiNodeTrainingValidation deep health check for clusters orchestrated by Amazon EKS. It validates NVIDIA GPU instances by running a short multi-node training workload and flags instances that produce numerical errors or fall behind expected training time. (836ff165)
• client-kms: This release adds support for ML-KEM (Module-Lattice-Based Key-Encapsulation Mechanism) keys in AWS KMS. ML-KEM, as specified in NIST FIPS 203, is a post-quantum key encapsulation mechanism that can be used to establish a shared secret between two parties. (838d95e4)

Tests

• dynamodb-codec: add regression test for JSON string buffer reservation (#8374) (a3077446)

For list of updated packages, view updated-packages.md in assets-3.1157.0.zip

3.1156.0(2026-10-22)

Documentation Changes

• client-lambda: AWS Lambda durable functions now supports payloads up to 1 MB for checkpoints, callback completion, and error details. (cdd6c609)

New Features

• clients: update client endpoints as of 2026-10-22 (e5cd1562)
• client-opensearchserverless: Adds APIs to create, get, list, and cancel ingestion jobs, and to create, get, list, and delete ingestion streams, for ingesting data from Amazon S3 into OpenSearch Serverless collections. (7712bce0)
• client-continuum: Releasing Continuum for Code Vulnerabilities APIs for SDKs (0cbbd64c)
• client-connect: Adds support for customer queryable replication errors. (4507ef01)
• client-ec2: AWS Transit Gateway now provides managed one-to-one NAT directly on its attachments, through integration with Regional Private NAT Gateway. Use ModifyTransitGatewayAttachmentNatConfiguration to enable NAT and configure NAT rules, and GetTransitGatewayAttachmentNatConfiguration to view them. (68bea2ce)
• client-bedrock-agentcore: Adds the dimension name to evaluation results and batch evaluation summaries. For multi-dimensional LLM-as-a-Judge evaluators, each result and summary now identifies which dimension it corresponds to. (185f264b)
• client-networkmanager: AWS Cloud WAN now provides managed one-to-one NAT directly on it's core network attachments, through integration with Regional Private NAT Gateway. Use UpdateAttachmentNatConfiguration to enable NAT and configure NAT rules, and ListAttachmentNatConfigurations to view them. (944335d4)
• client-bedrock-agentcore-control: Adds model-based routing and fallback to AgentCore Gateway rules. Rules can match the requested model, route to a specific model, and fall back across inference targets with an optional circuit breaker. Adds multi-dimensional rating scales for AgentCore Evaluations LLM-as-a-Judge evaluators. (9c2b09c2)
• client-elementalinference: Elemental Inference now supports feed scheduling, letting you apply feed configuration changes at a time you choose instead of building your own automation. (b4108829)
• client-glue: Add support for large worker types in AWS Glue (89ac4073)
• client-kafkaconnect: Amazon MSK Connect now supports pausing and resuming connectors via the asynchronous PauseConnector and ResumeConnector APIs. Paused connectors keep their configuration and committed offsets and resume where they left off. Each call returns an operation ARN to track with DescribeConnectorOperation. (f5a4343a)
• client-ivs-realtime: Adds RevokeConnectionToken operation for Amazon IVS Real-Time Streaming. (7c85a26a)

For list of updated packages, view updated-packages.md in assets-3.1156.0.zip

3.1155.0(2026-10-21)

Chores

• temporarily disconnect from eclipse for Java formatting (#8375) (6d14aac7)
• codegen: sync for JSON string serializer buffer fix and retryMode docs link (#8373) (5f53137d)
• finspace: Remove finspace and finspace-data clients following the service shutdown (#8369) (48e34c48)
• tnb: Remove tnb clients following shutdown (#8370) (e37bf8c2)

New Features

• client-quicksight: Adds support for SharePoint and OneDrive two-legged OAuth certificate credentials and Google Workspace service account credentials when creating data sources (d0d47ac9)
• client-sfn: Release minor updates to API model (6bb8593f)
• client-network-firewall: Adds support for Network Firewall Resolved IP validation. (6a634360)
• client-datazone: Added custom designations support with new CRUD APIs. The designation field in project membership and policy grant APIs supports a new enum for custom designations. These APIs also support a new field for custom designation id. (10021565)
• client-ec2: Adds new response fields to DescribeInstanceStatus and Network Insights analysis results. (8e379695)
• client-lightsail: This release adds support for metrics related to system-disk performance. (d21dd9d9)
• client-healthlake: Update the UpdateProfileWithAgent API to return a streaming response to provide more frequent updates on what the agent is doing. (c2730b30)
• client-polly: Added support for the new voices - Kenneth (en-US), Nate (en-US), Tina (de-DE), Carlos (es-US), Carolina (pt-BR), Leo (pt-BR), Curtis (en-AU), Kiara (en-IN), Arjun (en-IN) and Hyunduk (ko-KR). They are available as a Generative voices only. (4494f473)
• client-connect: Added support for AWS-managed security profiles. (04f0c0b5)
• client-auto-scaling: EC2 Auto Scaling now supports account settings, letting you manage account-level configuration for Auto Scaling. (d0cdb396)
• client-lex-models-v2: Adds support for Assisted NLU - Dialog Manager mode allowing usage of LLMs as the default NLU system and dialog management (671f2125)
• client-redshift-data: Add Redshift QueryUUID field to DescribeStatement response (6a328ab7)
• client-devops-agent: Adds support for Microsoft Teams as a notification service. Associations can now be created and updated with a Microsoft Teams team and channel configuration using the DevOps Agent API and SDKs. (c5d83651)
• client-mediaconvert: Adds AV1 CBR rate control and scene change detection. New sliding window peak bitrate setting for all codecs. DASH adaptation set grouping update. Option to disable the AV1 perceptual quality filter. Support for vertical (portrait) AV1 encoding. (7e0a4261)
• lib-dynamodb: expose transact write item types (#8334) (2fdb917a)
• dynamodb: add batch get item paginators for low level and document client (#8340) (8ec13362)
• lib-transfer-manager: add featureId tracking for TM (#8367) (edb912d5)

For list of updated packages, view updated-packages.md in assets-3.1155.0.zip

3.1154.0(2026-10-20)

New Features

• client-cloudwatchomni: Updating max value for maxResults in SearchPrincipals API (b0304f53)
• client-rds: Amazon RDS now supports On-Demand Capacity Reservations for DB instances. (4a9c582b)
• client-cloudwatch: Amazon CloudWatch now supports two new anomaly detector settings. AdaptationSpeed (FAST, NORMAL, SLOW) controls how fast the model adapts to baseline changes, and OutlierFilteringStrength (MINIMAL, MODERATE, STRICT) controls how aggressively outliers are filtered. (4ab39261)
• client-dynamodb: Adds support for disassociating a replica from an Amazon DynamoDB multi-Region eventual consistency global table, so you can keep it as a single-Region table with its existing data. Also adds disassociation protection, on by default, to help prevent accidental disassociation. (47fab49d)
• client-bedrock: Amazon Bedrock Guardrails now supports a configurable tier for the contextual grounding policy via a new tier option. Select the Standard tier for grounding that better supports conversations and reasoning, with expanded language coverage. (7b180331)
• client-ecs: ECS Service Gateway makes it easier for developers to deploy ECS services without having to worry about complex ingress networking constructs. (db0d1430)
• client-s3files: S3 Files adds support for the "Misconfigured" file system status. (398f9d10)
• client-cleanrooms: This release allows customers and their partners to easily collaborate with data stored in Databricks, without having to move or share their underlying data among collaborators. (0d7bcd99)
• client-workspaces-instances: Documentation update release for AWS service (9dc12640)
• client-elasticache: LiveMigration enables customers to migrate from self-hosted EC2 Redis and Valkey clusters to ElastiCache Serverless with near-zero downtime. Customers control the migration through three API-driven phases (prepare, start, complete) that handle traffic proxying, data replication, and cutover. (eefeb2a2)
• client-marketplace-catalog: Adds ListEntities filter, sort, and summary support for the ExpressPrivateOfferConfiguration entity type, including filtering by ProductId. (eca81e1f)

For list of updated packages, view updated-packages.md in assets-3.1154.0.zip

3.1153.0(2026-10-19)

Chores

• core: consume JSON codec from @smithy/core (#8335) (412d1362)
• update codeowners (#8365) (00c08848)
• codegen: sync for JSON codec and schema server plugin (#8353) (3e350b59)
• scripts: resolve changelog path by resolved location (#8356) (3f50ee08)

New Features

• client-codepipeline: Documentation update release for AWS service (75cdc917)
• client-devops-agent: Documentation update release for AWS service (5ff30e27)
• client-guardduty: Adding a new Expected Bucket Owner optional field for GuardDuty publishing destination APIs (2b62c860)
• client-cloudwatch: This release adds ActionConfiguration to PutMetricAlarm, PutCompositeAlarm and PutLogAlarm. It allows customers to include an alarm's tags in its notifications and alarm state change events (ae734907)
• client-observabilityadmin: Adding support for EKS Container Insights Telemetry Rules (3c63647d)
• client-xray: Adds support for encrypting the Transaction Search spans log group with a customer managed AWS KMS key. Pass the key ARN in the new CloudWatchLogsConfiguration.SpansLogGroupKmsKeyId field of UpdateTraceSegmentDestination. X-Ray applies the key when it creates the log group. (154d49fd)
• client-databrew: Documentation update release for AWS service (67b90539)
• client-bedrock-agent: Adds Retrieval Instructions for Amazon Bedrock Knowledge Bases. Create, get, update, delete, list, and version customer-authored instructions that guide how a knowledge base retrieves and answers, with content review before use. (d16d5176)
• client-emr-containers: Documentation update release for AWS service (4ba3e7bb)
• client-bedrock-agent-runtime: Adds support for applying a Retrieval Instruction, optionally by version, to AgenticRetrieveStream requests for Amazon Bedrock Knowledge Bases, and reports the applied instruction and version on the trace. (a065ceb4)
• client-dynamodb: Enable account endpoint generation for existing CN and GovCloud regions (ca19aa35)
• client-datazone: Adds SDK and CLI support for the Iceberg REST catalog connection types already available in Amazon SageMaker Unified Studio - ICEBERGRESTCATALOG, SNOWFLAKEICEBERGRESTCATALOG, and DATABRICKSICEBERGRESTCATALOG. (58940515)
• client-drs: Documentation update release for AWS service (50b058d1)
• client-amplify: Documentation update release for AWS service (7e7cacf5)
• client-bedrock-agentcore: Adds the Builtin.FailureAnalysis evaluator for batch evaluations. GetBatchEvaluation now returns insightResults that group session failures into insights with root causes and suggested fixes. (e34db602)
• client-codecommit: Documentation update release for AWS service (f6d27955)
• client-controltower: Documentation update release for AWS service (60659ee5)
• client-workspaces: Adds optional imageValidationMode enum to ImportCustomWorkspaceImageRequest. This allows customers to opt-in to having prevalidation run in the service account instead of customer account. (38638dc7)
• client-connect: Amazon Connect GetAttachedFile API now supports an optional UrlContentDisposition parameter. Set it to INLINE to get a pre-signed URL that displays the file in the browser, so agents can preview email attachments without downloading them. ATTACHMENT (download) remains the default. (81ad4d8e)
• client-cloudwatch-logs: Amazon CloudWatch Logs now supports filtering DescribeDeliverySources by resourceArns, DescribeDeliveryDestinations by names, and DescribeDeliveries by deliverySourceNames. (01e43f57)
• client-grafana: Documentation update release for AWS service (4971fd76)
• client-socialmessaging: Adding support for WhatsApp Direct Send. (0721adf5)
• client-timestream-influxdb: Adds four new parameters to the InfluxDBv3Enterprise parameter group for Amazon Timestream for InfluxDB. The new parameters are upgradePachaTree, walBufferSize, snapshotSize, and snapshotDuration. (1f97769a)
• client-codedeploy: Adds support for suspending Amazon EC2 Auto Scaling processes during CodeDeploy EC2 in-place deployments. Use ec2DeploymentOptions to choose which processes are suspended and resumed. (43c16517)
• client-codestar-notifications: Documentation update release for AWS service (b2679b61)
• client-ecs: Adds support for configurable envoy application log levels. Customers can now debug network connectivity issues with their task's sidecar envoys. (fca981d8)
• client-opensearch: Amazon OpenSearch Service adds a new TLS security policy to support FIPS policy and post-quantum cryptography (f0352631)
• client-workspaces-instances: ModifyVolume is a new public API for WorkSpaces Core Managed Instances. Customers can change the size, type, IOPS, or throughput of an existing managed volume online, with no stop required. Customers track progress by calling EC2 DescribeVolumesModifications directly. (7689ba6b)
• client-iot-wireless: Documentation update release for AWS service (202f66a7)

Bug Fixes

• token-providers: await in-flight SSO token refresh (#8363) (a8459b35)
• scripts: include preview/ in dependency version checks (#8362) (ef0483d3)

For list of updated packages, view updated-packages.md in assets-3.1153.0.zip

3.1152.0(2026-10-14)

Documentation Changes

• client-marketplace-metering: Documentation update - added a Get started pointer to the AWS Marketplace AI Metering Agent Skill in the BatchMeterUsage API reference. No API or behavior change. (c97db282)

New Features

• clients: update client endpoints as of 2026-10-14 (91a8a07c)
• client-imagebuilder: This release adds parentInstance to infrastructure configurations, so builds can use an already-running instance from an Amazon EC2 Auto Scaling group. It also adds terminateInstanceOnCompletion, which keeps build and test instances running after image creation ends. (e8a5e26b)
• client-cloudfront: This release adds a new "IpAddressType" field to "VPCOriginEndpointConfig", allowing customers to specify whether their VPC origin accepts IPv4-only or dualstack connections. (6bae6413)
• client-transfer: AWS Transfer Family now lets you store SFTP server host keys in AWS Secrets Manager in your own AWS account. This gives you greater control over your server identity and helps simplify server migrations and failover. (9d0e8866)
• client-dynamodb-streams: Add support for a new iterator type (AT TIMESTAMP) for DynamoDB Streams GetShardIterator API that allows reading from a specific point in time from the stream. (150e6ae3)
• client-ec2: Adds T8i instance sizes to the InstanceType enum. T8i instances are low-cost burstable instances powered by custom sixth generation Intel Xeon 6 processors, available exclusively on AWS, and built on the latest sixth generation AWS Nitro cards (65c6056b)
• client-arc-region-switch: Features - Adds support for an optional payload to invoke the Lambda function with as part of the Custom action Lambda execution block (d21aa72b)
• client-organizations: With dual-stack enabled, all requests now resolve to the endpoint in the partition's primary Region (for example, organizations.us-east-1.api.aws) and are signed for that Region. Previously, requests from other Regions resolved to a nonexistent endpoint. No API changes. (9324745e)
• client-bedrock-agentcore-control: This release supports scoping Amazon Bedrock AgentCore Gateway rate limits by request header or request body field. (30c5bca2)
• client-lambda: AWS Lambda now supports an optional X-Ray trace header for chained invocations in durable executions, enabling child invocations to be linked to the initiating span. (08219be0)
• client-guardduty: Releasing support for Custom Detection Rule Runtime Monitoring (0cb32b8f)
• lib-transfer-manager: publish as a preview package (#8355) (41080929)

For list of updated packages, view updated-packages.md in assets-3.1152.0.zip

3.1151.0(2026-10-13)

Chores

• lib-transfer-manager: move lib-transfer-manager to preview/ folder (#8351) (5037a006)
• scripts: add preview/ folder to build tooling (#8350) (a922905a)

Documentation Changes

• client-lambda-web: Documentation update to include common use cases. (643507a0)

New Features

• clients: update client endpoints as of 2026-10-13 (d3994582)
• client-lakeformation: Added new LakeFormation APIs and documentation updates for Simple Row-level Security (RLS). (c7a586fc)
• client-agent-registry-control: AWS Agent Registry is improving recently launched custom metadata schema feature to make shared attributes easier to manage. (ed00d0bb)
• client-omics: With Expanded container registry support, you can use container images from registries such as Seqera (Wave), NVIDIA NGC, and Google Artifact Registry with AWS HealthOmics private workflows, without manually migrating images into Amazon ECR or editing your workflow definitions. (db382740)
• client-route-53-domains: Route 53 Domains now supports premium domains. This release adds consent objects to operations on premium domains and a new GetDomainPrices API. Also, the Flags and PublicKey fields were deprecated from the DnssecKey response. (c5cc6f50)
• client-gamelift: Adds support for new instance types in the C8a, C8i, C9g, M8a, M8i, and M9g families for managed EC2 and container fleets (51456772)
• client-appstream: Adds support for administrators to require users to re-authenticate OneDrive and Google Drive storage connectors when a streaming session is reused. (2b6f2af5)
• client-connect: New APIs to support aliases and versions for ContactFlow. (39466baa)
• client-appintegrations: This release adds the Connect JWT authentication type and the AudienceOverride field to AuthConfig, letting A2A server applications authenticate with JWTs issued by Amazon Connect. (3b212b20)
• client-glue: Amazon Glue releasing support for adding custom namespace for S3 Tables in Glue zero-ETL integration (48500f23)
• client-resiliencehubv2: Adds support for DevOpsAgent integration where users can specify the agent space ARN at service level and launch investigations directly from Resilience Hub v2. (08ae7d3b)
• client-securityhub: Adds and updates APIs to support criticality. This feature allows customers to create automation rules to assign criticality to resources matching a criteria. With this release, resources and exposure findings will include the criticality. (f9bae289)
• client-sagemaker: Adds Amazon Athena, Cleanup, ForEach, and Amazon EMR Serverless step metadata, ForEach iteration context, and the CompletedWithFailures execution status to SageMaker Pipelines. (48f082ba)
• client-datasync: AWS DataSync Enhanced mode now supports FSx for OpenZFS, NFS 4.2, and object metadata controls (88d8a754)
• client-arc-region-switch: Adds support for SSM Execution Block in Region switch plans (c402e01b)

Tests

• client-kinesis: keep e2e HTTP/2 session concurrency within the Kinesis stream limit (#8349) (06ae9f60)

For list of updated packages, view updated-packages.md in assets-3.1151.0.zip

3.1150.0(2026-10-12)

Documentation Changes

• client-lambda: Doc updates to reposition Lambda Functions as Lambda Event Functions (618497da)

New Features

• clients: update client endpoints as of 2026-10-12 (39b07192)
• client-pcs: Adding scheduler version to RegisterComputeNodeGroup API. A compute node uses this value to run the matching scheduler version. (8085dcda)
• client-bedrock-agentcore-control: AgentCore Memory now supports configuring Long-Term Memory Time-to-Live (TTL) on Memory Strategies. (93d530e9)
• client-lambda-core: Lambda Network Connector now supports Lambda Web Functions, letting them reach private VPC resources, and adds versioning, each connector update creates an immutable version that revisions pin to, so customers can roll out and roll back networking changes without affecting running workloads (7ca09fa2)
• client-lambda-web: Lambda Web Functions GA launch. Lambda Web Functions enable customers to run web applications and API backends (e817ea05)
• client-sagemakertrainingsessionruntime: Amazon SageMaker Training Session Runtime provides APIs for executing operations within active training sessions, including asynchronous training operations, sampling and inference requests, and streaming real-time model responses, enabling programmatic control over the training loop. (9c1af7bd)
• client-sagemaker: Amazon SageMaker Training Session is a managed service for training on shared GPU infrastructure. It provides full lifecycle management of training sessions and exposes low-level primitive APIs for operations like forward-backward passes, optimizer steps, and state management. (94f32429)
• client-observabilityadmin: Adding support for TransactionSearch telemetry rules. (49992d7e)
• client-glue: Adds new AWS Glue Data Quality APIs to retrieve and list data quality evaluation results. The new GetDataQualityResultV2, BatchGetDataQualityResultV2, and ListDataQualityResultsV2 operations return data quality results published from any supported data processing engine. (0f677b72)
• client-bedrock-agentcore: AgentCore Memory now supports Long-Term Memory Time-to-Live on Batch APIs. (39cfa46b)
• client-pinpoint-sms-voice-v2: DescribePhoneNumbers and DescribeSenderIds now return an optional PricingTier field that indicates whether a phone number, sender ID, short code, or long code is classified as Domestic or International, enabling customers to identify origination identities eligible for local pricing. (47e4631e)
• client-omics: AWS HealthOmics now supports private workflow runs using VPC resources shared across accounts via AWS RAM. A new optional vpcOwnerAccountId field in CreateConfiguration's VpcConfig allows customers to specify the account that owns the shared subnets and security groups. (a5ee15fe)
• client-devops-agent: Adds support for the includedData field in GetAgentSpace and ListAgentSpaces APIs (1613a423)
• client-mediaconnect: This release adds support for MediaConnect Router high-bitrate tiers. It also adds a configurable audio reference level for NDI flows, and enhanced source metadata that includes color information and transport stream ID. (187bb041)
• client-securityagent: Adds support for Jira integration provider in AWS Security Agent. (892b1e4e)
• client-cloudwatchomni: Adds support for updating agentCoreEvaluationRoleArn in UpdateSpace API (afef0038)

Bug Fixes

• core/httpAuthSchemes: skip clock-skew sampling for event-stream outputs (#8346) (345466f4)

For list of updated packages, view updated-packages.md in assets-3.1150.0.zip

3.1149.0(2026-10-09)

Chores

• codegen: sync for endpoint cache fix and pre-schema error fallback (#8341) (5773a751)

New Features

• client-quicksight: Adds granular custom permissions for the Gong action connector (GongAction, CreateAndUpdateGongAction, ShareGongAction, UseGongAction) and for create, update, and share operations on 45 data source connectors, such as Amazon S3 and Snowflake, through the Custom Permissions APIs. (c5d26e39)
• client-deadline: The new ListMemberships API enables users to discover their memberships across Deadline Cloud resources, enabling scoped users of Deadline resources to discover and interact with the resources they have been provided scoped access to. (0d7406c7)
• client-marketplace-metering: AWS Marketplace Metering Service adds AgreementId to ResolveCustomer API response. (9653f5cc)
• client-mediatailor: Add caching settings to http functions (7ac7530b)
• client-securityagent: Adds a test scope field to specify whether a pentest targets a web application or a generative AI application. (1cc5ba6a)

Bug Fixes

• lib-transfer-manager:
  • retry UploadPart on worker-thread upload path (#8345) (0e357d90)
  • avoid full-body copy for SharedArrayBuffer uploads (#8338) (5473caf9)

For list of updated packages, view updated-packages.md in assets-3.1149.0.zip

3.1148.0(2026-10-08)

Documentation Changes

• client-sesv2: SESV2 DEED - Documentation Update (3d227df4)

New Features

• client-pi: This release adds Smithy RPC v2 CBOR as an additional protocol alongside the existing AWS JSON 1.1. The SDK will prioritize its most performant protocol. (1d99c7c8)
• client-marketplace-agreement: This release adds Smithy RPC v2 CBOR as an additional protocol alongside the existing AWS JSON 1.0. The SDK will prioritize its most performant protocol. (404943ce)
• client-emr-serverless: This release adds support for system profile logs for lakeformation enabled Spark connect sessions . (f9ed2f83)
• client-cost-explorer: Adds a product attribute dimension to GetCostAndUsage, GetCostAndUsageWithResources, and GetDimensionValues, letting customers group, filter, and discover Cost Explorer costs by structured attributes such as Amazon Bedrock model, provider, inference type, and feature. (7e0afd11)
• client-guardduty: Added support for GuardDuty RDS Data Activity Monitoring (aa200020)
• client-gamelift: Amazon GameLift Servers container fleets now support CPU bursting for game server container groups. The TotalVcpuLimit property of a game server container group definition is now optional. When you omit it, the group has no CPU cap and its containers can burst into unused CPU on the instance. (18121840)
• client-datazone: Adds support for multi-file notebook import. StartNotebookImport now accepts an s3Files source location with an ordered list of Amazon S3 objects, creating one notebook cell per file, plus a type field to create either a DATA or SQL notebook. (37214f3f)
• client-devops-agent: Adds release management associations with private network access to AWS DevOps Agent, and a releaseManagementAssociationId field on GitHub and GitLab associations. This helps release management agents (Release-readiness review and Release Testing) access customer resources that are behind a VPC. (55b389d1)
• client-security-ir: Adds support for retrieving finding-lifecycle metrics for an AWS Security Incident Response membership. (f4f6dfe5)
• client-cloudformation: CloudFormation introduces force rollback, a new opt-in capability that lets your stacks complete a rollback even when an individual resource cannot be reverted. Set ForceRollback on ContinueUpdateRollback and CloudFormation records each resource that fails as skipped, completing the rollback. (07e146a5)
• client-opensearch: This release adds a new EncryptionMode option (DISK or NATIVE) to EncryptionAtRestOptions for the CreateDomain and UpdateDomainConfig operations, enabling selection of engine-native index-level encryption on supported Amazon OpenSearch Service domains. (393fb011)
• client-lambda: AWS Lambda now supports OAuth 2.0 (OAUTHBEARER), IAM, and IAM with OAUTHBEARER authentication for self-managed Apache Kafka event source mappings, including optional OAuth scope, audience, logical cluster, and identity pool parameters. OAuth 2.0 is also available for Confluent Schema Registry. (c7696bfa)
• client-securityhub: Release findings export APIs - StartExportJobV2, GetExportJobV2, ListExportJobsV2, and CancelExportJobV2. This supports exporting findings from AWS Security Hub to Amazon S3 bucket. (f53e8a2a)
• client-medialive: AWS Elemental MediaLive Workflow Monitor now supports AWS Elemental Inference feeds as a target resource type for CloudWatch alarm templates. (e335e5dc)
• client-eks: Configurations support for EKS ACK Capabilities, including EnableCrossNamespace and DisableServices configuration. (82f87e7c)
• client-health: This release adds Smithy RPC v2 CBOR as an additional protocol alongside the existing AWS JSON 1.1. The SDK will prioritize its most performant protocol. (e2ffc014)
• client-budgets: Adds a product attribute dimension to CreateBudget and UpdateBudget, letting customers filter AWS Budgets costs by structured attributes such as Amazon Bedrock model, provider, inference type, and feature. (722512d1)
• client-translate: This release adds Smithy RPC v2 CBOR as an additional protocol alongside the existing AWS JSON 1.1. The SDK will prioritize its most performant protocol. (41abffc0)
• client-glue: Introduced GetSystemLogsForJobRun and GetSystemLogsForSession APIs, enabling account admins to retrieve system-space logs for FGAC-enabled Glue jobs and sessions. (9dc9c38c)
• client-fms: This release adds Smithy RPC v2 CBOR as an additional protocol alongside the existing AWS JSON 1.1. The SDK will prioritize its most performant protocol. (bb5e227d)
• client-codeconnections: This release adds Smithy RPC v2 CBOR as an additional protocol alongside the existing AWS JSON 1.0. The SDK will prioritize its most performant protocol. (5a0dceeb)
• client-keyspaces: This release adds Smithy RPC v2 CBOR as an additional protocol alongside the existing AWS JSON 1.0. The SDK will prioritize its most performant protocol. (0f8c9874)
• client-securityagent: Include model field for suggested remediation steps as part of findings (50a65bf4)

Bug Fixes

• lib-transfer-manager: use the declared checksum algorithm in workers (#8331) (0317bb82)

For list of updated packages, view updated-packages.md in assets-3.1148.0.zip