Releases: aws/aws-sdk-js-v3
Releases · aws/aws-sdk-js-v3
v3.937.0
3.937.0(2025-11-20)
Chores
Documentation Changes
- client-kinesis: Kinesis Data Streams now supports up to 50 Enhance Fan-out consumers for On-demand Advantage Streams. On-demand Standard and Provisioned streams will continue with the existing limit of 20 consumers for Enhanced Fan-out. (dc1ec575)
New Features
- clients: update client endpoints as of 2025-11-20 (a15a5b22)
- client-dsql: Added clusterVpcEndpoint field to GetVpcEndpointServiceName API response, returning the VPC connection endpoint for the cluster (9fe2380d)
- client-bedrock-data-automation: Added support for Synchronous project type and PII Detection and Redaction (fe8bca9f)
- client-budgets: Add BillingViewHealthStatusException to DescribeBudgetPerformanceHistory and ServiceQuotaExceededException to UpdateBudget for improved error handling with Billing Views. (bdce2a67)
- client-s3: Enable / Disable ABAC on a general purpose bucket. (9816b260)
- client-networkmanager: This release adds support for Cloud WAN Routing Policy providing customers sophisticated routing controls to better manage their global networks (14daa70a)
- client-redshift-data: Increasing the length limit of Statement Name from 500 to 2048. (3091e42a)
- client-elastic-load-balancing-v2: This release adds the target optimizer feature in ALB, enabling strict concurrency enforcement on targets. (3da0b3fc)
- client-lakeformation: Added ServiceIntegrations as a request parameter for CreateLakeFormationIdentityCenterConfigurationRequest and UpdateLakeFormationIdentityCenterConfigurationRequest and response parameter for DescribeLakeFormationIdentityCenterConfigurationResponse (7615a8bc)
- client-braket: Add support for Braket spending limits. (13f6f508)
- client-sagemaker: Added training plan support for inference endpoints. Added HyperPod task governance with accelerator partition-based quota allocation. Added BatchRebootClusterNodes and BatchReplaceClusterNodes APIs. Updated ListClusterNodes to include privateDnsHostName. (859f793a)
- client-ec2: This release adds support for multiple features including: VPC Encryption Control for the status of traffic flow; S2S VPN BGP Logging; TGW Flexible Costs; IPAM allocation of static IPs from IPAM pools to CF Anycast IP lists used on CloudFront distribution; and EBS Volume Integration with Recycle Bin (6fdcb506)
- client-cloudtrail: AWS launches CloudTrail aggregated events to simplify monitoring of data events at scale. This feature delivers both granular and summarized data events for resources like S3/Lambda, helping security teams identify patterns without custom aggregation logic. (d7c651c8)
- client-emr: Add support for configuring S3 destination for step logs on a per-step basis. (b24d79f6)
- client-datasync: The partition value "aws-eusc" is now permitted for ARN (Amazon Resource Name) fields. (8a6adcf7)
- client-connect: Add optional ability to exclude users from send notification actions for Contact Lens Rules. (15d923a3)
- client-ecs: Launching Amazon ECS Express Mode - a new feature that enables developers to quickly launch highly available, scalable containerized applications with a single command. (f77f87ba)
- client-quicksight: Introducing comprehensive theme styling controls. New features include border customization (radius, width, color), flexible padding controls, background styling for cards and sheets, centralized typography management, and visual-level override support across layouts. (cd0d876d)
- client-rbin: Add support for EBS volume in Recycle Bin (7fdeb129)
- client-auto-scaling: This release adds support for three new features: 1) Image ID overrides in mixed instances policy, 2) Replace Root Volume - a new strategy for Instance Refresh, and 3) Instance Lifecycle Policy for enhanced instance lifecycle management. (fff870ea)
- client-imagebuilder: EC2 Image Builder now enables the distribution of existing AMIs, retry distribution, and define distribution workflows. It also supports automatic versioning for recipes and components, allowing automatic version increments and dynamic referencing in pipelines. (0d2985c2)
- client-bedrock-agentcore: Bedrock AgentCore Memory release for redriving memory extraction jobs (StartMemoryExtractionJob and ListMemoryExtractionJob) (e5cc06e3)
- client-rds: Add support for VPC Encryption Controls. (e91f3548)
- client-cloudfront: This release adds support for bring your own IP (BYOIP) to CloudFront's CreateAnycastIpList API through an optional IpamCidrConfigs field. (aa047c72)
- client-bedrock-data-automation-runtime: Bedrock Data Automation Runtime Sync API (f14c750f)
- client-license-manager: Added cross-account resource aggregation via license asset groups and expiry tracking for Self-Managed Licenses. Extended Org-Wide View to Self-Managed Licenses, added reporting for license asset groups, and removed Athena/Glue dependencies for cross-account resource discovery in commercial regions. (54276060)
- client-glue: Added FunctionType parameter to Glue GetuserDefinedFunctions. (db36a145)
- client-securityhub: Release Findings and Resources Trends APIs- GetFindingsTrendsV2 and GetResourcesTrendsV2. This supports time-series aggregated counts with composite filtering for 1-year of historical data analysis of Findings and Resources. (82511def)
- client-application-signals: Amazon CloudWatch Application Signals now supports un-instrumented services discovery, cross-account views, and change history, helping SRE and DevOps teams monitor and troubleshoot their large-scale distributed applications. (0da48ba7)
- client-database-migration-service: Added support for customer-managed KMS key (CMK) for encryption for import private key certificate. Additionally added Amazon SageMaker Lakehouse endpoint used for zero-ETL integrations with data warehouses. (7edb9744)
- client-device-farm: Add support for environment variables and an IAM execution role. (3476f4df)
- client-organizations: Added new APIs for Billing Transfer, new policy type INSPECTOR_POLICY, and allow an account to transfer between organizations (674519a3)
For list of updated packages, view updated-packages.md in assets-3.937.0.zip
v3.936.0
v3.935.0
3.935.0(2025-11-19)
Chores
New Features
- clients: update client endpoints as of 2025-11-19 (d7b51c49)
- client-sts: IAM now supports outbound identity federation via the STS GetWebIdentityToken API, enabling AWS workloads to securely authenticate with external services using short-lived JSON Web Tokens. (f9fed01c)
- client-dynamodb: Extended Global Secondary Index (GSI) composite keys to support up to 8 attributes. (622ef038)
- client-medialive: MediaLive is adding support for MediaConnect Router by supporting a new input type called MEDIACONNECT_ROUTER. This new input type will provide seamless encrypted transport between MediaConnect Router and your MediaLive channel. (1667189e)
- client-bcm-pricing-calculator: Add GroupSharingPreference, CostCategoryGroupSharingPreferenceArn, and CostCategoryGroupSharingPreferenceEffectiveDate to Bill Estimate. Add GroupSharingPreference and CostCategoryGroupSharingPreferenceArn to Bill Scenario. (e0dc140c)
- client-backup: Amazon GuardDuty Malware Protection now supports AWS Backup, extending malware detection capabilities to EC2, EBS, and S3 backups. (498dcf3d)
- client-connectcampaignsv2: This release added support for ring timer configuration for campaign calls. (1155c3c4)
- client-ecs: Added support for Amazon ECS Managed Instances infrastructure optimization configuration. (2ee0c3f3)
- client-ecr: Add support for ECR archival storage class and Inspector org policy for scanning (ed5e232d)
- client-sagemaker: Added support for enhanced metrics for SageMaker AI Endpoints. This features provides Utilization Metrics at instance and container granularity and also provides easy configuration of metric publish frequency from 10 sec -> 5 mins (ad2587c7)
- client-apigatewayv2: Support for API Gateway portals and portal products. (fc064256)
- client-billingconductor: This release adds support for Billing Transfers, enabling management of billing transfers with billing groups on AWS Billing Conductor. (4e32b65d)
- client-cloudwatch-logs: Adding support for ocsf version 1.5, add optional parameter MappingVersion (2a15be86)
- client-api-gateway: API Gateway now supports response streaming and new security policies for REST APIs and custom domain names. (e1d2d6b1)
- client-cost-optimization-hub: Release ListEfficiencyMetrics API (2b031582)
- client-bedrock-runtime: This release includes support for Search Results. (40ffa77a)
- client-cloudtrail: AWS CloudTrail now supports Insights for data events, expanding beyond management events to automatically detect unusual activity on data plane operations. (f8570665)
- client-health: Adds actionability and personas properties to Health events exposed through DescribeEvents, DescribeEventsForOrganization, DescribeEventDetails, and DescribeEventTypes APIs. Adds filtering by actionabilities and personas in EventFilter, OrganizationEventFilter, EventTypeFilter. (c754b242)
- client-networkflowmonitor: Added new enum value (AWS::EKS::Cluster) for type field under MonitorLocalResource (66729787)
- client-invoicing: Add support for adding Billing transfers in Invoice configuration (2e493490)
- client-s3: Adds support for blocking SSE-C writes to general purpose buckets. (cee2e72f)
- client-network-firewall: Partner Managed Rulegroup feature support (2e8472d6)
- client-emr: Add CloudWatch Logs integration for Spark driver, executor and step logs (7e6e1684)
- client-fsx: Adding File Server Resource Manager configuration to FSx Windows (2e3c0c96)
- client-guardduty: Add support for scanning and viewing scan results for backup resource types (231cf06b)
- client-sfn: Adds support to TestState for mocked results and exceptions, along with additional inspection data. (1b18be75)
- client-partnercentral-channel: Initial GA launch of Partner Central Channel (b77d1682)
- client-secrets-manager: Adds support to create, update, retrieve, rotate, and delete managed external secrets. (c13b6f97)
- client-iam: Added the EnableOutboundWebIdentityFederation, DisableOutboundWebIdentityFederation and GetOutboundWebIdentityFederationInfo APIs for the IAM outbound federation feature. (5774faa2)
- client-cost-explorer: Add support for COST_CATEGORY, TAG, and LINKED_ACCOUNT AWS managed cost anomaly detection monitors (ab1e44d9)
- client-mediaconnect: This release adds support for global routing in AWS Elemental MediaConnect. You can now use router inputs and router outputs to manage global video and audio routing workflows both within the AWS-Cloud and over the public internet. (4a372d33)
- client-billing: Added name filtering support to ListBillingViews API through the new names parameter to efficiently filter billing views by name. (8c6af8c2)
- client-ec2: This launch adds support for two new features: Regional NAT Gateway and IPAM Policies. IPAM policies offers customers central control for public IPv4 assignments across AWS services. Regional NAT is a single NAT Gateway that automatically expands across AZs in a VPC to maintain high availability. (e6ed3823)
- client-signin: AWS Sign-In manages authentication for AWS services. This service provides secure authentication flows for accessing AWS resources from the console and developer tools. This release adds the CreateOAuth2Token API, which can be used to fetch OAuth2 access tokens and refresh tokens from Sign-In. (21a4dff3)
- client-inspector2: This release introduces BLOCKED_BY_ORGANIZATION_POLICY error code and IMAGE_ARCHIVED scanStatusReason. BLOCKED_BY_ORGANIZATION_POLICY error code is returned when an operation is blocked by an AWS Organizations policy. IMAGE_ARCHIVED scanStatusReason is returned when an Image is archived in ECR. (ccaf51bb)
- client-lambda: Added support for creating and invoking Tenant Isolated functions in AWS Lambda APIs. (fc517d86)
- client-datazone: Amazon DataZone now supports business metadata (readme and metadata forms) at the individual attribute (column) level, a new rule type for glossary terms, and the ability to update the owner of the root domain unit. (21f12b43)
- client-rum: CloudWatch RUM now supports mobile application monitoring for Android and iOS platforms (6513bd2a)
- client-route-53: Add dual-stack endpoint support for Route53 ([6fbbbd3](https://github.com/aws/aws-sdk-js-v3/...
v3.934.0
3.934.0(2025-11-18)
New Features
- clients: update client endpoints as of 2025-11-18 (0f989254)
- client-connect: This release added support for ring timer configuration for campaign calls. (ae3d7600)
- client-cloudwatch-logs: CloudWatch Logs updates: Added capability to setup a recurring schedule for log insights queries. Logs introduced Scheduled Queries (managed through Create/Update/Get/Delete/List/History Scheduled Query APIs). For more information, see CloudWatch Logs API documentation. (467947d4)
- client-wafv2: AssociateWebACL, UpdateWebACL and PutLoggingConfiguration will now throw WAFFeatureNotIncludedInPricingPlanException when the request contains a feature that is not included in the CloudFront pricing plan of the WebACL. (6da7a3db)
- client-storage-gateway: Adds support for European Sovereign Cloud ARNs in Storage Gateway API parameters. (c7dd6fd7)
- client-cloudformation: New CloudFormation DescribeEvents API with operation ID tracking and failure filtering capabilities to quickly identify root causes of deployment failures. Also, a DeploymentMode parameter for the CreateChangeSet API that enables creation of drift-aware change sets for safe drift management. (04624df2)
- client-kafka: Amazon MSK adds three new APIs, ListTopics, DescribeTopic, and DescribeTopicPartitions for viewing Kafka topics in your MSK clusters. (12ad701d)
- client-backup: AWS Backup now supports a low-cost warm storage tier for Amazon S3 backup data. (0b0c9b8f)
- client-iam: Added the AssociateDelegationRequest, GetDelegationRequest, AcceptDelegationRequest, RejectDelegatonRequest, ListDelegationRequests, UpdateDelegationRequest, SendDelegationToken and GetHumanReadableSummary APIs for the IAM temporary delegation feature. (b200679b)
- client-resource-groups-tagging-api: Add support for new ListRequiredTags API used to retrieve the required tags specified in a customer's effective tag policy. (fa505515)
- client-ec2: AWS Site-to-Site VPN now supports VPN Concentrator, a new feature that enables customers to connect multiple low-bandwidth sites connections through a single attachment, simplifying multi-site connectivity for distributed enterprises. (b94cadfd)
- client-bedrock-runtime: Amazon Bedrock Runtime Service Tier Support Launch (ea418df5)
- client-auto-scaling: This release adds the new LaunchInstances API, which can launch instances synchronously in an AutoScaling group. The API also returns instances info and launch error back immediately. (5d96b688)
Tests
For list of updated packages, view updated-packages.md in assets-3.934.0.zip
v3.933.0
3.933.0(2025-11-17)
Chores
New Features
- clients: update client endpoints as of 2025-11-17 (a9869e99)
- client-bedrock: Automated Reasoning checks in Amazon Bedrock Guardrails now automatically generate Q&A tests for new Automated Reasoning policies. The GetAutomatedReasoningPolicyBuildWorkflowResultAssets API adds GENERATED_TEST_CASES asset type, allowing customers to retrieve tests generated by the build workflow. (0e347c45)
- client-database-migration-service: This release introduces the SAP ASE(Sybase) Data Provider for AWS Data Migration Service (DMS). In addition, DMS Schema Conversion now supports this provider, enabling customers to migrate SAP ASE(Sybase) databases to Amazon RDS for PostgreSQL or Aurora PostgreSQL seamlessly. (c44cfad0)
- client-mwaa-serverless: Amazon MWAA now offers serverless deployment, eliminating operational overhead while optimizing costs. The service supports YAML and Python-based workflows, with 80+ AWS Operators. It provides isolated execution, IAM permissions, and automatic scaling with pay-per-use pricing. (53dbffc3)
- client-device-farm: This release adds support for interacting with devices during a remote access session using the remoteDriverEndpoint interface (574b1897)
- client-ec2: This release introduces new APIs: DescribeInstanceSqlHaStates, DescribeInstanceSqlHaHistoryStates, EnableInstanceSqlHaStandbyDetections and DisableInstanceSqlHaStandbyDetections on Amazon EC2, allowing customers to enroll and monitor SQL Server licensing fee savings for their SQL HA EC2 instances. (c0076d8e)
- client-appstream: Adding support for additional instances and extended storage (ec6111c8)
- client-route53resolver: Adding DICTIONARY_DGA to dns-threat-protection as a new enum type. Customers can now set rules for dictionary dga protection (adec304c)
- client-medialive: Adds configurations for spatial/temporal adaptive quantization in AV1 codec, and conversion to HLG output color space in H265 codec. (d994f74e)
- client-opensearch: This release adds index operation APIs to support Automatic Semantic Enrichment feature (8e96aa9a)
- client-backup: AWS Backup now supports specifying a logically air-gapped backup vault as a primary backup target in backup plans and on-demand backup jobs. (8223f6d1)
- client-guardduty: Add S3 On-Demand Object Scanning (0d0b1aea)
- client-pcs: Added support for the managed Slurm REST API endpoint (2557db0f)
- client-lex-models-v2: Adds support for LLM as Primary, allowing usage of LLMs as the default NLU system. (f2bcb725)
- client-mediapackagev2: Add support for SCTE messages in Segment file output (67d2919f)
- client-glue: Amazon Glue Releasing 2 the new API ListIntegrationResourceProperties and DeleteIntegrationResourceProperty along with minor improvement on existing API(s). (266572c5)
Tests
For list of updated packages, view updated-packages.md in assets-3.933.0.zip
v3.932.0
3.932.0(2025-11-14)
New Features
- clients: update client endpoints as of 2025-11-14 (87473bd2)
- client-ec2: This release adds AvailabilityZoneId support for CreateInstanceConnectEndpoint, DescribeInstanceConnectEndpoints, and DeleteInstanceConnectEndpoint APIs. (5ba1cf64)
- client-datazone: Adds support for granting read and write access to Amazon S3 general purpose buckets using CreateSubscriptionRequest and AcceptSubscriptionRequest APIs. Also adds search filters for SSOUser and SSOGroup to ListSubscriptions APIs and deprecates "sortBy" parameter for ListSubscriptions APIs. (77488e77)
- client-medialive: Removed all the value constraint (min/max) for the shape definitions (e.g. integerMin0Max3600) on the C2j models to get rid of the need to request an exemption from the SDK team whenever a shape definition (e.g. integerMin0Max3600) is changed. (9bcaeef4)
- client-imagebuilder: EC2 Image Builder now supports invoking Lambda functions and executing Step Functions state machine through image workflows. (f8fe9d73)
Bug Fixes
For list of updated packages, view updated-packages.md in assets-3.932.0.zip
v3.931.0
3.931.0(2025-11-13)
Chores
New Features
- client-sagemaker: Added support for minor version upgrades and AWS Identity Center integration for SageMaker Hadron Partner Apps, enabling automated version management and IdC group-based access control. (99fbf1f1)
- client-elastic-load-balancing-v2: QUIC and TCP_QUIC protocol support for Network Load Balancer (NLB). This capability enables customers to forward QUIC traffic to their targets with ultra-low latency while maintaining session stickiness using QUIC Connection IDs. (555b55de)
- client-ecr: Add Amazon ECR FIPS PrivateLink endpoint support (b2a1603e)
- client-cloudformation: CloudFormation now supports GetHookResult API with annotations to retrieve structured compliance check results and remediation guidance for each evaluated resource, replacing the previous single-message limitation with detailed validation outcomes. (326e5dda)
- client-rds: Updated endpoint and service metadata (b075f0ff)
- client-mediaconvert: Lowers minimum duration for black video generator. Adds support for embedding and signing C2PA content credentials in DASH and CMAF HLS outputs. (dc04e020)
- client-workspaces-web: Support for managing web content filtering for defining, tracking and regulating type of content accessed with WorkSpaces Secure Browser as part of browser settings. (36de0dee)
- client-controlcatalog: Added support for related control mappings with new RELATED_CONTROL mapping type in ListControlMappings API. (1333cd34)
- client-iot-wireless: Integration of Device Location with Amazon Sidewalk network for Amazon Sidewalk enabled devices (bcf811ef)
- client-ec2: Added support for new accelerator types ("media") and accelerator names ("L4", "L40s", "GAUDI_HL_205", "INFERENTIA2", "TRAINIUM", "TRAINIUM2", "U30") in Attributes Based Instance Type Selection for launched instance types. (69871860)
- clients: use schema-serde in AWS REST XML clients (#7499) (f806a2b9)
Bug Fixes
For list of updated packages, view updated-packages.md in assets-3.931.0.zip
v3.930.0
3.930.0(2025-11-12)
Chores
New Features
- client-sagemaker: Add support for trn2.3xlarge instance type for SageMaker Hyperpod (bf8d2ce3)
- client-redshift: Added GetIdentityCenterAuthToken API to retrieve encrypted authentication tokens for Identity Center integrated applications. This API enables programmatic access to secure Identity Center tokens with proper error handling and parameter validation across supported SDK languages. (145a8368)
- client-amp: Add VPC source configuration support enabling Amazon Managed Service for Prometheus Collector to collect metrics from MSK clusters. (4aca00ff)
- client-s3tables: Adds support for request metrics metrics APIs for S3 Tables (0cb01631)
- client-database-migration-service: Added support of SQL statements creation, metadata model discovery and selection rules transformation. (95bd643b)
- client-ec2: Adds complete AMI ancestry tracing from immediate parent through each preceding generation back to the root AMI (fa8c029b)
- client-elastic-load-balancing-v2: This release expands ALB Authentication to support JWT verification and adds support for a new JWT validation action in listener rule. (46928a72)
- client-connect: Updated Authentication Profile APIs to add support for automatic logout on user inactivity (99b0f8d9)
- clients: use schema-serde in AWS Query & EC2 Query clients (#7489) (e9b6da8f)
Tests
For list of updated packages, view updated-packages.md in assets-3.930.0.zip
v3.929.0
3.929.0(2025-11-11)
Documentation Changes
- client-batch: Documentation-only update: update API and doc descriptions per EKS ImageType default value switch from AL2 to AL2023. (42db21d3)
New Features
- client-bedrock-data-automation: Added support for Language Expansion feature for BDA Audio modality. (e2374dbd)
- client-medical-imaging: Added new fields in existing APIs. (8e8ee4a0)
- client-ec2: AWS Site-to-Site VPN now supports VPN connections with up to 5 Gbps bandwidth per tunnel, a 4x improvement from existing limit of 1.25 Gbps. (165cccca)
- client-security-ir: Added support for configuring communication preferences as well as clearly displaying case comment author identities. (6c2d4f91)
- client-rtbfabric: Added LogSettings and LinkAttribute fields to external links (5f3dd496)
- clients: use schema-serde in AWS REST JSON clients (#7485) (99a36932)
Tests
- client-s3vectors: add e2e test (#7487) (8d3df6ff)
- client-dynamodb: e2e test for type registry based error handling (#7486) (ba1aeb67)
- client-cloudwatch-logs: e2e test for live tail event streams (#7484) (3d7ac161)
For list of updated packages, view updated-packages.md in assets-3.929.0.zip
v3.928.0
3.928.0(2025-11-10)
Chores
New Features
- client-verifiedpermissions: Amazon Verified Permissions / Features : Adds support for entity Cedar tags. (d635af58)
- client-appstream: AWS Appstream support for IPv6 (6fc319f4)
- client-datazone: Remove trackingServerName from DataZone Connection MLflowProperties (8c22eaae)
- client-acm-pca: Private Certificate Authority service now supports ML-DSA key algorithms. (1bd0b8f9)
- client-backup: AWS Backup supports backups of Amazon EKS clusters, including Kubernetes cluster state and persistent storage attached to the EKS cluster via a persistent volume claim (EBS volumes, EFS file systems, and S3 buckets). (d45f0ebc)
- client-guardduty: Include tags filed in CreatePublishingDestinationRequest and DescribePublishingDestinationResponse. (9b11c354)
- client-ec2: Amazon EC2 Fleet customers can now filter instance types based on encryption-in-transit support using Attribute-Based Instance Type Selection (ABIS), eliminating the manual effort of identifying and selecting compatible instance types for security-sensitive workloads. (2b4fb805)
- client-iam: Added CreateDelegationRequest API, which is not available for general use at this time. (a7579e45)
- client-sts: Added GetDelegatedAccessToken API, which is not available for general use at this time. (41552ed6)
- client-wafv2: AWS WAF now supports CLOUDWATCH_TELEMETRY_RULE_MANAGED as a LogScope option, enabling automated logging configuration through Amazon CloudWatch Logs for telemetry data collection and analysis. (79d73853)
- client-kafka: Amazon MSK now supports intelligent rebalancing for MSK Express brokers. (265e5dae)
- client-braket: Adds ExperimentalCapabilities field to CreateQuantumTask request and GetQuantumTask response objects. Enables use of experimental software capabilities when creating quantum tasks. (6c179ae7)
- client-invoicing: Added new invoicing get-invoice-pdf API Operation (de2f6799)
- client-dsql: Cluster endpoint added to CreateCluster and GetCluster API responses (647406db)
- clients: use schema-serde in AWS JSON RPC clients (#7483) (b0f07b49)
For list of updated packages, view updated-packages.md in assets-3.928.0.zip