v1.5.87

[1.5.87] - 11/19/2025

Features

• Adds a new credentials provider for AWS Login token authentication

v1.5.86

[1.5.86] - 11/19/2025

Features

• (apigateway) API Gateway now supports response streaming and new security policies for REST APIs and custom domain names.
• (apigatewayv2) Support for API Gateway portals and portal products.
• (backup) Amazon GuardDuty Malware Protection now supports AWS Backup, extending malware detection capabilities to EC2, EBS, and S3 backups.
• (bcmpricingcalculator) Add GroupSharingPreference, CostCategoryGroupSharingPreferenceArn, and CostCategoryGroupSharingPreferenceEffectiveDate to Bill Estimate. Add GroupSharingPreference and CostCategoryGroupSharingPreferenceArn to Bill Scenario.
• (bedrockruntime) This release includes support for Search Results.
• (billing) Added name filtering support to ListBillingViews API through the new names parameter to efficiently filter billing views by name.
• (billingconductor) This release adds support for Billing Transfers, enabling management of billing transfers with billing groups on AWS Billing Conductor.
• (cloudtrail) AWS CloudTrail now supports Insights for data events, expanding beyond management events to automatically detect unusual activity on data plane operations.
• (cloudwatchlogs) Adding support for ocsf version 1.5, add optional parameter MappingVersion
• (connectcampaignsv2) This release added support for ring timer configuration for campaign calls.
• (costexplorer) Add support for COST_CATEGORY, TAG, and LINKED_ACCOUNT AWS managed cost anomaly detection monitors
• (costoptimizationhub) Release ListEfficiencyMetrics API
• (datazone) Amazon DataZone now supports business metadata (readme and metadata forms) at the individual attribute (column) level, a new rule type for glossary terms, and the ability to update the owner of the root domain unit.
• (dynamodb) Extended Global Secondary Index (GSI) composite keys to support up to 8 attributes.
• (ec2) This launch adds support for two new features: Regional NAT Gateway and IPAM Policies. IPAM policies offers customers central control for public IPv4 assignments across AWS services. Regional NAT is a single NAT Gateway that automatically expands across AZs in a VPC to maintain high availability.
• (ecr) Add support for ECR archival storage class and Inspector org policy for scanning
• (ecs) Added support for Amazon ECS Managed Instances infrastructure optimization configuration.
• (emr) Add CloudWatch Logs integration for Spark driver, executor and step logs
• (fsx) Adding File Server Resource Manager configuration to FSx Windows
• (guardduty) Add support for scanning and viewing scan results for backup resource types
• (health) Adds actionability and personas properties to Health events exposed through DescribeEvents, DescribeEventsForOrganization, DescribeEventDetails, and DescribeEventTypes APIs. Adds filtering by actionabilities and personas in EventFilter, OrganizationEventFilter, EventTypeFilter.
• (iam) Added the EnableOutboundWebIdentityFederation, DisableOutboundWebIdentityFederation and GetOutboundWebIdentityFederationInfo APIs for the IAM outbound federation feature.
• (inspector2) This release introduces BLOCKED_BY_ORGANIZATION_POLICY error code and IMAGE_ARCHIVED scanStatusReason. BLOCKED_BY_ORGANIZATION_POLICY error code is returned when an operation is blocked by an AWS Organizations policy. IMAGE_ARCHIVED scanStatusReason is returned when an Image is archived in ECR.
• (invoicing) Add support for adding Billing transfers in Invoice configuration
• (lambda) Added support for creating and invoking Tenant Isolated functions in AWS Lambda APIs.
• (mediaconnect) This release adds support for global routing in AWS Elemental MediaConnect. You can now use router inputs and router outputs to manage global video and audio routing workflows both within the AWS-Cloud and over the public internet.
• (medialive) MediaLive is adding support for MediaConnect Router by supporting a new input type called MEDIACONNECT_ROUTER. This new input type will provide seamless encrypted transport between MediaConnect Router and your MediaLive channel.
• (networkfirewall) Partner Managed Rulegroup feature support
• (networkflowmonitor) Added new enum value (AWS::EKS::Cluster) for type field under MonitorLocalResource
• (partnercentralchannel) Initial GA launch of Partner Central Channel
• (route53) Add dual-stack endpoint support for Route53
• (rum) CloudWatch RUM now supports mobile application monitoring for Android and iOS platforms
• (s3) Adds support for blocking SSE-C writes to general purpose buckets.
• (sagemaker) Added support for enhanced metrics for SageMaker AI Endpoints. This features provides Utilization Metrics at instance and container granularity and also provides easy configuration of metric publish frequency from 10 sec -> 5 mins
• (secretsmanager) Adds support to create, update, retrieve, rotate, and delete managed external secrets.
• (sfn) Adds support to TestState for mocked results and exceptions, along with additional inspection data.
• (signin) AWS Sign-In manages authentication for AWS services. This service provides secure authentication flows for accessing AWS resources from the console and developer tools. This release adds the CreateOAuth2Token API, which can be used to fetch OAuth2 access tokens and refresh tokens from Sign-In.
• (sts) IAM now supports outbound identity federation via the STS GetWebIdentityToken API, enabling AWS workloads to securely authenticate with external services using short-lived JSON Web Tokens.
• (transcribestreaming) This release adds support for additional locales in AWS transcribe streaming.

v1.5.85

[1.5.85] - 11/18/2025

Features

• (autoscaling) This release adds the new LaunchInstances API, which can launch instances synchronously in an AutoScaling group. The API also returns instances info and launch error back immediately.
• (backup) AWS Backup now supports a low-cost warm storage tier for Amazon S3 backup data.
• (bedrockruntime) Amazon Bedrock Runtime Service Tier Support Launch
• (cloudformation) New CloudFormation DescribeEvents API with operation ID tracking and failure filtering capabilities to quickly identify root causes of deployment failures. Also, a DeploymentMode parameter for the CreateChangeSet API that enables creation of drift-aware change sets for safe drift management.
• (cloudwatchlogs) CloudWatch Logs updates: Added capability to setup a recurring schedule for log insights queries. Logs introduced Scheduled Queries (managed through Create/Update/Get/Delete/List/History Scheduled Query APIs). For more information, see CloudWatch Logs API documentation.
• (connect) This release added support for ring timer configuration for campaign calls.
• (ec2) AWS Site-to-Site VPN now supports VPN Concentrator, a new feature that enables customers to connect multiple low-bandwidth sites connections through a single attachment, simplifying multi-site connectivity for distributed enterprises.
• (iam) Added the AssociateDelegationRequest, GetDelegationRequest, AcceptDelegationRequest, RejectDelegatonRequest, ListDelegationRequests, UpdateDelegationRequest, SendDelegationToken and GetHumanReadableSummary APIs for the IAM temporary delegation feature.
• (kafka) Amazon MSK adds three new APIs, ListTopics, DescribeTopic, and DescribeTopicPartitions for viewing Kafka topics in your MSK clusters.
• (resourcegroupstaggingapi) Add support for new ListRequiredTags API used to retrieve the required tags specified in a customer's effective tag policy.
• (storagegateway) Adds support for European Sovereign Cloud ARNs in Storage Gateway API parameters.
• (wafv2) AssociateWebACL, UpdateWebACL and PutLoggingConfiguration will now throw WAFFeatureNotIncludedInPricingPlanException when the request contains a feature that is not included in the CloudFront pricing plan of the WebACL.

v1.5.84

[1.5.84] - 11/17/2025

Features

• (appstream) Adding support for additional instances and extended storage
• (backup) AWS Backup now supports specifying a logically air-gapped backup vault as a primary backup target in backup plans and on-demand backup jobs.
• (bedrock) Automated Reasoning checks in Amazon Bedrock Guardrails now automatically generate Q&A tests for new Automated Reasoning policies. The GetAutomatedReasoningPolicyBuildWorkflowResultAssets API adds GENERATED_TEST_CASES asset type, allowing customers to retrieve tests generated by the build workflow.
• (databasemigrationservice) This release introduces the SAP ASE(Sybase) Data Provider for AWS Data Migration Service (DMS). In addition, DMS Schema Conversion now supports this provider, enabling customers to migrate SAP ASE(Sybase) databases to Amazon RDS for PostgreSQL or Aurora PostgreSQL seamlessly.
• (devicefarm) This release adds support for interacting with devices during a remote access session using the remoteDriverEndpoint interface
• (ec2) This release introduces new APIs: DescribeInstanceSqlHaStates, DescribeInstanceSqlHaHistoryStates, EnableInstanceSqlHaStandbyDetections and DisableInstanceSqlHaStandbyDetections on Amazon EC2, allowing customers to enroll and monitor SQL Server licensing fee savings for their SQL HA EC2 instances.
• (glue) Amazon Glue Releasing 2 the new API ListIntegrationResourceProperties and DeleteIntegrationResourceProperty along with minor improvement on existing API(s).
• (guardduty) Add S3 On-Demand Object Scanning
• (lexmodelsv2) Adds support for LLM as Primary, allowing usage of LLMs as the default NLU system.
• (medialive) Adds configurations for spatial/temporal adaptive quantization in AV1 codec, and conversion to HLG output color space in H265 codec.
• (mediapackagev2) Add support for SCTE messages in Segment file output
• (mwaaserverless) Amazon MWAA now offers serverless deployment, eliminating operational overhead while optimizing costs. The service supports YAML and Python-based workflows, with 80+ AWS Operators. It provides isolated execution, IAM permissions, and automatic scaling with pay-per-use pricing.
• (opensearch) This release adds index operation APIs to support Automatic Semantic Enrichment feature
• (pcs) Added support for the managed Slurm REST API endpoint
• (route53resolver) Adding DICTIONARY_DGA to dns-threat-protection as a new enum type. Customers can now set rules for dictionary dga protection

v1.5.83

[1.5.83] - 11/14/2025

Features

• (datazone) Adds support for granting read and write access to Amazon S3 general purpose buckets using CreateSubscriptionRequest and AcceptSubscriptionRequest APIs. Also adds search filters for SSOUser and SSOGroup to ListSubscriptions APIs and deprecates "sortBy" parameter for ListSubscriptions APIs.
• (ec2) This release adds AvailabilityZoneId support for CreateInstanceConnectEndpoint, DescribeInstanceConnectEndpoints, and DeleteInstanceConnectEndpoint APIs.
• (imagebuilder) EC2 Image Builder now supports invoking Lambda functions and executing Step Functions state machine through image workflows.
• (medialive) Removed all the value constraint (min/max) for the shape definitions (e.g. integerMin0Max3600) on the C2j models to get rid of the need to request an exemption from the SDK team whenever a shape definition (e.g. integerMin0Max3600) is changed.

v1.5.82

[1.5.82] - 11/13/2025

Features

• (cloudformation) CloudFormation now supports GetHookResult API with annotations to retrieve structured compliance check results and remediation guidance for each evaluated resource, replacing the previous single-message limitation with detailed validation outcomes.
• (controlcatalog) Added support for related control mappings with new RELATED_CONTROL mapping type in ListControlMappings API.
• (ec2) Added support for new accelerator types ("media") and accelerator names ("L4", "L40s", "GAUDI_HL_205", "INFERENTIA2", "TRAINIUM", "TRAINIUM2", "U30") in Attributes Based Instance Type Selection for launched instance types.
• (ecr) Add Amazon ECR FIPS PrivateLink endpoint support
• (elasticloadbalancingv2) QUIC and TCP_QUIC protocol support for Network Load Balancer (NLB). This capability enables customers to forward QUIC traffic to their targets with ultra-low latency while maintaining session stickiness using QUIC Connection IDs.
• (iotwireless) Integration of Device Location with Amazon Sidewalk network for Amazon Sidewalk enabled devices
• (mediaconvert) Lowers minimum duration for black video generator. Adds support for embedding and signing C2PA content credentials in DASH and CMAF HLS outputs.
• (rds) Updated endpoint and service metadata
• (sagemaker) Added support for minor version upgrades and AWS Identity Center integration for SageMaker Hadron Partner Apps, enabling automated version management and IdC group-based access control.
• (workspacesweb) Support for managing web content filtering for defining, tracking and regulating type of content accessed with WorkSpaces Secure Browser as part of browser settings.

v1.5.81

[1.5.81] - 11/12/2025

Features

• (amp) Add VPC source configuration support enabling Amazon Managed Service for Prometheus Collector to collect metrics from MSK clusters.
• (connect) Updated Authentication Profile APIs to add support for automatic logout on user inactivity
• (databasemigrationservice) Added support of SQL statements creation, metadata model discovery and selection rules transformation.
• (ec2) Adds complete AMI ancestry tracing from immediate parent through each preceding generation back to the root AMI
• (elasticloadbalancingv2) This release expands ALB Authentication to support JWT verification and adds support for a new JWT validation action in listener rule.
• (redshift) Added GetIdentityCenterAuthToken API to retrieve encrypted authentication tokens for Identity Center integrated applications. This API enables programmatic access to secure Identity Center tokens with proper error handling and parameter validation across supported SDK languages.
• (s3tables) Adds support for request metrics metrics APIs for S3 Tables
• (sagemaker) Add support for trn2.3xlarge instance type for SageMaker Hyperpod

v1.5.80

[1.5.80] - 11/11/2025

Features

• (bedrockdataautomation) Added support for Language Expansion feature for BDA Audio modality.
• (ec2) AWS Site-to-Site VPN now supports VPN connections with up to 5 Gbps bandwidth per tunnel, a 4x improvement from existing limit of 1.25 Gbps.
• (medicalimaging) Added new fields in existing APIs.
• (rtbfabric) Added LogSettings and LinkAttribute fields to external links
• (securityir) Added support for configuring communication preferences as well as clearly displaying case comment author identities.

Documentation

• (batch) Documentation-only update: update API and doc descriptions per EKS ImageType default value switch from AL2 to AL2023.

v1.5.79

[1.5.79] - 11/10/2025

Features

• (acmpca) Private Certificate Authority service now supports ML-DSA key algorithms.
• (appstream) AWS Appstream support for IPv6
• (backup) AWS Backup supports backups of Amazon EKS clusters, including Kubernetes cluster state and persistent storage attached to the EKS cluster via a persistent volume claim (EBS volumes, EFS file systems, and S3 buckets).
• (braket) Adds ExperimentalCapabilities field to CreateQuantumTask request and GetQuantumTask response objects. Enables use of experimental software capabilities when creating quantum tasks.
• (datazone) Remove trackingServerName from DataZone Connection MLflowProperties
• (dsql) Cluster endpoint added to CreateCluster and GetCluster API responses
• (ec2) Amazon EC2 Fleet customers can now filter instance types based on encryption-in-transit support using Attribute-Based Instance Type Selection (ABIS), eliminating the manual effort of identifying and selecting compatible instance types for security-sensitive workloads.
• (guardduty) Include tags filed in CreatePublishingDestinationRequest and DescribePublishingDestinationResponse.
• (iam) Added CreateDelegationRequest API, which is not available for general use at this time.
• (invoicing) Added new invoicing get-invoice-pdf API Operation
• (kafka) Amazon MSK now supports intelligent rebalancing for MSK Express brokers.
• (sts) Added GetDelegatedAccessToken API, which is not available for general use at this time.
• (verifiedpermissions) Amazon Verified Permissions / Features : Adds support for entity Cedar tags.
• (wafv2) AWS WAF now supports CLOUDWATCH_TELEMETRY_RULE_MANAGED as a LogScope option, enabling automated logging configuration through Amazon CloudWatch Logs for telemetry data collection and analysis.

v1.5.78

[1.5.78] - 11/07/2025

Features

• (controltower) Added Parent Identifier support to ListEnabledControls and GetEnabledControl API. Implemented RemediationType support for Landing Zone operations: CreateLandingZone, UpdateLandingZone and GetLandingZone APIs
• (ec2) Adds PrivateDnsPreference and PrivateDnsSpecifiedDomains to control private DNS resolution for resource and service network VPC endpoints and IpamScopeExternalAuthorityConfiguration to integrate Amazon VPC IPAM with a third-party IPAM service
• (kms) Added support for new ECC_NIST_EDWARDS25519 AWS KMS key spec
• (opensearch) This release introduces the Default Application feature, allowing users to set, change, or unset a preferred OpenSearch UI application on a per-region basis for a streamlined and consistent user experience.
• (vpclattice) Amazon VPC Lattice now supports custom domain name for resource configurations
• Emit additional tracing logs from the IMDS client
• Upgrade smithy-kotlin to v1.5.19 containing a new CRT cipher suite