Version 3.356.24

• Aws\SSM - Added Dualstack support to GetDeployablePatchSnapshotForInstance
• Aws\SSOAdmin - Add support for encryption at rest with Customer Managed KMS Key in AWS IAM Identity Center
• Aws\EC2 - Add Amazon EC2 R8gn instance types
• Aws\SSOOIDC - This release includes exception definition and documentation updates.
• Aws\CleanRooms - Added support for running incremental ID mapping for rule-based workflows.
• Aws\EntityResolution - Support incremental id mapping workflow for AWS Entity Resolution

Version 3.356.23

• Aws\Batch - Starting in JAN 2026, AWS Batch will change the default AMI for new Amazon ECS compute environments from Amazon Linux 2 to Amazon Linux 2023. We recommend migrating AWS Batch Amazon ECS compute environments to Amazon Linux 2023 to maintain optimal performance and security.
• Aws\EKS - Adds support for RepairConfig overrides and configurations in EKS Managed Node Groups.
• Aws\imagebuilder - Version ARNs are no longer required for the EC2 Image Builder list-image-build-version, list-component-build-version, and list-workflow-build-version APIs. Calling these APIs without the ARN returns all build versions for the given resource type in the requesting account.

Version 3.356.22

• Aws\MediaLive - Add MinBitrate for QVBR mode under H264/H265/AV1 output codec. Add GopBReference, GopNumBFrames, SubGopLength fields under H265 output codec.
• Aws\KendraRanking - Model whitespace change - no client difference
• Aws\LicenseManagerUserSubscriptions - Added support for cross-account Active Directories.
• Aws\Connect - This release adds a persistent connection field to UserPhoneConfig that maintains agent's softphone media connection for faster call connections.
• Aws\ConfigService - Add UNKNOWN state to RemediationExecutionState and add IN_PROGRESS/EXITED/UNKNOWN states to RemediationExecutionStepState.
• Aws\BedrockAgentCoreControl - Add tagging and VPC support to AgentCore Runtime, Code Interpreter, and Browser resources. Add support for configuring request headers in Runtime. Fix AgentCore Runtime shape names.
• Aws\SQS - Update invalid character handling documentation for SQS SendMessage API

Version 3.356.21

• Aws\Exception - Loosens requirements for $previous AwsException parameter from Exception to Throwable.
• Aws\Bedrock - Release includes an increase to the maximum policy build document size, an update to DeleteAutomatedReasoningPolicyBuildWorkflow to add ResourceInUseException, and corrections to UpdateAutomatedReasoningPolicyTestCaseRequest.
• Aws\ChimeSDKMessaging - Amazon Chime SDK Messaging GetMessagingSessionEndpoint API now returns dual-stack WebSocket endpoints supporting IPv4/IPv6.
• Aws\EC2 - Allowed AMIs adds support for four new parameters - marketplaceProductCodes, deprecationTimeCondition, creationDateCondition and imageNames
• Aws\Budgets - Added BillingViewHealthStatus Exception which is thrown when a Budget is created or updated with a Billing View that is not in the HEALTHY status

Version 3.356.20

• Aws\NetworkFirewall - Network Firewall now prevents TLS handshakes with the target server until after the Server Name Indication (SNI) has been seen and verified. The monitoring dashboard now provides deeper insights into PrivateLink endpoint candidates and offers filters based on IP addresses and protocol.
• Aws\PCS - Add support for Amazon EC2 Capacity Blocks for ML
• Aws\EC2 - Add mac-m4.metal and mac-m4pro.metal instance types.

Version 3.356.19

• Aws\CloudWatchLogs - Cloudwatch Logs added support for 2 new API parameters in metric and subscription filter APIs to filter log events based on system field values and emit system field values as dimensions and send them to customer destination as additional metadata.
• Aws\IVSRealTime - IVS now offers customers the ability to control the positioning of participants in both grid and PiP layouts based on custom attribute values in participant tokens.
• Aws\Budgets - Add support for custom time periods in budget configuration
• Aws\OSIS - Adds support for cross-account ingestion for push-based sources. This includes resource policies for sharing pipelines across accounts and features for managing pipeline endpoints which enable accessing pipelines across different VPCs, including VPCs in other accounts.

Version 3.356.18

• Aws\S3Control - Introduce three new encryption filters: EncryptionType (SSE-S3, SSE-KMS, DSSE-KMS, SSE-C, NOT-SSE), KmsKeyArn (for SSE-KMS and DSSE-KMS), and BucketKeyEnabled (for SSE-KMS).
• Aws\ObservabilityAdmin - CloudWatch Observability Admin adds the ability to enable telemetry centralization in customers' Organizations. The release introduces new APIs to manage centralization rules, which define settings to replicate telemetry data to a central destination in the customers' Organization.
• Aws\MedicalImaging - Added support for OpenID Connect (OIDC) custom authorizer
• Aws\CostExplorer - Added endpoint support for eusc-de-east-1 region.

Version 3.356.17

• Aws\ - Once again allow psr/http-message 1.0, for increased compatibility with other packages.
• Aws\PaymentCryptography - Add support for certificates to be signed by 3rd party certificate authorities. New API GetCertificateSigningRequest API and support for providing certificates at run-time for tr-34 import/export

Version 3.356.16

• Aws\Api - Fixes bug in document type validation where unordered integer array keys are not considered.
• Aws\GuardDuty - Updated Java SDK implementation of entity set status in GuardDuty API.
• Aws\DataZone - adding IAM principal id to IAM user profile details
• Aws\QuickSight - This release adds support for Account level custom permissions, additional Dashboard Options, and Null support for Q&A.
• Aws\PrometheusService - Add Vended Logs APIs for Amazon Prometheus Managed Collector
• Aws\RDS - Adds support for end-to-end IAM authentication in RDS Proxy for MySQL, MariaDB, and PostgreSQL engines.
• Aws\MediaLive - AWS Elemental MediaLive adds a new feature in MediaPackage output group that enables MediaPackage V2 users to control HLS-related parameters directly in MediaLive. These parameter settings are then reflected in MediaPackage outputs, providing more streamlined control over HLS configurations.
• Aws\Evs - CreateEnvironment API now supports parameters (isHcxPublic & hcxNetworkAclId) for HCX migration via public internet, adding flexibility for migration scenarios. New APIs have been added for associating (AssociateEipToVlan) & disassociating (DisassociateEipFromVlan) Elastic IP (EIP) addresses.
• Aws\ECS - This release supports hook details for Amazon ECS lifecycle hooks.
• Aws\EMRContainers - Added nodeLabel support in container provider to aid hardware isolation support for virtual cluster and security configuration.

Version 3.356.15

• Aws\NetworkFlowMonitor - Added new enum value (AWS::Region) for type field under MonitorLocalResource and MonitorRemoteResource. Workload Insights and Monitor top contributors queries now support a new DestinationCategory (INTER_REGION).
• Aws\PaymentCryptography - AWS Payment Cryptography Service now supports Multi-Region key replication. Customers can choose to automatically distribute keys across AWS Regions.