Version 3.388.9

• Aws\CognitoIdentityProvider - Amazon Cognito user pools now support sending SMS via AWS End User Messaging. A new EumsSms object in SmsConfigurationType lets you deliver MFA and verification texts through AWS End User Messaging, alongside the existing Amazon SNS option.
• Aws\Odb - Adds support for sourcing Autonomous Database admin and wallet passwords from customer-managed AWS Secrets Manager secrets, including password source configuration and summaries, and enabling or disabling the OCI IAM service role for Secrets Manager integration via InitializeService.
• Aws\RDS - Adds the AssociatedRoles parameter to CreateDBCluster, RestoreDBClusterFromSnapshot, RestoreDBClusterToPointInTime, and RestoreDBClusterFromS3, letting customers associate IAM roles with an Aurora DB cluster at create or restore time instead of calling AddRoleToDBCluster afterward.
• Aws\GameLiftStreams - Amazon GameLift Streams now supports assigning an IAM role to a stream session, enabling your application to securely access resources in your AWS account, such as Amazon S3 buckets and DynamoDB tables.
• Aws\KinesisAnalyticsV2 - Support for Flink 2.3 in Managed Service for Apache Flink

Version 3.388.8

• Aws\EndpointV2 - Adds BDD artifacts, which result in an average performance increase of 35% (faster) endpoint resolution.
• Aws\Redshift - Amazon Redshift - Added support for rg.large and rg.12xlarge node types in CreateCluster, ModifyCluster, and ResizeCluster API operations.
• Aws\Sustainability - Adds support for retrieving estimated water allocation data.
• Aws\SageMaker - Release support for g7 instance type for SageMaker inference endpoints.
• Aws\S3 - Documentation update for removing the 30 day minimum restriction for transition to Standard-IA or OneZone-IA storage classes
• Aws\Omics - Adds support for returning the task UUID (universally unique identifier) in GetRunTask and ListRunTasks responses
• Aws\EMR - Amazon EMR updates the Session object returned by GetSession API
• Aws\ChimeSDKVoice - Marked CreateProxySession, DeleteProxySession, GetProxySession, ListProxySessions, UpdateProxySession, PutVoiceConnectorProxy, DeleteVoiceConnectorProxy, and GetVoiceConnectorProxy as deprecated.

Version 3.388.7

• Aws\CloudFront - Adds SHA-256 support to Signer.
• Aws\BedrockAgentCoreControl - Fix HarnessEndpointArn pattern to match the actual service-emitted ARN format ('harness-endpoint' instead of 'endpoint'). Add additionalParams to Gemini model configuration for passing provider-specific parameters through to the model unchanged.
• Aws\PaymentCryptographyData - Adds support for UnionPay session key derivation to the GenerateAuthRequestCryptogram, VerifyAuthRequestCryptogram, GenerateMac, and VerifyMac APIs.
• Aws\ElasticLoadBalancingv2 - This release adds support for the IpAddressType field on SourceIpConfig, enabling Network Load Balancer listener rules to match traffic based on whether the source IP is IPv4 or IPv6.
• Aws\HealthLake - AWS HealthLake now offers data transformation in Preview to convert CSV and C-CDA data to FHIR R4. Customers can maintain reusable mapping profiles, run sync or async jobs with provenance tracking and drift detection, and use an AI agent to build and edit mapping logic from natural language.
• Aws\RDS - Adds support for modifying EngineLifecycleSupport on DB instances and DB clusters through ModifyDBInstance and ModifyDBCluster.

Version 3.388.6

• Aws\Crypto - Fixes AAD concatenation and tag validation
• Aws\drs - Fast recovery of EC2 based drs workloads by skipping the conversion step
• Aws\SecurityHub - AWS Security Hub now provides an AI inventory, giving central security teams a continuously updated, organization-wide view of AI assets and their security posture
• Aws\EMRContainers - Introduced 5 new fields across 3 APIs as part of Spark Connect server launch for EMR on EKS. The fields added are sessionIdleTimeoutInMinutes, sessionEnabled, endpointToken, authProxyUrl and encryptionKeyArn.
• Aws\Lambda - AWS Lambda now returns a new DependencyError value in StateReasonCode and LastUpdateStatusReasonCode to provide more actionable information when a function reaches a failed state due to an error from an upstream dependency or service.
• Aws\ServiceDiscovery - Fixed Cloud Map endpoint resolution to correctly route to the dualstack endpoint when dualstack is enabled.
• Aws\SSM - Update AWS Systems Manager Automation Targets to be correct max value.
• Aws\Connect - This release adds SearchRules API which can be used to search for rules within an Amazon Connect instance.
• Aws\MQ - This release adds storage size parameter for Amazon MQ for RabbitMQ cluster deployment broker on engine version RabbitMQ 4.2. You can now set a configurable storage size within a range of sizes dependent on broker instance size.

Version 3.388.5

• Aws\Lambda - Add Java 8, 11 and 17 on AL2023 (java8.al2023, java11.al2023, java17.al2023) support to AWS Lambda.
• Aws\ElasticsearchService - Adds support for the EngineMode and UseCase parameters on Amazon Elasticsearch Service domains, enabling GENERAL or OPTIMIZED engine modes and SEARCH, VECTOR, OBSERVABILITY, or MIXED usecases when creating and updating domain configurations.
• Aws\RedshiftServerless - Add support for preserving datasharing, zero-ETL and S3 event integrations on snapshot restore to serverless namespace.
• Aws\GameLift - Amazon GameLift Servers now includes fleet expiration for managed fleets. A managed fleet expires one year after creation, transitioning to EXPIRED status, emitting a FLEET EXPIRED event, and scaling to zero instances. Expired fleets cannot host new game sessions or increase capacity.
• Aws\GuardDuty - GuardDuty AI Protection is now publicly available. Findings include Bedrock guardrail details, model details, observation numbers, and continuous scan details. GuardrailArn and GuardrailVersion are deprecated in favor of the guardrails list.

Version 3.388.4

• Aws\S3\MultipartCopy - Stop pinning HeadObject-derived VersionId on UploadPartCopy requests. Only user-provided versionId is now attached to copy-part requests.
• Aws\CloudWatch - CloudWatch now assigns a unique identifier to each anomaly detector. PutAnomalyDetector and DescribeAnomalyDetectors return this AnomalyDetectorId, which you can use to describe or delete a specific anomaly detector directly.
• Aws\LicenseManager - Added the ResetUsage field to the CreateLicenseVersion API. When set to true, the entitlement usage counts for the license are reset to 0. If it is false or not specified, entitlement usage is left unchanged.
• Aws\EC2 - New Amazon EC2 instances. M9g, M9gd, C9g, and C9gd on AWS Graviton5. C8in, M8in, and R8in add 600 Gbps network. C8ib, M8ib, and R8ib add 300 Gbps EBS. C8ine, M8ine, M8idn, R8idn, M8idb, and R8idb round out Intel Xeon 6. Mac-m3ultra with Apple M3 Ultra. G7 with NVIDIA RTX PRO 4500 Blackwell GPUs.
• Aws\SageMaker - Release support for g4d, c6g, c7g, c8g instance types for SageMaker HyperPod
• Aws\Lambda - Added TelemetryConfig support for Managed Instances Capacity Provider, enabling customers to configure system log level and custom log group for managed instance logging.
• Aws\Inspector2 - Support for 3 day and 7 day ECR re-scan durations
• Aws\QuickSight - Provides CreateKnowledgeBase and UpdateKnowledgeBase APIs

Version 3.388.3

• Aws\IVS - adds support for AWS IVS ad configuration APIs to allow for a postRollConfiguration object on the ad configuration resource
• Aws\EC2 - Added support for additional override parameters in CreateFleet, including LaunchTemplateSpecificationUserData, KeyName, IamInstanceProfile, and MetadataOptions. The CreateFleet response now also includes SubnetId, AvailabilityZone, and AvailabilityZoneId for launched instances.
• Aws\Synthetics - CloudWatch Synthetics adds support for customer managed KMS keys for canary environment variables. Customers can now encrypt their canary's Lambda function environment variables at rest using their own AWS KMS key, providing additional control over data protection.
• Aws\GuardDuty - Adding "AI Analyst" enum value for detector
• Aws\Connect - Amazon Connect - Added DeleteContactData API to support PII deletion of customer endpoint, additional email recipients and email subject.

Version 3.388.2

• Aws\Signin - Adds support for OAuth 2.0 token operations in AWS Sign-In, CreateOAuth2TokenWithIAM (client credentials flow), IntrospectOAuth2TokenWithIAM (token inspection), and RevokeOAuth2TokenWithIAM (token revocation).

Version 3.388.1

• Aws\GeoPlaces - Added AddressNamesMode, AddressNameTranslations, MobilityMode, PostalCodeMode, SecondaryAddresses, and DriveThrough features across Places V2 APIs to support address name formatting, multilingual translations, travel-aware search, multi-city postal codes, and unit-level address resolution.
• Aws\IoTWireless - Default session downlink transmission parameters have been added to the existing Multicast Group APIs. Explicit transmission parameters are no longer required when starting a multicast session during the FUOTA procedure.
• Aws\BedrockAgentCoreControl - AgentCore Gateway now supports mapping allowed scopes to separate advertised scopes on the inbound authorizer.
• Aws\EC2 - Replace Root Volume now supports a VolumeId parameter. This allows the customer to pass in a pre-prepared volume as the target root volume for an RRV workflow.
• Aws\Resiliencehubv2 - Next Generation Resilience Hub now supports filtering and sorting failure mode assessments, resource type filtering in ListResources, cross-region and cross-account topology edges, data recovery achievability status, and more granular dependency discovery progress tracking.
• Aws\AppConfig - Update ExperimentRun APIs to support ConflictExceptions.
• Aws\ECS - Amazon ECS now automatically detects the correct CPU architecture for Express Mode services.

Version 3.388.0

• Aws\Lambda - AWS Lambda Durable Functions now supports customer managed KMS keys. This allows customers to configure a KMS key in Durable Config to have all their durable execution data encrypted.
• Aws\Connect - Adds support for CreateAuthCode and DeleteSession APIs.
• Aws\Inspector2 - This release extends vulnerability management to Azure VM, container registries and function apps. Adds support for per-member-account scan configuration settings.
• Aws\SecurityHub - release SecurityHub MultiCloud integration with Azure
• Aws\ConfigService - Added support for connecting AWS Config to third-party cloud service providers. New APIs include PutConnector, GetConnector, DeleteConnector, and ListConnectors for managing connectors, and PutThirdPartyServiceLinkedConfigurationRecorder for creating third-party service-linked recorders.
• Aws\MarketplaceCatalog - This release enhances the ListEntities API to support ResellerRole filter for ResaleAuthorization entity.
• Aws\MarketplaceMetering - The usage reporting window for the BatchMeterUsage API has been extended from 6 hours to 24 hours. Sellers can now submit usage records for up to 24 hours after a metered event occurs. The existing 6-hour grace period at the end of a billing cycle still applies.
• Aws\PartnerCentralRevenueMeasurement - Add support for AWS Partner Central Revenue Measurement API for creating, managing, and tracking revenue attributions and marketplace revenue share allocations.
• Aws\Route53GlobalResolver - Adds ListSharedDNSViews operation to list all DNS Views shared with caller using AWS Resource Access Manager. Also updates ListHostedZoneAssociations operation so that resource ARN param is optional, allowing caller to list all HostedZoneAssociations in account.
• Aws\EC2 - This launch surfaces the public SSM parameter associated with public AMIs in the AMI metadata.
• Aws\SSM - Adding SSM Cloud Connector to support Azure Virtual Machines onboarding to AWS Systems Manager