v1.5.91

[1.5.91] - 11/25/2025

Features

• (ec2) This release adds support to view Network firewall proxy appliances attached to an existing NAT Gateway via DescribeNatGateways API NatGatewayAttachedAppliance structure.
• (networkfirewall) Network Firewall release of the Proxy feature.
• (organizations) Add support for policy operations on the S3_POLICY and BEDROCK_POLICY policy type.
• (route53) Adds support for new route53 feature: accelerated recovery.
• Validate caller-specified AWS regions in client config (i.e., region and regionProvider)

v1.5.90

[1.5.90] - 11/24/2025

Features

• (cloudfront) Add TrustStore, ConnectionFunction APIs to CloudFront SDK
• (cloudwatchlogs) New CloudWatch Logs feature - LogGroup Deletion Protection, a capability that allows customers to safeguard their critical CloudWatch log groups from accidental or unintended deletion.

v1.5.89

[1.5.89] - 11/21/2025

Features

• (apigateway) API Gateway supports VPC link V2 for REST APIs.
• (athena) Introduces Spark workgroup features including log persistence, S3/CloudWatch delivery, UI and History Server APIs, and SparkConnect 3.5.6 support. Adds DPU usage limits at workgroup and query levels as well as DPU usage tracking for Capacity Reservation queries to optimize performance and costs.
• (bedrock) Add support to automatically enforce safeguards across accounts within an AWS Organization.
• (bedrockagentcorecontrol) Support for agentcore gateway interceptor configurations and NONE authorizer type
• (bedrockdataautomationruntime) Adding new fields to GetDataAutomationStatus: jobSubmissionTime, jobCompletionTime, and jobDurationInSeconds
• (bedrockruntime) Add support to automatically enforce safeguards across accounts within an AWS Organization.
• (cloudformation) Adds the DependsOn field to the AutoDeployment configuration parameter for CreateStackSet, UpdateStackSet, and DescribeStackSet APIs, allowing users to set and read auto-deployment dependencies between StackSets
• (computeoptimizerautomation) Initial release of AWS Compute Optimizer Automation. Create automation rules to implement recommended actions on a recurring schedule based on your specified criteria. Supported actions include: snapshot and delete unattached EBS volumes and upgrade volume types to the latest generation.
• (connect) New APIs to support aliases and versions for ContactFlowModule. Updated ContactFlowModule APIs to support custom blocks.
• (controltower) The manifest field is now optional for the AWS Control Tower CreateLandingZone and UpdateLandingZone APIs for Landing Zone version 4.0
• (ec2) This release adds a new capability to create and manage interruptible EC2 Capacity Reservations.
• (ecr) Add support for ECR managed signing
• (eks) Adds support for controlPlaneScalingConfig on EKS Clusters.
• (invoicing) Added the CreateProcurementPortalPreference, GetProcurementPortalPreference, PutProcurementPortalPreference, UpdateProcurementPortalPreferenceStatus, ListProcurementPortalPreferences and DeleteProcurementPortalPreference APIs for procurement portal preference management.
• (kinesisvideo) This release adds support for Tiered Storage
• (kms) Support for on-demand rotation of AWS KMS Multi-Region keys with imported key material
• (lambda) Launching Enhanced Error Handling and ESM Grouping capabilities for Kafka ESMs
• (lexmodelsv2) Adds support for Intent Disambiguation, allowing resolution of ambiguous user inputs when multiple intents match by presenting clarifying questions to users. Also adds Speech Detection Sensitivity configuration for optimizing voice activity detection sensitivity levels in various noise environments.
• (mailmanager) Add support for resources in the aws-eusc partition.
• (marketplaceentitlementservice) Endpoint update for new region
• (marketplacemetering) Endpoint update for new region
• (mediapackagev2) Adds support for excluding session key tags from HLS multivariant playlists
• (odb) Adds AssociateIamRoleToResource and DisassociateIamRoleFromResource APIs for managing IAM roles. Enhances CreateOdbNetwork and UpdateOdbNetwork APIs with KMS, STS, and cross-region S3 parameters. Adds OCI identity domain support to InitializeService API.
• (organizations) Add support for policy operations on the UPGRADE_ROLLOUT_POLICY policy type.
• (qconnect) This release introduces two new messaging channel subtypes: Push, WhatsApp, under MessageTemplate which is a resource in Amazon Q in Connect.
• (quicksight) Amazon Quick Suite now supports QuickChat as an embedding type when calling the GenerateEmbedUrlForRegisteredUser API, enabling developers to embed conversational AI agents directly into their applications.
• (rds) Add support for Upgrade Rollout Order
• (redshift) Added support for Amazon Redshift Federated Permissions and AWS IAM Identity Center trusted identity propagation.
• (redshiftserverless) Added UpdateLakehouseConfiguration API to manage Amazon Redshift Federated Permissions and AWS IAM Identity Center trusted identity propagation for namespaces.
• (sagemaker) Enhanced SageMaker HyperPod instance groups with support for MinInstanceCount, CapacityRequirements (Spot/On-Demand), and KubernetesConfig (labels and taints). Also Added speculative decoding and MaxInstanceCount for model optimization jobs.
• (sagemakerruntimehttp2) Add support for bidirectional streaming invocations on SageMaker AI real-time endpoints
• (securityir) Add ListInvestigations and SendFeedback APIs to support SecurityIR AI agents
• (sesv2) Added support for new SES regions - Asia Pacific (Malaysia) and Canada (Calgary)
• (transfer) Adds support for creating Webapps accessible from a VPC.

Documentation

• (elasticloadbalancingv2) This release adds the health check log feature in ALB, allowing customers to send detailed target health check log data directly to their designated Amazon S3 bucket.

v1.5.88

[1.5.88] - 11/20/2025

Features

• (applicationsignals) Amazon CloudWatch Application Signals now supports un-instrumented services discovery, cross-account views, and change history, helping SRE and DevOps teams monitor and troubleshoot their large-scale distributed applications.
• (autoscaling) This release adds support for three new features: 1) Image ID overrides in mixed instances policy, 2) Replace Root Volume - a new strategy for Instance Refresh, and 3) Instance Lifecycle Policy for enhanced instance lifecycle management.
• (bedrockagentcore) Bedrock AgentCore Memory release for redriving memory extraction jobs (StartMemoryExtractionJob and ListMemoryExtractionJob)
• (bedrockdataautomation) Added support for Synchronous project type and PII Detection and Redaction
• (bedrockdataautomationruntime) Bedrock Data Automation Runtime Sync API
• (braket) Add support for Braket spending limits.
• (budgets) Add BillingViewHealthStatusException to DescribeBudgetPerformanceHistory and ServiceQuotaExceededException to UpdateBudget for improved error handling with Billing Views.
• (cloudfront) This release adds support for bring your own IP (BYOIP) to CloudFront's CreateAnycastIpList API through an optional IpamCidrConfigs field.
• (cloudtrail) AWS launches CloudTrail aggregated events to simplify monitoring of data events at scale. This feature delivers both granular and summarized data events for resources like S3/Lambda, helping security teams identify patterns without custom aggregation logic.
• (connect) Add optional ability to exclude users from send notification actions for Contact Lens Rules.
• (databasemigrationservice) Added support for customer-managed KMS key (CMK) for encryption for import private key certificate. Additionally added Amazon SageMaker Lakehouse endpoint used for zero-ETL integrations with data warehouses.
• (datasync) The partition value "aws-eusc" is now permitted for ARN (Amazon Resource Name) fields.
• (devicefarm) Add support for environment variables and an IAM execution role.
• (dsql) Added clusterVpcEndpoint field to GetVpcEndpointServiceName API response, returning the VPC connection endpoint for the cluster
• (ec2) This release adds support for multiple features including: VPC Encryption Control for the status of traffic flow; S2S VPN BGP Logging; TGW Flexible Costs; IPAM allocation of static IPs from IPAM pools to CF Anycast IP lists used on CloudFront distribution; and EBS Volume Integration with Recycle Bin
• (ecs) Launching Amazon ECS Express Mode - a new feature that enables developers to quickly launch highly available, scalable containerized applications with a single command.
• (elasticloadbalancingv2) This release adds the target optimizer feature in ALB, enabling strict concurrency enforcement on targets.
• (emr) Add support for configuring S3 destination for step logs on a per-step basis.
• (glue) Added FunctionType parameter to Glue GetuserDefinedFunctions.
• (imagebuilder) EC2 Image Builder now enables the distribution of existing AMIs, retry distribution, and define distribution workflows. It also supports automatic versioning for recipes and components, allowing automatic version increments and dynamic referencing in pipelines.
• (lakeformation) Added ServiceIntegrations as a request parameter for CreateLakeFormationIdentityCenterConfigurationRequest and UpdateLakeFormationIdentityCenterConfigurationRequest and response parameter for DescribeLakeFormationIdentityCenterConfigurationResponse
• (licensemanager) Added cross-account resource aggregation via license asset groups and expiry tracking for Self-Managed Licenses. Extended Org-Wide View to Self-Managed Licenses, added reporting for license asset groups, and removed Athena/Glue dependencies for cross-account resource discovery in commercial regions.
• (networkmanager) This release adds support for Cloud WAN Routing Policy providing customers sophisticated routing controls to better manage their global networks
• (organizations) Added new APIs for Billing Transfer, new policy type INSPECTOR_POLICY, and allow an account to transfer between organizations
• (quicksight) Introducing comprehensive theme styling controls. New features include border customization (radius, width, color), flexible padding controls, background styling for cards and sheets, centralized typography management, and visual-level override support across layouts.
• (rbin) Add support for EBS volume in Recycle Bin
• (rds) Add support for VPC Encryption Controls.
• (redshiftdata) Increasing the length limit of Statement Name from 500 to 2048.
• (s3) Enable / Disable ABAC on a general purpose bucket.
• (sagemaker) Added training plan support for inference endpoints. Added HyperPod task governance with accelerator partition-based quota allocation. Added BatchRebootClusterNodes and BatchReplaceClusterNodes APIs. Updated ListClusterNodes to include privateDnsHostName.
• (securityhub) Release Findings and Resources Trends APIs- GetFindingsTrendsV2 and GetResourcesTrendsV2. This supports time-series aggregated counts with composite filtering for 1-year of historical data analysis of Findings and Resources.

Documentation

• (kinesis) Kinesis Data Streams now supports up to 50 Enhance Fan-out consumers for On-demand Advantage Streams. On-demand Standard and Provisioned streams will continue with the existing limit of 20 consumers for Enhanced Fan-out.

v1.5.87

[1.5.87] - 11/19/2025

Features

• Adds a new credentials provider for AWS Login token authentication

v1.5.86

[1.5.86] - 11/19/2025

Features

• (apigateway) API Gateway now supports response streaming and new security policies for REST APIs and custom domain names.
• (apigatewayv2) Support for API Gateway portals and portal products.
• (backup) Amazon GuardDuty Malware Protection now supports AWS Backup, extending malware detection capabilities to EC2, EBS, and S3 backups.
• (bcmpricingcalculator) Add GroupSharingPreference, CostCategoryGroupSharingPreferenceArn, and CostCategoryGroupSharingPreferenceEffectiveDate to Bill Estimate. Add GroupSharingPreference and CostCategoryGroupSharingPreferenceArn to Bill Scenario.
• (bedrockruntime) This release includes support for Search Results.
• (billing) Added name filtering support to ListBillingViews API through the new names parameter to efficiently filter billing views by name.
• (billingconductor) This release adds support for Billing Transfers, enabling management of billing transfers with billing groups on AWS Billing Conductor.
• (cloudtrail) AWS CloudTrail now supports Insights for data events, expanding beyond management events to automatically detect unusual activity on data plane operations.
• (cloudwatchlogs) Adding support for ocsf version 1.5, add optional parameter MappingVersion
• (connectcampaignsv2) This release added support for ring timer configuration for campaign calls.
• (costexplorer) Add support for COST_CATEGORY, TAG, and LINKED_ACCOUNT AWS managed cost anomaly detection monitors
• (costoptimizationhub) Release ListEfficiencyMetrics API
• (datazone) Amazon DataZone now supports business metadata (readme and metadata forms) at the individual attribute (column) level, a new rule type for glossary terms, and the ability to update the owner of the root domain unit.
• (dynamodb) Extended Global Secondary Index (GSI) composite keys to support up to 8 attributes.
• (ec2) This launch adds support for two new features: Regional NAT Gateway and IPAM Policies. IPAM policies offers customers central control for public IPv4 assignments across AWS services. Regional NAT is a single NAT Gateway that automatically expands across AZs in a VPC to maintain high availability.
• (ecr) Add support for ECR archival storage class and Inspector org policy for scanning
• (ecs) Added support for Amazon ECS Managed Instances infrastructure optimization configuration.
• (emr) Add CloudWatch Logs integration for Spark driver, executor and step logs
• (fsx) Adding File Server Resource Manager configuration to FSx Windows
• (guardduty) Add support for scanning and viewing scan results for backup resource types
• (health) Adds actionability and personas properties to Health events exposed through DescribeEvents, DescribeEventsForOrganization, DescribeEventDetails, and DescribeEventTypes APIs. Adds filtering by actionabilities and personas in EventFilter, OrganizationEventFilter, EventTypeFilter.
• (iam) Added the EnableOutboundWebIdentityFederation, DisableOutboundWebIdentityFederation and GetOutboundWebIdentityFederationInfo APIs for the IAM outbound federation feature.
• (inspector2) This release introduces BLOCKED_BY_ORGANIZATION_POLICY error code and IMAGE_ARCHIVED scanStatusReason. BLOCKED_BY_ORGANIZATION_POLICY error code is returned when an operation is blocked by an AWS Organizations policy. IMAGE_ARCHIVED scanStatusReason is returned when an Image is archived in ECR.
• (invoicing) Add support for adding Billing transfers in Invoice configuration
• (lambda) Added support for creating and invoking Tenant Isolated functions in AWS Lambda APIs.
• (mediaconnect) This release adds support for global routing in AWS Elemental MediaConnect. You can now use router inputs and router outputs to manage global video and audio routing workflows both within the AWS-Cloud and over the public internet.
• (medialive) MediaLive is adding support for MediaConnect Router by supporting a new input type called MEDIACONNECT_ROUTER. This new input type will provide seamless encrypted transport between MediaConnect Router and your MediaLive channel.
• (networkfirewall) Partner Managed Rulegroup feature support
• (networkflowmonitor) Added new enum value (AWS::EKS::Cluster) for type field under MonitorLocalResource
• (partnercentralchannel) Initial GA launch of Partner Central Channel
• (route53) Add dual-stack endpoint support for Route53
• (rum) CloudWatch RUM now supports mobile application monitoring for Android and iOS platforms
• (s3) Adds support for blocking SSE-C writes to general purpose buckets.
• (sagemaker) Added support for enhanced metrics for SageMaker AI Endpoints. This features provides Utilization Metrics at instance and container granularity and also provides easy configuration of metric publish frequency from 10 sec -> 5 mins
• (secretsmanager) Adds support to create, update, retrieve, rotate, and delete managed external secrets.
• (sfn) Adds support to TestState for mocked results and exceptions, along with additional inspection data.
• (signin) AWS Sign-In manages authentication for AWS services. This service provides secure authentication flows for accessing AWS resources from the console and developer tools. This release adds the CreateOAuth2Token API, which can be used to fetch OAuth2 access tokens and refresh tokens from Sign-In.
• (sts) IAM now supports outbound identity federation via the STS GetWebIdentityToken API, enabling AWS workloads to securely authenticate with external services using short-lived JSON Web Tokens.
• (transcribestreaming) This release adds support for additional locales in AWS transcribe streaming.

v1.5.85

[1.5.85] - 11/18/2025

Features

• (autoscaling) This release adds the new LaunchInstances API, which can launch instances synchronously in an AutoScaling group. The API also returns instances info and launch error back immediately.
• (backup) AWS Backup now supports a low-cost warm storage tier for Amazon S3 backup data.
• (bedrockruntime) Amazon Bedrock Runtime Service Tier Support Launch
• (cloudformation) New CloudFormation DescribeEvents API with operation ID tracking and failure filtering capabilities to quickly identify root causes of deployment failures. Also, a DeploymentMode parameter for the CreateChangeSet API that enables creation of drift-aware change sets for safe drift management.
• (cloudwatchlogs) CloudWatch Logs updates: Added capability to setup a recurring schedule for log insights queries. Logs introduced Scheduled Queries (managed through Create/Update/Get/Delete/List/History Scheduled Query APIs). For more information, see CloudWatch Logs API documentation.
• (connect) This release added support for ring timer configuration for campaign calls.
• (ec2) AWS Site-to-Site VPN now supports VPN Concentrator, a new feature that enables customers to connect multiple low-bandwidth sites connections through a single attachment, simplifying multi-site connectivity for distributed enterprises.
• (iam) Added the AssociateDelegationRequest, GetDelegationRequest, AcceptDelegationRequest, RejectDelegatonRequest, ListDelegationRequests, UpdateDelegationRequest, SendDelegationToken and GetHumanReadableSummary APIs for the IAM temporary delegation feature.
• (kafka) Amazon MSK adds three new APIs, ListTopics, DescribeTopic, and DescribeTopicPartitions for viewing Kafka topics in your MSK clusters.
• (resourcegroupstaggingapi) Add support for new ListRequiredTags API used to retrieve the required tags specified in a customer's effective tag policy.
• (storagegateway) Adds support for European Sovereign Cloud ARNs in Storage Gateway API parameters.
• (wafv2) AssociateWebACL, UpdateWebACL and PutLoggingConfiguration will now throw WAFFeatureNotIncludedInPricingPlanException when the request contains a feature that is not included in the CloudFront pricing plan of the WebACL.

v1.5.84

[1.5.84] - 11/17/2025

Features

• (appstream) Adding support for additional instances and extended storage
• (backup) AWS Backup now supports specifying a logically air-gapped backup vault as a primary backup target in backup plans and on-demand backup jobs.
• (bedrock) Automated Reasoning checks in Amazon Bedrock Guardrails now automatically generate Q&A tests for new Automated Reasoning policies. The GetAutomatedReasoningPolicyBuildWorkflowResultAssets API adds GENERATED_TEST_CASES asset type, allowing customers to retrieve tests generated by the build workflow.
• (databasemigrationservice) This release introduces the SAP ASE(Sybase) Data Provider for AWS Data Migration Service (DMS). In addition, DMS Schema Conversion now supports this provider, enabling customers to migrate SAP ASE(Sybase) databases to Amazon RDS for PostgreSQL or Aurora PostgreSQL seamlessly.
• (devicefarm) This release adds support for interacting with devices during a remote access session using the remoteDriverEndpoint interface
• (ec2) This release introduces new APIs: DescribeInstanceSqlHaStates, DescribeInstanceSqlHaHistoryStates, EnableInstanceSqlHaStandbyDetections and DisableInstanceSqlHaStandbyDetections on Amazon EC2, allowing customers to enroll and monitor SQL Server licensing fee savings for their SQL HA EC2 instances.
• (glue) Amazon Glue Releasing 2 the new API ListIntegrationResourceProperties and DeleteIntegrationResourceProperty along with minor improvement on existing API(s).
• (guardduty) Add S3 On-Demand Object Scanning
• (lexmodelsv2) Adds support for LLM as Primary, allowing usage of LLMs as the default NLU system.
• (medialive) Adds configurations for spatial/temporal adaptive quantization in AV1 codec, and conversion to HLG output color space in H265 codec.
• (mediapackagev2) Add support for SCTE messages in Segment file output
• (mwaaserverless) Amazon MWAA now offers serverless deployment, eliminating operational overhead while optimizing costs. The service supports YAML and Python-based workflows, with 80+ AWS Operators. It provides isolated execution, IAM permissions, and automatic scaling with pay-per-use pricing.
• (opensearch) This release adds index operation APIs to support Automatic Semantic Enrichment feature
• (pcs) Added support for the managed Slurm REST API endpoint
• (route53resolver) Adding DICTIONARY_DGA to dns-threat-protection as a new enum type. Customers can now set rules for dictionary dga protection

v1.5.83

[1.5.83] - 11/14/2025

Features

• (datazone) Adds support for granting read and write access to Amazon S3 general purpose buckets using CreateSubscriptionRequest and AcceptSubscriptionRequest APIs. Also adds search filters for SSOUser and SSOGroup to ListSubscriptions APIs and deprecates "sortBy" parameter for ListSubscriptions APIs.
• (ec2) This release adds AvailabilityZoneId support for CreateInstanceConnectEndpoint, DescribeInstanceConnectEndpoints, and DeleteInstanceConnectEndpoint APIs.
• (imagebuilder) EC2 Image Builder now supports invoking Lambda functions and executing Step Functions state machine through image workflows.
• (medialive) Removed all the value constraint (min/max) for the shape definitions (e.g. integerMin0Max3600) on the C2j models to get rid of the need to request an exemption from the SDK team whenever a shape definition (e.g. integerMin0Max3600) is changed.

v1.5.82

[1.5.82] - 11/13/2025

Features

• (cloudformation) CloudFormation now supports GetHookResult API with annotations to retrieve structured compliance check results and remediation guidance for each evaluated resource, replacing the previous single-message limitation with detailed validation outcomes.
• (controlcatalog) Added support for related control mappings with new RELATED_CONTROL mapping type in ListControlMappings API.
• (ec2) Added support for new accelerator types ("media") and accelerator names ("L4", "L40s", "GAUDI_HL_205", "INFERENTIA2", "TRAINIUM", "TRAINIUM2", "U30") in Attributes Based Instance Type Selection for launched instance types.
• (ecr) Add Amazon ECR FIPS PrivateLink endpoint support
• (elasticloadbalancingv2) QUIC and TCP_QUIC protocol support for Network Load Balancer (NLB). This capability enables customers to forward QUIC traffic to their targets with ultra-low latency while maintaining session stickiness using QUIC Connection IDs.
• (iotwireless) Integration of Device Location with Amazon Sidewalk network for Amazon Sidewalk enabled devices
• (mediaconvert) Lowers minimum duration for black video generator. Adds support for embedding and signing C2PA content credentials in DASH and CMAF HLS outputs.
• (rds) Updated endpoint and service metadata
• (sagemaker) Added support for minor version upgrades and AWS Identity Center integration for SageMaker Hadron Partner Apps, enabling automated version management and IdC group-based access control.
• (workspacesweb) Support for managing web content filtering for defining, tracking and regulating type of content accessed with WorkSpaces Secure Browser as part of browser settings.