Update dependency boto3 to v1.43.72

[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence
boto3	==1.43.47 → ==1.43.72

---

Release Notes

boto/boto3 (boto3)

v1.43.72

Compare Source

=======

• api-change:bedrock-agentcore: [botocore] Add support for the Machine Payments Protocol (MPP) and x402 upto scheme payments protocol in Amazon Bedrock AgentCore Payments. Customers can now pay for MPP-gated resources and also pay services which requires upto scheme in x402
• api-change:bedrock-agentcore-control: [botocore] Adds AgentCore Payments support for CMK, Marketplace Subscriptions and QuickCreate
• api-change:bedrock-agent-runtime: [botocore] Adds CheckIngestedDocumentAcl and GetIngestedDocumentAcl APIs to Amazon Bedrock Knowledge Bases. Customers can verify user access to documents based on ingested ACLs and retrieve full ACL details including allow and deny entries, enabling validation of ACL ingestion without test retrievals.
• api-change:glue: [botocore] Added support for associating glossary terms with iterable form items, such as table columns.
• api-change:mwaa-serverless: [botocore] Adds support for Consuming code for MWAA Serverless
• api-change:observabilityadmin: [botocore] CloudWatch Logs centralization rules now support tag propagation. You can configure a TagPropagationConfiguration on your centralization rule to automatically sync resource tags from source to destination log groups, with configurable conflict resolution strategies.
• api-change:redshift: [botocore] Amazon Redshift now unlocks a locked admin user account and resets the failed-login counter when you update the admin password using the ModifyCluster API. This option is available only when account lockout security is enabled.
• api-change:redshift-serverless: [botocore] Amazon Redshift now unlocks a locked admin user account and resets the failed-login counter when you update the admin password using the UpdateNamespace API. This option is available only when account lockout security is enabled.
• api-change:sagemaker: [botocore] Release support for g7.2xlarge, g7.4xlarge, g7.8xlarge, g7.12xlarge, g7.24xlarge, and g7.48xlarge instance types for SageMaker HyperPod

v1.43.71

Compare Source

=======

• api-change:acm: [botocore] This change allows customers to update their existing email-validated certificates to use the DNS validation method.
• api-change:autoscaling: [botocore] Amazon EC2 Auto Scaling now supports terminating multiple instances in a single TerminateInstanceInAutoScalingGroup call via the new InstanceIds parameter, returning an Activities list. LaunchInstances now returns IdempotentCallInProgressFault for duplicate client tokens.
• api-change:cleanrooms: [botocore] This release adds support for minimum aggregation thresholds and comparison controls to the Custom analysis rule type.
• api-change:codecommit: [botocore] Added the GetBlobDifferences API operation, which returns line-level diffs between two blob versions without requiring a local clone. Returns structured hunks with context, additions, and deletions. Supports pagination for large diffs.
• api-change:connect: [botocore] Adds the StartAssistantContact API to start chat contacts handled by an AI agent. Adds SegmentAttributes to StartWebRTCContact, and corrects its error response to now receive AccessDeniedException (previously returned as an internal server error due to a missing error declaration).
• api-change:securityagent: [botocore] Add support for setting a maximum task-hour budget cap on penetration tests and code reviews, and for revalidating previously reported findings via a new REVALIDATION job type.

v1.43.70

Compare Source

=======

• api-change:dsql: [botocore] Improved validation of Kinesis stream ARN format to ensure only valid ARN characters are accepted
• api-change:glue: [botocore] Documentation updates for materialized views APIs.
• api-change:iam: [botocore] Introduced role manager, an IAM capability that automatically sets up the IAM roles your AWS services need. When you set up a supported service in the console, role manager creates a role for you or reuses an existing one from an AWS-managed template.
• api-change:mediaconnect: [botocore] AWS MediaConnect now supports tuning the internal recovery latency between Router Inputs and Outputs to prioritize stream quality versus end-to-end latency.
• api-change:odb: [botocore] Adds support for Oracle Exadata on Exascale Infrastructure (ExaDB-XS) resources including storage vaults and VM clusters.
• api-change:quicksight: [botocore] Added APIs for DLP with Microsoft Purview (manage configs with label enforcement across Spaces, Chat, Knowledge Bases), Approval Workflows (CRUD for policies on asset sharing for Agents, Knowledge Bases, Spaces), and Limits Management (limit profiles for index storage and agent hours per user).
• api-change:wellarchitected: [botocore] This change releases the Well-Architected Agent, a generative AI service that analyzes a customer's AWS environment and delivers personalized, prioritized recommendations across cost, security, performance, and resilience.

v1.43.69

Compare Source

=======

• api-change:account-access: [botocore] Adds SDK support for AWS IAM account access manager, a feature that enables mapping of IAM roles to the users and groups in AWS IAM Identity Center.
• api-change:bedrock-agentcore: [botocore] Adding online eval arn as input for recommendation API
• api-change:cleanrooms: [botocore] Adds support for exporting redacted query execution logs in AWS Clean Rooms
• api-change:clouddirectory: [botocore] Added an end-of-support notice to Amazon Cloud Directory public CLI reference documentation.
• api-change:connect: [botocore] Seven new APIs for managing custom metrics, including create, describe, update, and delete. Using Custom Metrics, customers of Amazon Connect Customer can tailor analytics dashboards to their needs by applying custom thresholds, filters, and calculations to one or more out of the box measurements.
• api-change:datazone: [botocore] GetSubscriptionGrant now returns materialized asset scope name for mapping Lake Formation data cell filters or Redshift views to subscription grants.
• api-change:eks: [botocore] This feature would give customers the ability to selectively tune certain configurations of Kubernetes control plane components in an Amazon EKS cluster.
• api-change:endpoint-rules: [botocore] Update endpoint-rules client to latest version
• api-change:organizations: [botocore] Documentation update for AWS Organizations that clarifies valid input values for the HandshakePartyType parameter in the InviteAccountToOrganization. API ORGANIZATION is valid in responses only. valid input values are ACCOUNT and EMAIL
• api-change:textract: [botocore] Amazon A2I entered maintenance mode in July 2026 and now rejects StartHumanLoop requests from accounts that it does not recognize as existing customers. This update adds a corresponding note to the HumanLoopConfig parameter documentation so that the API Reference and SDK docs explain this behavior.

v1.43.68

Compare Source

=======

• api-change:connect: [botocore] Added Malay language option to use AI to automatically fill evaluation forms in Malay
• api-change:elementalinference: [botocore] Added support for the SearchFixtures API and DataSourceConfiguration, enabling customers to map fixture event data onto clipping outputs for improved feature accuracy.
• api-change:medialive: [botocore] Added VirtualSourceAddress to multicast output destinations for MediaLive Anywhere channels. Specifies the source IP address for outbound multicast packets when downstream networks enforce source-IP filtering.
• api-change:sagemaker: [botocore] Added PREFIX AWARE routing strategy and PrefixAwareRoutingConfig to CreateEndpointConfig. Configure PrefixLength and ConcurrencyThreshold to route requests that share the same prompt prefix to the same instance.
• api-change:sagemaker-runtime: [botocore] Added the PrefixAwareId header to InvokeEndpoint and InvokeEndpointWithResponseStream. This optional parameter serves as a routing hint for endpoints configured with prefix-aware routing, differentiating routing decisions for requests that share the same prompt prefix.

v1.43.67

Compare Source

=======

• api-change:amplify: [botocore] Increased the maximum allowed length of the oauthToken parameter in the CreateApp and UpdateApp APIs to support longer OAuth tokens issued by third-party Git providers.
• api-change:connect: [botocore] Supports updating the task template associated with in-progress task contacts using the new UpdateContactTaskTemplate API. This enables supervisors and developers to dynamically reassign task templates without creating a new task.
• api-change:ec2: [botocore] This release adds support for BGP route protection in Amazon VPC IP Address Manager (IPAM), including route discovery, RPKI route protection findings, and delegated RPKI (Internet Registry Associations, routing policy registrations, and ROA management) for BYOIP prefixes.
• api-change:healthlake: [botocore] Adds provenanceEnabled to StartFHIRImportJob
• api-change:mediapackagev2: [botocore] StreamNameOutputMode - a new optional field on MediaPackageV2 OriginEndpoints that lets customers choose whether egress manifests use numeric stream indices (default) or encoder-assigned stream names from the input
• api-change:mediatailor: [botocore] Added support for inserting ads via the VAST Ad Buffet standard. You can now configure MediaTailor to insert ads in sequence order using the AdSequencingMode setting in your playback configuration. Standalone ads are used as fallbacks when a sequenced ad is unavailable.
• api-change:sagemaker: [botocore] Amazon SageMaker adds maintenance lifecycle statuses for Notebook Instances
• api-change:securityagent: [botocore] Added enableEmailMfa input field on Actor to enable email-based MFA during penetration tests. When enabled, a server-generated mfaForwardingAddress is returned. Set up a forwarding rule in your email provider to forward MFA emails to this address so the agent can complete email-based MFA login flows

v1.43.66

Compare Source

=======

• api-change:agent-registry: [botocore] Agent Registry's Public Preview release
• api-change:agent-registry-control: [botocore] Agent Registry's Public Preview release
• api-change:autoscaling: [botocore] EC2 Auto Scaling now supports being managed by other AWS services via the operator field.
• api-change:backup: [botocore] AWS Backup now lets you create read-only access points for Amazon S3 recovery points, enabling you to access backup data using S3 APIs without initiating a restore.
• api-change:bedrock-agentcore: [botocore] Add support for capacity provider sessions in Amazon Bedrock AgentCore. Customers can now delete an active session running on a runtime instance launched through their capacity provider.
• api-change:bedrock-agentcore-control: [botocore] Add support for Gateway rate limits and Runtime instances in Amazon Bedrock AgentCore. Customers can now configure rate limits scoped to control request rates, token consumption rates, and active connection rates. Customers can now create capacity providers to launch runtimes on their EC2 instances.
• api-change:devicefarm: [botocore] Adds support for service generated insights across runs, jobs, and tests.
• api-change:ec2: [botocore] Adds a new optional IncludeLocalZones parameter to the Spot Placement Score API that defaults to false. When set to true, the Spot Placement Score API will consider the relevant Local Zones with Spot capacity when computing the Spot Placement Score.
• api-change:endpoint-rules: [botocore] Update endpoint-rules client to latest version
• api-change:gamelift: [botocore] Adds support for C8a, C8i, C9g, M8a, M8i, and M9g EC2 instance type families for managed EC2 and container fleets. Also adds explicit anchors on most string regexes.
• api-change:kafka: [botocore] MSK Clusters can now deliver authorizer logs alongside broker logs to the destinations defined by you
• api-change:logs: [botocore] This release adds index category support to the CloudWatch Logs DescribeFieldIndexes API. Customers can filter and identify DEFAULT, CUSTOM, AUTO, and INACTIVE field indexes.
• api-change:marketplace-agreement: [botocore] GetAgreementTerms now returns a new term variant in AcceptedTerm, netPaymentTerm, with a paymentDuePeriod field (example "P30D").
• api-change:marketplace-discovery: [botocore] GetOfferTerms now returns netPaymentTerm in offerTerms, specifying payment due period after invoice date. The paymentDuePeriod field uses ISO 8601 duration format (e.g., "P30D" for net 30 days). This is a backward-compatible addition. See API documentation for full structure and examples.
• api-change:mediatailor: [botocore] AWS Elemental MediaTailor now supports concurrent function execution. The new Concurrent Executor function type runs multiple independent child functions in parallel within a single lifecycle hook, reducing pipeline latency to the duration of the slowest call instead of the sum of all calls.
• api-change:s3: [botocore] AWS Backup now lets you create read-only access points for Amazon S3 recovery points, enabling you to access backup data using S3 APIs without initiating a restore.
• api-change:sagemaker: [botocore] Releases new Model Customization SequenceLength parameter for Training and g7 instance types for Training and Processing.
• api-change:securityhub: [botocore] Security Hub is adding a new public API, ListFreeTrialStatusesV2 to describe the free trial statuses of the Security Hub service and its opt-in features.
• api-change:socialmessaging: [botocore] Add support for WhatsApp Conversions APIs.
• bugfix:retries: [botocore] Include the resolved max attempts in the amz-sdk-request header on the initial attempt

v1.43.65

Compare Source

=======

• api-change:acm-pca: [botocore] Private Certificate Authority service now supports RSASSA-PSS signing algorithm.
• api-change:bedrock-agentcore-control: [botocore] Adding support for fine-grained access control for AgentCore Memory through managed AgentCore Gateway HTTP Connectors.
• api-change:deadline: [botocore] AWS Deadline Cloud now reports persistent volume costs alongside compute and license costs. Customers can view per-fleet storage costs in Usage Explorer by selecting the Usage Type grouping, helping them better understand the costs of their infrastructure.
• api-change:ecs: [botocore] New enum values added for Agent Connectivity issues
• api-change:glue: [botocore] Added the PutDataCatalogExportConfiguration to export Glue Data Catalog metadata to systems tables stored in S3 Tables.

v1.43.64

Compare Source

=======

• api-change:connect: [botocore] Amazon Connect Customer now supports up to 50 attachments per email, increased from the previous limit of 10. The individual maximum attachment size limit of 20 MB and the total email size limit of 25 MB still hold true.
• api-change:dsql: [botocore] UpdateCluster now checks the RemovePeerCluster permission on the specific cluster being removed, not a wildcard and docs now clarify how to set kmsEncryptionKey so the cluster uses the AWS-owned key.
• api-change:dynamodb: [botocore] Vector indexes are a type of index in Amazon DynamoDB that enable similarity search on vector embedding stored in your table items. Vector indexes use approximate nearest neighbor search to find items whose vectors are most similar to a query vector that you provide.
• api-change:ec2: [botocore] Amazon EC2 now supports Application Status Checks, a new status check that monitors your application's health through configurable HTTP(S) paths and ports, so you can detect and automatically respond to application-level impairments.
• api-change:endpoint-rules: [botocore] Update endpoint-rules client to latest version
• api-change:iam: [botocore] Updating endpoint generation logic
• api-change:inspector2: [botocore] Adding Azure SBOM export capability.
• api-change:organizations: [botocore] Improved accuracy of CloudTrail event documentation for AWS Organizations membership operations.
• api-change:partnercentral-selling: [botocore] Partners can now create leads with only 5 required fields and free-text values for all other fields, reducing import friction. Engagement invitations now include enrichment data (propensity scores, lead readiness) directly in the response.
• api-change:sso-admin: [botocore] AWS IAM Identity Center now lets you create organization-level instances without enabling multi-account permissions. You can enable multi-account permissions during instance creation or later via console or API, which then provisions the necessary service-linked roles.
• api-change:workspaces: [botocore] Added ClientExperiencePolicy to ClientProperties object for ModifyClientProperties and DescribeClientProperties APIs.

v1.43.63

Compare Source

=======

• api-change:directconnect: [botocore] Added route visibility support for AWS Direct Connect, allowing customers to call ListVirtualInterfaceRoutes to view the BGP routes including AS path and BGP communities advertised over their virtual interfaces.
• api-change:eks-auth: [botocore] Added eksNodeName, instanceId, and zone optional parameters to the AssumeRoleForPodIdentity API.
• api-change:mediaconvert: [botocore] Updates Kantar server URL validation to accept Fifty5Blue domain. Adds support for output to S3 Glacier Instant Retrieval.
• api-change:network-firewall: [botocore] This launch allows customers to use Network Firewall as an explicit Proxy and protect their workloads against threat of data exfiltration.
• api-change:observabilityadmin: [botocore] Launch CMK support for Telemetry Enablement Organization and Account Rules.
• api-change:timestream-influxdb: [botocore] This release adds support for customer-managed backup restore, and encryption of new DbInstances and DbClusters using customer-managed KMS keys.
• api-change:wafv2: [botocore] Updated descriptions for number of PreParseTextTransformations allowed per rule statement

v1.43.62

Compare Source

=======

• api-change:amp: [botocore] Amazon Managed Service for Prometheus adds support for an Amazon OpenSearch Service exporter for managed collectors.
• api-change:bedrock-runtime: [botocore] Added support for mid-conversation tool changes in the Amazon Bedrock Converse and ConverseStream APIs
• api-change:billing: [botocore] Adds GetEnterpriseSupportChargeSummary, GetEnterpriseSupportContractDetails, and ListEnterpriseSupportLinkedAccountCharges. These APIs provide first-time programmatic access to billing data for Enterprise Support usage previously only available upon request through AWS Concierge or Support.
• api-change:cloudformation: [botocore] Adding enum for sensitive property to DriftIgnoredReason
• api-change:connectcampaignsv2: [botocore] Launching feature for abandonment rate pacing control for outbound campaigns.
• api-change:datazone: [botocore] Adding support for enhanced Git experience in Sagemaker Unified Studio.
• api-change:elementalinference: [botocore] AWS Elemental Inference now supports graphic composition on cropped video outputs, enabling branded graphics and other visual elements to be overlaid as part of the inference workflow.
• api-change:endpoint-rules: [botocore] Update endpoint-rules client to latest version
• api-change:logs: [botocore] Amazon CloudWatch Logs now lets you create and update lookup tables directly from CloudWatch Logs query results by passing a queryId, and configure a lookup table as a scheduled query destination so it refreshes automatically with the latest query results on each run.
• api-change:marketplace-catalog: [botocore] This release enhances the ListEntities API to support TargetAgreementId, TargetAgreementIntent, and CreatedBySource filters for the Offer entity type.
• api-change:network-firewall: [botocore] Doc Updates for Container Attributes
• api-change:outposts: [botocore] Adds the "EKS" value to the AWSServiceName enum and marks the Address field as sensitive.
• api-change:quicksight: [botocore] Adding TopicV2 management APIs, adding possibility to use Topics in Analysis
• api-change:rds: [botocore] Adds StorageOperationStatus and StorageOperationPercentProgress to DescribeDBInstances, letting you monitor RDS storage initialization and optimization progress.
• api-change:resiliencehubv2: [botocore] Adding support for new testing capability in AWS Resilience Hub.

v1.43.61

Compare Source

=======

• api-change:bcm-pricing-calculator: [botocore] Removing Smithy RPC v2 CBOR support that was added in previous SDK release.
• api-change:bcm-recommended-actions: [botocore] Removing Smithy RPC v2 CBOR support that was added in previous SDK release.

v1.43.60

Compare Source

=======

• api-change:bedrock-agentcore-control: [botocore] Adds support for configuring models through the OpenResponses API for custom evaluators. CreateEvaluator and UpdateEvaluator now accept an OpenResponses model configuration for LLM-as-a-Judge evaluations.
• api-change:endpoint-rules: [botocore] Update endpoint-rules client to latest version
• api-change:iam: [botocore] Improved IAM Policy Simulator accuracy. Simulator now evaluates SCP conditions and resource scoping, returns explicitDeny for explicit SCP denials, and reports accurate cross-account decisions.
• api-change:kafka: [botocore] Amazon MSK Express brokers now support streaming tables for Apache Iceberg, continuously materializing Apache Kafka topics as Iceberg tables in Amazon S3 Tables. Express brokers also now support data delivery to Amazon S3 general purpose buckets.
• api-change:lambda: [botocore] Add Python3.15 (python3.15) and NodeJs 26 (nodejs26.x) support to AWS Lambda
• api-change:network-firewall: [botocore] Adds UPDATING field to Container Association Status
• api-change:pricing-plan-manager: [botocore] Adds support for Public PricingPlanManager SDK
• api-change:sagemaker: [botocore] Adds support for g7 family instance types for SageMaker Studio JupyterLab and CodeEditor apps for IAD (us-east-1), PDX (us-west-2), CMH (us-east-2).
• api-change:securityagent: [botocore] Adds support for providing a branch override when configured integrated repositories

v1.43.59

Compare Source

=======

• api-change:dms: [botocore] Updated documentation for various DMS Schema Conversion operations
• api-change:ec2: [botocore] This release adds support for policy-based routing on AWS Transit Gateway, enabling you to route traffic based on 5-tuple matching (source IP, destination IP, source port, destination port, and protocol) using new policy table entry APIs that direct matching traffic to a target route table.
• api-change:gameliftstreams: [botocore] Adds ListApplicationShaderCaches API to retrieve shader cache metadata for applications and adds stream URLs, which give end users temporary, unauthenticated access to a stream session in their browser. Includes CreateStreamUrl, GetStreamUrl, ListStreamUrls, and RevokeStreamUrl operations.
• api-change:glue: [botocore] Adding filtering, partitioning, and VPC support to AWS Glue REST API connector
• api-change:iotsitewise: [botocore] We have released a new set of APIs in support of a major new feature within AWS IoT SiteWise called Scenario Discover. Please see user guide about the feature and the API guide in public documentation for new APIs.
• api-change:wafv2: [botocore] AWS WAF now supports pre-parse text transformations, letting you normalize raw query strings before parsing, available on rule statements that use SingleQueryArgument or AllQueryArguments as the FieldToMatch. AWS WAF also added 10 new text transformations, including ModSecurity v3 parity options.

v1.43.58

Compare Source

=======

• api-change:bedrock-agentcore-control: [botocore] AgentCore Identity now supports Private Key JWT client authentication for OAuth 2.0 credential providers. Agents can authenticate to identity provider token endpoints with a JWT client assertion signed by a customer-managed AWS KMS asymmetric key, eliminating the need for client secrets.
• api-change:connect: [botocore] Documentation updates for SearchRules, AssociateRoutingProfileQueues, CreateRoutingProfile, AssociateContactWithUser CreateTaskTemplate, and UpdateTaskTemplate
• api-change:datasync: [botocore] Adds Enhanced mode support for EFS and FSx Lustre locations without an agent, and for HDFS (TDE), Azure Blob, and object storage locations with an agent. HDFS Enhanced mode supports multiple NameNodes for High Availability. Enhanced mode agents can now be deployed on Microsoft Hyper-V.
• api-change:rolesanywhere: [botocore] Increases certificate string length for trust anchor source data to support new adjustable trust anchor limits.
• api-change:trustedadvisor: [botocore] Adds ListRecommendationsForResource API and four CheckSummary fields (resourceArnQueryable, awsResourceTypes, checkGranularity, recommendationId) to retrieve recommendations for a given resource ARN.

v1.43.57

Compare Source

=======

• api-change:account: [botocore] This release adds support for the GetPrimaryEmailUpdateStatus API operation, which allows customers to retrieve the current status of a primary email address update request for an AWS account. The operation returns status information including whether the update is pending, completed, or failed.
• api-change:bcm-data-exports: [botocore] With this release, customers can configure their data exports to deliver CSV reports in ZIP compressed format.
• api-change:cleanrooms: [botocore] This release adds support for the CR.8X worker type for SQL (32 vCPU)
• api-change:cleanroomsml: [botocore] This release adds support for the CR.8X worker type for SQL (32 vCPU)
• api-change:emr-containers: [botocore] With this launch, you can now set concurrent job limits on a virtual cluster, giving you fine-grained control over how many job runs execute at once and how many can wait in queue.
• api-change:glue: [botocore] Adds BatchGetDataQualityRulesetEvaluationRun API to retrieve multiple runs in one call, ObservationScope and ObservationMode parameters for anomaly detection, writing evaluation results to Data Catalog tables, and custom log group paths for recommendation runs.
• api-change:partnercentral-account: [botocore] Adds optional headquarters location to StartProfileUpdateTask, letting partners record their headquarters as an ISO 3166 country and subdivision code on their profile. When headquarters is provided, both the country and subdivision codes are required.
• api-change:quicksight: [botocore] Added new Governance fields to Custom Permissions API to support Deny By Default functionality.
• api-change:sagemaker: [botocore] This release adds LoRA adapters, training plans, and new instance types to SageMaker inference optimization. CreateAIRecommendationJob accepts optional AdapterSource and CreateOptimizationJob accepts optional TrainingPlanArns and the ml.g7e and ml.p6-b200 families.
• api-change:securityagent: [botocore] AWS Security Agent adds a new task hours field that reflects the active work done for a task.

v1.43.56

Compare Source

=======

• api-change:application-insights: [botocore] This release adds Smithy RPC v2 CBOR as an additional protocol alongside the existing AWS JSON 1.1. The SDK will prioritize its most performant protocol.
• api-change:artifact: [botocore] Added the PutComplianceInquiryFeedback API, enabling customers to submit feedback on compliance inquiry responses. Customers can rate responses as helpful or not helpful and provide optional reason codes and comments.
• api-change:cognito-idp: [botocore] Amazon Cognito user pools now support the AdminGetUserAuthFactors operation, which lets administrators retrieve the configured authentication factors (such as password, SMS, email, and TOTP) available for a specific user in a user pool.
• api-change:endpoint-rules: [botocore] Update endpoint-rules client to latest version
• api-change:neptune-graph: [botocore] Update validations for Tag Keys and KMS Key ARNs.
• api-change:odb: [botocore] Documentation-only update to clarify the operation-specific valid values for the externalIdType field.
• api-change:rtbfabric: [botocore] The deprecated inboundLinksCount field has been removed from the GetResponderGateway API response. Customers who previously relied on this field should use linksRequestedCount instead.

v1.43.55

Compare Source

=======

• api-change:appstream: [botocore] This release adds Smithy RPC v2 CBOR as an additional protocol alongside the existing AWS JSON 1.1. The SDK will prioritize its most performant protocol.
• api-change:backup-gateway: [botocore] This release adds Smithy RPC v2 CBOR as an additional protocol alongside the existing AWS JSON 1.0. The SDK will prioritize its most performant protocol.
• api-change:bcm-pricing-calculator: [botocore] This release adds Smithy RPC v2 CBOR as an additional protocol alongside the existing AWS JSON 1.0. The SDK will prioritize its most performant protocol.
• api-change:bcm-recommended-actions: [botocore] This release adds Smithy RPC v2 CBOR as an additional protocol alongside the existing AWS JSON 1.0. The SDK will prioritize its most performant protocol.
• api-change:bedrock-agentcore: [botocore] Adds support for the Bring Your Own Storage(BYOS) feature in AgentCore Browser and Code Interpreter. Enables mounting S3Files and EFS File Systems via Access points.
• api-change:bedrock-agentcore-control: [botocore] Adds support for the Bring Your Own Storage(BYOS) feature in AgentCore Browser and Code Interpreter. Enables mounting S3Files and EFS File Systems via Access points.
• api-change:datazone: [botocore] Adds support for notebook sync with S3 ipynb files
• api-change:gameliftstreams: [botocore] GameLift Streams now supports configuring a custom aspect ratio per stream session to accommodate different player devices. Supported aspect ratios include landscape, portrait, and square - delivering a full-screen experience without letterboxing or cropping.
• api-change:kendra-ranking: [botocore] This release adds Smithy RPC v2 CBOR as an additional protocol alongside the existing AWS JSON 1.0. The SDK will prioritize its most performant protocol.
• api-change:mediapackagev2: [botocore] This release adds support for non-epoch-locked CMAF ingest in MediaPackageV2 channels.
• api-change:quicksight: [botocore] Added new capabilities to custom permissions profiles to control access to Amazon Quick through the browser extension and Microsoft Word, Outlook, Excel, and PowerPoint add-ins.
• api-change:redshift-data: [botocore] This release include long polling provids a new parameter wait-time-seconds to 5 API operations, new API ListSessions, and a new parameter execution-mode to BatchExecuteStatement
• api-change:sagemaker: [botocore] Release support for c6a, m6a, m6g, m7g, m8g instance types for SageMaker HyperPod
• api-change:workspaces-instances: [botocore] This release adds Smithy RPC v2 CBOR as an additional protocol alongside the existing AWS JSON 1.0. The SDK will prioritize its most performant protocol.

v1.43.54

Compare Source

=======

• api-change:amp: [botocore] Add CloudWatch dataset destinations for Amazon Managed Service for Prometheus collectors.
• api-change:arc-region-switch: [botocore] Adds support for a client token in StartPlanExecution to make plan execution requests idempotent for safe retries.
• api-change:cloudwatch: [botocore] Adds documented value constraints for CloudWatch Log Alarm scheduled query configuration fields, and makes LogGroupIdentifiers optional for log alarms.
• api-change:elbv2: [botocore] This adds CLI examples for the IpAddressType field on SourceIpConfig, enabling Network Load Balancer listener rules to match traffic based on whether the source IP is IPv4 or IPv6.
• api-change:endpoint-rules: [botocore] Update endpoint-rules client to latest version
• api-change:guardduty: [botocore] Amazon GuardDuty now returns filter lifecycle metadata in GetFilter responses. The response includes createdAt and updatedAt timestamps and a version number that increments on each update, giving you visibility into when a filter was created and last modified.
• api-change:observabilityadmin: [botocore] Enablement for ALB and Bedrock Knowledge Base logs via Observability Admin Telemetry Rule for account and organization level
• api-change:partnercentral-account: [botocore] Adds Qualifications Association APIs that enable partners to associate a subsidiary account's qualifications with a primary account. Once associated, qualifications are shared across all connected accounts and scorecards are consolidated. Partners can start and track association and disassociation.
• api-change:pcs: [botocore] AWS PCS Node Lifecycle Actions provides a structured way to run custom scripts at defined points in a compute node's lifecycle directly through the AWS PCS compute node group API.
• api-change:sesv2: [botocore] Launching DEED and MREP in US GOV
• bugfix:TLS: [botocore] Raise a configuration error when the CA bundle value (ca_bundle, AWS_CA_BUNDLE, REQUESTS_CA_BUNDLE, or the client verify parameter) resolves to an empty or whitespace-only string.

v1.43.53

Compare Source

=======

• api-change:emr-containers: [botocore] Added support for the DeleteSecurityConfiguration API, which allows customers to delete security configurations in Amazon EMR on EKS. Also added authenticationConfiguration in securityConfigurationdata structure.
• api-change:entityresolution: [botocore] Add support for real time matching with AWS Entity Resolution matching workflows with advanced rule sets.
• api-change:inspector2: [botocore] GA date - July 21st 2026, remove Tags field from ListCodeSecurityIntegration and ListCodeSecurityScanConfiguration.
• api-change:invoicing: [botocore] Added the SendProcurementPortalValidation and VerifyProcurementPortalValidation APIs. You can use the AWS SDKs to self-service activate your Procurement Portal Preferences created on the Billing Preferences page with a one-time-passcode (OTP) delivered to your portal.
• api-change:redshift: [botocore] Amazon Redshift - Added support for managing Query Editor V2 IAM Identity Center applications via new CreateQev2IdcApplication, DescribeQev2IdcApplications, ModifyQev2IdcApplication, and DeleteQev2IdcApplication API operations.
• api-change:redshift-data: [botocore] update the workgroupArn to include EUSC partition, tests in THF Gamma and Prod no issue
• api-change:ssm: [botocore] Added a WarningMessage field to Automation along with corresponding public documentation.
• api-change:timestream-influxdb: [botocore] This release adds support for custom plugins in Amazon Timestream for InfluxDB. InfluxDB 3 Core and Enterprise DB parameter groups now accept a plugin repository URL and optional AWS Secrets Manager secret ARN, so the Processing Engine loads your Python plugins from a public or private repository.

v1.43.52

Compare Source

=======

• api-change:bedrock-agentcore: [botocore] Add W3C trace context headers (traceparent, tracestate, baggage) and X-Amzn-Trace-Id to InvokeHarness request for end-to-end observability propagation. Add toolResultMetadata to the streaming content block delta for MCP tool result meta delivery without oversized SSE frames.
• api-change:bedrock-agentcore-control: [botocore] This release adds support for specifying a connector version on Gateway targets to pin the connector's tool schema. It also introduces web-search connector version 1.2.0, which adds agent-side domain filtering, published date range filtering, and admin-side domain allowlisting.
• api-change:endpoint-rules: [botocore] Update endpoint-rules client to latest version
• api-change:inspector2: [botocore] Adds Windows path support for deep inspection. Fixes tag propagation for connector CloudFormation stack operations.
• api-change:mediatailor: [botocore] This change adds api support for configuring ad decision server timeouts and concurrency fields on MediaTailor playback configurations
• api-change:meteringmarketplace: [botocore] For new SaaS product integrations, CustomerIdentifier is not populated in ResolveCustomer responses and is not supported in BatchMeterUsage. Use CustomerAWSAccountId and LicenseArn instead.
• api-change:organizations: [botocore] Updated InvalidInputException error documentation to clarify that the service validates free-text field values against common cross-site scripting (XSS) patterns.
• api-change:quicksight: [botocore] Adds support for custom permissions for Triggers, allowing administrators to control user access to Schedule, Inbound Email and Quick Event triggers.
• api-change:sesv2: [botocore] Amazon SES introduces three new Pricing Plans (Essentials, Pro, Enterprise), which bundle SES features under one pricing umbrella. The new PutAccountPricingAttributes API lets the user set the account's plan, while current plan retrievalif done through the new PricingAttributes field on GetAccount.

v1.43.51

Compare Source

=======

• api-change:cognito-idp: [botocore] Amazon Cognito user pools now support sending SMS via AWS End User Messaging. A new EumsSms object in SmsConfigurationType lets you deliver MFA and verification texts through AWS End User Messaging, alongside the existing Amazon SNS option.
• api-change:gameliftstreams: [botocore] Amazon GameLift Streams now supports assigning an IAM role to a stream session, enabling your application to securely access resources in your AWS account, such as Amazon S3 buckets and DynamoDB tables.
• api-change:kinesisanalyticsv2: [botocore] Support for Flink 2.3 in Managed Service for Apache Flink
• api-change:odb: [botocore] Adds support for sourcing Autonomous Database admin and wallet passwords from customer-managed AWS Secrets Manager secrets, including password source configuration and summaries, and enabling or disabling the OCI IAM service role for Secrets Manager integration via InitializeService.
• api-change:rds: [botocore] Adds the AssociatedRoles parameter to CreateDBCluster, RestoreDBClusterFromSnapshot, RestoreDBClusterToPointInTime, and RestoreDBClusterFromS3, letting customers associate IAM roles with an Aurora DB cluster at create or restore time instead of calling AddRoleToDBCluster afterward.
• enhancement:AWSCRT: [botocore] Update awscrt version to 0.36.0

v1.43.50

Compare Source

v1.43.49

Compare Source

v1.43.48

Compare Source

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.