Update dependency boto3 to v1.43.31

[k1h-renovate]

ℹ️ Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package	Update	Change
boto3	minor	==1.40.34 → ==1.43.31

---

Warning

Some dependencies could not be looked up. Check the warning logs for more information.

---

Release Notes

boto/boto3 (boto3)

v1.43.31

Compare Source

=======

• api-change:directconnect: [botocore] Added VIF rate limiting support for AWS Direct Connect, allowing customers to set bandwidth allocations on virtual interfaces to manage traffic on dedicated connections.
• api-change:outposts: [botocore] Adds support for creating an order from quotes.
• api-change:partnercentral-selling: [botocore] Added Prospecting APIs to convert engagements into AI-enriched leads with scoring insights. Extended Engagement APIs with ProspectingResult and Lead contexts. Added CoSell Scoring to GetAwsOpportunitySummary- quality score, trend, agent-driven recommendations, and engagement classification.
• api-change:route53resolver: [botocore] Adds supports for PartnerManagedRules
• api-change:s3: [botocore] Added support for annotations. You can now attach up to 1000 annotations (up to 1 MB each) directly to objects and create, retrieve, list, and delete them using new annotation APIs. Also added support for configuring an annotation table in S3 Metadata.
• api-change:s3vectors: [botocore] Amazon S3 Vectors now supports paginated QueryVectors requests, returning up to 10,000 results per query.
• api-change:sagemaker: [botocore] Add EnableDetailedObservability to Endpoint MetricsConfig. Publishes GPU, host, and framework-native inference metrics to CloudWatch with per-inference-component, availability-zone, and instance dimensions. Adds Inference Component provisioning lifecycle and multi-AZ placement metrics.

v1.43.30

Compare Source

=======

• api-change:bedrock-runtime: [botocore] InvokeGuardrailChecks API evaluates prompts and responses against safety checks (content filters, prompt attacks, sensitive info) without creating guardrail resources. It's a detect-only API, returning numeric scores so you can build adaptive logic as per your application.
• api-change:datazone: [botocore] Adds support for deleting lineage events in Amazon DataZone.
• api-change:logs: [botocore] Added endTimeOffset parameter to Scheduled Queries APIs (Create, Update, Get) enabling bounded time window configuration. Introduced scheduleType filter (CUSTOMER MANAGED, AWS MANAGED) for ListScheduledQueries and exposed it in Get and Update responses.
• api-change:mgn: [botocore] AWS Transform for VMware now supports Amazon FSx for NetApp ONTAP as a target storage. Customers can migrate source server disks directly to FSx for NetApp ONTAP iSCSI LUNs. Target storage is configurable per source server, and compute, network, and storage migrate together in coordinated waves.
• api-change:rds: [botocore] Adding support for RDS SQL Server BYOM and DB2 Community Edition
• api-change:wafv2: [botocore] AWS WAF now supports AI traffic monetization for CloudFront. Configure payment networks and pricing on your web ACL, use the new Monetize rule action to charge AI agents via x402, and monitor revenue with new GetRevenueStatisticsSummary, GetRevenueStatistics, and ListSettlementRecords APIs.
• api-change:workspaces: [botocore] Added a validation for null check for ImageIds in DescribeWorkspaceImages API request parameters.

v1.43.29

Compare Source

=======

• api-change:acm: [botocore] Certificate transparency logging opt-out is no longer available. Per compliance requirements, all public ACM certificates are automatically recorded in certificate transparency logs. The CertificateTransparencyLoggingPreference option is deprecated.
• api-change:bedrock-agentcore: [botocore] Added tagging and CMK support across optimization, an explanation field in recommendation output, and an insights feature to identify failure patterns, extract user intents, and summarize execution behavior
• api-change:bedrock-agentcore-control: [botocore] Added tagging and CMK support for optimizations and an insights feature to identify failure patterns, extract user intents, and summarize execution behavior
• api-change:devops-agent: [botocore] Adds support for Trigger CRUD APIs (CreateTrigger, GetTrigger, UpdateTrigger, DeleteTrigger, ListTriggers) for managing schedule-based automation triggers in DevOps Agent agent spaces.
• api-change:eks: [botocore] Patches missing enum values for EKS updates
• api-change:firehose: [botocore] Update KeyARN in DeliveryStreamEncryptionConfigurationInput to accept KMS key ARNs only (not alias ARNs), matching service behavior.
• api-change:glue: [botocore] Adds support for retrieving Apache Iceberg table metadata via GetTable. Use the new AttributesToGet parameter with LATEST ICEBERG METADATA to receive schema, partition specs, sort orders, and table properties in the response.
• api-change:iam: [botocore] Updating documentation for select service-specific credential APIs
• api-change:sagemaker-runtime: [botocore] Added support for inline request payloads to the InvokeEndpointAsync operation to allow users to provide the inference payload directly in the request Body (up to 128,000 bytes) as an alternative to uploading the payload to Amazon S3 and passing InputLocation.

v1.43.28

Compare Source

=======

• api-change:bedrock-agentcore: [botocore] Adds support to perform cross account data plane actions on an AgentCore Memory resource
• api-change:bedrock-agentcore-control: [botocore] Supports deterministic metadata for AgentCore Memory
• api-change:eks: [botocore] Introduce new CreateCluster parameters for Amazon EKS local clusters on AWS Outposts. Added etcdInstanceType for configuring the EC2 instance type for dedicated etcd instances, and spreadLevel for configuring the placement group spread level for Kubernetes control plane and etcd instances.
• api-change:healthlake: [botocore] Adds the UpdateFHIRDatastore API and adds analytics, NLP, and profile configuration support to CreateFHIRDatastore and DescribeFHIRDatastore.
• api-change:neptune: [botocore] Amazon Neptune now supports IPv6 dual-stack networking. You can create and manage Neptune DB clusters accessible over both IPv4 and IPv6 by specifying NetworkType as DUAL in CreateDBCluster, ModifyDBCluster, RestoreDBClusterFromSnapshot, and RestoreDBClusterToPointInTime API operations
• api-change:omics: [botocore] Adds support for workflowName in the ListRuns API response.
• api-change:support: [botocore] Adding new BDD representation of endpoint ruleset

v1.43.27

Compare Source

=======

• api-change:amp: [botocore] Adds supports for out-of-order sample ingestion (default 1-minute window) and a configurable rule query offset to reduce data loss and improve alerting accuracy.
• api-change:connecthealth: [botocore] Add support for MedicalScribeBinaryAudioEvent in the Medical Scribe streaming input. This new event type lets you send audio as a raw binary payload instead of a base64-encoded value
• api-change:ec2: [botocore] This release adds support for AMI Watermark which a structured identifier that helps in tracking AMI provenance
• api-change:ecs: [botocore] Amazon ECS Managed Daemon task definitions now support pidMode and ipcMode parameters. Set shared to allow daemons to share PID or IPC namespaces with co-located tasks on Managed Instances, enabling process tracing and shared memory communication.
• api-change:endpoint-rules: [botocore] Update endpoint-rules client to latest version
• api-change:lightsail: [botocore] This release adds support for Asia Pacific (Hong Kong) (ap-east-1), Europe (Spain) (eu-south-2) and South America (Sao Paulo) (sa-east-1) Regions.
• api-change:medialive: [botocore] Adding premixer settings to pid and track audio inputs in MediaLIve to allow greater control over mixing audio from multiple source streams including support for AudioPidSelectors made up of multiple audio PIDs.
• api-change:sagemaker: [botocore] Add support for G6e instances (ml.g6e.xlarge through ml.g6e.48xlarge) on Amazon SageMaker Notebook Instances.
• api-change:signin: [botocore] AWS Sign-In now allows customers to control access to the AWS Management Console using resource-based policies. With this release customers can restrict console access based on network perimeters such as VPC IDs, VPC endpoints, and IP addresses.

v1.43.26

Compare Source

=======

• api-change:bedrock: [botocore] Adds support for the Amazon Bedrock account-level data retention APIs PutAccountDataRetention and GetAccountDataRetention.
• api-change:bedrock-agentcore: [botocore] Add RetryableConflictException (HTTP 409) to InvokeAgentRuntimeCommand and GetAgentCard to prevent orphaned VMs during concurrent session access. The SDK automatically retries this exception with backoff. Enforcement is not yet active and will be enabled in a future service update.
• api-change:cloudwatch: [botocore] This release adds the APIs (AssociateDatasetKmsKey, DisassociateDatasetKmsKey, GetDataset) to manage encryption at rest for OpenTelemetry metrics in CloudWatch using AWS KMS customer managed keys.
• api-change:ec2: [botocore] Added TagFieldSpecifications to CreateFlowLogs and DescribeFlowLogs APIs. Customers can now specify tag keys in their Flow Logs subscriptions to capture associated EC2 resource tag values in their logs, enabling tag-based visibility.
• api-change:odb: [botocore] Releases Autonomous Database Serverless APIs, autonomousDatabaseOciIntegrationIamRoles, linkedOciTenancyId, linkedOciCompartmentId, and subscriptionErrors fields in GetOciOnboardingStatus API response.
• api-change:outposts: [botocore] Added AWS Outposts APIs for self-service Outposts quoting and ordering. New operations include CreateQuote, GetQuote, UpdateQuote, DeleteQuote, ListQuotes, and ListOrderableInstanceTypes.

v1.43.25

Compare Source

=======

• api-change:compute-optimizer: [botocore] Adds new Idle Recommendation Resource types in the AWS Compute Optimizer API
• api-change:cost-optimization-hub: [botocore] Adds new Idle Recommendation types in the Cost Optimization Hub API
• api-change:deadline: [botocore] Added optional identityCenterRegion parameter to AssociateMember APIs to allow managing memberships for users and groups in other regions.
• api-change:devops-agent: [botocore] Add Asset APIs for managing versioned assets and asset files in AWS DevOps Agent agent spaces.
• api-change:mediapackagev2: [botocore] Adds support for DASH Audio Timeline Patternization. This enables your DASH manifests to templatize the repeating patterns that emerge in audio segment timelines. This compacts the total timeline length, utilizing the repeat notation, such that manifests don't grow indefinitely long.
• api-change:mgn: [botocore] AWS Transform discovery tool now supported as network migration input source. You can now use the AWS Transform Discovery tool as a source for network migration alongside modelizeIT, enabling hybrid network migrations for environments running both VMware and non-VMware workloads.
• api-change:observabilityadmin: [botocore] CloudWatch Observability Admin extends CentralizationRuleForOrganization APIs to support metrics, enabling centralization of metrics across accounts and Regions alongside logs.
• api-change:omics: [botocore] StartRunBatch API - Add EngineSettings
• api-change:taxsettings: [botocore] Adds support for additional tax information fields for Philippines, Belgium, Chile, France, Poland, and Italy in the Tax Settings API.

v1.43.24

Compare Source

=======

• api-change:emr-serverless: [botocore] Adds support for updating max capacity and custom fields while application is started
• api-change:mediaconvert: [botocore] Adds support for configurable number of Clear Lead segments at the beginning of encrypted output. Adds support for multiple trickplay variants.
• api-change:payment-cryptography: [botocore] Adds CloudFormation support for resource-based policies on AWS Payment Cryptography keys.
• api-change:quicksight: [botocore] Adds support for Knowledge Base APIs and Index Capacity API
• api-change:sagemaker: [botocore] This release adds support for MLflow experiment tracking in SageMaker inference optimization. CreateAIRecommendationJob and CreateAIBenchmarkJob now accept an optional OutputConfig.MlflowConfig (MLflow App ARN, experiment, run name) to stream benchmark metrics and artifacts to your own MLflow App.

v1.43.23

Compare Source

=======

• api-change:appflow: [botocore] Adding new BDD representation of endpoint ruleset
• api-change:appintegrations: [botocore] Adding new BDD representation of endpoint ruleset
• api-change:auditmanager: [botocore] Adding new BDD representation of endpoint ruleset
• api-change:chime-sdk-voice: [botocore] Adding new BDD representation of endpoint ruleset
• api-change:cloudformation: [botocore] Adding new BDD representation of endpoint ruleset
• api-change:config: [botocore] AWS Config now supports internal service-linked rules, allowing AWS service partners to deploy Config rules for customers and use the evaluation results to build enhanced features.
• api-change:connectparticipant: [botocore] Adding new BDD representation of endpoint ruleset
• api-change:efs: [botocore] Adding new BDD representation of endpoint ruleset
• api-change:emr: [botocore] Added support for Spark Connect interactive sessions on Amazon EMR on EC2 with new APIs - StartSession, GetSession, GetSessionEndpoint, ListSessions, and TerminateSession. Added sessionEnabled field in RunJobFlow and DescribeCluster to enable Spark Connect endpoints on EMR clusters.
• api-change:endpoint-rules: [botocore] Update endpoint-rules client to latest version
• api-change:glue: [botocore] AWS Glue Interactive Sessions now supports Apache Spark Connect, enabling remote Spark execution over gRPC with minimal client-side dependencies. Adds GetSessionEndpoint and GetDashboardUrl APIs. Modifies CreateSession now accepts SPARK CONNECT session type.
• api-change:guardduty: [botocore] Remove unsupported RDS field for filter
• api-change:ivs: [botocore] adds UpdateAdConfiguration operation to AWS IVS low-latency APIs
• api-change:kendra: [botocore] Adding new BDD representation of endpoint ruleset
• api-change:sagemaker: [botocore] Adds the IncludedData parameter to DescribeModelCard and DescribeModelPackage. Set it to MetadataOnly to retrieve a model card without decrypt permission on the customer managed AWS KMS key (default AllData returns full content). Adds support for the MTRL Job resource in SageMaker Search.
• api-change:sns: [botocore] Adding new BDD representation of endpoint ruleset
• api-change:wickr: [botocore] AWS Wickr now allows network administrators to configure a maximum session duration for non-SSO users in security groups, and display customizable consent popups to users at login for terms of use or compliance acknowledgements.
• api-change:workdocs: [botocore] Adding new BDD representation of endpoint ruleset
• api-change:workspaces: [botocore] Adding new BDD representation of endpoint ruleset

v1.43.22

Compare Source

=======

• api-change:arc-region-switch: [botocore] ARC Region Switch now supports three new execution blocks for multi-Region database workloads-Amazon Aurora Serverless scaling, Amazon Aurora Provisioned scaling, and Amazon Neptune Global Database failover.
• api-change:ce: [botocore] Added support for target-coverage-based Savings Plans purchase analysis. The StartCommitmentPurchaseAnalysis API now accepts a new TARGET AVERAGE COVERAGE value for AnalysisType, as well as an optional SavingsPlansTargetCoverage field in SavingsPlansPurchaseAnalysisConfiguration
• api-change:compute-optimizer: [botocore] This release lets customers extend the lookback period for Amazon EBS volume and Amazon ECS rightsizing recommendations to 32 days.
• api-change:connect: [botocore] SearchContacts Connect API now supports filtering contacts by the AI Agents involved in handling them
• api-change:inspector2: [botocore] Inspector support for enhanced scanning
• api-change:socialmessaging: [botocore] Adding support for WhatsApp flow APIs and adding AccessDeniedByMetaException for Template APIs

v1.43.21

Compare Source

=======

• api-change:endpoint-rules: [botocore] Update endpoint-rules client to latest version
• api-change:geo-routes: [botocore] Add "standardRegionalEndpoints" back to fix 'Could not connect to the endpoint URL'

v1.43.20

Compare Source

=======

• api-change:ec2: [botocore] Amazon EC2 now supports self-service cancellation of future-dated Capacity Reservations. A cancellation charge applies based on remaining commitment. Customers can generate a cancellation quote to review charges before confirming.
• api-change:elasticache: [botocore] Amazon ElastiCache for Valkey now supports durability. This new capability is enabled through a Multi-AZ transactional log, enabling fast recovery and restart during failures.
• api-change:endpoint-rules: [botocore] Update endpoint-rules client to latest version
• api-change:geo-routes: [botocore] Added Transit and Intermodal travel modes to CalculateRoutes. Plan routes using public transit (bus, subway, train, ferry) or combine transit with driving, taxi, and rental car segments in a single multi-modal route.
• api-change:guardduty: [botocore] Amazon GuardDuty Runtime Monitoring now supports 3 new SensitiveFileModified finding types (Persistence, PrivilegeEscalation, DefenseEvasion) that detect when security-sensitive system files are modified on EC2 instances or containers, indicating potential compromise through file tampering.
• api-change:iot: [botocore] Fleet indexing documentation update
• api-change:keyspacesstreams: [botocore] Added iterator description to the GetRecords API response for Amazon Keyspaces Change Data Capture (CDC) streams, enabling consumers to track their current position within the stream.
• api-change:lambda: [botocore] Adds configuration for tag propagation to Lambda-managed resources.
• api-change:sagemaker: [botocore] Amazon SageMaker Job is a new service to help you manage various workloads related to model fine tuning, evaluation etc. Two job categories are supported today, AgentRFT for multi-turn agentic reinforcement fine tuning, and AgentRFTEvaluation for evaluating base model or trained model from AgentRFT.
• api-change:sagemakerjobruntime: [botocore] Amazon SageMaker Job Runtime is a new service for managing trajectory data during multi-turn customization jobs. It provides APIs to send inference requests to models during job execution, mark rollouts as complete, and submit reward values for training trajectories.
• api-change:transcribe: [botocore] Release new Language locales including am-ET, es-MX, fa-AF, ht-HT, jv-ID, km-KH, my-MM, sq-AL, ne-NP. The commit shows past locales that have already been release which include cy-gb, ga-ie, gd-gb.

v1.43.19

Compare Source

=======

• api-change:cognito-idp: [botocore] Add support for multi-region replication, enabling synchronization of user data and configurations to a secondary user pool in a standby Region. Add support for customer managed keys (CMK) in AWS KMS for encrypting user pool data at rest.
• api-change:marketplace-agreement: [botocore] Adding Entitlements in SearchAgreements Response
• api-change:quicksight: [botocore] This release adds public APIs for Amazon QuickSight Spaces, Agents, and Flows. Spaces APIs enable management of curated resource collections. Agents APIs provide lifecycle control over AI-powered agents that leverage Spaces. Flows APIs add CRUDL APIs for automated workflows.

v1.43.18

Compare Source

=======

• api-change:bedrock: [botocore] Automated Reasoning checks - Added two build workflows for policies. Iterative Refine Policy uses AI to update policy definitions based on test results and feedback. Resolve Policy Ambiguities consolidates ambiguous variables in Automated Reasoning policies, a common source of ambiguous validation.
• api-change:bedrock-agentcore-control: [botocore] Reference your own AWS Secrets Manager secrets when configuring credential providers, giving you control over encryption, rotation, and access policies instead of using service-managed secrets.
• api-change:groundstation: [botocore] Adds support for Alpha-5 satellite number encoding in the Two-Line Element ephemeris format.
• api-change:omics: [botocore] Add engineSettings to StartRun and GetRun. Add profiles and profileParameterTemplates to GetWorkflow and GetWorkflowVersion.
• api-change:quicksight: [botocore] Adds support for creating, updating, describing, listing, and deleting an OAuthClientApplication resource, a new quicksight resource that allows customers to store OAuth configurations to connect to their databases via 3 Legged OAuth.
• api-change:rds-data: [botocore] RDS Data API arrays (longValues, doubleValues, stringValues, booleanValues) in ExecuteStatement responses now correctly support null elements. Runtime change for JS v3 and .NET. Compile-time change for C plus plus, .NET, Kotlin, Rust. No impact for Java, Python, Ruby, PHP, Go.
• api-change:route53resolver: [botocore] Added BatchCreateFirewallRule, BatchUpdateFirewallRule, BatchDeleteFirewallRule, and ListFirewallRuleTypes APIs. Added FirewallRuleType support to Firewall Rule APIs.
• api-change:sesv2: [botocore] This release introduces support for Tenant Suppression Lists

v1.43.17

Compare Source

=======

• api-change:appstream: [botocore] Amazon WorkSpaces Applications now supports BYOL (Bring Your Own License). This enables customers to import their own WorkSpaces images and use them in WorkSpaces Applications.
• api-change:bedrock: [botocore] Add support for ModelPackageArn in Bedrock's CreateCustomModel API
• api-change:bedrock-agentcore: [botocore] Added Harness support for LiteLLM model configuration for third-party model providers. Added S3 and Git skill source types. Added Responses API format for OpenAI and Bedrock models. Added runtimeUserId and runtimeClientError to InvokeHarness.
• api-change:bedrock-agentcore-control: [botocore] Added Harness support for LiteLLM model configuration for third-party model providers. Added S3 and Git skill source types. Added Responses API format for OpenAI and Bedrock models. Added runtimeUserId parameter to InvokeHarness for end-user identification.
• api-change:bedrock-runtime: [botocore] Support system role in message
• api-change:controlcatalog: [botocore] AWS Control Catalog - Added GovernedProviders response field and inclusion filter to GetControl and ListControls APIs to identify and filter by cloud provider. Added ParameterRequirementSummary response field indicating parameter requirements.
• api-change:customer-profiles: [botocore] BatchPutProfileObject API adds multiple profile objects to a domain of a given ObjectType in a single API call.
• api-change:deadline: [botocore] Added support for persistent storage on Service-Managed Fleets, allowing customers to configure persistent storage that preserves data across worker sessions which reduces job startup times for workloads with large software installations or asset caches.
• api-change:endpoint-rules: [botocore] Update endpoint-rules client to latest version
• api-change:iot: [botocore] Adds new connectivity-related fields to Fleet Indexing API requests and responses.
• api-change:iot-data: [botocore] Adding GetConnection, ListSubscriptions, and SendDirectMessage APIs to IoT Data Plane
• api-change:opensearchserverless: [botocore] Adds support for deletion protection on collections, ability to create NEXTGEN collection groups and autoscaling visibility for NEXTGEN collection groups
• api-change:pcs: [botocore] This release adds support for configuring scaleDownIdleTimeInSeconds at the compute node group level, allowing customers to set different idle timeouts per node group. Previously this setting was only available at the cluster level.
• api-change:resiliencehubv2: [botocore] This is the initial SDK release for the next generation of Resilience Hub.
• api-change:s3control: [botocore] Update the minimum value of MinStorageBytesPercentage in StorageLensPrefixLevel.SelectionCriteria from 0.1 to 1, aligning the model with the documented contract.

v1.43.16

Compare Source

=======

• api-change:bedrock-data-automation: [botocore] Matcher Fallback extends the CustomOutputConfiguration for the Document modality in DataAutomationProjects, enabling a fallback blueprint when no match is found. A FALLBACK match status is returned, improving the matching experience and guaranteeing customers always receive CustomOutputResults.
• api-change:ecs: [botocore] Add support for Neuron device resource requirements for Amazon ECS
• api-change:elementalinference: [botocore] Added support for smart subtitles in Elemental Inference, enabling automatic generation of subtitles for media content. Available in English, Spanish, French, German, Italian, and Portuguese.
• api-change:medialive: [botocore] AWS Elemental MediaLive now supports Smart Subtitles, a new caption source that uses AWS Elemental Inference to automatically generate WebVTT and TTML captions from source audio. Available in English, Spanish, French, German, Italian, and Portuguese.
• api-change:opensearch: [botocore] OpenSearch will now support multi-segment paths in JWKS URLs.
• api-change:organizations: [botocore] AWS Organizations now emits CloudTrail events (AccountJoinedOrganization, AccountDepartedOrganization) to the management account for membership changes, including join and departure method and timestamp.
• api-change:sagemaker: [botocore] Adds shared environment support for Restricted Instance Groups (RIGs) on SageMaker HyperPod, enabling cross-RIG workload scheduling and FSx sharing. This unlocks shared CPU-GPU environments needed for cost-efficient RL training (e.g., Nova Forge). Adds p6 instance support for recommendation jobs

v1.43.15

Compare Source

=======

• api-change:backup: [botocore] Launching S3 PITR malware scanning support for AWS Backup
• api-change:batch: [botocore] Increase the maximum value of jobExecutionTimeoutMinutes to support longer job timeouts during compute environment infrastructure updates.
• api-change:budgets: [botocore] AWS Budget Name Validation Documentation Updates.
• api-change:datazone: [botocore] Added resourceConfigurations and allowUserProvidedConfigurations fields to environment blueprint configuration APIs, enabling customers who migrated from V1 to V2 domains to update resource configurations (such as lineage schedules) programmatically via the SDK.
• api-change:guardduty: [botocore] Add malware scan support for Continuous Backups, also known as Point-In-Time Recovery Points (PITR).
• api-change:resourcegroupstaggingapi: [botocore] The GetResources API now returns MissingTagKeys in ComplianceDetails, listing tag keys defined as required in the ReportRequiredTagBlock block of the effective tag policy that are absent from the resource.

v1.43.14

Compare Source

=======

• api-change:datazone: [botocore] Add support for VPC connection
• api-change:ec2: [botocore] The ModifyInstanceAttribute API now supports modification of EnclaveOptions for the instance as a typed parameter.
• api-change:gameliftstreams: [botocore] Added new Gen6 stream classes based on the EC2 G6e instance family. These classes are designed for streaming high-fidelity, graphically demanding games and applications that benefit from additional GPU memory and performance.
• api-change:invoicing: [botocore] Adds support for idempotency with a new ClientToken field for the CreateInvoiceUnit, DeleteInvoiceUnit, UpdateInvoiceUnit, DeleteProcurementPortalPreference, PutProcurementPortalPreference, and UpdateProcurementPortalPreferenceStatus APIs.
• api-change:pi: [botocore] Added ListPerformanceAnalysisReportRecommendations API to retrieve recommendations for a performance analysis report. Added analysis configuration support to CreatePerformanceAnalysisReport for enhanced analysis types such as vacuum analysis.
• api-change:qconnect: [botocore] Added guardrail assessment results to inference spans in the ListSpans API. You can now see which AI Guardrail policies were evaluated, whether content was blocked or masked, and per-policy details for each Bedrock Converse call
• api-change:securityagent: [botocore] Adds support for verification scripts on penetration test findings. Customers can now download executable scripts to independently reproduce confirmed vulnerabilities, with instructions and required environment variables provided for each finding.
• enhancement:s3: [botocore] Improve caching of S3 endpoints, which should improve performance when working with multiple keys in the same bucket

v1.43.13

Compare Source

=======

• api-change:batch: [botocore] Clarified CreateComputeEnvironment parameter requirements - serviceRole is required for UNMANAGED compute environments, allocationStrategy is required for EKS compute environments, and compute environments must be created in the ENABLED state.
• api-change:bedrock-agentcore-control: [botocore] Adds dataset management APIs for creating, versioning, and managing evaluation datasets.
• api-change:cleanrooms: [botocore] Collaboration creators can update payment configurations without recreating the collaboration. When multiple payer candidates are configured for a cost type, analysis runners can specify the actual payer at submission time, providing granular control over billing.
• api-change:cleanroomsml: [botocore] Collaboration creators can update payment configurations without recreating the collaboration. When multiple payer candidates are configured for a cost type, analysis runners can specify the actual payer at submission time, providing granular control over billing.
• api-change:evs: [botocore] A new GetDepotUrl API has been added to retrieve a URL for accessing Amazon EVS custom addon packages. Customers can use this URL to configure vSphere Lifecycle Manager (vLCM) as an online depot source, enabling upgrades of addon components across ESXi hosts.
• api-change:mediaconnect: [botocore] Adds support for controlling the timecode source of NDI flow outputs.
• api-change:sagemaker: [botocore] Add support for disabling home EFS file system creation on SageMaker domains.
• api-change:verifiedpermissions: [botocore] Support hard deleting policy store aliases. Users can now delete an alias and immediately reassign it to a different policy store without waiting for the soft-delete retention period.

v1.43.12

Compare Source

=======

• api-change:bedrock-runtime: [botocore] Supporting Request Metadata for Invoke Model and Invoke Model with Response Stream
• api-change:customer-profiles: [botocore] Amazon Connect Customer Profiles adds support for item catalog columns in RecommenderSchema, ExcludedColumns in Create and Update Recommender to specify columns to exclude from training, and the ability to disable automatic retraining by setting TrainingFrequency to 0.
• api-change:kms: [botocore] AWS KMS now supports creating grants for AWS service principals using new GranteeServicePrincipal and RetiringServicePrincipal parameters. This release adds SourceArn grant constraint and three condition keys for controlling CreateGrant access. For more information, see Grants in AWS KMS.
• api-change:mwaa: [botocore] Updated API documentation to describe the PublicAndPrivate webserver access mode.
• api-change:payment-cryptography-data: [botocore] GenerateAuthRequestCryptogram API launch.

v1.43.11

Compare Source

=======

• api-change:bedrock-agentcore: [botocore] Add RetryableConflictException (HTTP 409) to InvokeAgentRuntime and StopRuntimeSession to prevent orphaned VMs during concurrent session access. The SDK automatically retries this exception with backoff. Enforcement is not yet active and will be enabled in a future service update.
• api-change:devops-agent: [botocore] Added a new serviceType mcpserversigv4 service and association. This provides feature to register MCP sigv4 authorization based MCPs
• api-change:grafana: [botocore] Introduce degraded workspace status as a possible Amazon Managed Grafana workspace status, and a new field named degraded workspace reason which informs customers why the workspace is degraded in the DescribeWorkspace API response.
• api-change:guardduty: [botocore] Adding support for exposure and vulnerability context from AWS Security Hub in GuardDuty Extended Threat Detection attack sequence findings.
• api-change:rtbfabric: [botocore] This release is to deprecate 'inboundLinksCount' field in GetResponderGateway response and introduce the new field 'linksRequestedCount' to replace it.
• api-change:sagemaker: [botocore] Add support for ml.p5.4xlarge and ml.p5en.48xlarge instances on SageMaker Notebook Instances Platform.

v1.43.10

Compare Source

=======

• api-change:accessanalyzer: [botocore] Services manage service-linked analyzers through dedicated APIs - CreateServiceLinkedAnalyzer and DeleteServiceLinkedAnalyzer that separate service-linked specific operations from customer-managed operations. It also shows up in ListAnalyzers and GetAnalyzer responses.
• api-change:connect: [botocore] Amazon Connect Cases now supports SLA durations of up to 2 years (1,051,200 minutes), increased from the previous maximum of 90 days (129,600 minutes). This enables you to track long-running service level agreements for cases that require extended resolution timelines.
• api-change:ec2: [botocore] Amazon VPC IP Address Manager (IPAM) now supports tags on IPAM pool allocations, enabling all standard tagging features for allocations including tag-on-create.
• api-change:ecs: [botocore] Amazon ECS now supports Pause lifecycle hooks for service deployments, allowing customers to automatically pause deployments at specified stages and use the new ContinueServiceDeployment API to continue or roll back with confidence.
• api-change:evs: [botocore] Amazon EVS now supports up to 32 hosts per EVS environment, increasing the previous host limit to allow a larger scale of VMware workload deployments and reduce operational overhead.
• api-change:ivs: [botocore] Adds support for up to 3 mediaTailorPlaybackConfiguration objects in an ad configuration resource
• api-change:quicksight: [botocore] Support for dataset enrichment and geo spatial in new data preparation experience

v1.43.9

Compare Source

======

• api-change:logs: [botocore] Updating the max limit for start query api parameter.
• api-change:mediapackagev2: [botocore] This release adds support for AvailabilityStartTimeConfiguration in MediaPackageV2 DASH manifests
• api-change:partnercentral-selling: [botocore] Enable TCV intake on Opportunity to improve Opportunities Hygiene and downstream revenue attribution.

v1.43.8

Compare Source

======

• api-change:bedrock: [botocore] Advanced Prompt Optimization (AdvPO) allows you to optimize and migrate your prompts for any model on Bedrock by automatically evaluating responses and rewriting prompts to improve performance. This release provides a programmatic way to create, get, list, stop, and delete AdvPO jobs.
• api-change:cloudfront: [botocore] Adding a new boolean for OCSP Revocations in Viewer mTLS Create and Update APIs, and adding a new 'Passthrough' option for TrustStore modes
• api-change:datazone: [botocore] Adds support for SageMaker Unified Studio notebook operations, including notebook import and export
• api-change:dms: [botocore] Add 9 SDK waiters for DMS Schema Conversion async operations. Eliminates manual polling for import, assessment, conversion, export, and creation jobs.
• api-change:glue: [botocore] Release --has-databases parameter for AWS Glue get-catalogs API, which filters catalog responses to include only those capable of containing databases, excluding parent catalogs that hold only other catalogs. Remove model-level validation on partition index list size for AWS Glue tables.
• api-change:grafana: [botocore] Adds support for dual-stack (IPv4 and IPv6) connectivity to Amazon Managed Grafana workspaces. Customers can configure the ipAddressType parameter when creating or updating a workspace to choose between IPv4-only or dual-stack (IPv4 and IPv6) access.
• api-change:mgn: [botocore] Introducing new option for security groups mapping - with MAP-DHCP the service translates security rules from your source environment with DHCP compatibility.
• api-change:qconnect: [botocore] ListModels is an API that returns the available AI models for a Connect Assistant based on its region and AI prompt type.

v1.43.7

Compare Source

======

• api-change:arc-region-switch: [botocore] Adds support for enabling and disabling Lambda event source mappings in Region switch plans.
• api-change:batch: [botocore] Adds a billing callout to docs regarding using the CE Scale Down Delay feature
• api-change:bedrock-agentcore-control: [botocore] Adds support for read-only summary APIs for Policy Engine, Policy, and Policy Generation resources, enabling metadata retrieval without KMS decryption for AWS Config integration.
• api-change:billingconductor: [botocore] Add ConflictException to UpdateCustomLineItem operation.
• api-change:connect: [botocore] This change added three new EventSourceName for schedule notification feature
• api-change:connectcampaignsv2: [botocore] This release added support for Outbound Campaign timezone detection using all available contact methods
• api-change:connectcases: [botocore] Amazon Connect Cases now supports SLA durations of up to 2 years (1,051,200 minutes), increased from the previous maximum of 90 days (129,600 minutes). This enables you to track long-running service level agreements for cases that require extended resolution timelines.
• api-change:dsql: [botocore] Added support for Amazon Aurora DSQL change data capture (CDC) streams that deliver row-level database changes to Amazon Kinesis in JSON format. Includes CreateStream, GetStream, ListStreams, and DeleteStream operations.
• api-change:ec2: [botocore] Include length limits in the SDK and documentation for text fields in Image (AMI) APIs such as the image name and description
• api-change:endpoint-rules: [botocore] Update endpoint-rules client to latest version
• api-change:es: [botocore] Adds support for AutomatedSnapshotPauseOptions.
• api-change:glue: [botocore] AWS Glue now defaults the job timeout to 480 minutes for Glue version 5.0 and later when no timeout value is specified. The default remains 2,880 minutes for Glue version 4.0 and earlier.
• api-change:lightsail: [botocore] Added OriginIpAddressTypeEnum (ipv4, ipv6, dualstack) and ipAddressType field to Origin and InputOrigin structures for Lightsail CDN distributions. Allows customers to specify how the distribution connects to origins, using IPv4, IPv6, or dualstack networking
• api-change:opensearch: [botocore] Adds support for AutomatedSnapshotPauseOptions.
• api-change:partnercentral-account: [botocore] Added ServiceQuotaExceededExceptions for Profile operations
• api-change:pcs: [botocore] Add support for Amazon EC2 Interruptible-ODCR
• api-change:quicksight: [botocore] Adds five new custom permission option for Quick Apps so that these capabilities can be controlled by public SDK and CLI.
• api-change:redshift: [botocore] Added rg.xlarge and rg.4xlarge to valid NodeType values and updated documentation for CreateCluster, ModifyCluster, ResizeCluster, and RestoreFromClusterSnapshot APIs to reflect RG node type support.
• api-change:rtbfabric: [botocore] Customers can now configure custom domain names for their RTB Fabric gateways. This enables partners to use their own branded domain for RTB traffic instead of the default rtbfabric endpoint
• api-change:sagemaker: [botocore] Adds execution role session name mode to reflect user identity in Studio. Adds Flexible Training Plans on Studio apps. Adds restricted model packages to control access to proprietary model artifacts via IAM. Fixed instance type parity between inference endpoints and managed shadow tests.
• api-change:securityagent: [botocore] Add support for code reviews, a new resource type that enables automated security-focused static analysis of source code repositories.
• api-change:socialmessaging: [botocore] Adds parameters to call the GetWhatsAppMessageTemplate and UpdateWhatsAppMessageTemplate APIs with a template name and language code in place of the template ID. Linked WhatsApp accounts also describe whether the WABA is onboarded to Meta's Marketing Messages API.
• api-change:stepfunctions: [botocore] Updated default SDK endpoints for AWS Step Functions in AWS GovCloud (US) regions. The default Dual-Stack endpoints now resolve to "states-fips" prefixed hostnames. There are no changes to service behavior. No customer action is required.

v1.43.6

Compare Source

======

• api-change:bcm-data-exports: [botocore] With this release, customers can configure their data exports to generate additional integration artifacts for Athena and Redshift.
• api-change:bedrock-agentcore: [botocore] Launching AgentCore payments - a capability that provides secure, instant microtransaction payments for AI agents to access paid APIs, MCP servers, and content. It handles payment processing for x402 protocol, payment limits, and 3P wallet integrations with Coinbase CDP and Stripe (Privy).
• api-change:bedrock-agentcore-control: [botocore] Launching AgentCore payments - a capability that provides secure, instant microtransaction payments for AI agents to access paid APIs, MCP servers, and content. It handles payment processing for x402 protocol, payment limits, and 3P wallet integrations with Coinbase CDP and Stripe (Privy).
• api-change:ec2: [botocore] DescribeInstanceTypes now accepts an IncludeUnsupportedInRegion parameter. When set, the response also lists instance types that are not available in the current Region. Each instance type includes a SupportedInRegion field indicating its regional availability.
• api-change:guardduty: [botocore] This is a documentation update
• api-change:invoicing: [botocore] Updated ListInvoiceSummaries API to add new ReceiverRole filter in Request and Response
• api-change:route53resolver: [botocore] Adds supports for DNS64 on inbound endpoints and IPv6 forwarding through the internet gateway (IGW) on outbound endpoints, making it easier to manage hybrid DNS across IPv4 and IPv6 networks.

v1.43.5

Compare Source

======

• api-change:bedrock-agentcore-control: [botocore] Adds support for bring-your-own file system in AgentCore Runtime. Developers can mount Amazon S3 Files and Amazon EFS access points directly into agent sessions using filesystemConfigurations.
• api-change:endpoint-rules: [botocore] Update endpoint-rules client to latest version
• api-change:glue: [botocore] Adds support for a CustomLogGroupPrefix parameter in StartDataQualityRulesetEvaluationRun to specify custom CloudWatch log group paths, and a RulesetName filter in ListDataQualityRulesetEvaluationRuns to filter evaluation runs by ruleset name.
• api-change:imagebuilder: [botocore] The ImportDiskImage API now enforces a maximum character limit of 128 characters on the image name field.
• api-change:lexv2-models: [botocore] Amazon Lex V2 introduces audio filler support for speech-to-speech bots. Configure melody or typing sounds that play during backend processing to reduce perceived latency and maintain a natural conversational experience for callers.
• api-change:mwaa: [botocore] Amazon MWAA now supports a PublicAndPrivate webserver access mode. The Airflow web server is accessible over both public and private endpoints, enabling workers in VPCs without internet access to reach the Task API privately while retaining public access to the Airflow UI.
• api-change:s3: [botocore] Validate outpost access point resource name
• api-change:sagemaker: [botocore] Amazon SageMaker HyperPod now returns ImageVersionStatus in DescribeCluster, DescribeClusterNode, and ListClusterNodes responses, indicating whether cluster instances are running the latest available image version.
• api-change:securityhub: [botocore] Release GenerateRecommendedPolicyV2 and GetRecommendedPolicyV2 APIs. This supports generating and retrieving policy recommendations to remediate unused permissions findings that are now being supported on Security Hub.

v1.43.4

Compare Source

======

• api-change:cleanroomsml: [botocore] Increase max configurable output limits in the Clean Rooms ML configured model algorithm association resource.
• api-change:cloudfront: [botocore] Adds support for tagging CloudFront Functions and KeyValueStores resources.
• api-change:marketplace-agreement: [botocore] With this release, Agreements API provides a programmatic way to generate quotes, accept offers, track charges and entitlements, manage renewals and cancellations, and streamline operations entirely through APIs without navigating to the AWS Marketplace website or AWS Management Console.
• api-change:mediatailor: [botocore] Added support for Monetization Functions. Monetization Functions let you enrich ad requests with external data and transform session parameters using JSONata expressions, without deploying custom infrastructure.
• api-change:medical-imaging: [botocore] Add support for DICOM Json Metadata Override features in startDICOMImportJob API
• api-change:opensearch: [botocore] Amazon OpenSearch Service now supports VPC egress, enabling outbound traffic from your OpenSearch domain to route privately through your VPC instead of the public internet.
• api-change:route53domains: [botocore] This release adds the TLDInMaintenance exception.
• api-change:sagemaker: [botocore] Adds support for ml.p5.4xlarge instance type for SageMaker Studio JupyterLab and CodeEditor apps for IAD (us-east-1), NRT (ap-northeast-1), BOM (ap-south-1), CGK (ap-southeast-3), GRU (sa-east-1), PDX (us-west-2), CMH (us-east-2).

v1.43.3

Compare Source

======

• api-change:bedrock-agentcore-control: [botocore] Amazon Bedrock AgentCore gateways now support MCP Sessions and response streaming from MCP targets. Session timeouts can be set between 15 minutes and 8 hours, and response streaming enables forwarding stream events sent by MCP targets to gateway users.
• api-change:ec2: [botocore] This feature allows customers to change the tunnel bandwidth on existing VPN connections using the ModifyVpnConnectionOptions API
• api-change:geo-routes: [botocore] Added support for TravelTimeExceedsDriverWorkHours, ViolatedBlockedRoad, and ViolatedVehicleRestriction notice codes to the CalculateRoutes API response.
• api-change:lex-models: [botocore] Lex V1 is deprecated, use Lex V2 instead
• api-change:logs: [botocore] Adding an additional optional deliverySourceConfiguration field to PutDeliverySource API. This enables customers to pass service-specific configurations through IngestionHub such as tracing enablement or sampling rates that will be propagated to the source resource.
• api-change:medialive: [botocore] Updates the type of the MediaLiveRouterOutputConnectionMap.
• api-change:securityagent: [botocore] AWS Security Agent is adding a new target domain verification method for private VPC penetration testing. Additionally, the target domain resource will now have a verification status reason field to surface additional details about domain verification
• api-change:vpc-lattice: [botocore] Amazon VPC Lattice now supports privately resolvable DNS resources
• enhancement:Retries: [botocore] Added opt-in support for updated standard retry behavior via the AWS_NEW_RETRIES_2026 environment variable. This environment variable is temporary and will be removed in a future release when the updated behavior becomes the default. Changes include updated default retry mode to standard, service-specific max attempts for DynamoDB, revised retry quota costs based on error type, updated exponential backoff with service-specific scale factors, x-amz-retry-after header support, and long-polling operation backoff on quota exhaustion.

v1.43.2

Compare Source

=======

• api-change:acm: [botocore] Certificate transparency logging opt-out is no longer available. Per compliance requirements, all public ACM certificates are automatically recorded in certificate transparency logs. The CertificateTransparencyLoggingPreference option is deprecated.
• api-change:bedrock-agentcore: [botocore] Added tagging and CMK support across optimization, an explanation field in recommendation output, and an insights feature to identify failure patterns, extract user intents, and summarize execution behavior
• api-change:bedrock-agentcore-control: [botocore] Added tagging and CMK support for optimizations and an insights feature to identify failure patterns, extract user intents, and summarize execution behavior
• api-change:devops-agent: [botocore] Adds support for Trigger CRUD APIs (CreateTrigger, GetTrigger, UpdateTrigger, DeleteTrigger, ListTriggers) for managing schedule-based automation triggers in DevOps Agent agent spaces.
• api-change:eks: [botocore] Patches missing enum values for EKS updates
• api-change:firehose: [botocore] Update KeyARN in DeliveryStreamEncryptionConfigurationInput to accept KMS key ARNs only (not alias ARNs), matching service behavior.
• api-change:glue: [botocore] Adds support for retrieving Apache Iceberg table metadata via GetTable. Use the new AttributesToGet parameter with LATEST ICEBERG METADATA to receive schema, partition specs, sort orders, and table properties in the response.
• api-change:iam: [botocore] Updating documentation for select service-specific credential APIs
• api-change:sagemaker-runtime: [botocore] Added support for inline request payloads to the InvokeEndpointAsync operation to allow users to provide the inference payload directly in the request Body (up to 128,000 bytes) as an alternative to uploading the payload to Amazon S3 and passing InputLocation.

v1.43.1

Compare Source

=======

• api-change:cognito-idp: [botocore] Add support for multi-region replication, enabling synchronization of user data and configurations to a secondary user pool in a standby Region. Add support for customer managed keys (CMK) in AWS KMS for encrypting user pool data at rest.
• api-change:marketplace-agreement: [botocore] Adding Entitlements in SearchAgreements Response
• api-change:quicksight: [botocore] This release adds public APIs for Amazon QuickSight Spaces, Agents, and Flows. Spaces APIs enable management of curated resource collections. Agents APIs provide lifecycle control over AI-powered agents that leverage Spaces. Flows APIs add CRUDL APIs for automated workflows.

v1.43.0

Compare Source

======

• api-change:account: [botocore] Adds AccountState in the response for the GetAccountInformation API. Each state represents a specific phase in the account lifecycle. Use this information to manage account access, automate workflows, or trigger actions based on account state changes.
• api-change:bedrock-agentcore: [botocore] Adds batch evaluation for running evaluators

✂ Note

PR body was truncated to here.

---

Configuration

📅 Schedule: (in timezone Europe/Stockholm)

• Branch creation
  • At 06:00 PM through 11:59 PM and 12:00 AM through 05:59 AM, Monday through Friday (* 18-23,0-5 * * 1-5)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Mend Renovate.