👋 Looking for changelogs for older versions? You can find them in the changelogs directory.
-
- Added support for associating glossary terms with iterable form items, such as table columns.
-
- Updated endpoint and partition metadata.
-
- Adds CheckIngestedDocumentAcl and GetIngestedDocumentAcl APIs to Amazon Bedrock Knowledge Bases. Customers can verify user access to documents based on ingested ACLs and retrieve full ACL details including allow and deny entries, enabling validation of ACL ingestion without test retrievals.
-
- Add support for the Machine Payments Protocol (MPP) and x402 upto scheme payments protocol in Amazon Bedrock AgentCore Payments. Customers can now pay for MPP-gated resources and also pay services which requires upto scheme in x402
-
- Adds AgentCore Payments support for CMK, Marketplace Subscriptions and QuickCreate
-
- Amazon Redshift now unlocks a locked admin user account and resets the failed-login counter when you update the admin password using the ModifyCluster API. This option is available only when account lockout security is enabled.
-
- Release support for g7.2xlarge, g7.4xlarge, g7.8xlarge, g7.12xlarge, g7.24xlarge, and g7.48xlarge instance types for SageMaker HyperPod
-
- Adds support for Consuming code for MWAA Serverless
-
- CloudWatch Logs centralization rules now support tag propagation. You can configure a TagPropagationConfiguration on your centralization rule to automatically sync resource tags from source to destination log groups, with configurable conflict resolution strategies.
-
- Amazon Redshift now unlocks a locked admin user account and resets the failed-login counter when you update the admin password using the UpdateNamespace API. This option is available only when account lockout security is enabled.
-
- Honor wildcard
nonProxyHostsentries in CRT-based HTTP clients (AwsCrtHttpClient,AwsCrtAsyncHttpClient, and the S3/CRT client). Previously a*.suffixwildcard or a bare*fromhttp.nonProxyHosts/no_proxywas silently ignored, so matching hosts were routed through the proxy instead of bypassing it. Supported forms are an exact host, a*.suffixwildcard (matches the domain and its subdomains), a single*for all hosts, and CIDR ranges. Entries must not contain surrounding whitespace.
- Honor wildcard
-
- This change allows customers to update their existing email-validated certificates to use the DNS validation method.
-
- This release adds support for minimum aggregation thresholds and comparison controls to the Custom analysis rule type.
-
- Added the GetBlobDifferences API operation, which returns line-level diffs between two blob versions without requiring a local clone. Returns structured hunks with context, additions, and deletions. Supports pagination for large diffs.
-
- Removed ServiceMetadata usages from client creation and request processing code paths to improve cold start performance. Endpoint and signing region resolution now uses Endpoints 2.0 directly instead of triggering eager initialization of all service metadata classes. Service client artifacts must be version 2.28.1 or later to be compatible with this change.
-
- Add support for setting a maximum task-hour budget cap on penetration tests and code reviews, and for revalidating previously reported findings via a new REVALIDATION job type.
-
- Adds SHA256 support to CloudFrontUtilities
-
- Adds the StartAssistantContact API to start chat contacts handled by an AI agent. Adds SegmentAttributes to StartWebRTCContact, and corrects its error response to now receive AccessDeniedException (previously returned as an internal server error due to a missing error declaration).
-
- Fix AutoGeneratedTimestampRecordExtension failing when TableSchema.converterForAttribute throws UnsupportedOperationException for custom schemas; expand dynamodb-enhanced functional test coverage
-
- Trimmed surrounding whitespace from
nonProxyHosts/no_proxyentries so comma- or pipe-separated values with spaces (e.g.no_proxy=a.com, *.foo.com) are honored. Previously an entry with a leading or trailing space was treated as part of the host name and never matched, so the host was routed through the proxy instead of bypassing it.
- Trimmed surrounding whitespace from
-
- Trimmed surrounding whitespace from
nonProxyHosts/no_proxyentries so comma- or pipe-separated values with spaces (e.g.no_proxy=a.com, *.foo.com) are honored. Previously an entry with a leading or trailing space was treated as part of the host name and never matched, so the host was routed through the proxy instead of bypassing it.
- Trimmed surrounding whitespace from
-
- Upgrade httpcomponents.client5 to 5.6.4 to address CVE-2026-71290
-
- Amazon EC2 Auto Scaling now supports terminating multiple instances in a single TerminateInstanceInAutoScalingGroup call via the new InstanceIds parameter, returning an Activities list. LaunchInstances now returns IdempotentCallInProgressFault for duplicate client tokens.
-
- Trimmed surrounding whitespace from
nonProxyHosts/no_proxyentries so comma- or pipe-separated values with spaces (e.g.no_proxy=a.com, *.foo.com) are honored. Previously an entry with a leading or trailing space was treated as part of the host name and never matched, so the host was routed through the proxy instead of bypassing it.
- Trimmed surrounding whitespace from
-
- Trimmed surrounding whitespace from
nonProxyHosts/no_proxyentries so comma- or pipe-separated values with spaces (e.g.no_proxy=a.com, *.foo.com) are honored. Previously an entry with a leading or trailing space was treated as part of the host name and never matched, so the host was routed through the proxy instead of bypassing it.
- Trimmed surrounding whitespace from