V2 (#9977)

* CLI examples for cloudformation.

* Fix start-live-tail tests

This fix addresses failures encountered on some systems when running the
startlivetail unit tests through the AWS CLI test runner script at
`scripts/ci/run-tests`. According to prompt toolkit documentation:

> During the creation of a prompt_toolkit Application, we can specify
> what input and output device to be used. By default, these are output
> objects that correspond with sys.stdin and sys.stdout. In unit tests
> however, we want to replace these.
> - For the input, we want a “pipe input”. This is an input device,
> in which we can programmatically send some input. It can be created
> with create_pipe_input(), and that return either a PosixPipeInput or a
> Win32PipeInput depending on the platform.

Reference: https://python-prompt-toolkit.readthedocs.io/en/stable/pages/advanced_topics/unit_testing.html

This change adds an optional `app_input`` parameter so that the test can
be run with `create_pipe_input()` to replace the input for unit testing.

* Update to latest models

* Update endpoints model

* Bump version to 2.32.8

* Update to latest models

* Bump version to 2.32.9

* Update to latest models

* Bump version to 2.32.10

* Update to latest models

* Bump version to 2.32.11

* [v2] Add monitoring configuration to emr create-cluster (#9892)

* Update to latest models

* Update endpoints model

* Bump version to 2.32.12

* Remove S3 endpoint s3v4 test (#9903)

* Update to latest models

* Update endpoints model

* Bump version to 2.32.13

* Adds support for expanding host prefix to the BaseRpcV2Serializer class (#9901)

* Update model-validation tests to describe violations in custom properties (#9823)

* Update to latest models

* Bump version to 2.32.14

* Upgrade bundled Python interpreter to 3.13.11. (#9902)

* Update to latest models

* Update endpoints model

* Bump version to 2.32.15

* [Documentation] Warning against the use of S3 Global Endpoint (s3.amazonaws.com) as endpoint-url (#9850)

docs: add caution note for S3 endpoint-url parameter

Add note to S3 configuration documentation warning users about potential
unintended behavior when using --endpoint-url parameter, including S3
redirect issues.

This was prompted by setting the global S3 endpoint
(s3.amazonaws.com) as a custom endpoint URL caused PermanentRedirect
errors, redirect loops, and configuration confusion. While the guidance
is generalized to cover broader endpoint configuration concerns, it
specifically advises against using the global S3 endpoint as an
endpoint-url parameter value.

Addresses #9479

* Update to latest models

* Update endpoints model

* Bump version to 2.32.16

* Fix validates models record_property serialization errors (#9912)

* Update to latest models

* Bump version to 2.32.17

* [v2] Add GitHub Actions build workflow (#9918)

* Update to latest models

* Update endpoints model

* Bump version to 2.32.18

* [v2] Fix pr action (#9922)

* Update to latest models

* Update endpoints model

* Bump version to 2.32.19

* Add prefix to CloudTrail S3 digest file listing (#9933)

Scope S3 list_objects call to trail's region by adding prefix
parameter. This prevents processing digest files from all regions
and improves validate-logs command performance when validating
logs near current time.

Add _create_digest_prefix method to generate region-specific
prefix for both regular and organizational trails. Update
existing tests and add new test coverage for prefix generation.

Co-authored-by: Sasanka Mouli Subrahmanya Sri Veleti <sveleti@amazon.com>

* Update to latest models

* Update endpoints model

* Bump version to 2.32.20

* ci: Skip new internal build for fork-origin PRs (#9937)

* Adding new examples for medical-imaging's create-datastore and get-datastore (#9934)

Co-authored-by: laiqmuhh <laiqmuhh@amazon.com>

* Merge customizations for ARC Region switch

* Update to latest models

* Update endpoints model

* Bump version to 2.32.21

* Introduce ECS Express Text-Only Mode (#9943)

* Update to latest models

* Bump version to 2.32.22

* Remove elastictranscoder client following the service deprecation

* [v2] Add case-sensitivity handling to multi-object download operations (#9925)

* Update to latest models

* Update endpoints model

* Bump version to 2.32.23

* Update to latest models

* Update endpoints model

* Bump version to 2.32.24

* Update to latest models

* Bump version to 2.32.25

* Update to latest models

* Update endpoints model

* Bump version to 2.32.26

* Update to latest models

* Bump version to 2.32.27

* Revert case sensitivity handling feature (#9960)

Revert "[v2] Add case-sensitivity handling to multi-object download operations (#9925)"

* Bump version to 2.32.28

* Update to latest models

* Bump version to 2.32.29

* [v2] ci: scope down GitHub Token permissions (#9965)

* ci: scope down GitHub Token permissions (#9804)

* ci: scope down permissions for fail-master-prs.yml

* ci: scope down permissions for run-bundle-test.yml

* ci: scope down permissions for changelog.yml

* ci: scope down permissions for update-lockfiles.yml

* ci: scope down permissions for run-tests.yml

* ci: scope down permissions for closed-issue-message.yml

* ci: scope down permissions for stale_community_prs.yml

* ci: scope down permissions for run-dep-tests.yml

* ci: scope down permissions for doc-pr-cherry-pick.yml

* ci: scope down permissions for source-dist-tests.yml

---------

Co-authored-by: Adnan Khan <AdnaneKhan@users.noreply.github.com>

* Support # in user_agent_appid (#9967)

* Merge customizations for Cost Explorer

* Update to latest models

* Bump version to 2.32.30

* Update to latest models

* Update endpoints model

* Bump version to 2.32.31

* Prevent 'aws login' from updating a profile with existing credentials (#9924)

* [v2] Update urllib3 to 2.6.3 (#9971)

* [V2] Create update-vpc-link.rst (#9974)

Co-authored-by: Sowjanya Pandruju <sowjanya.pandruju@gmail.com>

---------

Co-authored-by: Elysa Hall <elysah@amazon.com>
Co-authored-by: Kenneth Daily <kdaily@amazon.com>
Co-authored-by: aws-sdk-python-automation <github-aws-sdk-python-automation@amazon.com>
Co-authored-by: Justin Mae <justin511@gmail.com>
Co-authored-by: Steve Yoo <106777148+hssyoo@users.noreply.github.com>
Co-authored-by: SamRemis <sjremis94@gmail.com>
Co-authored-by: Ahmed Moustafa <35640105+aemous@users.noreply.github.com>
Co-authored-by: Adrian D. <101290859+adev-code@users.noreply.github.com>
Co-authored-by: Sasanka Mouli Veleti <mouli20774@gmail.com>
Co-authored-by: Sasanka Mouli Subrahmanya Sri Veleti <sveleti@amazon.com>
Co-authored-by: Alex Shovlin <shovlia@amazon.com>
Co-authored-by: laiqmuhh <laiqmuhh@amazon.com>
Co-authored-by: jutyler1 <jutyler@amazon.com>
Co-authored-by: Adnan Khan <AdnaneKhan@users.noreply.github.com>
Co-authored-by: jonathan343 <43360731+jonathan343@users.noreply.github.com>
Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
Co-authored-by: Sowjanya Pandruju <sowjanya.pandruju@gmail.com>

Author: 18 people

.changes/2.32.10.json

@@ -0,0 +1,7 @@
+[
+  {
+    "category": "``lambda``",
+    "description": "Add DisallowedByVpcEncryptionControl to the LastUpdateStatusReasonCode and StateReasonCode enums to represent failures caused by VPC Encryption Controls.",
+    "type": "api-change"
+  }
+]

.changes/2.32.11.json

@@ -0,0 +1,27 @@
+[
+  {
+    "category": "``inspector2``",
+    "description": "This release adds a new ScanStatus called \"Unsupported Code Artifacts\". This ScanStatus will be returned when a Lambda function was not code scanned because it has unsupported code artifacts.",
+    "type": "api-change"
+  },
+  {
+    "category": "``iam``",
+    "description": "Adding the ExpirationTime attribute to the delegation request resource.",
+    "type": "api-change"
+  },
+  {
+    "category": "``partnercentral-account``",
+    "description": "Adding Verification API's to Partner Central Account SDK.",
+    "type": "api-change"
+  },
+  {
+    "category": "``ecs``",
+    "description": "Updating stop-task API to encapsulate containers with custom stop signal",
+    "type": "api-change"
+  },
+  {
+    "category": "``sesv2``",
+    "description": "Updating the desired url for `PutEmailIdentityDkimSigningAttributes` from v1 to v2",
+    "type": "api-change"
+  }
+]

.changes/2.32.12.json

@@ -0,0 +1,42 @@
+[
+  {
+    "category": "``ce``",
+    "description": "Add support for Cost Category resource associations including filtering by resource type on ListCostCategoryDefinitions and new ListCostCategoryResourceAssociations API.",
+    "type": "api-change"
+  },
+  {
+    "category": "``sesv2``",
+    "description": "Update Mail Manager Archive ARN validation",
+    "type": "api-change"
+  },
+  {
+    "category": "``rolesanywhere``",
+    "description": "Increases certificate string length for trust anchor source data to support ML-DSA certificates.",
+    "type": "api-change"
+  },
+  {
+    "category": "``ec2``",
+    "description": "Amazon EC2 P6-B300 instances provide 8x NVIDIA Blackwell Ultra GPUs with 2.1 TB high bandwidth GPU memory, 6.4 Tbps EFA networking, 300 Gbps dedicated ENA throughput, and 4 TB of system memory. Amazon EC2 C8a instances are powered by 5th Gen AMD EPYC processors with a maximum frequency of 4.5 GHz.",
+    "type": "api-change"
+  },
+  {
+    "category": "``partnercentral-selling``",
+    "description": "Deal Sizing Service for AI-based deal size estimation with AWS service-level breakdown, supporting Expansion and Migration deals across Technology, and Reseller partner cohorts, including Pricing Calculator AddOn for MAP deals and funding incentives.",
+    "type": "api-change"
+  },
+  {
+    "category": "``identitystore``",
+    "description": "Updating AWS Identity Store APIs to support Attribute Extensions capability, with the first release adding Enterprise Attributes. This launch aligns Identity Store APIs with SCIM for enterprise attributes, reducing cases when customers are forced to use SCIM due to lack of SigV4 API support.",
+    "type": "api-change"
+  },
+  {
+    "category": "``rds``",
+    "description": "Adding support for tagging RDS Instance/Cluster Automated Backups",
+    "type": "api-change"
+  },
+  {
+    "category": "``redshift-serverless``",
+    "description": "Added GetIdentityCenterAuthToken API to retrieve encrypted authentication tokens for Identity Center integrated serverless workgroups. This API enables programmatic access to secure Identity Center tokens with proper error handling and parameter validation across supported SDK languages.",
+    "type": "api-change"
+  }
+]

.changes/2.32.13.json

@@ -0,0 +1,32 @@
+[
+  {
+    "category": "``account``",
+    "description": "This release adds a new API (GetGovCloudAccountInformation) used to retrieve information about a linked GovCloud account from the standard AWS partition.",
+    "type": "api-change"
+  },
+  {
+    "category": "``appsync``",
+    "description": "Update Event API to require EventConfig parameter in creation and update requests.",
+    "type": "api-change"
+  },
+  {
+    "category": "``route53``",
+    "description": "Amazon Route 53 now supports the EU (Germany) Region (eusc-de-east-1) for latency records, geoproximity records, and private DNS for Amazon VPCs in that region",
+    "type": "api-change"
+  },
+  {
+    "category": "``guardduty``",
+    "description": "Adding support for Ec2LaunchTemplate Version field",
+    "type": "api-change"
+  },
+  {
+    "category": "``ivs-realtime``",
+    "description": "Token Exchange introduces seamless token exchange capabilities for IVS RTX, enabling customers to upgrade or downgrade token capabilities and update token attributes within the IVS client SDK without forcing clients to disconnect and reconnect.",
+    "type": "api-change"
+  },
+  {
+    "category": "``mgn``",
+    "description": "Added parameters encryption, IPv4/IPv6 protocol configuration, and enhanced tagging support for replication operations.",
+    "type": "api-change"
+  }
+]

.changes/2.32.14.json

@@ -0,0 +1,42 @@
+[
+  {
+    "category": "Serializers",
+    "description": "Adds support for host prefix to BaseRpcV2Serializer class",
+    "type": "bugfix"
+  },
+  {
+    "category": "``billingconductor``",
+    "description": "Launch itemized custom line item and service line item filter",
+    "type": "api-change"
+  },
+  {
+    "category": "``bedrock``",
+    "description": "Automated Reasoning checks in Amazon Bedrock Guardrails is capable of generating policy scenarios to validate policies. The GetAutomatedReasoningPolicyBuildWorkflowResultAssets API now adds POLICY SCENARIO asset type, allowing customers to retrieve scenarios generated by the build workflow.",
+    "type": "api-change"
+  },
+  {
+    "category": "``signer``",
+    "description": "Adds support for Signer GetRevocationStatus with updated endpoints",
+    "type": "api-change"
+  },
+  {
+    "category": "``cloudwatch``",
+    "description": "This release introduces two additional protocols AWS JSON 1.1 and Smithy RPC v2 CBOR, replacing the currently utilized one, AWSQuery. AWS SDKs will prioritize the protocol that is the most performant for each language.",
+    "type": "api-change"
+  },
+  {
+    "category": "``partnercentral-selling``",
+    "description": "Adds support for the new Project.AwsPartition field on Opportunity and AWS Opportunity Summary. Use this field to specify the AWS partition where the opportunity will be deployed.",
+    "type": "api-change"
+  },
+  {
+    "category": "``opensearch``",
+    "description": "The CreateApplication API now supports an optional kms key arn parameter to allow customers to specify a CMK for application encryption.",
+    "type": "api-change"
+  },
+  {
+    "category": "``odb``",
+    "description": "The following APIs now return CloudExadataInfrastructureArn and OdbNetworkArn fields for improved resource identification and AWS service integration - GetCloudVmCluster, ListCloudVmClusters, GetCloudAutonomousVmCluster, and ListCloudAutonomousVmClusters.",
+    "type": "api-change"
+  }
+]

.changes/2.32.15.json

@@ -0,0 +1,32 @@
+[
+  {
+    "category": "``lambda``",
+    "description": "Add Dotnet 10 (dotnet10) support to AWS Lambda.",
+    "type": "api-change"
+  },
+  {
+    "category": "``secretsmanager``",
+    "description": "Add SortBy parameter to ListSecrets",
+    "type": "api-change"
+  },
+  {
+    "category": "``sesv2``",
+    "description": "Update GetEmailIdentity and CreateEmailIdentity response to include SigningHostedZone in DkimAttributes. Updated PutEmailIdentityDkimSigningAttributes Response to include SigningHostedZone.",
+    "type": "api-change"
+  },
+  {
+    "category": "``quicksight``",
+    "description": "This release adds new GetIdentityContext API, Dashboard customization options for tables and pivot tables, Visual styling options- borders and decals, map GeocodingPreferences, KeyPairCredentials for DataSourceCredentials. Snapshot APIs now support registered users. Parameters limit increased to 400",
+    "type": "api-change"
+  },
+  {
+    "category": "python",
+    "description": "Upgrade bundled Python interpreter to version 3.13.11.",
+    "type": "enhancement"
+  },
+  {
+    "category": "``organizations``",
+    "description": "Add support for policy operations on the NETWORK SECURITY DIRECTOR POLICY policy type.",
+    "type": "api-change"
+  }
+]

.changes/2.32.16.json

@@ -0,0 +1,22 @@
+[
+  {
+    "category": "``connect``",
+    "description": "Amazon Connect now offers automated post-chat surveys triggered when customers end conversations. This captures timely feedback while experience is fresh, using either a no-code form builder or Amazon Lex-powered interactive surveys.",
+    "type": "api-change"
+  },
+  {
+    "category": "``bcm-recommended-actions``",
+    "description": "Added new freetier action types to RecommendedAction.type.",
+    "type": "api-change"
+  },
+  {
+    "category": "``datasync``",
+    "description": "Adds Enhanced mode support for NFS and SMB locations. SMB credentials are now managed via Secrets Manager, and may be encrypted with service or customer managed keys. Increases AgentArns maximum count to 8 (max 4 per TaskMode). Adds folder counters to DescribeTaskExecution for Enhanced mode tasks.",
+    "type": "api-change"
+  },
+  {
+    "category": "``workspaces-web``",
+    "description": "Adds support for portal branding customization, enabling administrators to personalize end-user portals with custom assets.",
+    "type": "api-change"
+  }
+]

.changes/2.32.17.json

@@ -0,0 +1,57 @@
+[
+  {
+    "category": "``bedrock-agentcore-control``",
+    "description": "This release updates broken links for AgentCore Policy APIs in the AWS CLI and SDK resources.",
+    "type": "api-change"
+  },
+  {
+    "category": "``ec2``",
+    "description": "EC2 Capacity Manager now supports SpotTotalCount, SpotTotalInterruptions and SpotInterruptionRate metrics for both vCPU and instance units.",
+    "type": "api-change"
+  },
+  {
+    "category": "``logs``",
+    "description": "This release allows you to import your historical CloudTrail Lake data into CloudWatch with a few steps, enabling you to easily consolidate operational, security, and compliance data in one place.",
+    "type": "api-change"
+  },
+  {
+    "category": "``health``",
+    "description": "Updating Health API endpoint generation for dualstack only regions",
+    "type": "api-change"
+  },
+  {
+    "category": "``route53resolver``",
+    "description": "Adds support for enabling detailed metrics on Route 53 Resolver endpoints using RniEnhancedMetricsEnabled and TargetNameServerMetricsEnabled in the CreateResolverEndpoint and UpdateResolverEndpoint APIs, providing enhanced visibility into Resolver endpoint and target name server performance.",
+    "type": "api-change"
+  },
+  {
+    "category": "``connect``",
+    "description": "Amazon Connect now supports outbound WhatsApp contacts via the Send message block or StartOutboundChatContact API. Send proactive messages for surveys, reminders, and updates. Offer customers the option to switch to WhatsApp while in queue, eliminating hold time.",
+    "type": "api-change"
+  },
+  {
+    "category": "``service-quotas``",
+    "description": "Add support for SQ Dashboard Api",
+    "type": "api-change"
+  },
+  {
+    "category": "``mediatailor``",
+    "description": "Added support for Ad Decision Server Configuration enabling HTTP POST requests with custom bodies, headers, GZIP compression, and dynamic variables. No changes required for existing GET request configurations.",
+    "type": "api-change"
+  },
+  {
+    "category": "``glacier``",
+    "description": "Documentation updates for Amazon Glacier's maintenance mode",
+    "type": "api-change"
+  },
+  {
+    "category": "``entityresolution``",
+    "description": "Support Customer Profiles Integration for AWS Entity Resolution",
+    "type": "api-change"
+  },
+  {
+    "category": "``s3``",
+    "description": "This release adds support for the new optional field 'LifecycleExpirationDate' in S3 Inventory configurations.",
+    "type": "api-change"
+  }
+]

.changes/2.32.18.json

@@ -0,0 +1,12 @@
+[
+  {
+    "category": "``iot``",
+    "description": "Add support for dynamic payloads in IoT Device Management Commands",
+    "type": "api-change"
+  },
+  {
+    "category": "``timestream-influxdb``",
+    "description": "This release adds support for rebooting InfluxDB DbInstances and DbClusters",
+    "type": "api-change"
+  }
+]

.changes/2.32.19.json

@@ -0,0 +1,47 @@
+[
+  {
+    "category": "``payment-cryptography``",
+    "description": "Support for AS2805 standard.  Modifications to import-key and export-key to support AS2805 variants.",
+    "type": "api-change"
+  },
+  {
+    "category": "``kafkaconnect``",
+    "description": "Support dual-stack network connectivity for connectors via NetworkType field.",
+    "type": "api-change"
+  },
+  {
+    "category": "``inspector-scan``",
+    "description": "Adds an additional OutputFormat",
+    "type": "api-change"
+  },
+  {
+    "category": "``mediaconvert``",
+    "description": "Adds support for tile encoding in HEVC and audio for video overlays.",
+    "type": "api-change"
+  },
+  {
+    "category": "``sagemaker``",
+    "description": "Adding the newly launched p6-b300.48xlarge ec2  instance support in Sagemaker(Hyperpod,Training and Sceptor)",
+    "type": "api-change"
+  },
+  {
+    "category": "``payment-cryptography-data``",
+    "description": "Support for AS2805 standard.  New API GenerateAs2805KekValidation and changes to translate pin, GenerateMac and VerifyMac to support AS2805 key variants.",
+    "type": "api-change"
+  },
+  {
+    "category": "``mediapackagev2``",
+    "description": "This release adds support for SPEKE V2 content key encryption in MediaPackage v2 Origin Endpoints.",
+    "type": "api-change"
+  },
+  {
+    "category": "``gameliftstreams``",
+    "description": "Added new stream group operation parameters for scale-on-demand capacity with automatic prewarming. Added new Gen6 stream classes based on the EC2 G6 instance family. Added new StartStreamSession parameter for exposure of real-time performance stats to clients.",
+    "type": "api-change"
+  },
+  {
+    "category": "``guardduty``",
+    "description": "Add support for dbiResourceId in finding.",
+    "type": "api-change"
+  }
+]