Merge master into feature/master/checksum-reuse (#6451)

* Amazon DataZone Update: adding IAM principal id to IAM user profile details

* Amazon Elastic VMware Service Update: CreateEnvironment API now supports parameters (isHcxPublic & hcxNetworkAclId) for HCX migration via public internet, adding flexibility for migration scenarios. New APIs have been added for associating (AssociateEipToVlan) & disassociating (DisassociateEipFromVlan) Elastic IP (EIP) addresses.

* Amazon EC2 Container Service Update: This release supports hook details for Amazon ECS lifecycle hooks.

* Amazon EMR Containers Update: Added nodeLabel support in container provider to aid hardware isolation support for virtual cluster and security configuration.

* Amazon Relational Database Service Update: Adds support for end-to-end IAM authentication in RDS Proxy for MySQL, MariaDB, and PostgreSQL engines.

* Amazon QuickSight Update: This release adds support for Account level custom permissions, additional Dashboard Options, and Null support for Q&A.

* Amazon Prometheus Service Update: Add Vended Logs APIs for Amazon Prometheus Managed Collector

* AWS Elemental MediaLive Update: AWS Elemental MediaLive adds a new feature in MediaPackage output group that enables MediaPackage V2 users to control HLS-related parameters directly in MediaLive. These parameter settings are then reflected in MediaPackage outputs, providing more streamlined control over HLS configurations.

* Amazon GuardDuty Update: Updated Java SDK implementation of entity set status in GuardDuty API.

* Updated endpoints.json and partitions.json.

* Release 2.33.8. Updated CHANGELOG.md, README.md and all pom.xml.

* fix multi line xml tag, and add maven central validation (#6400)

* bump jackson to 2.19.0 (#6358)

* Update version

* Add include source in location flag

* Add changelog

* Update to next snapshot version: 2.33.9-SNAPSHOT

* Payment Cryptography Control Plane Update: Add support for certificates to be signed by 3rd party certificate authorities. New API GetCertificateSigningRequest API and support for providing certificates at run-time for tr-34 import/export

* Release 2.33.9. Updated CHANGELOG.md, README.md and all pom.xml.

* added part count validation for download request (#6353)

* added part count and content range validation for download

* changelog added

* remove contentRange validation since part size could different

* feedback addressed

* delete unused utils

* change validation in futurn complete

* added unit test

* change test name

* minor change

* minor change

* Integration test added

* Unit test fixed

* swap method body of onError and handleError

* minor change

* Update to next snapshot version: 2.33.10-SNAPSHOT

* Remove flaky integ test that has been covered in set up (#6417)

* Exclude release-scripts and scripts folder (#6266)

* AWS Health Imaging Update: Added support for OpenID Connect (OIDC) custom authorizer

* CloudWatch Observability Admin Service Update: CloudWatch Observability Admin adds the ability to enable telemetry centralization in customers' Organizations. The release introduces new APIs to manage centralization rules, which define settings to replicate telemetry data to a central destination in the customers' Organization.

* AWS Cost Explorer Service Update: Added endpoint support for eusc-de-east-1 region.

* AWS S3 Control Update: Introduce three new encryption filters: EncryptionType (SSE-S3, SSE-KMS, DSSE-KMS, SSE-C, NOT-SSE), KmsKeyArn (for SSE-KMS and DSSE-KMS), and BucketKeyEnabled (for SSE-KMS).

* Updated endpoints.json and partitions.json.

* Release 2.33.10. Updated CHANGELOG.md, README.md and all pom.xml.

* Removing SMS service

* remove from aws-sdk-java/pom.xml

* Remove changelog

* Preserve content-length when calling mark in SdkLengthAwareInputStream (#6408)

* Preserve content-length when calling mark in SdkLengthAwareInputStream

* Add test case

* Ensure that markedRemaining is initialized

* Flaky test fix for StoringSubscriberTest (#6420)

* flaky test fix

* changelog removed

* Update to next snapshot version: 2.33.11-SNAPSHOT

* Amazon OpenSearch Ingestion Update: Adds support for cross-account ingestion for push-based sources. This includes resource policies for sharing pipelines across accounts and features for managing pipeline endpoints which enable accessing pipelines across different VPCs, including VPCs in other accounts.

* Amazon Interactive Video Service RealTime Update: IVS now offers customers the ability to control the positioning of participants in both grid and PiP layouts based on custom attribute values in participant tokens.

* AWS Budgets Update: Add support for custom time periods in budget configuration

* Amazon CloudWatch Logs Update: Cloudwatch Logs added support for 2 new API parameters in metric and subscription filter APIs to filter log events based on system field values and emit system field values as dimensions and send them to customer destination as additional metadata.

* Updated endpoints.json and partitions.json.

* Release 2.33.11. Updated CHANGELOG.md, README.md and all pom.xml.

* Update to next snapshot version: 2.33.12-SNAPSHOT

* Remove unused s3 classes (#6428)

* AWS Parallel Computing Service Update: Add support for Amazon EC2 Capacity Blocks for ML

* Amazon Elastic Compute Cloud Update: Add mac-m4.metal and mac-m4pro.metal instance types.

* AWS Network Firewall Update: Network Firewall now prevents TLS handshakes with the target server until after the Server Name Indication (SNI) has been seen and verified. The monitoring dashboard now provides deeper insights into PrivateLink endpoint candidates and offers filters based on IP addresses and protocol.

* Release 2.33.12. Updated CHANGELOG.md, README.md and all pom.xml.

* Update to next snapshot version: 2.33.13-SNAPSHOT

* Feature/master/utils lite lambda trace (#6404)

* Add utils-lite package (#6395)

Add utils-lite package

* Add support for concurrent trace id propagation (#6403)

Add support for concurrent trace id propagation

* Add changelog

* update utils-lite version to match parent

* Fix again version

* Bump version

* Fix braziljson name

* Add thread safe annotation

* Adding a lazy loading of the hashmap

* Refactored code according to comments

* Modify threadLocal to InheritableThreadLocal

* Add javadoc clarification

* Add lambda check to prevent extra checks on non-lambda environments

* Update beforeExecution logic

* Fix checkstyle

* Add test coverage

* update version

* Removing non-determinstic test

* Removing unused dependencies

* update version

* Amazon Chime SDK Messaging Update: Amazon Chime SDK Messaging GetMessagingSessionEndpoint API now returns dual-stack WebSocket endpoints supporting IPv4/IPv6.

* AWS Budgets Update: Added BillingViewHealthStatus Exception which is thrown when a Budget is created or updated with a Billing View that is not in the HEALTHY status

* Amazon Bedrock Update: Release includes an increase to the maximum policy build document size, an update to DeleteAutomatedReasoningPolicyBuildWorkflow to add ResourceInUseException, and corrections to UpdateAutomatedReasoningPolicyTestCaseRequest.

* Amazon Elastic Compute Cloud Update: Allowed AMIs adds support for four new parameters - marketplaceProductCodes, deprecationTimeCondition, creationDateCondition and imageNames

* Release 2.33.13. Updated CHANGELOG.md, README.md and all pom.xml.

* Revert "Feature/master/utils lite lambda trace (#6404)" (#6431)

This reverts commit 65a5654.

* Update to next snapshot version: 2.33.14-SNAPSHOT

* Migration Tool GA Release (#6430)

* Merge TransferManager recipes to main recipe (#6392)

* Bump OpenRewrite to 3.14.0 (#6394)

* Bump OpenRewrite to 3.6.1

* Bump OpenRewrite to 3.14.0

* Remove redundant import add/remove

* Add v2 import in S3PojoToV2

* Update unit test for exceptions

* Update README and remove "-PREVIEW" from version (#6416)

* Update README

* Remove -PREVIEW from pom

* Add changelog

* Bump minor version to 2.34.0 (#6432)

* Feature/master/utils lite lambda trace again (#6433)

* Add utils-lite package (#6395)

Add utils-lite package

* Add support for concurrent trace id propagation (#6403)

Add support for concurrent trace id propagation

* Add changelog

* update utils-lite version to match parent

* Fix again version

* Bump version

* Fix braziljson name

* Add thread safe annotation

* Adding a lazy loading of the hashmap

* Refactored code according to comments

* Modify threadLocal to InheritableThreadLocal

* Add javadoc clarification

* Add lambda check to prevent extra checks on non-lambda environments

* Update beforeExecution logic

* Fix checkstyle

* Add test coverage

* update version

* Removing non-determinstic test

* Removing unused dependencies

* update version

* Add support for lambda traces via SdkInternalThreadLocal

* Bump version

* Maven Central Migration (#6375)

* adding maven central migration plugin, config and new buildspec

* Update profile config

* fix gpg plugin

* Remove redundant plugin config

* force java 8 on the codebuild

* Fix staging dir path

* Fix cloudwatch reporting

* Fix cloudwatch reporting

* Fix buildspec, add comment

---------

Co-authored-by: Ran Vaknin <[email protected]>
Co-authored-by: RanVaknin <>

* AWS Elemental MediaLive Update: Add MinBitrate for QVBR mode under H264/H265/AV1 output codec. Add GopBReference, GopNumBFrames, SubGopLength fields under H265 output codec.

* Amazon Kendra Intelligent Ranking Update: Model whitespace change - no client difference

* Amazon Bedrock Agent Core Control Plane Fronting Layer Update: Add tagging and VPC support to AgentCore Runtime, Code Interpreter, and Browser resources. Add support for configuring request headers in Runtime. Fix AgentCore Runtime shape names.

* AWS Config Update: Add UNKNOWN state to RemediationExecutionState and add IN_PROGRESS/EXITED/UNKNOWN states to RemediationExecutionStepState.

* Amazon Connect Service Update: This release adds a persistent connection field to UserPhoneConfig that maintains agent's softphone media connection for faster call connections.

* AWS License Manager User Subscriptions Update: Added support for cross-account Active Directories.

* Amazon Simple Queue Service Update: Update invalid character handling documentation for SQS SendMessage API

* Updated endpoints.json and partitions.json.

* Release 2.34.0. Updated CHANGELOG.md, README.md and all pom.xml.

* Update to next snapshot version: 2.34.1-SNAPSHOT

* Amazon Elastic Kubernetes Service Update: Adds support for RepairConfig overrides and configurations in EKS Managed Node Groups.

* EC2 Image Builder Update: Version ARNs are no longer required for the EC2 Image Builder list-image-build-version, list-component-build-version, and list-workflow-build-version APIs. Calling these APIs without the ARN returns all build versions for the given resource type in the requesting account.

* AWS Batch Update: Starting in JAN 2026, AWS Batch will change the default AMI for new Amazon ECS compute environments from Amazon Linux 2 to Amazon Linux 2023. We recommend migrating AWS Batch Amazon ECS compute environments to Amazon Linux 2023 to maintain optimal performance and security.

* Updated endpoints.json and partitions.json.

* Release 2.34.1. Updated CHANGELOG.md, README.md and all pom.xml.

* Update to next snapshot version: 2.34.2-SNAPSHOT

* AWS EntityResolution Update: Support incremental id mapping workflow for AWS Entity Resolution

* AWS Single Sign-On Admin Update: Add support for encryption at rest with Customer Managed KMS Key in AWS IAM Identity Center

* AWS Clean Rooms Service Update: Added support for running incremental ID mapping for rule-based workflows.

* Amazon Simple Systems Manager (SSM) Update: Added Dualstack support to GetDeployablePatchSnapshotForInstance

* Amazon Elastic Compute Cloud Update: Add Amazon EC2 R8gn instance types

* AWS SSO OIDC Update: This release includes exception definition and documentation updates.

* Updated endpoints.json and partitions.json.

* Release 2.34.2. Updated CHANGELOG.md, README.md and all pom.xml.

* Update to next snapshot version: 2.34.3-SNAPSHOT

* Fix OpenRewrite Method Matcher Syntax (#6438)

* add missing ')' to OpenRewrite Mathod Matcher

* add missing ')' to OpenRewrite Method Matcher

---------

Co-authored-by: hdavidh <[email protected]>

* docs: add MBoegers as a contributor for code (#6442)

* docs: update README.md [skip ci]

* docs: update .all-contributorsrc [skip ci]

---------

Co-authored-by: allcontributors[bot] <46447321+allcontributors[bot]@users.noreply.github.com>
Co-authored-by: David Ho <[email protected]>

* Amazon AppStream Update: G6f instance support for AppStream 2.0

* Amazon DynamoDB Accelerator (DAX) Update: This release adds support for IPv6-only, DUAL_STACK DAX instances

* AWS Key Management Service Update: Documentation only updates for KMS.

* Amazon CloudWatch Update: Fix default dualstack FIPS endpoints in AWS GovCloud(US) regions

* Amazon Neptune Update: Doc-only update to address customer use.

* Release 2.34.3. Updated CHANGELOG.md, README.md and all pom.xml.

* Update to next snapshot version: 2.34.4-SNAPSHOT

* Amazon Lightsail Update: Attribute HTTP binding update for Get/Delete operations

* AWS Glue Update: Update GetConnection(s) API to return KmsKeyArn & Add 63 missing connection types

* AWS Network Firewall Update: Network Firewall now introduces Reject and Alert action support for stateful domain list rule groups, providing customers with more granular control over their network traffic.

* Updated endpoints.json and partitions.json.

* Release 2.34.4. Updated CHANGELOG.md, README.md and all pom.xml.

* Update to next snapshot version: 2.34.5-SNAPSHOT

* Optimizations for EnhancedDocument.toJson() (#6446)

* Fix SqsAsyncBatchManager excessive batch flushing under heavy load (#6374) (#6378)

* Synchronize replacement of scheduled flush

Co-authored-by: Cody Thornhill <[email protected]>
Co-authored-by: John Viegas <[email protected]>

* Revert "bump jackson to 2.19.0 (#6358)"

This reverts commit 5449862.

* Amazon Connect Service Update: Adds supports for manual contact picking (WorkList) operations on Routing Profiles, Agent Management and SearchContacts APIs.

* AWS Cost Explorer Service Update: Support for payer account dimension and billing view health status.

* Data Automation for Amazon Bedrock Update: Added support for configurable Speaker Labeling and Channel Labeling features for Audio modality.

* Agents for Amazon Bedrock Runtime Update: This release enhances the information provided through Flow Traces. New information includes source/next node tracking, execution chains for complex nodes, dependency action (operation) details, and dependency traces.

* Amazon DynamoDB Streams Update: Added support for IPv6 compatible endpoints for DynamoDB Streams.

* AWS Billing Update: Add ability to combine custom billing views to create new consolidated views.

* Amazon Redshift Update: Support tagging and tag propagation to IAM Identity Center for Redshift Idc Applications

* Amazon Elastic Compute Cloud Update: This release includes documentation updates for Amazon EBS General Purpose SSD (gp3) volumes with larger size and higher IOPS and throughput.

* Updated endpoints.json and partitions.json.

* Release 2.34.5. Updated CHANGELOG.md, README.md and all pom.xml.

* AWS Cost Explorer Service Update: Support for payer account dimension and billing view health status.

* Amazon DynamoDB Streams Update: Added support for IPv6 compatible endpoints for DynamoDB Streams.

* Agents for Amazon Bedrock Runtime Update: This release enhances the information provided through Flow Traces. New information includes source/next node tracking, execution chains for complex nodes, dependency action (operation) details, and dependency traces.

* Data Automation for Amazon Bedrock Update: Added support for configurable Speaker Labeling and Channel Labeling features for Audio modality.

* Amazon Connect Service Update: Adds supports for manual contact picking (WorkList) operations on Routing Profiles, Agent Management and SearchContacts APIs.

* AWS Billing Update: Add ability to combine custom billing views to create new consolidated views.

* Amazon Redshift Update: Support tagging and tag propagation to IAM Identity Center for Redshift Idc Applications

* Amazon Elastic Compute Cloud Update: This release includes documentation updates for Amazon EBS General Purpose SSD (gp3) volumes with larger size and higher IOPS and throughput.

* Updated endpoints.json and partitions.json.

* Release 2.34.5. Updated CHANGELOG.md, README.md and all pom.xml.

* Update to next snapshot version: 2.34.6-SNAPSHOT

---------

Co-authored-by: AWS <>
Co-authored-by: aws-sdk-java-automation <[email protected]>
Co-authored-by: Ran Vaknin <[email protected]>
Co-authored-by: Bole1155 <[email protected]>
Co-authored-by: Zoe Wang <[email protected]>
Co-authored-by: John Viegas <[email protected]>
Co-authored-by: Alex Woods <[email protected]>
Co-authored-by: David Ho <[email protected]>
Co-authored-by: Ran Vaknin <[email protected]>
Co-authored-by: Merlin Bögershausen <[email protected]>
Co-authored-by: hdavidh <[email protected]>
Co-authored-by: allcontributors[bot] <46447321+allcontributors[bot]@users.noreply.github.com>
Co-authored-by: thornhillcody <[email protected]>
Co-authored-by: Cody Thornhill <[email protected]>

Author: 13 people

.all-contributorsrc

@@ -1075,6 +1075,15 @@
       "contributions": [
         "code"
       ]
+    },
+    {
+      "login": "MBoegers",
+      "name": "Merlin Bögershausen",
+      "avatar_url": "https://avatars.githubusercontent.com/u/7557397?v=4",
+      "profile": "https://mboegie.dev",
+      "contributions": [
+        "code"
+      ]
     }
   ],
   "contributorsPerLine": 7,

.brazil.json

@@ -34,6 +34,7 @@
         "sdk-core": { "packageName": "AwsJavaSdk-Core" },
         "url-connection-client": { "packageName": "AwsJavaSdk-HttpClient-UrlConnectionClient" },
         "utils": { "packageName": "AwsJavaSdk-Core-Utils" },
+        "utils-lite": { "packageName": "AwsJavaSdk-Core-UtilsLite" },
         "imds": { "packageName": "AwsJavaSdk-Imds" },
         "crt-core": { "packageName": "AwsJavaSdk-Core-CrtCore" },
         "checksums-spi": { "packageName": "AwsJavaSdk-Core-ChecksumsSpi" },

.changes/2.33.0.json renamed to .changes/2.33.x/2.33.0.json

@@ -0,0 +1,42 @@
+{
+    "version": "2.33.10",
+    "date": "2025-09-15",
+    "entries": [
+        {
+            "type": "bugfix",
+            "category": "Amazon S3",
+            "contributor": "",
+            "description": "Added additional validations for multipart download operations in the Java multipart S3 client"
+        },
+        {
+            "type": "feature",
+            "category": "AWS Cost Explorer Service",
+            "contributor": "",
+            "description": "Added endpoint support for eusc-de-east-1 region."
+        },
+        {
+            "type": "feature",
+            "category": "AWS Health Imaging",
+            "contributor": "",
+            "description": "Added support for OpenID Connect (OIDC) custom authorizer"
+        },
+        {
+            "type": "feature",
+            "category": "AWS S3 Control",
+            "contributor": "",
+            "description": "Introduce three new encryption filters: EncryptionType (SSE-S3, SSE-KMS, DSSE-KMS, SSE-C, NOT-SSE), KmsKeyArn (for SSE-KMS and DSSE-KMS), and BucketKeyEnabled (for SSE-KMS)."
+        },
+        {
+            "type": "feature",
+            "category": "CloudWatch Observability Admin Service",
+            "contributor": "",
+            "description": "CloudWatch Observability Admin adds the ability to enable telemetry centralization in customers' Organizations. The release introduces new APIs to manage centralization rules, which define settings to replicate telemetry data to a central destination in the customers' Organization."
+        },
+        {
+            "type": "feature",
+            "category": "AWS SDK for Java v2",
+            "contributor": "",
+            "description": "Updated endpoint and partition metadata."
+        }
+    ]
+}

.changes/2.33.1.json renamed to .changes/2.33.x/2.33.1.json

@@ -0,0 +1,42 @@
+{
+    "version": "2.33.11",
+    "date": "2025-09-16",
+    "entries": [
+        {
+            "type": "bugfix",
+            "category": "AWS SDK for Java v2",
+            "contributor": "",
+            "description": "Preserve the initial content-length when calling mark in SdkLengthAwareInputStream."
+        },
+        {
+            "type": "feature",
+            "category": "AWS Budgets",
+            "contributor": "",
+            "description": "Add support for custom time periods in budget configuration"
+        },
+        {
+            "type": "feature",
+            "category": "Amazon CloudWatch Logs",
+            "contributor": "",
+            "description": "Cloudwatch Logs added support for 2 new API parameters in metric and subscription filter APIs to filter log events based on system field values and emit system field values as dimensions and send them to customer destination as additional metadata."
+        },
+        {
+            "type": "feature",
+            "category": "Amazon Interactive Video Service RealTime",
+            "contributor": "",
+            "description": "IVS now offers customers the ability to control the positioning of participants in both grid and PiP layouts based on custom attribute values in participant tokens."
+        },
+        {
+            "type": "feature",
+            "category": "Amazon OpenSearch Ingestion",
+            "contributor": "",
+            "description": "Adds support for cross-account ingestion for push-based sources. This includes resource policies for sharing pipelines across accounts and features for managing pipeline endpoints which enable accessing pipelines across different VPCs, including VPCs in other accounts."
+        },
+        {
+            "type": "feature",
+            "category": "AWS SDK for Java v2",
+            "contributor": "",
+            "description": "Updated endpoint and partition metadata."
+        }
+    ]
+}

.changes/2.33.x/2.33.10.json

@@ -0,0 +1,24 @@
+{
+    "version": "2.33.12",
+    "date": "2025-09-17",
+    "entries": [
+        {
+            "type": "feature",
+            "category": "AWS Network Firewall",
+            "contributor": "",
+            "description": "Network Firewall now prevents TLS handshakes with the target server until after the Server Name Indication (SNI) has been seen and verified. The monitoring dashboard now provides deeper insights into PrivateLink endpoint candidates and offers filters based on IP addresses and protocol."
+        },
+        {
+            "type": "feature",
+            "category": "AWS Parallel Computing Service",
+            "contributor": "",
+            "description": "Add support for Amazon EC2 Capacity Blocks for ML"
+        },
+        {
+            "type": "feature",
+            "category": "Amazon Elastic Compute Cloud",
+            "contributor": "",
+            "description": "Add mac-m4.metal and mac-m4pro.metal instance types."
+        }
+    ]
+}

.changes/2.33.x/2.33.11.json

@@ -0,0 +1,30 @@
+{
+    "version": "2.33.13",
+    "date": "2025-09-18",
+    "entries": [
+        {
+            "type": "feature",
+            "category": "AWS Budgets",
+            "contributor": "",
+            "description": "Added BillingViewHealthStatus Exception which is thrown when a Budget is created or updated with a Billing View that is not in the HEALTHY status"
+        },
+        {
+            "type": "feature",
+            "category": "Amazon Bedrock",
+            "contributor": "",
+            "description": "Release includes an increase to the maximum policy build document size, an update to DeleteAutomatedReasoningPolicyBuildWorkflow to add ResourceInUseException, and corrections to UpdateAutomatedReasoningPolicyTestCaseRequest."
+        },
+        {
+            "type": "feature",
+            "category": "Amazon Chime SDK Messaging",
+            "contributor": "",
+            "description": "Amazon Chime SDK Messaging GetMessagingSessionEndpoint API now returns dual-stack WebSocket endpoints supporting IPv4/IPv6."
+        },
+        {
+            "type": "feature",
+            "category": "Amazon Elastic Compute Cloud",
+            "contributor": "",
+            "description": "Allowed AMIs adds support for four new parameters - marketplaceProductCodes, deprecationTimeCondition, creationDateCondition and imageNames"
+        }
+    ]
+}