@aws-sdk/client-sts

clients: update client endpoints as of 2026-11-04

client-lookoutequipment: Amazon Lookout for Equipment reached end of support on October 7, 2026. All Lookout for Equipment APIs are now marked as deprecated.

clients: update client endpoints as of 2026-10-30

checksums: add xxHash and SHA-512 checksum algorithms

codegen: add Smithy RPCv2 JSON protocol

lib-sqs: add SQSPoller for auto queue polling

lib-sqs: sync version with current monorepo release

clients: update client endpoints as of 2026-10-26

clients: update client endpoints as of 2026-10-22

client-connect: Added support for AWS-managed security profiles.

client-opensearch: Amazon OpenSearch Service adds a new TLS security policy to support FIPS policy and post-quantum cryptography

clients: update client endpoints as of 2026-10-14

clients: update client endpoints as of 2026-10-13

client-lakeformation: Added new LakeFormation APIs and documentation updates for Simple Row-level Security (RLS).

client-route-53-domains: Route 53 Domains now supports premium domains. This release adds consent objects to operations on premium domains and a new GetDomainPrices API. Also, the Flags and PublicKey fields were deprecated from the DnssecKey response.

clients: update client endpoints as of 2026-10-12

client-omics: AWS HealthOmics now supports private workflow runs using VPC resources shared across accounts via AWS RAM. A new optional vpcOwnerAccountId field in CreateConfiguration's VpcConfig allows customers to specify the account that owns the shared subnets and security groups.

client-securityagent: Adds support for Jira integration provider in AWS Security Agent.

lib-transfer-manager: retry UploadPart on worker-thread upload path

lib-transfer-manager: avoid full-body copy for SharedArrayBuffer uploads

client-security-ir: Adds support for retrieving finding-lifecycle metrics for an AWS Security Incident Response membership.

client-securityhub: Release findings export APIs - StartExportJobV2, GetExportJobV2, ListExportJobsV2, and CancelExportJobV2. This supports exporting findings from AWS Security Hub to Amazon S3 bucket.

clients: update client endpoints as of 2026-10-06

client-lambda-web: Removes operations that are not yet generally available from the Lambda Web.

lib-transfer-manager: add opt-in O_DIRECT path for file downloads

clients: update client endpoints as of 2026-10-01

clients: update client endpoints as of 2026-09-30

lib-transfer-manager: retry worker path download part failures

client-wellarchitected: This change releases the Well-Architected Agent, a generative AI service that analyzes a customer's AWS environment and delivers personalized, prioritized recommendations across cost, security, performance, and resilience.

clients: update client endpoints as of 2026-09-24

client-marketplace-discovery: AWS Marketplace Discovery API now supports localized responses and SigV4a request signing. It returns new fulfillment details, including AMI architecture, EBS volume and security group information, SaaS quick-launch status, and SageMaker input and output MIME types.

client-securityagent: Added support for Confluence export, enabling customers to publish security findings to Confluence pages.

clients: update client endpoints as of 2026-09-23

client-network-security-manager: AWS Network Security Manager is a new service that helps you centrally configure, deploy, and continuously enforce security policies on network security services across the accounts and resources in your AWS Organization.

clients: update client endpoints as of 2026-09-22

client-api-gateway: API Gateway now supports two new security policies for REST APIs and custom domain names, SecurityPolicy-TLS13-1-2-Ext2-PQ-2025-09 (TLS 1.3 1.2 with post-quantum cryptography) and SecurityPolicy-TLS13-1-2-Ext2-FIPS-PQ-2025-09 (adds FIPS). Both retain legacy algorithms for backward compatibility.

client-connect: This release adds the ListSecurityProfileAIAgents API and updates the CreateSecurityProfile and UpdateSecurityProfile APIs to support the AllowedAIAgents field on security profiles, allowing customers to manage the 3P AI agents associated with a security profile for Agent-to-Agent interactions.

lib-transfer-manager: update transfer progress events

client-sts: Increases the maximum session token size to 4,096 bytes and removes the packed policy size limit. Adds SessionTokenSize and SessionTokenUtilization fields and a new MinimumSessionTokenSize parameter. PackedPolicySize is deprecated.

clients: update client endpoints as of 2026-09-14

clients: update client endpoints as of 2026-09-11

clients: update client endpoints as of 2026-09-10

dynamic-client: create untyped clients from Smithy JSON AST

clients: update client endpoints as of 2026-09-08

client-appflow: Amazon AppFlow now supports key pair (RSA private key) authentication for the Snowflake connector. You can provide a privateKey in SnowflakeConnectorProfileCredentials, and password is no longer required. This is a non-breaking, additive change available via the AWS SDK and CLI.

client-ec2: Adds support for ValidateSecurityGroupQuotasForInterface, an API that specifically authorized AWS services use to validate security group rule quotas before creating an elastic network interface.

client-eks: Deprecate EncryptionConfig resources field. Amazon EKS encrypts all Kubernetes API data with envelope encryption by default for clusters running Kubernetes version 1.28 or higher, so this field no longer affects which resources are encrypted.

client-mgn: AWS Transform for migrations adds a second network migration option - apply your source security posture to existing VPCs. Upload a source network file with firewall rules, tag the in-scope VPCs, and AWS Transform matches source subnets to them by CIDR and generates the security groups.

clients: update client endpoints as of 2026-09-01

client-sesv2: Added support for managing SMIME signing certificates for email identities, including associating, listing, and disassociating certificates. Added the UpdateConfigurationSet operation to configure message security options such as signing scheme.

client-agent-registry: Release HTTP and AGUI descriptors to the dataplane model

credential-provider-node: handle passive credential refresh rejection

client-lambda-microvms: Added InsufficientCapacityException to RunMicrovm for capacity-related failures. Added lifecycle status field (AVAILABLE, DEPRECATED) to ListManagedMicrovmImageVersions. Added ConflictException to CreateMicrovmAuthToken and CreateMicrovmShellAuthToken for unregistered MicroVMs.

client-cognito-identity-provider: Adds the AdminDeleteSoftwareToken API operation, enabling administrators to remove a user's registered TOTP (software token) MFA configuration from a user pool.

clients: update client endpoints as of 2026-08-25

lib-transfer-manager: add file based download api and worker thread based download.

token-providers: update SSO refresh throttle per session