Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Update dependency aws-sdk to v2.1354.0 - autoclosed #79

Closed

Conversation

mend-for-github-com[bot]
Copy link

@mend-for-github-com mend-for-github-com bot commented Nov 20, 2023

This PR contains the following updates:

Package Change Age Adoption Passing Confidence
aws-sdk 2.1331.0 -> 2.1354.0 age adoption passing confidence

By merging this PR, the issue #78 will be automatically resolved and closed:

Severity CVSS Score CVE Reachability
Medium Medium 5.3 CVE-2023-0842

Release Notes

aws/aws-sdk-js (aws-sdk)

v2.1354.0

Compare Source

  • feature: Connect: This release adds the ability to configure an agent's routing profile to receive contacts from multiple channels at the same time via extending the UpdateRoutingProfileConcurrency, CreateRoutingProfile and DescribeRoutingProfile APIs.
  • feature: ECS: This release adds support for enabling FIPS compliance on Amazon ECS Fargate tasks
  • feature: MarketplaceCatalog: Added three new APIs to support resource sharing: GetResourcePolicy, PutResourcePolicy, and DeleteResourcePolicy. Added new OwnershipType field to ListEntities request to let users filter on entities that are shared with them. Increased max page size of ListEntities response from 20 to 50 results.
  • feature: MediaConvert: AWS Elemental MediaConvert SDK now supports conversion of 608 paint-on captions to pop-on captions for SCC sources.
  • feature: Omics: Remove unexpected API changes.
  • feature: Rekognition: This release adds support for Face Liveness APIs in Amazon Rekognition. Updates UpdateStreamProcessor to return ResourceInUseException Exception. Minor updates to API documentation.

v2.1353.0

Compare Source

  • feature: DLM: Updated timestamp format for GetLifecyclePolicy API
  • feature: DocDB: This release adds a new parameter 'DBClusterParameterGroupName' to 'RestoreDBClusterFromSnapshot' API to associate the name of the DB cluster parameter group while performing restore.
  • feature: Lambda: This release adds a new Lambda InvokeWithResponseStream API to support streaming Lambda function responses. The release also adds a new InvokeMode parameter to Function Url APIs to control whether the response will be streamed or buffered.
  • feature: QuickSight: This release has two changes: adding the OR condition to tag-based RLS rules in CreateDataSet and UpdateDataSet; adding RefreshSchedule and Incremental RefreshProperties operations for users to programmatically configure SPICE dataset ingestions.

v2.1352.0

Compare Source

  • feature: CloudFormation: Including UPDATE_COMPLETE as a failed status for DeleteStack waiter.
  • feature: GreengrassV2: Add support for SUCCEEDED value in coreDeviceExecutionStatus field. Documentation updates for Greengrass V2.
  • feature: Proton: This release adds support for the AWS Proton service sync feature. Service sync enables managing an AWS Proton service (creating and updating instances) and all of it's corresponding service instances from a Git repository.

v2.1351.0

Compare Source

  • feature: AppRunner: App Runner adds support for seven new vCPU and memory configurations.
  • feature: ConfigService: This release adds resourceType enums for types released in March 2023.
  • feature: IVSRealTime: Fix ParticipantToken ExpirationTime format
  • feature: NetworkFirewall: AWS Network Firewall now supports IPv6-only subnets.
  • feature: ServiceCatalog: removed incorrect product type value

v2.1350.0

Compare Source

  • feature: AmplifyUIBuilder: Support StorageField and custom displays for data-bound options in form builder. Support non-string operands for predicates in collections. Support choosing client to get token from.
  • feature: DataExchange: This release updates the value of MaxResults.
  • feature: EC2: C6in, M6in, M6idn, R6in and R6idn bare metal instances are powered by 3rd Generation Intel Xeon Scalable processors and offer up to 200 Gbps of network bandwidth.
  • feature: ElasticInference: Updated public documentation for the Describe and Tagging APIs.
  • feature: SageMaker: Amazon SageMaker Asynchronous Inference now allows customer's to receive failure model responses in S3 and receive success/failure model responses in SNS notifications.
  • feature: SageMakerRuntime: Amazon SageMaker Asynchronous Inference now provides customers a FailureLocation as a response parameter in InvokeEndpointAsync API to capture the model failure responses.
  • feature: WAFV2: This release rolls back association config feature for webACLs that protect CloudFront protections.

v2.1349.0

Compare Source

  • feature: Glue: Add support for database-level federation
  • feature: LakeFormation: Add support for database-level federation
  • feature: LicenseManager: This release adds grant override options to the CreateGrantVersion API. These options can be used to specify grant replacement behavior during grant activation.
  • feature: MWAA: This Amazon MWAA release adds the ability to customize the Apache Airflow environment by launching a shell script at startup. This shell script is hosted in your environment's Amazon S3 bucket. Amazon MWAA runs the script before installing requirements and initializing the Apache Airflow process.
  • feature: ServiceCatalog: This release introduces Service Catalog support for Terraform open source. It enables 1. The notify* APIs to Service Catalog. These APIs are used by the terraform engine to notify the result of the provisioning engine execution. 2. Adds a new TERRAFORM_OPEN_SOURCE product type in CreateProduct API.
  • feature: WAFV2: For web ACLs that protect CloudFront protections, the default request body inspection size is now 16 KB, and you can use the new association configuration to increase the inspection size further, up to 64 KB. Sizes over 16 KB can incur additional costs.

v2.1348.0

Compare Source

  • feature: InternetMonitor: This release adds a new feature for Amazon CloudWatch Internet Monitor that enables customers to deliver internet measurements to Amazon S3 buckets as well as CloudWatch Logs.
  • feature: SMS: Deprecating AWS Server Migration Service.
  • feature: SageMakerFeatureStoreRuntime: In this release, you can now chose between soft delete and hard delete when calling the DeleteRecord API, so you have more flexibility when it comes to managing online store data.

v2.1347.0

Compare Source

  • feature: Athena: Make DefaultExecutorDpuSize and CoordinatorDpuSize fields optional in StartSession
  • feature: AutoScaling: Amazon EC2 Auto Scaling now supports Elastic Load Balancing traffic sources with the AttachTrafficSources, DetachTrafficSources, and DescribeTrafficSources APIs. This release also introduces a new activity status, "WaitingForConnectionDraining", for VPC Lattice to the DescribeScalingActivities API.
  • feature: Batch: This feature allows Batch on EKS to support configuration of Pod Labels through Metadata for Batch on EKS Jobs.
  • feature: ComputeOptimizer: This release adds support for HDD EBS volume types and io2 Block Express. We are also adding support for 61 new instance types and instances that have non consecutive runtime.
  • feature: Drs: Adding a field to the replication configuration APIs to support the auto replicate new disks feature. We also deprecated RetryDataReplication.
  • feature: EC2: This release adds support for Tunnel Endpoint Lifecycle control, a new feature that provides Site-to-Site VPN customers with better visibility and control of their VPN tunnel maintenance updates.
  • feature: EMR: Updated DescribeCluster and ListClusters API responses to include ErrorDetail that specifies error code, programmatically accessible error data,and an error message. ErrorDetail provides the underlying reason for cluster failure and recommends actions to simplify troubleshooting of EMR clusters.
  • feature: Glue: This release adds support for AWS Glue Data Quality, which helps you evaluate and monitor the quality of your data and includes the API for creating, deleting, or updating data quality rulesets, runs and evaluations.
  • feature: GuardDuty: Added EKS Runtime Monitoring feature support to existing detector, finding APIs and introducing new Coverage APIs
  • feature: IVS: Amazon Interactive Video Service (IVS) now offers customers the ability to configure IVS channels to allow insecure RTMP ingest.
  • feature: Imagebuilder: Adds support for new image workflow details and image vulnerability detection.
  • feature: Kendra: AWS Kendra now supports featured results for a query.
  • feature: NetworkFirewall: AWS Network Firewall added TLS inspection configurations to allow TLS traffic inspection.
  • feature: SageMakerGeospatial: Amazon SageMaker geospatial capabilities now supports server-side encryption with customer managed KMS key and SageMaker notebooks with a SageMaker geospatial image in a Amazon SageMaker Domain with VPC only mode.
  • feature: VPCLattice: General Availability (GA) release of Amazon VPC Lattice
  • feature: WellArchitected: AWS Well-Architected SDK now supports getting consolidated report metrics and generating a consolidated report PDF.

v2.1346.0

Compare Source

  • feature: OpenSearchServerless: This release includes two new exception types "ServiceQuotaExceededException" and "OcuLimitExceededException".
  • feature: RDS: Add support for creating a read replica DB instance from a Multi-AZ DB cluster.

v2.1345.0

Compare Source

  • feature: IotData: Add endpoint ruleset support for cn-north-1.
  • feature: SSMContacts: This release adds 12 new APIs as part of Oncall Schedule feature release, adds support for a new contact type: ONCALL_SCHEDULE. Check public documentation for AWS ssm-contacts for more information
  • feature: SSMIncidents: Increased maximum length of "TriggerDetails.rawData" to 10K characters and "IncidentSummary" to 8K characters.

v2.1344.0

Compare Source

  • feature: Athena: Enforces a minimal level of encryption for the workgroup for query and calculation results that are written to Amazon S3. When enabled, workgroup users can set encryption only to the minimum level set by the administrator or higher when they submit queries.
  • feature: ChimeSDKVoice: Documentation updates for Amazon Chime SDK Voice.
  • feature: Connect: This release introduces support for RelatedContactId in the StartChatContact API. Interactive message and interactive message response have been added to the list of supported message content types for this API as well.
  • feature: IoTWireless: Introducing new APIs that enable Sidewalk devices to communicate with AWS IoT Core through Sidewalk gateways. This will empower AWS customers to connect Sidewalk devices with other AWS IoT Services, creating possibilities for seamless integration and advanced device management.
  • feature: MediaLive: AWS Elemental MediaLive now supports ID3 tag insertion for audio only HLS output groups. AWS Elemental Link devices now support tagging.
  • feature: SecurityHub: Added new resource detail objects to ASFF, including resources for AwsEksCluster, AWSS3Bucket, AwsEc2RouteTable and AwsEC2Instance.
  • feature: ServiceCatalogAppRegistry: In this release, we started supporting ARN in applicationSpecifier and attributeGroupSpecifier. GetAttributeGroup, ListAttributeGroups and ListAttributeGroupsForApplication APIs will now have CreatedBy field in the response.
  • feature: VoiceID: Amazon Connect Voice ID now supports multiple fraudster watchlists. Every domain has a default watchlist where all existing fraudsters are placed by default. Custom watchlists may now be created, managed, and evaluated against for known fraudster detection.

v2.1343.0

Compare Source

  • feature: Comprehend: This release adds a new field (FlywheelArn) to the EntitiesDetectionJobProperties object. The FlywheelArn field is returned in the DescribeEntitiesDetectionJob and ListEntitiesDetectionJobs responses when the EntitiesDetection job is started with a FlywheelArn instead of an EntityRecognizerArn .
  • feature: RDS: Added error code CreateCustomDBEngineVersionFault for when the create custom engine version for Custom engines fails.

v2.1342.0

Compare Source

  • feature: Batch: This feature allows Batch to support configuration of ephemeral storage size for jobs running on FARGATE
  • feature: ChimeSDKIdentity: AppInstanceBots can be used to add a bot powered by Amazon Lex to chat channels. ExpirationSettings provides automatic resource deletion for AppInstanceUsers.
  • feature: ChimeSDKMediaPipelines: This release adds Amazon Chime SDK call analytics. Call analytics include voice analytics, which provides speaker search and voice tone analysis. These capabilities can be used with Amazon Transcribe and Transcribe Call Analytics to generate machine-learning-powered insights from real-time audio.
  • feature: ChimeSDKMessaging: ExpirationSettings provides automatic resource deletion for Channels.
  • feature: ChimeSDKVoice: This release adds Amazon Chime SDK call analytics. Call analytics include voice analytics, which provides speaker search and voice tone analysis. These capabilities can be used with Amazon Transcribe and Transcribe Call Analytics to generate machine-learning-powered insights from real-time audio.
  • feature: CodeArtifact: Repository CreationTime is added to the CreateRepository and ListRepositories API responses.
  • feature: GuardDuty: Adds AutoEnableOrganizationMembers attribute to DescribeOrganizationConfiguration and UpdateOrganizationConfiguration APIs.
  • feature: IVSRealTime: Initial release of the Amazon Interactive Video Service RealTime API.
  • feature: MediaConvert: AWS Elemental MediaConvert SDK now supports passthrough of ID3v2 tags for audio inputs to audio-only HLS outputs.
  • feature: SageMaker: Amazon SageMaker Autopilot adds two new APIs - CreateAutoMLJobV2 and DescribeAutoMLJobV2. Amazon SageMaker Notebook Instances now supports the ml.geospatial.interactive instance type.
  • feature: ServiceDiscovery: Reverted the throttling exception RequestLimitExceeded for AWS Cloud Map APIs introduced in SDK version 1.12.424 2023-03-09 to previous exception specified in the ErrorCode.
  • feature: Textract: The AnalyzeDocument - Tables feature adds support for new elements in the API: table titles, footers, section titles, summary cells/tables, and table type.

v2.1341.0

Compare Source

  • feature: IoTTwinMaker: This release adds support of adding metadata when creating a new scene or updating an existing scene.
  • feature: Pipes: This release improves validation on the ARNs in the API model
  • feature: Resiliencehub: This release provides customers with the ability to import resources from within an EKS cluster and assess the resiliency of EKS cluster workloads.
  • feature: SSM: This Patch Manager release supports creating, updating, and deleting Patch Baselines for AmazonLinux2023, AlmaLinux.

v2.1340.0

Compare Source

  • feature: ChimeSDKMessaging: Amazon Chime SDK messaging customers can now manage streaming configuration for messaging data for archival and analysis.
  • feature: CleanRooms: GA Release of AWS Clean Rooms, Added Tagging Functionality
  • feature: EC2: This release adds support for AWS Network Firewall, AWS PrivateLink, and Gateway Load Balancers to Amazon VPC Reachability Analyzer, and it makes the path destination optional as long as a destination address in the filter at source is provided.
  • feature: IoTSiteWise: Provide support for tagging of data streams and enabling tag based authorization for property alias
  • feature: Mgn: This release introduces the Import and export feature and expansion of the post-launch actions

v2.1339.0

Compare Source

  • feature: ApplicationAutoScaling: With this release customers can now tag their Application Auto Scaling registered targets with key-value pairs and manage IAM permissions for all the tagged resources centrally.
  • feature: Neptune: This release makes following few changes. db-cluster-identifier is now a required parameter of create-db-instance. describe-db-cluster will now return PendingModifiedValues and GlobalClusterIdentifier fields in the response.
  • feature: S3Outposts: S3 On Outposts added support for endpoint status, and a failed endpoint reason, if any
  • feature: WorkDocs: This release adds a new API, SearchResources, which enable users to search through metadata and content of folders, documents, document versions and comments in a WorkDocs site.

v2.1338.0

Compare Source

  • feature: Billingconductor: This release adds a new filter to ListAccountAssociations API and a new filter to ListBillingGroups API.
  • feature: ConfigService: This release adds resourceType enums for types released from October 2022 through February 2023.
  • feature: DMS: S3 setting to create AWS Glue Data Catalog. Oracle setting to control conversion of timestamp column. Support for Kafka SASL Plain authentication. Setting to map boolean from PostgreSQL to Redshift. SQL Server settings to force lob lookup on inline LOBs and to control access of database logs.

v2.1337.0

Compare Source

  • feature: GuardDuty: Updated 9 APIs for feature enablement to reflect expansion of GuardDuty to features. Added new APIs and updated existing APIs to support RDS Protection GA.

v2.1336.0

Compare Source

  • feature: MigrationHubStrategy: This release adds the binary analysis that analyzes IIS application DLLs on Windows and Java applications on Linux to provide anti-pattern report without configuring access to the source code.
  • feature: S3Control: Added support for S3 Object Lambda aliases.
  • feature: SecurityLake: Make Create/Get/ListSubscribers APIs return resource share ARN and name so they can be used to validate the RAM resource share to accept. GetDatalake can be used to track status of UpdateDatalake and DeleteDatalake requests.

v2.1335.0

Compare Source

  • feature: ApplicationAutoScaling: Application Auto Scaling customers can now use mathematical functions to customize the metric used with Target Tracking policies within the policy configuration itself, saving the cost and effort of publishing the customizations as a separate metric.
  • feature: DataExchange: This release enables data providers to license direct access to S3 objects encrypted with Customer Managed Keys (CMK) in AWS KMS through AWS Data Exchange. Subscribers can use these keys to decrypt, then use the encrypted S3 objects shared with them, without creating or managing copies.
  • feature: EC2: This release adds a new DnsOptions key (PrivateDnsOnlyForInboundResolverEndpoint) to CreateVpcEndpoint and ModifyVpcEndpoint APIs.
  • feature: Keyspaces: Adding support for client-side timestamps

v2.1334.0

Compare Source

  • bugfix: maintenance mode message: add environment var for suppression of maintenance mode message
  • feature: AppIntegrations: Adds FileConfiguration to Amazon AppIntegrations CreateDataIntegration supporting scheduled downloading of third party files into Amazon Connect from sources such as Microsoft SharePoint.
  • feature: S3Control: Added support for cross-account Multi-Region Access Points. Added support for S3 Replication for S3 on Outposts.
  • feature: Tnb: This release adds tagging support to the following Network Instance APIs : Instantiate, Update, Terminate.
  • feature: Wisdom: This release extends Wisdom CreateKnowledgeBase API to support SharePoint connector type by removing the @​required trait for objectField

v2.1333.0

Compare Source

  • bugfix: maintenance mode message: supress maintenance mode message in Lambda environment
  • feature: Ivschat: This release adds a new exception returned when calling AWS IVS chat UpdateLoggingConfiguration. Now UpdateLoggingConfiguration can return ConflictException when invalid updates are made in sequence to Logging Configurations.
  • feature: SecretsManager: The type definitions of SecretString and SecretBinary now have a minimum length of 1 in the model to match the exception thrown when you pass in empty values.

v2.1332.0

Compare Source

  • feature: CodeArtifact: This release introduces the generic package format, a mechanism for storing arbitrary binary assets. It also adds a new API, PublishPackageVersion, to allow for publishing generic packages.
  • feature: Connect: This release adds a new API, GetMetricDataV2, which returns metric data for Amazon Connect.
  • feature: Evidently: Updated entity override documentation
  • feature: QuickSight: This release has two changes: add state persistence feature for embedded dashboard and console in GenerateEmbedUrlForRegisteredUser API; add properties for hidden collapsed row dimensions in PivotTableOptions.
  • feature: RedshiftData: Added support for Redshift Serverless workgroup-arn wherever the WorkgroupName parameter is available.
  • feature: SESV2: This release introduces a new recommendation in Virtual Deliverability Manager Advisor, which detects missing or misconfigured Brand Indicator for Message Identification (BIMI) DNS records for customer sending identities.
  • feature: SageMaker: Amazon SageMaker Inference now allows SSM access to customer's model container by setting the "EnableSSMAccess" parameter for a ProductionVariant in CreateEndpointConfig API.
  • feature: ServiceDiscovery: Updated all AWS Cloud Map APIs to provide consistent throttling exception (RequestLimitExceeded)

  • If you want to rebase/retry this PR, check this box

@mend-for-github-com mend-for-github-com bot added the security fix Security fix generated by Mend label Nov 20, 2023
@mend-for-github-com mend-for-github-com bot force-pushed the whitesource-remediate/aws-sdk-2.x-lockfile branch from 323d13b to f32c5c0 Compare November 29, 2023 07:26
@amplify-self-hosted-runners
Copy link

Check Name Conclusion Summary Output
Mend Security Check success Security Report output
Mend License Check success License Report output
test (serverless-current, 14.x) success test (serverless-current, 14.x) output
test (serverless-current, 16.x) success test (serverless-current, 16.x) output
test (serverless-current, 18.x) success test (serverless-current, 18.x) output
test (serverless-legacy, 14.x) success test (serverless-legacy, 14.x) output
test (serverless-legacy, 16.x) success test (serverless-legacy, 16.x) output
test (serverless-legacy, 18.x) success test (serverless-legacy, 18.x) output
Codacy Static Code Analysis success Your pull request is up to standards! output

@mend-for-github-com mend-for-github-com bot changed the title Update dependency aws-sdk to v2.1354.0 Update dependency aws-sdk to v2.1354.0 - autoclosed Dec 15, 2023
@mend-for-github-com mend-for-github-com bot deleted the whitesource-remediate/aws-sdk-2.x-lockfile branch December 15, 2023 15:17
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
security fix Security fix generated by Mend
Projects
None yet
Development

Successfully merging this pull request may close these issues.

0 participants