AWS CLI

Developer Tools

One tool to manage every AWS service from the command line, and script them.

Latest 2.36.16 · by Amazon Web ServicesWebsite

Release activity

Release activity — 11 releases across 5 days since Jul 29, 2026. Each cell is one day; darker means more releases that day. Nothing is recorded before Jul 29, 2026. Older weeks are hidden at this screen width.
MayJunJulAug
SundayNo releases on Aug 2, 2026
Monday2 releases on Aug 3, 2026
Tuesday2 releases on Aug 4, 2026
Wednesday1 release on Jul 29, 2026No releases on Aug 5, 2026
Thursday2 releases on Jul 30, 2026
Friday4 releases on Jul 31, 2026
SaturdayNo releases on Aug 1, 2026

11 releases since Jul 29, 2026, busiest day 4

Changelog

2.36.16

Added 6
  • Add Azure SBOM export capability to Inspector2
  • AWS IAM Identity Center now lets you create organization-level instances without enabling multi-account permissions, with the ability to enable multi-account permissions during instance creation or later
  • Add ClientExperiencePolicy to ClientProperties object for ModifyClientProperties and DescribeClientProperties APIs in WorkSpaces
  • Add Vector indexes to Amazon DynamoDB for similarity search on vector embeddings using approximate nearest neighbor search
  • Amazon EC2 now supports Application Status Checks to monitor your application's health through configurable HTTP(S) paths and ports
  • Partners can now create leads in Partner Central Selling with only 5 required fields and free-text values for all other fields
Changed 5
  • Update endpoint generation logic for IAM
  • UpdateCluster in DSQL now checks the RemovePeerCluster permission on the specific cluster being removed instead of a wildcard, and documentation now clarifies how to set kmsEncryptionKey so the cluster uses the AWS-owned key
  • Improve accuracy of CloudTrail event documentation for AWS Organizations membership operations
  • Engagement invitations in Partner Central Selling now include enrichment data such as propensity scores and lead readiness directly in the response
  • Amazon Connect Customer now supports up to 50 attachments per email, increased from 10, with individual maximum attachment size limit of 20 MB and total email size limit of 25 MB
  • api-change:iam: Updating endpoint generation logic
  • api-change:inspector2: Adding Azure SBOM export capability.
  • api-change:dsql: UpdateCluster now checks the RemovePeerCluster permission on the specific cluster being removed, not a wildcard and docs now clarify how to set kmsEncryptionKey so the cluster uses the AWS-owned key.
  • api-change:sso-admin: AWS IAM Identity Center now lets you create organization-level instances without enabling multi-account permissions. You can enable multi-account permissions during instance creation or later via console or API, which then provisions the necessary service-linked roles.
  • api-change:workspaces: Added ClientExperiencePolicy to ClientProperties object for ModifyClientProperties and DescribeClientProperties APIs.
  • api-change:dynamodb: Vector indexes are a type of index in Amazon DynamoDB that enable similarity search on vector embedding stored in your table items. Vector indexes use approximate nearest neighbor search to find items whose vectors are most similar to a query vector that you provide.
  • api-change:ec2: Amazon EC2 now supports Application Status Checks, a new status check that monitors your application's health through configurable HTTP(S) paths and ports, so you can detect and automatically respond to application-level impairments.
  • api-change:organizations: Improved accuracy of CloudTrail event documentation for AWS Organizations membership operations.
  • api-change:partnercentral-selling: Partners can now create leads with only 5 required fields and free-text values for all other fields, reducing import friction. Engagement invitations now include enrichment data (propensity scores, lead readiness) directly in the response.
  • api-change:connect: Amazon Connect Customer now supports up to 50 attachments per email, increased from the previous limit of 10. The individual maximum attachment size limit of 20 MB and the total email size limit of 25 MB still hold true.

2.36.15

Added 7
  • Added eksNodeName, instanceId, and zone optional parameters to the AssumeRoleForPodIdentity API in eks-auth
  • Added ability to use Network Firewall as an explicit Proxy to protect workloads against data exfiltration
  • Added support for mediaconvert output to S3 Glacier Instant Retrieval
  • Added route visibility support for AWS Direct Connect with ListVirtualInterfaceRoutes to view BGP routes including AS path and BGP communities
  • Added support for customer-managed backup restore in timestream-influxdb
  • Added encryption of new DbInstances and DbClusters using customer-managed KMS keys in timestream-influxdb
  • Added CMK support for Telemetry Enablement Organization and Account Rules in observabilityadmin
Changed 2
  • Updated Kantar server URL validation in mediaconvert to accept Fifty5Blue domain
  • Updated descriptions for number of PreParseTextTransformations allowed per rule statement in wafv2
  • api-change:eks-auth: Added eksNodeName, instanceId, and zone optional parameters to the AssumeRoleForPodIdentity API.
  • api-change:network-firewall: This launch allows customers to use Network Firewall as an explicit Proxy and protect their workloads against threat of data exfiltration.
  • api-change:mediaconvert: Updates Kantar server URL validation to accept Fifty5Blue domain. Adds support for output to S3 Glacier Instant Retrieval.
  • api-change:directconnect: Added route visibility support for AWS Direct Connect, allowing customers to call ListVirtualInterfaceRoutes to view the BGP routes including AS path and BGP communities advertised over their virtual interfaces.
  • api-change:wafv2: Updated descriptions for number of PreParseTextTransformations allowed per rule statement
  • api-change:timestream-influxdb: This release adds support for customer-managed backup restore, and encryption of new DbInstances and DbClusters using customer-managed KMS keys.
  • api-change:observabilityadmin: Launch CMK support for Telemetry Enablement Organization and Account Rules.

2.36.14

Added 14
  • Add StorageOperationStatus and StorageOperationPercentProgress to RDS DescribeDBInstances to monitor storage initialization and optimization progress
  • Add support for enhanced Git experience in Sagemaker Unified Studio in DataZone
  • Add ability to create and update CloudWatch Logs lookup tables directly from query results and configure lookup tables as scheduled query destinations
  • Add enum for sensitive property to CloudFormation DriftIgnoredReason
  • Add EKS value to Outposts AWSServiceName enum and mark Address field as sensitive
  • Add TargetAgreementId, TargetAgreementIntent, and CreatedBySource filters to Marketplace Catalog ListEntities API for Offer entity type
  • api-change:rds: Adds StorageOperationStatus and StorageOperationPercentProgress to DescribeDBInstances, letting you monitor RDS storage initialization and optimization progress.
  • api-change:datazone: Adding support for enhanced Git experience in Sagemaker Unified Studio.
  • api-change:logs: Amazon CloudWatch Logs now lets you create and update lookup tables directly from CloudWatch Logs query results by passing a queryId, and configure a lookup table as a scheduled query destination so it refreshes automatically with the latest query results on each run.
  • api-change:cloudformation: Adding enum for sensitive property to DriftIgnoredReason
  • api-change:outposts: Adds the "EKS" value to the AWSServiceName enum and marks the Address field as sensitive.
  • api-change:marketplace-catalog: This release enhances the ListEntities API to support TargetAgreementId, TargetAgreementIntent, and CreatedBySource filters for the Offer entity type.
  • api-change:connectcampaignsv2: Launching feature for abandonment rate pacing control for outbound campaigns.
  • api-change:bedrock-runtime: Added support for mid-conversation tool changes in the Amazon Bedrock Converse and ConverseStream APIs
  • api-change:network-firewall: Doc Updates for Container Attributes
  • api-change:elementalinference: AWS Elemental Inference now supports graphic composition on cropped video outputs, enabling branded graphics and other visual elements to be overlaid as part of the inference workflow.
  • api-change:amp: Amazon Managed Service for Prometheus adds support for an Amazon OpenSearch Service exporter for managed collectors.
  • api-change:billing: Adds GetEnterpriseSupportChargeSummary, GetEnterpriseSupportContractDetails, and ListEnterpriseSupportLinkedAccountCharges. These APIs provide first-time programmatic access to billing data for Enterprise Support usage previously only available upon request through AWS Concierge or Support.
  • api-change:resiliencehubv2: Adding support for new testing capability in AWS Resilience Hub.
  • api-change:quicksight: Adding TopicV2 management APIs, adding possibility to use Topics in Analysis
  • enhancement:telemetry: Add the AWS_CLI_SESSION_ID_DISABLED environment variable to opt out of session id collection.

2.36.13

Removed 2
  • Removed Smithy RPC v2 CBOR support from bcm-recommended-actions service
  • Removed Smithy RPC v2 CBOR support from bcm-pricing-calculator service
  • api-change:bcm-recommended-actions: Removing Smithy RPC v2 CBOR support that was added in previous SDK release.
  • api-change:bcm-pricing-calculator: Removing Smithy RPC v2 CBOR support that was added in previous SDK release.

2.36.12

Added 8
  • Add support for providing a branch override when configured integrated repositories in securityagent
  • Add support for streaming tables for Apache Iceberg on Amazon MSK Express brokers, continuously materializing Apache Kafka topics as Iceberg tables in Amazon S3 Tables
  • Add support for data delivery to Amazon S3 general purpose buckets on Amazon MSK Express brokers
  • Add support for g7 family instance types for SageMaker Studio JupyterLab and CodeEditor apps in us-east-1, us-west-2, and us-east-2
  • Add UPDATING field to Container Association Status in network-firewall
  • Add Python3.15 and NodeJS 26 runtime support to AWS Lambda
  • Add support for configuring models through the OpenResponses API for custom evaluators in bedrock-agentcore-control
  • Add support for Public PricingPlanManager SDK
Changed 1
  • Improve IAM Policy Simulator accuracy to evaluate SCP conditions and resource scoping, return explicitDeny for explicit SCP denials, and report accurate cross-account decisions
  • api-change:securityagent: Adds support for providing a branch override when configured integrated repositories
  • api-change:iam: Improved IAM Policy Simulator accuracy. Simulator now evaluates SCP conditions and resource scoping, returns explicitDeny for explicit SCP denials, and reports accurate cross-account decisions.
  • api-change:kafka: Amazon MSK Express brokers now support streaming tables for Apache Iceberg, continuously materializing Apache Kafka topics as Iceberg tables in Amazon S3 Tables. Express brokers also now support data delivery to Amazon S3 general purpose buckets.
  • api-change:sagemaker: Adds support for g7 family instance types for SageMaker Studio JupyterLab and CodeEditor apps for IAD (us-east-1), PDX (us-west-2), CMH (us-east-2).
  • api-change:network-firewall: Adds UPDATING field to Container Association Status
  • api-change:lambda: Add Python3.15 (python3.15) and NodeJs 26 (nodejs26.x) support to AWS Lambda
  • api-change:bedrock-agentcore-control: Adds support for configuring models through the OpenResponses API for custom evaluators. CreateEvaluator and UpdateEvaluator now accept an OpenResponses model configuration for LLM-as-a-Judge evaluations.
  • api-change:pricing-plan-manager: Adds support for Public PricingPlanManager SDK

2.36.11

Added 8
  • Add support for policy-based routing on AWS Transit Gateway with new policy table entry APIs to route traffic based on 5-tuple matching
  • Add pre-parse text transformations in AWS WAF to normalize raw query strings before parsing for SingleQueryArgument and AllQueryArguments
  • Add 10 new text transformations to AWS WAF including ModSecurity v3 parity options
  • Add Scenario Discover APIs to AWS IoT SiteWise
  • Add filtering, partitioning, and VPC support to AWS Glue REST API connector
  • Add ListApplicationShaderCaches API to retrieve shader cache metadata for applications in GameLift Streams
  • Add stream URLs to GameLift Streams for temporary unauthenticated access to stream sessions in browser
  • Add CreateStreamUrl, GetStreamUrl, ListStreamUrls, and RevokeStreamUrl operations to GameLift Streams
  • api-change:ec2: This release adds support for policy-based routing on AWS Transit Gateway, enabling you to route traffic based on 5-tuple matching (source IP, destination IP, source port, destination port, and protocol) using new policy table entry APIs that direct matching traffic to a target route table.
  • api-change:wafv2: AWS WAF now supports pre-parse text transformations, letting you normalize raw query strings before parsing, available on rule statements that use SingleQueryArgument or AllQueryArguments as the FieldToMatch. AWS WAF also added 10 new text transformations, including ModSecurity v3 parity options.
  • api-change:iotsitewise: We have released a new set of APIs in support of a major new feature within AWS IoT SiteWise called Scenario Discover. Please see user guide about the feature and the API guide in public documentation for new APIs.
  • api-change:dms: Updated documentation for various DMS Schema Conversion operations
  • api-change:glue: Adding filtering, partitioning, and VPC support to AWS Glue REST API connector
  • api-change:gameliftstreams: Adds ListApplicationShaderCaches API to retrieve shader cache metadata for applications and adds stream URLs, which give end users temporary, unauthenticated access to a stream session in their browser. Includes CreateStreamUrl, GetStreamUrl, ListStreamUrls, and RevokeStreamUrl operations.
View all

Discussion