# AWS CLI 2.36.23

- Product: AWS CLI (https://whatsnew.fyi/product/aws-cli)
- Vendor: Amazon Web Services
- Date: 2026-08-13
- Version: 2.36.23
- Original notes: https://github.com/aws/aws-cli/releases/tag/2.36.23
- Permalink: https://whatsnew.fyi/product/aws-cli/releases/2.36.23

What's New is an index, not a publisher: every entry below links to the vendor's own release notes, which are the authoritative source. Entries are labelled where they are hand-curated sample data, pre-releases, or drawn from a secondary source such as a developer blog.

Reuse: the summaries, labels and curation here are © What's New. Quote freely with attribution and a link back; wholesale republication of the corpus is not permitted — terms: https://whatsnew.fyi/terms. The vendors' own release notes remain their publishers'.

---

- **added** — Added the GetBlobDifferences API operation to codecommit, which returns line-level diffs between two blob versions without requiring a local clone with support for pagination
- **added** — Added InstanceIds parameter to TerminateInstanceInAutoScalingGroup in autoscaling to terminate multiple instances in a single call and return an Activities list
- **added** — Added LaunchInstances response in autoscaling to return IdempotentCallInProgressFault for duplicate client tokens
- **added** — Added support in securityagent for setting a maximum task-hour budget cap on penetration tests and code reviews
- **added** — Added REVALIDATION job type to securityagent for revalidating previously reported findings
- **added** — Added support in acm to update existing email-validated certificates to use the DNS validation method
- **added** — Added support in cleanrooms for minimum aggregation thresholds and comparison controls to the Custom analysis rule type
- **added** — Added StartAssistantContact API to connect to start chat contacts handled by an AI agent
- **added** — Added SegmentAttributes to StartWebRTCContact in connect
- **changed** — SSM SessionManager now displays a warning message for outdated SessionManagerPlugin version
- **fixed** — Fixed StartWebRTCContact in connect to correctly return AccessDeniedException instead of an internal server error

* api-change:``codecommit``: Added the GetBlobDifferences API operation, which returns line-level diffs between two blob versions without requiring a local clone. Returns structured hunks with context, additions, and deletions. Supports pagination for large diffs.
* api-change:``autoscaling``: Amazon EC2 Auto Scaling now supports terminating multiple instances in a single TerminateInstanceInAutoScalingGroup call via the new InstanceIds parameter, returning an Activities list. LaunchInstances now returns IdempotentCallInProgressFault for duplicate client tokens.
* api-change:``securityagent``: Add support for setting a maximum task-hour budget cap on penetration tests and code reviews, and for revalidating previously reported findings via a new REVALIDATION job type.
* api-change:``acm``: This change allows customers to update their existing email-validated certificates to use the DNS validation method.
* api-change:``cleanrooms``: This release adds support for minimum aggregation thresholds and comparison controls to the Custom analysis rule type.
* enhancement:SSM SessionManager: Add warning message for outdated SessionManagerPlugin version
* api-change:``connect``: Adds the StartAssistantContact API to start chat contacts handled by an AI agent. Adds SegmentAttributes to StartWebRTCContact, and corrects its error response to now receive AccessDeniedException (previously returned as an internal server error due to a missing error declaration).