From c15eb09b33167cc70eeaa877f1064df23d799979 Mon Sep 17 00:00:00 2001
From: Kess Plasmeier <kessplas@amazon.com>
Date: Mon, 2 Jun 2025 13:27:59 -0700
Subject: [PATCH] chore: move release to Nexus Central

---
 cfn/ci_cd.yml                      |  1 +
 codebuild/release/release-prod.yml |  4 ++--
 codebuild/release/settings.xml     |  2 +-
 pom.xml                            | 10 +++++-----
 4 files changed, 9 insertions(+), 8 deletions(-)

diff --git a/cfn/ci_cd.yml b/cfn/ci_cd.yml
index e56369646..f8f57ba07 100644
--- a/cfn/ci_cd.yml
+++ b/cfn/ci_cd.yml
@@ -376,6 +376,7 @@ Resources:
                 "arn:aws:secretsmanager:us-west-2:${AWS::AccountId}:secret:Maven-GPG-Keys-Release-haLIjZ",
                 "arn:aws:secretsmanager:us-west-2:${AWS::AccountId}:secret:Maven-GPG-Keys-Release-Credentials-WgJanS",
                 "arn:aws:secretsmanager:us-west-2:${AWS::AccountId}:secret:Sonatype-User-Token-zK61bM",
+                "arn:aws:secretsmanager:us-west-2:${AWS::AccountId}:secret:Sonatype-Central-Portal-XrYUs2",
                 "arn:aws:secretsmanager:us-west-2:${AWS::AccountId}:secret:Github/aws-crypto-tools-ci-bot-AGUB3U"
               ],
               "Action": "secretsmanager:GetSecretValue"
diff --git a/codebuild/release/release-prod.yml b/codebuild/release/release-prod.yml
index 1a2bc7f74..8205e308f 100644
--- a/codebuild/release/release-prod.yml
+++ b/codebuild/release/release-prod.yml
@@ -9,8 +9,8 @@ env:
   secrets-manager:
     GPG_KEY: Maven-GPG-Keys-Release-Credentials:Keyname
     GPG_PASS: Maven-GPG-Keys-Release-Credentials:Passphrase
-    SONA_USERNAME: Sonatype-User-Token:username
-    SONA_PASSWORD: Sonatype-User-Token:password
+    SONA_USERNAME: Sonatype-Central-Portal:Username
+    SONA_PASSWORD: Sonatype-Central-Portal:Password
 
 phases:
   install:
diff --git a/codebuild/release/settings.xml b/codebuild/release/settings.xml
index 6d32af9bb..416f099b5 100644
--- a/codebuild/release/settings.xml
+++ b/codebuild/release/settings.xml
@@ -13,7 +13,7 @@ SPDX-License-Identifier: Apache-2.0
       <password>${codeartifact.token}</password>
     </server>
     <server>
-      <id>sonatype-nexus-staging</id>
+      <id>central</id>
       <username>${sonatype.username}</username>
       <password>${sonatype.password}</password>
     </server>
diff --git a/pom.xml b/pom.xml
index a9c6935c8..6b0cbc70a 100644
--- a/pom.xml
+++ b/pom.xml
@@ -247,6 +247,7 @@
                 <groupId>com.coveo</groupId>
                 <artifactId>fmt-maven-plugin</artifactId>
                 <version>2.13</version>
+
                 <!-- Configure no goals. -->
                 <!--Until our CI builds no longer depend on Java 8, skip this during build.-->
                 <!--We instead manually check this in Java 11 environments to block builds, -->
@@ -338,13 +339,12 @@
                     </plugin>
 
                     <plugin>
-                        <groupId>org.sonatype.plugins</groupId>
-                        <artifactId>nexus-staging-maven-plugin</artifactId>
-                        <version>1.6.13</version>
+                        <groupId>org.sonatype.central</groupId>
+                        <artifactId>central-publishing-maven-plugin</artifactId>
+                        <version>0.7.0</version>
                         <extensions>true</extensions>
                         <configuration>
-                            <serverId>sonatype-nexus-staging</serverId>
-                            <nexusUrl>https://aws.oss.sonatype.org</nexusUrl>
+                            <publishingServerId>central</publishingServerId>
                         </configuration>
                     </plugin>
                 </plugins>