v0.48.0

What's Changed

• fix(kms): make aliases regional by @vieiralucas in #2615
• feat(bedrock-agent-runtime): persist state across restarts by @vieiralucas in #2614
• fix(core): detect podman behind a docker-named CLI (podman-docker shim) by @vieiralucas in #2616
• test(lambda): wait for the busy instance instead of sleeping in warm-pool tests by @vieiralucas in #2619
• fix(cloudfront): scope state to the caller's account by @vieiralucas in #2620
• fix(ecs): vend task-role sessions from the ECS credentials endpoint by @vieiralucas in #2621
• fix(ecs): resolve task secrets through Secrets Manager and SSM lookups by @vieiralucas in #2618
• fix: report the AWS-managed KMS key for encrypted RDS, DocumentDB, Neptune and EBS storage by @vieiralucas in #2624
• ci: give the data-plane E2E jobs room for a slow free-disk step by @vieiralucas in #2625
• feat(cloudfront): fetch OAC/OAI S3 origins as the CloudFront principal by @vieiralucas in #2626
• fix(persistence): migrate pre-partition arn:aws: ARNs in persisted state by @vieiralucas in #2627
• fix(core): decode URL path labels once in core dispatch by @vieiralucas in #2623
• fix(docs): derive tfacc/parity/e2e subset counts instead of whitelisting them by @vieiralucas in #2636
• chore: fix clippy for Rust 1.99 by @vieiralucas in #2648
• fix(eventbridge): deliver cross-service events to Lambda and Logs targets by @vieiralucas in #2639
• fix(route53): scope Route 53 state to the owning account by @vieiralucas in #2640
• fix(lambda): read the execution role's trust policy in the role's account by @vieiralucas in #2637
• fix(cloudfront): render REST-XML errors in the wrapper by @vieiralucas in #2638
• fix(ecs): serve task-role credentials at 169.254.170.2 inside the task by @vieiralucas in #2641
• fix(ec2): launch instances from launch templates in RunInstances, Auto Scaling and CloudFormation by @vieiralucas in #2644
• test(route53): render handler errors in the unit-test helper by @vieiralucas in #2650
• fix(persistence): scope container data volumes to the data dir by @vieiralucas in #2642
• fix(cloudformation): scope stacks and their records to the request region by @vieiralucas in #2649
• fix(dynamodb,ssm): stop huge numbers from crashing the server by @vieiralucas in #2652
• fix(eks): complete the DescribeAddonVersions add-on catalog by @vieiralucas in #2651
• fix(s3): apply x-amz-* headers carried in a presigned URL's query string by @vieiralucas in #2653
• fix(tags): give SageMaker, IoT, IoT Wireless, Pinpoint and AppSync one tag store by @vieiralucas in #2659
• fix: accept AWS-valid regions, runtimes and engine versions by @vieiralucas in #2657
• fix(eks): create the cluster security group in EC2 by @vieiralucas in #2655
• fix(s3): serve S3 Control resource tagging on bucket and access point ARNs by @vieiralucas in #2656
• fix(eventbridge): scope cross-service events to the source account and region by @vieiralucas in #2661
• fix(cloudformation): CFN/SAM fidelity - retained-name collisions, DynamoDB settings, OpenAPI bodies, SAM APIs/events/aliases by @vieiralucas in #2662
• feat(servicequotas): Service Quotas service with EC2 security-group quota enforcement by @vieiralucas in #2654
• fix: bound user numerics that overflowed duration and count arithmetic by @vieiralucas in #2658
• fix(tags): stop write-then-read losses across 25 services by @vieiralucas in #2663
• fix(iam): close auth-enforcement gaps under --iam / --verify-sigv4 by @vieiralucas in #2664
• fix: client compatibility for API Gateway invocation URLs and CloudWatch rpcv2Cbor by @vieiralucas in #2665
• fix: align SFN paths/Choice/intrinsics and event-pattern matchers with AWS by @vieiralucas in #2660
• fix(ec2): page every NextToken-paginated operation by @vieiralucas in #2673
• fix(vpc): resolve VPC, subnet, ENI, SG and ASG ids through EC2 and Auto Scaling by @vieiralucas in #2674
• fix(reset): don't hold the reset response on an in-flight EC2 boot by @vieiralucas in #2677
• fix: run job-style ops off the request path and fix Flink lifecycle races by @vieiralucas in #2667
• fix(persistence): persist Batch ECS tasks, CFN teardown EC2 state, and resolver settles by @vieiralucas in #2672
• fix(cloudformation): CFN/SAM fidelity batch 2 - service-faithful updates, AWS Ref values, real backing for EC2/IAM/Lambda/Scheduler/Batch/GlobalTable types by @vieiralucas in #2676
• fix(release): portable Linux binaries (glibc 2.17 + static musl) and SDK version drift by @vieiralucas in #2671
• fix: page list operations that returned everything (elbv2, cloudwatch, opensearch, xray, appsync, apigateway, apigatewayv2) by @vieiralucas in #2678
• fix(dataplane): make container workloads and load balancers reach each other by @vieiralucas in #2666
• fix(s3): serve bucket-addressed requests in the bucket owner's account by @vieiralucas in #2679
• fix(sqs): per-(account, region) state infra; scope SQS queues to the request region by @vieiralucas in #2675
• fix(dynamodb): scope tables, streams, backups and replicas to the request region by @vieiralucas in #2680
• fix: scope Step Functions, Scheduler, Pipes, Logs, SNS, SSM, Secrets Manager, Kinesis, MemoryDB, X-Ray and Resolver state to the request region by @vieiralucas in #2681
• fix(lambda): scope functions, layers and settings to the request region by @vieiralucas in #2683
• fix(wafv2,acm): scope WAFv2 and ACM state to the request region by @vieiralucas in #2682
• fix(eks): pin cluster-version table and add-on catalog to real AWS data by @vieiralucas in #2686
• fix(servicequotas): match AWS quota defaults, maximums and IAM account summary by @vieiralucas in #2685
• feat(servicequotas): opt-in quota enforcement with per-quota control and introspection API by @vieiralucas in #2684
• chore(release): bump workspace to v0.48.0 by @vieiralucas in #2687

Full Changelog: v0.47.0...v0.48.0