Bump aws/aws-sdk-php from 3.388.3 to 3.389.0 in /lam

[dependabot]

Bumps aws/aws-sdk-php from 3.388.3 to 3.389.0.

Release notes

Sourced from aws/aws-sdk-php's releases.

Version 3.389.0

• Aws\Handler - Adds Guzzle 8 support.
• Aws\ApplicationInsights - This release adds Smithy RPC v2 CBOR as an additional protocol alongside the existing AWS JSON 1.1. The SDK will prioritize its most performant protocol.
• Aws\Artifact - Added the PutComplianceInquiryFeedback API, enabling customers to submit feedback on compliance inquiry responses. Customers can rate responses as helpful or not helpful and provide optional reason codes and comments.
• Aws\RTBFabric - The deprecated inboundLinksCount field has been removed from the GetResponderGateway API response. Customers who previously relied on this field should use linksRequestedCount instead.
• Aws\DynamoDB - Endpoint test standardizations
• Aws\CognitoIdentityProvider - Amazon Cognito user pools now support the AdminGetUserAuthFactors operation, which lets administrators retrieve the configured authentication factors (such as password, SMS, email, and TOTP) available for a specific user in a user pool.
• Aws\NeptuneGraph - Update validations for Tag Keys and KMS Key ARNs.
• Aws\Odb - Documentation-only update to clarify the operation-specific valid values for the externalIdType field.

Version 3.388.13

• Aws\Credentials - Normalizes numeric-string metadata timeouts to floats in the ECS and instance profile credential providers while preserving their existing configuration and environment precedence.
• Aws\BedrockAgentCore - Adds support for the Bring Your Own Storage(BYOS) feature in AgentCore Browser and Code Interpreter. Enables mounting S3Files and EFS File Systems via Access points.
• Aws\BackupGateway - This release adds Smithy RPC v2 CBOR as an additional protocol alongside the existing AWS JSON 1.0. The SDK will prioritize its most performant protocol.
• Aws\QuickSight - Added new capabilities to custom permissions profiles to control access to Amazon Quick through the browser extension and Microsoft Word, Outlook, Excel, and PowerPoint add-ins.
• Aws\BedrockAgentCoreControl - Adds support for the Bring Your Own Storage(BYOS) feature in AgentCore Browser and Code Interpreter. Enables mounting S3Files and EFS File Systems via Access points.
• Aws\DataZone - Adds support for notebook sync with S3 ipynb files
• Aws\RedshiftDataAPIService - This release include long polling provids a new parameter wait-time-seconds to 5 API operations, new API ListSessions, and a new parameter execution-mode to BatchExecuteStatement
• Aws\AppStream - This release adds Smithy RPC v2 CBOR as an additional protocol alongside the existing AWS JSON 1.1. The SDK will prioritize its most performant protocol.
• Aws\BCMRecommendedActions - This release adds Smithy RPC v2 CBOR as an additional protocol alongside the existing AWS JSON 1.0. The SDK will prioritize its most performant protocol.
• Aws\MediaPackageV2 - This release adds support for non-epoch-locked CMAF ingest in MediaPackageV2 channels.
• Aws\BCMPricingCalculator - This release adds Smithy RPC v2 CBOR as an additional protocol alongside the existing AWS JSON 1.0. The SDK will prioritize its most performant protocol.
• Aws\WorkspacesInstances - This release adds Smithy RPC v2 CBOR as an additional protocol alongside the existing AWS JSON 1.0. The SDK will prioritize its most performant protocol.
• Aws\GameLiftStreams - GameLift Streams now supports configuring a custom aspect ratio per stream session to accommodate different player devices. Supported aspect ratios include landscape, portrait, and square - delivering a full-screen experience without letterboxing or cropping.
• Aws\SageMaker - Release support for c6a, m6a, m6g, m7g, m8g instance types for SageMaker HyperPod
• Aws\KendraRanking - This release adds Smithy RPC v2 CBOR as an additional protocol alongside the existing AWS JSON 1.0. The SDK will prioritize its most performant protocol.

Version 3.388.12

• Aws\S3 - Aws\S3\Transfer::resolvesOutsideTargetDirectory() now treats both '/' and '' as directory separators when tokenizing the sink path. Aligns the legacy Transfer guard with the newer S3Transfer\DirectoryDownloader on Windows, where PHP's filesystem layer resolves backslashes as separators.
• Aws\GuardDuty - Amazon GuardDuty now returns filter lifecycle metadata in GetFilter responses. The response includes createdAt and updatedAt timestamps and a version number that increments on each update, giving you visibility into when a filter was created and last modified.
• Aws\ElasticLoadBalancingv2 - This adds CLI examples for the IpAddressType field on SourceIpConfig, enabling Network Load Balancer listener rules to match traffic based on whether the source IP is IPv4 or IPv6.
• Aws\CloudWatch - Adds documented value constraints for CloudWatch Log Alarm scheduled query configuration fields, and makes LogGroupIdentifiers optional for log alarms.
• Aws\PrometheusService - Add CloudWatch dataset destinations for Amazon Managed Service for Prometheus collectors.
• Aws\ObservabilityAdmin - Enablement for ALB and Bedrock Knowledge Base logs via Observability Admin Telemetry Rule for account and organization level
• Aws\SESv2 - Launching DEED and MREP in US GOV
• Aws\PartnerCentralAccount - Adds Qualifications Association APIs that enable partners to associate a subsidiary account's qualifications with a primary account. Once associated, qualifications are shared across all connected accounts and scorecards are consolidated. Partners can start and track association and disassociation.
• Aws\PCS - AWS PCS Node Lifecycle Actions provides a structured way to run custom scripts at defined points in a compute node's lifecycle directly through the AWS PCS compute node group API.
• Aws\ARCRegionSwitch - Adds support for a client token in StartPlanExecution to make plan execution requests idempotent for safe retries.

Version 3.388.11

• Aws\TimestreamInfluxDB - This release adds support for custom plugins in Amazon Timestream for InfluxDB. InfluxDB 3 Core and Enterprise DB parameter groups now accept a plugin repository URL and optional AWS Secrets Manager secret ARN, so the Processing Engine loads your Python plugins from a public or private repository.
• Aws\SSM - Added a WarningMessage field to Automation along with corresponding public documentation.
• Aws\SecurityHub - Security Hub standard and control multicloud API documentation updates
• Aws\EntityResolution - Add support for real time matching with AWS Entity Resolution matching workflows with advanced rule sets.
• Aws\Invoicing - Added the SendProcurementPortalValidation and VerifyProcurementPortalValidation APIs. You can use the AWS SDKs to self-service activate your Procurement Portal Preferences created on the Billing Preferences page with a one-time-passcode (OTP) delivered to your portal.
• Aws\RedshiftDataAPIService - update the workgroupArn to include EUSC partition, tests in THF Gamma and Prod no issue
• Aws\EMRContainers - Added support for the DeleteSecurityConfiguration API, which allows customers to delete security configurations in Amazon EMR on EKS. Also added authenticationConfiguration in securityConfigurationdata structure.
• Aws\Inspector2 - GA date - July 21st 2026, remove Tags field from ListCodeSecurityIntegration and ListCodeSecurityScanConfiguration.
• Aws\Redshift - Amazon Redshift - Added support for managing Query Editor V2 IAM Identity Center applications via new CreateQev2IdcApplication, DescribeQev2IdcApplications, ModifyQev2IdcApplication, and DeleteQev2IdcApplication API operations.

... (truncated)

Commits

• e6e6649 3.389.0 release
• 5c57b9a Update models for release
• 6ecd74f Add support for Guzzle 8 (#3294)
• 45b9e98 3.388.13 release
• 99df90e Update models for release
• e3ffec4 Normalize metadata service timeouts (#3327)
• 9eca8f6 3.388.12 release
• b1bd335 Update models for release
• bb07d8c enhancement: prevent windows resolution outside target directory in Windows (...
• ee64625 3.388.11 release
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[deepsource-io]

DeepSource Code Review

We reviewed changes in 425f03d...bec1c72 on this pull request. Below is the summary for the review, and you can see the individual issues we found as inline review comments.

See full review on DeepSource ↗

PR Report Card

Overall Grade

Security   Reliability   Complexity   Hygiene

Code Review Summary

Analyzer	Status	Updated (UTC)	Details
PHP		Jul 27, 2026 5:33p.m.	Review ↗

---

Important

AI Review is run only on demand for your team. We're only showing results of static analysis review right now. To trigger AI Review, comment @deepsourcebot review on this thread.

[dependabot]

Looks like aws/aws-sdk-php is up-to-date now, so this is no longer needed.