Skip to content

fix(rds-data): accept parameter names that start with a digit - #5119

Merged
pgermosen merged 5 commits into
floci-io:mainfrom
drakeo338:fix/rds-data-numeric-param-names
Oct 7, 2026
Merged

pgermosen merged 5 commits into
floci-io:mainfrom
drakeo338:fix/rds-data-numeric-param-names

Conversation

@drakeo338

@drakeo338 drakeo338 commented Oct 5, 2026 •

Copy link
Copy Markdown
Contributor

Summary

Closes #5112. RDS Data ExecuteStatement left :1 in the SQL as is, so drizzle's aws-data-api/pg driver, which names parameters 1, 2, and so on, got a syntax error. The shared parser now lets a name start with a digit for the RDS MySQL and PostgreSQL options only. Redshift Data is unchanged.

Type of change

  • Bug fix (fix:)
  • New feature (feat:)
  • Breaking change (feat!: or fix!:)
  • Docs / chore

AWS Compatibility

Real Aurora accepts :1 as a parameter name. Before this change Floci returned syntax error at or near ":". I did not run the AWS CLI; unit tests cover the parser.

Checklist

  • ./mvnw test passes locally
  • New or updated integration test added
  • Commit messages follow Conventional Commits
  • I have no more than 2 open, non-draft pull requests in this repository (maintainers and dependency bots are exempt).

@github-actions

github-actions Bot commented Oct 5, 2026

Copy link
Copy Markdown

🎉 Thanks for your first pull request to Floci!

Your CI checks need a maintainer to approve them before they run. That is GitHub's standard gate on first-time contributors, not a problem with your PR — so if the checks look like they are doing nothing, that is why. Once a maintainer approves, CI and the compatibility suite start automatically. Nothing is needed from you in the meantime.

While you wait, a couple of things that make review faster:

  • Link the issue this fixes with Closes #N in the description
  • Commits follow Conventional Commits (feat(s3): ..., fix(dynamodb): ...)
  • Behaviour changes come with a test — see CONTRIBUTING.md

Come join us in Slack — it is the fastest way to reach maintainers if you get stuck, or want feedback on an approach before investing more time in it.

@greptile-apps

greptile-apps Bot commented Oct 5, 2026 •

Copy link
Copy Markdown

RetriggerConfidence Score: 5/5

[Medium risk] SQL parameter parser now accepts numeric parameter names.

The PR appears safe to merge; no new actionable issue was identified.

Summary

The PR enables digit-leading parameter names for RDS Data while leaving Redshift behavior unchanged.

  • The latest changes allow columns named set, by, or values to retain array-slice bounds, and add parser tests for those cases.
  • The greptile_confidence label could not be added because GitHub CLI authentication is unavailable.

Reviews (5) · Last reviewed commit: "fix(rds-data): drop clause words from th..." · Reviewed by Greptile

@drakeo338

Copy link
Copy Markdown
Contributor Author

Pushed fcb795f so a digit after a colon inside array brackets, as in arr[1:2], is no longer read as a parameter, with tests for the slice forms and for :1 after an operator.

@pgermosen pgermosen added bug Something isn't working rds-data Amazon RDS Data API labels Oct 5, 2026

@pgermosen pgermosen left a comment

Copy link
Copy Markdown
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

@drakeo338 Thanks for picking this up, and keeping it to the RDS options so Redshift stays as it was is the right call.

The slice check needs another pass, though, and I agree with Greptile here. Judging by the character right before the colon gets it wrong both ways: ARRAY[:1] is an array constructor holding parameter 1, but the [ makes it look like a slice, while arr[1 :2] is a slice that still reads as parameter 2 because of the space. It might be simpler to decide at the bracket instead: a [ right after an expression (a name other than ARRAY, a ] or a )) is a subscript, and a :digit directly inside it is a slice bound however it's spaced.

Checkstyle is also failing on the four vars in the new tests, and the java.util.List.of calls there can just be List.of.

@pgermosen pgermosen added the waiting-author Review posted; waiting on the PR author to respond label Oct 5, 2026
A [ right after a name other than ARRAY, a ] or a ) is a subscript, and a
:digit directly inside it is a slice bound however it is spaced. ARRAY[:1]
is a constructor, so :1 there stays a parameter. Tests use no var.
@drakeo338

Copy link
Copy Markdown
Contributor Author

Thanks, reworked as suggested in 2011804. The parser now decides at the bracket: a [ after a name other than ARRAY, a ], a ) or a quoted identifier is a subscript, and a :digit directly inside it is a slice bound however it is spaced. Nesting is tracked, so ARRAY[:1] and f(:1) inside a subscript stay parameters. Tests cover those, arr[1 :2] and arr[1:2]; the vars are gone, and checkstyle reports 0 violations.

@pgermosen pgermosen left a comment

Copy link
Copy Markdown
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

@drakeo338 Thanks, deciding at the bracket is much better, and the checkstyle issues are gone.

Greptile's two new points both hold, though, and I think one change covers them. Inside a subscript, a :digit is only a slice separator when it follows an operand. In arr[1 + :1] it follows +, so it's a parameter, but right now it's skipped and the query fails. And because isSubscriptBracket walks backwards over whitespace only, arr /* note */ [1:2] stops at the comment and binds :2 as a parameter.

The forward loop already skips comments, strings and dollar quotes. If it kept track of the last significant token, both decisions could read from that. A [ after an operand opens a subscript. A :digit inside one is a slice bound after an operand, and a parameter after an operator, a comma or a paren. arr[:1] can stay a slice, since that's how PostgreSQL reads it. A couple of test rows for those two cases would pin it down.

…eters

Inside an array subscript a :digit is a slice bound only after an operand
(or directly after the opening bracket) and a parameter after an operator,
comma or paren, so arr[1 + :1] binds :1. The scan now remembers the last
significant token, skipping comments, so arr /* note */ [1:2] is still a
subscript.
@drakeo338

Copy link
Copy Markdown
Contributor Author

Pushed 64b5f86 as suggested: the parse loop now tracks the last significant token, so arr[1 + :1] binds the parameter while arr[:1] and arr /* note */ [1:2] stay slices, with tests for both.

@pgermosen pgermosen left a comment

Copy link
Copy Markdown
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

@drakeo338 thanks, tracking the last token reads well: arr[1 + :1] binds, and arr[:1] and the commented subscript stay slices.

Greptile's two new points both hold. isNonOperandWord returns a value, so it can be a switch expression, as AGENTS.md asks. And the list is wider than the two decisions need: only ARRAY and the operator and CASE words can sit right before a [ or before a :digit inside a subscript, while SET, BY, VALUES, SELECT, FROM, WHERE, ON and RETURNING never do. So Greptile's set[1:2] comes out as set[1?] with a parameter named 2, and by[1:2] and values[1:2] do the same. Trimming the list to the words that can actually be there fixes it, with a test row for one of them.

SET, BY, VALUES, SELECT, FROM, WHERE, ON and RETURNING never sit right
before a [ or a :digit inside a subscript, and a column may carry such a
name, so set[1:2] no longer turns :2 into a parameter. Make
isNonOperandWord a switch expression.
@drakeo338

Copy link
Copy Markdown
Contributor Author

Pushed 7f1e1d8: isNonOperandWord is now a switch expression limited to ARRAY plus the operator and CASE words, so set[1:2], by[1:2] and values[1:2] stay slices, with test rows for all three.

@pgermosen pgermosen left a comment

Copy link
Copy Markdown
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

@drakeo338 thanks, with the clause words gone set[1:2] and friends stay slices, and the switch expression reads cleanly. I unticked the two checklist lines in the body, since only unit tests were added and run.

@pgermosen pgermosen removed the waiting-author Review posted; waiting on the PR author to respond label Oct 7, 2026
@pgermosen
pgermosen merged commit bdb37f0 into floci-io:main Oct 7, 2026
27 checks passed
omatheusmesmo pushed a commit to omatheusmesmo/floci that referenced this pull request Oct 12, 2026
…io#5119)

* fix(rds-data): accept parameter names that start with a digit

* fix(rds-data): do not treat array-slice bounds as numeric parameters

* fix(rds-data): decide array slices at the opening bracket

A [ right after a name other than ARRAY, a ] or a ) is a subscript, and a
:digit directly inside it is a slice bound however it is spaced. ARRAY[:1]
is a constructor, so :1 there stays a parameter. Tests use no var.

* fix(rds-data): track the last operand to tell slice bounds from parameters

Inside an array subscript a :digit is a slice bound only after an operand
(or directly after the opening bracket) and a parameter after an operator,
comma or paren, so arr[1 + :1] binds :1. The scan now remembers the last
significant token, skipping comments, so arr /* note */ [1:2] is still a
subscript.

* fix(rds-data): drop clause words from the non-operand keyword list

SET, BY, VALUES, SELECT, FROM, WHERE, ON and RETURNING never sit right
before a [ or a :digit inside a subscript, and a column may carry such a
name, so set[1:2] no longer turns :2 into a parameter. Make
isNonOperandWord a switch expression.
Signed-off-by: Matheus Oliveira <[email protected]>
omatheusmesmo pushed a commit to omatheusmesmo/floci that referenced this pull request Oct 12, 2026
…io#5119)

* fix(rds-data): accept parameter names that start with a digit

* fix(rds-data): do not treat array-slice bounds as numeric parameters

* fix(rds-data): decide array slices at the opening bracket

A [ right after a name other than ARRAY, a ] or a ) is a subscript, and a
:digit directly inside it is a slice bound however it is spaced. ARRAY[:1]
is a constructor, so :1 there stays a parameter. Tests use no var.

* fix(rds-data): track the last operand to tell slice bounds from parameters

Inside an array subscript a :digit is a slice bound only after an operand
(or directly after the opening bracket) and a parameter after an operator,
comma or paren, so arr[1 + :1] binds :1. The scan now remembers the last
significant token, skipping comments, so arr /* note */ [1:2] is still a
subscript.

* fix(rds-data): drop clause words from the non-operand keyword list

SET, BY, VALUES, SELECT, FROM, WHERE, ON and RETURNING never sit right
before a [ or a :digit inside a subscript, and a column may carry such a
name, so set[1:2] no longer turns :2 into a parameter. Make
isNonOperandWord a switch expression.
Signed-off-by: Matheus Oliveira <[email protected]>
@hectorvent

Copy link
Copy Markdown
Member

🎉 This PR is included in version 2.3.0 🎉

The release is available on GitHub release

Your semantic-release bot 📦🚀

dongphuongman pushed a commit to dongphuongman/floci that referenced this pull request Oct 15, 2026
# [2.3.0](https://github.com/floci-io/floci/compare/2.2.0...2.3.0) (2026-10-15)

### Bug Fixes

* **accessanalyzer:** route GetAnalyzer through GET /analyzer/<name> ([#5534](https://github.com/floci-io/floci/issues/5534)) ([9889910](https://github.com/floci-io/floci/commit/988991033fa624dfd62da64dc3c509033db5fc4b)), closes [#5353](https://github.com/floci-io/floci/issues/5353)
* **acm:** reject empty SAN arrays in certificate requests ([#5688](https://github.com/floci-io/floci/issues/5688)) ([e15c081](https://github.com/floci-io/floci/commit/e15c081d337917aa7cabc6f29068b8ce7fd9e130))
* **apigateway:** match AWS integration responses by status ([#5443](https://github.com/floci-io/floci/issues/5443)) ([7b8377f](https://github.com/floci-io/floci/commit/7b8377fa3cb7de69b8d119e7ef56c5061b9a326e))
* **apigateway:** refuse EDGE REST APIs outside the commercial partition ([#5397](https://github.com/floci-io/floci/issues/5397)) ([a1f9045](https://github.com/floci-io/floci/commit/a1f90453fbd31cf1ab22bc9d74e6fa12b2220d98))
* **apigateway:** require API keys for imported methods ([#5450](https://github.com/floci-io/floci/issues/5450)) ([77113c7](https://github.com/floci-io/floci/commit/77113c7f8521fcb88c5cc80286f235fc240812b6))
* **apigateway:** resolve component parameter references on REST import ([#4855](https://github.com/floci-io/floci/issues/4855)) ([0f94d62](https://github.com/floci-io/floci/commit/0f94d6213c9a5cafe6b12ccb6d1479c7ee947a1d))
* **apigateway:** select request models by content type and default ([#5530](https://github.com/floci-io/floci/issues/5530)) ([e77710d](https://github.com/floci-io/floci/commit/e77710d32dcac2e51e581fb486451e54bb3275d3))
* **apigatewayv2:** honor payload format 1.0 ([#5338](https://github.com/floci-io/floci/issues/5338)) ([04621d8](https://github.com/floci-io/floci/commit/04621d8444fb3580ae64da84bd2e6b814bdcad23))
* **apigatewayv2:** include stage variables in Lambda events ([#5416](https://github.com/floci-io/floci/issues/5416)) ([22c4c32](https://github.com/floci-io/floci/commit/22c4c32e3a6dda938853c2a13ff2e963af01f2ea))
* **apigatewayv2:** infer the 2.0 response body and answer function errors with a message ([#5153](https://github.com/floci-io/floci/issues/5153)) ([ecdecf2](https://github.com/floci-io/floci/commit/ecdecf2ae2d45d8c1ddfdd42beb1e7a6d6aa1682))
* **apigatewayv2:** send cookies and comma-joined duplicates in the 2.0 event ([#5152](https://github.com/floci-io/floci/issues/5152)) ([c6369b3](https://github.com/floci-io/floci/commit/c6369b321a28227a56f9216658771c2f8159eef4))
* **apigateway:** validate and normalize imported integration types ([#5543](https://github.com/floci-io/floci/issues/5543)) ([63e0302](https://github.com/floci-io/floci/commit/63e0302c12acfd15a1038d182d17edb3776fe6a7))
* **appconfig:** accept a quoted Ion type parameter in Accept ([#5687](https://github.com/floci-io/floci/issues/5687)) ([190ed52](https://github.com/floci-io/floci/commit/190ed52249904beddb8e160acdc0b3b31d723406)), closes [#5673](https://github.com/floci-io/floci/issues/5673)
* **appconfig:** accept names in management APIs ([#5417](https://github.com/floci-io/floci/issues/5417)) ([4ff2632](https://github.com/floci-io/floci/commit/4ff263271c180c5b4b40ba64824d30368d70b1ba))
* **appconfig:** serve legacy deployed configuration requests ([#5658](https://github.com/floci-io/floci/issues/5658)) ([91c67c6](https://github.com/floci-io/floci/commit/91c67c69df36c7daad2f3ad4e9bf56543a7ec6e3))
* **appconfig:** support deleting environments ([#5337](https://github.com/floci-io/floci/issues/5337)) ([2015d01](https://github.com/floci-io/floci/commit/2015d01864b7bb6cd09070c4ffa73920c0fcc421))
* **appsync:** front custom domains with the partition's CloudFront zone ([#5237](https://github.com/floci-io/floci/issues/5237)) ([9d49e61](https://github.com/floci-io/floci/commit/9d49e619c10bfb66e8940469866b9db22b01c52f))
* **appsync:** name the one service principal in a data-source denial ([#5593](https://github.com/floci-io/floci/issues/5593)) ([dbf6c30](https://github.com/floci-io/floci/commit/dbf6c3016d63418d351ce377add3c4c2e3db5706))
* **auth:** explain signature date and service mismatches ([#5591](https://github.com/floci-io/floci/issues/5591)) ([d5c6a36](https://github.com/floci-io/floci/commit/d5c6a36ac9810d3243768f059fcb6dd30ba5f6c7))
* **auth:** verify query signatures and retain STS caller identity ([#5584](https://github.com/floci-io/floci/issues/5584)) ([a017c94](https://github.com/floci-io/floci/commit/a017c94eccfffe16e51d96f733ff6f6cb7440738))
* **autoscaling:** balance scale-out across zones and subnets ([#5525](https://github.com/floci-io/floci/issues/5525)) ([6442d75](https://github.com/floci-io/floci/commit/6442d75115aaf62cb197d3b5a877e9b1cbfd77d0))
* **autoscaling:** pause suspended capacity adjustments ([#5545](https://github.com/floci-io/floci/issues/5545)) ([41517f3](https://github.com/floci-io/floci/commit/41517f3c2ffb34abb62b263abe9ace91a1602f97))
* **autoscaling:** preserve launch configuration user data ([#5600](https://github.com/floci-io/floci/issues/5600)) ([ddc0e02](https://github.com/floci-io/floci/commit/ddc0e0257b7cf5dad27705bfe11aa2b8a332fcf8))
* **autoscaling:** preserve launch template user data ([#5607](https://github.com/floci-io/floci/issues/5607)) ([b488d0c](https://github.com/floci-io/floci/commit/b488d0c4184c061e4500cdd8a12c6d6313814c40))
* **autoscaling:** preserve paused refresh ownership ([#5668](https://github.com/floci-io/floci/issues/5668)) ([b395560](https://github.com/floci-io/floci/commit/b395560fe2292f11cda3c1a3cee2474aae55bc7b))
* **autoscaling:** round-trip InstanceMaintenancePolicy, AvailabilityZoneDistribution, CapacityReservationSpecification, ServiceLinkedRoleARN, WeightedCapacity and EnabledMetrics ([#5513](https://github.com/floci-io/floci/issues/5513)) ([991bf3a](https://github.com/floci-io/floci/commit/991bf3ab9e7188a0474b4d7ee5dcf11c5a46be0a))
* **bedrock-runtime:** preserve images sent through the proxy ([#4681](https://github.com/floci-io/floci/issues/4681)) ([3bdb07d](https://github.com/floci-io/floci/commit/3bdb07deac3482480534b3917b55b6267e0b5b9b))
* **bedrock-runtime:** preserve structured output and reasoning effort ([#5512](https://github.com/floci-io/floci/issues/5512)) ([d0c7bd1](https://github.com/floci-io/floci/commit/d0c7bd1f6f4848e0e3d24300429cb9025086b51e))
* **bedrock-runtime:** stop abandoned calls and omit error-body logs ([#5526](https://github.com/floci-io/floci/issues/5526)) ([ce3d826](https://github.com/floci-io/floci/commit/ce3d826fc7249ace5ea37eba2c1a04a7ebc5caac))
* **cloudcontrol:** bound the worker queue and reject overflow ([#4479](https://github.com/floci-io/floci/issues/4479)) ([517409a](https://github.com/floci-io/floci/commit/517409a7aab1f4a87403e51226f4e04873b3a370))
* **cloudformation:** accept the stack ID in UpdateStack and CreateChangeSet ([#4846](https://github.com/floci-io/floci/issues/4846)) ([efd9512](https://github.com/floci-io/floci/commit/efd95125787746d7d0f080340a1541d781653cb8)), closes [#4842](https://github.com/floci-io/floci/issues/4842)
* **cloudformation:** apply an S3 bucket's NotificationConfiguration ([#5493](https://github.com/floci-io/floci/issues/5493)) ([6695482](https://github.com/floci-io/floci/commit/669548277fbc43ab745a095363b2f67cc1189651))
* **cloudformation:** apply Tags, DNS attributes and InstanceTenancy on AWS::EC2::VPC ([#5224](https://github.com/floci-io/floci/issues/5224)) ([2cade5c](https://github.com/floci-io/floci/commit/2cade5cd21f08829afc8b66cca998243d6e2aa95))
* **cloudformation:** apply TimeToLiveSpecification on DynamoDB tables ([#4951](https://github.com/floci-io/floci/issues/4951)) ([a5228a0](https://github.com/floci-io/floci/commit/a5228a0bf7714976ade9ae02c37bb35baf337a24))
* **cloudformation:** default CreateChangeSet type to UPDATE ([#5287](https://github.com/floci-io/floci/issues/5287)) ([f6e76bb](https://github.com/floci-io/floci/commit/f6e76bbe300dba84b1a1bd17f14c2a675c3c4267))
* **cloudformation:** expand a SAM function's EventInvokeConfig ([#5524](https://github.com/floci-io/floci/issues/5524)) ([aff6f0e](https://github.com/floci-io/floci/commit/aff6f0eec4022ad61842fd944ee3459eb722f04c))
* **cloudformation:** honour PermissionsBoundary on AWS::IAM::Role and AWS::IAM::User ([#5266](https://github.com/floci-io/floci/issues/5266)) ([7d71df6](https://github.com/floci-io/floci/commit/7d71df6ac9c0127812ab6c718b7fadc9cdd71c59)), closes [#5391](https://github.com/floci-io/floci/issues/5391) [#5110](https://github.com/floci-io/floci/issues/5110) [#5391](https://github.com/floci-io/floci/issues/5391)
* **cloudformation:** honour the DescribeStackResources filters ([#5455](https://github.com/floci-io/floci/issues/5455)) ([c5feab6](https://github.com/floci-io/floci/commit/c5feab635a2c34e75d522ed5e10729c763476fc6)), closes [#5451](https://github.com/floci-io/floci/issues/5451)
* **cloudformation:** reject resources that depend on each other in a cycle ([#5208](https://github.com/floci-io/floci/issues/5208)) ([13738f8](https://github.com/floci-io/floci/commit/13738f89de105cdbba4f29423641239fa3889b94))
* **cloudformation:** replace Cognito user pool groups like CloudFormation ([#4841](https://github.com/floci-io/floci/issues/4841)) ([e9f2463](https://github.com/floci-io/floci/commit/e9f24631034dac98dd03f53e93fda8fdb1488294)), closes [#4836](https://github.com/floci-io/floci/issues/4836)
* **cloudformation:** report CREATE events for a resource an update adds ([#4932](https://github.com/floci-io/floci/issues/4932)) ([8c61aa4](https://github.com/floci-io/floci/commit/8c61aa441d0d8861a191b7b1ca1fb2b6677fc00f))
* **cloudformation:** roll back a changed custom resource ([#4941](https://github.com/floci-io/floci/issues/4941)) ([e8a300f](https://github.com/floci-io/floci/commit/e8a300f4d55b137ba60a36a089d936ac8de3b867))
* **cloudformation:** send the stack's StackId to custom resources ([#4861](https://github.com/floci-io/floci/issues/4861)) ([f248eb5](https://github.com/floci-io/floci/commit/f248eb51afe67038f969b0e2c75ff4bff8bca256)), closes [#4973](https://github.com/floci-io/floci/issues/4973)
* **cloudformation:** wait for a stable ECS service ([#4880](https://github.com/floci-io/floci/issues/4880)) ([0ec64ad](https://github.com/floci-io/floci/commit/0ec64add2d0f070f222961437e00f160c5762871))
* **cloudfront:** reject a function runtime that CloudFront does not support ([#5445](https://github.com/floci-io/floci/issues/5445)) ([8deac0a](https://github.com/floci-io/floci/commit/8deac0a4244449470d6bd4bfa8769f8921d1533d)), closes [#5425](https://github.com/floci-io/floci/issues/5425)
* **cloudfront:** release origin connections when viewers disconnect ([#5564](https://github.com/floci-io/floci/issues/5564)) ([ee229af](https://github.com/floci-io/floci/commit/ee229af97569d5876f756f65ce7956726e2ed696))
* **cloudfront:** serve viewer Range GETs ([#5377](https://github.com/floci-io/floci/issues/5377)) ([ff20750](https://github.com/floci-io/floci/commit/ff20750d9123e4c8fa781abee387cf123fbd7b21))
* **cloudfront:** stream origin responses and viewer request bodies ([#5278](https://github.com/floci-io/floci/issues/5278)) ([1f1d4f9](https://github.com/floci-io/floci/commit/1f1d4f94dd8a179972bda124bc3aa47b9704f69b))
* **cloudwatch:** route Query GET requests through CloudWatch ([#5589](https://github.com/floci-io/floci/issues/5589)) ([984e818](https://github.com/floci-io/floci/commit/984e8187c94b3b4f37de8154354d5a332b281048))
* **codeartifact:** capture an empty readme for npm versions published without one ([#5683](https://github.com/floci-io/floci/issues/5683)) ([4be2b8b](https://github.com/floci-io/floci/commit/4be2b8b04313996b8d59ca91f1c56896a34ab1d7))
* **codeartifact:** escape the namespace/package boundary in storage keys ([#5408](https://github.com/floci-io/floci/issues/5408)) ([7fa1a50](https://github.com/floci-io/floci/commit/7fa1a506c7662e9a2a99e3557255d543fd22df38))
* **codeartifact:** make npm republish of identical content idempotent ([#5163](https://github.com/floci-io/floci/issues/5163)) ([2cf011f](https://github.com/floci-io/floci/commit/2cf011f7264c8b5383e553981ae9526c58e87456))
* **codepipeline:** link approval notifications to the partition's console host ([#5595](https://github.com/floci-io/floci/issues/5595)) ([8bd88bf](https://github.com/floci-io/floci/commit/8bd88bfb402d7688a31e8819624f50c1c74256d2))
* **cognito:** include domains in user pool responses ([#5448](https://github.com/floci-io/floci/issues/5448)) ([34c11b8](https://github.com/floci-io/floci/commit/34c11b8981902ca56696dd44e539926652aa347d))
* **cognito:** refuse user pool custom domains in GovCloud and EUSC ([#5614](https://github.com/floci-io/floci/issues/5614)) ([9df4ffb](https://github.com/floci-io/floci/commit/9df4ffbfa105473ec0e2ec5e92c65a604fba4880))
* **cognito:** reject token validity outside AWS's limits ([#5160](https://github.com/floci-io/floci/issues/5160)) ([17c40ce](https://github.com/floci-io/floci/commit/17c40cecbdfd0484949cafe230f31eb14bd416e5)), closes [#5610](https://github.com/floci-io/floci/issues/5610)
* **cognito:** run missing post-confirmation triggers ([#5207](https://github.com/floci-io/floci/issues/5207)) ([5dfb45d](https://github.com/floci-io/floci/commit/5dfb45d71faaad7fd6a6939916209b526737ea25))
* **cognito:** run the PreSignUp trigger on AdminCreateUser ([#5149](https://github.com/floci-io/floci/issues/5149)) ([69b4d17](https://github.com/floci-io/floci/commit/69b4d17c678f6a2b568274b4e206bb11db5cd6c8))
* **cognito:** send email from the pool's EmailConfiguration sender ([#5150](https://github.com/floci-io/floci/issues/5150)) ([45f45e5](https://github.com/floci-io/floci/commit/45f45e590ec76e0022aae8a633f292fcc394e8b9))
* **cognito:** send the AdminCreateUser invitation with a temporary password ([#5155](https://github.com/floci-io/floci/issues/5155)) ([641bf98](https://github.com/floci-io/floci/commit/641bf980d0536be6b12b75718a159952b14fa158)), closes [#5144](https://github.com/floci-io/floci/issues/5144)
* **cognito:** surface sign-in denials with the exception classes Cognito uses ([#5223](https://github.com/floci-io/floci/issues/5223)) ([bcfb9c7](https://github.com/floci-io/floci/commit/bcfb9c786c4eb28ccac2011b5084ee64fee19769))
* **core:** fail a Docker call after 30 seconds when its connection pool is full ([#5285](https://github.com/floci-io/floci/issues/5285)) ([985921c](https://github.com/floci-io/floci/commit/985921c3db4c49d26239d4ae88de4e26577d5de8))
* **core:** give launched containers the port Floci listens on ([#5577](https://github.com/floci-io/floci/issues/5577)) ([1883855](https://github.com/floci-io/floci/commit/1883855c94af014a514f35f3c4ff2dce71c3ce78)), closes [#4987](https://github.com/floci-io/floci/issues/4987)
* **core:** make Docker read timeouts real on a Unix-socket host, except for long-lived streams ([#5294](https://github.com/floci-io/floci/issues/5294)) ([ddc47a4](https://github.com/floci-io/floci/commit/ddc47a465dc07aa1348e9f5769dc2661c425412f))
* **core:** replay a Docker request after a lost response only when it is safe to repeat ([#5171](https://github.com/floci-io/floci/issues/5171)) ([957d492](https://github.com/floci-io/floci/commit/957d49255a734cfb51a93cc31d77885ff9fd3d8b))
* **core:** reuse pooled Docker connections and validate them after a second idle ([#5333](https://github.com/floci-io/floci/issues/5333)) ([3b36a4d](https://github.com/floci-io/floci/commit/3b36a4d0d8c105039576432a1c74092b9473b825)), closes [#5294](https://github.com/floci-io/floci/issues/5294)
* **core:** route a shared Query action name by the Version it declares ([#5549](https://github.com/floci-io/floci/issues/5549)) ([8a87e06](https://github.com/floci-io/floci/commit/8a87e062c8247d6ad18af4f9c6946e90079c12db)), closes [#5032](https://github.com/floci-io/floci/issues/5032)
* **core:** verify SigV4 header signatures for every service under validate-signatures ([#5268](https://github.com/floci-io/floci/issues/5268)) ([9f224d9](https://github.com/floci-io/floci/commit/9f224d9de6d01dfebe444757d179e42e25b8ca83)), closes [#5195](https://github.com/floci-io/floci/issues/5195)
* **deps:** bump botocore to 1.43.111 and regenerate the vendored AWS data ([#5498](https://github.com/floci-io/floci/issues/5498)) ([94a801e](https://github.com/floci-io/floci/commit/94a801e05f1bfb69e27615b90f09662e1560cb4c))
* **deps:** bump botocore to 1.43.113 and regenerate the vendored AWS data ([#5613](https://github.com/floci-io/floci/issues/5613)) ([d84a764](https://github.com/floci-io/floci/commit/d84a764cf9a67847656f5664979734e7793a5085))
* **dns:** forward queries without per-context ordering ([#4643](https://github.com/floci-io/floci/issues/4643)) ([89f59de](https://github.com/floci-io/floci/commit/89f59dea625ac0fe3caa7c646d2b8009ee5fb2c1)), closes [#4606](https://github.com/floci-io/floci/issues/4606)
* **dns:** validate forwarded DNS responses against the query and its target ([#4671](https://github.com/floci-io/floci/issues/4671)) ([b6eeae9](https://github.com/floci-io/floci/commit/b6eeae92e17f91e567e0eb718dc8d4a21bcc7472)), closes [#4670](https://github.com/floci-io/floci/issues/4670)
* **docker:** do not retry a call when the Docker socket does not exist ([#5424](https://github.com/floci-io/floci/issues/5424)) ([dd6bf4c](https://github.com/floci-io/floci/commit/dd6bf4cfcbb7a4801653a1459111eb8d46d58d28)), closes [#5342](https://github.com/floci-io/floci/issues/5342)
* **docker:** skip stale connection checks for named pipes ([#5400](https://github.com/floci-io/floci/issues/5400)) ([66756f7](https://github.com/floci-io/floci/commit/66756f7b9cbe8bff2eb43dccb528fce011e5e175)), closes [#5394](https://github.com/floci-io/floci/issues/5394)
* **dynamodb:** authorize every requested item return mode ([#5652](https://github.com/floci-io/floci/issues/5652)) ([4ea7e3d](https://github.com/floci-io/floci/commit/4ea7e3da23bc454e9d55cc5856819d0e82f205cb))
* **dynamodb:** keep expired items visible until TTL deletion ([#5555](https://github.com/floci-io/floci/issues/5555)) ([e919560](https://github.com/floci-io/floci/commit/e919560e3c1c9606cec8d81a6f1941f3da139a4a))
* **dynamodb:** mark time-to-live deletions on the stream as AWS does ([#4930](https://github.com/floci-io/floci/issues/4930)) ([9a7ec1c](https://github.com/floci-io/floci/commit/9a7ec1c9d0b837e14ce6e4f1170cbafc829bcefa))
* **dynamodb:** prefix the Select conflict errors of Query and Scan ([#5562](https://github.com/floci-io/floci/issues/5562)) ([9c9e5a1](https://github.com/floci-io/floci/commit/9c9e5a1464e4dcb3cc39ca8e591fb9b1b6406a0e))
* **dynamodb:** reject a too deep transact value before the transaction runs ([#5483](https://github.com/floci-io/floci/issues/5483)) ([6e38c08](https://github.com/floci-io/floci/commit/6e38c080fb2382b6787fcf9dc9e04f3ae3f7a310))
* **dynamodb:** reject an unknown ReturnConsumedCapacity on Scan ([#5669](https://github.com/floci-io/floci/issues/5669)) ([f3e1cb6](https://github.com/floci-io/floci/commit/f3e1cb600630947b2c5e1f5fc4fdc52f4c702750))
* **dynamodb:** reject every mix of expression and non-expression parameters in Query and Scan ([#5619](https://github.com/floci-io/floci/issues/5619)) ([804335d](https://github.com/floci-io/floci/commit/804335d071e7f606843746fba14bb5ffd5ba65dc))
* **dynamodb:** reject UpdateTable GSI changes AWS refuses ([#4714](https://github.com/floci-io/floci/issues/4714)) ([fdb21de](https://github.com/floci-io/floci/commit/fdb21de0953f696031d7318e2c31089da24a5873)), closes [#4572](https://github.com/floci-io/floci/issues/4572)
* **dynamodb:** treat a null ReturnConsumedCapacity as absent, as AWS does ([#5686](https://github.com/floci-io/floci/issues/5686)) ([503899d](https://github.com/floci-io/floci/commit/503899df058af0e0f4d38b5a3c0dea87f0eb62ea))
* **dynamodb:** use the AWS wording when Query or Scan rejects AttributesToGet with a Select ([#5599](https://github.com/floci-io/floci/issues/5599)) ([dd0f40f](https://github.com/floci-io/floci/commit/dd0f40fcbbb06f9770121b38865290e2759a715d))
* **dynamodb:** use the current AWS wording for Scan validation errors ([#5504](https://github.com/floci-io/floci/issues/5504)) ([c047da8](https://github.com/floci-io/floci/commit/c047da882e6648e0c070a879c01b36d3bf657401))
* **dynamodb:** validate legacy Expected operands without rejecting Value ([#5508](https://github.com/floci-io/floci/issues/5508)) ([255ad96](https://github.com/floci-io/floci/commit/255ad9616882cfbb8b4230c84deb0697728967ec))
* **ec2:** add t2.medium through t2.2xlarge to the instance type catalog ([#5528](https://github.com/floci-io/floci/issues/5528)) ([24c1fdc](https://github.com/floci-io/floci/commit/24c1fdcef7b73e43d34297e264b02d76ee7d4baf))
* **ec2:** allocate endpoint IPv4 addresses within the subnet prefix ([#5385](https://github.com/floci-io/floci/issues/5385)) ([a8374ee](https://github.com/floci-io/floci/commit/a8374ee2ad8d60121aacab7b8835153b8c72481d)), closes [#5384](https://github.com/floci-io/floci/issues/5384)
* **ec2:** apply EBS encryption by default to new volumes and root volumes ([#5371](https://github.com/floci-io/floci/issues/5371)) ([da063a8](https://github.com/floci-io/floci/commit/da063a82f80848275b1ac26e886495df9f71cc1e)), closes [#5370](https://github.com/floci-io/floci/issues/5370)
* **ec2:** avoid Docker waits on the first CreateVpc ([#5179](https://github.com/floci-io/floci/issues/5179)) ([dc41417](https://github.com/floci-io/floci/commit/dc41417e79964a70a94c0ea89c3035e193936c78))
* **ec2:** canonicalize VPC and subnet CIDR blocks on create ([#5214](https://github.com/floci-io/floci/issues/5214)) ([4eae79d](https://github.com/floci-io/floci/commit/4eae79d546d6f1d58140e910b5c0b25621164927))
* **ec2:** derive flow log az-id the way subnets do ([#5238](https://github.com/floci-io/floci/issues/5238)) ([7f5a332](https://github.com/floci-io/floci/commit/7f5a332620969d5346a70229c13d833e6c8974cb))
* **ec2:** enforce VPC IPv4 CIDR block association restrictions ([#5510](https://github.com/floci-io/floci/issues/5510)) ([ac5f0bd](https://github.com/floci-io/floci/commit/ac5f0bd95f9258ca6b591e98d55f69592665ebe5))
* **ec2:** expose m6g.large through the shared instance catalog ([#5583](https://github.com/floci-io/floci/issues/5583)) ([f4c8237](https://github.com/floci-io/floci/commit/f4c8237229adac962fa083aa49fd4b3dbc061070))
* **ec2:** filter network interfaces by primary address association ([#5531](https://github.com/floci-io/floci/issues/5531)) ([04dd78d](https://github.com/floci-io/floci/commit/04dd78d0f6e0863d82ab857608f13a36298ccc67))
* **ec2:** give availability-zone ids AWS's shape, shared by EC2, flow logs and EFS ([#5486](https://github.com/floci-io/floci/issues/5486)) ([1aabc8b](https://github.com/floci-io/floci/commit/1aabc8b4feaece921e578344aff9e3c158f85883))
* **ec2:** honor ZoneName, ZoneId and filters in DescribeAvailabilityZones ([#5475](https://github.com/floci-io/floci/issues/5475)) ([9cd97f1](https://github.com/floci-io/floci/commit/9cd97f13f48dbedc626e9244909a5a6016afa88d))
* **ec2:** list the request partition's regions in DescribeRegions ([#5550](https://github.com/floci-io/floci/issues/5550)) ([b4758b0](https://github.com/floci-io/floci/commit/b4758b0018d66309a787c887f33968cf578f27db))
* **ec2:** preserve endpoint IP types across updates and templates ([#5438](https://github.com/floci-io/floci/issues/5438)) ([80e8b74](https://github.com/floci-io/floci/commit/80e8b7465d728eb6a41d37ff974c462a34334660))
* **ec2:** preserve original Spot instance user data ([#5468](https://github.com/floci-io/floci/issues/5468)) ([b86268e](https://github.com/floci-io/floci/commit/b86268e4592c7ee50a76ae9ee80fc013c1123804))
* **ec2:** preserve original user-data bytes in instance metadata ([#5437](https://github.com/floci-io/floci/issues/5437)) ([f4bce30](https://github.com/floci-io/floci/commit/f4bce302699bdb0108ba197df45b5ced56e77451))
* **ec2:** preserve reserved tags during API and stack updates ([#5611](https://github.com/floci-io/floci/issues/5611)) ([90b9d37](https://github.com/floci-io/floci/commit/90b9d37fd25bd66c8ca8d8ad36ce7c80f7798308))
* **ec2:** preserve VPC endpoint IP address types ([#5427](https://github.com/floci-io/floci/issues/5427)) ([47d1e10](https://github.com/floci-io/floci/commit/47d1e10e5c43cfb124dab4de1631ea5cab978ab9))
* **ec2:** reject reserved IPv4 ranges for VPC CIDR blocks ([#5559](https://github.com/floci-io/floci/issues/5559)) ([66b2ec0](https://github.com/floci-io/floci/commit/66b2ec05e9d12bd914c16ab9e89a280b4e9cc2f6))
* **ec2:** reject subnet CIDRs outside the VPC address space ([#5461](https://github.com/floci-io/floci/issues/5461)) ([20bc835](https://github.com/floci-io/floci/commit/20bc835b6ffa996580dd3eebea2bbe979a1080fb))
* **ec2:** reject subnet IPv4 prefixes outside /16 to /28 ([#5439](https://github.com/floci-io/floci/issues/5439)) ([b1bb016](https://github.com/floci-io/floci/commit/b1bb016b6e83b08d9e7a146433ed4885f57ef6fe))
* **ec2:** reject VPC IPv4 prefixes outside /16 to /28 ([#5495](https://github.com/floci-io/floci/issues/5495)) ([162ac6d](https://github.com/floci-io/floci/commit/162ac6dea7deff1cedbd95ee7afa073c45d2e69b))
* **ec2:** remove the volume helper container on shutdown ([#5551](https://github.com/floci-io/floci/issues/5551)) ([ec5692d](https://github.com/floci-io/floci/commit/ec5692dfa2c48806017126f1bc1ed5389b71fa48))
* **ec2:** resolve interface endpoint fallback address collisions ([#5347](https://github.com/floci-io/floci/issues/5347)) ([84dbed1](https://github.com/floci-io/floci/commit/84dbed14afb01b9166efc985b7c17f5a34966ce9)), closes [#5345](https://github.com/floci-io/floci/issues/5345)
* **ec2:** return real AWS error for unknown availability zone name ([#5529](https://github.com/floci-io/floci/issues/5529)) ([06f0e06](https://github.com/floci-io/floci/commit/06f0e06fc15c4acc55aa8f6da0e305d7a013aaa3)), closes [eksctl-io/eksctl#8174](https://github.com/eksctl-io/eksctl/issues/8174)
* **ec2:** serve IMDS instance identity credentials ([#5289](https://github.com/floci-io/floci/issues/5289)) ([8502565](https://github.com/floci-io/floci/commit/8502565287dc69c0b104067a386f1896ba486f1f)), closes [#5264](https://github.com/floci-io/floci/issues/5264)
* **ec2:** validate subnet tags before creation ([#5306](https://github.com/floci-io/floci/issues/5306)) ([aa94969](https://github.com/floci-io/floci/commit/aa94969704d5e7bdd6bd034536b7236a5a6d90fc))
* **ecr:** advertise the registry at the published address ([#4863](https://github.com/floci-io/floci/issues/4863)) ([c1cd5af](https://github.com/floci-io/floci/commit/c1cd5af2bdc6c0c77b654f1cfb9cd9a8bb1237df))
* **ecr:** retry occupied registry ports ([#4857](https://github.com/floci-io/floci/issues/4857)) ([8b1ece9](https://github.com/floci-io/floci/commit/8b1ece9c2443b5975c91da54bb89020330485a38)), closes [floci-io/floci#4856](https://github.com/floci-io/floci/issues/4856)
* **ecs:** accept a service ARN in ListTasks ([#4859](https://github.com/floci-io/floci/issues/4859)) ([5a8694e](https://github.com/floci-io/floci/commit/5a8694e97a0b5416d29a864aef22dfef52b0265d))
* **ecs:** launch service tasks through capacity provider strategies ([#5500](https://github.com/floci-io/floci/issues/5500)) ([431748f](https://github.com/floci-io/floci/commit/431748f740a40a5ab26174b316e3dfa0e40f4bfd))
* **ecs:** look up a task definition without failing on a stored record with no ARN ([#5296](https://github.com/floci-io/floci/issues/5296)) ([4927f71](https://github.com/floci-io/floci/commit/4927f71ce13f7a90241bd208e3643f2f2c0b58fe))
* **ecs:** mount and clean up ephemeral task volumes ([#5511](https://github.com/floci-io/floci/issues/5511)) ([760c38e](https://github.com/floci-io/floci/commit/760c38ef99d266167f4adbcbdbddb76e21725877))
* **ecs:** preserve binary output in exec sessions ([#5621](https://github.com/floci-io/floci/issues/5621)) ([9f224e5](https://github.com/floci-io/floci/commit/9f224e5760e516e437696a329a96cab4c1af0021))
* **ecs:** use caller endpoint for exec stream URLs ([#5666](https://github.com/floci-io/floci/issues/5666)) ([6e8a083](https://github.com/floci-io/floci/commit/6e8a083d2ba35da3e972678056d3f014a6af4e78))
* **eks:** accept a role ARN from another partition the way STS does ([#5398](https://github.com/floci-io/floci/issues/5398)) ([fb202cc](https://github.com/floci-io/floci/commit/fb202cce6a64ef3df2aadf9b0edb061a68b55d33))
* **eks:** mirror the cluster's own region and account in the registry config ([#5399](https://github.com/floci-io/floci/issues/5399)) ([8b83892](https://github.com/floci-io/floci/commit/8b83892dff1edd3bf5b29b740f49994616250a14))
* **elasticache:** restore groups and clusters of every account ([#5244](https://github.com/floci-io/floci/issues/5244)) ([05e1beb](https://github.com/floci-io/floci/commit/05e1bebe1e66ce5c738b0940646796e7e56c20c5))
* **elasticache:** return modeled wire error codes for replication group and user name faults ([#5571](https://github.com/floci-io/floci/issues/5571)) ([86b1904](https://github.com/floci-io/floci/commit/86b19047f3fbd72d64543b0c619facdd89871240))
* **elasticache:** use the AWS wire codes UserNotFound and UserAlreadyExists ([#5452](https://github.com/floci-io/floci/issues/5452)) ([b318794](https://github.com/floci-io/floci/commit/b318794fa2687da057ce19b0dbac4dda0cebeaac))
* **elbv2:** honor SubnetMappings in CreateLoadBalancer and SetSubnets ([#5533](https://github.com/floci-io/floci/issues/5533)) ([999ccde](https://github.com/floci-io/floci/commit/999ccde67603344e001c8ad21110dc7666809897))
* **elbv2:** keep a refused ModifyListener from moving the listener ([#5491](https://github.com/floci-io/floci/issues/5491)) ([ee274b9](https://github.com/floci-io/floci/commit/ee274b92299552e1775f43693dae25a4b649e4dc))
* **elbv2:** preserve default listener certificates ([#5692](https://github.com/floci-io/floci/issues/5692)) ([a55352b](https://github.com/floci-io/floci/commit/a55352bf9d6107f196962fb4460a60f777c78e66))
* **elbv2:** preserve repeated target response headers ([#5628](https://github.com/floci-io/floci/issues/5628)) ([15f50cb](https://github.com/floci-io/floci/commit/15f50cb68e1e04a25bbab37c06c2cac53b26c6d5))
* **elbv2:** reject a listener certificate the account does not have ([#5474](https://github.com/floci-io/floci/issues/5474)) ([2332533](https://github.com/floci-io/floci/commit/233253334d8bf198f67c5ee287dcffa4734a639c))
* **emr:** use the cluster's regional private DNS domain for instances and the master ([#5169](https://github.com/floci-io/floci/issues/5169)) ([4115bec](https://github.com/floci-io/floci/commit/4115becdf2be4168b0fc929aafd46e94d7bfa9ee))
* **eventbridge:** reject malformed Detail JSON for PutEvents ([#5465](https://github.com/floci-io/floci/issues/5465)) ([e3c2096](https://github.com/floci-io/floci/commit/e3c2096aec8103b69bcb7ad587d9a5a49d837f3c))
* **eventbridge:** require EventPattern or ScheduleExpression in PutRule ([#5172](https://github.com/floci-io/floci/issues/5172)) ([be668ac](https://github.com/floci-io/floci/commit/be668acefd5aca8a05fe43a7c22a674618c7b830))
* **eventbridge:** stop a scheduled rule's timer when its rule is gone ([#5462](https://github.com/floci-io/floci/issues/5462)) ([d6f93ab](https://github.com/floci-io/floci/commit/d6f93abb18ff98b4501d222776cb77d1b0d95144))
* **eventbridge:** stop schedule-only rules from matching put events ([#5168](https://github.com/floci-io/floci/issues/5168)) ([bb24ee0](https://github.com/floci-io/floci/commit/bb24ee09d1d08d96108f6733fc3aa6efd230043d))
* **iam:** answer AWS's own errors for a malformed service-credential id, and for DeleteUser ([#5239](https://github.com/floci-io/floci/issues/5239)) ([3a8f974](https://github.com/floci-io/floci/commit/3a8f974554b56fd7a80652531505c9dd9eadf141)), closes [#5084](https://github.com/floci-io/floci/issues/5084)
* **iam:** authorize a Smithy RPC v2 call as the operation its route runs ([#5620](https://github.com/floci-io/floci/issues/5620)) ([29ead62](https://github.com/floci-io/floci/commit/29ead624f816d8126b035129f9b381b603b04b7b))
* **iam:** authorize an operation as the action AWS checks for it ([#5604](https://github.com/floci-io/floci/issues/5604)) ([eba0582](https://github.com/floci-io/floci/commit/eba058266b91669ec871e668270ca3243d9cdcb0))
* **iam:** check DynamoDB transaction item permissions ([#5576](https://github.com/floci-io/floci/issues/5576)) ([69bbd22](https://github.com/floci-io/floci/commit/69bbd2242b5fa828a1eee34b7907af7419ba2960))
* **iam:** enforce inline role policy quota ([#5327](https://github.com/floci-io/floci/issues/5327)) ([d22b4f1](https://github.com/floci-io/floci/commit/d22b4f107cf60fec1d70b7e2ba1571420091577c))
* **iam:** enforce user and group inline policy quotas ([#5590](https://github.com/floci-io/floci/issues/5590)) ([1d8f65d](https://github.com/floci-io/floci/commit/1d8f65d23121cf7d0c59cc5a3da9d8ea3c693f73))
* **iam:** evaluate every IAM action against the resource it acts on ([#5404](https://github.com/floci-io/floci/issues/5404)) ([d884d55](https://github.com/floci-io/floci/commit/d884d55c26d44c19b7317c0a3f80cfb26f698107)), closes [#4979](https://github.com/floci-io/floci/issues/4979)
* **iam:** honor managed policy attachment conditions ([#5578](https://github.com/floci-io/floci/issues/5578)) ([367ae0b](https://github.com/floci-io/floci/commit/367ae0b2db417462aa6a89a0b58aac26950fe926))
* **iam:** make the server certificate reference check atomic with the write ([#5368](https://github.com/floci-io/floci/issues/5368)) ([477e3ef](https://github.com/floci-io/floci/commit/477e3ef813b56ecb793bb7d2da361cc88ef7d441)), closes [#5087](https://github.com/floci-io/floci/issues/5087)
* **iam:** match absent context keys with ForAllValues ([#5482](https://github.com/floci-io/floci/issues/5482)) ([ea8da22](https://github.com/floci-io/floci/commit/ea8da22226d9c5c8e4df599f01d3512a75cb8ce6))
* **iam:** open every ValidationError with the count AWS puts on it ([#5280](https://github.com/floci-io/floci/issues/5280)) ([88d429a](https://github.com/floci-io/floci/commit/88d429a96827429a4e5a26f42a96277e58d754f8)), closes [#5240](https://github.com/floci-io/floci/issues/5240) [#5239](https://github.com/floci-io/floci/issues/5239) [#5240](https://github.com/floci-io/floci/issues/5240)
* **iam:** page ListRoles and ListPolicies through MaxItems and Marker ([#5515](https://github.com/floci-io/floci/issues/5515)) ([72a4cc5](https://github.com/floci-io/floci/commit/72a4cc551520f2ed09a5613e01a50cd1d86970fd))
* **iam:** preserve later policy writes during rollback ([#5596](https://github.com/floci-io/floci/issues/5596)) ([9ab820d](https://github.com/floci-io/floci/commit/9ab820d7f7f93547ca2d9d68a18f5c548b9b6731))
* **iam:** refuse inactive keys and unreadable credentials in enforcement ([#5346](https://github.com/floci-io/floci/issues/5346)) ([46f9c23](https://github.com/floci-io/floci/commit/46f9c23c8be8cd7f7e742bb7d5daf2426778adb4))
* **iam:** return UserName from GetAccessKeyLastUsed ([#5579](https://github.com/floci-io/floci/issues/5579)) ([372d3d1](https://github.com/floci-io/floci/commit/372d3d11d5e6a7e673da4b06c6a333abd22b1cfc))
* **iam:** route every dispatched IAM action, and require the parameters the model requires ([#5227](https://github.com/floci-io/floci/issues/5227)) ([4495ade](https://github.com/floci-io/floci/commit/4495ade6bb5ac567b5691138529e548322318b84)), closes [#5032](https://github.com/floci-io/floci/issues/5032)
* **iam:** separate a constraint failure from an invalid value in PutAccountProperties ([#5240](https://github.com/floci-io/floci/issues/5240)) ([5fc8b04](https://github.com/floci-io/floci/commit/5fc8b0418c4d004c916cd22f348b39b3d0833c3f)), closes [#5177](https://github.com/floci-io/floci/issues/5177)
* **iam:** take service-linked role names and suffix support from AWS evidence ([#5293](https://github.com/floci-io/floci/issues/5293)) ([df4fa58](https://github.com/floci-io/floci/commit/df4fa58ea17d659ad9aad6d6106c89f763e120be)), closes [#5084](https://github.com/floci-io/floci/issues/5084)
* **iam:** validate RoleName in CreateRole ([#5374](https://github.com/floci-io/floci/issues/5374)) ([cb67380](https://github.com/floci-io/floci/commit/cb673802e03511e7fbb09b609f45c314eb562fd1))
* **iam:** validate RoleName in every role action ([#5391](https://github.com/floci-io/floci/issues/5391)) ([b2b083e](https://github.com/floci-io/floci/commit/b2b083ee912fdca7ae861901778611a379e9129f))
* **kms:** return an empty body for operations without output ([#5318](https://github.com/floci-io/floci/issues/5318)) ([63ef2d3](https://github.com/floci-io/floci/commit/63ef2d3a2d6396cf893bca20e34e56e37fa8a61f))
* **lambda:** add cookies array to function URL events ([#5288](https://github.com/floci-io/floci/issues/5288)) ([673c809](https://github.com/floci-io/floci/commit/673c809effe3ad6e93e5d3cdacdcdb07caa4971f)), closes [#5255](https://github.com/floci-io/floci/issues/5255)
* **lambda:** check the RevisionId precondition in UpdateFunctionCode ([#4641](https://github.com/floci-io/floci/issues/4641)) ([b9625bf](https://github.com/floci-io/floci/commit/b9625bf7f7344499de486a91e0d6edc4e867e544)), closes [#4639](https://github.com/floci-io/floci/issues/4639)
* **lambda:** default event source mapping BatchSize by source type ([#5362](https://github.com/floci-io/floci/issues/5362)) ([29319fb](https://github.com/floci-io/floci/commit/29319fbfb5f861c8f9655c7dad846f38d5150910)), closes [#4740](https://github.com/floci-io/floci/issues/4740)
* **lambda:** end the invocation when a checkpoint closes a durable execution ([#5299](https://github.com/floci-io/floci/issues/5299)) ([ebd364e](https://github.com/floci-io/floci/commit/ebd364e23e8ce8468cf91c209e8e736204b45f52))
* **lambda:** enforce function policies on cross-account calls ([#5476](https://github.com/floci-io/floci/issues/5476)) ([6d7d85f](https://github.com/floci-io/floci/commit/6d7d85f0f81560ca27142e36ef5114e92e262a24))
* **lambda:** expose the executing version on cold launches ([#5523](https://github.com/floci-io/floci/issues/5523)) ([8565ad8](https://github.com/floci-io/floci/commit/8565ad837a91e6410e740e76ede8f6368aba0896))
* **lambda:** keep every AddPermission condition and store account principals as root ARNs ([#5123](https://github.com/floci-io/floci/issues/5123)) ([e28c58c](https://github.com/floci-io/floci/commit/e28c58cc8a7462ceb24d63aac80267e7cd34ec6a)), closes [#4627](https://github.com/floci-io/floci/issues/4627)
* **lambda:** keep watching for a runtime exit after the wait stream fails ([#5284](https://github.com/floci-io/floci/issues/5284)) ([a3027c0](https://github.com/floci-io/floci/commit/a3027c07cf9dacb11e052e0183166bc43bfb2927)), closes [#3314](https://github.com/floci-io/floci/issues/3314)
* **lambda:** list $LATEST first, then versions in numeric order ([#5376](https://github.com/floci-io/floci/issues/5376)) ([47dae88](https://github.com/floci-io/floci/commit/47dae887f99d1a1629f5acc3cb13f26c645e3029)), closes [#5121](https://github.com/floci-io/floci/issues/5121)
* **lambda:** list changed durable operations in creation order ([#5328](https://github.com/floci-io/floci/issues/5328)) ([9c2db35](https://github.com/floci-io/floci/commit/9c2db353f15adc0258c34f5a6596e447983fc088))
* **lambda:** quote the model's FunctionName pattern in the validation error ([#5487](https://github.com/floci-io/floci/issues/5487)) ([32cb4b7](https://github.com/floci-io/floci/commit/32cb4b7b8b758df610a125cfb8fc19cbc659c4b5))
* **lambda:** refuse function URLs in GovCloud and China ([#5615](https://github.com/floci-io/floci/issues/5615)) ([2551626](https://github.com/floci-io/floci/commit/255162654f1232aa13d02797a5c9c1d010f7bddb))
* **lambda:** validate members the model bounds (ESM Topics, S3 code, alias, LicenseInfo) ([#4989](https://github.com/floci-io/floci/issues/4989)) ([c3133f1](https://github.com/floci-io/floci/commit/c3133f14c38fba9b1edde937fedc88765429500a)), closes [#4607](https://github.com/floci-io/floci/issues/4607) [#4607](https://github.com/floci-io/floci/issues/4607)
* **logs:** enforce stream resource permissions ([#5694](https://github.com/floci-io/floci/issues/5694)) ([dbe7fdb](https://github.com/floci-io/floci/commit/dbe7fdb92eead73e315c836ddcda97b182f05604))
* **mq:** return CreateBroker members from DescribeBroker ([#5211](https://github.com/floci-io/floci/issues/5211)) ([73133b4](https://github.com/floci-io/floci/commit/73133b472a5473729fbd35c7e747432673ab0386)), closes [#1951](https://github.com/floci-io/floci/issues/1951)
* **mq:** route DescribeSharedResources ([#5356](https://github.com/floci-io/floci/issues/5356)) ([d1fe27c](https://github.com/floci-io/floci/commit/d1fe27cb92f163637eec438e5e6f953efc84c0b2))
* **partition:** accept EFS access points in ISO-E and ISO-F and list the execution's regions in Step Functions ([#5485](https://github.com/floci-io/floci/issues/5485)) ([7837792](https://github.com/floci-io/floci/commit/78377921e3ff1eeee9d75213eb3d7896001dadf9))
* **partition:** hold escaped host regexes to the DNS suffix gate ([#5232](https://github.com/floci-io/floci/issues/5232)) ([1b61945](https://github.com/floci-io/floci/commit/1b61945f286bb191edd34308fc546f94a412b1ca))
* **partition:** read strict-mode service availability from endpoint rulesets too ([#5231](https://github.com/floci-io/floci/issues/5231)) ([8a1d1dd](https://github.com/floci-io/floci/commit/8a1d1ddcd394162307a0bddde5724d65fe70c0ae))
* **partition:** serve a pseudo signing region as its partition's global region ([#5233](https://github.com/floci-io/floci/issues/5233)) ([e1cd6fe](https://github.com/floci-io/floci/commit/e1cd6fe6d4342194410c1e29f3f76d8cd50e8cbf))
* **partitions:** source the China CloudFront suffix and GovCloud API Gateway zones ([#5618](https://github.com/floci-io/floci/issues/5618)) ([3afb5b4](https://github.com/floci-io/floci/commit/3afb5b430e724d9f3289f7ea524a2bc06e4fa82b))
* **rds-data:** accept parameter names that start with a digit ([#5119](https://github.com/floci-io/floci/issues/5119)) ([bdb37f0](https://github.com/floci-io/floci/commit/bdb37f0ca3e305068867a188b7847129194225e2))
* **rds-data:** reject an ExecuteStatement response over 1 MiB ([#5120](https://github.com/floci-io/floci/issues/5120)) ([a7e2447](https://github.com/floci-io/floci/commit/a7e2447a34f11350697388012ee5476a7e033c46))
* **rds-data:** reject concurrent transaction requests ([#5575](https://github.com/floci-io/floci/issues/5575)) ([2a04cd7](https://github.com/floci-io/floci/commit/2a04cd78c72cb712853442e825407a83a689351b))
* **rds-data:** reject result rows larger than 64 KB ([#5290](https://github.com/floci-io/floci/issues/5290)) ([93cc2ff](https://github.com/floci-io/floci/commit/93cc2ff95711be43320adb94b67dfb11c62890af)), closes [#5113](https://github.com/floci-io/floci/issues/5113)
* **rds-data:** reject SQL containing multiple statements ([#5556](https://github.com/floci-io/floci/issues/5556)) ([f833ca9](https://github.com/floci-io/floci/commit/f833ca9e1251de9a73914aedc4838a175645d549))
* **rds-data:** return typed array result fields ([#5665](https://github.com/floci-io/floci/issues/5665)) ([bb06acd](https://github.com/floci-io/floci/commit/bb06acdeb11b57586f9f156c213d302b9fa5dc0c))
* **rds,elasticache:** decode IAM auth token parameters once ([#5039](https://github.com/floci-io/floci/issues/5039)) ([3041d6b](https://github.com/floci-io/floci/commit/3041d6bd900faeda19bbce15e85af2ce36942f98))
* **rds:** apply Aurora IAM changes to existing members ([#5608](https://github.com/floci-io/floci/issues/5608)) ([966da1d](https://github.com/floci-io/floci/commit/966da1d7faac8b216d4c0d4e2bddb58e69912772))
* **rds:** apply PostgreSQL startup parameters to IAM sessions as the token's role ([#5304](https://github.com/floci-io/floci/issues/5304)) ([91c15be](https://github.com/floci-io/floci/commit/91c15be74a04381721d78ef0a1b0405801167b8e))
* **rds:** bind IAM tokens to the published port ([#5305](https://github.com/floci-io/floci/issues/5305)) ([3171b8a](https://github.com/floci-io/floci/commit/3171b8a7459075461cbe2ff1013e9052f548b0c3))
* **rds:** delete managed instance secrets ([#5330](https://github.com/floci-io/floci/issues/5330)) ([c70e1b0](https://github.com/floci-io/floci/commit/c70e1b05ee18e9ad75baeeea6c53331e11ef4ca8))
* **rds:** forward PostgreSQL startup parameters through the proxy ([#5151](https://github.com/floci-io/floci/issues/5151)) ([1199f3a](https://github.com/floci-io/floci/commit/1199f3a7902abe2696ff28edc5114a5f6ea026b6))
* **rds:** honor restore IAM flags and reject malformed booleans ([#5473](https://github.com/floci-io/floci/issues/5473)) ([03a0dfe](https://github.com/floci-io/floci/commit/03a0dfefddb07280084cbd3c0e0273cdf339e64d))
* **rds:** inherit Aurora member master credentials ([#5667](https://github.com/floci-io/floci/issues/5667)) ([92b2cf7](https://github.com/floci-io/floci/commit/92b2cf74f79954ffd6511d68d067120c90c272e8))
* **rds:** inherit cluster IAM settings for new members ([#5653](https://github.com/floci-io/floci/issues/5653)) ([12c8f96](https://github.com/floci-io/floci/commit/12c8f969afe342737959734206128dd3d53e1de6))
* **rds:** keep Aurora member passwords owned by their cluster ([#5685](https://github.com/floci-io/floci/issues/5685)) ([430af5f](https://github.com/floci-io/floci/commit/430af5fce7cab6e810195b7454b8d5bd32c0eb22))
* **rds:** list Aurora engines in DescribeOrderableDBInstanceOptions ([#5585](https://github.com/floci-io/floci/issues/5585)) ([025af9d](https://github.com/floci-io/floci/commit/025af9d215b14b0a53c2fa90ff8c28ad50f14ceb))
* **rds:** load the token role's ALTER ROLE defaults into IAM sessions ([#5344](https://github.com/floci-io/floci/issues/5344)) ([e61b66f](https://github.com/floci-io/floci/commit/e61b66fb22c0277c7e22c0af4b5146772aac5c87))
* **rds:** preserve credentials when managed-secret opt-out is refused ([#5553](https://github.com/floci-io/floci/issues/5553)) ([2927a45](https://github.com/floci-io/floci/commit/2927a4520e65581e122806b72e4e909ce59b4990))
* **rds:** preserve snapshot partitions in custom regions ([#5428](https://github.com/floci-io/floci/issues/5428)) ([ad1fbbc](https://github.com/floci-io/floci/commit/ad1fbbc9b93fde3cdf85291508bed181eb229943))
* **rds:** reject malformed cluster snapshot copy flags ([#5472](https://github.com/floci-io/floci/issues/5472)) ([1e92b7e](https://github.com/floci-io/floci/commit/1e92b7e17bdbb2e221280aa0894877d05013d665))
* **rds:** reject malformed event subscription flags ([#5481](https://github.com/floci-io/floci/issues/5481)) ([eb3c14d](https://github.com/floci-io/floci/commit/eb3c14d414d2a48ecc03042228083c2dddb71c54))
* **rds:** reject malformed instance boolean flags ([#5332](https://github.com/floci-io/floci/issues/5332)) ([b28eac9](https://github.com/floci-io/floci/commit/b28eac91421971adde958221fe1804794b348678))
* **rds:** reject malformed parameter reset flags ([#5454](https://github.com/floci-io/floci/issues/5454)) ([4fd8df2](https://github.com/floci-io/floci/commit/4fd8df2b0054312c41944856ab198b7d2964208e))
* **rds:** reject malformed proxy boolean flags ([#5453](https://github.com/floci-io/floci/issues/5453)) ([af3672e](https://github.com/floci-io/floci/commit/af3672ed0c995bc6e7f017545fbc4f4674ea1184))
* **rds:** reject malformed upgrade flags ([#5329](https://github.com/floci-io/floci/issues/5329)) ([c8f16d2](https://github.com/floci-io/floci/commit/c8f16d24846ff78413175ffc18c3af79e7295c2e))
* **rds:** reject tag ARNs from another partition ([#5419](https://github.com/floci-io/floci/issues/5419)) ([6083795](https://github.com/floci-io/floci/commit/60837956dee4bd73428e9c0ba45da8b428bdacdd))
* **rds:** report the default managed secret key ([#5420](https://github.com/floci-io/floci/issues/5420)) ([23e6fce](https://github.com/floci-io/floci/commit/23e6fce6ef3a37cb912565fff285039601928c11))
* **rds:** restrict custom endpoint mutations to Aurora ([#5206](https://github.com/floci-io/floci/issues/5206)) ([d8b170a](https://github.com/floci-io/floci/commit/d8b170a144875824b4cdbbf579df69414f742049))
* **rds:** use cluster IAM policies for Aurora members ([#5605](https://github.com/floci-io/floci/issues/5605)) ([2aca536](https://github.com/floci-io/floci/commit/2aca536bec028a1bb6098d2260e9594eb808b898))
* **redshift-serverless:** return HTTP 400 for ResourceNotFoundException and ConflictException ([#5409](https://github.com/floci-io/floci/issues/5409)) ([972ff03](https://github.com/floci-io/floci/commit/972ff03f00583144672b6b5a869e7618685908f0))
* **rekognition:** refuse the images Rekognition refuses ([#5540](https://github.com/floci-io/floci/issues/5540)) ([c65b6e9](https://github.com/floci-io/floci/commit/c65b6e96fc7ccbeb37b7eed5f2e386fdbf8e09c4))
* **route53resolver:** require at least two IP addresses for CreateResolverEndpoint ([#5539](https://github.com/floci-io/floci/issues/5539)) ([4da5143](https://github.com/floci-io/floci/commit/4da5143456ec46826d1816eeb3b6c7430444e556)), closes [#4774](https://github.com/floci-io/floci/issues/4774)
* **route53:** return the health check on a CreateHealthCheck retry ([#5298](https://github.com/floci-io/floci/issues/5298)) ([0d4b8cd](https://github.com/floci-io/floci/commit/0d4b8cda742a031ee38be5e307b6d7d55224958d))
* **s3:** answer an expired session with ExpiredToken when verifying signatures ([#5435](https://github.com/floci-io/floci/issues/5435)) ([013a921](https://github.com/floci-io/floci/commit/013a9214b50d832a73607e3df8cf32a2b8866927))
* **s3:** answer GetObject Range requests as S3 does ([#5436](https://github.com/floci-io/floci/issues/5436)) ([09a2d5c](https://github.com/floci-io/floci/commit/09a2d5c005eb625a0da2386131da2654545570d7))
* **s3:** compare conditional GET dates at second precision ([#5598](https://github.com/floci-io/floci/issues/5598)) ([ca1d74c](https://github.com/floci-io/floci/commit/ca1d74c49e1e2a5c02200fafab3df5957b240bfb))
* **s3:** evaluate identity policies per key in DeleteObjects ([#5471](https://github.com/floci-io/floci/issues/5471)) ([23c6666](https://github.com/floci-io/floci/commit/23c6666a51fd3ecc63a2982655d27f20a36a3f29))
* **s3:** limit CORS credentials header to S3-routed requests ([#5375](https://github.com/floci-io/floci/issues/5375)) ([9698c21](https://github.com/floci-io/floci/commit/9698c216c5d10ba8f052e1a9ae5fc2f846998787))
* **s3:** refuse DeleteBucket while versions or delete markers remain ([#5548](https://github.com/floci-io/floci/issues/5548)) ([e023ae9](https://github.com/floci-io/floci/commit/e023ae9ff4e251498906707ff8e08add73662c10))
* **s3:** reject a PutObject or UploadPart over 5 GiB ([#5469](https://github.com/floci-io/floci/issues/5469)) ([6d2aaba](https://github.com/floci-io/floci/commit/6d2aaba6a6e7799fdb035453636ce917aec25644)), closes [aws/aws-cli#5420](https://github.com/aws/aws-cli/issues/5420)
* **s3:** reject aws-chunked S3 uploads whose trailing checksum mismatches ([#5176](https://github.com/floci-io/floci/issues/5176)) ([37e66ee](https://github.com/floci-io/floci/commit/37e66ee371a140da0ad22314adc77b88afc49079)), closes [#5136](https://github.com/floci-io/floci/issues/5136)
* **s3:** reject unverified credentials and malformed auth in account routing ([#4825](https://github.com/floci-io/floci/issues/4825)) ([#5059](https://github.com/floci-io/floci/issues/5059)) ([d39c7e1](https://github.com/floci-io/floci/commit/d39c7e1381c49ee5dd22415ad305ada9806a7a27))
* **s3:** report EntityTooSmall for a presigned POST below the content-length-range minimum ([#5154](https://github.com/floci-io/floci/issues/5154)) ([58bad47](https://github.com/floci-io/floci/commit/58bad471f3fcd7161b5fa0726be05d6f1f74f137)), closes [#5469](https://github.com/floci-io/floci/issues/5469)
* **s3:** report the default Block Public Access settings for a new bucket ([#5434](https://github.com/floci-io/floci/issues/5434)) ([e52ce67](https://github.com/floci-io/floci/commit/e52ce672fe26458cb8531a15eb768e64ee4d9df1))
* **s3:** run S3 Select over CSV and JSON a record at a time ([#5178](https://github.com/floci-io/floci/issues/5178)) ([a0a2a5f](https://github.com/floci-io/floci/commit/a0a2a5f0d6fd2ec2e8669f2cca0be52709f65d38))
* **s3:** url-encode event record keys and add sequencer ([#5192](https://github.com/floci-io/floci/issues/5192)) ([d0fec13](https://github.com/floci-io/floci/commit/d0fec13cae55c2e24ab8d87468de2d33f89af33f))
* **s3:** validate multipart upload object size ([#5643](https://github.com/floci-io/floci/issues/5643)) ([4d6ecc1](https://github.com/floci-io/floci/commit/4d6ecc1ac23971c8a80a2926f5eaed86f1d17f79))
* **s3:** validate multipart upload part numbers ([#5655](https://github.com/floci-io/floci/issues/5655)) ([4c3d9ca](https://github.com/floci-io/floci/commit/4c3d9cad2d69a3bbb0b0800c876545e233918958))
* **scheduler:** do not base64-decode BinaryValue in universal sqs target ([#5314](https://github.com/floci-io/floci/issues/5314)) ([d0c2774](https://github.com/floci-io/floci/commit/d0c2774564e4fefd60f4bea03453b195104c6dc6))
* **scheduler:** invoke rate schedules at their first occurrence ([#5610](https://github.com/floci-io/floci/issues/5610)) ([16293b6](https://github.com/floci-io/floci/commit/16293b609b6cc5eb521a2562e5418bfe02d468f3))
* serialize IAM and STS Query timestamps with millisecond precision ([#5110](https://github.com/floci-io/floci/issues/5110)) ([3cdc9ef](https://github.com/floci-io/floci/commit/3cdc9ef22d853f2b0da8260a07231b7e498b8935))
* **servicequotas:** implement GetRequestedServiceQuotaChange ([#5561](https://github.com/floci-io/floci/issues/5561)) ([60d4d6b](https://github.com/floci-io/floci/commit/60d4d6b7a5c213a96368696f2642a74a2210aa62))
* **ses:** check a v2 raw From header only in place of a missing sender ([#5490](https://github.com/floci-io/floci/issues/5490)) ([1230aec](https://github.com/floci-io/floci/commit/1230aec42449214794348ced192199e9e29ccca8))
* **ses:** delete by id and filter by source in /_aws/ses ([#5159](https://github.com/floci-io/floci/issues/5159)) ([7c4d1c9](https://github.com/floci-io/floci/commit/7c4d1c913ad83ef3d6518f0d1bac2d147b46b29f)), closes [#4949](https://github.com/floci-io/floci/issues/4949) [#4834](https://github.com/floci-io/floci/issues/4834) [#4949](https://github.com/floci-io/floci/issues/4949)
* **ses:** match AWS tag ARN parsing and configuration set name errors ([#5235](https://github.com/floci-io/floci/issues/5235)) ([86371d8](https://github.com/floci-io/floci/commit/86371d86cbc1890416a0ec0391546770e6230541))
* **ses:** publish to an SNS topic only when its policy allows SES ([#5650](https://github.com/floci-io/floci/issues/5650)) ([46f4977](https://github.com/floci-io/floci/commit/46f4977b23df96511a88ee29f7cb0bc5c3bd614b))
* **ses:** reject malformed send addresses with AWS's messages ([#5380](https://github.com/floci-io/floci/issues/5380)) ([6d76af0](https://github.com/floci-io/floci/commit/6d76af08346486ec56160907e08ee65cc297ab1b))
* **ses:** reject non-array v2 reply-to and bulk destination members ([#5477](https://github.com/floci-io/floci/issues/5477)) ([a96cc04](https://github.com/floci-io/floci/commit/a96cc04fab0f2a0d9ef9ba0e1db1cb2567f72467))
* **ses:** require a verified sender to send email ([#5156](https://github.com/floci-io/floci/issues/5156)) ([0edb699](https://github.com/floci-io/floci/commit/0edb6993ceebc0e83a0d8349a4877c953f03a7bb)), closes [#5141](https://github.com/floci-io/floci/issues/5141)
* **ses:** return Easy DKIM signing hosted zone ([#5068](https://github.com/floci-io/floci/issues/5068)) ([58ac054](https://github.com/floci-io/floci/commit/58ac05433aa78a41e98a133b3f4d706b6a8f1cc4))
* **ses:** take v2 Raw send recipients from the MIME headers ([#5442](https://github.com/floci-io/floci/issues/5442)) ([3ad1a76](https://github.com/floci-io/floci/commit/3ad1a76507d4092835d1b75d4d25caf2abee1772))
* **ses:** word a v1 raw From header without @ as a missing user name ([#5612](https://github.com/floci-io/floci/issues/5612)) ([3ec1466](https://github.com/floci-io/floci/commit/3ec1466014d08cb058fdd3efa6a5b5e644ddb6ba))
* **signin:** accept the cross-device redirect on each partition's sign-in host ([#5557](https://github.com/floci-io/floci/issues/5557)) ([1b7c79f](https://github.com/floci-io/floci/commit/1b7c79fd9e3cf140703eb7bc52938bfc3723cdcc))
* **signin:** complete aws login --remote against an endpoint override ([#5552](https://github.com/floci-io/floci/issues/5552)) ([bcda595](https://github.com/floci-io/floci/commit/bcda5958e09de821b07f4d779893303613734125))
* **sns:** carry Status on VerificationException ([#5602](https://github.com/floci-io/floci/issues/5602)) ([c5a9642](https://github.com/floci-io/floci/commit/c5a964297eb0dafd3b1fbef4272416d09b358ba3)), closes [#5570](https://github.com/floci-io/floci/issues/5570)
* **sqs:** reject batch requests with more than 10 entries ([#5331](https://github.com/floci-io/floci/issues/5331)) ([5d5e39a](https://github.com/floci-io/floci/commit/5d5e39a15e3c7e8f06e391364d1866b0c0b81d5d)), closes [#5319](https://github.com/floci-io/floci/issues/5319)
* **ssm:** return KeyId, AllowedPattern, Tier and Policies from DescribeParameters ([#5263](https://github.com/floci-io/floci/issues/5263)) ([80f2541](https://github.com/floci-io/floci/commit/80f25417b3b7768bbc2f911ddd6845f0aac91ed3))
* **stepfunctions:** authorize a Lambda task as the state machine's execution role ([#5554](https://github.com/floci-io/floci/issues/5554)) ([c6c2c60](https://github.com/floci-io/floci/commit/c6c2c609c3aa0b08dcc0c4831c143260645fd6e8)), closes [#5079](https://github.com/floci-io/floci/issues/5079) [#5476](https://github.com/floci-io/floci/issues/5476)
* **sts:** reject session-token requests from temporary callers ([#5582](https://github.com/floci-io/floci/issues/5582)) ([43eacd5](https://github.com/floci-io/floci/commit/43eacd524c8aece1664ef325014b376e825262d6))
* **sts:** require long-term callers for federation tokens ([#5586](https://github.com/floci-io/floci/issues/5586)) ([c907eec](https://github.com/floci-io/floci/commit/c907eec9d2bd2b970a66ca096cfae7073299e3ba))
* **ui:** preserve bracketed IPv6 hosts in sidecar redirect URLs ([#5538](https://github.com/floci-io/floci/issues/5538)) ([5a90be1](https://github.com/floci-io/floci/commit/5a90be10496c75ba25705fe7cd35143b53964caa))

### Features

* **apigateway:** export deployed REST APIs as OpenAPI ([#5131](https://github.com/floci-io/floci/issues/5131)) ([1acedaf](https://github.com/floci-io/floci/commit/1acedaf06827193627db415b0944de605409f9a8))
* **cloudformation:** add optional-value and delete cleanup hooks ([#5067](https://github.com/floci-io/floci/issues/5067)) ([07b529e](https://github.com/floci-io/floci/commit/07b529e150760a4e66c6260e003c68b0459346b3))
* **cloudformation:** pass Lambda DurableConfig through ([#5218](https://github.com/floci-io/floci/issues/5218)) ([ee2d1a6](https://github.com/floci-io/floci/commit/ee2d1a68a6c46e0a9fa538bb2a83ef09d5c448eb))
* **cloudformation:** provision Application Auto Scaling targets and policies ([#5407](https://github.com/floci-io/floci/issues/5407)) ([bfa9c2f](https://github.com/floci-io/floci/commit/bfa9c2fbcc5a8fff4faa99c4c399117674c70e78))
* **cloudformation:** provision AWS::ApiGatewayV2::DomainName and ApiMapping ([#5038](https://github.com/floci-io/floci/issues/5038)) ([85e0061](https://github.com/floci-io/floci/commit/85e0061a6f721ee832fcfca027e1c5afcfb18b85))
* **cloudformation:** provision AWS::BedrockAgentCore::Runtime, RuntimeEndpoint and Memory ([#5226](https://github.com/floci-io/floci/issues/5226)) ([f50437e](https://github.com/floci-io/floci/commit/f50437efba236ce2afa13f35c80fbaf8ff0708fd))
* **cloudformation:** provision CloudFront public keys, key groups and functions ([#5390](https://github.com/floci-io/floci/issues/5390)) ([61fe304](https://github.com/floci-io/floci/commit/61fe304619634bc73a13373c0c88fd759c004ff2))
* **cloudformation:** provision Cognito resource servers ([#4832](https://github.com/floci-io/floci/issues/4832)) ([ebae2ba](https://github.com/floci-io/floci/commit/ebae2ba0e090b659cf8d050bfd08396418826a5f))
* **cloudformation:** provision ElastiCache cache clusters and subnet groups ([#5307](https://github.com/floci-io/floci/issues/5307)) ([475d230](https://github.com/floci-io/floci/commit/475d230ebc341261d68e7fd4c82c69dfaca21201))
* **cloudformation:** provision ElastiCache serverless caches ([#5423](https://github.com/floci-io/floci/issues/5423)) ([b8e6283](https://github.com/floci-io/floci/commit/b8e628356c0bb0a7ecb80a057c9b263e9e10641a))
* **cloudformation:** provision ElastiCache users and user groups ([#5422](https://github.com/floci-io/floci/issues/5422)) ([86b3258](https://github.com/floci-io/floci/commit/86b32584f3acf218e291f554286bb1f31350677f))
* **cloudformation:** provision Scheduler schedules ([#4834](https://github.com/floci-io/floci/issues/4834)) ([f6c8ebd](https://github.com/floci-io/floci/commit/f6c8ebd5a0d10508d43fba69bdb84a2dc7fd8c10))
* **cloudformation:** refuse updates after a failed rollback and add ContinueUpdateRollback ([#4949](https://github.com/floci-io/floci/issues/4949)) ([c4a809f](https://github.com/floci-io/floci/commit/c4a809f47f81659ad56cbcf648e363a1ce378d40))
* **codeartifact:** add DeletePackage for all package formats ([#5320](https://github.com/floci-io/floci/issues/5320)) ([ceab47e](https://github.com/floci-io/floci/commit/ceab47e78593b38304898677b9a12e5663b7801d))
* **codeartifact:** add DescribePackage for all package formats ([#5308](https://github.com/floci-io/floci/issues/5308)) ([e452ce8](https://github.com/floci-io/floci/commit/e452ce8671b85b3525dd6ad8502fe0577320ad34))
* **codeartifact:** add PutPackageOriginConfiguration ([#5381](https://github.com/floci-io/floci/issues/5381)) ([3ff5529](https://github.com/floci-io/floci/commit/3ff5529fadd6ba6eaa7c27d16a8d9fd24f3aadb4))
* **codeartifact:** compute DescribeDomain's assetSizeBytes for every format ([#5484](https://github.com/floci-io/floci/issues/5484)) ([6b0d0bc](https://github.com/floci-io/floci/commit/6b0d0bc378033ba8ead76754fc9c49b40edf2c55))
* **codeartifact:** implement GetPackageVersionReadme ([#5644](https://github.com/floci-io/floci/issues/5644)) ([8f90702](https://github.com/floci-io/floci/commit/8f907023b2dc430db984bbd00dda9c82408b72c9))
* **codepipeline:** roll back a single stage from a successful target execution ([#4618](https://github.com/floci-io/floci/issues/4618)) ([f661923](https://github.com/floci-io/floci/commit/f661923fafc1f08912e07efb85267405faddb5d8))
* **cognito:** accept the refresh_token grant on the OAuth token endpoint ([#4948](https://github.com/floci-io/floci/issues/4948)) ([2d7ebcb](https://github.com/floci-io/floci/commit/2d7ebcb51c4c16a37001bc69c8f139de9c04f0b9))
* **cognito:** serve the OAuth token revocation endpoint ([#4936](https://github.com/floci-io/floci/issues/4936)) ([1a0afce](https://github.com/floci-io/floci/commit/1a0afce7ec1c2c07a379edca03648c6f8d8bb02f))
* **cognito:** support passkeys (WebAuthn) registration and sign-in ([#5102](https://github.com/floci-io/floci/issues/5102)) ([5092713](https://github.com/floci-io/floci/commit/5092713a6edfe4500eab7a48f3b066d0dbaa4f82))
* **cognito:** support TOTP MFA when MFA is optional ([#5101](https://github.com/floci-io/floci/issues/5101)) ([a5db397](https://github.com/floci-io/floci/commit/a5db3975c45cf313a45bc3285b3360dc5d31816c))
* **core:** make the Docker call timeout configurable ([#5431](https://github.com/floci-io/floci/issues/5431)) ([9810005](https://github.com/floci-io/floci/commit/98100054a84e7a3f74b99f93a866e84886fb9a9c))
* **ec2:** support transit gateway peering attachments ([#5122](https://github.com/floci-io/floci/issues/5122)) ([e22bd2c](https://github.com/floci-io/floci/commit/e22bd2c59adc622702911e87df38eabaa609994e))
* **eks:** join EC2 instances to a cluster as nodes ([#5091](https://github.com/floci-io/floci/issues/5091)) ([6fc957a](https://github.com/floci-io/floci/commit/6fc957a3b407be878173f46e3faa805ec10a6c1e))
* **elasticache:** add serverless cache APIs ([#5366](https://github.com/floci-io/floci/issues/5366)) ([bac2c7c](https://github.com/floci-io/floci/commit/bac2c7cbf98a89b610962e9955c6ee45d557253a)), closes [#5400](https://github.com/floci-io/floci/issues/5400)
* **elasticache:** add user groups and associate them with replication groups ([#4435](https://github.com/floci-io/floci/issues/4435)) ([0848fa6](https://github.com/floci-io/floci/commit/0848fa6a4874a1635dab6b5baf8d11ecb86900c8))
* **guardduty:** add Malware Protection plans and AWS::GuardDuty::MalwareProtectionPlan ([#5373](https://github.com/floci-io/floci/issues/5373)) ([daef71c](https://github.com/floci-io/floci/commit/daef71ca76794f579a587393a93cdd8a96f44a6d)), closes [#4657](https://github.com/floci-io/floci/issues/4657)
* **iam:** change the calling user's console password ([#5546](https://github.com/floci-io/floci/issues/5546)) ([5ea632c](https://github.com/floci-io/floci/commit/5ea632cc13356cf3046c1ae777a28de0ae5f8385))
* **iam:** generate and read the Organizations access report ([#5467](https://github.com/floci-io/floci/issues/5467)) ([4e76948](https://github.com/floci-io/floci/commit/4e769484df86495340d6844d1daed6896ff511dd))
* **iam:** model account properties and outbound web identity federation ([#5177](https://github.com/floci-io/floci/issues/5177)) ([04a3b97](https://github.com/floci-io/floci/commit/04a3b97346363cc4e79ee1fb3f99ede74093c449))
* **iam:** populate aws:username, aws:userid and aws:PrincipalType ([#5568](https://github.com/floci-io/floci/issues/5568)) ([287d683](https://github.com/floci-io/floci/commit/287d683da727b8c03804146c50eead61b80f0fd0)), closes [#5576](https://github.com/floci-io/fl…
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

bug Something isn't working rds-data Amazon RDS Data API released

Projects

None yet

Development

Successfully merging this pull request may close these issues.

[BUG] RDS Data: numeric parameter names like :1 cause a syntax error

3 participants