Skip to content

Commit 0cd20d2

Browse files
aws-sdk-python-automationaws-sdk-python-automation
committed
Merge branch 'release-1.20.47'
* release-1.20.47: Bumping version to 1.20.47 Add changelog entries from botocore Update TLS enforcement documentation
2 parents 4ac0795 + 4728a44 commit 0cd20d2

File tree

6 files changed

+118
-6
lines changed

6 files changed

+118
-6
lines changed

‎.changes/1.20.47.json

+62
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,62 @@
1+
[
2+
{
3+
"category": "``emr``",
4+
"description": "[``botocore``] Update emr client to latest version",
5+
"type": "api-change"
6+
},
7+
{
8+
"category": "``personalize``",
9+
"description": "[``botocore``] Adding minRecommendationRequestsPerSecond attribute to recommender APIs.",
10+
"type": "api-change"
11+
},
12+
{
13+
"category": "Request headers",
14+
"description": "[``botocore``] Adding request headers with retry information.",
15+
"type": "enhancement"
16+
},
17+
{
18+
"category": "``appflow``",
19+
"description": "[``botocore``] Launching Amazon AppFlow Custom Connector SDK.",
20+
"type": "api-change"
21+
},
22+
{
23+
"category": "``dynamodb``",
24+
"description": "[``botocore``] Documentation update for DynamoDB Java SDK.",
25+
"type": "api-change"
26+
},
27+
{
28+
"category": "``iot``",
29+
"description": "[``botocore``] This release adds support for configuring AWS IoT logging level per client ID, source IP, or principal ID.",
30+
"type": "api-change"
31+
},
32+
{
33+
"category": "``comprehend``",
34+
"description": "[``botocore``] Amazon Comprehend now supports sharing and importing custom trained models from one AWS account to another within the same region.",
35+
"type": "api-change"
36+
},
37+
{
38+
"category": "``ce``",
39+
"description": "[``botocore``] Doc-only update for Cost Explorer API that adds INVOICING_ENTITY dimensions",
40+
"type": "api-change"
41+
},
42+
{
43+
"category": "``fis``",
44+
"description": "[``botocore``] Added GetTargetResourceType and ListTargetResourceTypesAPI actions. These actions return additional details about resource types and parameters that can be targeted by FIS actions. Added a parameters field for the targets that can be specified in experiment templates.",
45+
"type": "api-change"
46+
},
47+
{
48+
"category": "``es``",
49+
"description": "[``botocore``] Allows customers to get progress updates for blue/green deployments",
50+
"type": "api-change"
51+
},
52+
{
53+
"category": "``glue``",
54+
"description": "[``botocore``] Launch Protobuf support for AWS Glue Schema Registry",
55+
"type": "api-change"
56+
},
57+
{
58+
"category": "``elasticache``",
59+
"description": "[``botocore``] Documentation update for AWS ElastiCache",
60+
"type": "api-change"
61+
}
62+
]

‎CHANGELOG.rst

+17
Original file line numberDiff line numberDiff line change
@@ -2,6 +2,23 @@
22
CHANGELOG
33
=========
44

5+
1.20.47
6+
=======
7+
8+
* api-change:``emr``: [``botocore``] Update emr client to latest version
9+
* api-change:``personalize``: [``botocore``] Adding minRecommendationRequestsPerSecond attribute to recommender APIs.
10+
* enhancement:Request headers: [``botocore``] Adding request headers with retry information.
11+
* api-change:``appflow``: [``botocore``] Launching Amazon AppFlow Custom Connector SDK.
12+
* api-change:``dynamodb``: [``botocore``] Documentation update for DynamoDB Java SDK.
13+
* api-change:``iot``: [``botocore``] This release adds support for configuring AWS IoT logging level per client ID, source IP, or principal ID.
14+
* api-change:``comprehend``: [``botocore``] Amazon Comprehend now supports sharing and importing custom trained models from one AWS account to another within the same region.
15+
* api-change:``ce``: [``botocore``] Doc-only update for Cost Explorer API that adds INVOICING_ENTITY dimensions
16+
* api-change:``fis``: [``botocore``] Added GetTargetResourceType and ListTargetResourceTypesAPI actions. These actions return additional details about resource types and parameters that can be targeted by FIS actions. Added a parameters field for the targets that can be specified in experiment templates.
17+
* api-change:``es``: [``botocore``] Allows customers to get progress updates for blue/green deployments
18+
* api-change:``glue``: [``botocore``] Launch Protobuf support for AWS Glue Schema Registry
19+
* api-change:``elasticache``: [``botocore``] Documentation update for AWS ElastiCache
20+
21+
522
1.20.46
623
=======
724

‎boto3/__init__.py

+1-1
Original file line numberDiff line numberDiff line change
@@ -18,7 +18,7 @@
1818

1919

2020
__author__ = 'Amazon Web Services'
21-
__version__ = '1.20.46'
21+
__version__ = '1.20.47'
2222

2323

2424
# The default Boto3 session; autoloaded when needed.

‎docs/source/guide/security.rst

+36-3
Original file line numberDiff line numberDiff line change
@@ -192,9 +192,9 @@ To ensure the SDK or CLI doesn't not negotiate for anything earlier than TLS 1.2
192192
#!/usr/bin/env bash
193193
set -e
194194

195-
OPENSSL_VERSION="1.1.1d"
195+
OPENSSL_VERSION="1.1.1m"
196196
OPENSSL_PREFIX="/opt/openssl-with-min-tls1_2"
197-
PYTHON_VERSION="3.8.1"
197+
PYTHON_VERSION="3.9.10"
198198
PYTHON_PREFIX="/opt/python-with-min-tls1_2"
199199

200200

@@ -223,6 +223,39 @@ After you run this script, you should be able to use this newly installed versio
223223

224224
This should print out::
225225

226-
Python 3.8.1
226+
Python 3.9.10
227227

228228
To confirm this new version of Python does not negotiate a version earlier than TLS 1.2, rerun the steps from `Determining Supported Protocols`_ using the newly installed Python version (that is, ``/opt/python-with-min-tls1_2/bin/python3``).
229+
230+
Enforcing TLS 1.3
231+
------------------
232+
233+
The process of ensuring the AWS SDK for Python uses no TLS version earlier than TLS 1.3 is the same as the instructions in the `Enforcing TLS 1.2`_ section with some minor modifications, primarily adding the ``no-tls1_2`` flag to the openssl build configuration.
234+
235+
The following are the modified build instructions::
236+
237+
238+
#!/usr/bin/env bash
239+
set -e
240+
241+
OPENSSL_VERSION="1.1.1m"
242+
OPENSSL_PREFIX="/opt/openssl-with-min-tls1_3"
243+
PYTHON_VERSION="3.9.10"
244+
PYTHON_PREFIX="/opt/python-with-min-tls1_3"
245+
246+
247+
curl -O "https://www.openssl.org/source/openssl-$OPENSSL_VERSION.tar.gz"
248+
tar -xzf "openssl-$OPENSSL_VERSION.tar.gz"
249+
cd openssl-$OPENSSL_VERSION
250+
./config --prefix=$OPENSSL_PREFIX no-ssl3 no-tls1 no-tls1_1 no-tls1_2 no-shared
251+
make > /dev/null
252+
sudo make install_sw > /dev/null
253+
254+
255+
cd /tmp
256+
curl -O "https://www.python.org/ftp/python/$PYTHON_VERSION/Python-$PYTHON_VERSION.tgz"
257+
tar -xzf "Python-$PYTHON_VERSION.tgz"
258+
cd Python-$PYTHON_VERSION
259+
./configure --prefix=$PYTHON_PREFIX --with-openssl=$OPENSSL_PREFIX --disable-shared > /dev/null
260+
make > /dev/null
261+
sudo make install > /dev/null

‎setup.cfg

+1-1
Original file line numberDiff line numberDiff line change
@@ -3,7 +3,7 @@ universal = 0
33

44
[metadata]
55
requires_dist =
6-
botocore>=1.23.46,<1.24.0
6+
botocore>=1.23.47,<1.24.0
77
jmespath>=0.7.1,<1.0.0
88
s3transfer>=0.5.0,<0.6.0
99

‎setup.py

+1-1
Original file line numberDiff line numberDiff line change
@@ -13,7 +13,7 @@
1313

1414

1515
requires = [
16-
'botocore>=1.23.46,<1.24.0',
16+
'botocore>=1.23.47,<1.24.0',
1717
'jmespath>=0.7.1,<1.0.0',
1818
's3transfer>=0.5.0,<0.6.0'
1919
]

0 commit comments

Comments
 (0)