Bump aws/aws-sdk-php from 3.389.2 to 3.393.3 in /lam

[dependabot]

Bumps aws/aws-sdk-php from 3.389.2 to 3.393.3.

Release notes

Sourced from aws/aws-sdk-php's releases.

Version 3.393.3

• Aws\CloudFront - Added SigV4a as a supported signing protocol for Origin Access Control (OAC), enabling CloudFront to sign requests to Amazon S3 Multi-Region Access Point (S3-MRAP) origins.
• Aws\Lambda - Adds support for full JSON resource-based policies, enabling customers to create, retrieve, update, and delete function resource policies as complete JSON documents.
• Aws\SageMaker - Added IAM Identity Center (IdC) support to CreatePartnerApp and UpdatePartnerApp APIs. Added Customer Managed Key (CMK) support to CreateMlflowApp and DescribeMlflowApp.
• Aws\Batch - AWS Batch now supports a new compute environment type that provides fully managed EC2 capacity with broader compute flexibility than Fargate, including GPU instances, bare metal, and specific instance type selection, without infrastructure management overhead.
• Aws\Amplify - Increased the maximum allowed length from 255 to 4,096 characters to support longer access tokens.
• Aws\DirectConnect - This release adds custom route prefix pool allocations for Direct Connect. You can set IPv4 and IPv6 route prefix counts on private and transit virtual interfaces, and view pool size and unallocated counts on connections and LAGs, plus direct connect gateway attachment prefix allocation totals.
• Aws\EC2 - EC2 marks UEFI instance metadata field as sensitive.
• Aws\ARCRegionSwitch - Adds support for Rds switchover read replica for Oracle databases in Region switch plans
• Aws\SESv2 - Amazon SES now supports per-message tracking overrides. You can use the new ConfigurationOverrides parameter in SendEmail and SendBulkEmail to enable or disable open and click tracking for individual messages without changing your account-level or configuration set settings.
• Aws\PricingPlanManager - Documentation update for the CreateSubscription API to correct the default value of the approval mode parameter. The default value for paid subscriptions is MANUAL, not IMMEDIATE as previously documented. The default value remains IMMEDIATE for FREE tier subscriptions.

Version 3.393.2

• Aws\RedshiftServerless - Amazon Redshift Enhanced System Table Retention that allows customers to store their system table data directly in S3 Tables in customer's account instead of Redshift Managed Storage
• Aws\VPCLattice - Amazon VPC Lattice now supports modification of private DNS options on Service Network VPC Associations
• Aws\AccountAccess - Adds throttling exceptions to operation outputs that were previously inconsistent with other operations.
• Aws\MediaLive - AWS Elemental MediaLive now supports video cropping and output positioning. Use cropRectangle and outputPositionRectangle to position the encoded video within the output frame, with the surrounding area filled with black.
• Aws\BedrockAgentCore - AgentCore Memory now supports Flexible Namespaces and Non-Conversational Payloads in CreateEvent API
• Aws\Redshift - Amazon Redshift enhanced System Table retention that allows customers to store their system table data directly in S3 Tables in customer's account instead of Redshift Managed Storage
• Aws\Batch - AWS Batch now supports managing CloudWatch Container Insights on compute environments via CreateComputeEnvironment and UpdateComputeEnvironment.
• Aws\BedrockAgentCoreControl - AgentCore Memory now supports Flexible Namespaces
• Aws\EKS - Adds support for EKS cluster certificate authorities (CA)

Version 3.393.1

• Aws\MediaLive - AWS Elemental MediaLive now supports SCTE-35 marker passthrough without IDR frame insertion for CMAF Ingest, MediaPackage V2, and transport stream outputs.
• Aws\MarketplaceCatalog - Introducing two new APIs, DescribeAssessment and ListAssessments. These APIs expose validation issues on Marketplace resources. The validation issues are exposed via a newly created resource called Assessment.
• Aws\Batch - Update AWS Batch documentation with newer Fargate Supported configurations, notes, and fix broken Docker link re-directs.
• Aws\WorkSpaces - Amazon WorkSpaces now supports nested virtualization, allowing you to run hypervisors and virtualization-based workloads within your WorkSpaces. You can enable or disable nested virtualization when creating a WorkSpace or by modifying an existing WorkSpace's properties.
• Aws\Outposts - AWS Outposts now supports VPC Endpoint configuration in CreatePrivateConnectivityConfig, enabling scoped private connectivity with provisioning role creation for secure outpost installations
• Aws\EC2 - Doc release for CreateImage support for instances with local snapshots in Outpost
• Aws\EntityResolution - Added ResourceNotFoundException to DeleteSchemaMapping, DeleteMatchingWorkflow, DeleteIdMappingWorkflow, and DeleteIdNamespace. These operations now return a 404 ResourceNotFoundException (previously a 200 Success) when the target resource does not exist.

Version 3.393.0

• Aws\Handler - Adds support for Guzzle transport sharing (persistent connections) via the new transport_sharing client option.
• Aws\GeoMaps - Amazon Location Service now supports POI density and category filtering on dynamic maps. The GetStyleDescriptor API adds two optional parameters. PoiDensity (Off to VeryDense) controls POI volume, and PoiCategories filters by up to nine categories. Available on HERE and Grab map styles.
• Aws\Connect - This release adds new APIs to create, describe, update, delete, and list extraction definitions, enabling customers to manage lifecycle of extraction definition resources. Additionally, this release adds new event sources for Rules related to ACW and new action to Extract Information.
• Aws\BedrockAgentCoreControl - Adds implementations of third-party evaluators, both managed-as-a-service and as templates within custom evaluators.
• Aws\drs - AWS Elastic Disaster Recovery (AWS DRS) now offers Recovery Plans to recover multi-server applications in the right order in one action. Define the launch sequence once, with ordered steps and wait times, and DRS runs it automatically. Validate with non-disruptive drills and monitor in real time.
• Aws\ECR - Documentation update for the ECR PutReplicationConfiguration API to increase the replication rule limit from 10 to 25
• Aws\BedrockAgentRuntime - AgenticRetrieveStream API now supports Amazon Bedrock AgentCore Memory. Use the new memoryConfiguration parameter to continue a session from short-term memory and retrieve from long-term memory.
• Aws\Organizations - Add new Transfer Responsibility error codes and document related CloudTrail events for accepting and terminating a Transfer Responsibility.

Version 3.392.3

• Aws\RedshiftServerless - Amazon Redshift now unlocks a locked admin user account and resets the failed-login counter when you update the admin password using the UpdateNamespace API. This option is available only when account lockout security is enabled.
• Aws\Glue - Added support for associating glossary terms with iterable form items, such as table columns.
• Aws\BedrockAgentCore - Add support for the Machine Payments Protocol (MPP) and x402 upto scheme payments protocol in Amazon Bedrock AgentCore Payments. Customers can now pay for MPP-gated resources and also pay services which requires upto scheme in x402
• Aws\ObservabilityAdmin - CloudWatch Logs centralization rules now support tag propagation. You can configure a TagPropagationConfiguration on your centralization rule to automatically sync resource tags from source to destination log groups, with configurable conflict resolution strategies.
• Aws\Redshift - Amazon Redshift now unlocks a locked admin user account and resets the failed-login counter when you update the admin password using the ModifyCluster API. This option is available only when account lockout security is enabled.
• Aws\BedrockAgentRuntime - Adds CheckIngestedDocumentAcl and GetIngestedDocumentAcl APIs to Amazon Bedrock Knowledge Bases. Customers can verify user access to documents based on ingested ACLs and retrieve full ACL details including allow and deny entries, enabling validation of ACL ingestion without test retrievals.
• Aws\MWAAServerless - Adds support for Consuming code for MWAA Serverless

... (truncated)

Commits

• ef4cc0f 3.393.3 release
• b2507bc Update models for release
• 0a46ff5 3.393.2 release
• 7b24aa1 Update models for release
• 1401412 3.393.1 release
• 59af3c3 Update models for release
• 40d604b chore: integrate build workflow to PRs (#3330)
• acabde1 3.393.0 release
• a83a60b Update models for release
• 920f31c Add support for transport sharing (#3335)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[deepsource-io]

DeepSource Code Review

We reviewed changes in 1274960...28f3685 on this pull request. Below is the summary for the review, and you can see the individual issues we found as inline review comments.

See full review on DeepSource ↗

PR Report Card

Overall Grade

Security   Reliability   Complexity   Hygiene

Code Review Summary

Analyzer	Status	Updated (UTC)	Details
PHP		Aug 24, 2026 5:32p.m.	Review ↗

---

Important

AI Review is run only on demand for your team. We're only showing results of static analysis review right now. To trigger AI Review, comment @deepsourcebot review on this thread.