Bump aws/aws-sdk-php from 3.389.2 to 3.391.0 in /lam

[dependabot]

Bumps aws/aws-sdk-php from 3.389.2 to 3.391.0.

Release notes

Sourced from aws/aws-sdk-php's releases.

Version 3.391.0

• Aws\S3 - AWS Backup now lets you create read-only access points for Amazon S3 recovery points, enabling you to access backup data using S3 APIs without initiating a restore.
• Aws\MarketplaceDiscovery - GetOfferTerms now returns netPaymentTerm in offerTerms, specifying payment due period after invoice date. The paymentDuePeriod field uses ISO 8601 duration format (e.g., "P30D" for net 30 days). This is a backward-compatible addition. See API documentation for full structure and examples.
• Aws\EC2 - Adds a new optional IncludeLocalZones parameter to the Spot Placement Score API that defaults to false. When set to true, the Spot Placement Score API will consider the relevant Local Zones with Spot capacity when computing the Spot Placement Score.
• Aws\AutoScaling - EC2 Auto Scaling now supports being managed by other AWS services via the operator field.
• Aws\BedrockAgentCore - Add support for capacity provider sessions in Amazon Bedrock AgentCore. Customers can now delete an active session running on a runtime instance launched through their capacity provider.
• Aws\Kafka - MSK Clusters can now deliver authorizer logs alongside broker logs to the destinations defined by you
• Aws\AgentRegistry - Agent Registry's Public Preview release
• Aws\MarketplaceAgreement - GetAgreementTerms now returns a new term variant in AcceptedTerm, netPaymentTerm, with a paymentDuePeriod field (example "P30D").
• Aws\MediaTailor - AWS Elemental MediaTailor now supports concurrent function execution. The new Concurrent Executor function type runs multiple independent child functions in parallel within a single lifecycle hook, reducing pipeline latency to the duration of the slowest call instead of the sum of all calls.
• Aws\Backup - AWS Backup now lets you create read-only access points for Amazon S3 recovery points, enabling you to access backup data using S3 APIs without initiating a restore.
• Aws\AgentRegistryControl - Agent Registry's Public Preview release
• Aws\SageMaker - Releases new Model Customization SequenceLength parameter for Training and g7 instance types for Training and Processing.
• Aws\DeviceFarm - Adds support for service generated insights across runs, jobs, and tests.
• Aws\BedrockAgentCoreControl - Add support for Gateway rate limits and Runtime instances in Amazon Bedrock AgentCore. Customers can now configure rate limits scoped to control request rates, token consumption rates, and active connection rates. Customers can now create capacity providers to launch runtimes on their EC2 instances.
• Aws\SecurityHub - Security Hub is adding a new public API, ListFreeTrialStatusesV2 to describe the free trial statuses of the Security Hub service and its opt-in features.
• Aws\GameLift - Adds support for C8a, C8i, C9g, M8a, M8i, and M9g EC2 instance type families for managed EC2 and container fleets. Also adds explicit anchors on most string regexes.
• Aws\SocialMessaging - Add support for WhatsApp Conversions APIs.
• Aws\CloudWatchLogs - This release adds index category support to the CloudWatch Logs DescribeFieldIndexes API. Customers can filter and identify DEFAULT, CUSTOM, AUTO, and INACTIVE field indexes.

Version 3.390.5

• Aws\ECS - New enum values added for Agent Connectivity issues
• Aws\ACMPCA - Private Certificate Authority service now supports RSASSA-PSS signing algorithm.
• Aws\Glue - Added the PutDataCatalogExportConfiguration to export Glue Data Catalog metadata to systems tables stored in S3 Tables.
• Aws\BedrockAgentCoreControl - Adding support for fine-grained access control for AgentCore Memory through managed AgentCore Gateway HTTP Connectors.
• Aws\Deadline - AWS Deadline Cloud now reports persistent volume costs alongside compute and license costs. Customers can view per-fleet storage costs in Usage Explorer by selecting the Usage Type grouping, helping them better understand the costs of their infrastructure.

Version 3.390.4

• Aws\DynamoDB - Vector indexes are a type of index in Amazon DynamoDB that enable similarity search on vector embedding stored in your table items. Vector indexes use approximate nearest neighbor search to find items whose vectors are most similar to a query vector that you provide.
• Aws\Organizations - Improved accuracy of CloudTrail event documentation for AWS Organizations membership operations.
• Aws\SSOAdmin - AWS IAM Identity Center now lets you create organization-level instances without enabling multi-account permissions. You can enable multi-account permissions during instance creation or later via console or API, which then provisions the necessary service-linked roles.
• Aws\Inspector2 - Adding Azure SBOM export capability.
• Aws\EC2 - Amazon EC2 now supports Application Status Checks, a new status check that monitors your application's health through configurable HTTP(S) paths and ports, so you can detect and automatically respond to application-level impairments.
• Aws\Connect - Amazon Connect Customer now supports up to 50 attachments per email, increased from the previous limit of 10. The individual maximum attachment size limit of 20 MB and the total email size limit of 25 MB still hold true.
• Aws\WorkSpaces - Added ClientExperiencePolicy to ClientProperties object for ModifyClientProperties and DescribeClientProperties APIs.
• Aws\PartnerCentralSelling - Partners can now create leads with only 5 required fields and free-text values for all other fields, reducing import friction. Engagement invitations now include enrichment data (propensity scores, lead readiness) directly in the response.
• Aws\DSQL - UpdateCluster now checks the RemovePeerCluster permission on the specific cluster being removed, not a wildcard and docs now clarify how to set kmsEncryptionKey so the cluster uses the AWS-owned key.
• Aws\IAM - Updating endpoint generation logic

Version 3.390.3

• Aws\WAFV2 - Updated descriptions for number of PreParseTextTransformations allowed per rule statement
• Aws\TimestreamInfluxDB - This release adds support for customer-managed backup restore, and encryption of new DbInstances and DbClusters using customer-managed KMS keys.
• Aws\ObservabilityAdmin - Launch CMK support for Telemetry Enablement Organization and Account Rules.
• Aws\EKSAuth - Added eksNodeName, instanceId, and zone optional parameters to the AssumeRoleForPodIdentity API.
• Aws\NetworkFirewall - This launch allows customers to use Network Firewall as an explicit Proxy and protect their workloads against threat of data exfiltration.
• Aws\MediaConvert - Updates Kantar server URL validation to accept Fifty5Blue domain. Adds support for output to S3 Glacier Instant Retrieval.
• Aws\DirectConnect - Added route visibility support for AWS Direct Connect, allowing customers to call ListVirtualInterfaceRoutes to view the BGP routes including AS path and BGP communities advertised over their virtual interfaces.

Version 3.390.2

• Aws\Outposts - Adds the "EKS" value to the AWSServiceName enum and marks the Address field as sensitive.

... (truncated)

Commits

• 7dbeb86 3.391.0 release
• 89fe769 Update models for release
• c56ba4a 3.390.5 release
• 9a205dd Update models for release
• 51115bd 3.390.4 release
• f0d52a3 Update models for release
• 8026ec3 3.390.3 release
• f5ffcfa Update models for release
• a09e95b 3.390.2 release
• 5263f8f Update models for release
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[deepsource-io]

DeepSource Code Review

We reviewed changes in 1274960...50ee68a on this pull request. Below is the summary for the review, and you can see the individual issues we found as inline review comments.

See full review on DeepSource ↗

PR Report Card

Overall Grade

Security   Reliability   Complexity   Hygiene

Code Review Summary

Analyzer	Status	Updated (UTC)	Details
PHP		Aug 10, 2026 5:32p.m.	Review ↗

---

Important

AI Review is run only on demand for your team. We're only showing results of static analysis review right now. To trigger AI Review, comment @deepsourcebot review on this thread.