build(deps): bump aws from 2.34.3 to 2.34.15

cmd/carapace-aws/cmd/botocore/aws.apigateway.yaml

@@ -140,6 +140,7 @@ commands:
                 - SecurityPolicy_TLS13_1_3_FIPS_2025_09
                 - SecurityPolicy_TLS13_1_2_PFS_PQ_2025_09
                 - SecurityPolicy_TLS13_1_2_FIPS_PQ_2025_09
+                - SecurityPolicy_TLS13_1_2_FIPS_PFS_PQ_2025_09
                 - SecurityPolicy_TLS13_1_2_PQ_2025_09
                 - SecurityPolicy_TLS13_1_2_2021_06
                 - SecurityPolicy_TLS13_2025_EDGE
@@ -228,6 +229,7 @@ commands:
                 - SecurityPolicy_TLS13_1_3_FIPS_2025_09
                 - SecurityPolicy_TLS13_1_2_PFS_PQ_2025_09
                 - SecurityPolicy_TLS13_1_2_FIPS_PQ_2025_09
+                - SecurityPolicy_TLS13_1_2_FIPS_PFS_PQ_2025_09
                 - SecurityPolicy_TLS13_1_2_PQ_2025_09
                 - SecurityPolicy_TLS13_1_2_2021_06
                 - SecurityPolicy_TLS13_2025_EDGE

cmd/carapace-aws/cmd/botocore/aws.backup.yaml

@@ -251,7 +251,7 @@ commands:
         --framework-name=!: The unique name of a framework.
         --generate-cli-skeleton: Prints a JSON skeleton to standard output without sending an API request.
     - name: describe-global-settings
-      description: Describes whether the Amazon Web Services account is opted in to cross-account backup.
+      description: Describes whether the Amazon Web Services account has enabled different cross-account management options, including cross-account backup, multi-party approval, and delegated administrator.
       flags:
         --cli-input-json=: Read arguments from the JSON string provided.
         --cli-input-yaml=: Read arguments from the YAML string provided.
@@ -1161,7 +1161,7 @@ commands:
         --generate-cli-skeleton: Prints a JSON skeleton to standard output without sending an API request.
         --idempotency-token=: A customer-chosen string that you can use to distinguish between otherwise identical calls to `UpdateFrameworkInput`.
     - name: update-global-settings
-      description: Updates whether the Amazon Web Services account is opted in to cross-account backup.
+      description: Updates whether the Amazon Web Services account has enabled different cross-account management options, including cross-account backup, multi-party approval, and delegated administrator.
       flags:
         --cli-input-json=: Read arguments from the JSON string provided.
         --cli-input-yaml=: Read arguments from the YAML string provided.

cmd/carapace-aws/cmd/botocore/aws.batch.yaml

@@ -74,6 +74,26 @@ commands:
             state:
                 - ENABLED
                 - DISABLED
+    - name: create-quota-share
+      description: Creates an Batch quota share.
+      flags:
+        --capacity-limits=!:
+            description: A list that specifies the quantity and type of compute capacity allocated to the quota share.
+            nargs: -1
+        --cli-input-json=: Read arguments from the JSON string provided.
+        --cli-input-yaml=: Read arguments from the YAML string provided.
+        --generate-cli-skeleton: Prints a JSON skeleton to standard output without sending an API request.
+        --job-queue=!: The Batch job queue associated with the quota share.
+        --preemption-configuration=!: Specifies the preemption behavior for jobs in a quota share.
+        --quota-share-name=!: The name of the quota share.
+        --resource-sharing-configuration=!: Specifies whether a quota share reserves, lends, or both lends and borrows idle compute capacity.
+        --state=: The state of the quota share.
+        --tags=: The tags that you apply to the quota share to help you categorize and organize your resources.
+      completion:
+        flag:
+            state:
+                - ENABLED
+                - DISABLED
     - name: create-scheduling-policy
       description: Creates an Batch scheduling policy.
       flags:
@@ -82,6 +102,7 @@ commands:
         --fairshare-policy=: The fair-share scheduling policy details.
         --generate-cli-skeleton: Prints a JSON skeleton to standard output without sending an API request.
         --name=!: The name of the fair-share scheduling policy.
+        --quota-share-policy=: The quota share scheduling policy details.
         --tags=: The tags that you apply to the scheduling policy to help you categorize and organize your resources.
     - name: create-service-environment
       description: Creates a service environment for running service jobs.
@@ -124,6 +145,13 @@ commands:
         --cli-input-yaml=: Read arguments from the YAML string provided.
         --generate-cli-skeleton: Prints a JSON skeleton to standard output without sending an API request.
         --job-queue=!: The short name or full Amazon Resource Name (ARN) of the queue to delete.
+    - name: delete-quota-share
+      description: Deletes the specified quota share.
+      flags:
+        --cli-input-json=: Read arguments from the JSON string provided.
+        --cli-input-yaml=: Read arguments from the YAML string provided.
+        --generate-cli-skeleton: Prints a JSON skeleton to standard output without sending an API request.
+        --quota-share-arn=!: The Amazon Resource Name (ARN) of the quota share.
     - name: delete-scheduling-policy
       description: Deletes the specified scheduling policy.
       flags:
@@ -205,6 +233,13 @@ commands:
         --jobs=!:
             description: A list of up to 100 job IDs.
             nargs: -1
+    - name: describe-quota-share
+      description: Returns a description of the specified quota share.
+      flags:
+        --cli-input-json=: Read arguments from the JSON string provided.
+        --cli-input-yaml=: Read arguments from the YAML string provided.
+        --generate-cli-skeleton: Prints a JSON skeleton to standard output without sending an API request.
+        --quota-share-arn=!: The Amazon Resource Name (ARN) of the quota share.
     - name: describe-scheduling-policies
       description: Describes one or more of your scheduling policies.
       flags:
@@ -236,7 +271,7 @@ commands:
         --generate-cli-skeleton: Prints a JSON skeleton to standard output without sending an API request.
         --job-id=!: The job ID for the service job to describe.
     - name: get-job-queue-snapshot
-      description: Provides a list of the first 100 `RUNNABLE` jobs associated to a single job queue and includes capacity utilization, including total usage and breakdown by share for fairshare scheduling job queues.
+      description: Provides a snapshot of job queue state, including ordering of `RUNNABLE` jobs, as well as capacity utilization for already dispatched jobs.
       flags:
         --cli-input-json=: Read arguments from the JSON string provided.
         --cli-input-yaml=: Read arguments from the YAML string provided.
@@ -299,6 +334,18 @@ commands:
         --next-token=: The `nextToken` value returned from a previous paginated `ListJobsByConsumableResource` request where `maxResults` was used and the results exceeded the value of that parameter.
         --page-size=: The size of each page to get in the AWS service call.
         --starting-token=: A token to specify where to start paginating.
+    - name: list-quota-shares
+      description: Returns a list of Batch quota shares associated with a job queue.
+      flags:
+        --cli-input-json=: Read arguments from the JSON string provided.
+        --cli-input-yaml=: Read arguments from the YAML string provided.
+        --generate-cli-skeleton: Prints a JSON skeleton to standard output without sending an API request.
+        --job-queue=!: The name or full Amazon Resource Name (ARN) of the job queue used to list quota shares.
+        --max-items=: The  total number of items to return in the command's output.
+        --max-results=: The maximum number of results returned by `ListQuotaShares` in paginated output.
+        --next-token=: The `nextToken` value that's returned from a previous paginated `ListQuotaShares` request where `maxResults` was used and the results exceeded the value of that parameter.
+        --page-size=: The size of each page to get in the AWS service call.
+        --starting-token=: A token to specify where to start paginating.
     - name: list-scheduling-policies
       description: Returns a list of Batch scheduling policies.
       flags:
@@ -407,6 +454,8 @@ commands:
         --generate-cli-skeleton: Prints a JSON skeleton to standard output without sending an API request.
         --job-name=!: The name of the service job.
         --job-queue=!: The job queue into which the service job is submitted.
+        --preemption-configuration=: Specifies the service job behavior when preempted.
+        --quota-share-name=: The quota share for the service job.
         --retry-strategy=: The retry strategy to use for failed service jobs that are submitted with this service job request.
         --scheduling-priority=: The scheduling priority of the service job.
         --service-job-type=!: The type of service job.
@@ -504,6 +553,24 @@ commands:
             state:
                 - ENABLED
                 - DISABLED
+    - name: update-quota-share
+      description: Updates a quota share.
+      flags:
+        --capacity-limits=:
+            description: A list that specifies the quantity and type of compute capacity allocated to the quota share.
+            nargs: -1
+        --cli-input-json=: Read arguments from the JSON string provided.
+        --cli-input-yaml=: Read arguments from the YAML string provided.
+        --generate-cli-skeleton: Prints a JSON skeleton to standard output without sending an API request.
+        --preemption-configuration=: Specifies the preemption behavior for jobs in a quota share.
+        --quota-share-arn=!: The Amazon Resource Name (ARN) of the quota share to update.
+        --resource-sharing-configuration=: Specifies whether a quota share reserves, lends, or both lends and borrows idle compute capacity.
+        --state=: The state of the quota share.
+      completion:
+        flag:
+            state:
+                - ENABLED
+                - DISABLED
     - name: update-scheduling-policy
       description: Updates a scheduling policy.
       flags:
@@ -512,6 +579,7 @@ commands:
         --cli-input-yaml=: Read arguments from the YAML string provided.
         --fairshare-policy=: The fair-share policy scheduling details.
         --generate-cli-skeleton: Prints a JSON skeleton to standard output without sending an API request.
+        --quota-share-policy=: The quota share scheduling policy details.
     - name: update-service-environment
       description: Updates a service environment.
       flags:
@@ -528,3 +596,11 @@ commands:
             state:
                 - ENABLED
                 - DISABLED
+    - name: update-service-job
+      description: Updates the priority of a specified service job in an Batch job queue.
+      flags:
+        --cli-input-json=: Read arguments from the JSON string provided.
+        --cli-input-yaml=: Read arguments from the YAML string provided.
+        --generate-cli-skeleton: Prints a JSON skeleton to standard output without sending an API request.
+        --job-id=!: The Batch job ID of the job to update.
+        --scheduling-priority=!: The scheduling priority for the job.

cmd/carapace-aws/cmd/botocore/aws.bedrock-agentcore-control.yaml

@@ -45,10 +45,16 @@ commands:
       description: Creates a custom browser.
       flags:
         --browser-signing=: The browser signing configuration that enables cryptographic agent identification using HTTP message signatures for web bot authentication.
+        --certificates=:
+            description: A list of certificates to install in the browser.
+            nargs: -1
         --cli-input-json=: Read arguments from the JSON string provided.
         --cli-input-yaml=: Read arguments from the YAML string provided.
         --client-token=: A unique, case-sensitive identifier to ensure that the operation completes no more than one time.
         --description=: The description of the browser.
+        --enterprise-policies=:
+            description: A list of enterprise policy files for the browser.
+            nargs: -1
         --execution-role-arn=: The Amazon Resource Name (ARN) of the IAM role that provides permissions for the browser to access Amazon Web Services services.
         --generate-cli-skeleton: Prints a JSON skeleton to standard output without sending an API request.
         --name=!: The name of the browser.
@@ -68,6 +74,9 @@ commands:
     - name: create-code-interpreter
       description: Creates a custom code interpreter.
       flags:
+        --certificates=:
+            description: A list of certificates to install in the code interpreter.
+            nargs: -1
         --cli-input-json=: Read arguments from the JSON string provided.
         --cli-input-yaml=: Read arguments from the YAML string provided.
         --client-token=: A unique, case-sensitive identifier to ensure that the operation completes no more than one time.
@@ -156,6 +165,7 @@ commands:
             description: The memory strategies to use for this memory.
             nargs: -1
         --name=!: The name of the memory.
+        --stream-delivery-resources=: Configuration for streaming memory record data to external resources.
         --tags=: A map of tag keys and values to assign to an AgentCore Memory.
     - name: create-oauth2-credential-provider
       description: Creates a new OAuth2 credential provider.
@@ -901,6 +911,7 @@ commands:
         --memory-execution-role-arn=: The ARN of the IAM role that provides permissions for the AgentCore Memory resource.
         --memory-id=!: The unique identifier of the memory to update.
         --memory-strategies=: The memory strategies to add, modify, or delete.
+        --stream-delivery-resources=: Configuration for streaming memory record data to external resources.
     - name: update-oauth2-credential-provider
       description: Updates an existing OAuth2 credential provider.
       flags:

cmd/carapace-aws/cmd/botocore/aws.bedrock-agentcore.yaml

@@ -186,7 +186,7 @@ commands:
       flags:
         --accept=: The desired MIME type for the response from the agent runtime.
         --account-id=: The identifier of the Amazon Web Services account for the agent runtime resource.
-        --agent-runtime-arn=!: The Amazon Web Services Resource Name (ARN) of the agent runtime to invoke.
+        --agent-runtime-arn=!: The identifier of the agent runtime to invoke.
         --baggage=: Additional context information for distributed tracing.
         --content-type=: The MIME type of the input data in the payload.
         --mcp-protocol-version=: The version of the MCP protocol being used.
@@ -201,6 +201,23 @@ commands:
       completion:
         positional:
             - - $files
+    - name: invoke-agent-runtime-command
+      description: Executes a command in a runtime session container.
+      flags:
+        --accept=: The desired MIME type for the response from the agent runtime command.
+        --account-id=: Account ID (12 digits)
+        --agent-runtime-arn=!: ARN of the agent runtime
+        --baggage=: Additional context information for distributed tracing.
+        --body=!: Request body containing command and timeout
+        --cli-input-json=: Read arguments from the JSON string provided.
+        --cli-input-yaml=: Read arguments from the YAML string provided.
+        --content-type=: The MIME type of the input data in the request payload.
+        --generate-cli-skeleton: Prints a JSON skeleton to standard output without sending an API request.
+        --qualifier=: Version or alias qualifier
+        --runtime-session-id=: Runtime session identifier
+        --trace-id=: The trace identifier for request tracking.
+        --trace-parent=: The parent trace information for distributed tracing.
+        --trace-state=: The trace state information for distributed tracing.
     - name: list-actors
       description: Lists all actors in an AgentCore Memory resource.
       flags:
@@ -330,30 +347,39 @@ commands:
       description: Creates and initializes a browser session in Amazon Bedrock AgentCore.
       flags:
         --browser-identifier=!: The unique identifier of the browser to use for this session.
+        --certificates=:
+            description: A list of certificates to install in the browser session.
+            nargs: -1
         --cli-input-json=: Read arguments from the JSON string provided.
         --cli-input-yaml=: Read arguments from the YAML string provided.
         --client-token=: A unique, case-sensitive identifier to ensure that the API request completes no more than one time.
+        --enterprise-policies=:
+            description: A list of files containing enterprise policies for the browser.
+            nargs: -1
         --extensions=:
             description: A list of browser extensions to load into the browser session.
             nargs: -1
         --generate-cli-skeleton: Prints a JSON skeleton to standard output without sending an API request.
         --name=: The name of the browser session.
         --profile-configuration=: The browser profile configuration to use for this session.
         --proxy-configuration=: Optional proxy configuration for routing browser traffic through customer-specified proxy servers.
-        --session-timeout-seconds=: The time in seconds after which the session automatically terminates if there is no activity.
+        --session-timeout-seconds=: The duration in seconds (time-to-live) after which the session automatically terminates, regardless of ongoing activity.
         --trace-id=: The trace identifier for request tracking.
         --trace-parent=: The parent trace information for distributed tracing.
         --view-port=: The dimensions of the browser viewport for this session.
     - name: start-code-interpreter-session
       description: Creates and initializes a code interpreter session in Amazon Bedrock AgentCore.
       flags:
+        --certificates=:
+            description: A list of certificates to install in the code interpreter session.
+            nargs: -1
         --cli-input-json=: Read arguments from the JSON string provided.
         --cli-input-yaml=: Read arguments from the YAML string provided.
         --client-token=: A unique, case-sensitive identifier to ensure that the API request completes no more than one time.
         --code-interpreter-identifier=!: The unique identifier of the code interpreter to use for this session.
         --generate-cli-skeleton: Prints a JSON skeleton to standard output without sending an API request.
         --name=: The name of the code interpreter session.
-        --session-timeout-seconds=: The time in seconds after which the session automatically terminates if there is no activity.
+        --session-timeout-seconds=: The duration in seconds (time-to-live) after which the session automatically terminates, regardless of ongoing activity.
         --trace-id=: The trace identifier for request tracking.
         --trace-parent=: The parent trace information for distributed tracing.
     - name: start-memory-extraction-job

cmd/carapace-aws/cmd/botocore/aws.bedrock.yaml

@@ -1091,6 +1091,7 @@ commands:
                 - REFINE_POLICY
                 - IMPORT_POLICY
                 - GENERATE_FIDELITY_REPORT
+                - GENERATE_POLICY_SCENARIOS
     - name: start-automated-reasoning-policy-test-workflow
       description: Initiates a test workflow to validate Automated Reasoning policy tests.
       flags:

cmd/carapace-aws/cmd/botocore/aws.configservice.yaml

@@ -312,7 +312,10 @@ commands:
         --filters=: A `ConformancePackComplianceFilters` object.
         --generate-cli-skeleton: Prints a JSON skeleton to standard output without sending an API request.
         --limit=: The maximum number of Config rules within a conformance pack are returned on each page.
+        --max-items=: The  total number of items to return in the command's output.
         --next-token=: The `nextToken` string returned in a previous request that you use to request the next page of results in a paginated response.
+        --page-size=: The size of each page to get in the AWS service call.
+        --starting-token=: A token to specify where to start paginating.
     - name: describe-conformance-pack-status
       description: Provides one or more conformance packs deployment status.
       flags: