build(deps): bump aws from 2.34.39 to 2.34.40

cmd/carapace-aws/cmd/botocore/aws.bedrock-agentcore-control.yaml

@@ -228,6 +228,9 @@ commands:
         --encryption-key-arn=: The Amazon Resource Name (ARN) of the KMS key used to encrypt the memory data.
         --event-expiry-duration=!: The duration after which memory events expire.
         --generate-cli-skeleton: Prints a JSON skeleton to standard output without sending an API request.
+        --indexed-keys=:
+            description: Metadata keys to index for filtering.
+            nargs: -1
         --memory-execution-role-arn=: The Amazon Resource Name (ARN) of the IAM role that provides permissions for the memory to access Amazon Web Services services.
         --memory-strategies=:
             description: The memory strategies to use for this memory.
@@ -1281,6 +1284,9 @@ commands:
     - name: update-memory
       description: Update an Amazon Bedrock AgentCore Memory resource memory.
       flags:
+        --add-indexed-keys=:
+            description: Additional metadata keys to index.
+            nargs: -1
         --cli-input-json=: Read arguments from the JSON string provided.
         --cli-input-yaml=: Read arguments from the YAML string provided.
         --client-token=: A client token is used for keeping track of idempotent requests.

cmd/carapace-aws/cmd/botocore/aws.bedrock-agentcore.yaml

@@ -201,6 +201,9 @@ commands:
     - name: get-resource-oauth2-token
       description: Returns the OAuth 2.0 token of the provided resource.
       flags:
+        --audiences=:
+            description: The audiences to include in the token request.
+            nargs: -1
         --cli-input-json=: Read arguments from the JSON string provided.
         --cli-input-yaml=: Read arguments from the YAML string provided.
         --custom-parameters=: A map of custom parameters to include in the authorization request to the resource credential provider.
@@ -211,6 +214,9 @@ commands:
         --oauth2-flow=!: The type of flow to be performed.
         --resource-credential-provider-name=!: The name of the resource's credential provider.
         --resource-oauth2-return-url=: The callback URL to redirect to after the OAuth 2.0 token retrieval is complete.
+        --resources=:
+            description: The resources to include in the token request.
+            nargs: -1
         --scopes=!:
             description: The OAuth scopes being requested.
             nargs: -1
@@ -221,6 +227,7 @@ commands:
             oauth2-flow:
                 - USER_FEDERATION
                 - M2M
+                - ON_BEHALF_OF_TOKEN_EXCHANGE
     - name: get-workload-access-token
       description: Obtains a workload access token for agentic workloads not acting on behalf of a user.
       flags:
@@ -405,6 +412,9 @@ commands:
         --max-results=: The maximum number of results to return in a single call.
         --memory-id=!: The identifier of the AgentCore Memory resource for which to list memory records.
         --memory-strategy-id=: The memory strategy identifier to filter memory records by.
+        --metadata-filters=:
+            description: A list of metadata filter expressions to scope the returned memory records.
+            nargs: -1
         --namespace-path=: Use namespacePath for hierarchical retrievals.
         --namespace=: The namespace prefix to filter memory records by.
         --next-token=: The token for the next set of results.

cmd/carapace-aws/cmd/botocore/aws.datazone.yaml

@@ -1166,6 +1166,14 @@ commands:
                 - BUSINESS_DESCRIPTIONS
                 - BUSINESS_NAMES
                 - BUSINESS_GLOSSARY_ASSOCIATIONS
+    - name: get-notebook-run
+      description: Gets the details of a notebook run in an Amazon DataZone domain.
+      flags:
+        --cli-input-json=: Read arguments from the JSON string provided.
+        --cli-input-yaml=: Read arguments from the YAML string provided.
+        --domain-identifier=!: The identifier of the Amazon DataZone domain in which the notebook run exists.
+        --generate-cli-skeleton: Prints a JSON skeleton to standard output without sending an API request.
+        --identifier=!: The identifier of the notebook run.
     - name: get-project
       description: Gets a project in Amazon DataZone.
       flags:
@@ -1716,6 +1724,36 @@ commands:
                 - BUSINESS_DESCRIPTIONS
                 - BUSINESS_NAMES
                 - BUSINESS_GLOSSARY_ASSOCIATIONS
+    - name: list-notebook-runs
+      description: Lists notebook runs in an Amazon DataZone domain.
+      flags:
+        --cli-input-json=: Read arguments from the JSON string provided.
+        --cli-input-yaml=: Read arguments from the YAML string provided.
+        --domain-identifier=!: The identifier of the Amazon DataZone domain in which to list notebook runs.
+        --generate-cli-skeleton: Prints a JSON skeleton to standard output without sending an API request.
+        --max-items=: The  total number of items to return in the command's output.
+        --max-results=: The maximum number of notebook runs to return in a single call.
+        --next-token=: When the number of notebook runs is greater than the default value for the `MaxResults` parameter, or if you explicitly specify a value for `MaxResults` that is less than the number of notebook runs, the response includes a pagination token named `NextToken`.
+        --notebook-identifier=: The identifier of the notebook to filter runs by.
+        --owning-project-identifier=!: The identifier of the project that owns the notebook runs.
+        --page-size=: The size of each page to get in the AWS service call.
+        --schedule-identifier=: The identifier of the schedule to filter notebook runs by.
+        --sort-order=: The sort order for the results.
+        --starting-token=: A token to specify where to start paginating.
+        --status=: The status to filter notebook runs by.
+      completion:
+        flag:
+            sort-order:
+                - ASCENDING
+                - DESCENDING
+            status:
+                - QUEUED
+                - STARTING
+                - RUNNING
+                - STOPPING
+                - STOPPED
+                - SUCCEEDED
+                - FAILED
     - name: list-notifications
       description: Lists all Amazon DataZone notifications.
       flags:
@@ -2332,6 +2370,32 @@ commands:
                 - BUSINESS_DESCRIPTIONS
                 - BUSINESS_NAMES
                 - BUSINESS_GLOSSARY_ASSOCIATIONS
+    - name: start-notebook-run
+      description: Starts a notebook run in an Amazon DataZone domain.
+      flags:
+        --cli-input-json=: Read arguments from the JSON string provided.
+        --cli-input-yaml=: Read arguments from the YAML string provided.
+        --client-token=: A unique, case-sensitive identifier to ensure idempotency of the request.
+        --compute-configuration=: The compute configuration for the notebook run, including instance type and environment version.
+        --domain-identifier=!: The identifier of the Amazon DataZone domain in which the notebook run is started.
+        --generate-cli-skeleton: Prints a JSON skeleton to standard output without sending an API request.
+        --metadata=: The metadata for the notebook run, specified as key-value pairs.
+        --network-configuration=: The network configuration for the notebook run, including network access type and optional VPC settings.
+        --notebook-identifier=!: The identifier of the notebook to run.
+        --owning-project-identifier=!: The identifier of the project that owns the notebook run.
+        --parameters=: The sensitive parameters for the notebook run, specified as key-value pairs.
+        --schedule-identifier=: The identifier of the schedule associated with the notebook run.
+        --timeout-configuration=: The timeout configuration for the notebook run.
+        --trigger-source=: The source that triggered the notebook run.
+    - name: stop-notebook-run
+      description: Stops a running notebook run in an Amazon DataZone domain.
+      flags:
+        --cli-input-json=: Read arguments from the JSON string provided.
+        --cli-input-yaml=: Read arguments from the YAML string provided.
+        --client-token=: A unique, case-sensitive identifier to ensure idempotency of the request.
+        --domain-identifier=!: The identifier of the Amazon DataZone domain in which the notebook run is stopped.
+        --generate-cli-skeleton: Prints a JSON skeleton to standard output without sending an API request.
+        --identifier=!: The identifier of the notebook run to stop.
     - name: tag-resource
       description: Tags a resource in Amazon DataZone.
       flags:

cmd/carapace-aws/cmd/botocore/aws.kafka.yaml

@@ -531,9 +531,10 @@ commands:
         --cli-input-json=: Read arguments from the JSON string provided.
         --cli-input-yaml=: Read arguments from the YAML string provided.
         --cluster-arn=!: The Amazon Resource Name (ARN) of the configuration.
-        --connectivity-info=!: Information about the broker access configuration.
+        --connectivity-info=: Information about the broker access configuration.
         --current-version=!: The version of the MSK cluster to update.
         --generate-cli-skeleton: Prints a JSON skeleton to standard output without sending an API request.
+        --zookeeper-access=: Access control settings for zookeeper
     - name: update-monitoring
       description: Updates the monitoring settings for the cluster.
       flags:

cmd/carapace-aws/cmd/botocore/aws.payment-cryptography.yaml

@@ -12,6 +12,19 @@ commands:
         --replication-regions=!:
             description: The list of Amazon Web Services Regions to add to the key's replication configuration.
             nargs: -1
+    - name: associate-mpa-team
+      description: Associates a Multi-Party Approval (MPA) team with a protected operation.
+      flags:
+        --action=!: The protected operation to associate with the MPA team.
+        --cli-input-json=: Read arguments from the JSON string provided.
+        --cli-input-yaml=: Read arguments from the YAML string provided.
+        --generate-cli-skeleton: Prints a JSON skeleton to standard output without sending an API request.
+        --mpa-team-arn=!: The ARN of the MPA team to associate with the protected operation.
+        --requester-comment=: The comment from the requester explaining the reason for the association.
+      completion:
+        flag:
+            action:
+                - IMPORT_ROOT_PUBLIC_KEY_CERTIFICATE
     - name: create-alias
       description: Creates an *alias*, or a friendly name, for an Amazon Web Services Payment Cryptography key.
       flags:
@@ -80,6 +93,13 @@ commands:
         --delete-key-in-days=: The waiting period for key deletion.
         --generate-cli-skeleton: Prints a JSON skeleton to standard output without sending an API request.
         --key-identifier=!: The `KeyARN` of the key that is scheduled for deletion.
+    - name: delete-resource-policy
+      description: Removes the resource-based policy attached to an Amazon Web Services Payment Cryptography key.
+      flags:
+        --cli-input-json=: Read arguments from the JSON string provided.
+        --cli-input-yaml=: Read arguments from the YAML string provided.
+        --generate-cli-skeleton: Prints a JSON skeleton to standard output without sending an API request.
+        --resource-arn=!: The `KeyARN` of the key whose resource-based policy you want to delete.
     - name: disable-default-key-replication-regions
       description: Disables [Multi-Region key replication](https://docs.aws.amazon.com/payment-cryptography/latest/userguide/keys-multi-region-replication.html) settings for the specified Amazon Web Services Regions in your Amazon Web Services account, preventing new keys from being automatically replicated to those regions.
       flags:
@@ -89,6 +109,18 @@ commands:
         --replication-regions=!:
             description: The list of Amazon Web Services Regions to remove from the account's default replication regions.
             nargs: -1
+    - name: disassociate-mpa-team
+      description: Removes the association between a Multi-Party Approval (MPA) team and a protected operation.
+      flags:
+        --action=!: The protected operation to disassociate from the MPA team.
+        --cli-input-json=: Read arguments from the JSON string provided.
+        --cli-input-yaml=: Read arguments from the YAML string provided.
+        --generate-cli-skeleton: Prints a JSON skeleton to standard output without sending an API request.
+        --requester-comment=: The comment from the requester explaining the reason for the disassociation.
+      completion:
+        flag:
+            action:
+                - IMPORT_ROOT_PUBLIC_KEY_CERTIFICATE
     - name: enable-default-key-replication-regions
       description: Enables [Multi-Region key replication](https://docs.aws.amazon.com/payment-cryptography/latest/userguide/keys-multi-region-replication.html) settings for your Amazon Web Services account, causing new keys to be automatically replicated to the specified Amazon Web Services Regions when created.
       flags:
@@ -143,6 +175,17 @@ commands:
         --cli-input-yaml=: Read arguments from the YAML string provided.
         --generate-cli-skeleton: Prints a JSON skeleton to standard output without sending an API request.
         --key-identifier=!: The `KeyARN` of the Amazon Web Services Payment Cryptography key.
+    - name: get-mpa-team-association
+      description: Returns the Multi-Party Approval (MPA) team association for a protected operation.
+      flags:
+        --action=!: The protected operation whose MPA team association you want to retrieve.
+        --cli-input-json=: Read arguments from the JSON string provided.
+        --cli-input-yaml=: Read arguments from the YAML string provided.
+        --generate-cli-skeleton: Prints a JSON skeleton to standard output without sending an API request.
+      completion:
+        flag:
+            action:
+                - IMPORT_ROOT_PUBLIC_KEY_CERTIFICATE
     - name: get-parameters-for-export
       description: Gets the export token and the signing key certificate to initiate a TR-34 key export from Amazon Web Services Payment Cryptography.
       flags:
@@ -218,6 +261,13 @@ commands:
         --cli-input-yaml=: Read arguments from the YAML string provided.
         --generate-cli-skeleton: Prints a JSON skeleton to standard output without sending an API request.
         --key-identifier=!: The `KeyARN` of the asymmetric key pair.
+    - name: get-resource-policy
+      description: Returns the resource-based policy attached to an Amazon Web Services Payment Cryptography key.
+      flags:
+        --cli-input-json=: Read arguments from the JSON string provided.
+        --cli-input-yaml=: Read arguments from the YAML string provided.
+        --generate-cli-skeleton: Prints a JSON skeleton to standard output without sending an API request.
+        --resource-arn=!: The `KeyARN` of the key whose resource-based policy you want to retrieve.
     - name: import-key
       description: Imports symmetric keys and public key certificates in PEM format (base64 encoded) into Amazon Web Services Payment Cryptography.
       flags:
@@ -230,6 +280,7 @@ commands:
         --no-enabled: Specifies whether import key is enabled.
         --replication-regions=:
             nargs: -1
+        --requester-comment=: The comment from the requester explaining the reason for the import.
         --tags=:
             description: Assigns one or more tags to the Amazon Web Services Payment Cryptography key.
             nargs: -1
@@ -283,6 +334,14 @@ commands:
         --page-size=: The size of each page to get in the AWS service call.
         --resource-arn=!: The `KeyARN` of the key whose tags you are getting.
         --starting-token=: A token to specify where to start paginating.
+    - name: put-resource-policy
+      description: Attaches or replaces a resource-based policy on an Amazon Web Services Payment Cryptography key.
+      flags:
+        --cli-input-json=: Read arguments from the JSON string provided.
+        --cli-input-yaml=: Read arguments from the YAML string provided.
+        --generate-cli-skeleton: Prints a JSON skeleton to standard output without sending an API request.
+        --policy=!: The resource-based policy to attach to the key, in JSON format.
+        --resource-arn=!: The `KeyARN` of the key to attach the resource-based policy to.
     - name: remove-key-replication-regions
       description: Removes Replication Regions from an existing Amazon Web Services Payment Cryptography key, disabling the key's availability for cryptographic operations in the specified Amazon Web Services Regions.
       flags:

cmd/carapace-aws/cmd/botocore/aws.route53globalresolver.yaml

@@ -541,6 +541,9 @@ commands:
         --ip-address-type=: The IP address type for the Global Resolver.
         --name=: The name of the Global Resolver.
         --observability-region=: The Amazon Web Services Regions in which the users' Global Resolver query resolution logs will be propagated.
+        --regions=:
+            description: The list of Amazon Web Services Regions where the Global Resolver will operate.
+            nargs: -1
       completion:
         flag:
             ip-address-type:

cmd/carapace-aws/cmd/botocore/aws.sagemaker.yaml

@@ -735,6 +735,9 @@ commands:
         --inference-component-name=!: A unique name to assign to the inference component.
         --runtime-config=: Runtime settings for a model that is deployed with an inference component.
         --specification=: Details about the resources to deploy with this inference component, including the model, container, and compute resources.
+        --specifications=:
+            description: A list of specification objects for the inference component, one per instance type.
+            nargs: -1
         --tags=:
             description: A list of key-value pairs associated with the model.
             nargs: -1
@@ -5991,6 +5994,9 @@ commands:
         --inference-component-name=!: The name of the inference component.
         --runtime-config=: Runtime settings for a model that is deployed with an inference component.
         --specification=: Details about the resources to deploy with this inference component, including the model, container, and compute resources.
+        --specifications=:
+            description: A list of specification objects for the inference component, one per instance type.
+            nargs: -1
     - name: update-inference-component-runtime-config
       description: Runtime settings for a model that is deployed with an inference component.
       flags:

package.json

@@ -1,5 +1,5 @@
 {
   "dependencies": {
-    "aws": "https://github.com/aws/aws-cli#2.34.39"
+    "aws": "https://github.com/aws/aws-cli#2.34.40"
   }
 }