diff --git a/cmd/carapace-aws/cmd/botocore/aws.bedrock-runtime.yaml b/cmd/carapace-aws/cmd/botocore/aws.bedrock-runtime.yaml
index d3afeaae2..7a33bc018 100755
--- a/cmd/carapace-aws/cmd/botocore/aws.bedrock-runtime.yaml
+++ b/cmd/carapace-aws/cmd/botocore/aws.bedrock-runtime.yaml
@@ -73,6 +73,7 @@ commands:
         --guardrail-version=: The version number for the guardrail.
         --model-id=!: The unique identifier of the model to invoke to run inference.
         --performance-config-latency=: Model performance settings for the request.
+        --request-metadata=: Key-value pairs that you can use to filter invocation logs.
         --service-tier=: Specifies the processing tier type used for serving the request.
         --trace=: Specifies whether to enable or disable the Bedrock trace.
       completion:
diff --git a/cmd/carapace-aws/cmd/botocore/aws.customer-profiles.yaml b/cmd/carapace-aws/cmd/botocore/aws.customer-profiles.yaml
index 67ab3da1b..c2973e752 100755
--- a/cmd/carapace-aws/cmd/botocore/aws.customer-profiles.yaml
+++ b/cmd/carapace-aws/cmd/botocore/aws.customer-profiles.yaml
@@ -98,7 +98,7 @@ commands:
             layout-type:
                 - PROFILE_EXPLORER
     - name: create-event-stream
-      description: Creates an event stream, which is a subscription to real-time events, such as when profiles are created and updated through Amazon Connect Customer Profiles.
+      description: Creates an event stream, which is a subscription to real-time events, such as when profiles are created and updated through Connect Customer Customer Profiles.
       flags:
         --cli-input-json=: Read arguments from the JSON string provided.
         --cli-input-yaml=: Read arguments from the YAML string provided.
diff --git a/cmd/carapace-aws/cmd/botocore/aws.kms.yaml b/cmd/carapace-aws/cmd/botocore/aws.kms.yaml
index eb5a98501..c6fc3bf33 100755
--- a/cmd/carapace-aws/cmd/botocore/aws.kms.yaml
+++ b/cmd/carapace-aws/cmd/botocore/aws.kms.yaml
@@ -60,7 +60,8 @@ commands:
         --grant-tokens=:
             description: A list of grant tokens.
             nargs: -1
-        --grantee-principal=!: The identity that gets the permissions specified in the grant.
+        --grantee-principal=: The identity that gets the permissions specified in the grant.
+        --grantee-service-principal=: The Amazon Web Services [service principal](https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_elements_principal.html#principal-services) that gets the permissions specified in the grant.
         --key-id=!: Identifies the KMS key for the grant.
         --name=: A friendly name for the grant.
         --no-dry-run: Checks if your request will succeed.
@@ -68,6 +69,7 @@ commands:
             description: A list of operations that the grant permits.
             nargs: -1
         --retiring-principal=: The principal that has permission to use the [RetireGrant]() operation to retire the grant.
+        --retiring-service-principal=: The Amazon Web Services [service principal](https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_elements_principal.html#principal-services) that has permission to use the [RetireGrant]() operation to retire the grant.
     - name: create-key
       description: Creates a unique customer managed [KMS key](https://docs.aws.amazon.com/kms/latest/developerguide/concepts.html#kms-keys) in your Amazon Web Services account and Region.
       flags:
@@ -502,6 +504,7 @@ commands:
         --generate-cli-skeleton: Prints a JSON skeleton to standard output without sending an API request.
         --grant-id=: Returns only the grant with the specified grant ID.
         --grantee-principal=: Returns only grants where the specified principal is the grantee principal for the grant.
+        --grantee-service-principal=: Returns only grants where the specified Amazon Web Services service principal is the grantee service principal for the grant.
         --key-id=!: Returns only grants for the specified KMS key.
         --limit=: Use this parameter to specify the maximum number of items to return.
         --marker=: Use this parameter in a subsequent request after you receive a response with truncated results.
@@ -562,7 +565,7 @@ commands:
         --page-size=: The size of each page to get in the AWS service call.
         --starting-token=: A token to specify where to start paginating.
     - name: list-retirable-grants
-      description: Returns information about all grants in the Amazon Web Services account and Region that have the specified retiring principal.
+      description: Returns information about all grants in the Amazon Web Services account and Region that have the specified retiring principal or retiring service principal.
       flags:
         --cli-input-json=: Read arguments from the JSON string provided.
         --cli-input-yaml=: Read arguments from the YAML string provided.
@@ -571,7 +574,8 @@ commands:
         --marker=: Use this parameter in a subsequent request after you receive a response with truncated results.
         --max-items=: The  total number of items to return in the command's output.
         --page-size=: The size of each page to get in the AWS service call.
-        --retiring-principal=!: The retiring principal for which to list grants.
+        --retiring-principal=: The retiring principal for which to list grants.
+        --retiring-service-principal=: The retiring service principal for which to list grants.
         --starting-token=: A token to specify where to start paginating.
     - name: put-key-policy
       description: Attaches a key policy to the specified KMS key.
diff --git a/cmd/carapace-aws/cmd/botocore/aws.payment-cryptography-data.yaml b/cmd/carapace-aws/cmd/botocore/aws.payment-cryptography-data.yaml
index 755583082..fc300733a 100755
--- a/cmd/carapace-aws/cmd/botocore/aws.payment-cryptography-data.yaml
+++ b/cmd/carapace-aws/cmd/botocore/aws.payment-cryptography-data.yaml
@@ -23,12 +23,12 @@ commands:
         --plain-text=!: The plaintext to be encrypted.
         --wrapped-key=: The WrappedKeyBlock containing the encryption key for plaintext encryption.
     - name: generate-as2805-kek-validation
-      description: Establishes node-to-node initialization between payment processing nodes such as an acquirer, issuer or payment network using Australian Standard 2805 (AS2805).
+      description: Generates a `KekValidationRequest` or a `KekValidationResponse` for node-to-node initialization between payment processing nodes using [Australian Standard 2805 (AS2805)](https://docs.aws.amazon.com/payment-cryptography/latest/userguide/as2805.html).
       flags:
         --cli-input-json=: Read arguments from the JSON string provided.
         --cli-input-yaml=: Read arguments from the YAML string provided.
         --generate-cli-skeleton: Prints a JSON skeleton to standard output without sending an API request.
-        --kek-validation-type=!: Parameter information for generating a random key for KEK validation to perform node-to-node initialization.
+        --kek-validation-type=!: Defines whether to generate a KEK validation request or KEK validation response for node-to-node initialization.
         --key-identifier=!: The `keyARN` of sending KEK that Amazon Web Services Payment Cryptography uses for node-to-node initialization
         --random-key-send-variant-mask=!: The key variant to use for generating a random key for KEK validation during node-to-node initialization.
       completion:
@@ -36,6 +36,21 @@ commands:
             random-key-send-variant-mask:
                 - VARIANT_MASK_82C0
                 - VARIANT_MASK_82
+    - name: generate-auth-request-cryptogram
+      description: Generates an Authorization Request Cryptogram (ARQC) for an EMV chip payment card authorization.
+      flags:
+        --cli-input-json=: Read arguments from the JSON string provided.
+        --cli-input-yaml=: Read arguments from the YAML string provided.
+        --generate-cli-skeleton: Prints a JSON skeleton to standard output without sending an API request.
+        --key-identifier=!: The `keyARN` of the IMK-AC (TR31\_E0\_EMV\_MKEY\_APP\_CRYPTOGRAMS) that Amazon Web Services Payment Cryptography uses to generate the ARQC.
+        --major-key-derivation-mode=!: The method to use when deriving the major encryption key for ARQC generation within Amazon Web Services Payment Cryptography.
+        --session-key-derivation-attributes=!: The attributes and values to use for deriving a session key for ARQC generation within Amazon Web Services Payment Cryptography.
+        --transaction-data=!: The transaction data that Amazon Web Services Payment Cryptography uses for ARQC generation.
+      completion:
+        flag:
+            major-key-derivation-mode:
+                - EMV_OPTION_A
+                - EMV_OPTION_B
     - name: generate-card-validation-data
       description: Generates card-related validation data using algorithms such as Card Verification Values (CVV/CVV2), Dynamic Card Verification Values (dCVV/dCVV2), or Card Security Codes (CSC).
       flags:
diff --git a/package.json b/package.json
index 940dc18b6..e9fb55d24 100644
--- a/package.json
+++ b/package.json
@@ -1,5 +1,5 @@
 {
   "dependencies": {
-    "aws": "https://github.com/aws/aws-cli#2.34.50"
+    "aws": "https://github.com/aws/aws-cli#2.34.51"
   }
 }
\ No newline at end of file