Adds the AdminDeleteSoftwareToken API operation, enabling administrators to remove a user's registered TOTP (software token) MFA configuration from a user pool.

EC2 allows AMI owners to define compatible instance types on their AMIs, blocking RunInstances calls automatically for launches on non-permitted instance types.
Adding support for the full snapshot size, in bytes, of DB instance snapshots.
Updating SDK and CLI documentation for AttachDataSource API.
Add cascadeDelete to DeleteDomain. When specified, DataZone recursively deletes all projects, environments, subscriptions, and their underlying AWS resources before removing the domain. Deletion progress is reported via deleteProgress and resource failures via failureReasons on GetDomain.
Added resultCount to QueryStatistics in GetQueryResults. This field returns the total number of output rows in the final result set, helping customers programmatically determine whether a query produced results after all operations including post-aggregation filters.
Added a deploymentMode parameter to CreateDeployment. Set it to RESTART to restart an EC2 and on-premises fleet, using the last successful revision, honoring Deployment Configuration.
Added InsufficientCapacityException to RunMicrovm for capacity-related failures. Added lifecycle status field (AVAILABLE, DEPRECATED) to ListManagedMicrovmImageVersions. Added ConflictException to CreateMicrovmAuthToken and CreateMicrovmShellAuthToken for unregistered MicroVMs.

Author: aws-sdk-cpp-automation

.changelog/bugfix-protocoltests.json

@@ -1,3 +1,18 @@
+# 1.11.880 (2026-08-27)
+
+## SDK Highlights
+* **Bug Fix**: Compare generated protocol-test requests semantically instead of byte-for-byte: XML bodies are compared canonically via tinyxml2, form-urlencoded bodies and URI query strings are compared as unordered parameter sets, body assertions are skipped for test vectors with no body, and generated timestamp values are fixed.
+
+## Service Updates
+* **CloudWatch Logs**: Added resultCount to QueryStatistics in GetQueryResults. This field returns the total number of output rows in the final result set, helping customers programmatically determine whether a query produced results after all operations including post-aggregation filters.
+* **CodeDeploy**: Added a deploymentMode parameter to CreateDeployment. Set it to RESTART to restart an EC2 and on-premises fleet, using the last successful revision, honoring Deployment Configuration.
+* **Cognito Identity Provider**: Adds the AdminDeleteSoftwareToken API operation, enabling administrators to remove a user's registered TOTP (software token) MFA configuration from a user pool.
+* **DataZone**: Add cascadeDelete to DeleteDomain. When specified, DataZone recursively deletes all projects, environments, subscriptions, and their underlying AWS resources before removing the domain. Deletion progress is reported via deleteProgress and resource failures via failureReasons on GetDomain.
+* **EC2**: EC2 allows AMI owners to define compatible instance types on their AMIs, blocking RunInstances calls automatically for launches on non-permitted instance types.
+* **Lambda Microvms**: Added InsufficientCapacityException to RunMicrovm for capacity-related failures. Added lifecycle status field (AVAILABLE, DEPRECATED) to ListManagedMicrovmImageVersions. Added ConflictException to CreateMicrovmAuthToken and CreateMicrovmShellAuthToken for unregistered MicroVMs.
+* **OpenSearch**: Updating SDK and CLI documentation for AttachDataSource API.
+* **RDS**: Adding support for the full snapshot size, in bytes, of DB instance snapshots.
+
 # 1.11.879 (2026-08-26)
 
 ## SDK Highlights

CHANGELOG.md

@@ -1 +1 @@
-1.11.879
+1.11.880

VERSION

@@ -8,6 +8,7 @@
 #include <aws/codedeploy/CodeDeploy_EXPORTS.h>
 #include <aws/codedeploy/model/AlarmConfiguration.h>
 #include <aws/codedeploy/model/AutoRollbackConfiguration.h>
+#include <aws/codedeploy/model/DeploymentMode.h>
 #include <aws/codedeploy/model/FileExistsBehavior.h>
 #include <aws/codedeploy/model/RevisionLocation.h>
 #include <aws/codedeploy/model/TargetInstances.h>
@@ -250,6 +251,25 @@ class CreateDeploymentRequest : public CodeDeployRequest {
   }
   ///@}
 
+  ///@{
+  /**
+   * The deployment mode to use for the deployment. When set to STANDARD (the
+   * default), the deployment runs the standard set of deployment lifecycle events.
+   * When set to RESTART, an EC2/On-premises in-place deployment runs a shortened set
+   * of lifecycle events to quickly restart the application on the target instances.
+   */
+  inline DeploymentMode GetDeploymentMode() const { return m_deploymentMode; }
+  inline bool DeploymentModeHasBeenSet() const { return m_deploymentModeHasBeenSet; }
+  inline void SetDeploymentMode(DeploymentMode value) {
+    m_deploymentModeHasBeenSet = true;
+    m_deploymentMode = value;
+  }
+  inline CreateDeploymentRequest& WithDeploymentMode(DeploymentMode value) {
+    SetDeploymentMode(value);
+    return *this;
+  }
+  ///@}
+
   ///@{
   /**
    * <p>Allows you to specify information about alarms associated with a deployment.
@@ -300,6 +320,8 @@ class CreateDeploymentRequest : public CodeDeployRequest {
 
   FileExistsBehavior m_fileExistsBehavior{FileExistsBehavior::NOT_SET};
 
+  DeploymentMode m_deploymentMode{DeploymentMode::NOT_SET};
+
   AlarmConfiguration m_overrideAlarmConfiguration;
   bool m_applicationNameHasBeenSet = false;
   bool m_deploymentGroupNameHasBeenSet = false;
@@ -311,6 +333,7 @@ class CreateDeploymentRequest : public CodeDeployRequest {
   bool m_autoRollbackConfigurationHasBeenSet = false;
   bool m_updateOutdatedInstancesOnlyHasBeenSet = false;
   bool m_fileExistsBehaviorHasBeenSet = false;
+  bool m_deploymentModeHasBeenSet = false;
   bool m_overrideAlarmConfigurationHasBeenSet = false;
 };
 

generated/src/aws-cpp-sdk-codedeploy/include/aws/codedeploy/model/CreateDeploymentRequest.h

@@ -0,0 +1,22 @@
+/**
+ * Copyright Amazon.com, Inc. or its affiliates. All Rights Reserved.
+ * SPDX-License-Identifier: Apache-2.0.
+ */
+
+#pragma once
+#include <aws/codedeploy/CodeDeploy_EXPORTS.h>
+#include <aws/core/utils/memory/stl/AWSString.h>
+
+namespace Aws {
+namespace CodeDeploy {
+namespace Model {
+enum class DeploymentMode { NOT_SET, STANDARD, RESTART };
+
+namespace DeploymentModeMapper {
+AWS_CODEDEPLOY_API DeploymentMode GetDeploymentModeForName(const Aws::String& name);
+
+AWS_CODEDEPLOY_API Aws::String GetNameForDeploymentMode(DeploymentMode value);
+}  // namespace DeploymentModeMapper
+}  // namespace Model
+}  // namespace CodeDeploy
+}  // namespace Aws

generated/src/aws-cpp-sdk-codedeploy/include/aws/codedeploy/model/DeploymentMode.h

@@ -55,6 +55,10 @@ Aws::String CreateDeploymentRequest::SerializePayload() const {
     payload.WithString("fileExistsBehavior", FileExistsBehaviorMapper::GetNameForFileExistsBehavior(m_fileExistsBehavior));
   }
 
+  if (m_deploymentModeHasBeenSet) {
+    payload.WithString("deploymentMode", DeploymentModeMapper::GetNameForDeploymentMode(m_deploymentMode));
+  }
+
   if (m_overrideAlarmConfigurationHasBeenSet) {
     payload.WithObject("overrideAlarmConfiguration", m_overrideAlarmConfiguration.Jsonize());
   }

generated/src/aws-cpp-sdk-codedeploy/source/model/CreateDeploymentRequest.cpp

@@ -0,0 +1,58 @@
+/**
+ * Copyright Amazon.com, Inc. or its affiliates. All Rights Reserved.
+ * SPDX-License-Identifier: Apache-2.0.
+ */
+
+#include <aws/codedeploy/model/DeploymentMode.h>
+#include <aws/core/Globals.h>
+#include <aws/core/utils/EnumParseOverflowContainer.h>
+#include <aws/core/utils/HashingUtils.h>
+
+using namespace Aws::Utils;
+
+namespace Aws {
+namespace CodeDeploy {
+namespace Model {
+namespace DeploymentModeMapper {
+
+static const int STANDARD_HASH = HashingUtils::HashString("STANDARD");
+static const int RESTART_HASH = HashingUtils::HashString("RESTART");
+
+DeploymentMode GetDeploymentModeForName(const Aws::String& name) {
+  int hashCode = HashingUtils::HashString(name.c_str());
+  if (hashCode == STANDARD_HASH) {
+    return DeploymentMode::STANDARD;
+  } else if (hashCode == RESTART_HASH) {
+    return DeploymentMode::RESTART;
+  }
+  EnumParseOverflowContainer* overflowContainer = Aws::GetEnumOverflowContainer();
+  if (overflowContainer) {
+    overflowContainer->StoreOverflow(hashCode, name);
+    return static_cast<DeploymentMode>(hashCode);
+  }
+
+  return DeploymentMode::NOT_SET;
+}
+
+Aws::String GetNameForDeploymentMode(DeploymentMode enumValue) {
+  switch (enumValue) {
+    case DeploymentMode::NOT_SET:
+      return {};
+    case DeploymentMode::STANDARD:
+      return "STANDARD";
+    case DeploymentMode::RESTART:
+      return "RESTART";
+    default:
+      EnumParseOverflowContainer* overflowContainer = Aws::GetEnumOverflowContainer();
+      if (overflowContainer) {
+        return overflowContainer->RetrieveOverflow(static_cast<int>(enumValue));
+      }
+
+      return {};
+  }
+}
+
+}  // namespace DeploymentModeMapper
+}  // namespace Model
+}  // namespace CodeDeploy
+}  // namespace Aws

generated/src/aws-cpp-sdk-codedeploy/source/model/DeploymentMode.cpp

@@ -328,6 +328,47 @@ class AWS_COGNITOIDENTITYPROVIDER_API CognitoIdentityProviderClient
     return SubmitAsync(&CognitoIdentityProviderClient::AdminCreateUser, request, handler, context);
   }
 
+  /**
+   * <p>Deletes a user's registered time-based one-time password (TOTP) multi-factor
+   * authentication (MFA) factor, also known as a software token. After this
+   * operation, the user can no longer sign in with TOTP MFA, and can register a new
+   * TOTP factor with <code>AssociateSoftwareToken</code>. Use this operation when a
+   * user loses access to their TOTP-generating device, for example, a lost or reset
+   * phone, and needs to register a new one.</p>  <p>Amazon Cognito evaluates
+   * Identity and Access Management (IAM) policies in requests for this API
+   * operation. For this operation, you must use IAM credentials to authorize
+   * requests, and you must grant yourself the corresponding IAM permission in a
+   * policy.</p> <p class="title"> <b>Learn more</b> </p> <ul> <li> <p> <a
+   * href="https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_aws-signing.html">Signing
+   * Amazon Web Services API Requests</a> </p> </li> <li> <p> <a
+   * href="https://docs.aws.amazon.com/cognito/latest/developerguide/user-pools-API-operations.html">Using
+   * the Amazon Cognito user pools API and user pool endpoints</a> </p> </li> </ul>
+   * <p><h3>See Also:</h3>   <a
+   * href="http://docs.aws.amazon.com/goto/WebAPI/cognito-idp-2016-04-18/AdminDeleteSoftwareToken">AWS
+   * API Reference</a></p>
+   */
+  virtual Model::AdminDeleteSoftwareTokenOutcome AdminDeleteSoftwareToken(const Model::AdminDeleteSoftwareTokenRequest& request) const;
+
+  /**
+   * A Callable wrapper for AdminDeleteSoftwareToken that returns a future to the operation so that it can be executed in parallel to other
+   * requests.
+   */
+  template <typename AdminDeleteSoftwareTokenRequestT = Model::AdminDeleteSoftwareTokenRequest>
+  Model::AdminDeleteSoftwareTokenOutcomeCallable AdminDeleteSoftwareTokenCallable(const AdminDeleteSoftwareTokenRequestT& request) const {
+    return SubmitCallable(&CognitoIdentityProviderClient::AdminDeleteSoftwareToken, request);
+  }
+
+  /**
+   * An Async wrapper for AdminDeleteSoftwareToken that queues the request into a thread executor and triggers associated callback when
+   * operation has finished.
+   */
+  template <typename AdminDeleteSoftwareTokenRequestT = Model::AdminDeleteSoftwareTokenRequest>
+  void AdminDeleteSoftwareTokenAsync(const AdminDeleteSoftwareTokenRequestT& request,
+                                     const AdminDeleteSoftwareTokenResponseReceivedHandler& handler,
+                                     const std::shared_ptr<const Aws::Client::AsyncCallerContext>& context = nullptr) const {
+    return SubmitAsync(&CognitoIdentityProviderClient::AdminDeleteSoftwareToken, request, handler, context);
+  }
+
   /**
    * <p>Deletes a user profile in your user pool.</p>  <p>Amazon Cognito
    * evaluates Identity and Access Management (IAM) policies in requests for this API
@@ -2846,7 +2887,11 @@ class AWS_COGNITOIDENTITYPROVIDER_API CognitoIdentityProviderClient
 
   /**
    * <p>Given a user pool domain name, returns information about the domain
-   * configuration.</p>  <p>Amazon Cognito evaluates Identity and Access
+   * configuration.</p>  <p>This operation doesn't return results when you
+   * query a prefix domain in a secondary Region. Prefix domains are Region-specific
+   * and can only be described in the Region where they were created. To describe a
+   * prefix domain for a replica user pool, make the request to the primary Region's
+   * endpoint.</p>   <p>Amazon Cognito evaluates Identity and Access
    * Management (IAM) policies in requests for this API operation. For this
    * operation, you must use IAM credentials to authorize requests, and you must
    * grant yourself the corresponding IAM permission in a policy.</p> <p

generated/src/aws-cpp-sdk-cognito-idp/include/aws/cognito-idp/CognitoIdentityProviderClient.h

@@ -23,6 +23,7 @@
 #include <aws/cognito-idp/model/AddUserPoolClientSecretResult.h>
 #include <aws/cognito-idp/model/AdminConfirmSignUpResult.h>
 #include <aws/cognito-idp/model/AdminCreateUserResult.h>
+#include <aws/cognito-idp/model/AdminDeleteSoftwareTokenResult.h>
 #include <aws/cognito-idp/model/AdminDeleteUserAttributesResult.h>
 #include <aws/cognito-idp/model/AdminDisableProviderForUserResult.h>
 #include <aws/cognito-idp/model/AdminDisableUserResult.h>
@@ -176,6 +177,7 @@ class AddUserPoolClientSecretRequest;
 class AdminAddUserToGroupRequest;
 class AdminConfirmSignUpRequest;
 class AdminCreateUserRequest;
+class AdminDeleteSoftwareTokenRequest;
 class AdminDeleteUserRequest;
 class AdminDeleteUserAttributesRequest;
 class AdminDisableProviderForUserRequest;
@@ -308,6 +310,7 @@ typedef Aws::Utils::Outcome<AddUserPoolClientSecretResult, CognitoIdentityProvid
 typedef Aws::Utils::Outcome<Aws::NoResult, CognitoIdentityProviderError> AdminAddUserToGroupOutcome;
 typedef Aws::Utils::Outcome<AdminConfirmSignUpResult, CognitoIdentityProviderError> AdminConfirmSignUpOutcome;
 typedef Aws::Utils::Outcome<AdminCreateUserResult, CognitoIdentityProviderError> AdminCreateUserOutcome;
+typedef Aws::Utils::Outcome<AdminDeleteSoftwareTokenResult, CognitoIdentityProviderError> AdminDeleteSoftwareTokenOutcome;
 typedef Aws::Utils::Outcome<Aws::NoResult, CognitoIdentityProviderError> AdminDeleteUserOutcome;
 typedef Aws::Utils::Outcome<AdminDeleteUserAttributesResult, CognitoIdentityProviderError> AdminDeleteUserAttributesOutcome;
 typedef Aws::Utils::Outcome<AdminDisableProviderForUserResult, CognitoIdentityProviderError> AdminDisableProviderForUserOutcome;
@@ -441,6 +444,7 @@ typedef std::future<AddUserPoolClientSecretOutcome> AddUserPoolClientSecretOutco
 typedef std::future<AdminAddUserToGroupOutcome> AdminAddUserToGroupOutcomeCallable;
 typedef std::future<AdminConfirmSignUpOutcome> AdminConfirmSignUpOutcomeCallable;
 typedef std::future<AdminCreateUserOutcome> AdminCreateUserOutcomeCallable;
+typedef std::future<AdminDeleteSoftwareTokenOutcome> AdminDeleteSoftwareTokenOutcomeCallable;
 typedef std::future<AdminDeleteUserOutcome> AdminDeleteUserOutcomeCallable;
 typedef std::future<AdminDeleteUserAttributesOutcome> AdminDeleteUserAttributesOutcomeCallable;
 typedef std::future<AdminDisableProviderForUserOutcome> AdminDisableProviderForUserOutcomeCallable;
@@ -586,6 +590,9 @@ typedef std::function<void(const CognitoIdentityProviderClient*, const Model::Ad
 typedef std::function<void(const CognitoIdentityProviderClient*, const Model::AdminCreateUserRequest&, const Model::AdminCreateUserOutcome&,
                            const std::shared_ptr<const Aws::Client::AsyncCallerContext>&)>
     AdminCreateUserResponseReceivedHandler;
+typedef std::function<void(const CognitoIdentityProviderClient*, const Model::AdminDeleteSoftwareTokenRequest&,
+                           const Model::AdminDeleteSoftwareTokenOutcome&, const std::shared_ptr<const Aws::Client::AsyncCallerContext>&)>
+    AdminDeleteSoftwareTokenResponseReceivedHandler;
 typedef std::function<void(const CognitoIdentityProviderClient*, const Model::AdminDeleteUserRequest&, const Model::AdminDeleteUserOutcome&,
                            const std::shared_ptr<const Aws::Client::AsyncCallerContext>&)>
     AdminDeleteUserResponseReceivedHandler;

generated/src/aws-cpp-sdk-cognito-idp/include/aws/cognito-idp/CognitoIdentityProviderServiceClientModel.h

@@ -0,0 +1,83 @@
+/**
+ * Copyright Amazon.com, Inc. or its affiliates. All Rights Reserved.
+ * SPDX-License-Identifier: Apache-2.0.
+ */
+
+#pragma once
+#include <aws/cognito-idp/CognitoIdentityProviderRequest.h>
+#include <aws/cognito-idp/CognitoIdentityProvider_EXPORTS.h>
+#include <aws/core/utils/memory/stl/AWSString.h>
+
+#include <utility>
+
+namespace Aws {
+namespace CognitoIdentityProvider {
+namespace Model {
+
+/**
+ */
+class AdminDeleteSoftwareTokenRequest : public CognitoIdentityProviderRequest {
+ public:
+  AWS_COGNITOIDENTITYPROVIDER_API AdminDeleteSoftwareTokenRequest() = default;
+
+  // Service request name is the Operation name which will send this request out,
+  // each operation should has unique request name, so that we can get operation's name from this request.
+  // Note: this is not true for response, multiple operations may have the same response name,
+  // so we can not get operation's name from response.
+  inline virtual const char* GetServiceRequestName() const override { return "AdminDeleteSoftwareToken"; }
+
+  AWS_COGNITOIDENTITYPROVIDER_API Aws::String SerializePayload() const override;
+
+  AWS_COGNITOIDENTITYPROVIDER_API Aws::Http::HeaderValueCollection GetRequestSpecificHeaders() const override;
+
+  ///@{
+  /**
+   * <p>The ID of the user pool where you want to delete the user's software
+   * token.</p>
+   */
+  inline const Aws::String& GetUserPoolId() const { return m_userPoolId; }
+  inline bool UserPoolIdHasBeenSet() const { return m_userPoolIdHasBeenSet; }
+  template <typename UserPoolIdT = Aws::String>
+  void SetUserPoolId(UserPoolIdT&& value) {
+    m_userPoolIdHasBeenSet = true;
+    m_userPoolId = std::forward<UserPoolIdT>(value);
+  }
+  template <typename UserPoolIdT = Aws::String>
+  AdminDeleteSoftwareTokenRequest& WithUserPoolId(UserPoolIdT&& value) {
+    SetUserPoolId(std::forward<UserPoolIdT>(value));
+    return *this;
+  }
+  ///@}
+
+  ///@{
+  /**
+   * <p>The name of the user that you want to query or modify. The value of this
+   * parameter is typically your user's username, but it can be any of their alias
+   * attributes. If <code>username</code> isn't an alias attribute in your user pool,
+   * this value must be the <code>sub</code> of a local user or the username of a
+   * user from a third-party IdP.</p>
+   */
+  inline const Aws::String& GetUsername() const { return m_username; }
+  inline bool UsernameHasBeenSet() const { return m_usernameHasBeenSet; }
+  template <typename UsernameT = Aws::String>
+  void SetUsername(UsernameT&& value) {
+    m_usernameHasBeenSet = true;
+    m_username = std::forward<UsernameT>(value);
+  }
+  template <typename UsernameT = Aws::String>
+  AdminDeleteSoftwareTokenRequest& WithUsername(UsernameT&& value) {
+    SetUsername(std::forward<UsernameT>(value));
+    return *this;
+  }
+  ///@}
+ private:
+  Aws::String m_userPoolId;
+
+  Aws::String m_username;
+  bool m_userPoolIdHasBeenSet = false;
+  bool m_usernameHasBeenSet = false;
+};
+
+}  // namespace Model
+}  // namespace CognitoIdentityProvider
+}  // namespace Aws