aws-sdk-core 3.264.0 → 3.265.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 0c0e562777b1e5fdc50edc2441fb40908175d08e94fdc0f74bf2d615a1b3586d
-  data.tar.gz: 42ae671ab8a8384b8a254258a9706297f29035cb97d039f6e69d37ca2a078a99
+  metadata.gz: 8516c7b01f0db8c447079f16dc6194cfb7946271b929d1d26d770de75f8149ab
+  data.tar.gz: 96e33c08458de24eb3a480dfcebcc7dfc792554dd273ff95d401fe925ea27424
 SHA512:
-  metadata.gz: 9a0c773c066180a85a9e1a4d1a05cfe0ef5f7d04244719e3e1daa7887ac36177c30bf00bca21b74946a7ef4db5e3d7fea8a4185a4723c26beee9df76de351ac6
-  data.tar.gz: 0e3b4e4f29d1b814c35842e62f2b812984f3ce4454e27e074cd63f38aefc713355dd35659ff6336b30b5ce7daaf7d81be157c9b6e3117ece4c92d4c8e492f79c
+  metadata.gz: 2f6055ceab696dc4e43df077da9229ddd68e6cc79765ca11766f31487e51932d39dcd2de2f0e9ca2f7dab9639519f54e74db8ba9ee2aab486a58e9fd9d99440d
+  data.tar.gz: ab07f8326345fc599f281df1aa345b1feb67037f846ef847595cf0872288bb785aac22b6cefe2034beb3deca3433ec3149b3bbeca25885451598381e52d33957

data/CHANGELOG.md

@@ -1,6 +1,11 @@
 Unreleased Changes
 ------------------
 
+3.265.0 (2026-11-06)
+------------------
+
+* Feature - Improve model-aware filtering of nested request parameters and sensitivity detection for nested collections.
+
 3.264.0 (2026-11-04)
 ------------------
 

data/VERSION

@@ -1 +1 @@
-3.264.0
+3.265.0

data/lib/aws-sdk-core/log/formatter.rb

@@ -132,8 +132,9 @@ module Aws
 
       def _request_params(response)
         params = response.context.params
-        type = response.context.operation.input.shape.struct_class
-        @param_formatter.summarize(@param_filter.filter(params, type))
+        operation = response.context.operation
+        ref = operation && operation.input
+        @param_formatter.summarize(@param_filter.filter(params, ref))
       end
 
       def _time(response)

data/lib/aws-sdk-core/log/param_filter.rb

@@ -24,7 +24,68 @@ module Aws
         @additional_filters = options[:filter] || []
       end
 
+      # Returns a copy with sensitive values replaced by "[FILTERED]".
+      #
+      # Uses generated SENSITIVE lists to choose which members to redact.
+      # Nested request hashes also use the global list for backwards compatibility.
+      # A ShapeRef preserves model types while filtering nested request parameters.
+      # Structure classes are also accepted for Structure#to_s and older callers.
+      #
+      # @param [Hash, Struct, Array, Object] values
+      # @param [Seahorse::Model::Shapes::ShapeRef, Class, nil] type
       def filter(values, type)
+        return filter_ref(values, type, root: true) if type.is_a?(Seahorse::Model::Shapes::ShapeRef)
+
+        filter_by_class(values, type)
+      end
+
+      private
+
+      def filter_ref(value, ref, root: false)
+        return filter_by_class(value, value.class) unless ref
+
+        shape = ref.shape
+        case shape
+        when Seahorse::Model::Shapes::StructureShape
+          if value.is_a?(Hash) || value.is_a?(Struct)
+            return filter_struct(
+              value, shape.struct_class, shape,
+              use_global_filters: !root && value.is_a?(Hash)
+            )
+          end
+        when Seahorse::Model::Shapes::ListShape
+          return value.map { |v| filter_ref(v, shape.member) } if value.is_a?(Array)
+        when Seahorse::Model::Shapes::MapShape
+          return filter_map(value, shape) if value.is_a?(Hash)
+        when Seahorse::Model::Shapes::DocumentShape, nil
+          return filter_by_class(value, value.class)
+        else
+          return value
+        end
+
+        filter_by_class(value, value.class)
+      end
+
+      def filter_map(values, shape)
+        filtered = {}
+        values.each_pair do |key, value|
+          filtered[key] =
+            if @enabled && @additional_filters.include?(key)
+              '[FILTERED]'
+            else
+              filter_ref(value, shape.value)
+            end
+        end
+        filtered
+      end
+
+      def member_ref(shape, key)
+        return unless key.is_a?(Symbol) || key.is_a?(String)
+
+        shape.member(key) if shape.member?(key)
+      end
+
+      def filter_by_class(values, type)
         case values
         when Struct then filter_struct(values, type)
         when Hash then filter_hash(values, type)
@@ -33,18 +94,19 @@ module Aws
         end
       end
 
-      private
-
-      def filter_struct(values, type)
-        if values.class.include? Aws::Structure::Union
+      def filter_struct(values, type, shape = nil, use_global_filters: false)
+        if values.is_a?(Struct) && values.class.include?(Aws::Structure::Union)
           values = { values.member => values.value }
         end
-        filter_hash(values, type)
+        filter_hash(values, type, shape, use_global_filters: use_global_filters)
       end
 
-      def filter_hash(values, type)
-        if type.const_defined?('SENSITIVE')
+      def filter_hash(values, type, shape = nil, use_global_filters: false)
+        if type && type.const_defined?(:SENSITIVE)
           filters = type::SENSITIVE + @additional_filters
+          # Nested hashes previously used the global list. Keep that protection
+          # alongside modeled sensitivity when following their shape references.
+          filters += SENSITIVE if use_global_filters
         else
           # Support backwards compatibility (new core + old service)
           filters = SENSITIVE + @additional_filters
@@ -54,15 +116,17 @@ module Aws
         values.each_pair do |key, value|
           filtered[key] = if @enabled && filters.include?(key)
             '[FILTERED]'
+          elsif shape
+            filter_ref(value, member_ref(shape, key))
           else
-            filter(value, value.class)
+            filter_by_class(value, value.class)
           end
         end
         filtered
       end
 
       def filter_array(values, type)
-        values.map { |value| filter(value, value.class) }
+        values.map { |value| filter_by_class(value, value.class) }
       end
 
     end

data/lib/aws-sdk-signin/client.rb

@@ -991,7 +991,7 @@ module Aws::Signin
         tracer: tracer
       )
       context[:gem_name] = 'aws-sdk-core'
-      context[:gem_version] = '3.264.0'
+      context[:gem_version] = '3.265.0'
       Seahorse::Client::Request.new(handlers, context)
     end
 

data/lib/aws-sdk-signin.rb

@@ -56,7 +56,7 @@ module Aws::Signin
   autoload :EndpointProvider, 'aws-sdk-signin/endpoint_provider'
   autoload :Endpoints, 'aws-sdk-signin/endpoints'
 
-  GEM_VERSION = '3.264.0'
+  GEM_VERSION = '3.265.0'
 
 end
 

data/lib/aws-sdk-sso/client.rb

@@ -703,7 +703,7 @@ module Aws::SSO
         tracer: tracer
       )
       context[:gem_name] = 'aws-sdk-core'
-      context[:gem_version] = '3.264.0'
+      context[:gem_version] = '3.265.0'
       Seahorse::Client::Request.new(handlers, context)
     end
 

data/lib/aws-sdk-sso.rb

@@ -56,7 +56,7 @@ module Aws::SSO
   autoload :EndpointProvider, 'aws-sdk-sso/endpoint_provider'
   autoload :Endpoints, 'aws-sdk-sso/endpoints'
 
-  GEM_VERSION = '3.264.0'
+  GEM_VERSION = '3.265.0'
 
 end
 

data/lib/aws-sdk-ssooidc/client.rb

@@ -1086,7 +1086,7 @@ module Aws::SSOOIDC
         tracer: tracer
       )
       context[:gem_name] = 'aws-sdk-core'
-      context[:gem_version] = '3.264.0'
+      context[:gem_version] = '3.265.0'
       Seahorse::Client::Request.new(handlers, context)
     end
 

data/lib/aws-sdk-ssooidc.rb

@@ -56,7 +56,7 @@ module Aws::SSOOIDC
   autoload :EndpointProvider, 'aws-sdk-ssooidc/endpoint_provider'
   autoload :Endpoints, 'aws-sdk-ssooidc/endpoints'
 
-  GEM_VERSION = '3.264.0'
+  GEM_VERSION = '3.265.0'
 
 end
 

data/lib/aws-sdk-sts/client.rb

@@ -2807,7 +2807,7 @@ module Aws::STS
         tracer: tracer
       )
       context[:gem_name] = 'aws-sdk-core'
-      context[:gem_version] = '3.264.0'
+      context[:gem_version] = '3.265.0'
       Seahorse::Client::Request.new(handlers, context)
     end
 

data/lib/aws-sdk-sts.rb

@@ -56,7 +56,7 @@ module Aws::STS
   autoload :EndpointProvider, 'aws-sdk-sts/endpoint_provider'
   autoload :Endpoints, 'aws-sdk-sts/endpoints'
 
-  GEM_VERSION = '3.264.0'
+  GEM_VERSION = '3.265.0'
 
 end
 

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: aws-sdk-core
 version: !ruby/object:Gem::Version
-  version: 3.264.0
+  version: 3.265.0
 platform: ruby
 authors:
 - Amazon Web Services