aws-dd-forwarder-5.4.3 (Layer v102)

What's Changed

• feat(forwarder): add SKIP_REGIONS env var for layer publishing by @klivan in #1139
• fix(forwader): catch response errors on key verification by @ndakkoune in #1141
• Update version from 5.4.2 to 5.4.3 by @klivan in #1142

Full Changelog: aws-dd-forwarder-5.4.2...aws-dd-forwarder-5.4.3

aws-dd-forwarder-5.4.2 (Layer v101)

What's Changed

• fix(logs): store failed log events on intake errors by @patbos in #1131
• fixup! fix: store failed log events on intake errors (#1131) by @ndakkoune in #1137
• Update version from 5.4.1 to 5.4.2 by @klivan in #1138

New Contributors

• @patbos made their first contribution in #1131

Full Changelog: aws-dd-forwarder-5.4.1...aws-dd-forwarder-5.4.2

aws-dd-forwarder-5.4.1 (Layer v99)

What's Changed

• Remove --grants from S3 cp command in release script by @klivan in #1092
• chore(deps): prettier (minor → 3.8.1) [azure] by @gh-worker-campaigns-3e9aa4[bot] in #1098
• chore(deps): sinon (major → 21.0.3) [azure] by @gh-worker-campaigns-3e9aa4[bot] in #1097
• chore(deps): minor: sinon · patch: prettier [azure] by @gh-worker-campaigns-3e9aa4[bot] in #1113
• fix(deps): vuln lodash (minor → 4.18.1) [azure] by @gh-worker-campaigns-3e9aa4[bot] in #1121
• [AWSINTS] chore(CVEs): bump libraries by @RaphaelAllier in #1125
• Update version from 5.4.0 to 5.4.1 by @klivan in #1127

Fixing Vulnerabilities

Fixing reported CVEs on the Forwarder:

CVE-2026-44432 / CVE-2026-44431 : Fixed by pinning urllib3 to the fixed version 2.7.0
CVE-2026-44660 : Fixed by pinning ujson to the fixed version 5.12.1

New Contributors

• @gh-worker-campaigns-3e9aa4[bot] made their first contribution in #1098

Full Changelog: aws-dd-forwarder-5.4.0...aws-dd-forwarder-5.4.1

aws-dd-forwarder-5.4.0 (Layer v98)

What's Changed

• fix(logs forwarder -waf ): serialize WAF message to JSON string allowing exclusion/inclusion matching by @ge0Aja in #1070
• VULN UPGRADE: patch: lodash, prettier [azure] by @campaigner-prod[bot] in #1074
• chore(aws): Change ownership for context things by @ViBiOh in #1077
• chore: Polish the language to recommend Lambda Extension over forwarder by @lym953 in #911
• perf(forwarder): compile multiline regex patterns once at module level by @LorisFriedel in #1078
• perf(forwarder): parse event message JSON once in split() by @LorisFriedel in #1080
• perf(forwarder): reuse boto3 S3 client across SQS batch records by @LorisFriedel in #1079
• perf(forwarder): create scrubber, matcher, and batcher once in init by @LorisFriedel in #1081
• docs(forwarder): add key retrieval strategies by @ndakkoune in #1085
• Clarify JSON array ingestion behavior for S3 log files by @estherk15 in #1086
• [AWS] fix(CVE): pin versions of packages to resolve CVEs by @RaphaelAllier in #1090
• Update version from 5.3.0 to 5.4.0 by @klivan in #1091

New Contributors

• @campaigner-prod[bot] made their first contribution in #1074
• @lym953 made their first contribution in #911

Full Changelog: aws-dd-forwarder-5.3.0...aws-dd-forwarder-5.4.0

aws-dd-forwarder-5.3.0 (Layer v97)

What's Changed

• Check if docker or container system are running by @klivan in #1058
• [AWSX] fix(logs forwarder): Scrub logs once by @ge0Aja in #1060
• [AWSX] feat(forwarder): allow restricting access to s3:GetObject in template by @RaphaelAllier in #1062
• Add support for S3 Object Created events distributed using Eventbridge by @blockmar in #1052
• feat(forwarder): add SQS support as event source for S3 notifications by @LorisFriedel in #1064
• feat(forwarder): add SQS support as DLQ backend for failed events by @LorisFriedel in #1063
• Update version from 5.2.2 to 5.3.0 by @dylanburati in #1069

New Contributors

• @blockmar made their first contribution in #1052
• @dylanburati made their first contribution in #1069

Full Changelog: aws-dd-forwarder-5.2.2...aws-dd-forwarder-5.3.0

aws-dd-forwarder-5.2.2 (Layer v96)

What's Changed

• [AWSCORE-688] Add version fetching to forwarder release script by @dhan0779 in #1053
• [AWS] feat(forwarder): update requirements by @RaphaelAllier in #1055
• Update version from 5.2.1 to 5.2.2 by @klivan in #1057

New Contributors

• @dhan0779 made their first contribution in #1053

Full Changelog: aws-dd-forwarder-5.2.1...aws-dd-forwarder-5.2.2

aws-dd-forwarder-5.2.1 (Layer v95)

What's Changed

• [AWSX] fix(logs forwarder): Override service tag from StepFunction tags by @ge0Aja in #1049
• Patch 1 by @ge0Aja in #1050
• [AWSX] feat(logs forwarder): Prepare patch version 5.2.1 by @ge0Aja in #1051

Full Changelog: aws-dd-forwarder-5.2.0...aws-dd-forwarder-5.2.1

aws-dd-forwarder-5.2.0 (Layer v94)

What's Changed

• ci(docker): Make apple container usable in place of docker by @ViBiOh in #1036
• [AWSX] feat(logs forwarder): update template and document custom source override by @ge0Aja in #1037
• Update README.md by @nine5two7 in #1039
• [AWSX] fix(logs forwarder): Bump datadog-lambda and ddtrace packages versions by @ge0Aja in #1038
• [AWSX] fix(logs fowarder): Bump urllib3 version - CVE-2026-21441 by @ge0Aja in #1042
• [forwarder][lambda]: don't fail to parse on managed instances report log by @duncanista in #1041
• [AWSX] fix(logs fowarder): Skip header line on VPC flow logs parsing by @ge0Aja in #1044
• Correct AWS PrivateLink support by @perzycharles in #1046
• [AWSX] fix(logs forwarder): Update docs on trace forwarding by @ge0Aja in #1047
• [AWSX] feat(logs forwarder): Support Python3.14 by @ge0Aja in #1048

New Contributors

• @duncanista made their first contribution in #1041

Additional Notes

• Starting this version Datadog Lambda Forwarder requires Python v3.14

Full Changelog: aws-dd-forwarder-5.1.1...aws-dd-forwarder-5.2.0

aws-dd-forwarder-5.1.1 (Layer v93)

What's Changed

• bump dependencies by @mattsp1290 in #1031
• [AWSCORE-563] Add docs for deploying forwarder stack as stackset by @ktmq in #1028
• fix(aws): fix broken link in docs by @ktmq in #1032
• Clarify DdTraceEnabled description by @nine5two7 in #1033
• [AWSX] fix(log forwarder): bump urllib version - CVE-2025-66418 by @ge0Aja in #1034
• Update version from 5.1.0 to 5.1.1 by @klivan in #1035

Full Changelog: aws-dd-forwarder-5.1.0...aws-dd-forwarder-5.1.1

aws-dd-forwarder-5.1.0 (Layer v92)

What's Changed

• docs(aws): Update documentation related to include at match by @ViBiOh in #1021
• fix(aws): Support http/429 as a retryable status code by @ViBiOh in #1022
• AWS KMS.1 compliant policy with dedicated kms key list by @n0pants in #1020
• feat(aws): AWSX-2034 Continue if we fail to validate api key but storage of failed event enabled by @ViBiOh in #1026
• fix(aws): Using JSON dump against dict-only payload (cloudtrail) to have consistent regex filtering by @ViBiOh in #1029
• feat(aws): Add scheduled invocation for retry event by @ViBiOh in #1027
• Update version from 5.0.0 to 5.1.0 by @klivan in #1030

New Contributors

• @n0pants made their first contribution in #1020

Full Changelog: aws-dd-forwarder-5.0.0...aws-dd-forwarder-5.1.0