Merge branch 'release-1.44.83'

* release-1.44.83:
  Bumping version to 1.44.83
  Update changelog based on model updates
  fix(emr): Correct --rep-upgrade-on-boot typo in help text (#10232)
  Double-quote Windows alias command args if metacharacters present (#10230)
  Auto-detect account regional namespace buckets in s3 mb (#10213)

Author: aws-sdk-python-automation

.changes/1.44.83.json

@@ -0,0 +1,52 @@
+[
+  {
+    "category": "``cognito-idp``",
+    "description": "Adding dutch language support for Cognito Managed Login and Terms on Console",
+    "type": "api-change"
+  },
+  {
+    "category": "``comprehendmedical``",
+    "description": "This release adds Smithy RPC v2 CBOR as an additional protocol alongside the existing AWS JSON 1.1. The SDK will prioritize its most performant protocol.",
+    "type": "api-change"
+  },
+  {
+    "category": "``compute-optimizer``",
+    "description": "This release adds Smithy RPC v2 CBOR as an additional protocol alongside the existing AWS JSON 1.0. The SDK will prioritize its most performant protocol.",
+    "type": "api-change"
+  },
+  {
+    "category": "``compute-optimizer-automation``",
+    "description": "This release adds Smithy RPC v2 CBOR as an additional protocol alongside the existing AWS JSON 1.0. The SDK will prioritize its most performant protocol.",
+    "type": "api-change"
+  },
+  {
+    "category": "``gamelift``",
+    "description": "This release adds Smithy RPC v2 CBOR as an additional protocol alongside the existing AWS JSON 1.1. The SDK will prioritize its most performant protocol.",
+    "type": "api-change"
+  },
+  {
+    "category": "``marketplace-entitlement``",
+    "description": "This release adds Smithy RPC v2 CBOR as an additional protocol alongside the existing AWS JSON 1.1. The SDK will prioritize its most performant protocol.",
+    "type": "api-change"
+  },
+  {
+    "category": "``network-firewall``",
+    "description": "Support for new types of partner managed rulegroups for Network Firewall Service",
+    "type": "api-change"
+  },
+  {
+    "category": "``sagemaker``",
+    "description": "SageMaker AI now supports generative AI inference recommendations. Provide your model and workload, and SageMaker AI optimizes configurations, benchmarks them on real GPUs, and returns deployment-ready recommendations with validated metrics, accelerating the path to production from weeks to hours.",
+    "type": "api-change"
+  },
+  {
+    "category": "``snowball``",
+    "description": "This release adds Smithy RPC v2 CBOR as an additional protocol alongside the existing AWS JSON 1.1. The SDK will prioritize its most performant protocol.",
+    "type": "api-change"
+  },
+  {
+    "category": "``S3``",
+    "description": "Add support for creating S3 account regional namespace buckets with ``aws s3 mb``. The command now automatically detects bucket names matching the account-regional naming pattern and sets the required ``x-amz-bucket-namespace`` header.",
+    "type": "enhancement"
+  }
+]

CHANGELOG.rst

@@ -2,6 +2,21 @@
 CHANGELOG
 =========
 
+1.44.83
+=======
+
+* api-change:``cognito-idp``: Adding dutch language support for Cognito Managed Login and Terms on Console
+* api-change:``comprehendmedical``: This release adds Smithy RPC v2 CBOR as an additional protocol alongside the existing AWS JSON 1.1. The SDK will prioritize its most performant protocol.
+* api-change:``compute-optimizer``: This release adds Smithy RPC v2 CBOR as an additional protocol alongside the existing AWS JSON 1.0. The SDK will prioritize its most performant protocol.
+* api-change:``compute-optimizer-automation``: This release adds Smithy RPC v2 CBOR as an additional protocol alongside the existing AWS JSON 1.0. The SDK will prioritize its most performant protocol.
+* api-change:``gamelift``: This release adds Smithy RPC v2 CBOR as an additional protocol alongside the existing AWS JSON 1.1. The SDK will prioritize its most performant protocol.
+* api-change:``marketplace-entitlement``: This release adds Smithy RPC v2 CBOR as an additional protocol alongside the existing AWS JSON 1.1. The SDK will prioritize its most performant protocol.
+* api-change:``network-firewall``: Support for new types of partner managed rulegroups for Network Firewall Service
+* api-change:``sagemaker``: SageMaker AI now supports generative AI inference recommendations. Provide your model and workload, and SageMaker AI optimizes configurations, benchmarks them on real GPUs, and returns deployment-ready recommendations with validated metrics, accelerating the path to production from weeks to hours.
+* api-change:``snowball``: This release adds Smithy RPC v2 CBOR as an additional protocol alongside the existing AWS JSON 1.1. The SDK will prioritize its most performant protocol.
+* enhancement:``S3``: Add support for creating S3 account regional namespace buckets with ``aws s3 mb``. The command now automatically detects bucket names matching the account-regional naming pattern and sets the required ``x-amz-bucket-namespace`` header.
+
+
 1.44.82
 =======
 

awscli/__init__.py

@@ -18,7 +18,7 @@
 
 import os
 
-__version__ = '1.44.82'
+__version__ = '1.44.83'
 
 #
 # Get our data path to be added to botocore's search path

awscli/alias.py

@@ -289,7 +289,9 @@ def __init__(self, alias_name, alias_value, invoker=subprocess.call):
 
     def __call__(self, args, parsed_globals):
         command_components = [self._alias_value[1:]]
-        command_components.extend(compat_shell_quote(a) for a in args)
+        command_components.extend(
+            compat_shell_quote(a, shell=True) for a in args
+        )
         command = ' '.join(command_components)
         LOG.debug(
             'Using external alias %r with value: %r to run: %r',

awscli/compat.py

@@ -71,6 +71,11 @@
     default_pager = 'less -R'
 
 
+# cmd.exe characters that require double-quoting to be treated as literals.
+# https://learn.microsoft.com/en-us/windows-server/administration/windows-commands/cmd
+_WIN_CMD_UNSAFE_CHARS = set('&<>[]|{}^=;!\'()+,`~ \t')
+
+
 class StdinMissingError(Exception):
     def __init__(self):
         message = 'stdin is required for this operation, but is not available.'
@@ -189,7 +194,7 @@ def compat_input(prompt):
     return raw_input()
 
 
-def compat_shell_quote(s, platform=None):
+def compat_shell_quote(s, platform=None, shell=False):
     """Return a shell-escaped version of the string *s*
 
     Unfortunately `shlex.quote` doesn't support Windows, so this method
@@ -199,13 +204,15 @@ def compat_shell_quote(s, platform=None):
         platform = sys.platform
 
     if platform == "win32":
-        return _windows_shell_quote(s)
+        if shell:
+            return _windows_cmd_shell_quote(s)
+        return _windows_argv_quote(s)
     else:
         return shlex.quote(s)
 
 
-def _windows_shell_quote(s):
-    """Return a Windows shell-escaped version of the string *s*
+def _windows_argv_quote(s):
+    """Return a Windows argv-escaped version of the string *s*
 
     Windows has potentially bizarre rules depending on where you look. When
     spawning a process via the Windows C runtime the rules are as follows:
@@ -227,37 +234,37 @@ def _windows_shell_quote(s):
         return '""'
 
     buff = []
-    num_backspaces = 0
+    num_backslashes = 0
     for character in s:
         if character == '\\':
             # We can't simply append backslashes because we don't know if
             # they will need to be escaped. Instead we separately keep track
             # of how many we've seen.
-            num_backspaces += 1
+            num_backslashes += 1
         elif character == '"':
-            if num_backspaces > 0:
+            if num_backslashes > 0:
                 # The backslashes are part of a chain that lead up to a
                 # double quote, so they need to be escaped.
-                buff.append('\\' * (num_backspaces * 2))
-                num_backspaces = 0
+                buff.append('\\' * (num_backslashes * 2))
+                num_backslashes = 0
 
             # The double quote also needs to be escaped. The fact that we're
             # seeing it at all means that it must have been escaped in the
             # original source.
             buff.append('\\"')
         else:
-            if num_backspaces > 0:
+            if num_backslashes > 0:
                 # The backslashes aren't part of a chain leading up to a
                 # double quote, so they can be inserted directly without
                 # being escaped.
-                buff.append('\\' * num_backspaces)
-                num_backspaces = 0
+                buff.append('\\' * num_backslashes)
+                num_backslashes = 0
             buff.append(character)
 
-    # There may be some leftover backspaces if they were on the trailing
+    # There may be some leftover backslashes if they were on the trailing
     # end, so they're added back in here.
-    if num_backspaces > 0:
-        buff.append('\\' * num_backspaces)
+    if num_backslashes > 0:
+        buff.append('\\' * num_backslashes)
 
     new_s = ''.join(buff)
     if ' ' in new_s or '\t' in new_s:
@@ -267,6 +274,60 @@ def _windows_shell_quote(s):
     return new_s
 
 
+def _windows_cmd_shell_quote(s):
+    """Return a Windows shell-escaped version of the string *s* that is
+    safe to pass through cmd.exe
+
+    Handles two interpretation layers:
+      1. cmd.exe metacharacters - neutralized by double-quoting when
+         the string contains any cmd.exe special characters.
+      2. MSVC C runtime argv parsing - backslash/double-quote escaping
+         so the target process receives the correct argument.
+
+    Note: cmd.exe %VAR% expansion and !VAR! delayed expansion
+    cannot be reliably escaped inside double quotes on the
+    command line and are not handled here.
+
+    :param s: A string to escape
+    :return: An escaped string
+    """
+    if not s:
+        return '""'
+
+    buff = []
+    num_backslashes = 0
+    needs_quoting = False
+    for character in s:
+        if character == '\\':
+            num_backslashes += 1
+        elif character == '"':
+            if num_backslashes > 0:
+                buff.append('\\' * (num_backslashes * 2))
+                num_backslashes = 0
+            buff.append('\\"')
+            needs_quoting = True
+        else:
+            if num_backslashes > 0:
+                buff.append('\\' * num_backslashes)
+                num_backslashes = 0
+            if character in _WIN_CMD_UNSAFE_CHARS:
+                needs_quoting = True
+            buff.append(character)
+
+    if needs_quoting:
+        # Trailing backslashes must be doubled when we append a closing
+        # double quote — without doubling, a trailing backslash would
+        # escape the closing quote.
+        if num_backslashes > 0:
+            buff.append('\\' * (num_backslashes * 2))
+        inner = ''.join(buff)
+        return f'"{inner}"'
+
+    if num_backslashes > 0:
+        buff.append('\\' * num_backslashes)
+    return ''.join(buff)
+
+
 def get_popen_kwargs_for_pager_cmd(pager_cmd=None):
     """Returns the default pager to use dependent on platform
 

awscli/customizations/emr/helptext.py

@@ -437,7 +437,7 @@
     ' specified. On first boot, by default, Amazon Linux AMIs'
     ' connect to package repositories to install security updates'
     ' before other services start. You can set this parameter'
-    ' using <code>--rep-upgrade-on-boot NONE</code> to'
+    ' using <code>--repo-upgrade-on-boot NONE</code> to'
     ' disable these updates. CAUTION: This creates additional'
     ' security risks.</p>'
 )

awscli/customizations/s3/subcommands.py

@@ -31,7 +31,7 @@
 from awscli.customizations.s3.utils import find_bucket_key, AppendFilter, \
     find_dest_path_comp_key, human_readable_size, \
     RequestParamsMapper, split_s3_bucket_key, block_unsupported_resources, \
-    S3PathResolver
+    S3PathResolver, is_account_regional_namespace_bucket
 from awscli.customizations.utils import uni_print
 from awscli.customizations.s3.syncstrategy.base import MissingFileSync, \
     SizeAndLastModifiedSync, NeverSync, AlwaysSync
@@ -910,6 +910,9 @@ def _run_main(self, parsed_args, parsed_globals):
         bucket_config = {}
         bucket_tags = self._create_bucket_tags(parsed_args)
 
+        if is_account_regional_namespace_bucket(bucket):
+            params['BucketNamespace'] = 'account-regional'
+
         # Only set LocationConstraint when the region name is not us-east-1.
         # Sending LocationConstraint with value us-east-1 results in an error.
         if self.client.meta.region_name != 'us-east-1':

awscli/customizations/s3/utils.py

@@ -64,6 +64,10 @@
 )
 
 
+def is_account_regional_namespace_bucket(bucket):
+    return bucket.endswith('-an')
+
+
 def human_readable_size(value):
     """Convert a size in bytes into a human readable format.
 

doc/source/conf.py

@@ -52,7 +52,7 @@
 # The short X.Y version.
 version = '1.44.'
 # The full version, including alpha/beta/rc tags.
-release = '1.44.82'
+release = '1.44.83'
 
 # The language for content autogenerated by Sphinx. Refer to documentation
 # for a list of supported languages.

setup.cfg

@@ -3,7 +3,7 @@ universal = 0
 
 [metadata]
 requires_dist =
-        botocore==1.42.92
+        botocore==1.42.93
         docutils>=0.18.1,<=0.19
         s3transfer>=0.16.0,<0.17.0
         PyYAML>=3.10,<6.1