aws-observability/aws-otel-java-instrumentation v2.32.0

Release v2.32.0

on GitHub

What's Changed

• feat: the continuous profiler now defaults to full sample aggregation (OTEL_AWS_PROFILER_AGGREGATION_MODE): samples with the same stack, trace link and attributes are merged into one OTLP sample that keeps every observation's value and timestamp. With none, the previous default, every raw sample is its own OTLP sample, so a 60 s wall window easily exceeds CloudWatch Profiles' 16,000-samples-per-profile limit and is rejected. none and sum are still available. (#1481)

• feat: register OTLP SigV4 exporters with Java SPI SigV4 region detection checks aws.region / AWS_REGION, then aws.default.region / AWS_DEFAULT_REGION. If neither is configured, it falls back to the endpoint region, then the default AWS SDK region provider chain. (#1475)

• feat: add an experimental, opt-in continuous code profiler (async-profiler based) that exports native OTLP profiles. It uses the OTLP v1development profiles schema, which is not yet stable and may change in incompatible ways. Enabled with OTEL_AWS_PROFILER_ENABLED=true; supports wall (default) and cpu modes (OTEL_AWS_PROFILER_MODE), optional allocation profiling (OTEL_AWS_PROFILER_MEMORY_ENABLED), a per-sample thread.state attribute on wall profiles, and per-sample span correlation (operation attribute + trace/span link). Exports over OTLP/HTTP protobuf (default) or OTLP/gRPC, selected by OTEL_EXPORTER_OTLP_PROTOCOL. Off by default; no behavior change unless enabled. (#1457)

• fix: with OTEL_AWS_HTTP_OPERATION_PATHS set, child spans now inherit the overridden operation from their server span, so dependency metrics are reported under the same operation as the service metrics instead of the original span name. (#1471)

• Bump jackson-bom to 2.22.3 to fix CVE-2026-89407, CVE-2026-89425, CVE-2026-91776, and CVE-2026-91777 (#1464)

• fix: recognize AWS China (.amazonaws.com.cn) CloudWatch OTLP endpoints and apply SigV4 to direct traces, logs, and metrics export, including Dynamic Instrumentation and Service Events logs. (#1460)

• feat: add INFO logs identifying the selected metrics exporter, destination, and authentication mode for CloudWatch EMF, console EMF, and direct CloudWatch OTLP metrics export. (#1456)

• feat: add SigV4 authentication for collector-less OTLP metrics export to the CloudWatch metrics endpoint (https://monitoring.<region>.amazonaws.com/v1/metrics, SigV4 service monitoring), matching the existing direct traces and logs behavior. Requires OTEL_METRICS_EXPORTER=otlp, OTEL_EXPORTER_OTLP_METRICS_PROTOCOL=http/protobuf, and OTEL_EXPORTER_OTLP_METRICS_ENDPOINT set to the CloudWatch metrics endpoint. An explicitly configured OTLP metrics Authorization header (bearer token) is preserved and takes precedence over SigV4. Upstream metric settings, including temporality and aggregation, are unchanged. (#1455)

• fix: an explicitly configured OTLP Authorization header (bearer token) now also takes precedence over SigV4 for direct traces and logs export, matching the new metrics behavior. Previously both values were sent on the same request. Only the signal-specific variable (OTEL_EXPORTER_OTLP_TRACES_HEADERS, OTEL_EXPORTER_OTLP_LOGS_HEADERS, OTEL_EXPORTER_OTLP_METRICS_HEADERS) selects bearer authentication; a global OTEL_EXPORTER_OTLP_HEADERS does not disable SigV4. (#1455)

• Update OpenTelemetry dependencies to 2.32.0 (contrib 1.61.0) (#1462)

Upstream Components

• OpenTelemetry Java Contrib - 1.61.0
• Opentelemetry Instrumentation for Java - 2.32.0

Release Artifacts

This release publishes to public ECR and Maven Central.

• See ADOT Java auto-instrumentation Docker image v2.32.0 in our public ECR repository:
  https://gallery.ecr.aws/aws-observability/adot-autoinstrumentation-java
• See version 2.32.0 in our Maven Central repository:
  https://central.sonatype.com/artifact/software.amazon.opentelemetry/aws-opentelemetry-agent

Lambda Layer

This release includes the AWS OpenTelemetry Lambda Layer for Java version 2.32.0-34e64e5.

Lambda Layer ARNs: