ministackorg/ministack v1.5.41

on GitHub

What's Changed

New Contributors

• @qnm made their first contribution in #2676
• @bryanhelmig made their first contribution in #2677

[1.5.41] — 2026-11-14

Added

• Firehose — Iceberg tables on the Glue Data Catalog — an Iceberg destination never wrote to the table. Records now buffer per BufferingHints and land as one Iceberg commit per buffer, with the Glue metadata_location updated; a value that can't be converted goes to <ErrorOutputPrefix>iceberg-failed/ as Iceberg.MalformedFieldWithinRecord, and a Glue table that isn't Iceberg as Iceberg.NoSuchIcebergTable. Full image (DuckDB). Contributed by @yonatoasis.
• SSM — Secrets Manager references — GetParameter and GetParameters refused /aws/reference/secretsmanager/<secret-id>. They now return the secret's AWSCURRENT value as a SecureString with its ARN and SourceResult; WithDecryption must be true, a missing secret answers ParameterNotFound, and under AUTH=true the caller needs secretsmanager:GetSecretValue on the secret. Contributed by @qnm.

Fixed

• ACM — names and dates of an imported certificate — ImportCertificate reported a synthetic imported-cert-<id>.invalid name and a year of validity from the import. A body that parses now reports its CN as DomainName, its DNS SANs in SubjectAlternativeNames and DomainValidationOptions, and its own NotBefore / NotAfter. Contributed by @bryanhelmig.
• API Gateway — AWS integrations targeting SNS — an sns:path// or sns:action/{Action} integration answered 500 "Internal server error". It now makes the SNS call from the rendered request template in the topic's account and Region and maps the reply through integrationResponses. Reported by @OkButterscotch2891 on Reddit.
• RDS — a missing cluster or DB subnet group on create — CreateDBInstance with an unknown DBClusterIdentifier or cluster ARN now answers 404 DBClusterNotFoundFault, and CreateDBCluster with a DBSubnetGroupName that does not exist 404 DBSubnetGroupNotFoundFault "DB subnet group '' does not exist."; neither creates anything. Contributed by @kharabasz and @Areson.
• RDS — global cluster failover and removal errors — FailoverGlobalCluster with AllowDataLoss and Switchover both true answers 400 InvalidParameterValue "Parameter combination isn't valid. …". RemoveFromGlobalCluster answers 400 InvalidParameterValue for a member ARN over 63 characters ("Invalid database cluster identifier: ") or one that names no cluster ("Cluster is not found in global cluster "). Contributed by @Areson.
• RDS — Aurora MySQL shapes and default DB parameter groups — Aurora MySQL clusters carry ReadReplicaIdentifiers and DomainMemberships; a member instance takes its cluster's DB subnet group and VPC security groups, leaves out empty lists, and has no Endpoint in its CreateDBInstance response. DescribeDBParameters answers for an Aurora family's default.<family> group. Contributed by @Areson.
• RDS Data API — a missing cluster and MySQL SELECT counts — a cluster ARN in the caller's account and Region that names no cluster answers 400 HttpEndpointNotEnabledException "HttpEndpoint is not enabled for resource .", not BadRequestException; a MySQL SELECT reports numberOfRecordsUpdated 0 and no generatedFields. Contributed by @Areson.
• SNS — the Sns record a Lambda receives — Lambda got the SQS/HTTP envelope, so a handler reading record['Sns']['Subject'] raised KeyError. Subject is now null and MessageAttributes {} when absent, the members are SigningCertUrl and UnsubscribeUrl, and each attribute is Binary or String. Contributed by @bryanhelmig.