Maintenance: end of support for aws-encryption-sdk 3.x #8190

Activity

1. leandrodamascena

   added

   triagePending triage from maintainersPending triage from maintainers

   internalMaintenance changesMaintenance changes

   on May 2, 2026
2. github-project-automation

   added this to Powertools for AWS Lambda (Python)on May 2, 2026
3. github-project-automation

   moved this to Triage in Powertools for AWS Lambda (Python)on May 2, 2026
4. leandrodamascena

   pinned this issue on May 2, 2026
5. leandrodamascena

   unpinned this issue on Jun 6, 2026
6. leandrodamascena commented on Jul 12, 2026

   

   leandrodamascena

   on Jul 12, 2026

   ContributorAuthor

   More actions

   Hey folks, quick update on this one.

   I decided to go ahead and drop aws-encryption-sdk 3.x now instead of waiting. A few reasons behind that call:

   • The 3.x version keeps picking up security issues, and it's in maintenance mode upstream. Carrying a version range that spans two majors (3.x and 4.x) has been more painful than it's worth becayse the constraint is already full of exclusions we had to add one by one as problems came up, and honestly that approach doesn't scale. Every new CVE means another patch to the range.

   • Security comes first for us, so I'd rather move everyone to 4.x cleanly than keep maintaining a messy range that straddles both. No Powertools utility is affected by this and the data masking provider uses the same API on 3.x and 4.x. The only impact is if you bring Powertools alongside aws-encryption-sdk pinned to 3.x, in which case you'll hit a resolution conflict and need to move to 4.x.

   So I'm bumping the minimum to >=4.0.5,<5.0.0. If you're still on 3.x, please start planning the move and I'm happy to help if you run into anything.
7. leandrodamascena

   closed this as completedin #8335on Jul 13, 2026
8. github-project-automation

   moved this from Triage to Coming soon in Powertools for AWS Lambda (Python)on Jul 13, 2026
9. powertools-for-aws-oss-automation commented on Jul 13, 2026

   

   powertools-for-aws-oss-automationBot

   on Jul 13, 2026 – with Powertools for AWS - OSS Automation

   More actions

   Warning

   This issue is now closed. Please be mindful that future comments are hard for our team to see.
   If you need more assistance, please either reopen the issue, or open a new issue referencing this one.
   If you wish to keep having a conversation with other community members under this issue feel free to do so.
10. powertools-for-aws-oss-automation

    added

    pending-releaseFix or implementation already in dev waiting to be releasedFix or implementation already in dev waiting to be released

    and removed

    triagePending triage from maintainersPending triage from maintainers

    on Jul 13, 2026
11. github-actions commented on Jul 13, 2026

    

    github-actionsBot

    on Jul 13, 2026 – with GitHub Actions

    Contributor

    More actions

    This is now released under 3.31.1 version!
12. github-actions

    removed

    pending-releaseFix or implementation already in dev waiting to be releasedFix or implementation already in dev waiting to be released

    on Jul 13, 2026