fix(lambda): bump @aws-sdk/client-ec2 from 3.865.0 to 3.868.0 in /lambdas in the aws group

[dependabot]

⚠️ Dependabot is rebasing this PR ⚠️

Rebasing might not happen immediately, so don't worry if this takes some time.

Note: if you make any changes to this PR yourself, they will take precedence over the rebase.

---

Bumps the aws group in /lambdas with 1 update: @aws-sdk/client-ec2.

Updates @aws-sdk/client-ec2 from 3.865.0 to 3.868.0

Release notes

Sourced from @​aws-sdk/client-ec2's releases.

v3.868.0

3.868.0(2025-08-14)

Documentation Changes

• client-qapps: Documentation update for Amazon Q Apps API Reference (a1414aab)

New Features

• clients: update client endpoints as of 2025-08-14 (09fe8850)
• client-fsx: Amazon FSx for NetApp ONTAP 2nd generation file systems now support decreasing SSD storage capacity. (8cb23abd)
• client-bcm-recommended-actions: Initial SDK release for AWS Billing and Cost Management Recommended Actions. (2443ab1f)
• client-guardduty: Added support for entity lists. (709b5886)
• client-arc-region-switch: Endpoint rule test and documentation update. (4e686d39)
• client-pcs: Updated the regex pattern and description of iamInstanceProfileArn in the CreateComputeNodeGroup and UpdateComputeNodeGroup API actions. Name and path requirements apply to the ARN of the IAM role associated with the instance profile and not the ARN of the instance profile. (b5adbbce)
• client-ec2: This release adds ModifyInstanceConnectEndpoint API to update configurations on existing EC2 Instance Connect Endpoints and improves IPv6 support through dualstack DNS names for EC2 Instance Connect Endpoints. (a8bd4d8e)
• client-workspaces: New APIs introduced to import WorkSpaces BYOL image using a new process that leveraged EC2 Image Builder. WorkSpaces tests and fixes your image's compatibility issues and supports customized VM images. (5e93ef1d)
• client-direct-connect: Added pagination support for DescribeHostedConnections, DescribeVirtualInterfaces, DescribeConnections, DescribeInterconnects, DescribeLags. Added asnLong support for BGP peer operations which supports a large range. (ae2b9bca)
• client-dynamodb: This release 1/ Adds support for throttled keys mode for CloudWatch Contributor Insights, 2/ Adds throttling reasons to exceptions across dataplane APIs. 3/ Explicitly models ThrottlingException as a class in statically typed languages. Refer to the launch day blog post for more details. (a2e49920)
• client-glue: AWS Glue now supports Trusted Identity Propagation. (71e32da3)
• client-medialive: CMAF Ingest output groups in MediaLive can now accept one additional destination url for single pipeline channels and up to two additional destination urls for standard channels. (761c8112)
• client-servicediscovery: Added support for cross account through Id parameter overloading with ARN and allow owner account for some APIs instead of ARN (3002abd8)

---

For list of updated packages, view updated-packages.md in assets-3.868.0.zip

v3.867.0

3.867.0(2025-08-13)

New Features

• client-sagemaker: This release introduces compute quota for GPU, Trainium accelerators, vCPU, and vCPU memory utilization across teams in HyperPod clusters (0e1fe398)
• client-datazone: Adds support for account pools and project profile account decoupling (74fe668e)
• client-security-ir: Added support for Organizational Unit-level Membership configuration and the ability to resume a cancelled membership. (8396253e)
• client-partnercentral-selling: Add Tagging Support for Opportunity resources (9ede01bc)
• client-fsx: Add Dual-Stack support for Amazon FSx for OpenZFS file systems (46d94c15)
• client-braket: Add support for Braket program sets. (ead04e97)

---

For list of updated packages, view updated-packages.md in assets-3.867.0.zip

v3.866.0

3.866.0(2025-08-12)

New Features

... (truncated)

Changelog

Sourced from @​aws-sdk/client-ec2's changelog.

3.868.0 (2025-08-14)

Features

• client-ec2: This release adds ModifyInstanceConnectEndpoint API to update configurations on existing EC2 Instance Connect Endpoints and improves IPv6 support through dualstack DNS names for EC2 Instance Connect Endpoints. (a8bd4d8)

3.866.0 (2025-08-12)

Features

• client-ec2: Release to allow route table association with a PublicIpv4Pool. (c62fd16)

Commits

• 370b0e4 Publish v3.868.0
• a8bd4d8 feat(client-ec2): This release adds ModifyInstanceConnectEndpoint API to upda...
• dc1b75f Publish v3.866.0
• c62fd16 feat(client-ec2): Release to allow route table association with a PublicIpv4P...
• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

[github-actions]

Dependency Review

✅ No vulnerabilities or license issues or OpenSSF Scorecard issues found.

OpenSSF Scorecard

Package	Version	Score	Details
npm/@aws-sdk/client-ec2	^3.868.0	🟢 4.6	Details Check Score Reason Code-Review ⚠️ 1 Found 3/30 approved changesets -- score normalized to 1 Maintained 🟢 10 30 commit(s) and 1 issue activity found in the last 90 days -- score normalized to 10 Packaging ⚠️ -1 packaging workflow not detected CII-Best-Practices ⚠️ 0 no effort to earn an OpenSSF best practices badge detected License 🟢 10 license file detected Token-Permissions ⚠️ 0 detected GitHub workflow tokens with excessive permissions Dangerous-Workflow 🟢 10 no dangerous workflow patterns detected Branch-Protection ⚠️ -1 internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration Signed-Releases ⚠️ 0 Project has not signed or included provenance with any releases. Security-Policy 🟢 10 security policy file detected SAST 🟢 10 SAST tool is run on all commits Binary-Artifacts 🟢 8 binaries present in source code Pinned-Dependencies ⚠️ 0 dependency not pinned by hash detected -- score normalized to 0 Vulnerabilities ⚠️ 0 31 existing vulnerabilities detected Fuzzing ⚠️ 0 project is not fuzzed
npm/@aws-sdk/client-ec2	^3.868.0	🟢 4.6	Details Check Score Reason Code-Review ⚠️ 1 Found 3/30 approved changesets -- score normalized to 1 Maintained 🟢 10 30 commit(s) and 1 issue activity found in the last 90 days -- score normalized to 10 Packaging ⚠️ -1 packaging workflow not detected CII-Best-Practices ⚠️ 0 no effort to earn an OpenSSF best practices badge detected License 🟢 10 license file detected Token-Permissions ⚠️ 0 detected GitHub workflow tokens with excessive permissions Dangerous-Workflow 🟢 10 no dangerous workflow patterns detected Branch-Protection ⚠️ -1 internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration Signed-Releases ⚠️ 0 Project has not signed or included provenance with any releases. Security-Policy 🟢 10 security policy file detected SAST 🟢 10 SAST tool is run on all commits Binary-Artifacts 🟢 8 binaries present in source code Pinned-Dependencies ⚠️ 0 dependency not pinned by hash detected -- score normalized to 0 Vulnerabilities ⚠️ 0 31 existing vulnerabilities detected Fuzzing ⚠️ 0 project is not fuzzed
npm/@aws-sdk/client-ec2	^3.868.0	🟢 4.6	Details Check Score Reason Code-Review ⚠️ 1 Found 3/30 approved changesets -- score normalized to 1 Maintained 🟢 10 30 commit(s) and 1 issue activity found in the last 90 days -- score normalized to 10 Packaging ⚠️ -1 packaging workflow not detected CII-Best-Practices ⚠️ 0 no effort to earn an OpenSSF best practices badge detected License 🟢 10 license file detected Token-Permissions ⚠️ 0 detected GitHub workflow tokens with excessive permissions Dangerous-Workflow 🟢 10 no dangerous workflow patterns detected Branch-Protection ⚠️ -1 internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration Signed-Releases ⚠️ 0 Project has not signed or included provenance with any releases. Security-Policy 🟢 10 security policy file detected SAST 🟢 10 SAST tool is run on all commits Binary-Artifacts 🟢 8 binaries present in source code Pinned-Dependencies ⚠️ 0 dependency not pinned by hash detected -- score normalized to 0 Vulnerabilities ⚠️ 0 31 existing vulnerabilities detected Fuzzing ⚠️ 0 project is not fuzzed
npm/@aws-sdk/client-ec2	3.868.0	🟢 4.6	Details Check Score Reason Code-Review ⚠️ 1 Found 3/30 approved changesets -- score normalized to 1 Maintained 🟢 10 30 commit(s) and 1 issue activity found in the last 90 days -- score normalized to 10 Packaging ⚠️ -1 packaging workflow not detected CII-Best-Practices ⚠️ 0 no effort to earn an OpenSSF best practices badge detected License 🟢 10 license file detected Token-Permissions ⚠️ 0 detected GitHub workflow tokens with excessive permissions Dangerous-Workflow 🟢 10 no dangerous workflow patterns detected Branch-Protection ⚠️ -1 internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration Signed-Releases ⚠️ 0 Project has not signed or included provenance with any releases. Security-Policy 🟢 10 security policy file detected SAST 🟢 10 SAST tool is run on all commits Binary-Artifacts 🟢 8 binaries present in source code Pinned-Dependencies ⚠️ 0 dependency not pinned by hash detected -- score normalized to 0 Vulnerabilities ⚠️ 0 31 existing vulnerabilities detected Fuzzing ⚠️ 0 project is not fuzzed

Scanned Files

• lambdas/functions/ami-housekeeper/package.json
• lambdas/functions/control-plane/package.json
• lambdas/functions/termination-watcher/package.json
• lambdas/yarn.lock

[npalm]

@dependabot rebase

[dependabot]

Looks like this PR has been edited by someone other than Dependabot. That means Dependabot can't rebase it - sorry!

If you're happy for Dependabot to recreate it from scratch, overwriting any edits, you can request @dependabot recreate.

[npalm]

@dependabot recreate

[dependabot]

This pull request was built based on a group rule. Closing it will not ignore any of these versions in future pull requests.

To ignore these dependencies, configure ignore rules in dependabot.yml