4.3.0 -- 2025-11-24

Deprecation

• The AWS Encryption SDK CLI no longer supports Python < 3.10 as of major version 4.3.x; only Python 3.10+ is supported.
• Removed pkg_resources in favor of importlib.metadata
#428 <https://github.com/aws/aws-encryption-sdk-cli/pull/428>_

Operational

• Drop release dependency on pypi-parker

4.2.0 -- 2024-09-09

Deprecation

The AWS Encryption SDK CLI no longer supports Python 3.7
as of major version 4.2.x; only Python 3.8+ is supported.

4.1.0 -- 2021-11-11

Deprecation

The AWS Encryption SDK CLI no longer supports Python 3.5
as of major version 4.1.x; only Python 3.6+ is supported. Customers using
Python 3.5 can still use the 3.x line of the AWS Encryption SDK CLI,
which will continue to receive security updates until 2022-07-13, in accordance
with our Support Policy.

Maintenance

• Add Python 3.10 testing and support

4.0.0 -- 2021-07-13

Deprecation

The AWS Encryption SDK CLI no longer supports Python 2 or Python 3.4 as of major version 4.x; only Python 3.5+ is supported. Customers using Python 2 or Python 3.4 can still use the 3.x line of the AWS Encryption SDK CLI, which will continue to receive security updates for the next 12 months, in accordance with our Support Policy.

3.1.0 -- 2021-07-13

Deprecation Announcement

The AWS Encryption SDK CLI is discontinuing support for Python 2. Future major versions of this library will drop support for Python 2 and begin to adopt changes that are known to break Python 2.

Support for Python 3.4 will be removed at the same time. Moving forward, we will support Python 3.5+.

Security updates will still be available for the AWS Encryption SDK CLI 3.x line for the next 12 months, in accordance with our Support Policy.

3.0.0 -- 2021-06-16

Features

• AWS KMS multi-Region Key support ( #216 )

  CLI now supports Multi-Region Keys (MRKs).
  Usage of MRKs is identical to the usage of non-MRK KMS Keys.
  Though a KMS Key does not have to be a MRK key for it to be used.

  See https://docs.aws.amazon.com/kms/latest/developerguide/multi-region-keys-overview.html
  for more details about AWS KMS multi-Region Keys.

  See https://docs.aws.amazon.com/encryption-sdk/latest/developer-guide/configure.html#config-mrks
  for more details about how the AWS Encryption SDK interoperates
  with AWS KMS multi-Region keys.

2.2.0 -- 2021-05-27

Features

• Improvements to the message decryption process (#213)
  See GHSA-89v2-g37m-g3ff

1.9.0 -- 2021-05-27

Features

• Improvements to the message decryption process (#211)
  See GHSA-89v2-g37m-g3ff

2.1.0 -- 2020-10-27

Bugfixes

• Fixes for enabling or disabling discovery mode in the CLI

Breaking Changes

• --discovery parameter is removed. It is replaced by a ‘discovery’ attribute of --wrapping-keys parameter. Decrypt commands will fail if ‘discovery’ is used as a parameter. The ‘discovery’ attribute is valid only in decrypt commands where the provider is ‘aws-kms’. The command will fail if ‘discovery’ attribute is combined with any other provider.

See https://docs.aws.amazon.com/encryption-sdk/latest/developer-guide/crypto-cli.html for more information.

1.8.0 -- 2020-10-27

Bugfixes

• Fixes for enabling or disabling discovery mode in the CLI

Breaking Changes

• --discovery parameter is removed. It is replaced by a ‘discovery’ attribute of --wrapping-keys parameter. Decrypt commands will fail if ‘discovery’ is used as a parameter. The ‘discovery’ attribute is valid only in decrypt commands where the provider is ‘aws-kms’. The command will fail if ‘discovery’ attribute is combined with any other provider.

See https://docs.aws.amazon.com/encryption-sdk/latest/developer-guide/crypto-cli.html for more information.