Skip to content
CAI
Software that uses CAICheck a score

aws/aws-sdk-php

57.7

Weak · 4 October 2026

331k

lines of production code

PHP

primary language

1

measurement over time

CAI band scale
CAI lens gauges

What this system is

This system is a legacy codebase primarily focused on maintaining the AWS SDK for PHP. Recent activity consists almost entirely of routine dependency updates and model synchronization for services like Cognito and Pinpoint. The codebase appears to be in a maintenance phase, with no evidence of new feature development or architectural changes beyond standard library upgrades.

Narrated so far: 2026-09-29 – 2026-10-02; history before 2026-09-29 not narrated yet.

This week

  • AWS SDK for PHP updates for version 3.398.3 — This release updates the AWS SDK for PHP to version 3.398.3, synchronizing client models with new AWS service capabilities. Key additions include support for the Mantle Foundation Model in Bedrock Agent Runtime, new job parameter types in Deadline Cloud, public endpoints for ElastiCache Serverless, and system-managed materialized views in Glue. The SDK also adds network access controls and optimistic locking to Identity Store, beaconing configuration to MediaTailor, custom SFTP ports to Transfer Family, advisory pre-validations to OpenSearch Service, and CPU flex instance types to SageMaker. Additionally, RDS now supports target KMS keys in blue-green deployments, and Inspector2 includes new finding aggregation counts. ((repo-wide))
  • AWS SDK API updates for version 3.398.4 — This release updates the AWS SDK models to reflect new service capabilities. The Account service adds methods to verify primary contact phone numbers. Batch compute environments now support EKS access entries. Bedrock AgentCore Gateway targets can be configured with private certificate authorities. CloudWatch Logs delivery destinations can specify an IAM role for X-Ray trace delivery. Connect rules can now trigger in-app notifications. DataZone notebooks support run notification configurations. DynamoDB table exports can be filtered using expressions. ECS Blue-Green deployments support VPC Lattice advanced configuration. Glue crawlers and column statistics operations now support Catalog IDs. Observability Admin telemetry rules can monitor Bedrock PaymentManager resources. Organizations policy operations now support GuardDuty policies. ((repo-wide))
  • AWS SDK for PHP adds support for End User Messaging and Lambda Web services — This release introduces new client libraries and API definitions for two AWS services. For AWS End User Messaging, the SDK now supports Brand profiles (for capturing sender details) and Notify code configurations (for defining OTP policies and delivery settings), enabling customers to manage brand registrations and send passcodes via text, voice, Notify, or WhatsApp. For AWS Lambda Web Functions, the SDK provides the client and operations needed to create and manage web functions, revisions, and endpoints, allowing customers to run web applications and API backends. ((repo-wide))
  • Release 3.399.0 with new service client support — This release updates the SDK version to 3.399.0 and adds support for creating clients for the EndUserMessaging and LambdaWeb services, including their respective multi-region variants. (src)
  • AWS SDK model updates for Cognito, Invoicing, and Pinpoint SMS — This release updates the AWS SDK models to reflect new service capabilities. For Amazon Cognito Identity Provider, the SDK now supports Authentication Context Class Reference (ACR) and Authentication Methods Reference (AMR) claims, including new \AcrConfiguration\ and \AcrMapping\ parameters for user pools and identity providers, as well as \AvailableChallenges\ in authentication responses. The Invoicing service adds \MarketplacePunchOutEnabled\ and \MarketplacePunchOutPreference\ fields to procurement portal preferences. Additionally, the Pinpoint SMS Voice V2 \carrierLookup\ operation now supports an \EnableCleansing\ parameter to return the original phone number and additional phone number types. ((repo-wide))

Written by watchdog.canine.dev from the codebase's own history, inside the signed delivery this page is composed from.

How this codebase got here

Baseline

  • First survey — no prior run to compare against. CAI 58.

Lenses

  • Code Health 79
  • Architecture 87
  • Maturity 50
  • Readiness 47
  • Security 93

Changes since last survey

  • 300 commits — 280 feature/other, 20 fixes

By area

  • (root) — 127 commits
  • src/data — 118 commits
  • .github/workflows — 11 commits
  • .changes/nextrelease — 9 commits
  • src/S3 — 6 commits
  • .github/CODEOWNERS — 5 commits
  • (repo) — 3 commits
  • tests/S3 — 3 commits
  • src/Api — 2 commits
  • src/Credentials — 2 commits
  • src/Crypto — 2 commits
  • tests/Build — 2 commits
  • .github/scripts — 1 commit
  • features/bootstrap — 1 commit
  • features/multipart — 1 commit
  • src/CloudFront — 1 commit
  • src/EndpointV2 — 1 commit
  • src/Handler — 1 commit
  • src/Retry — 1 commit
  • tests/Api — 1 commit

Notable commits

  • fix: S3Client: fix 'recieved' -> 'received' typo in internal-error message (#3273)
  • fix: bugfix: Update parameter type for options in dir_opendir docblock (#3337)
  • fix: bugfix: align mpcopy with copyobject metadata directive (#3293)
  • fix: bugfix: closed resource handles (#3314)
  • fix: bugfix: omit PHPStan method annotations from Ec2Client (#3349)
  • fix: bugfix: prevent resources provided to ObjectUploader from being closed by Guzzle (#3296)
  • fix: bugfix: profile handling in configurationresolver (#3303)
  • fix: bugfix: retry behavior (#3334)
  • fix: bugfix: sign content-type and x-amz-user-agent (#3310)
  • fix: bugfix: skip error parsing for 2xx responses on rejected promises (#3320)
  • fix: chore: fix flaky transfer manager test (#3362)
  • fix: fix(serializer): Preserve sub-second timestamp precision (#3353)
  • fix: fix: S3 Encryption Client material description decode (#3333)
  • fix: fix: Stop pinning HeadObject-derived VersionId on UploadPartCopy requests (#3321)
  • fix: fix: break circular reference cycles (#3268)
  • fix: fix: break circular reference cycles from non-static closures (#3282)
  • fix: fix: cast generated header values to strings (#3289)
  • fix: fix: eliminate per-request cyclic references in retry and validation middleware (#3290)
  • fix: fix: fixes for S3 Encryption Client (#3318)
  • fix: fix: update format exclusions and phpcbf command output (#3360)
  • …and 280 more

Written by watchdog.canine.dev from the codebase's own history, inside the signed delivery this page is composed from.

Survey your own repository

aws/aws-sdk-php was measured the same way every project in this corpus was: the same rubric, at a pinned commit, with the result published in full. Point a surveyor at a repository you know and see whether you agree with it.

About this page

  • The score is its most recent published measurement, taken on 4 October 2026 at a pinned commit. It is not a live figure and does not change until the project is measured again.
  • Measured at commit cd7cf43b7d42e49579bf3f09ab58d4724d64152c — the exact code this score is about.
  • Scored under rubric-2026.10.1 — the same rubric and the same method as every other entry in this index.
  • Measured by watchdog.canine.dev using codehealth-analyzer preprod-b94e107d0cec.