chore(deps): bump @aws-lambda-powertools/parameters from 2.33.1 to 2.34.0

[dependabot]

Bumps @aws-lambda-powertools/parameters from 2.33.1 to 2.34.0.

Release notes

Sourced from @​aws-lambda-powertools/parameters's releases.

v.2.34.0

Summary

This release introduces two new utilities: Signer, for signing HTTP requests to AWS services with SigV4, and Data Masking, for encrypting, decrypting, or irreversibly erasing sensitive fields in your event data.

We've also fixed three bugs affecting Logger and Tracer under [Lambda Managed Instances](https://docs.aws.amazon.com/lambda/latest/dg/managed-instances.html(LMI) concurrency, where multiplexing several invocations into the same execution environment could cause log lines and X-Ray trace data from one invocation to leak into another.

On top of that, Metrics now supports automatic flushing via the using keyword, Parameters gained an opt-in throwOnMissing option to fail fast on missing values, and Idempotency now warns when a shared persistence layer instance receives a reconfiguration it silently ignores. We've also fixed a Metrics bug where a metric name colliding with a dimension or metadata key could silently corrupt the CloudWatch EMF payload, along with a couple of HTTP Router fixes: a crash affecting bundles that don't install Metrics, and unreachable routes caused by trailing slashes.

⭐ Congratulations to @​kimnamu for their first PR merged in the project and thank you to @​vishwakt and @​Zelys-DFKH for their contributions too. 🎉

Signer

The new @aws-lambda-powertools/signer package signs HTTP requests using AWS Signature Version 4 (SigV4), so you can call IAM-authenticated endpoints — API Gateway, Lambda function URLs, AppSync — from within your Lambda functions.

Signing and sending are kept separate: SigV4Signer signs a web-standard Request and performs no network I/O, while createSignedFetcher gives you a drop-in signed fetch for when you just want to sign and send in one step. By default, the signer reads credentials and region from the Lambda runtime environment, so no extra dependencies or configuration are required.

import { SigV4Signer } from '@aws-lambda-powertools/signer/sigv4';
const signer = new SigV4Signer({ service: 'execute-api' });
export const handler = async () => {
const signed = await signer.sign(
'https://example.execute-api.us-east-1.amazonaws.com/items'
);
// signed is a standard Request with the SigV4 headers added
const response = await fetch(signed);
await response.json();
};

Data Masking

The new @aws-lambda-powertools/data-masking package lets you encrypt, decrypt, or irreversibly erase sensitive fields within nested event data, using the AWS Encryption SDK and envelope encryption with AWS KMS for encrypt/decrypt operations.

import { DataMasking } from '@aws-lambda-powertools/data-masking';
const masker = new DataMasking();
export const handler = async (event: { body: Record<string, unknown> }) => {
const data = event.body;
return masker.erase(data, {
fields: ['email', 'address.street', 'company_address'],
});
};

... (truncated)

Changelog

Sourced from @​aws-lambda-powertools/parameters's changelog.

2.34.0 (2026-07-10)

Improvements

• commons extract shared isRunningInLambda helper (#5424) (aec888b)
• logger remove unsafe context cast in createChild (#5443) (ac97f52)
• event-handler extract shared IP-extraction util for HTTP middleware (#5346) (3230ca7)

Maintenance

• commons bump @​aws/lambda-invoke-store from 0.2.4 to 0.3.0 (#5401) (0a05acd)
• commons guard UA string against duplicate PTEnv suffix (#5311) (6b59973)
• logger bump @​aws/lambda-invoke-store from 0.2.4 to 0.3.0 (#5401) (0a05acd)
• metrics bump @​aws/lambda-invoke-store from 0.2.4 to 0.3.0 (#5401) (0a05acd)
• tracer bump @​aws/lambda-invoke-store from 0.2.4 to 0.3.0 (#5401) (0a05acd)
• idempotency bump @​aws/durable-execution-sdk-js to ^1.1.6 (#5298) (dbc07c7)
• batch bump @​aws/lambda-invoke-store from 0.2.4 to 0.3.0 (#5401) (0a05acd)

Bug Fixes

• commons clear LRUCache pointers on eviction of last item (#5295) (acf1ba1)
• logger scope lambda context per invocation under LMI concurrency (#5430) (e5d2e69)
• metrics detect key collisions between dimensions, metrics, and metadata (#5240) (c1e62a6)
• tracer isolate active segment per invocation under LMI concurrency (#5446) (5890d94)
• tracer scope middy middleware segments per invocation (#5444) (14f68b1)
• idempotency recompute key prefix from base on each configure call (#5442) (a739c36)
• event-handler preserve original string for invalid Bedrock Agent number params (#5363) (9cce9f9)
• event-handler avoid runtime import of metrics package in HTTP metrics middleware (#5310) (f4a6752)
• event-handler correct InvalidHttpMethodError name (#5254) (7d410fc)
• event-handler normalize trailing slashes in HTTP Router prefix joining (#5255) (7a500a1)

Features

• metrics add Disposable support for automatic flushing via using (#5349) (e1cc0e1)
• parameters add throwOnMissing option to fail fast on missing values (#5343) (f81d247)
• idempotency warn when persistence layer reconfiguration is ignored (#5422) (6a113b1)
• parser add errorHandler option for inline parse error handling (#5352) (de752b9)
• event-handler add HTTP request/response data to tracer subsegment (#5338) (e1202b0)
• event-handler warn when AppSync Events payload exceeds 240 KB per-event limit (#5339) (2e7850d)
• data-masking add Data Masking utility (#5143) (bae72dd)
• signer add SigV4 request signing utility (#5344) (d5dce6d)

Commits

• e8cff7f chore(ci): bump version to 2.34.0 (#5448)
• 47bbb3b chore(testing): use stackEventPollingInterval option, drop CDK patch (#5447)
• 5890d94 fix(tracer): isolate active segment per invocation under LMI concurrency (#5446)
• a739c36 fix(idempotency): recompute key prefix from base on each configure call (#5442)
• 14f68b1 fix(tracer): scope middy middleware segments per invocation (#5444)
• de752b9 feat(parser): add errorHandler option for inline parse error handling (#5352)
• ac97f52 refactor(logger): remove unsafe context cast in createChild (#5443)
• 6a113b1 feat(idempotency): warn when persistence layer reconfiguration is ignored (#5...
• 2143417 chore(skills): make create-issue checkbox handling template-driven (#5439)
• e5d2e69 fix(logger): scope lambda context per invocation under LMI concurrency (#5430)
• Additional commits viewable in compare view