Changelog

Your source for the latest features, improvements, and fixes across LocalStack products, all in one place.

  1. Support for Iceberg CTAS

    Create and populate Iceberg tables directly from query results, locally.

    • CREATE TABLE AS SELECT now works for Iceberg tables, with both explicit schemas and inferred shapes.
    • Faster iteration on Iceberg-based workflows without round-tripping through Snowflake.

    New SQL String Functions

    • POSITION / CHARINDEX for substring lookups.
    • LEFT, RIGHT, LENGTH, and LEN aliases.

    Improved Parity with Snowflake

    • More accurate handling of window functions with DISTINCT.
    • Better treatment of large timestamps and timezone-aware encodings.
    • Stage file operations now align with quoted/unquoted references as Snowflake expects.
    Read Full Release Notes
  2. Lambda Managed Instances

    LocalStack for AWS 4.12 adds support for Lambda Managed Instances, bringing predictable costs and specialised compute hardware into your local Lambda workflows.

    • Provision and exercise managed instance pools alongside on-demand functions.
    • Validate cost-aware Lambda architectures before promoting to AWS.

    Enhanced Unit Testing for Step Functions

    • New TestState ergonomics let you exercise individual states in isolation.
    • Easier validation of error handling, retry, and catch branches without deploying.

    Expanded Glue, S3 Tables & ELB Coverage

    • Glue now supports user-defined functions (UDFs) and column statistics.
    • S3 Tables provider gains tagging and encryption configuration controls.
    • NLB TCP listener emulation and ALB HTTPS target support land in this release.
    • Targeted fixes across EventBridge Pipes, IAM, CloudWatch Logs, ACM, MWAA, and S3 Control.
    Read Full Release Notes
  3. New Lambda Runtimes & KMS Improvements

    • New Lambda runtime additions keep parity with the latest AWS-managed runtimes.
    • Improved AWS Key Management Service (KMS) emulation for key policy and grant flows.

    Expanded API Support for MSK, S3 Tables & CodePipeline

    AWS 4.11 closes parity gaps across messaging, lakehouse, and CI/CD services so more workflows just work locally.

    • Broader API coverage for Amazon Managed Streaming for Apache Kafka (MSK).
    • Additional management APIs for the S3 Tables provider.
    • CodePipeline gains tighter alignment with AWS pipeline definitions.

    RDS pgvector + EKS Persistence

    • RDS now ships with pgvector support, unlocking local testing of ML retrieval workloads.
    • EKS cluster contents can be persisted across restarts for more realistic development loops.
    Read Full Release Notes
  4. New SQL Functions

    • GENERATOR for synthesising rows and sequences in tests.
    • SIGN for sign-of-value semantics on numerics.
    • PI for the mathematical constant.

    Practical Parity Upgrades

    A focused set of additions that bring everyday Snowflake workflows closer to home.

    • SELECT * EXCLUDE (...) for clean column exclusions in projections.
    • Inline FOREIGN KEY constraints during CREATE TABLE.
    • Session-level switch between JSON and Arrow result encodings.
    • Stage-sourced query parameter bindings.
    • Batched results for large queries and Snowflake-compatible async error handling.
    Read Full Release Notes
  5. New S3 Tables Provider

    LocalStack 4.10 introduces a native S3 Tables provider with full Apache Iceberg REST API support, unlocking modern data lakehouse workflows locally.

    • Plug into Iceberg-compatible tools such as PyIceberg, Trino, and Spark.
    • Manage tabular data stored in S3 through the standard Iceberg REST API.
    • Build and validate lakehouse pipelines without touching the cloud.

    EKS: IRSA, Pod Identity & More

    • Support for IAM Roles for Service Accounts (IRSA) on EKS pods.
    • EKS Pod Identity for token-based credential exchange.
    • Tighter networking and lifecycle parity across cluster operations.

    Service Polish

    • Enhancements across DynamoDB, EventBridge Pipes, ECS, SESv2, and IAM.
    • Legacy Batch and Kinesis Data Analytics providers retired in favor of consistent foundations.
    Read Full Release Notes
  6. Expanded Snowflake Scripting Features

    Snowflake Scripting parity continues to mature, letting you author and exercise advanced procedural logic locally.

    • RESULTSET variables for cursor and table-like result handling.
    • Embedded Python-only queries inside SQL procedures with correct type inference.
    • EXECUTE IMMEDIATE for dynamic SQL construction at runtime.

    Improved Parity with Snowflake

    • Fixed, predictable execution order across all Snowflake queries.
    • SHOW OBJECTS and SHOW VIEWS now align with Snowflake schema, scopes, and LIKE clauses.
    • Cross-database references work correctly in information_schema.tables for quoted/unquoted names.
    • RETURNING clauses inside procedures with INSERT statements are honored.
    • TIMELIMIT parameter support added to GENERATOR(...).
    Read Full Release Notes
  7. Performance, Security & Parity Foundations

    AWS 4.9 hardens the foundations of LocalStack with refreshed runtime dependencies and stronger AWS alignment.

    • Updates across DynamoDB Local, Hadoop, Apache Spark, Glue, k3d, Postgres, Apache ActiveMQ, Python, and Debian Trixie.
    • New OpenSearch versions, with security and stability fixes throughout.

    Cloud Pods Merge Strategies

    • Auto-loaded Cloud Pods now support configurable merge strategies for predictable state management across snapshots.
    • Easier promotion paths from local development to CI to shared environments.

    EKS & CloudWatch Enhancements

    • CRUD support for EKS access entries.
    • CloudWatch multi-protocol support for additional ingest protocols.
    Read Full Release Notes
  8. Openflow via Apache NiFi

    Snowflake 1.2 brings visual data pipelines to your local Snowflake stack via embedded Apache NiFi.

    • Author and exercise Openflow-style pipelines without leaving your machine.
    • Round-trip dataflows alongside the rest of your LocalStack environment.

    Governance & Security Primitives

    • Network Rules and Masking Policies for end-to-end policy testing.
    • Resource Monitors for cost-aware workload simulation.
    • Secrets, Security Integrations, and API Integrations for realistic auth flows.

    SQL Function Coverage

    • Expanded SQL function library covering common analytic, validation, and conversion needs.
    • Tighter compatibility with Snowflake-style SQL dialect quirks.
    Read Full Release Notes
  9. AWS Toolkit for VS Code Integration

    AWS 4.8 unlocks one-click remote debugging of Lambda functions with the AWS Toolkit for VS Code.

    • Automatic instrumentation for Python, Node.js, and Java runtimes.
    • A revamped LocalStack Toolkit with a guided setup wizard and richer logging.

    New CloudFormation Engine

    • A reworked engine that more accurately models UPDATE operations and resource lifecycles.
    • Improved fidelity for stack drift, dependency ordering, and rollback flows.

    LocalStack-native Batch Provider + Service Polish

    • New Batch provider built on top of the ECS runtime.
    • Kubernetes support for ElastiCache and MemoryDB.
    • EKS addons support.
    • Improvements across Route 53, CloudFront, and the AWS Replicator.
    Read Full Release Notes
  10. Valkey Engine Support

    ElastiCache and MemoryDB now support the Valkey engine as an alternative to Redis. Set REDIS_CONTAINER_MODE=1 when starting the container to enable it.

    • Specify valkey as the engine when creating ElastiCache replication groups and MemoryDB clusters.
    • Engine and EngineVersion fields in CreateReplicationGroup and CreateCluster now recognize valkey.
    • Each engine maps to a default version (Redis 7.2.10, Valkey 7.2.10) for DockerHub compatibility.

    Native Organizations Provider

    A new native Organizations provider replaces the legacy Moto-based implementation for managing multi-account and multi-organization setups locally.

    • Create and manage organizations, accounts, and OUs via CreateOrganization, CreateAccount, and CreateOrganizationalUnit.
    • Basic CRUD for Service Control Policies (creation, attachment, listing), though SCPs are not enforced yet.
    • Toggle service access with EnableAWSServiceAccess, register delegated administrators, and tag organizational resources.
    • Handshake workflows (InviteAccountToOrganization, AcceptHandshake) are not yet supported.

    AppSync Events API

    LocalStack now supports the AppSync Events API, a serverless WebSocket-based API for subscribing to and publishing real-time events.

    • Create Events APIs via CreateApi and define channel namespaces for routing messages.
    • Authenticate with API Keys and IAM Authorization.
    • Publish over WebSocket or an HTTP interface, with domain and path endpoints registered for targeting your API.
    • Configure code handlers with or without data sources, including Direct Lambda integration.

    Provider Enhancements: CodeBuild, CloudTrail, EKS

    • CodeBuild assumes the configured IAM service role during builds and sets region and endpoint URL environment variables in the build container.
    • CloudTrail delivers log notifications to SNS when SnsTopicName is set in CreateTrail or UpdateTrail, and populates requestParameters and responseElements for most events.
    • EKS supports k8s version 1.33 (now the default), Load Balancer Controller with target-mode set to ip, and the DescribeClusterVersions API.

    Service Parity Fixes

    • DynamoDB upgraded to DynamoDB Local 3.0.0 and now supports the UpdateKinesisStreamingDestination API.
    • Glue CreateTable accepts Name and OpenTableFormatInput, with TableInput now optional.
    • Cognito adds GetTokensFromRefreshToken, KMS ImportKeyMaterial supports RSA_AES_KEY_WRAP_SHA_256, and Route53 maps FQDNs with trailing dots for ELB routing.
    • API Gateway REST and HTTP APIs support the ipAddressType field (ipv4 or dualstack) via CreateRestApi and CreateApi.

    Deprecations

    • MWAA support for Airflow v2.4.3, v2.5.1, and v2.6.3 is deprecated and retired after December 30, 2025.
    • APPSYNC_JS_LIBS_VERSION=latest and =refresh are no longer supported, use a tagged version or commit from appsync-utils.
    • Lambda Debug Mode (Preview) moved from localstack/localstack to the localstack/localstack-pro image and requires an authenticated account.
    • EKS state created in 4.6 or earlier via Cloud Pods or persistence is not compatible with 4.7 and must be recreated.
    Read Full Release Notes
  11. Easier Local Setup

    Snowflake 1.1 simplifies bootstrapping the emulator with a single CLI flag, plus first-class Snowflake REST APIs.

    • New --stack CLI flag for simplified emulator management.
    • Snowflake REST APIs for programmatic database operations.

    Compute & Security Building Blocks

    • Compute Pools for testing resource-allocation strategies.
    • Security Integrations and JavaScript Stored Procedures for realistic enterprise flows.
    • Table Change Tracking, Data Metric Functions, and Secure Functions land in this release.

    High-Fidelity Type System & 30+ SQL Functions

    • New internal type system that mirrors Snowflake’s native types with high fidelity.
    • Over 30 new SQL functions across analytics, conversion, and validation.
    • Refinements to Row Access Policy operations and parity improvements throughout.
    Read Full Release Notes
  12. New CodeArtifact Provider

    LocalStack 4.6 adds a provider for AWS CodeArtifact, a managed artifact repository service, so you can store, publish, and share packages locally.

    • Mock the main CodeArtifact operations: creating domains, repositories, external connections, and authorization tokens.
    • Configure upstream repositories and external connections to public registries like NPM.
    • Publish and install NPM packages locally with both automatic and manual configuration options.

    Kubernetes Support for AWS Glue Jobs

    Glue jobs can now run as pods in your Kubernetes cluster instead of separate Docker-based execution.

    • Activate the executor by setting GLUE_JOB_EXECUTOR_PROVIDER to v2 and CONTAINER_RUNTIME to kubernetes.
    • Use custom Glue job images via the DOCKER_GLOBAL_IMAGE_PREFIX environment variable.

    Faster AppSync JavaScript Resolver

    The AppSync JavaScript resolver executor now uses a lightweight Node.js runtime package instead of a Docker container.

    • Execution time drops from over 1 second to single-digit milliseconds.
    • Removes Docker startup and package install overhead that could cause WebSocket connection flakes.
    • Adds console.log support in resolver code, with output sent to LocalStack logs.

    API Gateway and EventBridge Pipes Updates

    • HTTP API now supports AWS_PROXY SQS first-class integrations for SendMessage, ReceiveMessage, PurgeQueue, and DeleteMessage.
    • EventBridge Pipes UpdatePipe can now modify targets, target parameters, and enrichment configurations, in addition to source parameters.
    • WebSockets routes and integrations gain CRUD support for request parameters plus the DeleteRouteRequestParameter operation.
    • REST API adds the UpdateMethodResponse API and fixes VTL $input.path and $input.json edge cases.

    S3, CloudFront, and CodeBuild Improvements

    • S3 adds PutMetricsConfiguration, GetMetricsConfiguration, DeleteMetricsConfiguration, and ListBucketMetricsConfigurations for CloudWatch request metrics (mocked, up to 1,000 per bucket).
    • S3 enforces Object Lock COMPLIANCE mode via PutObjectRetention, fixes UploadPartCopy checksums, and completes ObjectParts in GetObjectAttributes.
    • CloudFront supports custom distribution IDs via the _custom_id_ tag on CreateDistributionWithTags.
    • CodeBuild adds buildspec override precedence, source credential CRUD (ImportSourceCredentials, ListSourceCredentials, DeleteSourceCredentials), and custom images via CODEBUILD_ENABLE_CUSTOM_IMAGES.

    Additional Provider and Service Parity

    • EFS adds UpdateFileSystem and UpdateFileSystemProtection; KMS adds ReEncrypt; EKS adds DescribeClusterVersions.
    • All AWS service responses include an x-localstack header, toggleable via LOCALSTACK_RESPONSE_HEADER_ENABLED.
    • Configurable Kubernetes readiness timeouts via K8S_WAIT_FOR_POD_READY_TIMEOUT, K8S_WAIT_FOR_DEPLOYMENT_READY_TIMEOUT, and K8S_WAIT_FOR_SERVICE_READY_TIMEOUT.
    • Step Functions mocks StartSyncExecution; DocumentDB supports MongoDB transactions in single-node replica mode; SQS propagates X-Amzn-Trace-Id to the AWSTraceHeader message attribute.
    Read Full Release Notes
  13. AWS Developer Tools Providers

    LocalStack 4.5 adds three new providers for AWS CI/CD services so you can run build, pipeline, and deployment workflows locally.

    • New CodeBuild provider compiles source from S3, configures IAM roles, and writes build artifacts to target buckets. The build agent runs inside a Docker container.
    • New CodePipeline provider runs end-to-end pipeline executions with action types including S3 source and deploy, CodeBuild integration, and CodeConnections with GitHub, defined in JSON.
    • New CodeDeploy provider supports creating applications, deployment configurations, deployment groups, and deployments against EC2, Lambda, and ECS targets (fully mocked).

    API Gateway Provider Enhancements

    REST APIs in the API Gateway provider gain new emulation features.

    • Emulation of Canary Deployments for staged traffic shifting and A/B testing.
    • Support for Response Overrides from Request Templates.
    • Improved VTL support, including bracketed expressions and variable assignments in #set operations.

    RDS Provider Enhancements

    • Support for PostgreSQL 17, with the default engine version set to 17.5.
    • Support for DB Proxy Endpoints to create, describe, and delete proxy endpoints (mocked).
    • Support for the ManageMasterPassword API for automated DB credential management.
    • Engine parameter introspection via DescribeEngineDefaultParameters and DescribeEngineDefaultClusterParameters.
    • New RDS_PG_MAX_CONNECTIONS environment variable to set the maximum connections for PostgreSQL instances.

    AppSync and EC2 Provider Updates

    • AppSync GraphQL WebSockets now support AWS-style payload shapes and improved lifecycle handling of subscriptions.
    • EC2 adds the GetSecurityGroupsForVpc API to retrieve security groups for a specific VPC.
    • EC2 DescribeAvailabilityZones filtering now aligns more closely with AWS behavior.

    Service Parity Fixes

    • EventBridge adds partial UpdatePipe support in Pipes (source parameters only) and the ListRuleNamesByTarget API.
    • CloudFormation AWS::Lambda::Version now supports the ProvisionedConcurrencyConfig property; Lambda GetFunction returns reserved_concurrent_executions.
    • S3 supports pagination and filtering when listing buckets. DynamoDB Streams redirects global table replica requests to the original region.
    • CloudFront Lambda@Edge supports DeleteDistribution, Elastic Load Balancing supports DescribeCapacityReservation, and EKS integrates with autoscaling and security groups.
    • Kinesis mock engine can be selected via the KINESIS_MOCK_PROVIDER_ENGINE environment variable (node or scala).
    Read Full Release Notes
  14. Polaris Catalog Support

    The Snowflake emulator now integrates with Polaris Catalog, an open-source catalog for Apache Iceberg tables, via a LocalStack fork of the Apache Polaris image published as localstack/polaris.

    • Run the catalog locally on ports 8181 and 8182, pointing it at the emulator with AWS_ENDPOINT_URL=http://localhost:4566.
    • Connect from SQL using CREATE CATALOG INTEGRATION with external volumes backed by local S3 buckets.
    • Create Iceberg tables and verify data and metadata files are written to S3.

    Native Apps

    Foundational support lets you build and run Snowflake Native Apps, including ones with Streamlit frontends, locally via snow app run.

    • Supports CREATE APPLICATION PACKAGE, ALTER APPLICATION PACKAGE, DROP APPLICATION PACKAGE, and SHOW APPLICATION PACKAGES.
    • Grant application roles with GRANT APPLICATION ROLE.

    New SQL Objects: Materialized Views, Row Access Policies, Storage Integrations, and Cloning

    • Materialized Views via CREATE, ALTER, DESCRIBE, DROP, SHOW, and TRUNCATE MATERIALIZED VIEW.
    • Row Access Policies for row-level access controls, enforced internally with PostgreSQL row-level security.
    • Storage Integrations via CREATE STORAGE INTEGRATION, DESCRIBE STORAGE INTEGRATION, and DROP STORAGE INTEGRATION for local S3 access.
    • Zero-copy cloning of tables and databases with CREATE TABLE ... CLONE and CREATE DATABASE ... CLONE (schemas and hybrid tables not yet supported).

    Transaction Management and Java UDFs

    • Explicit transactions with BEGIN, COMMIT, ROLLBACK, CURRENT_TRANSACTION(), and SHOW TRANSACTIONS.
    • Java User-Defined Functions as inline code via the AS clause or staged JAR files via the IMPORTS clause, alongside the existing Python and JavaScript support.

    Multi-Account Setups, Authentication, and Init Hooks

    • Multi-account configurations with a separate PostgreSQL backend per account for full data and namespace isolation.
    • Passwordless RSA key-pair authentication, configured with ALTER USER ... SET RSA_PUBLIC_KEY (key contents are mocked, not validated).
    • Initialization hooks that run mounted .sf.sql scripts at the BOOT, START, READY, or SHUTDOWN container stages.
    • Configurable default credentials via the SF_DEFAULT_USER and SF_DEFAULT_PASSWORD environment variables.

    Snowflake Web UI and Parity Improvements

    • A dedicated Snowflake tab in the LocalStack Web Application with a Worksheet query editor, a Logs tab for request/response traces, and a Proxy tab to forward queries to a real Snowflake instance.
    • New SQL functions including EXECUTE TASK, REGEXP_SUBSTR, EQUAL_NULL, OBJECT_CONSTRUCT_KEEP_NULL, DATEADD, TO_TIMESTAMP, DIV0NULL, and EXECUTE IMMEDIATE.
    • Parity fixes across COPY INTO (added HEADER and FIELD_OPTIONALLY_ENCLOSED_BY), MERGE INTO, BEGIN..END blocks, and the Snowflake Go, JDBC, and SnowSQL clients.
    • Query performance improved by ~37% by reusing PostgreSQL connections per session, toggled with DB_CONNECTION_PER_SESSION.
    Read Full Release Notes
  15. New Amazon Verified Permissions (AVP) Provider

    LocalStack adds a provider for Amazon Verified Permissions, letting you define and test fine-grained authorization for custom applications locally.

    • Define access rules with the Cedar policy language and test them outside the application.
    • Integrate with Cognito as an IdentitySource; external OIDC providers are not yet supported.
    • Current gaps: no schema validation on PutSchema and incomplete JWT checks (issuer, signature, expiration, jwks.json).

    Step Functions Mocked Service Integrations

    LocalStack can now replace AWS Step Functions Local for testing state machines with mocked service integrations.

    • Point SFN_MOCK_CONFIG at a mounted mock config file to define mocked task states.
    • Works with existing Step Functions Local setups and supports both mocked and emulated integrations.
    • Compatible with JSONata and Variables; adds ListStateMachineAliases pagination via --next-token and --max-results.

    LocalStack-native RDS Provider

    A new native RDS provider replaces the previous Moto-based CRUD operations and is now the default.

    • Adds Parameter Groups, instance lifecycle operations (create, modify, start, stop, reboot), subnet and security group support, event subscriptions, option groups, snapshots, IAM authentication, and proxy support.
    • Includes persistent storage, Neptune instance compatibility, and global tagging across resources.
    • RDS state from 4.3 or earlier (Cloud Pods or standard persistence) is not compatible; recreate the RDS state.

    Container-based Glue Job Executor

    Glue jobs can now run inside Docker containers using the aws-glue-libs image instead of a pre-packaged Spark binary.

    • Set GLUE_JOB_EXECUTOR=docker and GLUE_JOB_EXECUTOR_PROVIDER=v2 to enable it.
    • Runs each job in an isolated environment, supports parallel jobs, and uses correct versions of Spark, Hadoop, Python, and Java.
    • Deprecates older Glue versions 0.9, 1.0, and 2.0.

    IAM Enforcement Enhancements

    IAM gains service-specific credential APIs and additional condition keys for policy testing.

    • New CRUD APIs: CreateServiceSpecificCredential, ListServiceSpecificCredentials, UpdateServiceSpecificCredential, ResetServiceSpecificCredential, and DeleteServiceSpecificCredential.
    • New condition keys including iam:PermissionBoundary, aws:RequestTag, aws:TagKeys, sts:ExternalId, iam:AWSServiceName, aws:PrincipalIsAWSService, aws:PrincipalServiceName, and aws:username.
    • Transitive session tags now propagate correctly and apply to IAM policy enforcement.

    Service Enhancements

    • KMS: supports custom_key_material for ECC keys, preserves key material history across RotateKeyOnDemand, aligns PSS salt length with RFC 4055, and adds dry_run to GenerateDataKeyPair and GenerateDataKeyPairWithoutPlaintext.
    • EMR Serverless: jobs accept program arguments, and logs are sent to CloudWatch.
    • CloudFront Lambda@Edge: adds the IncludeBody parameter and runtime validation for Python and Node.js.
    • Application Auto Scaling: adds TagResource, UntagResource, and ListTagsForResource.
    • Managed Service for Apache Flink: cluster deployment now uses separate JobManager and TaskManager containers.
    • Other: Ruby 3.4 Lambda runtime, ECS task registration with AWS Cloud Map, Cognito USER_AUTH flow, and EventBridge X-Ray trace ID propagation to Lambda and API Gateway.
    Read Full Release Notes
  16. Experimental CloudFront Lambda@Edge

    LocalStack 4.3 adds an experimental CloudFront Lambda@Edge emulation, enabled by setting CLOUDFRONT_LAMBDA_EDGE=1.

    • Set up distributions with Lambda@Edge via the CreateDistribution API.
    • Modify request and response headers dynamically.
    • Limitations: partial viewer-request and viewer-response support, no Include Body option, no UpdateDistribution/DeleteDistribution, and no persistence across restarts.

    Transcribe Language Support

    • Added Catalan, Czech, Gujarati, Kazakh, Korean, Polish, Telugu, Uzbek, and Ukrainian.
    • Updated language models for Chinese, Farsi, Spanish, Italian, Russian, and Vietnamese.

    Managed Service for Apache Flink Application Mode

    • MSF now runs Flink in application mode instead of session mode to match how Flink clusters run on AWS.

    Step Functions Provider Enhancements

    • Nested MapRun execution works correctly by making map run components stateless with proper worker creation for all nested map runs.
    • Added support for state machine aliasing.
    • The interpreter now supports JSONata object templates as ItemSelector declaration bodies in both JSONPath and JSONata modes.

    Provider and Web Application Improvements

    • SQS rejects empty-body messages and adds pagination to ListQueues via MaxResults and NextToken.
    • IAM adds CRUD for service-specific credentials and corrects service-linked role naming (AWSServiceRoleFor<service>) with policy attachment.
    • The CloudFormation Resource Browser now displays stack outputs in the Web Application.
    • The Step Functions Resource Browser renders graphs with auto-layout and improved StateFunction parsing, replacing the previous mermaid renderer.

    Additional Provider Updates

    • EKS adds resource tagging and an EKS_K3S_FLAGS variable to customize the k3s cluster.
    • KMS supports on-demand key rotation for symmetric keys without imported material, up to 10 rotations per key without affecting automatic schedules.
    • Timestream enforces schema by rejecting records missing dimensions marked REQUIRED.
    • AppSync Lambda data sources support batch processing, and Stream Pollers (DynamoDB Streams/Kinesis) batch records by BatchSize and MaximumBatchingWindowInSeconds.
    • Replicator adds replication for AWS::ECR::Repository, SSO Admin adds ListTagsForResource, and SSM adds filters in DescribeInstanceInformation.
    Read Full Release Notes
  17. AWS Replicator

    A new tool copies AWS resources directly into a running LocalStack instance without recreating them or editing your infrastructure stacks.

    • Replicate resources such as SSM parameters and VPCs by ARN or by resource type and identifier.
    • Trigger replication jobs through the LocalStack CLI or HTTP API and check job status.
    • Target specific AWS account IDs and regions. Results integrate with persistence and Cloud Pods so replication is a one-time operation.
    • Available in preview on the Teams plan and higher.

    New Shield Provider

    LocalStack adds a mock provider for AWS Shield, the managed DDoS protection service.

    • Create, read, update, and delete Shield protections and subscriptions locally.
    • Test Shield configurations and workflows without connecting to AWS.

    Bedrock Provider Enhancements

    • On-demand model switching per request using a model ID prefixed with ollama., for example ollama.deepseek-r1.
    • New BEDROCK_PULL_MODELS option pulls a comma-separated list of model IDs from the Ollama models library on startup.
    • Ollama logs from the Bedrock provider now stream into LocalStack logs.

    Step Functions Provider Enhancements

    • Optimized service integration for Glue.
    • Unsupported API actions in optimized service integrations are now validated at creation time instead of only at runtime.
    • Added logging for missing request/return types and error reporting for unsupported service tasks.

    IAM Enforcement and Cloud Pods

    • Neptune now enforces IAM permissions for Gremlin queries when a cluster is created with IAMDatabaseAuthenticationEnabled=true, requiring signed READ, WRITE, or DELETE operations for users setting LOCALSTACK_ENFORCE_IAM and LOCALSTACK_IAM_SOFT_MODE.
    • Cloud Pods can auto-load from a registered S3 remote by listing the pod and remote names in a text file under init-pods.d.

    Parity and Configuration Improvements

    • API Gateway REST APIs support binary media, passing payloads as-is or converting to UTF-8 or base64.
    • EKS adds Kubernetes versions 1.31 and 1.32, with 1.31 as the default.
    • ELB listeners accept any port matching GATEWAY_LISTEN rather than only the first port.
    • MWAA accepts extra Airflow container flags via MWAA_DOCKER_FLAGS.
    • Managed Service for Apache Flink forwards Log4j or SLF4J application logs to CloudWatch Logs.
    • DMS adds PostgreSQL as a supported source.
    Read Full Release Notes
  18. New Managed Service for Apache Flink (MSAF) provider

    LocalStack 4.1 ships a new MSAF provider that replaces the previous Kinesis Data Analytics v2 implementation and runs Flink applications locally.

    • MSAF is now the default provider for kinesisanalyticsv2 with AWS-compatible API operations.
    • Set PROVIDER_OVERRIDE_KINESISANALYTICSV2=legacy to keep the older mock provider.

    Step Functions Variables and JSONata transformations

    The Step Functions provider now emulates the Amazon States Language additions for variables and JSONata.

    • Support for JSONata as an alternative query and transformation language to JSONPath.
    • Support for Workflow Variables, allowing assignment and referencing of variables in ASL.
    • Cross-account task invocations via Credentials blocks, plus fixes for nested Map states, ItemsPath in Distributed Map states, and ContextObject bindings in ErrorPath/CausePath.

    LocalStack SDK for Java (preview)

    A preview release of the official Java SDK gives programmatic access to LocalStack's internal developer endpoints.

    • Save, list, load, and delete Cloud Pods.
    • Manage fault configurations for the Chaos API.

    CloudWatch composite alarms and Python Event Rule engine

    • Basic support for CloudWatch composite alarms, referenced by ARNs with OR logic and SNS topic actions only.
    • A new Python-based Event Rule engine replaces the Java event-ruler preview; remove the EVENT_RULE_ENGINE config to drop the legacy engine.
    • Event pattern matching covers EventBridge, EventBridge Pipes, and Lambda Event Source Mapping.

    Service parity improvements

    • S3 PutObject supports the CRC64NVME checksum algorithm, FULL_OBJECT checksum type for multipart uploads, and the IfMatch conditional write parameter on PutObject and CompleteMultipartUpload.
    • Glue adds Glue 5.0 support, Snowflake drivers in jobs, and the --extra-jars option.
    • CloudFormation adds CREATE/DELETE for AWS::MWAA::Environment and AWS::KinesisAnalyticsV2::Application resources, plus the NoEcho parameter attribute.
    • Lambda gains the Node.js 22 runtime and S3 as a failure destination for Kinesis and DynamoDB event source mappings.

    RedShift Resource Browser and Web Application updates

    • New RedShift Resource Browser to view, create, update, and delete local RedShift clusters.
    • New restart button under the instance name and a Swagger UI button linking to /_localstack/swagger.
    • The CLI now prints a Web Application link on startup, and the Chaos Engineering dashboard moved to the Instance Management tab.
    Read Full Release Notes