Merge branch 'release-1.44.0'

* release-1.44.0:
  Bumping version to 1.44.0
  Update changelog based on model updates
  Implement upgrade debug mode
  ci: scope down GitHub Token permissions (#9804)

Author: aws-sdk-python-automation

.changes/1.44.0.json

@@ -0,0 +1,67 @@
+[
+  {
+    "category": "``bedrock-agentcore-control``",
+    "description": "This release updates broken links for AgentCore Policy APIs in the AWS CLI and SDK resources.",
+    "type": "api-change"
+  },
+  {
+    "category": "``connect``",
+    "description": "Amazon Connect now supports outbound WhatsApp contacts via the Send message block or StartOutboundChatContact API. Send proactive messages for surveys, reminders, and updates. Offer customers the option to switch to WhatsApp while in queue, eliminating hold time.",
+    "type": "api-change"
+  },
+  {
+    "category": "``ec2``",
+    "description": "EC2 Capacity Manager now supports SpotTotalCount, SpotTotalInterruptions and SpotInterruptionRate metrics for both vCPU and instance units.",
+    "type": "api-change"
+  },
+  {
+    "category": "``endpoint-rules``",
+    "description": "Update endpoint-rules command to latest version",
+    "type": "api-change"
+  },
+  {
+    "category": "``entityresolution``",
+    "description": "Support Customer Profiles Integration for AWS Entity Resolution",
+    "type": "api-change"
+  },
+  {
+    "category": "``glacier``",
+    "description": "Documentation updates for Amazon Glacier's maintenance mode",
+    "type": "api-change"
+  },
+  {
+    "category": "``health``",
+    "description": "Updating Health API endpoint generation for dualstack only regions",
+    "type": "api-change"
+  },
+  {
+    "category": "``logs``",
+    "description": "This release allows you to import your historical CloudTrail Lake data into CloudWatch with a few steps, enabling you to easily consolidate operational, security, and compliance data in one place.",
+    "type": "api-change"
+  },
+  {
+    "category": "``mediatailor``",
+    "description": "Added support for Ad Decision Server Configuration enabling HTTP POST requests with custom bodies, headers, GZIP compression, and dynamic variables. No changes required for existing GET request configurations.",
+    "type": "api-change"
+  },
+  {
+    "category": "``route53resolver``",
+    "description": "Adds support for enabling detailed metrics on Route 53 Resolver endpoints using RniEnhancedMetricsEnabled and TargetNameServerMetricsEnabled in the CreateResolverEndpoint and UpdateResolverEndpoint APIs, providing enhanced visibility into Resolver endpoint and target name server performance.",
+    "type": "api-change"
+  },
+  {
+    "category": "``s3``",
+    "description": "This release adds support for the new optional field 'LifecycleExpirationDate' in S3 Inventory configurations.",
+    "type": "api-change"
+  },
+  {
+    "category": "``service-quotas``",
+    "description": "Add support for SQ Dashboard Api",
+    "type": "api-change"
+  },
+  {
+    "category": "Migration",
+    "description": "Implement a ``--v2-debug`` flag and ``AWS_CLI_UPGRADE_DEBUG_MODE`` environment variable that detects breaking changes for AWS CLI v2 for entered commands.",
+    "type": "feature"
+  }
+]

.github/workflows/changelog.yml

@@ -41,6 +41,9 @@ on:
           link.
         required: true
 
+permissions:
+  contents: write
+
 jobs:
   add-changelog:
     runs-on: Ubuntu-latest

.github/workflows/closed-issue-message.yml

@@ -2,6 +2,9 @@ name: Closed Issue Message
 on:
     issues:
        types: [closed]
+permissions:
+  issues: write
+
 jobs:
     auto_comment:
         runs-on: ubuntu-latest

.github/workflows/doc-pr-cherry-pick.yml

@@ -8,6 +8,10 @@ on:
         type: string
         required: true
 
+permissions:
+  contents: write
+  pull-requests: write
+
 jobs:
   cherry_pick_and_create_pr:
     runs-on: ubuntu-latest

.github/workflows/fail-master-prs.yml

@@ -4,6 +4,9 @@ on:
   pull_request:
     branches: [ master ]
 
+permissions:
+  contents: read
+
 jobs:
   fail:
     runs-on: ubuntu-latest

.github/workflows/run-bundle-test.yml

@@ -8,6 +8,9 @@ on:
   pull_request:
     branches-ignore: [ master ]
 
+permissions:
+  contents: read
+
 jobs:
   test-bundle:
     runs-on: ${{ matrix.os }}

.github/workflows/run-dep-tests.yml

@@ -5,6 +5,9 @@ on:
   pull_request:
     branches-ignore: [ master ]
 
+permissions:
+  contents: read
+
 jobs:
   build:
 

.github/workflows/run-tests.yml

@@ -5,6 +5,9 @@ on:
   pull_request:
     branches-ignore: [ master ]
 
+permissions:
+  contents: read
+
 jobs:
   build:
 

.github/workflows/stale_community_prs.yml

@@ -1,6 +1,9 @@
 name: 'Check stale community PRs.'
 on: workflow_dispatch
 
+permissions:
+  pull-requests: write
+
 jobs:
   stale-implementation-stage:
     runs-on: ubuntu-latest

.github/workflows/update-lockfiles.yml

@@ -20,6 +20,9 @@ on:
           the generated files.
 
 
+permissions:
+  contents: write
+
 jobs:
 
   update-lockfiles: