Issues

• [bb-auth-basic] Emit an authentication-failure metric for alarming

  enhancementpending-maintainer-response
  aws-devtools-labs/aws-blocks#918 · Filter by author sharonyajain opened on Oct 21, 2026

• [bb-auth-basic] Add an authentication audit trail

  enhancementpending-maintainer-response
  aws-devtools-labs/aws-blocks#917 · Filter by author sharonyajain opened on Oct 21, 2026

• [bb-auth-basic] Close signUp username-enumeration oracle

  enhancementpending-maintainer-response
  aws-devtools-labs/aws-blocks#916 · Filter by author sharonyajain opened on Oct 21, 2026

• [bb-auth-basic] Strengthen default password policy

  enhancementpending-maintainer-response
  aws-devtools-labs/aws-blocks#915 · Filter by author sharonyajain opened on Oct 21, 2026

• [auth-common] Derive Secure cookie flag from deploy config, not request header

  enhancementpending-maintainer-responsepending-triage
  aws-devtools-labs/aws-blocks#914 · Filter by author sharonyajain opened on Oct 21, 2026

• [bb-auth-basic] Anchor and escape the cookie-read RegExp (sibling-cookie shadowing)

  enhancementpending-maintainer-response
  aws-devtools-labs/aws-blocks#913 · Filter by author sharonyajain opened on Oct 21, 2026

• [bb-auth-basic] Invalidate outstanding sessions on password reset / credential change

  enhancementpending-maintainer-response
  aws-devtools-labs/aws-blocks#912 · Filter by author sharonyajain opened on Oct 21, 2026

• [bb-auth-basic] Rate-limit password-reset OTP verification and raise code entropy

  enhancementpending-maintainer-response
  aws-devtools-labs/aws-blocks#911 · Filter by author sharonyajain opened on Oct 21, 2026

• bb-data local database keeps writes from a failed transaction

  bugpending-maintainer-response
  aws-devtools-labs/aws-blocks#904 · Filter by author gen-hiroto0119 opened on Oct 21, 2026
  1

• auth-oidc: a session without a refresh token ends after one hour; AuthOIDC takes no session length

  feature-requestpending-maintainer-response
  aws-devtools-labs/aws-blocks#868 · Filter by author bilal-aiprofile-app opened on Oct 19, 2026
  1

• bb-auth-cognito: AuthCognito exposes no email sending configuration

  feature-requestpending-maintainer-response
  aws-devtools-labs/aws-blocks#867 · Filter by author bilal-aiprofile-app opened on Oct 19, 2026
  1

• hosting: the Next.js image-optimization Lambda installs sharp ^0.34.0, inside GHSA-wq5f-xc86-pv6w

  feature-requestpending-maintainer-response
  aws-devtools-labs/aws-blocks#849 · Filter by author bilal-aiprofile-app opened on Oct 18, 2026
  1

• Error constant naming: when to mirror the AWS name vs. mint our own

  rfc
  aws-devtools-labs/aws-blocks#823 · Filter by author svidgen opened on Oct 15, 2026

• kotlin: plugin servers{} examples omit the RPC path, so copying one 404s every call

  bugkotlin
  aws-devtools-labs/aws-blocks#809 · Filter by author mattcreaser opened on Oct 15, 2026

• kotlin: file handles and realtime channels do not use the entry point's HTTP client

  bugkotlin
  aws-devtools-labs/aws-blocks#808 · Filter by author mattcreaser opened on Oct 15, 2026

• kotlin codegen: types nested in shared components share one namespace, so same-named nested types collide

  bug
  aws-devtools-labs/aws-blocks#795 · Filter by author bilal-aiprofile-app opened on Oct 14, 2026
  1

• Right-size production defaults: API handler timeout ≤29s + smaller memory, alarm subscriber prompt, make the dedicated KMS key opt-in

  enhancementpending-triage
  aws-devtools-labs/aws-blocks#767 · Filter by author sharonyajain opened on Oct 12, 2026
  1

• AuthBasic hardening: sign-in throttling/lockout, server-side token revocation, shorter sessions with refresh (optional MFA)

  enhancementpending-triage
  aws-devtools-labs/aws-blocks#766 · Filter by author sharonyajain opened on Oct 12, 2026
  

• bb-auth-cognito : support the RESEND messageAction of the AdminCreateUser

  feature-request
  aws-devtools-labs/aws-blocks#753 · Filter by author Clem69B opened on Oct 11, 2026
  1

• bb-auth-cognito : Add AdminDeleteSoftwareToken command

  pending-maintainer-responsequestion
  aws-devtools-labs/aws-blocks#752 · Filter by author Clem69B opened on Oct 11, 2026
  2

• Proposal: default Hosting CloudFront price class to PRICE_CLASS_ALL and document how to override it

  feature-request
  aws-devtools-labs/aws-blocks#717 · Filter by author nog opened on Oct 7, 2026
  1

• bb-distributed-table: add increment() for atomic numeric field updates

  feature-requestpending-community-response
  aws-devtools-labs/aws-blocks#710 · Filter by author nog opened on Oct 6, 2026
  7

• kotlin runtime: BlocksClient keeps OkHttp's 10 s timeouts and takes no client or timeout, so a slow RPC fails on Android/JVM

  bugkotlinpending-community-response
  Bug

  aws-devtools-labs/aws-blocks#702 · Filter by author bilal-aiprofile-app opened on Oct 5, 2026
  1

  

• native: reserve AWSBLOCKS-NATIVE-002 on Swift and Kotlin so the diagnostic code is not reused

  pending-maintainer-responsepending-triage
  aws-devtools-labs/aws-blocks#701 · Filter by author VarshithaPamisetty opened on Oct 5, 2026

• native/dart: RealtimeChannel deserializer is Map-only, so primitive, list and enum channel messages cannot hydrate

  pending-maintainer-responsepending-triage
  aws-devtools-labs/aws-blocks#700 · Filter by author VarshithaPamisetty opened on Oct 5, 2026