AWS SDK for Java 
The AWS SDK for Java enables Java developers to easily work with Amazon Web Services and
build scalable solutions with Amazon S3, Amazon DynamoDB, Amazon Glacier, and more. You can get
started in minutes using Maven or by downloading a single zip file.
Release Notes
Beginning with 1.11.82 changes to the SDK are tracked in the CHANGELOG.md file.
Release notes for versions prior to 1.11.82 can still be found on the AWS Release Notes
Website.
Getting Started
Sign up for AWS
Before you begin, you need an AWS account. Please see the Sign Up for AWS section of
the developer guide for information about how to create an AWS account and retrieve your AWS
credentials.
Minimum requirements
To run the SDK you will need Java 1.6+. For more information about the requirements and optimum
settings for the SDK, please see the Installing a Java Development Environment
section of the developer guide.
Install the SDK
The recommended way to use the AWS SDK for Java in your project is to consume it from Maven. Import
the aws-java-sdk-bom and specify the SDK Maven modules that your project needs in the
dependencies.
Importing the BOM
<dependencyManagement>
<dependencies>
<dependency>
<groupId>com.amazonaws</groupId>
<artifactId>aws-java-sdk-bom</artifactId>
<version>1.11.726</version>
<type>pom</type>
<scope>import</scope>
</dependency>
</dependencies>
</dependencyManagement>
Using the SDK Maven modules
<dependencies>
<dependency>
<groupId>com.amazonaws</groupId>
<artifactId>aws-java-sdk-ec2</artifactId>
</dependency>
<dependency>
<groupId>com.amazonaws</groupId>
<artifactId>aws-java-sdk-s3</artifactId>
</dependency>
<dependency>
<groupId>com.amazonaws</groupId>
<artifactId>aws-java-sdk-dynamodb</artifactId>
</dependency>
</dependencies>
See the Set up the AWS SDK for Java section of the developer guide for more
information about installing the SDK through other means.
Features
-
Provides easy-to-use HTTP clients for all supported AWS services, regions, and authentication
protocols. -
Client-Side Data Encryption for Amazon S3 - Helps improve the security of storing application data
in Amazon S3. -
Amazon DynamoDB Object Mapper - Uses Plain Old Java Object (POJOs) to store and retrieve Amazon
DynamoDB data. -
Amazon S3 Transfer Manager - With a simple API, achieve enhanced the throughput, performance, and
reliability by using multi-threaded Amazon S3 multipart calls. -
Amazon SQS Client-Side Buffering - Collect and send SQS requests in asynchronous batches,
improving application and network performance. -
Automatically uses IAM Instance Profile Credentials on configured Amazon
EC2 instances. -
And more!
Building From Source
Once you check out the code from GitHub, you can build it using Maven. To disable the GPG-signing
in the build, use:
mvn clean install -Dgpg.skip=true
Getting Help
Please use these community resources for getting help. We use GitHub issues for tracking bugs and feature requests and have limited bandwidth to address them.
- Ask a question on StackOverflow and tag it with
aws-java-sdk - Come join the AWS Java community chat on Gitter
- Articulate your feature request or upvote existing ones on our Issues page
- Take a look at the blog for plenty of helpful walkthroughs and tips
- Open a case via the AWS Support Center in the AWS console
- If it turns out that you may have found a bug, please open an issue
Supported Versions
-
1.11.x - Recommended.
-
1.10.x - Approved. Only major critical bugs will be fixed. To get the new features, upgrade to
1.11.x version of the SDK.
Security
Jackson Vulnerabilities
CVE 2017-15095 & CVE-2018-7489
The AWS SDK for Java is not directly affected by these findings. The SDKs own use of ObjectMapper does not use polymorphic deserialization so deserialization gadgets cannot be exploited. The SDK continues to depend on Jackson 2.6.x due to its compatbility with Java 6. Consumers of the SDK can override the version of Jackson in their own application to a newer version.
A good explanation of this type of exploit can be found here.