---
schema_version: "1"
id: 89c1cc90851bc59a1eb5242b77fd7f567b598b74a7d53d95fd2b139a593ca2de
title: Amazon Secrets Manager Properties Provider Release Notes
collection: mulesoft
version: current
locale: en-us
portal_url: https://docs.salesforce.com/mulesoft/current/en-us/release-notes/connector/amazon-secrets-manager-properties-provider-release-notes-mule-4.md
canonical_url: https://docs.mulesoft.com/release-notes/connector/amazon-secrets-manager-properties-provider-release-notes-mule-4
source_site: docs.mulesoft.com
content_type: documentation
content_hash: 5658dbff104f7cb077cfcf9cb6d0c613dba3e1f3dbdd2d6c109674701816e61d
description: MuleSoft Documentation Site
latest: true
---
---
product: Release Notes
version: master
---

# Amazon Secrets Manager Properties Provider Release Notes

> For the full documentation index, see: https://docs.mulesoft.com/llms.txt

Support Category:
[Select](https://www.salesforce.com/en-us/wp-content/uploads/sites/4/documents/legal/Agreements/versioning-back-support-policy.pdf)

Amazon Secrets Manager Properties Provider is a configuration that enables you to retrieve your
secrets from the Amazon Secrets Manager cloud service before your Mule app runs.

Guide:
[Amazon Secrets Manager Properties Provider Connector User Guide](https://docs.mulesoft.com/amazon-secrets-manager-properties-provider-connector/latest/)

## 1.2.1

**September 4, 2026**

### What’s New

- This release includes general security fixes.

- The AWS SDK version is upgraded to 2.54.11.

### Compatibility

<table><colgroup><col> <col></colgroup><thead><tr><th>Software</th><th>Version</th></tr></thead><tbody><tr><td><p>Mule runtime engine</p></td><td><p>4.3.0 and later</p></td></tr><tr><td><p>OpenJDK</p></td><td><p>8, 11, and 17</p></td></tr><tr><td><p>AWS SDK</p></td><td><p>2.54.11</p></td></tr></tbody></table>

## 1.2.0

**September 2, 2026**

### What’s New

- The AWS SDK version is upgraded to 2.54.10.

- Amazon Secrets Manager Properties Provider now supports overriding the AWS Secrets Manager
  endpoint through the optional **Custom Endpoint URL** field in the basic connection. Use this
  field to route AWS Secrets Manager calls through an AWS VPC interface endpoint (AWS PrivateLink)
  for private connectivity, or to a local testing service such as LocalStack.

- Amazon Secrets Manager Properties Provider now supports overriding the AWS Security Token Service
  (AWS STS) endpoint through the optional **STS Endpoint URL** field in the role connection. Use
  this field to route AWS STS calls through a separate endpoint when assuming a role, independently
  of the **Custom Endpoint URL** field.

- The **AWS Access Key** and **AWS Secret Key** fields are now masked in the connector UI and
  excluded from DSL output, reducing accidental exposure of AWS credentials.

For more information, see the
[Amazon Secrets Manager Properties Provider Reference](https://docs.mulesoft.com/amazon-secrets-manager-properties-provider-connector/latest/amazon-secrets-manager-properties-provider-reference).

### Compatibility

<table><colgroup><col> <col></colgroup><thead><tr><th>Software</th><th>Version</th></tr></thead><tbody><tr><td><p>Mule runtime engine</p></td><td><p>4.3.0 and later</p></td></tr><tr><td><p>OpenJDK</p></td><td><p>8, 11, and 17</p></td></tr><tr><td><p>AWS SDK</p></td><td><p>2.54.10</p></td></tr></tbody></table>

### Fixed Issues

<table><colgroup><col> <col></colgroup><thead><tr><th>Issue Resolution</th><th>ID</th></tr></thead><tbody><tr><td><div><div><p>Binary secrets are no longer decoded using the Java runtime’s default character set, which produced incorrect values for secrets containing non-ASCII characters on runtimes not configured for UTF-8. Binary secrets are now always decoded as UTF-8.</p></div></div></td><td><div><div><p>W-23823507</p></div></div></td></tr></tbody></table>

## 1.1.3

**August 12, 2026**

### What’s New

- This connector version requires Mule runtime 4.6.22 or later if you’re using Mule 4.6.x, or Mule
  runtime 4.9.9 or later if you’re using Mule 4.9.x. If you prefer not to upgrade your Mule runtime,
  use the connector version released immediately after this one.

### Compatibility

<table><colgroup><col> <col></colgroup><thead><tr><th>Software</th><th>Version</th></tr></thead><tbody><tr><td><p>Mule runtime engine</p></td><td><p>4.3.0 and later</p></td></tr><tr><td><p>OpenJDK</p></td><td><p>8, 11, and 17</p></td></tr><tr><td><p>AWS SDK</p></td><td><p>2.51.1</p></td></tr></tbody></table>

### Fixed Issues

<table><colgroup><col> <col></colgroup><thead><tr><th>Issue Resolution</th><th>ID</th></tr></thead><tbody><tr><td><div><div><p>These libraries are upgraded to address reported security vulnerabilities:</p></div><div><ul><li><p>The AWS SDK version is upgraded to 2.51.1.</p></li><li><p>The <code>commons-lang3</code> library is upgraded to version 3.20.0.</p></li><li><p>The <code>netty</code> library is upgraded to version 4.2.17.Final.</p></li><li><p>The <code>log4j</code> library is upgraded to version 2.26.1.</p></li></ul></div></div></td><td><div><div><p>W-23441652</p></div></div></td></tr></tbody></table>

## 1.1.2

**July 24, 2026**

### What’s New

- The AWS SDK version is upgraded to 2.41.0.

### Compatibility

<table><colgroup><col> <col></colgroup><thead><tr><th>Software</th><th>Version</th></tr></thead><tbody><tr><td><p>Mule runtime engine</p></td><td><p>4.3.0 and later</p></td></tr><tr><td><p>OpenJDK</p></td><td><p>8, 11, and 17</p></td></tr><tr><td><p>AWS SDK</p></td><td><p>2.41.0</p></td></tr></tbody></table>

### Fixed Issues

<table><colgroup><col> <col></colgroup><thead><tr><th>Issue Resolution</th><th>ID</th></tr></thead><tbody><tr><td><div><div><p>Amazon Secrets Manager Properties Provider now acquires AWS credentials and connects to Amazon Secrets Manager when a Mule flow first reads an <code>${aws-secrets::key}</code> property, instead of during Mule app deployment. This change lets you deploy Mule apps and run MUnit tests without valid AWS credentials when your tests don’t require AWS connectivity. If you rely on deployment-time credential validation, invalid credentials or an unreachable role ARN now surface as an error at first read instead of at deployment.</p></div></div></td><td><div><div><p>W-23301017</p></div></div></td></tr><tr><td><div><div><p>Amazon Secrets Manager Properties Provider now returns an error when a retrieved secret contains neither a secret string nor a secret binary value, instead of returning no value.</p></div></div></td><td><div><div><p>W-23301017</p></div></div></td></tr></tbody></table>

## 1.1.1

**February 1, 2026**

### Compatibility

<table><colgroup><col> <col></colgroup><thead><tr><th>Software</th><th>Version</th></tr></thead><tbody><tr><td><p>Mule runtime engine</p></td><td><p>4.3.0 and later</p></td></tr><tr><td><p>OpenJDK</p></td><td><p>8, 11, and 17</p></td></tr><tr><td><p>AWS SDK</p></td><td><p>2.35.3</p></td></tr></tbody></table>

### Fixed Issues

<table><colgroup><col> <col></colgroup><thead><tr><th>Issue Resolution</th><th>ID</th></tr></thead><tbody><tr><td><div><div><p>Amazon Secrets Manager Properties Provider now handles session token expiration by automatically fetching a new secret token.</p></div></div></td><td><div><div><p>W-20966019</p></div></div></td></tr></tbody></table>

## 1.1.0

**November 21, 2025**

### What’s New

- Amazon Secrets Manager Properties Provider now supports passing an external ID in Role-based
  authentication.

### Compatibility

<table><colgroup><col> <col></colgroup><thead><tr><th>Software</th><th>Version</th></tr></thead><tbody><tr><td><p>Mule runtime engine</p></td><td><p>4.3.0 and later</p></td></tr><tr><td><p>OpenJDK</p></td><td><p>8, 11, and 17</p></td></tr><tr><td><p>AWS SDK</p></td><td><p>2.35.3</p></td></tr></tbody></table>

### Fixed Issues

<table><colgroup><col> <col></colgroup><thead><tr><th>Issue Resolution</th><th>ID</th></tr></thead><tbody><tr><td><div><div><p>These libraries are upgraded to address reported security vulnerabilities:</p></div><div><ul><li><p>The AWS SDK version is upgraded to 2.35.3.</p></li><li><p>The <code>commons-lang3</code> library is upgraded to version 3.18.0.</p></li></ul></div></div></td><td><div><div><p>W-20218849</p></div></div></td></tr></tbody></table>

## 1.0.2

**June 24, 2025**

### Compatibility

<table><colgroup><col> <col></colgroup><thead><tr><th>Software</th><th>Version</th></tr></thead><tbody><tr><td><p>Mule runtime engine</p></td><td><p>4.3.0 and later</p></td></tr><tr><td><p>OpenJDK</p></td><td><p>8, 11, and 17</p></td></tr></tbody></table>

### Fixed Issues

<table><colgroup><col> <col></colgroup><thead><tr><th>Issue Resolution</th><th>ID</th></tr></thead><tbody><tr><td><div><div><p>Amazon Secrets Manager Properties Provider now automatically fetches the secret token after the session token expires.</p></div></div></td><td><div><div><p>W-18382085</p></div></div></td></tr></tbody></table>

## 1.0.1

**March 25, 2024**

### What’s New

- This property provider is now compatible with Java 17.

### Compatibility

<table><colgroup><col> <col></colgroup><thead><tr><th>Software</th><th>Version</th></tr></thead><tbody><tr><td><p>Mule runtime engine</p></td><td><p>4.3.0 and later</p></td></tr><tr><td><p>OpenJDK</p></td><td><p>8, 11, and 17</p></td></tr></tbody></table>

## 1.0.0

**August 4, 2023**

### What’s New

This is a new properties provider.

For a list of supported configurations, refer to the Amazon Secrets Manager Properties Provider
Reference Guide.

### Compatibility

<table><colgroup><col> <col></colgroup><thead><tr><th>Software</th><th>Version</th></tr></thead><tbody><tr><td><p>Mule runtime engine</p></td><td><p>4.3.0 and later</p></td></tr><tr><td><p>Open JDK</p></td><td><p>8 and 11</p></td></tr></tbody></table>

## See Also

- [Salesforce Help](https://help.salesforce.com)

- [MuleSoft Services](https://www.mulesoft.com/support-and-services)

- [Known Issues](https://help.salesforce.com/s/issues)