diff --git a/go.mod b/go.mod
index 1bc6bfc..1ff611f 100644
--- a/go.mod
+++ b/go.mod
@@ -4,7 +4,7 @@ go 1.26
 
 require (
 	github.com/aws/aws-lambda-go v1.54.0
-	github.com/aws/aws-sdk-go-v2 v1.43.3
+	github.com/aws/aws-sdk-go-v2 v1.43.5
 	github.com/aws/aws-sdk-go-v2/config v1.32.32
 	github.com/aws/aws-sdk-go-v2/service/codedeploy v1.38.3
 )
@@ -21,5 +21,5 @@ require (
 	github.com/aws/aws-sdk-go-v2/service/sso v1.33.1 // indirect
 	github.com/aws/aws-sdk-go-v2/service/ssooidc v1.38.1 // indirect
 	github.com/aws/aws-sdk-go-v2/service/sts v1.45.1 // indirect
-	github.com/aws/smithy-go v1.27.6 // indirect
+	github.com/aws/smithy-go v1.27.7 // indirect
 )
diff --git a/go.sum b/go.sum
index be7cf89..eca099a 100644
--- a/go.sum
+++ b/go.sum
@@ -1,7 +1,7 @@
 github.com/aws/aws-lambda-go v1.54.0 h1:EGYpdyRGF88xszqlGcBewz811mJeRS+maNlLZXFheII=
 github.com/aws/aws-lambda-go v1.54.0/go.mod h1:dpMpZgvWx5vuQJfBt0zqBha60q7Dd7RfgJv23DymV8A=
-github.com/aws/aws-sdk-go-v2 v1.43.3 h1:XJIcfv8uDs2ukdQsoAC8/Ebu1ejxwzlayl2ZsiFns2A=
-github.com/aws/aws-sdk-go-v2 v1.43.3/go.mod h1:70vwSy16txshwG+g55WkpgPKDIByzHI8ccBsOteo3bQ=
+github.com/aws/aws-sdk-go-v2 v1.43.5 h1:yKT5GYnFWhuDo+DqKvE5ZPwVn3RjC4MAeBtZGlh6AVM=
+github.com/aws/aws-sdk-go-v2 v1.43.5/go.mod h1:wZjAJppCntyOGgVSmgVTfDyRJK5PHOasO6Wsy8U7Axk=
 github.com/aws/aws-sdk-go-v2/config v1.32.32 h1:CcYdrcIjulT7xbTSqeEInh/PqUWv10LMznfdbNRwHBM=
 github.com/aws/aws-sdk-go-v2/config v1.32.32/go.mod h1:Rk+LRPrR2oLWLOqUbhNOKYOJ8chU2aZ/R+Sdi/Bc/+4=
 github.com/aws/aws-sdk-go-v2/credentials v1.19.31 h1:olhkNt+ZMx+X40XxeyrflmdBx145TP+3DqaS4s8GsbI=
@@ -28,8 +28,8 @@ github.com/aws/aws-sdk-go-v2/service/ssooidc v1.38.1 h1:1DWsRED+rRzFQ1rDWpwkipw6
 github.com/aws/aws-sdk-go-v2/service/ssooidc v1.38.1/go.mod h1:nadMS3uTrTANeD214BBuPg/SJpJ/UhBiNuqN1Z2Ay4c=
 github.com/aws/aws-sdk-go-v2/service/sts v1.45.1 h1:JugCuomdxnZwjp5xvqSuPgeWRecAvkno7EwXmR/ZXWE=
 github.com/aws/aws-sdk-go-v2/service/sts v1.45.1/go.mod h1:dtViDu/XqU2gq1eeTFz7Ijb7xCHoso8CaBOqYVshoqc=
-github.com/aws/smithy-go v1.27.6 h1:0zjT8jgK3jbrTT7JJ3EE6JsMhX8JTrZ+f1sEndYDXrA=
-github.com/aws/smithy-go v1.27.6/go.mod h1:YE2RhdIuDbA5E5bTdciG9KrW3+TiEONeUWCqxX9i1Fc=
+github.com/aws/smithy-go v1.27.7 h1:Zgj5z4LfcDYoQIVk+n/yGdTkP/2y6ZT5vYxe0fp7bqE=
+github.com/aws/smithy-go v1.27.7/go.mod h1:YE2RhdIuDbA5E5bTdciG9KrW3+TiEONeUWCqxX9i1Fc=
 github.com/davecgh/go-spew v1.1.1 h1:vj9j/u1bqnvCEfJOwUhtlOARqs3+rkHYY13jYWTU97c=
 github.com/davecgh/go-spew v1.1.1/go.mod h1:J7Y8YcW2NihsgmVo/mv3lAwl/skON4iLHjSsI+c5H38=
 github.com/pmezard/go-difflib v1.0.0 h1:4DBwDE0NGyQoBHbLQYPwSUPoCMWR5BEzIk/f1lZbAQM=
diff --git a/vendor/github.com/aws/aws-sdk-go-v2/aws/go_module_metadata.go b/vendor/github.com/aws/aws-sdk-go-v2/aws/go_module_metadata.go
index 5b940e3..7de2041 100644
--- a/vendor/github.com/aws/aws-sdk-go-v2/aws/go_module_metadata.go
+++ b/vendor/github.com/aws/aws-sdk-go-v2/aws/go_module_metadata.go
@@ -3,4 +3,4 @@
 package aws
 
 // goModuleVersion is the tagged release for this module
-const goModuleVersion = "1.43.3"
+const goModuleVersion = "1.43.5"
diff --git a/vendor/github.com/aws/aws-sdk-go-v2/aws/middleware/metadata.go b/vendor/github.com/aws/aws-sdk-go-v2/aws/middleware/metadata.go
index d66f096..ba20824 100644
--- a/vendor/github.com/aws/aws-sdk-go-v2/aws/middleware/metadata.go
+++ b/vendor/github.com/aws/aws-sdk-go-v2/aws/middleware/metadata.go
@@ -15,6 +15,8 @@ type RegisterServiceMetadata struct {
 	SigningName   string
 	Region        string
 	OperationName string
+
+	RequiresLegacyEndpoints bool
 }
 
 // ID returns the middleware identifier.
@@ -33,10 +35,13 @@ func (s RegisterServiceMetadata) HandleInitialize(
 		ctx = SetSigningName(ctx, s.SigningName)
 	}
 	if len(s.Region) > 0 {
-		ctx = setRegion(ctx, s.Region)
+		ctx = SetRegion(ctx, s.Region)
 	}
 	if len(s.OperationName) > 0 {
-		ctx = setOperationName(ctx, s.OperationName)
+		ctx = SetOperationName(ctx, s.OperationName)
+	}
+	if s.RequiresLegacyEndpoints {
+		ctx = SetRequiresLegacyEndpoints(ctx, true)
 	}
 	return next.HandleInitialize(ctx, in)
 }
@@ -161,19 +166,19 @@ func SetServiceID(ctx context.Context, value string) context.Context {
 	return middleware.WithStackValue(ctx, serviceIDKey{}, value)
 }
 
-// setRegion sets the endpoint region on the context.
+// SetRegion sets the endpoint region on the context.
 //
 // Scoped to stack values. Use github.com/aws/smithy-go/middleware#ClearStackValues
 // to clear all stack values.
-func setRegion(ctx context.Context, value string) context.Context {
+func SetRegion(ctx context.Context, value string) context.Context {
 	return middleware.WithStackValue(ctx, regionKey{}, value)
 }
 
-// setOperationName sets the service operation on the context.
+// SetOperationName sets the service operation on the context.
 //
 // Scoped to stack values. Use github.com/aws/smithy-go/middleware#ClearStackValues
 // to clear all stack values.
-func setOperationName(ctx context.Context, value string) context.Context {
+func SetOperationName(ctx context.Context, value string) context.Context {
 	return middleware.WithStackValue(ctx, operationNameKey{}, value)
 }
 
diff --git a/vendor/github.com/aws/aws-sdk-go-v2/aws/transport/http/client.go b/vendor/github.com/aws/aws-sdk-go-v2/aws/transport/http/client.go
index 49cc312..94094ec 100644
--- a/vendor/github.com/aws/aws-sdk-go-v2/aws/transport/http/client.go
+++ b/vendor/github.com/aws/aws-sdk-go-v2/aws/transport/http/client.go
@@ -2,6 +2,7 @@ package http
 
 import (
 	"context"
+	"crypto/fips140"
 	"crypto/tls"
 	"net"
 	"net/http"
@@ -27,6 +28,19 @@ var (
 
 	// Default to TLS 1.2 for all HTTPS requests.
 	DefaultHTTPTransportTLSMinVersion uint16 = tls.VersionTLS12
+
+	// DefaultHTTPTransportTLSCurvePreferencesFIPS is the elliptic curve preference
+	// list applied to the default transport when the FIPS 140-3 module is active.
+	//
+	// Go's default preferences lead with X25519, which crypto/ecdh rejects under
+	// GODEBUG=fips140=only, failing every TLS handshake the SDK attempts. Only the
+	// NIST curves are FIPS-approved, so restricting to them keeps the default
+	// client usable in FIPS deployments.
+	DefaultHTTPTransportTLSCurvePreferencesFIPS = []tls.CurveID{
+		tls.CurveP256,
+		tls.CurveP384,
+		tls.CurveP521,
+	}
 )
 
 // Timeouts for net.Dialer's network connection.
@@ -178,6 +192,16 @@ func defaultDialer() *net.Dialer {
 	}
 }
 
+// defaultTLSCurvePreferences returns the curve preferences for the default
+// transport. Outside FIPS mode it returns nil so Go's own defaults apply,
+// preserving X25519 and the post-quantum X25519MLKEM768 hybrid.
+func defaultTLSCurvePreferences(fipsEnabled bool) []tls.CurveID {
+	if !fipsEnabled {
+		return nil
+	}
+	return DefaultHTTPTransportTLSCurvePreferencesFIPS
+}
+
 func defaultHTTPTransport() *http.Transport {
 	dialer := defaultDialer()
 
@@ -192,7 +216,8 @@ func defaultHTTPTransport() *http.Transport {
 		ExpectContinueTimeout: DefaultHTTPTransportExpectContinueTimeout,
 		ForceAttemptHTTP2:     true,
 		TLSClientConfig: &tls.Config{
-			MinVersion: DefaultHTTPTransportTLSMinVersion,
+			MinVersion:       DefaultHTTPTransportTLSMinVersion,
+			CurvePreferences: defaultTLSCurvePreferences(fips140.Enabled()),
 		},
 	}
 
diff --git a/vendor/github.com/aws/smithy-go/CHANGELOG.md b/vendor/github.com/aws/smithy-go/CHANGELOG.md
index e727efa..ea0448c 100644
--- a/vendor/github.com/aws/smithy-go/CHANGELOG.md
+++ b/vendor/github.com/aws/smithy-go/CHANGELOG.md
@@ -1,3 +1,13 @@
+# Release (2026-08-07)
+
+## General Highlights
+* **Dependency Update**: Updated to the latest SDK module versions
+
+## Module Highlights
+* `github.com/aws/smithy-go`: v1.27.7
+  * **Bug Fix**: Don't serialize unset JSON documents as `nil` in structure members.
+  * **Bug Fix**: Fix a deserialization panic around collection members in recursive shape configs.
+
 # Release (2026-07-31)
 
 ## General Highlights
diff --git a/vendor/github.com/aws/smithy-go/go_module_metadata.go b/vendor/github.com/aws/smithy-go/go_module_metadata.go
index e9988cb..3dca714 100644
--- a/vendor/github.com/aws/smithy-go/go_module_metadata.go
+++ b/vendor/github.com/aws/smithy-go/go_module_metadata.go
@@ -3,4 +3,4 @@
 package smithy
 
 // goModuleVersion is the tagged release for this module
-const goModuleVersion = "1.27.6"
+const goModuleVersion = "1.27.7"
diff --git a/vendor/github.com/aws/smithy-go/schema.go b/vendor/github.com/aws/smithy-go/schema.go
index 6293d34..8e9c209 100644
--- a/vendor/github.com/aws/smithy-go/schema.go
+++ b/vendor/github.com/aws/smithy-go/schema.go
@@ -71,8 +71,9 @@ type Schema struct {
 	directMask uint64             // bitmask: bit i set means indexed[i] was declared directly on this schema
 	targetID   ShapeID            // for member schemas, the target's shape ID
 
-	listMember       *Schema
-	mapKey, mapValue *Schema
+	// resolved on the fly and cached
+	listMember       atomic.Pointer[Schema]
+	mapKey, mapValue atomic.Pointer[Schema]
 
 	ext [numExtensionSlots]unsafe.Pointer // lazily-computed codec extensions, accessed atomically
 }
@@ -126,9 +127,6 @@ func (s *Schema) AddMember(name string, target *Schema, ts ...Trait) *Schema {
 		traits:     cloneTraits(target.traits),
 		directMask: 0, // inherited traits are not direct
 		targetID:   target.id,
-		listMember: target.listMember,
-		mapKey:     target.mapKey,
-		mapValue:   target.mapValue,
 	}
 
 	// member-declared traits override and are direct
@@ -143,14 +141,6 @@ func (s *Schema) AddMember(name string, target *Schema, ts ...Trait) *Schema {
 		atomic.StorePointer(&s.ext[i], nil)
 	}
 
-	switch name {
-	case "member":
-		s.listMember = m
-	case "key":
-		s.mapKey = m
-	case "value":
-		s.mapValue = m
-	}
 	return m
 }
 
@@ -176,17 +166,31 @@ func cloneTraits(src map[ShapeID]Trait) map[ShapeID]Trait {
 
 // ListMember returns the "member" schema for list types.
 func (s *Schema) ListMember() *Schema {
-	return s.listMember
+	return s.lookup(&s.listMember, "member")
 }
 
 // MapKey returns the "key" schema for map types.
 func (s *Schema) MapKey() *Schema {
-	return s.mapKey
+	return s.lookup(&s.mapKey, "key")
 }
 
 // MapValue returns the "value" schema for map types.
 func (s *Schema) MapValue() *Schema {
-	return s.mapValue
+	return s.lookup(&s.mapValue, "value")
+}
+
+func (s *Schema) lookup(cached *atomic.Pointer[Schema], name string) *Schema {
+	if v := cached.Load(); v != nil {
+		return v
+	}
+
+	m, ok := s.members[name]
+	if !ok {
+		return nil
+	}
+
+	cached.Store(m)
+	return m
 }
 
 // MemberName returns the member component of the schema's shape ID.
diff --git a/vendor/github.com/aws/smithy-go/schema_ext.go b/vendor/github.com/aws/smithy-go/schema_ext.go
index 7503b30..e98427a 100644
--- a/vendor/github.com/aws/smithy-go/schema_ext.go
+++ b/vendor/github.com/aws/smithy-go/schema_ext.go
@@ -9,13 +9,14 @@ import (
 // (JSON, CBOR, etc.) uses a distinct slot to cache precomputed data.
 type ExtensionID int
 
-const numExtensionSlots = 4
+const numExtensionSlots = 5
 
 const (
-	ExtJSON  ExtensionID = iota // transport/http/protocol/internal/json
-	ExtCBOR                     // transport/http/protocol/internal/cbor
-	ExtXML                      // transport/http/protocol/internal/xml
-	ExtQuery                    // transport/http/protocol/internal/query
+	ExtJSON        ExtensionID = iota // transport/http/protocol/internal/json
+	ExtCBOR                           // transport/http/protocol/internal/cbor
+	ExtXML                            // transport/http/protocol/internal/xml
+	ExtQuery                          // transport/http/protocol/internal/query
+	ExtHTTPBinding                    // transport/http/protocol/internal/httpbinding
 )
 
 // SchemaExtension retrieves or lazily computes the extension for the given
diff --git a/vendor/github.com/aws/smithy-go/transport/http/middleware_close_response_body.go b/vendor/github.com/aws/smithy-go/transport/http/middleware_close_response_body.go
index 914338f..820e91e 100644
--- a/vendor/github.com/aws/smithy-go/transport/http/middleware_close_response_body.go
+++ b/vendor/github.com/aws/smithy-go/transport/http/middleware_close_response_body.go
@@ -8,9 +8,29 @@ import (
 	"github.com/aws/smithy-go/middleware"
 )
 
+// CloseResponseBody closes the HTTP response body. It leaves the body open only
+// for a successful response whose payload is a caller-owned stream (isStreaming
+// with a nil opErr); on error, or for a non-streaming response, it closes the
+// body — an error response body is diagnostic, not a caller-owned stream.
+func CloseResponseBody(ctx context.Context, resp *Response, isStreaming bool, opErr error) {
+	if resp == nil || resp.Body == nil {
+		return
+	}
+	if isStreaming && opErr == nil {
+		return
+	}
+
+	if closeErr := resp.Body.Close(); closeErr != nil {
+		middleware.GetLogger(ctx).Logf(logging.Warn, "failed to close HTTP response body, this may affect connection reuse")
+	}
+}
+
 // AddErrorCloseResponseBodyMiddleware adds the middleware to automatically
 // close the response body of an operation request if the request response
 // failed.
+//
+// Deprecated: generated operation deserializers now close the response body
+// via CloseResponseBody, so this middleware is no longer used.
 func AddErrorCloseResponseBodyMiddleware(stack *middleware.Stack) error {
 	return stack.Deserialize.Insert(&errorCloseResponseBodyMiddleware{}, "OperationDeserializer", middleware.Before)
 }
@@ -42,6 +62,9 @@ func (m *errorCloseResponseBodyMiddleware) HandleDeserialize(
 // AddCloseResponseBodyMiddleware adds the middleware to automatically close
 // the response body of an operation request, after the response had been
 // deserialized.
+//
+// Deprecated: generated operation deserializers now close the response body
+// via CloseResponseBody, so this middleware is no longer used.
 func AddCloseResponseBodyMiddleware(stack *middleware.Stack) error {
 	return stack.Deserialize.Insert(&closeResponseBody{}, "OperationDeserializer", middleware.Before)
 }
diff --git a/vendor/modules.txt b/vendor/modules.txt
index 65015a6..367e9c8 100644
--- a/vendor/modules.txt
+++ b/vendor/modules.txt
@@ -4,7 +4,7 @@ github.com/aws/aws-lambda-go/lambda
 github.com/aws/aws-lambda-go/lambda/handlertrace
 github.com/aws/aws-lambda-go/lambda/messages
 github.com/aws/aws-lambda-go/lambdacontext
-# github.com/aws/aws-sdk-go-v2 v1.43.3
+# github.com/aws/aws-sdk-go-v2 v1.43.5
 ## explicit; go 1.24
 github.com/aws/aws-sdk-go-v2/aws
 github.com/aws/aws-sdk-go-v2/aws/defaults
@@ -89,7 +89,7 @@ github.com/aws/aws-sdk-go-v2/service/ssooidc/types
 github.com/aws/aws-sdk-go-v2/service/sts
 github.com/aws/aws-sdk-go-v2/service/sts/internal/endpoints
 github.com/aws/aws-sdk-go-v2/service/sts/types
-# github.com/aws/smithy-go v1.27.6
+# github.com/aws/smithy-go v1.27.7
 ## explicit; go 1.24
 github.com/aws/smithy-go
 github.com/aws/smithy-go/auth