chore(deps): update dependency amazon.aws to v11.4.0

[dreadnode-renovate-bot]

This PR contains the following updates:

Package	Type	Update	Change
amazon.aws	galaxy-collection	minor	11.3.0 → 11.4.0

---

Release Notes

ansible-collections/amazon.aws (amazon.aws)

v11.4.0: amazon.aws 11.4.0

Compare Source

Release Summary

This release includes significant improvements to the aws_ssm connection plugin, particularly for Windows hosts, along with new features for route53_zone and rds_instance. Documentation examples have been updated to use RFC-compliant addresses throughout the collection.

Minor Changes

• aws_ssm - Added O(endpoint_url) option for connecting to alternate AWS endpoints. The alias O(aws_endpoint_url) is also supported (#​2909).
• aws_ssm - Improved code organisation by extracting Windows command execution logic into a dedicated WindowsCommandExecutor class (#​2909).
• aws_ssm - Refactored connection plugin to inherit from AWSConnectionBase for consistent AWS credential handling across plugins (#​2909).
• aws_ssm - Renamed connection plugin options for consistency with other AWS plugins. O(aws_access_key_id) renamed to O(access_key); O(aws_secret_access_key) renamed to O(secret_key); O(aws_session_token) renamed to O(session_token); O(aws_profile) renamed to O(profile). Old names are retained as aliases. Additional aliases O(access_key_id) and O(secret_access_key) were also added (#​2909).
• backup_plan - replace realistic version IDs with example UUID format in documentation (#​3008).
• backup_plan_info - replace realistic version IDs with example UUID format in documentation (#​3008).
• ec2_eip - replace AWS public IPs with RFC 5737 TEST-NET addresses in documentation examples (#​3008).
• ec2_eni_info - use RFC 1918 private addresses in documentation examples (#​3008).
• ec2_instance - use RFC 5737 TEST-NET addresses in documentation examples (#​3008).
• ec2_instance_info - use RFC 5737 TEST-NET addresses in documentation examples (#​3008).
• ec2_key_info - replace realistic SSH fingerprint with example value in documentation (#​3008).
• ec2_metadata_facts - use RFC 5737 TEST-NET addresses in documentation examples (#​3008).
• ec2_vpc_dhcp_option - use public DNS servers (8.8.4.4, 8.8.8.8) instead of RFC 5737 addresses for DNS examples (#​3008).
• ec2_vpc_nat_gateway - use RFC 5737 TEST-NET addresses in documentation examples (#​3008).
• ec2_vpc_nat_gateway_info - use RFC 5737 TEST-NET addresses in documentation examples (#​3008).
• ec2_vpc_vpn - replace realistic pre-shared key with obvious example value in documentation (#​3008).
• ec2_vpc_vpn - use RFC 5737 TEST-NET addresses in documentation examples (#​3008).
• ec2_vpc_vpn_info - use RFC 5737 TEST-NET addresses in documentation examples (#​3008).
• rds_instance - Added support for self-managed Active Directory parameters domain_fqdn, domain_ou, domain_auth_secret_arn, and domain_dns_ips to allow joining RDS instances to a self-managed Active Directory domain (#​2977).
• route53 - use RFC 5737 TEST-NET addresses in documentation examples (#​3008).
• route53_health_check - use RFC 5737 TEST-NET addresses in documentation examples (#​3008).
• route53_zone - add support for wait and wait_timeout parameters to wait for DNSSEC state changes to propagate (#​2981).

Bugfixes

• aws_ssm - Fixed PowerShell command execution timeouts on Windows caused by PTY echo issues. Commands are now uploaded to S3 and executed via a small wrapper to avoid echoing large payloads to stdout (#​2909).
• aws_ssm - Fixed PowerShell stdin handling for modules that require stdin input on Windows hosts (#​2909).
• aws_ssm - Fixed Windows SSM connection failures when transferring files with Unicode characters in filenames or content. The connection plugin now properly handles UTF-8 encoding throughout the S3 upload/download process (#​2909).
• aws_ssm - Fixed stderr message accumulation across multiple command executions. Stderr is now flushed at the start of each command to prevent error messages from previous commands appearing in subsequent command output (#​2909).
• aws_ssm - suppress PowerShell progress output in Windows file transfers to prevent stdout pollution that causes transfer failures (#​3013).

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Mend Renovate.