diff --git a/.changes/1.35.23.json b/.changes/1.35.23.json
new file mode 100644
index 000000000000..b6060207d0bb
--- /dev/null
+++ b/.changes/1.35.23.json
@@ -0,0 +1,47 @@
+[
+  {
+    "category": "``batch``",
+    "description": "This feature allows override LaunchTemplates to be specified in an AWS Batch Compute Environment.",
+    "type": "api-change"
+  },
+  {
+    "category": "``bedrock-agent-runtime``",
+    "description": "This release adds trace functionality to Bedrock Prompt Flows",
+    "type": "api-change"
+  },
+  {
+    "category": "``chime-sdk-media-pipelines``",
+    "description": "Added support for Media Capture Pipeline and Media Concatenation Pipeline for customer managed server side encryption. Now Media Capture Pipeline can use IAM sink role to get access to KMS key and encrypt/decrypt recorded artifacts. KMS key ID can also be supplied with encryption context.",
+    "type": "api-change"
+  },
+  {
+    "category": "``controlcatalog``",
+    "description": "AWS Control Catalog GetControl public API returns additional data in output, including Implementation and Parameters",
+    "type": "api-change"
+  },
+  {
+    "category": "``eks``",
+    "description": "Adds new error code `Ec2InstanceTypeDoesNotExist` for Amazon EKS managed node groups",
+    "type": "api-change"
+  },
+  {
+    "category": "``firehose``",
+    "description": "Amazon Data Firehose / Features : Adds support for a new DeliveryStreamType, DatabaseAsSource. DatabaseAsSource hoses allow customers to stream CDC events from their RDS and Amazon EC2 hosted databases, running MySQL and PostgreSQL database engines, to Iceberg Table destinations.",
+    "type": "api-change"
+  },
+  {
+    "category": "``lambda``",
+    "description": "This release adds support for using AWS KMS customer managed keys to encrypt AWS Lambda .zip deployment packages.",
+    "type": "api-change"
+  },
+  {
+    "category": "``pinpoint-sms-voice-v2``",
+    "description": "Added the RequiresAuthenticationTimestamp field to the RegistrationVersionStatusHistory data type.",
+    "type": "api-change"
+  },
+  {
+    "category": "``qbusiness``",
+    "description": "Adds S3 path option to pass group member list for PutGroup API.",
+    "type": "api-change"
+  }
+]
\ No newline at end of file
diff --git a/CHANGELOG.rst b/CHANGELOG.rst
index 80e61dd3a536..cac69faced1e 100644
--- a/CHANGELOG.rst
+++ b/CHANGELOG.rst
@@ -2,6 +2,20 @@
 CHANGELOG
 =========
 
+1.35.23
+=======
+
+* api-change:``batch``: This feature allows override LaunchTemplates to be specified in an AWS Batch Compute Environment.
+* api-change:``bedrock-agent-runtime``: This release adds trace functionality to Bedrock Prompt Flows
+* api-change:``chime-sdk-media-pipelines``: Added support for Media Capture Pipeline and Media Concatenation Pipeline for customer managed server side encryption. Now Media Capture Pipeline can use IAM sink role to get access to KMS key and encrypt/decrypt recorded artifacts. KMS key ID can also be supplied with encryption context.
+* api-change:``controlcatalog``: AWS Control Catalog GetControl public API returns additional data in output, including Implementation and Parameters
+* api-change:``eks``: Adds new error code `Ec2InstanceTypeDoesNotExist` for Amazon EKS managed node groups
+* api-change:``firehose``: Amazon Data Firehose / Features : Adds support for a new DeliveryStreamType, DatabaseAsSource. DatabaseAsSource hoses allow customers to stream CDC events from their RDS and Amazon EC2 hosted databases, running MySQL and PostgreSQL database engines, to Iceberg Table destinations.
+* api-change:``lambda``: This release adds support for using AWS KMS customer managed keys to encrypt AWS Lambda .zip deployment packages.
+* api-change:``pinpoint-sms-voice-v2``: Added the RequiresAuthenticationTimestamp field to the RegistrationVersionStatusHistory data type.
+* api-change:``qbusiness``: Adds S3 path option to pass group member list for PutGroup API.
+
+
 1.35.22
 =======
 
diff --git a/awscli/__init__.py b/awscli/__init__.py
index 0f626391d31b..13c09af3449f 100644
--- a/awscli/__init__.py
+++ b/awscli/__init__.py
@@ -18,7 +18,7 @@
 
 import os
 
-__version__ = '1.35.22'
+__version__ = '1.35.23'
 
 #
 # Get our data path to be added to botocore's search path
diff --git a/doc/source/conf.py b/doc/source/conf.py
index 57fe25f4cdf1..378dd87d3c85 100644
--- a/doc/source/conf.py
+++ b/doc/source/conf.py
@@ -52,7 +52,7 @@
 # The short X.Y version.
 version = '1.35.'
 # The full version, including alpha/beta/rc tags.
-release = '1.35.22'
+release = '1.35.23'
 
 # The language for content autogenerated by Sphinx. Refer to documentation
 # for a list of supported languages.
diff --git a/setup.cfg b/setup.cfg
index 99c86614b31e..c45237ff6e5d 100644
--- a/setup.cfg
+++ b/setup.cfg
@@ -3,7 +3,7 @@ universal = 0
 
 [metadata]
 requires_dist =
-        botocore==1.35.56
+        botocore==1.35.57
         docutils>=0.10,<0.17
         s3transfer>=0.10.0,<0.11.0
         PyYAML>=3.10,<6.1
diff --git a/setup.py b/setup.py
index 5295fac2452b..8ec44a8dc1c6 100644
--- a/setup.py
+++ b/setup.py
@@ -24,7 +24,7 @@ def find_version(*file_paths):
 
 
 install_requires = [
-    'botocore==1.35.56',
+    'botocore==1.35.57',
     'docutils>=0.10,<0.17',
     's3transfer>=0.10.0,<0.11.0',
     'PyYAML>=3.10,<6.1',