From b6da5c18b739af1025f182e93063d964465b0a9b Mon Sep 17 00:00:00 2001
From: James Hush <james@daily.co>
Date: Thu, 30 Apr 2026 14:38:30 +0800
Subject: [PATCH] Add changelog for #4389

---
 changelog/4389.fixed.md | 9 +++++++++
 1 file changed, 9 insertions(+)
 create mode 100644 changelog/4389.fixed.md

diff --git a/changelog/4389.fixed.md b/changelog/4389.fixed.md
new file mode 100644
index 000000000..47d6d7d0e
--- /dev/null
+++ b/changelog/4389.fixed.md
@@ -0,0 +1,9 @@
+- Fixed AWS services failing silently on missing or invalid credentials.
+  `AWSNovaSonicLLMService`, `AWSBedrockLLMService`, `AWSPollyTTSService`,
+  and `AWSTranscribeSTTService` now push a fatal `ErrorFrame` with a
+  "check AWS credentials and region" hint on auth-class failures, so the
+  pipeline cancels promptly instead of continuing to run with no output.
+- Fixed `AWSNovaSonicLLMService._disconnect` raising `InvalidStateError`
+  from `awscrt/aio/http.py` when cleanup ran on a stream from a failed
+  `invoke_model_with_bidirectional_stream` call. The error was masking
+  the real connect-time auth failure in the logs.