that leads here: https://github.com/aws/aws-cli/issues/7905 "cannot import name 'DEFAULT_CIPHERS' from 'urllib3.util.ssl_'" https://github.com/boto/botocore/pull/2924/files
It's not mentioned in the changelog, but this commit was already included in 1.29.123: https://github.com/boto/botocore/compare/1.29.122...1.29.123 Debian sid has 1.34.46, so I'm not entirely sure why it's still broken?