diff --git a/.changes/1.27.87.json b/.changes/1.27.87.json
new file mode 100644
index 000000000000..9d0b74ca9bcd
--- /dev/null
+++ b/.changes/1.27.87.json
@@ -0,0 +1,42 @@
+[
+  {
+    "category": "``athena``",
+    "description": "A new field SubstatementType is added to GetQueryExecution API, so customers have an error free way to detect the query type and interpret the result.",
+    "type": "api-change"
+  },
+  {
+    "category": "``dynamodb``",
+    "description": "Adds deletion protection support to DynamoDB tables. Tables with deletion protection enabled cannot be deleted. Deletion protection is disabled by default, can be enabled via the CreateTable or UpdateTable APIs, and is visible in TableDescription. This setting is not replicated for Global Tables.",
+    "type": "api-change"
+  },
+  {
+    "category": "``ec2``",
+    "description": "Introducing Amazon EC2 C7g, M7g and R7g instances, powered by the latest generation AWS Graviton3 processors and deliver up to 25% better performance over Graviton2-based instances.",
+    "type": "api-change"
+  },
+  {
+    "category": "``lakeformation``",
+    "description": "This release adds two new API support \"GetDataCellsFiler\" and \"UpdateDataCellsFilter\", and also updates the corresponding documentation.",
+    "type": "api-change"
+  },
+  {
+    "category": "``mediapackage-vod``",
+    "description": "This release provides the date and time VOD resources were created.",
+    "type": "api-change"
+  },
+  {
+    "category": "``mediapackage``",
+    "description": "This release provides the date and time live resources were created.",
+    "type": "api-change"
+  },
+  {
+    "category": "``route53resolver``",
+    "description": "Add dual-stack and IPv6 support for Route 53 Resolver Endpoint,Add IPv6 target IP in Route 53 Resolver Forwarding Rule",
+    "type": "api-change"
+  },
+  {
+    "category": "``sagemaker``",
+    "description": "There needs to be a user identity to specify the SageMaker user who perform each action regarding the entity. However, these is a not a unified concept of user identity across SageMaker service that could be used today.",
+    "type": "api-change"
+  }
+]
\ No newline at end of file
diff --git a/CHANGELOG.rst b/CHANGELOG.rst
index 4915ef976abe..35a33a910cbc 100644
--- a/CHANGELOG.rst
+++ b/CHANGELOG.rst
@@ -2,6 +2,19 @@
 CHANGELOG
 =========
 
+1.27.87
+=======
+
+* api-change:``athena``: A new field SubstatementType is added to GetQueryExecution API, so customers have an error free way to detect the query type and interpret the result.
+* api-change:``dynamodb``: Adds deletion protection support to DynamoDB tables. Tables with deletion protection enabled cannot be deleted. Deletion protection is disabled by default, can be enabled via the CreateTable or UpdateTable APIs, and is visible in TableDescription. This setting is not replicated for Global Tables.
+* api-change:``ec2``: Introducing Amazon EC2 C7g, M7g and R7g instances, powered by the latest generation AWS Graviton3 processors and deliver up to 25% better performance over Graviton2-based instances.
+* api-change:``lakeformation``: This release adds two new API support "GetDataCellsFiler" and "UpdateDataCellsFilter", and also updates the corresponding documentation.
+* api-change:``mediapackage-vod``: This release provides the date and time VOD resources were created.
+* api-change:``mediapackage``: This release provides the date and time live resources were created.
+* api-change:``route53resolver``: Add dual-stack and IPv6 support for Route 53 Resolver Endpoint,Add IPv6 target IP in Route 53 Resolver Forwarding Rule
+* api-change:``sagemaker``: There needs to be a user identity to specify the SageMaker user who perform each action regarding the entity. However, these is a not a unified concept of user identity across SageMaker service that could be used today.
+
+
 1.27.86
 =======
 
diff --git a/awscli/__init__.py b/awscli/__init__.py
index 607c965c2a26..77842d363d8a 100644
--- a/awscli/__init__.py
+++ b/awscli/__init__.py
@@ -17,7 +17,7 @@
 """
 import os
 
-__version__ = '1.27.86'
+__version__ = '1.27.87'
 
 #
 # Get our data path to be added to botocore's search path
diff --git a/doc/source/conf.py b/doc/source/conf.py
index 7b6c8cd39d31..50bba7b6d92b 100644
--- a/doc/source/conf.py
+++ b/doc/source/conf.py
@@ -52,7 +52,7 @@
 # The short X.Y version.
 version = '1.27.'
 # The full version, including alpha/beta/rc tags.
-release = '1.27.86'
+release = '1.27.87'
 
 # The language for content autogenerated by Sphinx. Refer to documentation
 # for a list of supported languages.
diff --git a/setup.cfg b/setup.cfg
index 19cf782cf434..d3bea8f6a441 100644
--- a/setup.cfg
+++ b/setup.cfg
@@ -3,7 +3,7 @@ universal = 0
 
 [metadata]
 requires_dist =
-        botocore==1.29.86
+        botocore==1.29.87
         docutils>=0.10,<0.17
         s3transfer>=0.6.0,<0.7.0
         PyYAML>=3.10,<5.5
diff --git a/setup.py b/setup.py
index 130aeec3825e..4f2892fec15e 100644
--- a/setup.py
+++ b/setup.py
@@ -24,7 +24,7 @@ def find_version(*file_paths):
 
 
 install_requires = [
-    'botocore==1.29.86',
+    'botocore==1.29.87',
     'docutils>=0.10,<0.17',
     's3transfer>=0.6.0,<0.7.0',
     'PyYAML>=3.10,<5.5',