andylockran/codemetrics-deploy
Watch
1
0
Fork
You've already forked codemetrics-deploy
 0
Code Issues 1 Pull requests 10 Projects Releases Packages Wiki Activity Actions

Update dependency aws-cdk-lib to v2.275.0 #6

Open
renovate wants to merge 1 commit from renovate/aws-cdk-monorepo into main
pull from: renovate/aws-cdk-monorepo
merge into: andylockran:main
Conversation 1 Commits 1 Files changed 1 +1 -1
renovate commented 2026-10-27 12:16:08 +00:00
Collaborator

This PR contains the following updates:

Package Change Age Confidence
aws-cdk-lib (source) 2.151.0 → 2.275.0 age confidence

Release Notes

aws/aws-cdk (aws-cdk-lib)

v2.275.0

Compare Source

⚠ BREAKING CHANGES
  • ** L1 resources are automatically generated from public CloudFormation Resource Schemas. They are built to closely reflect the real state of CloudFormation. Sometimes these updates can contain changes that are incompatible with previous types, but more accurately reflect reality. In this release we have changed:

aws-bedrockagentcore: AWS::BedrockAgentCore::Harness: HarnessAgentCoreMemoryRetrievalConfig.RelevanceScore type narrowed from number | string to number.
aws-bedrockagentcore: AWS::BedrockAgentCore::Harness: HarnessAgentCoreMemoryRetrievalConfig.TopK type narrowed from integer | string to integer.
aws-codebuild: AWS::CodeBuild::ReportGroup: Id attribute removed.
aws-dax: AWS::DAX::SubnetGroup: Id attribute removed.
aws-dms: AWS::DMS::MigrationProject: InstanceProfileArn property removed (now a read-only attribute).
aws-dms: AWS::DMS::MigrationProject: InstanceProfileName property removed (now a read-only attribute).
aws-dms: AWS::DMS::MigrationProject: MigrationProjectCreationTime property removed (now a read-only attribute).
aws-emr: AWS::EMR::InstanceFleetConfig: Id attribute removed.
aws-fsx: AWS::FSx::Volume: AggregateConfiguration.Aggregates property is now immutable.
aws-fsx: AWS::FSx::Volume: AggregateConfiguration.ConstituentsPerAggregate property is now immutable.
aws-fsx: AWS::FSx::Volume: OntapConfiguration.AggregateConfiguration property is now immutable.
aws-fsx: AWS::FSx::Volume: OntapConfiguration.VolumeStyle property is now immutable.
aws-medialive: AWS::MediaLive::Input: InputNetworkLocation property type narrowed to enum (AWS | ON_PREMISES).
aws-medialive: AWS::MediaLive::Input: Type property type narrowed to enum (16 values).
aws-medialive: AWS::MediaLive::Input: Tags property type narrowed from json to Map<string, string>.
aws-medialive: AWS::MediaLive::Input: RouterDestinationSettings.AvailabilityZoneName property is now required.
aws-medialive: AWS::MediaLive::Input: RouterSettings.EncryptionType property type narrowed to enum (AUTOMATIC | SECRETS_MANAGER).
aws-medialive: AWS::MediaLive::InputSecurityGroup: Tags property type narrowed from json to Map<string, string>.
aws-mediapackagev2: AWS::MediaPackageV2::OriginEndpoint: LowLatencyHlsManifestConfiguration.FilterConfiguration type narrowed to LowLatencyHlsFilterConfiguration.
aws-mediapackagev2: AWS::MediaPackageV2::OriginEndpoint: MssManifestConfiguration.FilterConfiguration type narrowed to MssFilterConfiguration.

Features
Bug Fixes
  • core: overly defensive plugin invocation leads to slowness (#​39451) (783a981)
  • stepfunctions-tasks: use a dedicated Lambda function for each EvaluateExpression task (#​39436) (641ff6f)
  • add graduate tool to lerna.json (#​39423) (3d6f9d3)
  • lambda-nodejs: preCompilation fails with TypeScript 6 or later (#​39401) (8ce48a6)

Alpha modules (2.275.0-alpha.0)

v2.274.0

Compare Source

⚠ BREAKING CHANGES
  • ** L1 resources are automatically generated from public CloudFormation Resource Schemas. They are built to closely reflect the real state of CloudFormation. Sometimes these updates can contain changes that are incompatible with previous types, but more accurately reflect reality. In this release we have changed:

aws-cloudwatch: AWS::CloudWatch::AnomalyDetector: Id attribute removed.
aws-glue: AWS::Glue::Table: Id attribute removed.
aws-glue: AWS::Glue::Table: IcebergInput.MetadataOperation type narrowed from json to string.
aws-glue: AWS::Glue::Table: IcebergTableInput.Properties type narrowed from json to Map<string, string>.
aws-iot: AWS::IoT::PolicyPrincipalAttachment: Id attribute removed.
aws-quicksight: AWS::QuickSight::Analysis: SheetLayoutGroupMember.Type type narrowed from json to string enum (ELEMENT|GROUP).
aws-quicksight: AWS::QuickSight::Dashboard: SheetLayoutGroupMember.Type type narrowed from json to string enum (ELEMENT|GROUP).
aws-quicksight: AWS::QuickSight::Template: SheetLayoutGroupMember.Type type narrowed from json to string enum (ELEMENT|GROUP).

Features
Bug Fixes

Alpha modules (2.274.0-alpha.0)

Features
Bug Fixes

v2.273.0

Compare Source

⚠ BREAKING CHANGES
  • ** L1 resources are automatically generated from public CloudFormation Resource Schemas. They are built to closely reflect the real state of CloudFormation. Sometimes these updates can contain changes that are incompatible with previous types, but more accurately reflect reality. In this release we have changed:

aws-appstream: AWS::AppStream::StackFleetAssociation: FleetName property is now immutable.
aws-appstream: AWS::AppStream::StackFleetAssociation: StackName property is now immutable.
aws-appsync: AWS::AppSync::ApiCache: AtRestEncryptionEnabled property is now immutable.
aws-appsync: AWS::AppSync::ApiCache: TransitEncryptionEnabled property is now immutable.
aws-bedrockagentcore: AWS::BedrockAgentCore::OnlineEvaluationConfig: OutputConfig attribute removed.
aws-cloud9: AWS::Cloud9::EnvironmentEC2: Id attribute removed.
aws-config: AWS::Config::ConfigurationRecorder: Id attribute removed.
aws-config: AWS::Config::OrganizationConfigRule: Id attribute removed.
aws-datazone: AWS::DataZone::PolicyGrant: Detail property is now required.
aws-datazone: AWS::DataZone::PolicyGrant: Principal property is now required.
aws-directoryservice: AWS::DirectoryService::MicrosoftAD: Id attribute removed.
aws-lambda: AWS::Lambda::NetworkConnector: VpcEgressConfiguration.NetworkProtocol property is now required.
aws-lambda: AWS::Lambda::NetworkConnector: VpcEgressConfiguration.SecurityGroupIds property is now required.

Features
Bug Fixes

Alpha modules (2.273.0-alpha.0)

⚠ BREAKING CHANGES
  • redshift-alpha: PUBLIC in any ASCII letter case is rejected as the name of a created user, or of an imported user that is granted table privileges. Existing PUBLIC grants are not removed, but narrowing one is rejected. Migrating to an ordinary name still works.
  • redshift-alpha: The loggingProperties prop on ClusterProps (and the LoggingProperties interface) has been removed from @aws-cdk/aws-redshift-alpha. Use the new logging prop with ClusterLogging.s3({ bucket, keyPrefix }) or ClusterLogging.cloudWatch({ logExports }) instead.
Features
Bug Fixes

v2.272.0

Compare Source

⚠ BREAKING CHANGES

  • ** L1 resources are automatically generated from public CloudFormation Resource Schemas. They are built to closely reflect the real state of CloudFormation. Sometimes these updates can
    contain changes that are incompatible with previous types, but more accurately reflect reality. In this release we have changed:

    aws-servicediscovery: AWS::ServiceDiscovery::Instance: primary identifier is now ServiceId and InstanceId, so InstanceReference now requires serviceId.

Features
Bug Fixes

Alpha modules (2.272.0-alpha.0)

v2.271.0

Compare Source

Features
Bug Fixes

Alpha modules (2.271.0-alpha.0)

v2.270.0

Compare Source

⚠ BREAKING CHANGES

  • ** L1 resources are automatically generated from public CloudFormation Resource Schemas. They are built to closely reflect the real state of CloudFormation. Sometimes these updates can
    contain changes that are incompatible with previous types, but more accurately reflect reality. In this release we have changed:

    aws-codecommit: AWS::CodeCommit::Repository: Id attribute removed.
    aws-config: AWS::Config::DeliveryChannel: DeliveryFrequency property values narrowed to an enum.
    aws-dms: AWS::DMS::ReplicationTask: Id attribute removed.

Features
  • update L1 CloudFormation resource definitions (#​38823) (4386bf1)
  • core: add cross-resource GameLift launch-path rules (CDK-GameLift-006/007) (ba98771)
  • core: merge default Rego rules into explicitly registered plugins (160c8a6)
  • core: replace schema-covered Rego rules with cross-field invariants (07a8153)
  • core: ship default CloudFormation validation rules in Rego (5388c88)
  • core: ship default CloudFormation validation rules in Rego (#​38448) (4ccdad8), closes #​38456
  • glue: graduate to stable 🚀 (#​38799) (a9e36a3)
  • lambda: add DirectS3Read support for S3 Files filesystem mounts (#​38752) (1482712), closes #​38751
Bug Fixes

Alpha modules (2.270.0-alpha.0)

v2.269.0

Compare Source

Features
Bug Fixes

Alpha modules (2.269.0-alpha.0)

⚠ BREAKING CHANGES
  • glue-alpha: Glue job constructs now reject construct-managed and Glue-reserved
    arguments passed through defaultArguments. Previously, a managed argument set via
    defaultArguments was silently honored in SparkJob and PythonShellJob (customer
    value won over the construct default) and silently ignored in RayJob (construct
    default won). Both behaviors let a caller bypass the construct's security and
    observability defaults with no error. Passing any of the following through
    defaultArguments now throws a ValidationError at synthesis time:
  • construct-managed arguments — --enable-continuous-cloudwatch-log,
    --continuous-log-logGroup, --continuous-log-logStreamPrefix,
    --continuous-log-conversionPattern, --enable-continuous-log-filter,
    --enable-metrics, --enable-observability-metrics, --enable-spark-ui,
    --spark-event-logs-path, --job-language, --class, --extra-jars,
    --user-jars-first, --extra-py-files, --extra-files, library-set
  • Glue-reserved arguments — --debug, --mode, --JOB_NAME, --endpoint

A managed argument is rejected whether or not the current configuration emits it, so a
disabled feature (e.g. enableMetrics: false) cannot be re-enabled through
defaultArguments. Configure these through their dedicated props instead
(continuousLogging, enableMetrics, enableObservabilityMetrics, sparkUI,
className, extraJars, extraJarsFirst, extraPythonFiles, extraFiles). For
example, replace defaultArguments: { '--enable-continuous-cloudwatch-log': 'false' }
with continuousLogging: { enabled: false }. Arguments without a dedicated prop (e.g.
--enable-glue-datacatalog) are unaffected and remain settable via defaultArguments.

The checkNoReservedArgs(defaultArguments?) method on the Job base class was removed.
It is replaced by two protected members: setManagedArgument(key, value?), which each
job class calls to declare (and, when a value is present, emit) a managed argument, and
mergeDefaultArguments(defaultArguments?), which validates the caller-supplied
defaultArguments against the accumulated reserved set and returns the merged map.

  • route53resolver-alpha: FirewallRuleGroupAssociation now honors the previously-ignored mutationProtection and name props. Stacks that set mutationProtection: true will enable mutation protection on redeploy (which blocks further CloudFormation update/delete until it is set back to false); stacks that set name will write it to the template, which may replace the association.
  • glue-alpha: trigger Action and Condition are no longer plain objects — use Action.job(...) / Action.crawler(...) and Condition.job(...) / Condition.crawler(...). Jobs are referenced via IJobRef and crawlers via ICrawlerRef (a CfnCrawler instance or CfnCrawler.fromCrawlerName(...)) instead of a CfnCrawler field or crawler-name string; IJob now extends the generated IJobRef. addDailyScheduledTrigger/addWeeklyScheduledTrigger/addCustomScheduledTrigger are replaced by addScheduledTrigger(id, { schedule, ... }) (use TriggerSchedule.daily()/weekly()/cron(...)). addNotifyEventTrigger is renamed addEventTrigger (NotifyEventTriggerOptions → EventTriggerOptions). All addXxxTrigger methods now return ITriggerRef instead of CfnTrigger.
  • glue-alpha: PartitionProjectionConfiguration's variant fields (integerRange, dateRange, interval, digits, format, intervalUnit, values) are no longer public; DATE projection now takes step: { interval, intervalUnit } instead of top-level interval/intervalUnit.
  • glue-alpha: ConnectionOptions no longer has subnet, vpc, or vpcSubnets; use network: ConnectionNetwork.subnet(...) or network: ConnectionNetwork.vpc(...) instead.
Features
Bug Fixes
  • route53resolver-alpha: association silently ignored mutationProtection and name (#​38795) (5ab40b2)

v2.268.0

Compare Source

⚠ BREAKING CHANGES

L1 resources are automatically generated from public CloudFormation Resource Schemas. They are built to closely reflect the real state of CloudFormation. Sometimes these updates can contain changes that are incompatible with previous types, but more accurately reflect reality. In this release we have changed:

  • aws-athena: AWS::Athena::Session removed.
  • aws-bcmdataexports: AWS::BCMDataExports::Table removed.
  • aws-bedrock: AWS::Bedrock::DefaultPromptRouter and AWS::Bedrock::ModelInvocationJob removed.
  • aws-bedrockagentcore: AWS::BedrockAgentCore::Browser, AWS::BedrockAgentCore::CodeInterpreter, and AWS::BedrockAgentCore::TokenVault removed; AWS::BedrockAgentCore::PaymentConnector ConnectorType and AWS::BedrockAgentCore::PaymentCredentialProvider CredentialProviderVendor are now immutable; AWS::BedrockAgentCore::CapacityProvider OperatingSystem allowed values in the LaunchParameters type reduced from [LINUX_X86_64, LINUX_ARM64, MAC_ARM64, WINDOWS_X86_64] to [LINUX_X86_64, LINUX_ARM64].
  • aws-certificatemanager: AWS::CertificateManager::Certificate Id attribute removed.
  • aws-chime: on both AWS::Chime::AppInstance and AWS::Chime::AppInstanceBot, the CreatedTimestamp and LastUpdatedTimestamp attribute types changed from number to string.
  • aws-cloudformation: AWS::CloudFormation::ResourceScan removed.
  • aws-codeartifact: AWS::CodeArtifact::Package removed.
  • aws-codebuild: AWS::CodeBuild::Sandbox removed; AWS::CodeBuild::SourceCredential Id attribute removed.
  • aws-dax: AWS::DAX::ParameterGroup Id attribute removed; Description property is now immutable.
  • aws-dms: Id attribute removed from AWS::DMS::Endpoint, AWS::DMS::EventSubscription, and AWS::DMS::ReplicationSubnetGroup; AWS::DMS::ReplicationTask MigrationType property is now immutable.
  • aws-docdb: Id attribute removed from AWS::DocDB::DBClusterParameterGroup and AWS::DocDB::DBSubnetGroup.
  • aws-dynamodb: AWS::DynamoDB::Export removed.
  • aws-elasticache: AWS::ElastiCache::ReservedCacheNode removed.
  • aws-emr: AWS::EMR::NotebookExecution removed.
  • aws-events: AWS::Events::Replay removed.
  • aws-fis: AWS::FIS::SafetyLever removed.
  • aws-glue:
    • Id attribute removed from AWS::Glue::Classifier, AWS::Glue::Connection, AWS::Glue::CustomEntityType, AWS::Glue::DataQualityRuleset, AWS::Glue::MLTransform, AWS::Glue::SecurityConfiguration, AWS::Glue::TableOptimizer, and AWS::Glue::Workflow.
    • AWS::Glue::Connection: complex-property types AuthenticationConfigurationInput and OAuth2PropertiesInput renamed to AuthenticationConfiguration and OAuth2Properties respectively.
    • AWS::Glue::DataQualityRuleset: Name, TargetTable.DatabaseName, and TargetTable.TableName properties are now required; Name property is now immutable; Tags property type changed from json to map<string>.
    • AWS::Glue::CustomEntityType: Name property is now immutable; Tags property is no longer recognised as resource tags.
    • AWS::Glue::MLTransform: TransformEncryption property is now immutable.
  • aws-greengrassv2: AWS::GreengrassV2::Component and AWS::GreengrassV2::CoreDevice removed.
  • aws-identitystore: AWS::IdentityStore::AllGroupMemberships removed.
  • aws-imagebuilder: AWS::ImageBuilder::AllImageBuildVersions, AWS::ImageBuilder::AllWorkflowBuildVersions, AWS::ImageBuilder::WorkflowExecution, and AWS::ImageBuilder::WorkflowStepExecution removed.
  • aws-medialive: AWS::MediaLive::Offering removed.
  • aws-mediaconvert: AWS::MediaConvert::Preset Id attribute removed.
  • aws-mediapackage: AWS::MediaPackage::HarvestJob removed.
  • aws-memorydb: AWS::MemoryDB::MultiRegionParameterGroup and AWS::MemoryDB::ReservedNode removed.
  • aws-omics: AWS::Omics::Reference removed.
  • aws-osis: AWS::OSIS::PipelineBlueprint removed.
  • aws-personalize: AWS::Personalize::DataDeletionJob and AWS::Personalize::Recipe removed.
  • aws-redshiftserverless: AWS::RedshiftServerless::RecoveryPoint removed.
  • aws-route53: AWS::Route53::RecordSet GeoProximityLocation property removed, along with its supporting GeoProximityLocation and Coordinates complex-property types; Id attribute removed.
  • aws-sagemaker: AWS::SageMaker::ModelCardExportJob, AWS::SageMaker::MonitoringScheduleAlert, and AWS::SageMaker::TransformJob removed.
  • aws-ses: AWS::SES::ReceiptRuleSet Id attribute removed.
  • aws-signer: AWS::Signer::SigningJob removed.
  • aws-ssm: AWS::SSM::Session removed; AWS::SSM::Association InstanceId property is now immutable.
  • aws-sso: AWS::SSO::ApplicationProvider removed.
  • aws-stepfunctions: AWS::StepFunctions::MapRun removed.
  • aws-transcribe: AWS::Transcribe::MedicalTranscriptionJob removed.
  • aws-vpclattice: AWS::VpcLattice::ServiceNetwork SharingConfig property is now immutable.
Features
Bug Fixes

Alpha modules (2.268.0-alpha.0)

⚠ BREAKING CHANGES
  • glue-alpha: DataQualityTargetTable's constructor is removed — use DataQualityTargetTable.fromTable(database, table) or fromTableName(database, tableName); IDatabase now extends IDatabaseRef.
  • glue-alpha: DataQualityRulesetProps.clientToken is removed; use the CfnDataQualityRuleset L1 for request-level idempotency.
  • glue-alpha: S3Table.clientSideEncryptionKey is now kms.IKeyRef instead of kms.IKey.
  • glue-alpha: DataQualityRulesetProps.rulesetName is now required. AWS::Glue::DataQualityRuleset made Name a required property, so the name can no longer be left for CloudFormation to generate.
Features
  • glue-alpha: reference-typed DataQualityTargetTable and remove clientToken (#​38730) (c8fafbd)
Code Refactoring
  • glue-alpha: use kms.IKeyRef for KMS key inputs where possible (#​38725) (604ac23)

v2.267.0

Compare Source

⚠ BREAKING CHANGES
  • kinesisfirehose: After this change, specifying an unsupported timeZone on the Firehose S3Bucket destination now throws a ValidationError during synthesis instead of failing at CloudFormation deployment. Affected values: 3-letter IANA abbreviations (e.g. EST), Etc/UTC, Etc/GMT, Factory, and strings containing characters outside [a-zA-Z/_]+. Use a supported standard IANA identifier (e.g. America/New_York) or UTC for synth to pass.
Features
Bug Fixes

Alpha modules (2.267.0-alpha.0)

⚠ BREAKING CHANGES
  • glue-alpha: schema Type is now an opaque class; construct column types via the Schema factories or Schema.custom(...) rather than { isPrimitive, inputString } literals. StorageParameter.custom(key, value) requires a string value, and StorageParameter.writeKmsKeyId takes a kms.IKey instead of a string.
  • glue-alpha: S3TableProps.bucket/encryption/encryptionKey are removed. Use storage: S3TableStorage.managedBucket(S3TableEncryption.kms(key?)) / S3TableStorage.fromBucket(bucket) and clientSideEncryption: TableClientSideEncryption.kms(key?). S3Table.encryption/encryptionKey are removed (clientSideEncryptionKey exposes the client-side key; read bucket.encryptionKey for server-side). The TableEncryption enum and the deprecated Table/TableProps are removed — use S3Table.
Features
Bug Fixes
  • glue-alpha: validate that DATE partition projection interval is set when required (#​38594) (0e2b582)
  • lambda-python-alpha: escape Docker bundling command arguments (#​38583) (f7ce07b)

v2.266.0

Compare Source

Features
Bug Fixes

Alpha modules (2.266.0-alpha.0)

⚠ BREAKING CHANGES
  • glue-alpha: DataQualityRulesetProps.rulesetDqdl: string is replaced by
    dqdl: Dqdl. Build it with Dqdl.fromString('Rules = [ ... ]').
  • glue-alpha: s3Encryption, cloudWatchEncryption, and jobBookmarksEncryption are no longer object literals. Use S3Encryption.s3Managed() / S3Encryption.kms(key?), CloudWatchEncryption.kms(key?), and JobBookmarksEncryption.clientSideKms(key?). The CloudWatchEncryptionMode and JobBookmarksEncryptionMode enums are removed (their mode is now implicit); S3EncryptionMode is retained.
  • glue-alpha: this is a corrective breaking change. Apps that leaned on the bug, and did things like InputFormat x = OutputFormat.AVRO; will get a compilation error in other jsii languages. The intended usage, on the other hand, was broken before and works now.
  • glue-alpha: workerType and numberOfWorkers are no longer top-level job props. For Spark jobs, pass them together via workerConfiguration: { workerType, numberOfWorkers }. PythonShellJob no longer accepts them (it is sized by maxCapacity). RayJob no longer accepts workerType (it is fixed to Z.2X).
  • glue-alpha: SparkJobProps.enableMetrics removed, which will cause a compilation error for any app using it. But there is no behavior change, since this is a dead prop.
  • glue-alpha: a differing/tokenized has_encrypted_data supplied via parameters now throws.
Features
  • glue-alpha: add warning for maxRetries when job run queuing is enabled (#​38575) (09ae11e)
  • glue-alpha: model SecurityConfiguration encryption as factory subtypes (#​38586) (e37e7a6)
  • glue-alpha: new hasEncryptedData property (#​38511) (c977e36)
  • glue-alpha: pair workerType and numberOfWorkers into a required workerConfiguration (#​38576) (5f3b1b6)
  • glue-alpha: wrap DataQualityRuleset DQDL in a typed value object (#​38587) (fd01268)
Bug Fixes

v2.265.0

Compare Source

Features
Bug Fixes

Alpha modules (2.265.0-alpha.0)

⚠ BREAKING CHANGES
  • glue-alpha: PySparkFlexEtlJob and ScalaSparkFlexEtlJob now default to GlueVersion.V5_0 instead of V3_0. Set glueVersion explicitly to keep the previous behavior.
  • glue-alpha: removal policy of existing Database resources will change to RETAIN.
Features
Bug Fixes
  • glue-alpha: warn when S3Table grants cover a shared bucket (#​38542) (d81d2d6)
  • mediaconnect-alpha: update validation to allow adding an underscore to name (#​38539) (7c85994)

v2.264.0

Compare Source

⚠ BREAKING CHANGES
  • bedrockagentcore: Gateway metric helpers now emit corrected CloudWatch dimensions per-gateway
    metrics use { Operation, Protocol, Resource } (was { Resource }). Alarms/dashboards built on the
    old dimensions must be updated.
  • bedrockagentcore: RuntimeBase metric helpers now emit corrected CloudWatch dimensions per-resource metrics use { Operation, Name, Resource } (was { Resource }) and aggregated metrics use { AggregateOperation } (was { Resource: 'All' }). Alarms/dashboards built on the old dimensions must be updated.
Features
Bug Fixes

Alpha modules (2.264.0-alpha.0)

⚠ BREAKING CHANGES
  • glue-alpha: IDatabase.catalogArn and IDatabase.catalogId were removed in factor of a type
    safe ICatalog, which has catalogArn and catalogId. Consumers and implementations were updated
    accordingly.
Features
Bug Fixes
  • glue-alpha: enable key rotation for security configuration encryption (#​38512) (18560e0)
  • mediaconnect-alpha: addOutput options and simplified VPC interface referencing (#​38515) (3c71466), closes #​38517

v2.263.0

Compare Source

Features
Bug Fixes

Alpha modules (2.263.0-alpha.0)

⚠ BREAKING CHANGES
  • mediaconnect: removalPolicy prop removed from FlowProps, GatewayProps, and BridgeProps. These resources now follow CloudFormation's default deletion behaviour (Delete).
Bug Fixes

v2.262.2

Compare Source

Bug Fixes

Alpha modules (2.262.2-alpha.0)

v2.262.1

Compare Source

Bug Fixes

Alpha modules (2.262.1-alpha.0)

v2.262.0

Compare Source

Features
Bug Fixes
Reverts

Alpha modules (2.262.0-alpha.0)

Bug Fixes
  • redshift-alpha: quote identifiers and escape literals containing special characters (#​38269) (3cb6844)

v2.261.0

Compare Source

⚠ BREAKING CHANGES
  • ** L1 resources are automatically generated from public CloudFormation Resource Schemas. They are built to closely reflect the real state of CloudFormation. Sometimes these updates can contain changes that are incompatible with previous types, but more accurately reflect reality. In this release we have changed:
  • aws-cloudwatch: AWS::CloudWatch::LogAlarm: QueryLanguage property has been removed from the ScheduledQueryConfiguration type.
  • aws-elasticloadbalancing: AWS::ElasticLoadBalancing::LoadBalancer: Id attribute has been removed and the primary identifier is now LoadBalancerName.
Features
Bug Fixes

Alpha modules (2.261.0-alpha.0)

Features

v2.260.0

Compare Source

Features
Bug Fixes

Alpha modules (2.260.0-alpha.0)

v2.259.0

Compare Source

⚠ BREAKING CHANGES

  • lambda: Runtime.NODEJS_LATEST now resolves to nodejs24.x in every region. Customers who pin to a concrete runtime (Runtime.NODEJS_22_X, useLatestRuntimeVersion: false in aws-lambda-nodejs.NodejsFunction) are unaffected. Existing AWS::Lambda::Function resources synthesized with NODEJS_LATEST will see Runtime: nodejs22.x → Runtime: nodejs24.x on next deploy. Lambda accepts runtime updates in place.

    Customer-code compatibility — IMPORTANT: Node.js 24 removes support for callback-style asynchronous handlers ((event, context, callback) => {...}) per the launch blog. Customers whose Lambda code still uses callback-based handlers will see runtime errors after the bump. Customers should migrate to async (event, context) => {...} or pin to Runtime.NODEJS_22_X explicitly.

Features
Bug Fixes
Reverts

Alpha modules (2.259.0-alpha.0)

v2.258.1

Compare Source

Reverts

Alpha modules (2.258.1-alpha.0)

v2.258.0

Compare Source

⚠ BREAKING CHANGES
  • ** L1 resources are automatically generated from public CloudFormation Resource Schemas. They are built to closely reflect the real state of CloudFormation. Sometimes these updates can contain changes that are incompatible with previous types, but more accurately reflect reality. In this release we have changed:
  • aws-pcaconnectorad: AWS::PCAConnectorAD::ServicePrincipalName: ConnectorArn property is now required.
  • aws-pcaconnectorad: AWS::PCAConnectorAD::ServicePrincipalName: DirectoryRegistrationArn property is now required.
  • aws-pcaconnectorad: AWS::PCAConnectorAD::TemplateGroupAccessControlEntry: GroupSecurityIdentifier property is now required.
  • aws-pcaconnectorad: AWS::PCAConnectorAD::TemplateGroupAccessControlEntry: TemplateArn property is now required.
Features
Bug Fixes

Alpha modules (2.258.0-alpha.0)

Features
  • integ-tests-alpha: add option to set the provider log level (#​38005) (c634a79)
Bug Fixes

v2.257.0

Compare Source

⚠ BREAKING CHANGES

  • ** L1 resources are automatically generated from public CloudFormation Resource Schemas. They are built to closely reflect the real state of CloudFormation. Sometimes these updates can contain changes that are incompatible with previous types, but more accurately reflect reality. In this release we have changed:

    • aws-neptunegraph: AWS::NeptuneGraph::GraphSnapshot: GraphIdentifier property is now required.
Features

Alpha modules (2.257.0-alpha.0)

v2.256.1

Compare Source

Bug Fixes

Alpha modules (2.256.1-alpha.0)

v2.256.0

Compare Source

Features
Bug Fixes

Alpha modules (2.256.0-alpha.0)

v2.255.0

Compare Source

Features
Bug Fixes

Alpha modules (2.255.0-alpha.0)

Features
  • bedrock-agentcore-alpha: Graduation of the library to stable. The Policy submodule is the only submodule that remains in alpha. All other constructs have graduated to stable in aws-cdk-lib/aws-bedrockagentcore and we recommend migrating to the stable versions (#​37876) (00cf601)

v2.254.0

Compare Source

⚠ BREAKING CHANGES
  • ** L1 resources are automatically generated from public CloudFormation Resource Schemas. They are built to closely reflect the real state of CloudFormation. Sometimes these updates can contain changes that are incompatible with previous types, but more accurately reflect reality. In this release we have changed:

aws-elasticache: AWS::ElastiCache::CacheCluster: Id attribute removed.
aws-sagemaker: AWS::SageMaker::Model: Id attribute removed.
aws-vpclattice: AWS::VpcLattice::AuthPolicy: State attribute enum values changed from ACTIVE|INACTIVE to Active|Inactive.

Features
Bug Fixes

Alpha modules (2.254.0-alpha.0)

Features
  • bedrock-agentcore-alpha: add tags support to Evaluator and OnlineEvaluationConfig (#​37804) (adbf88f)
  • bedrock-agentcore-alpha: add identity L2 constructs (#​37610) (67c3af2)
  • mediapackagev2-alpha: add OAC integration between CloudFront and MediaPackageV2 (#​37701) (654f59c)
Bug Fixes

v2.253.1

Compare Source

Bug Fixes

Alpha modules (2.253.1-alpha.0)

v2.253.0

Compare Source

Features
Bug Fixes

Alpha modules (2.253.0-alpha.0)

Features
Bug Fixes
  • bedrock-agentcore-alpha: self-managed memory strategy validation throws on unresolved tokens (#​37691) (7956537), closes #​37197

v2.252.0

Compare Source

Features
Bug Fixes

Alpha modules (2.252.0-alpha.0)

v2.251.0

Compare Source

⚠ BREAKING CHANGES
  • ** L1 resources are automatically generated from public CloudFormation Resource Schemas. They are built to closely reflect the real state of CloudFormation. Sometimes these updates can contain changes that are incompatible with previous types, but more accurately reflect reality. In this release we have changed:

aws-elasticloadbalancing: AWS::ElasticLoadBalancing::LoadBalancer: SourceSecurityGroup attribute removed.
aws-elasticloadbalancing: AWS::ElasticLoadBalancing::LoadBalancer: PolicyItem type removed.
aws-elasticloadbalancing: AWS::ElasticLoadBalancing::LoadBalancer: SourceSecurityGroup type removed.

Features
Bug Fixes

Alpha modules (2.251.0-alpha.0)

Features

v2.250.0

Compare Source

⚠ BREAKING CHANGES
  • ** L1 resources are automatically generated from public CloudFormation Resource Schemas. They are built to closely reflect the real state of CloudFormation. Sometimes these updates can contain changes that are incompatible with previous types, but more accurately reflect reality. In this release we have changed:

aws-emr: AWS::EMR::Cluster: MonitoringConfiguration property removed.
aws-emr: AWS::EMR::Cluster: CloudWatchLogConfiguration type removed.
aws-emr: AWS::EMR::Cluster: EMRConfiguration type removed.
aws-emr: AWS::EMR::Cluster: MonitoringConfiguration type removed.

Features
  • s3files: s3Files Lambda L1 integration (#​37547) (af41262)
  • update L1 CloudFormation resource definitions (#​37582) (c99ce64)
  • mediapackagev2: add region attribute on mediapackagev2 resources and extra naming validation (#​37526) (112ed67)
Bug Fixes
  • eks-v2: respect securityGroup(s) in KubectlProviderOptions (#​37247) (4c530fa), closes #​36653
  • lambda-nodejs: if entry path is not under project root, bundling in Docker fails in an unclear way (#​37572) (73662df)

Alpha modules (2.250.0-alpha.0)

v2.249.0

Compare Source

⚠ BREAKING CHANGES
  • L1 resources are automatically generated from
    public CloudFormation Resource Schemas. They are built to closely
    reflect the real state of CloudFormation. Sometimes these updates can
    contain changes that are incompatible with previous types, but more
    accurately reflect reality. In this release we have changed:

aws-appstream: AWS::AppStream::Stack: Id attribute removed.
aws-appsync: AWS::AppSync::GraphQLApi: LogConfig.CloudWatchLogsRoleArn
property is now required.
aws-appsync: AWS::AppSync::GraphQLApi: LogConfig.FieldLogLevel property
is now required.
aws-kafkaconnect: AWS::KafkaConnect::Connector:
ProvisionedCapacity.McuCount property is now required.

Features
Bug Fixes

Alpha modules (2.249.0-alpha.0)

v2.248.0

Compare Source

Bug Fixes

Alpha modules (2.248.0-alpha.0)

v2.247.0

Compare Source

⚠ BREAKING CHANGES
  • ** L1 resources are automatically generated from public CloudFormation Resource Schemas. They are built to closely reflect the real state of CloudFormation. Sometimes these updates can contain changes that are incompatible with previous types, but more accurately reflect reality. In this release we have changed:

aws-bedrockagentcore: AWS::BedrockAgentCore::OnlineEvaluationConfig: ExecutionStatus attribute removed.
aws-appstream: AWS::AppStream::ImageBuilder: Name property is now immutable.
aws-eks: AWS::EKS::Capability: EKS_CAPABILITY_ACK_S3_LOGS vended log type removed.

Features
Bug Fixes

Alpha modules (2.247.0-alpha.0)

Features

v2.246.0

Compare Source

Features
Bug Fixes
Reverts

Alpha modules (2.246.0-alpha.0)

v2.245.0

Compare Source

Features
Bug Fixes

Alpha modules (2.245.0-alpha.0)

Features
  • s3tables-alpha: add support for partition spec, sort order, and table properties (#​36811) (2696cd1)
  • s3tables-alpha: add metrics configuration support for TableBucket (#​37275) (e8786f5)
  • s3tables-alpha: implement ITaggableV2 on TableBucket and Table L2 constructs (#​37277) (69c8944), closes #​33054

v2.244.0

Compare Source

Features
Bug Fixes

Alpha modules (2.244.0-alpha.0)

Bug Fixes
  • kinesisanalytics-flink-alpha: mark deprecated flink runtimes as deprecated (#​37155) (0a89447)

v2.243.0

Compare Source

Features
Bug Fixes
  • dynamodb: resource policies don't have the index ARNs when indexes are added after granting permissions (#​37213) (eb37071)

Alpha modules (2.243.0-alpha.0)

v2.242.0

Compare Source

⚠ BREAKING CHANGES

  • ** L1 resources are automatically generated from public CloudFormation Resource Schemas. They are built to closely reflect the real state of CloudFormation. Sometimes these updates can contain changes that are incompatible with previous types, but more accurately reflect reality. In this release we have changed:

    • aws-ssm: AWS::SSM::MaintenanceWindow: Id attribute removed.
Features
Bug Fixes

Alpha modules (2.242.0-alpha.0)

Features
  • mixins-preview: allow passing resource objects into properties in CFN Property mixins (#​37148) (f238629)
  • mixins-preview: generate EventBridge pattern for all events (#​37081) (f30e836)
  • mixins-preview: support custom merge strategies via IMergeStrategy (#​37170) (0dec011)

v2.241.0

Compare Source

⚠ BREAKING CHANGES
  • ** L1 resources are automatically generated from public CloudFormation Resource Schemas. They are built to closely reflect the real state of CloudFormation. Sometimes these updates can contain changes that are incompatible with previous types, but more accurately reflect reality. In this release we have changed:

aws-codedeploy: AWS::CodeDeploy::DeploymentGroup: Id attribute removed.

Features
Bug Fixes

Alpha modules (2.241.0-alpha.0)

Features
  • mixins-preview: add recordFields and outputFormat to Vended Logs Mixin (#​37042) (dd94c31)
  • mixins-preview: cross account delivery destinations (#​36827) (a759eb6)

v2.240.0

Compare Source

Features
Bug Fixes
  • bump minimatch to ^10.2.1 to resolve ReDoS vulnerability (GHSA-3ppc-4f35-3m26) (#​37027) (e48ea41)

Alpha modules (2.240.0-alpha.0)

v2.239.0

Compare Source

⚠ BREAKING CHANGES
  • ** L1 resources are automatically generated from public CloudFormation Resource Schemas. They are built to closely reflect the real state of CloudFormation. Sometimes these updates can contain changes that are incompatible with previous types, but more accurately reflect reality. In this release we have changed:

aws-licensemanager: AWS::LicenseManager::License: Beneficiary property is now required
aws-licensemanager: AWS::LicenseManager::License: ProductSKU property is now required
aws-sagemaker: AWS::SageMaker::Cluster: Orchestrator.Eks property is now immutable

Features
Bug Fixes
  • aws-cdk-lib: update cloud-assembly-schema to resolve peer dependency conflict (#​36953) (f194236), closes #​36939
  • aws-cdk-lib: upgrade version of ajv that triggers CVE scanners (#​37022) (45662ba)
  • ec2: add VPC endpoint naming conventions for some isolated regions (#​36794) (5a7fca5)
  • rds: mark deprecated versions and add new engine versions (#​36937) (6e061d0)

Alpha modules (2.239.0-alpha.0)

⚠ BREAKING CHANGES

redshift-alpha: update default node type from DC2_LARGE to RA3_LARGE

Features
  • bedrock-agentcore-alpha: add fromCodeAsset method to create runtime artifact with local code assets (#​36472) (c5a87e6), closes #​36473
  • bedrock-agentcore-alpha: added new target type (api gateway) in agentcore gateway target. (#​36841) (0842754), closes #​36817
  • mixins-preview: add ECS ClusterSettingsMixin (#​36796) (b8ab5be)
  • mixins-preview: add s3 bucket mixin for publicAccessBlock (#​36905) (feed4b2)
  • mixins-preview: send Vended Logs to pre-created DeliveryDestination using toDestination() (#​36896) (48f1fe6)
Bug Fixes

v2.238.0

Compare Source

⚠ BREAKING CHANGES
  • bedrock-agentcore: Interface extensions require new property implementations
  • aws-bedrock-agentcore-alpha:
    • IGateway now requires gatewayRef getter
    • IGatewayTarget now requires gatewayTargetRef getter
    • IMemory now requires memoryRef getter
    • IBedrockAgentRuntime now requires runtimeRef getter
    • IRuntimeEndpoint now requires runtimeEndpointRef getter
    • IBrowserCustom now requires browserCustomRef getter
    • ICodeInterpreterCustom now requires codeInterpreterCustomRef getter
Features
Bug Fixes
Miscellaneous Chores

Alpha modules (2.238.0-alpha.0)

Features
Bug Fixes

v2.237.1

Compare Source

Bug Fixes
  • core: intrinsic cfn function tokens are not detected as such in java (#​36843) (89cd54f)

Alpha modules (2.237.1-alpha.0)

v2.237.0

Compare Source

⚠ BREAKING CHANGES
  • iam: Receivers of IEncryptedResource objects now have fewer guarantees about the shape of the object. If you still require an IResource, change the type to IEncryptedResource & IResource and/or add a type guard check using Resource.isResource(). Implementations of IEncryptedResource no longer need to implement IResource but must continue to implement IEnvironmentAware. Since IResource extends IEnvironmentAware, there is no change for implementors. Calls to GrantableResources.isEncryptedResource() now require an IEnvironmentAware argument instead of IConstruct.
Features
  • eks: add OidcProviderNative using L1 and deprecate OpenIdConnectProvider custom resource (#​36589) (09383cb)
  • eks: add support overwriteServiceAccount prop in service account construct (#​36751) (3aa38f6)
  • kms: make trustAccountIdentities optional in KeyGrants (#​36786) (06676ac)
  • lambda: add observability support for kafka event source mappings (#​36808) (dd8b419)
  • update L1 CloudFormation resource definitions (#​36799) (7ecd0a9)
  • opensearchservice: support OI2 instance type with local NVMe storage (#​36700) (034baf3), closes #​36698
Bug Fixes
  • iam: IEncryptedResource extends IEnvironmentAware instead of IResource (#​36787) (90ad834)

Alpha modules (2.237.0-alpha.0)

Features
Bug Fixes

v2.236.0

Compare Source

Features
Bug Fixes

Alpha modules (2.236.0-alpha.0)

Features
Bug Fixes

v2.235.1

Compare Source

Bug Fixes
  • apigatewayv2: use custom domain name instead of regional domain name when importing domain name via fromDomainNameAttributes (#​36710) (29e5642)

Alpha modules (2.235.1-alpha.0)

v2.235.0

Compare Source

⚠ BREAKING CHANGES
  • ** L1 resources are automatically generated from public CloudFormation Resource Schemas. They are built to closely reflect the real state of CloudFormation. Sometimes these updates can contain changes that are incompatible with previous types, but more accurately reflect reality. In this release we have changed:
  • aws-ecs: AWS::ECS::CapacityProvider: ManagedInstancesNetworkConfiguration.SecurityGroups property is now required.
  • ecs: securityGroups is now required in ManagedInstancesCapacityProviderProps. CloudFormation has always required this field, so any code that omitted it would have failed at deployment time with a validation error. This change catches the error at compile time instead, improving the developer experience. If your code previously omitted securityGroups, you must now explicitly provide at least one security group.
  • aws-cdk-lib: JobQueue.computeEnvironments contains an computeEnvironment: IComputeEnvironment → IComputeEnvironmentRef. BackupPlanRule.props contains a backupVault: IBackupVault → IBackupVaultRef. ApiDestination.fromApiDestinationAttributes() return type ApiDestination → IApiDestination. This should never have returned a class but always an interface, as is the standard for referencing factories. EventDestination.bus changed IEventBus →IEventBusRef; FlowLogDestination.bind() now returns and ICluster.executeCommandConfiguration contains a member changing type ILogGroup → ILogGroupRef.
  • events: ApiDestination.fromApiDestinationAttributes() now returns an IApiDestination. It used to return an ApiDestination but this was a mistake, referencing methods always return a type by interface, not by class.EventDestination.bus used to be an IEventBus but is now an IEventBusRef; it needs to be type tested to assert it is actually an IEventBus if that is necessary.
  • logs: the return types of FlowLogDestination.bind() and ICluster.executeCommandConfiguration now contain an ILogGroupRef instead of an ILogGroup, which guarantees less. These fields are for communication between constructs, and their values should not be used by application builders. If they do, they will need to add a cast or a type check.
  • iot-actions: enableBatchConfig property is explicitly disabled by default. Even with this modification, the behavior of HttpAction remains unchanged from before, but only the Cfn template will be modified.
Features
Bug Fixes
Miscellaneous Chores

Alpha modules (2.235.0-alpha.0)

⚠ BREAKING CHANGES
  • bedrock-agentcore-alpha: The User Pool Client will be replaced and new Resource Server and Domain resources will be added for existing Gateway stacks using the default Cognito authorizer.
Checklist
Bug Fixes
  • bedrock-agentcore-alpha: default Cognito User Pool for AgentCore Gateway is not set up for M2M authentication. (#​36323) (5a5605a)

v2.234.1

Compare Source

Bug Fixes
  • RuntimeError: apiEndpoint is not configured on the imported HttpApi (revert of "chore(apigatewayv2): reference interfaces") (#​36623) (1c10d49), closes aws/aws-cdk#36378

Alpha modules (2.234.1-alpha.0)

v2.234.0

Compare Source

⚠ BREAKING CHANGES
  • batch: unfortunately JobQueue exposes public readonly computeEnvironments: OrderedComputeEnvironment[]. The computeEnvironment member of that structure now fewer guarantees, and needs casting. This should not have been exposed, and we assume the use of the exposed property here is rare.
  • backup: unfortunately BackupPlanRule exposes public readonly props: BackupPlanRuleProps. The backupVault member of that structure now guarantees less, and needs casting. This should never have been exposed, and we assume the use of the exposed property here is rare.
  • ** L1 resources are automatically generated from public CloudFormation Resource Schemas. They are built to closely reflect the real state of CloudFormation. Sometimes these updates can contain changes that are incompatible with previous types, but more accurately reflect reality. In this release we have changed:

aws-securityhub: AWS::SecurityHub::ConnectorV2: Provider.JiraCloud.AuthStatus attribute removed.
aws-securityhub: AWS::SecurityHub::ConnectorV2: Provider.JiraCloud.AuthUrl attribute removed.
aws-securityhub: AWS::SecurityHub::ConnectorV2: Provider.JiraCloud.CloudId attribute removed.
aws-securityhub: AWS::SecurityHub::ConnectorV2: Provider.JiraCloud.Domain attribute removed.
aws-securityhub: AWS::SecurityHub::ConnectorV2: Provider.ServiceNow.AuthStatus attribute removed.
aws-securityhub: AWS::SecurityHub::ConnectorV2: JiraCloud type removed, replaced by JiraCloudProviderConfiguration.
aws-securityhub: AWS::SecurityHub::ConnectorV2: ServiceNow type removed, replaced by ServiceNowProviderConfiguration.
aws-ssm: AWS::SSM::MaintenanceWindowTarget: Id attribute removed.

Features
Bug Fixes
  • cloudwatch: skip MathExpression validation when prop is a token (#​36487) (2845d47)
  • core: App.of() returns incorrect values (#​36475) (78034d3)
  • core: arnForXxxx() helpers ignore environments from referenced resources (#​36599) (4744c59)
  • core: account for { Ref } incompatibility between schema and CFN (#​36493) (3b06942)
  • ec2: add proper handling for VPC endpoint service name prefix eu.amazonaws for new region eusc-de-east-1 for ECR & API Gateway services (#​36471) (d5561e0)
  • lambda: add token resolution validation to capacity providers (#​36275) (c5fbd97)
Miscellaneous Chores

Alpha modules (2.234.0-alpha.0)

Features
Bug Fixes
  • elasticache-alpha: deployment fails when serverlessCacheName or userGroupId is not specified (#​36459) (b3f62f7), closes #​36458
  • elasticache-alpha: security group for ServerlessCache does not use default endpoint port (#​35738) (79d91ad)

v2.233.0

Compare Source

⚠ BREAKING CHANGES

CHANGES TO L1 RESOURCES: L1 resources are automatically generated from public CloudFormation Resource Schemas. They are built to closely reflect the real state of CloudFormation. Sometimes these updates can contain changes that are incompatible with previous types, but more accurately reflect reality. In this release we have changed:

aws-ec2: AWS::EC2::EC2Fleet: DefaultTargetCapacityType property is now immutable.
aws-ec2: AWS::EC2::EC2Fleet: TargetCapacityUnitType property is now immutable.

Features
Bug Fixes

Alpha modules (2.233.0-alpha.0)

⚠ BREAKING CHANGES
  • bedrock-agentcore-alpha: Runtime constructs will no longer automatically include lifecycleConfiguration with default values when not explicitly specified by users.
  • elasticache-alpha: The engine property in NoPasswordUserProps has been removed.
Bug Fixes
  • bedrock-agentcore-alpha: runtime construct incorrectly forces default lifecycleConfiguration values (#​36379) (7954354), closes #​36376
  • elasticache-alpha: the default engine for NoPasswordUser contradict in the docs (#​35920) (495fa37), closes #​35847
  • mixins-preview: improving delivery source and delivery destination creation (#​36314) (86092ab)

v2.232.2

Compare Source

Bug Fixes

Alpha modules (2.232.2-alpha.0)

v2.232.1

Compare Source

Bug Fixes

Alpha modules (2.232.1-alpha.0)

v2.232.0

Compare Source

Features
Bug Fixes

Alpha modules (2.232.0-alpha.0)

Bug Fixes

v2.231.0

Compare Source

Features
Bug Fixes

Alpha modules (2.231.0-alpha.0)

Features

v2.230.0

Compare Source

Features
Bug Fixes

Alpha modules (2.230.0-alpha.0)

Features
Bug Fixes

v2.229.1

Compare Source

Bug Fixes
  • scheduler: wrong ARN generated in ScheduleGroup.grant* methods (#​36175) (ca9fbdd)

Alpha modules (2.229.1-alpha.0)

v2.229.0

Compare Source

Features
Bug Fixes

Alpha modules (2.229.0-alpha.0)

Features
Bug Fixes
  • bedrock-agentcore-alpha: empty submodule accidentally exposed and runtime validation fix (#​36148) (72d3e6f)

v2.228.0

Compare Source

Features
  • lambda: add new lambda/kafka esm properties and on failure desitination (65f9c35)
Bug Fixes

Alpha modules (2.228.0-alpha.0)

v2.227.0

Compare Source

CHANGES TO L1 RESOURCES: L1 resources are automatically generated from public CloudFormation Resource Schemas. They are built to closely reflect the real state of CloudFormation. Sometimes these updates can contain changes that are incompatible with previous types, but more accurately reflect reality. In this release we have changed:

  • aws-backup: AWS::Backup::LogicallyAirGappedBackupVault: EncryptionKeyArn attribute removed.
Features

Alpha modules (2.227.0-alpha.0)

Features
Bug Fixes
  • bedrock-agentcore-alpha: fix unexpected validation error when properties are Token (#​35978) (084b736)

v2.226.0

Compare Source

Features
  • dynamodb: compound keys for global secondary indexes (046b06d)
  • lambda: add multi-tenancy support with TenancyConfig (5f384db)

Alpha modules (2.226.0-alpha.0)

v2.225.0

Compare Source

⚠ BREAKING CHANGES

  • ** L1 resources are automatically generated from public CloudFormation Resource Schemas. They are built to closely reflect the real state of CloudFormation. Sometimes these updates can contain changes that are incompatible with previous types, but more accurately reflect reality. In this release we have changed:

    • aws-dynamodb: AWS::DynamoDB::GlobalTable: ResourcePolicy property is now required.
Features
Bug Fixes
Reverts

Alpha modules (2.225.0-alpha.0)

v2.224.0

Compare Source

⚠ BREAKING CHANGES
  • aws-cdk-lib: Reference interfaces (such as IBucketRef, IRoleRef, etc.) were moved to a new aws-cdk-lib.interfaces submodule to prevent cyclic dependencies between service modules. If you are importing reference interfaces, you have to update import statements accordingly. See #​36060 for full details.
  • Amazon.CDK.Lib (.NET): The .NET namespace for multiple submodules has changed. If you are using any of the renamed submodules, you have to update using statements for these submodules. See #​36037 for full details.
  • L1 resources are automatically generated from public CloudFormation Resource Schemas. They are built to closely reflect the real state of CloudFormation. Sometimes these updates can contain changes that are incompatible with previous types, but more accurately reflect reality. In this release we have changed:

aws-opensearchserverless: AWS::OpenSearchServerless::Collection: StandbyReplicas property is now immutable.
aws-servicecatalog: AWS::ServiceCatalog::PortfolioPrincipalAssociation: Id attribute removed.

Features
Bug Fixes

Alpha modules (2.224.0-alpha.0)

Features

v2.223.0

Compare Source

⚠ BREAKING CHANGES

L1 resources are automatically generated from public CloudFormation Resource Schemas. They are built to closely reflect the real state of CloudFormation. Sometimes these updates can contain changes that are incompatible with previous types, but more accurately reflect reality. In this release we have changed:

  • aws-dynamodb: AWS::DynamoDB::GlobalTable: GlobalTableSettingsReplicationMode property removed.
  • aws-dynamodb: AWS::DynamoDB::GlobalTable: GlobalTableSourceArn property removed.
  • aws-dynamodb: AWS::DynamoDB::Table: GlobalTableSettingsReplicationMode property removed.
  • aws-events: AWS::Events::EventBusPolicy: Id attribute removed.
Features
Bug Fixes

Alpha modules (2.223.0-alpha.0)

v2.222.0

Compare Source

⚠ BREAKING CHANGES
  • bedrock-agentcore: The signature of RuntimeAuthorizerConfiguration.usingCognito() has changed to accept IUserPool and IUserPoolClient constructs instead of string parameters, and now supports multiple clients.
Features
Bug Fixes

Alpha modules (2.222.0-alpha.0)

Features
Bug Fixes

v2.221.1

Compare Source

Bug Fixes

Alpha modules (2.221.1-alpha.0)

v2.221.0

Compare Source

⚠ BREAKING CHANGES
  • ** L1 resources are automatically generated from public CloudFormation Resource Schemas. They are built to closely reflect the real state of CloudFormation. Sometimes these updates can contain changes that are incompatible with previous types, but more accurately reflect reality. In this release we have changed:
  • aws-datazone: AWS::DataZone::ProjectProfile: Id property removed.
  • aws-logs: AWS::Logs::DeliveryDestination: DeliveryDestinationType attribute removed.
  • aws-s3: AWS::S3::AccessGrantsLocation: IamRoleArn property is now required.
  • aws-s3: AWS::S3::AccessGrantsLocation: LocationScope property is now required.
  • aws-servicecatalog: AWS::ServiceCatalog::TagOptionAssociation: Id attribute removed.
Features
Bug Fixes

Alpha modules (2.221.0-alpha.0)

Features
Bug Fixes
  • elasticache-alpha: cannot import Redis 7 serverless cache (#​35629) (2bde1a0)

v2.220.0

Compare Source

⚠ BREAKING CHANGES

L1 resources are automatically generated from public CloudFormation Resource Schemas. They are built to closely reflect the real state of CloudFormation. Sometimes these updates can contain changes that are incompatible with previous types, but more accurately reflect reality. In this release we have changed:

  • aws-neptune: AWS::Neptune::EventSubscription: SnsTopicArn property is now required.
  • aws-neptune: AWS::Neptune::EventSubscription: Id attribute removed.
  • aws-servicecatalog: AWS::ServiceCatalog::PortfolioShare: Id attribute removed.
  • aws-lex: AWS::Lex::ResourcePolicy: ResourceArn property is now immutable.

Co-authored-by: aws-cdk-automation aws-cdk-automation@users.noreply.github.com

Features
Bug Fixes

Alpha modules (2.220.0-alpha.0)

Bug Fixes

v2.219.0

Compare Source

⚠ BREAKING CHANGES
  • ** L1 resources are automatically generated from public CloudFormation Resource Schemas. They are built to closely reflect the real state of CloudFormation. Sometimes these updates can contain changes that are incompatible with previous types, but more accurately reflect reality. In this release we have changed:

aws-servicecatalog: AWS::ServiceCatalog::PortfolioPrincipalAssociation: PortfolioId property is now required.
aws-servicecatalog: AWS::ServiceCatalog::PortfolioPrincipalAssociation: PrincipalARN property is now required.
aws-servicecatalog: AWS::ServiceCatalog::PortfolioProductAssociation: Id attribute removed.

Co-authored-by: aws-cdk-automation aws-cdk-automation@users.noreply.github.com

Features
Bug Fixes
  • cloudfront: edgefunction does not propagate stack tags correctly (#​35518) (63088e8)

Alpha modules (2.219.0-alpha.0)

v2.218.0

Compare Source

Features

Alpha modules (2.218.0-alpha.0)

  • elasticache-alpha: implement Serverless ElastiCache L2 Construct (#​35424) (0e08c8c)

v2.217.0

Compare Source

Features
Bug Fixes
Reverts

Alpha modules (2.217.0-alpha.0)

v2.216.0

Compare Source

Features
Bug Fixes
  • cloudformation-include: aws::novalue type validation error for non-string properties (#​35425) (ce76a56), closes #​18420
  • kinesisanalytics: deprecate using KinesisAnalyticsV2 from aws-kinesisanalytics, use aws-kinesisanalyticsv2 instead (#​35519) (4255b23)
  • kms: cannot access aliasTargetKey on an Alias imported by Alias.fromAliasName (#​35521) (c0c9933), closes #​35520
  • secretsmanager: SecretRotationApplication creates lambda on python 3.9 which is EOL (#​35528) (756b683), closes #​34168
  • secretsmanager: secret transformation (#​35202) (f4b26af), closes #​34168

Alpha modules (2.216.0-alpha.0)

v2.215.0

Compare Source

Features
Bug Fixes

Alpha modules (2.215.0-alpha.0)

Bug Fixes
  • bedrock-alpha: added missing validation when prompt uses default variant (#​35366) (cbd271e)

v2.214.1

Compare Source

Features
  • introduce reference interfaces, but don't require them yet (09fc592)

Alpha modules (2.214.1-alpha.0)

v2.214.0

Compare Source

CHANGES TO L1 RESOURCES

  • L1 resources are automatically generated from public CloudFormation Resource Schemas. They are build to closely reflect the real state of CloudFormation. Sometimes these updates can contain changes that are incompatible with previous types, but more accurately reflect reality. In this release we have changed:

    • aws-ecs: AWS::ECS::Service: AvailabilityZoneRebalancing property default value changed from "ENABLED" to "DISABLED".
Features
Bug Fixes

Alpha modules (2.214.0-alpha.0)

Features

v2.213.0

Compare Source

Features

Alpha modules (2.213.0-alpha.0)

Features

v2.212.0

Compare Source

CHANGES TO L1 RESOURCES
  • L1 resources are automatically generated from public CloudFormation Resource Schemas. They are build to closely reflect the real state of CloudFormation. Sometimes these updates can contain changes that are incompatible with previous types, but more accurately reflect reality. In this release we have changed:
  • aws-rds: AWS::RDS::DBInstance:StatusInfos property is removed.
  • aws-sagemaker: AWS::SageMaker::Domain: SingleSignOnApplicationArn property is removed.
  • aws-cloudfront: AWS::CloudFront::Function: Name property is now set as immutable.
Features
Bug Fixes
Reverts
  • docs: revert ECS and Fargate service documentation for new AZ rebalancing default values (#​35233) (7c0084a), closes #​35156

Alpha modules (2.212.0-alpha.0)

v2.211.0

Compare Source

⚠ BREAKING CHANGES

cloudformation: L1 resources are automatically generated from
public CloudFormation Resource Schemas. They are build to closely
reflect the real state of CloudFormation. Sometimes these updates can
contain changes that are incompatible with previous types, but more
accurately reflect reality. In this release we have changed:

  • aws-opsworkscm: CfnServer resource is no longer provisionable
    (AWS::OpsWorksCM::Server). Service is on deprecation path
  • aws-iotfleetwise: Properties DataDestinationConfigs,
    SignalsToCollect and SignalsToFetch in resource CfnCampaign are
    now marked as immutable (they will cause a replacement of the resource
    if updated)
Features
Bug Fixes

Alpha modules (2.211.0-alpha.0)

v2.210.0

Compare Source

Reverts

Alpha modules (2.210.0-alpha.0)

Features

v2.209.1

Compare Source

Bug Fixes

Alpha modules (2.209.1-alpha.0)

Bug Fixes
  • eks-v2-alpha: fix helm commands not running ecr public login (#​35162) (6c2a8b8)

v2.209.0

Compare Source

Features
Bug Fixes

Alpha modules (2.209.0-alpha.0)

v2.208.0

Compare Source

Features
  • update L1 CloudFormation resource definitions (#​35054) (a2b3e78)
  • region-info: add support for region ap-southeast-6 (#​35036)
Bug Fixes

Alpha modules (2.208.0-alpha.0)

Features

v2.207.0

Compare Source

Features
Bug Fixes

Alpha modules (2.207.0-alpha.0)

v2.206.0

Compare Source

Features
  • custom-resource: Added async custom resource provider framework logging off by default (1302e3d)
  • ecs: add L1 native blue/green deployment support for ECS services (3ef87e4)

Alpha modules (2.206.0-alpha.0)

v2.205.0

Compare Source

Features
Bug Fixes
⚠ CHANGES TO L1 RESOURCES

L1 resources are automatically generated from public CloudFormation Resource Schemas. They are build to closely reflect the real state of CloudFormation. Sometimes these updates can contain changes that are incompatible with previous types, but more accurately reflect reality. In this release we have changed:

  • aws-cdk-lib.aws_ec2.CfnTrafficMirrorFilterRule: Id attribute was removed
  • aws-cdk-lib.aws_kinesis.StreamConsumer: Id attribute was removed
  • aws-cdk-lib.aws_neptune.DBInstance: Id attribute was removed

Alpha modules (2.205.0-alpha.0)

v2.204.0

Compare Source

Features
Bug Fixes

Alpha modules (2.204.0-alpha.0)

Features

v2.203.1

Compare Source

Bug Fixes

Alpha modules (2.203.1-alpha.0)

v2.203.0

Compare Source

⚠ BREAKING CHANGES TO EXPERIMENTAL FEATURES
  • cloudformation: Some L1 resources experienced breaking changes due to updated CloudFormation resources. Please check the notes for each specific module for more information.
  • aws-cdk-lib.aws_kendra.CfnDataSource.TemplateConfigurationProperty: template property here has changed from string to json
Features
Bug Fixes
Reverts

Alpha modules (2.203.0-alpha.0)

Features
  • ec2: support for client route enforcement for client VPN endpoint (#​34405) (063f4e7)
Bug Fixes

v2.202.0

Compare Source

Features
Bug Fixes

Alpha modules (2.202.0-alpha.0)

Features

v2.201.0

Compare Source

Features
Bug Fixes

Alpha modules (2.201.0-alpha.0)

Features
Reverts

v2.200.2

Compare Source

Bug Fixes

Alpha modules (2.200.2-alpha.0)

v2.200.1

Compare Source

Bug Fixes

Alpha modules (2.200.1-alpha.0)

v2.200.0

Compare Source

Features
Bug Fixes

Alpha modules (2.200.0-alpha.0)

Features

v2.199.0

Compare Source

⚠ BREAKING CHANGES TO EXPERIMENTAL FEATURES
  • cloudformation: Some L1 resources experienced breaking changes due to updated CloudFormation resources. Please check the notes for each specific module for more information.
  • vpc-lattice: the name and resourceConfigurationType property in CfnResourceConfigurationProps has changed from optional to required. Also, the name, subnetIds and vpcIdentifier properties in CfnResourceGatewayProps have changed from optional to mandatory.
Features
Bug Fixes
  • elasticloadbalancingv2: add validation on application listeners for certificates on HTTP protocol (#​34233) (ca065bb)
  • rds: fix incorrect import/export combination check in AuroraMysqlEngineVersion.of() (#​33564) (9e41154), closes #​33562 #​33562

Alpha modules (2.199.0-alpha.0)

v2.198.0

Compare Source

Features
Bug Fixes

Alpha modules (2.198.0-alpha.0)

⚠ BREAKING CHANGES TO EXPERIMENTAL FEATURES
  • amplify: A compute role is created when platform is Platform.WEB_COMPUTE or Platform.WEB_DYNAMIC.
Features

v2.197.0

Compare Source

Features
Bug Fixes

Alpha modules (2.197.0-alpha.0)

v2.196.1

Compare Source

Bug Fixes
  • lambda-nodejs: instantiating NodejsFunction without the entry property fails (#​34498) (27e0f3a)

Alpha modules (2.196.1-alpha.0)

v2.196.0

Compare Source

⚠ BREAKING CHANGES TO EXPERIMENTAL FEATURES
  • cloudformation: Some L1 resources experienced breaking changes due to updated CloudFormation resources. Please check the notes for each specific module for more information.
  • Logs: The type of property DeliveryDestinationPolicy of resource AWS::Logs::DeliveryDestination changed to be DestinationPolicy instead of JSON.
Features
Bug Fixes

Alpha modules (2.196.0-alpha.0)

Features
Bug Fixes
  • ec2: dual-stack vpc without private subnets creates EgressOnlyInternetGateway (under feature flag) (#​34437) (35e818b), closes #​30981
  • ec2-alpha: fix resource id references and tags for migration behind feature flag (#​34377) (aa73534)

v2.195.0

Compare Source

Features
Bug Fixes
  • codepipeline: allow both pullRequestFilter and pushFilter (#​34267) (1cac5a0), closes #​34253
  • route53-targets: beanstalk allow specifying hostedZoneId to support token endpoint with default value derived from stack region or endpointUrl (#​34122) (9e52752), closes #​31843
  • s3-notifications: add a key policy to trust S3 for notifications to an SNS topic encrypted with a KMS key (under feature flag) (#​33858) (1e87861), closes #​16271
Reverts

Alpha modules (2.195.0-alpha.0)

⚠ BREAKING CHANGES TO EXPERIMENTAL FEATURES
  • iot: By default, deviceDertificateAgeCheck is automatically enabled.
Features
Bug Fixes

v2.194.0

Compare Source

Features

Alpha modules (2.194.0-alpha.0)

v2.193.0

Compare Source

Features
Bug Fixes

Alpha modules (2.193.0-alpha.0)

Features
  • pipes-targets-alpha: support Amazon Data Firehose target (#​33860) (ebf1ea2)

v2.192.0

Compare Source

Features
Bug Fixes

Alpha modules (2.192.0-alpha.0)

Features
  • applicationsignals-alpha: introduce Application Signals L2 constructs (#​32931) (e7a6e14)

v2.191.0

Compare Source

⚠ BREAKING CHANGES TO EXPERIMENTAL FEATURES
  • neptune-alpha: Id attribute is being removed from the
    AWS::Neptune::DBClusterParameterGroup and AWS::Neptune::DBParameterGroup
    resources
⚠ BREAKING CHANGES TO L1 constructs
  • cloudformation: Some L1 resources experienced breaking changes due to
    updated CloudFormation resources. Please check the notes for each
    specific module for more information.
  • aws-launchwizard: specifications prop moved from required to
    optional in CfnDeployment
  • aws-ses: attribute attribute moved from required to optional in
    RuleBooleanToEvaluateProperty
Features
  • cloudformation: update L1 CloudFormation resource definitions (#​34207) (adfa416)
  • update L1 CloudFormation resource definitions (e3483c2)
  • codebuild: add additional build images for lambda (#​34197) (5a265d1)
  • rds: add Aurora MySQL versions 2.12.4, 3.08.2 (#​34045) (1dd993e)

Alpha modules (2.191.0-alpha.0)

Features

v2.190.0

Compare Source

⚠ BREAKING CHANGES TO EXPERIMENTAL FEATURES
  • cloudformation: Some L1 resources experienced breaking changes due to updated CloudFormation resources. Please check the notes for each specific module for more information.
  • backup: The ScheduleStatus property has been removed from AWS::Backup::RestoreTestingPlan.
  • eks: The DisableSessionTags and TargetRoleArn properties and ExternalId attribute have been removed from AWS::EKS::PodIdentityAssociation.
  • neptune: The Id attribute has been removed from AWS::Neptune::DBSubnetGroup.
  • rds: The CertificateDetails and Endpoint properties have been removed from AWS::RDS::DBInstance.
  • redshiftserverless: The Workgroup.BaseCapacity attribute has been removed from AWS::RedshiftServerless::Workgroup.
  • s3-deployment: The automatic JSON escaping behavior introduced in PR #​33698 is now opt-in via the new escape parameter in Source.jsonData(). Users who were relying on the automatic JSON escaping for handling special characters in JSON files will need to explicitly enable this behavior by passing { escape: true } as the third parameter.
Features
Bug Fixes
Reverts

Alpha modules (2.190.0-alpha.0)

⚠ BREAKING CHANGES TO EXPERIMENTAL FEATURES
  • ec2-alpha: The logical ID for the NAT Gateway, defined using the addNatGateways method, will be changed, resulting in the NAT Gateway being recreated. Additionally, the domain for the Elastic IP (EIP) will be set to vpc, which will also trigger its recreation in the account.
Features
Bug Fixes
  • ec2-alpha: add multiple NATGW to the VPC using addNatGateway method (#​34094) (ccd8de7)
  • ec2-alpha: update default config for Subnet's assignIpv6AddressOnCreation (#​34116) (dff2798)

v2.189.1

Compare Source

Bug Fixes
  • core: implicit Aspect applications do not override custom Aspect applications (#​34132) (b7f4bc7)

Alpha modules (2.189.1-alpha.0)

v2.189.0

Compare Source

Features
Bug Fixes
  • codepipeline: replace account root principal with pipeline role in trust policy for cross-account actions (under feature flag) (#​34074) (2d901f4)
  • custom-resources: AwsCustomResource assumed role session name may contain invalid characters (#​34016) (32b6b4d), closes #​23260 #​34011

Alpha modules (2.189.0-alpha.0)

Features
Bug Fixes

v2.188.0

Compare Source

Features
Bug Fixes

Alpha modules (2.188.0-alpha.0)

Features
Bug Fixes

v2.187.0

Compare Source

Features
Bug Fixes

Alpha modules (2.187.0-alpha.0)

Features

v2.186.0

Compare Source

⚠ BREAKING CHANGES TO EXPERIMENTAL FEATURES
  • redshiftserverless: The CfnWorkgroup.attrWorkgroupMaxCapacity attribute has been removed.
  • quicksight: The CfnAnalysis.SheetTextBoxProperty.interactions, CfnDashboard.SheetTextBoxProperty.interactions, and CfnTemplate.SheetTextBoxProperty.interactions properties have been removed.
  • imagebuilder: The CfnDistributionConfiguration.DistributionProperty.ssmParameterConfigurations property has been removed.
Features
Bug Fixes

Alpha modules (2.186.0-alpha.0)

Features
Bug Fixes

v2.185.0

Compare Source

Features
Bug Fixes

Alpha modules (2.185.0-alpha.0)

⚠ BREAKING CHANGES TO EXPERIMENTAL FEATURES
  • scheduler-targets-alpha: The class KinesisDataFirehosePutRecord has been renamed to FirehosePutRecord.
Bug Fixes

v2.184.1

Compare Source

Reverts

Alpha modules (2.184.1-alpha.0)

v2.184.0

Compare Source

Features
Bug Fixes

Alpha modules (2.184.0-alpha.0)

⚠ BREAKING CHANGES TO EXPERIMENTAL FEATURES
  • glue-alpha: Updated casing of workflow.addconditionalTrigger to workflow.addConditionalTrigger.
Bug Fixes

v2.183.0

Compare Source

Features
Bug Fixes

Alpha modules (2.183.0-alpha.0)

⚠ BREAKING CHANGES TO EXPERIMENTAL FEATURES
  • scheduler-targets-alpha: The InspectorStartAssessmentRun target's constructor now accepts IAssessmentTemplate instead of CfnAssessmentTemplate as its parameter type. To migrate existing code, use the AssessmentTemplate.fromCfnAssessmentTemplate() method to convert your CfnAssessmentTemplate instances to IAssessmentTemplate.
Features
  • kinesisanalytics-flink-alpha: backfill missing enums for kinesisanalytics-flink-alpha (#​33632) (b55199a)
  • kinesisfirehose-destinations-alpha: backfill missing enums for kinesisfirehose-destinations-alpha (#​33633) (6ed7a45)
Bug Fixes
  • scheduler-alpha: deprecate Group in favour of ScheduleGroup (#​33678) (4d8eae9)
  • scheduler-targets-alpha: update inspector target to use IAssessmentTemplate instead of CfnAssessmentTemplate (#​33682) (50ba3ef)

v2.182.0

Compare Source

Features
Bug Fixes

Alpha modules (2.182.0-alpha.0)

Features
Bug Fixes

v2.181.1

Compare Source

Alpha modules (2.181.1-alpha.0)

⚠ BREAKING CHANGES TO EXPERIMENTAL FEATURES
  • cognito-identitypool-alpha: Any IdentityPool resources deployed in versions >=2.179.0 will now fail to deploy. You will need to delete the IdentityPoolRoleAttachment from your stack via the console before redeploying.
Bug Fixes

v2.181.0

Compare Source

Features
Bug Fixes

Alpha modules (2.181.0-alpha.0)

Features

v2.180.0

Compare Source

Features
Bug Fixes

Alpha modules (2.180.0-alpha.0)

Features

v2.179.0

Compare Source

⚠ BREAKING CHANGES TO EXPERIMENTAL FEATURES
  • eks: kubectlLayer property is now required in EKS Cluster and FargateCluster constructs. The default value for kubectlLayer is outdated and hence being removed. You can specify your own kubectlLayer version based on your Kubernetes version.
Features
Bug Fixes

Alpha modules (2.179.0-alpha.0)

⚠ BREAKING CHANGES TO EXPERIMENTAL FEATURES
  • cognito-identitypool-alpha: The IdentityPoolRoleAttachment construct and IdentityPool.addRoleMappings() function will no longer exist. This is to disambiguate that only one role attachment can exist per Identity Pool. If you are using the IdentityPool construct, this change will trigger a redeployment. If you need to add role mappings, please do so when the IdentityPool is created.
Features
Bug Fixes

v2.178.2

Compare Source

Bug Fixes

Alpha modules (2.178.2-alpha.0)

v2.178.1

Compare Source

Bug Fixes
  • cli: sdk logging is always present even when not turned on (#​33324) (29a9a6d), closes #​33320
  • custom-resource: provider framework lambda missing GetFunction permission (#​33315)

Alpha modules (2.178.1-alpha.0)

v2.178.0

Compare Source

Features
Bug Fixes

Alpha modules (2.178.0-alpha.0)

⚠ BREAKING CHANGES TO EXPERIMENTAL FEATURES
  • ec2-alpha: operatingRegion property under IPAM class is now renamed to operatingRegions.
⚠ BREAKING CHANGES TO STABLE MODULES
  • ecs: The TaskDefinitionProps.inferenceAccelerators attribute and TaskDefinition.addInferenceAccelerator() method will be marked as deprecated.
Features
Bug Fixes

v2.177.0

Compare Source

Features
Bug Fixes

Alpha modules (2.177.0-alpha.0)

⚠ BREAKING CHANGES TO EXPERIMENTAL FEATURES
  • glue-alpha: Developers must refactor their existing Job
    instantiation method calls to choose the right job type and language,
    and use the new constants static values to define the associated Job
    configuration settings. See the RFC and/or new README for examples.
Description of how you validated changes

Increased unit test coverage to > 90%, consulted with Glue service team
on best practices and sane defaults, updated integration tests.

Features
Bug Fixes
  • custom-resource-handlers: do not allow unauthorized connection for iam OIDC connection (under feature flag) (#​32921) (3e4f377), closes #​32920
Code Refactoring
  • glue-alpha: Refactored glue-alpha L2 CDK construct RFC 0497 (#​32521) (1a18dc9)

v2.176.0

Compare Source

Features
Bug Fixes
Reverts

Alpha modules (2.176.0-alpha.0)

Features
Bug Fixes

v2.175.1

Compare Source

Bug Fixes

Alpha modules (2.175.1-alpha.0)

v2.175.0

Compare Source

Features
Bug Fixes

Alpha modules (2.175.0-alpha.0)

Features
Bug Fixes

v2.174.1

Compare Source

Features

Alpha modules (2.174.1-alpha.0)

v2.174.0

Compare Source

Features
Bug Fixes
Reverts

Alpha modules (2.174.0-alpha.0)

Features
Bug Fixes

v2.173.4

Compare Source

Bug Fixes

Alpha modules (2.173.4-alpha.0)

v2.173.3

Compare Source

Bug Fixes

Alpha modules (2.173.3-alpha.0)

v2.173.2

Compare Source

Bug Fixes
  • cli: allow credential plugins to return null for expiration (#​32554) (e59b1db)
  • cli: doesn't support plugins that return initially empty credentials (#​32552) (7ee9b90)

Alpha modules (2.173.2-alpha.0)

v2.173.1

Compare Source

Bug Fixes
  • cli: getting credentials via SSO fails when the region is set in the profile (#​32520) (01fec04)

Alpha modules (2.173.1-alpha.0)

v2.173.0

Compare Source

Features
Bug Fixes

Alpha modules (2.173.0-alpha.0)

Features

v2.172.0

Compare Source

⚠ BREAKING CHANGES TO EXPERIMENTAL FEATURES
  • apigateway: We will be removing deprecated APIGatewayV2 constructs from aws-apigateway module.
Features
Bug Fixes

Alpha modules (2.172.0-alpha.0)

Features
Bug Fixes
  • scheduler-targets-alpha: incorrect validation of maximumEventAge (#​32284) (2eebc59)

v2.171.1

Compare Source

Bug Fixes

Alpha modules (2.171.1-alpha.0)

v2.171.0

Compare Source

Features
Bug Fixes

Alpha modules (2.171.0-alpha.0)

v2.170.0

Compare Source

Features
Bug Fixes
Reverts

Alpha modules (2.170.0-alpha.0)

v2.169.0

Compare Source

Features
Bug Fixes

Alpha modules (2.169.0-alpha.0)

Features
Bug Fixes

v2.168.0

Compare Source

Features
Bug Fixes

Alpha modules (2.168.0-alpha.0)

Bug Fixes

v2.167.2

Compare Source

Bug Fixes
  • cli: cdk diff always falls back to template only diff (#​32165) (3fd9699)
  • cli: externally managed stack notification arns are deleted on deploy (#​32163) (465da31)
  • cli: the LoadBalancerProvider doesn't match LBs when querying by a subset of tags (#​32164) (a0b47c5)

Alpha modules (2.167.2-alpha.0)

v2.167.1

Compare Source

Bug Fixes

Alpha modules (2.167.1-alpha.0)

v2.167.0

Compare Source

Features
Bug Fixes

Alpha modules (2.167.0-alpha.0)

Features
Bug Fixes

v2.166.0

Compare Source

Features
Bug Fixes

Alpha modules (2.166.0-alpha.0)

⚠ BREAKING CHANGES TO EXPERIMENTAL FEATURES
  • scheduler-targets-alpha: Schedule Target will reuse role if target is re-used across schedules. This change triggered replacement of existing roles for Schedule as logical ID of the roles are changed.
Features
Bug Fixes
  • scheduler-targets-alpha: create a role per target instead of singleton schedule target role (#​31895) (aee1b30), closes #​31785

v2.165.0

Compare Source

Features
Bug Fixes

Alpha modules (2.165.0-alpha.0)

⚠ BREAKING CHANGES TO EXPERIMENTAL FEATURES
  • ec2-alpha: The new VpcCidrBlock L2 construct replaces CfnVPCCidrBlock. This change alters the logical ID of AWS::EC2::VPCCidrBlock resources in CloudFormation templates. Existing deployments will see errors like CIDR range conflicts with x.xx.xx.xx/xx with association ID vpc-cidr-assoc-ABCD. To resolve this, you must recreate your existing stacks to use the new module.
Features
Bug Fixes

v2.164.1

Compare Source

Bug Fixes

Alpha modules (2.164.1-alpha.0)

v2.164.0

Compare Source

Features
Bug Fixes
  • cli: cross-account asset publishing doesn't work without bootstrap stack (#​31876) (427bf63), closes #​31866
  • cli: deploy-role is not authorized to perform DescribeStackResources (#​31878) (8d06824)
  • core: fix policy synthesizer logic for precreated roles (#​31710) (aae03c9)
  • dynamodb: replication regions are incompatible with resource policies in TableV2 and feature flag (#​31513) (0b03eb0), closes #​30705
  • events-targets: kinesis Stream target with Customer-Managed KMS key causes EventBridge FailedInvocations (#​31836) (58dfda0), closes #​10996

Alpha modules (2.164.0-alpha.0)

Features
Bug Fixes

v2.163.1

Compare Source

Bug Fixes

Alpha modules (2.163.1-alpha.0)

v2.163.0

Compare Source

Features
Bug Fixes

Alpha modules (2.163.0-alpha.0)

Features
Bug Fixes

v2.162.1

Compare Source

Bug Fixes

Alpha modules (2.162.1-alpha.0)

v2.162.0

Compare Source

Features
Bug Fixes

Alpha modules (2.162.0-alpha.0)

⚠ BREAKING CHANGES TO EXPERIMENTAL FEATURES
  • kinesisfirehose-alpha: replaced destinations property with destination (singular) and changed the type from array of Destinations to a single Destination. Old behaviour would only allow an array with a single Destination to be passed in anyway.
Features
Bug Fixes
Miscellaneous Chores
  • kinesisfirehose-alpha: replacedestinations property with destination and change type from array to single IDestination (#​31630) (1e2cff1)

v2.161.1

Compare Source

Reverts

Alpha modules (2.161.1-alpha.0)

v2.161.0

Compare Source

Features
Bug Fixes

Alpha modules (2.161.0-alpha.0)

⚠ BREAKING CHANGES TO EXPERIMENTAL FEATURES
  • kinesisfirehose-destinations: the logging and logGroup properties in DestinationLoggingProps have been removed and replaced with a single optional property loggingConfig which accepts a class of type LoggingConfig.
Details

Combine the logging and logGroup properties into a single new optional property called loggingConfig which accepts a class of type LoggingConfig.

LoggingConfig is an abstract class which can be instantiated through either an instance of EnableLogging or DisableLogging which can be used in the following 3 ways:

import * as logs from 'aws-cdk-lib/aws-logs';

const logGroup = new logs.LogGroup(this, 'Log Group');
declare const bucket: s3.Bucket;

// 1. Enable logging with no parameters - a log group will be created for you
const destinationWithLogging = new destinations.S3Bucket(bucket, {
  loggingConfig: new destinations.EnableLogging(),
});

// 2. Enable a logging and pass in a logGroup to be used
const destinationWithLoggingAndMyLogGroup = new destinations.S3Bucket(bucket, {
  loggingConfig: new destinations.EnableLogging(logGroup),
});

// 3. Disable logging (does not accept any parameters so it is now impossible to provide a logGroup in this case)
const destinationWithoutLogging = new destinations.S3Bucket(bucket, {
  loggingConfig: new destinations.DisableLogging(),
});
Description of how you validated changes

unit + integ test

Checklist
Features
Bug Fixes
Miscellaneous Chores
  • kinesisfirehose-destinations: refactor logging to combine logGroup and logging properties into loggingConfig (#​31488) (c4bda64)

v2.160.0

Compare Source

Features

Alpha modules (2.160.0-alpha.0)

Features
Bug Fixes

v2.159.1

Compare Source

Reverts
  • fix(ec2): fixing vpc endpoint pattern for ecr and ecr docker (#​31496) (f7e8452)

Alpha modules (2.159.1-alpha.0)

v2.159.0

Compare Source

Features
Bug Fixes

Alpha modules (2.159.0-alpha.0)

⚠ BREAKING CHANGES TO EXPERIMENTAL FEATURES
  • kinesisfirehose-alpha: encryptionKey property is removed and encryption property type has changed from the StreamEncryption enum to the StreamEncryption class.

To pass in a KMS key for the customer managed key case, use StreamEncryption.customerManagedKey(key)

Details

Replaced encryption and encryptionKey properties with a single property encryption of type StreamEncryption and is used by calling one of the 3 methods:

SreamEncryption.unencrypted()
StreamEncryption.awsOwnedKey()
StreamEncryption.customerManagedKey(key?: IKey)

This makes it so it's not longer possible to pass in a key when the encryption type is AWS owned or unencrypted. The key is an optional parameter in StreamEncryption.customerManagedKey(key?: IKey) so following the previous behaviour, if a key is provided it will be used, otherwise a key will be created for the user.

Description of how you validated changes

Generated templates do not change so behaviour remains the same.

Updated integ/unit tests.

Checklist
Features
Bug Fixes
Miscellaneous Chores
  • kinesisfirehose-alpha: refactor encryption property to combine encryptionKey (#​31430) (8e92185)

v2.158.0

Compare Source

Bug Fixes

Alpha modules (2.158.0-alpha.0)

Features

v2.157.0

Compare Source

Features
Bug Fixes

Alpha modules (2.157.0-alpha.0)

v2.156.0

Compare Source

Features
Bug Fixes

Alpha modules (2.156.0-alpha.0)

Features
Bug Fixes

v2.155.0

Compare Source

Features
Bug Fixes

Alpha modules (2.155.0-alpha.0)

Features

v2.154.1

Compare Source

Features
Bug Fixes

Alpha modules (2.154.1-alpha.0)

v2.154.0

Compare Source

Features
Bug Fixes
Reverts

Alpha modules (2.154.0-alpha.0)

Features
Bug Fixes

v2.153.0

Compare Source

Features
  • lambda: support Recursive Loop Protection property (572fe0a)

Alpha modules (2.153.0-alpha.0)

v2.152.0

Compare Source

Features
  • lambda: support filter criteria encryption (6aa72a2)

Alpha modules (2.152.0-alpha.0)

v2.151.1

Compare Source

Reverts
  • feat(ecs): add validation checks to memory cpu combinations of FARGATE compatible task definitions (#​31110) (8fdf015)

Alpha modules (2.151.1-alpha.0)

Configuration

📅 Schedule: (UTC)

  • Branch creation
    • At any time (no schedule defined)
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

  • If you want to rebase/retry this PR, check this box

This PR has been generated by Mend Renovate CLI.

This PR contains the following updates: | Package | Change | [Age](https://docs.renovatebot.com/merge-confidence/) | [Confidence](https://docs.renovatebot.com/merge-confidence/) | |---|---|---|---| | [aws-cdk-lib](https://github.com/aws/aws-cdk) ([source](https://github.com/aws/aws-cdk/tree/HEAD/packages/aws-cdk-lib)) | [`2.151.0` → `2.275.0`](https://renovatebot.com/diffs/npm/aws-cdk-lib/2.151.0/2.275.0) | ![age](https://developer.mend.io/api/mc/badges/age/npm/aws-cdk-lib/2.275.0?slim=true) | ![confidence](https://developer.mend.io/api/mc/badges/confidence/npm/aws-cdk-lib/2.151.0/2.275.0?slim=true) | --- ### Release Notes <details> <summary>aws/aws-cdk (aws-cdk-lib)</summary> ### [`v2.275.0`](https://github.com/aws/aws-cdk/releases/tag/v2.275.0) [Compare Source](https://github.com/aws/aws-cdk/compare/v2.274.0...v2.275.0) ##### ⚠ BREAKING CHANGES - \*\* L1 resources are automatically generated from public CloudFormation Resource Schemas. They are built to closely reflect the real state of CloudFormation. Sometimes these updates can contain changes that are incompatible with previous types, but more accurately reflect reality. In this release we have changed: aws-bedrockagentcore: AWS::BedrockAgentCore::Harness: HarnessAgentCoreMemoryRetrievalConfig.RelevanceScore type narrowed from number | string to number.\ aws-bedrockagentcore: AWS::BedrockAgentCore::Harness: HarnessAgentCoreMemoryRetrievalConfig.TopK type narrowed from integer | string to integer.\ aws-codebuild: AWS::CodeBuild::ReportGroup: Id attribute removed.\ aws-dax: AWS::DAX::SubnetGroup: Id attribute removed.\ aws-dms: AWS::DMS::MigrationProject: InstanceProfileArn property removed (now a read-only attribute).\ aws-dms: AWS::DMS::MigrationProject: InstanceProfileName property removed (now a read-only attribute).\ aws-dms: AWS::DMS::MigrationProject: MigrationProjectCreationTime property removed (now a read-only attribute).\ aws-emr: AWS::EMR::InstanceFleetConfig: Id attribute removed.\ aws-fsx: AWS::FSx::Volume: AggregateConfiguration.Aggregates property is now immutable.\ aws-fsx: AWS::FSx::Volume: AggregateConfiguration.ConstituentsPerAggregate property is now immutable.\ aws-fsx: AWS::FSx::Volume: OntapConfiguration.AggregateConfiguration property is now immutable.\ aws-fsx: AWS::FSx::Volume: OntapConfiguration.VolumeStyle property is now immutable.\ aws-medialive: AWS::MediaLive::Input: InputNetworkLocation property type narrowed to enum (AWS | ON_PREMISES).\ aws-medialive: AWS::MediaLive::Input: Type property type narrowed to enum (16 values).\ aws-medialive: AWS::MediaLive::Input: Tags property type narrowed from json to Map\<string, string>.\ aws-medialive: AWS::MediaLive::Input: RouterDestinationSettings.AvailabilityZoneName property is now required.\ aws-medialive: AWS::MediaLive::Input: RouterSettings.EncryptionType property type narrowed to enum (AUTOMATIC | SECRETS_MANAGER).\ aws-medialive: AWS::MediaLive::InputSecurityGroup: Tags property type narrowed from json to Map\<string, string>.\ aws-mediapackagev2: AWS::MediaPackageV2::OriginEndpoint: LowLatencyHlsManifestConfiguration.FilterConfiguration type narrowed to LowLatencyHlsFilterConfiguration.\ aws-mediapackagev2: AWS::MediaPackageV2::OriginEndpoint: MssManifestConfiguration.FilterConfiguration type narrowed to MssFilterConfiguration. ##### Features - **cloudfront:** add sigv4a always-amz-auth signing for origin access control ([#&#8203;39216](https://github.com/aws/aws-cdk/issues/39216)) ([d9505e0](https://github.com/aws/aws-cdk/commit/d9505e0a2e3d1ef9532f4fe8c3607f6eb059d1b2)), closes [#&#8203;39195](https://github.com/aws/aws-cdk/issues/39195) [#&#8203;38629](https://github.com/aws/aws-cdk/issues/38629) [#&#8203;39196](https://github.com/aws/aws-cdk/issues/39196) [#&#8203;39195](https://github.com/aws/aws-cdk/issues/39195) - **core:** switch off built-in CloudFormation Validate using App prop ([#&#8203;39452](https://github.com/aws/aws-cdk/issues/39452)) ([5f51a82](https://github.com/aws/aws-cdk/commit/5f51a82255436a59365cc93c38b894ad1fc6c136)) - **lambda-nodejs:** support repeated esbuild arguments ([#&#8203;39344](https://github.com/aws/aws-cdk/issues/39344)) ([d60598a](https://github.com/aws/aws-cdk/commit/d60598a6ac617e988f93598a3b051038beae5710)), closes [#&#8203;32260](https://github.com/aws/aws-cdk/issues/32260) [/github.com/aws/aws-cdk/pull/39344#pullrequestreview-5638104896](https://github.com/aws//github.com/aws/aws-cdk/pull/39344/issues/pullrequestreview-5638104896) - update L1 CloudFormation resource definitions ([#&#8203;39393](https://github.com/aws/aws-cdk/issues/39393)) ([8fb96fc](https://github.com/aws/aws-cdk/commit/8fb96fcb3f51c74fff07b60433d136fd0b63346b)) ##### Bug Fixes - **core:** overly defensive plugin invocation leads to slowness ([#&#8203;39451](https://github.com/aws/aws-cdk/issues/39451)) ([783a981](https://github.com/aws/aws-cdk/commit/783a981d34bc64c8130dd8d5403c4f4dec383130)) - **stepfunctions-tasks:** use a dedicated Lambda function for each EvaluateExpression task ([#&#8203;39436](https://github.com/aws/aws-cdk/issues/39436)) ([641ff6f](https://github.com/aws/aws-cdk/commit/641ff6fd4043898e2df2b585bfe1979a28d18e2d)) - add graduate tool to lerna.json ([#&#8203;39423](https://github.com/aws/aws-cdk/issues/39423)) ([3d6f9d3](https://github.com/aws/aws-cdk/commit/3d6f9d3880f3b33e32916675fe331b514164f6ed)) - **lambda-nodejs:** preCompilation fails with TypeScript 6 or later ([#&#8203;39401](https://github.com/aws/aws-cdk/issues/39401)) ([8ce48a6](https://github.com/aws/aws-cdk/commit/8ce48a6f485fef1c26241ba810e02ef693bcd0b2)) *** #### Alpha modules (2.275.0-alpha.0) ### [`v2.274.0`](https://github.com/aws/aws-cdk/releases/tag/v2.274.0) [Compare Source](https://github.com/aws/aws-cdk/compare/v2.273.0...v2.274.0) ##### ⚠ BREAKING CHANGES - \*\* L1 resources are automatically generated from public CloudFormation Resource Schemas. They are built to closely reflect the real state of CloudFormation. Sometimes these updates can contain changes that are incompatible with previous types, but more accurately reflect reality. In this release we have changed: aws-cloudwatch: AWS::CloudWatch::AnomalyDetector: Id attribute removed.\ aws-glue: AWS::Glue::Table: Id attribute removed.\ aws-glue: AWS::Glue::Table: IcebergInput.MetadataOperation type narrowed from json to string.\ aws-glue: AWS::Glue::Table: IcebergTableInput.Properties type narrowed from json to Map\<string, string>.\ aws-iot: AWS::IoT::PolicyPrincipalAttachment: Id attribute removed.\ aws-quicksight: AWS::QuickSight::Analysis: SheetLayoutGroupMember.Type type narrowed from json to string enum (ELEMENT|GROUP).\ aws-quicksight: AWS::QuickSight::Dashboard: SheetLayoutGroupMember.Type type narrowed from json to string enum (ELEMENT|GROUP).\ aws-quicksight: AWS::QuickSight::Template: SheetLayoutGroupMember.Type type narrowed from json to string enum (ELEMENT|GROUP). ##### Features - update L1 CloudFormation resource definitions ([#&#8203;39139](https://github.com/aws/aws-cdk/issues/39139)) ([8a10135](https://github.com/aws/aws-cdk/commit/8a101356261fc0b8da85e369d983ff7b5e9dc1a3)) - **cloudfront:** add always-amz-auth signing behavior for origin access control ([#&#8203;39196](https://github.com/aws/aws-cdk/issues/39196)) ([7cf79a1](https://github.com/aws/aws-cdk/commit/7cf79a17d70c7874e1f4e0029fcede323be06a49)), closes [#&#8203;39195](https://github.com/aws/aws-cdk/issues/39195) [#&#8203;38629](https://github.com/aws/aws-cdk/issues/38629) - **cloudfront:** add sigv4a signing protocol for origin access control ([#&#8203;38629](https://github.com/aws/aws-cdk/issues/38629)) ([805bfbe](https://github.com/aws/aws-cdk/commit/805bfbe57b00a6fa6ad3a5a07ccd96d2d892f420)), closes [#&#8203;38627](https://github.com/aws/aws-cdk/issues/38627) [#&#8203;38627](https://github.com/aws/aws-cdk/issues/38627) - **codebuild:** add STANDARD_8_0, AMAZON_LINUX_2023_6 and AMAZON_LINUX_2023_STANDARD_4_0 images ([#&#8203;37588](https://github.com/aws/aws-cdk/issues/37588)) ([3beecb3](https://github.com/aws/aws-cdk/commit/3beecb31a38da1b86ba0c6a52a4a9e3ed4f4282f)), closes [#&#8203;37586](https://github.com/aws/aws-cdk/issues/37586) ##### Bug Fixes - **apigateway:** log group destination ARN causes permanent Stage drift ([#&#8203;38816](https://github.com/aws/aws-cdk/issues/38816)) ([65c6aa0](https://github.com/aws/aws-cdk/commit/65c6aa07c4e389fc818ebafa91b1229acba06bd7)), closes [#&#8203;38796](https://github.com/aws/aws-cdk/issues/38796) - **bedrockagentcore:** `Runtime` annotations cannot be acknowledged ([#&#8203;38770](https://github.com/aws/aws-cdk/issues/38770)) ([165bf8b](https://github.com/aws/aws-cdk/commit/165bf8b49633251d9b25745a5f150a8db8b5ff39)), closes [#&#8203;38741](https://github.com/aws/aws-cdk/issues/38741) - **core:** can't trace construct to template for nested stacks ([#&#8203;39141](https://github.com/aws/aws-cdk/issues/39141)) ([173a2ff](https://github.com/aws/aws-cdk/commit/173a2ff9551d7c92c050bd33f775c1e4a1eb9ad8)) - **core:** preserve unresolved Tags property tokens ([#&#8203;37759](https://github.com/aws/aws-cdk/issues/37759)) ([644489c](https://github.com/aws/aws-cdk/commit/644489c24c8339a1af5e640237ff44f10f5bf207)), closes [#&#8203;37734](https://github.com/aws/aws-cdk/issues/37734) - **core:** validations with different messages are confusingly combined ([#&#8203;39132](https://github.com/aws/aws-cdk/issues/39132)) ([54fb0ea](https://github.com/aws/aws-cdk/commit/54fb0eabbf26e53a4861be664256b987d4dc96e9)), closes [#&#8203;38982](https://github.com/aws/aws-cdk/issues/38982) - **stepfunctions:** default `StateMachine` IAM role  missing confused deputy protection best practices ([#&#8203;37688](https://github.com/aws/aws-cdk/issues/37688)) ([638a681](https://github.com/aws/aws-cdk/commit/638a6819aca172d1df572ea587861cf2f6295cfa)), closes [#&#8203;37567](https://github.com/aws/aws-cdk/issues/37567) [#&#8203;37567](https://github.com/aws/aws-cdk/issues/37567) [#&#8203;37567](https://github.com/aws/aws-cdk/issues/37567) *** #### Alpha modules (2.274.0-alpha.0) ##### Features - **bedrock-alpha:** add VectorKnowledgeBase L2 construct for bedrock knowledge bases ([#&#8203;38883](https://github.com/aws/aws-cdk/issues/38883)) ([5041639](https://github.com/aws/aws-cdk/commit/5041639479aaa5204ff2ff1068f1bae40b32164d)), closes [aws/aws-cdk-rfcs#686](https://github.com/aws/aws-cdk-rfcs/issues/686) ##### Bug Fixes - **ec2-alpha:** allow valid secondary CIDR blocks outside RFC 1918 ([#&#8203;36873](https://github.com/aws/aws-cdk/issues/36873)) ([8f48c90](https://github.com/aws/aws-cdk/commit/8f48c9024329100068d8376a8f309912e7fb2b13)), closes [#&#8203;36111](https://github.com/aws/aws-cdk/issues/36111) - **redshift-alpha:** backslashes in user passwords and comments are not preserved ([#&#8203;39306](https://github.com/aws/aws-cdk/issues/39306)) ([1f752b6](https://github.com/aws/aws-cdk/commit/1f752b67bfdd52181273e9ffb17ae9005c16b9f9)) ### [`v2.273.0`](https://github.com/aws/aws-cdk/releases/tag/v2.273.0) [Compare Source](https://github.com/aws/aws-cdk/compare/v2.272.0...v2.273.0) ##### ⚠ BREAKING CHANGES - \*\* L1 resources are automatically generated from public CloudFormation Resource Schemas. They are built to closely reflect the real state of CloudFormation. Sometimes these updates can contain changes that are incompatible with previous types, but more accurately reflect reality. In this release we have changed: aws-appstream: AWS::AppStream::StackFleetAssociation: FleetName property is now immutable. aws-appstream: AWS::AppStream::StackFleetAssociation: StackName property is now immutable. aws-appsync: AWS::AppSync::ApiCache: AtRestEncryptionEnabled property is now immutable. aws-appsync: AWS::AppSync::ApiCache: TransitEncryptionEnabled property is now immutable. aws-bedrockagentcore: AWS::BedrockAgentCore::OnlineEvaluationConfig: OutputConfig attribute removed. aws-cloud9: AWS::Cloud9::EnvironmentEC2: Id attribute removed. aws-config: AWS::Config::ConfigurationRecorder: Id attribute removed. aws-config: AWS::Config::OrganizationConfigRule: Id attribute removed. aws-datazone: AWS::DataZone::PolicyGrant: Detail property is now required. aws-datazone: AWS::DataZone::PolicyGrant: Principal property is now required. aws-directoryservice: AWS::DirectoryService::MicrosoftAD: Id attribute removed. aws-lambda: AWS::Lambda::NetworkConnector: VpcEgressConfiguration.NetworkProtocol property is now required. aws-lambda: AWS::Lambda::NetworkConnector: VpcEgressConfiguration.SecurityGroupIds property is now required. ##### Features - update L1 CloudFormation resource definitions ([#&#8203;38969](https://github.com/aws/aws-cdk/issues/38969)) ([ed0df78](https://github.com/aws/aws-cdk/commit/ed0df78359cc92b367d4bbd609bb1637b68f5573)) - **batch:** add ConsumableResource L2 construct ([#&#8203;36971](https://github.com/aws/aws-cdk/issues/36971)) ([a12f3a1](https://github.com/aws/aws-cdk/commit/a12f3a1c7ca1626c16608c126fa4a60a45ac010b)) - **bedrockagentcore:** support runtime platformVersion ([#&#8203;38924](https://github.com/aws/aws-cdk/issues/38924)) ([227423f](https://github.com/aws/aws-cdk/commit/227423f0129d829a9bdddce5af57f63469839097)) - **cloudfront:** default Distribution behaviors to redirect HTTP to HTTPS ([#&#8203;38721](https://github.com/aws/aws-cdk/issues/38721)) ([6ede006](https://github.com/aws/aws-cdk/commit/6ede0060d93bab5903a0528bdd323a56e1430003)), closes [#&#8203;38599](https://github.com/aws/aws-cdk/issues/38599) - **opensearchservice:** add useLatestServiceSoftwareForBlueGreen support ([#&#8203;38499](https://github.com/aws/aws-cdk/issues/38499)) ([6aa03e5](https://github.com/aws/aws-cdk/commit/6aa03e5444241550487c6a34011283d2599ff31e)), closes [#&#8203;38664](https://github.com/aws/aws-cdk/issues/38664) [#&#8203;38664](https://github.com/aws/aws-cdk/issues/38664) - **pipelines:** add `executionMode` support in CodePipeline L3 construct ([#&#8203;35022](https://github.com/aws/aws-cdk/issues/35022)) ([7283d38](https://github.com/aws/aws-cdk/commit/7283d38c615c83b7698111e639c9773abd41b45a)), closes [#&#8203;35014](https://github.com/aws/aws-cdk/issues/35014) ##### Bug Fixes - bump bundled brace-expansion to 5.0.12 ([#&#8203;38929](https://github.com/aws/aws-cdk/issues/38929)) ([ff25def](https://github.com/aws/aws-cdk/commit/ff25def6c473addeafc091d93a01fcb5b5b5cb25)), closes [#&#8203;38932](https://github.com/aws/aws-cdk/issues/38932) - **applicationautoscaling:** target tracking silently ignores custom metric account and region ([#&#8203;36503](https://github.com/aws/aws-cdk/issues/36503)) ([5d10288](https://github.com/aws/aws-cdk/commit/5d1028868e59642f71af364d4b019f9d5911e455)), closes [#&#8203;36401](https://github.com/aws/aws-cdk/issues/36401) - **bedrockagentcore:** accept aws-cn ECR image URIs in Runtime container URI validation ([#&#8203;38948](https://github.com/aws/aws-cdk/issues/38948)) ([49ac618](https://github.com/aws/aws-cdk/commit/49ac618636a31bd4ecfa74e0a224ccabcfd291b2)), closes [#&#8203;38947](https://github.com/aws/aws-cdk/issues/38947) - **cloudfront-origins:** missing OAC permissions for Function URL ([#&#8203;35919](https://github.com/aws/aws-cdk/issues/35919)) ([d213cc7](https://github.com/aws/aws-cdk/commit/d213cc71761267788354887039e2d3c4f26b3032)), closes [#&#8203;35872](https://github.com/aws/aws-cdk/issues/35872) [/github.com/aws/aws-cdk/blob/75139b2145010bc74e8017b23450d7af95327f49/packages/aws-cdk-lib/aws-cloudfront-origins/lib/function-url-origin.ts#L144-L153](https://github.com/aws//github.com/aws/aws-cdk/blob/75139b2145010bc74e8017b23450d7af95327f49/packages/aws-cdk-lib/aws-cloudfront-origins/lib/function-url-origin.ts/issues/L144-L153) [/github.com/aws/aws-cdk/blob/75139b2145010bc74e8017b23450d7af95327f49/packages/aws-cdk-lib/aws-cloudfront-origins/lib/function-url-origin.ts#L144-L153](https://github.com/aws//github.com/aws/aws-cdk/blob/75139b2145010bc74e8017b23450d7af95327f49/packages/aws-cdk-lib/aws-cloudfront-origins/lib/function-url-origin.ts/issues/L144-L153) [/github.com/aws/aws-cdk/blob/75139b2145010bc74e8017b23450d7af95327f49/packages/aws-cdk-lib/aws-lambda/lib/function-base.ts#L577](https://github.com/aws//github.com/aws/aws-cdk/blob/75139b2145010bc74e8017b23450d7af95327f49/packages/aws-cdk-lib/aws-lambda/lib/function-base.ts/issues/L577) [#&#8203;35725](https://github.com/aws/aws-cdk/issues/35725) - **core:** validation E2001 inadvertently not enabled ([#&#8203;38920](https://github.com/aws/aws-cdk/issues/38920)) ([0b763a7](https://github.com/aws/aws-cdk/commit/0b763a780c0a89b518d596d6b7bcde2778ffd29b)) - **eks:** allow access policies on AccessEntryType.EC2 access entries ([#&#8203;38782](https://github.com/aws/aws-cdk/issues/38782)) ([e507e07](https://github.com/aws/aws-cdk/commit/e507e07dcc2404845413e0a73c784bec0207aab3)), closes [#&#8203;37496](https://github.com/aws/aws-cdk/issues/37496) - **s3-deployment:** `Source.data` objectKey can write outside the staging directory ([#&#8203;38921](https://github.com/aws/aws-cdk/issues/38921)) ([53439f9](https://github.com/aws/aws-cdk/commit/53439f95a933165414afaae7a33faefccad8bf57)) *** #### Alpha modules (2.273.0-alpha.0) ##### ⚠ BREAKING CHANGES - **redshift-alpha:** PUBLIC in any ASCII letter case is rejected as the name of a created user, or of an imported user that is granted table privileges. Existing PUBLIC grants are not removed, but narrowing one is rejected. Migrating to an ordinary name still works. - **redshift-alpha:** The `loggingProperties` prop on `ClusterProps` (and the `LoggingProperties` interface) has been removed from `@aws-cdk/aws-redshift-alpha`. Use the new `logging` prop with `ClusterLogging.s3({ bucket, keyPrefix })` or `ClusterLogging.cloudWatch({ logExports })` instead. ##### Features - **redshift-alpha:** audit logging to cloudwatch ([#&#8203;36410](https://github.com/aws/aws-cdk/issues/36410)) ([f2bf5d3](https://github.com/aws/aws-cdk/commit/f2bf5d31af8aa4da1863ebc08b1a98182d525eb7)), closes [#&#8203;25755](https://github.com/aws/aws-cdk/issues/25755) ##### Bug Fixes - **redshift-alpha:** reject PUBLIC user names ([#&#8203;38935](https://github.com/aws/aws-cdk/issues/38935)) ([3335407](https://github.com/aws/aws-cdk/commit/3335407fa794c9b7183ccc2667a1c815429cb9c6)) ### [`v2.272.0`](https://github.com/aws/aws-cdk/releases/tag/v2.272.0) [Compare Source](https://github.com/aws/aws-cdk/compare/v2.271.0...v2.272.0) ##### ⚠ BREAKING CHANGES - \*\* L1 resources are automatically generated from public CloudFormation Resource Schemas. They are built to closely reflect the real state of CloudFormation. Sometimes these updates can contain changes that are incompatible with previous types, but more accurately reflect reality. In this release we have changed: aws-servicediscovery: AWS::ServiceDiscovery::Instance: primary identifier is now ServiceId and InstanceId, so InstanceReference now requires serviceId. ##### Features - update L1 CloudFormation resource definitions ([#&#8203;38864](https://github.com/aws/aws-cdk/issues/38864)) ([3bd350b](https://github.com/aws/aws-cdk/commit/3bd350bd1da34749a38aeff3df72147cf340dc71)) - **ec2:** regional NAT Gateway ([#&#8203;36538](https://github.com/aws/aws-cdk/issues/36538)) ([3901dde](https://github.com/aws/aws-cdk/commit/3901dde0afe283d1bc814b2a80bef333f7a97e87)), closes [#&#8203;36198](https://github.com/aws/aws-cdk/issues/36198) - **glue:** support Glue version 6.0 ([#&#8203;38632](https://github.com/aws/aws-cdk/issues/38632)) ([372e021](https://github.com/aws/aws-cdk/commit/372e0219047fcc2e3a8b6f36ec37f0ce01cfc0e3)), closes [#&#8203;38631](https://github.com/aws/aws-cdk/issues/38631) - **synthetics:** add environmentEncryption KMS key prop to Canary ([#&#8203;38750](https://github.com/aws/aws-cdk/issues/38750)) ([ec884bc](https://github.com/aws/aws-cdk/commit/ec884bc2580c5fe9aa5fbbedf77f34fada52da3d)), closes [#&#8203;38797](https://github.com/aws/aws-cdk/issues/38797) ##### Bug Fixes - **bedrockagentcore:** browser grantUse is missing ConnectBrowserAutomationStream ([#&#8203;38657](https://github.com/aws/aws-cdk/issues/38657)) ([aff4a2f](https://github.com/aws/aws-cdk/commit/aff4a2f3c7258f7a206663baf3b3857bbcccd1b8)), closes [#&#8203;38656](https://github.com/aws/aws-cdk/issues/38656) - **core:** synth crashes with EISDIR on cloud-placeholder directories in cdk.out ([#&#8203;38672](https://github.com/aws/aws-cdk/issues/38672)) ([269052d](https://github.com/aws/aws-cdk/commit/269052d635d40455b59dd4ad2117ac1bca4ceb87)), closes [#&#8203;38653](https://github.com/aws/aws-cdk/issues/38653) [#&#8203;38299](https://github.com/aws/aws-cdk/issues/38299) - **lambda-nodejs:** local bundling fails under AllSigned PowerShell execution policy ([#&#8203;38447](https://github.com/aws/aws-cdk/issues/38447)) ([edd162d](https://github.com/aws/aws-cdk/commit/edd162d84af71a0dd7876229115a231599e37df9)), closes [#&#8203;38439](https://github.com/aws/aws-cdk/issues/38439) [#&#8203;37412](https://github.com/aws/aws-cdk/issues/37412) *** #### Alpha modules (2.272.0-alpha.0) ### [`v2.271.0`](https://github.com/aws/aws-cdk/releases/tag/v2.271.0) [Compare Source](https://github.com/aws/aws-cdk/compare/v2.270.0...v2.271.0) ##### Features - **codebuild:** add hostKernel to build environment ([#&#8203;38513](https://github.com/aws/aws-cdk/issues/38513)) ([deec895](https://github.com/aws/aws-cdk/commit/deec89561f9352fd134b4754c5146e2080856737)), closes [#&#8203;38338](https://github.com/aws/aws-cdk/issues/38338) [#&#8203;38338](https://github.com/aws/aws-cdk/issues/38338) [#&#8203;38275](https://github.com/aws/aws-cdk/issues/38275) [#&#8203;38338](https://github.com/aws/aws-cdk/issues/38338) - **kinesisanalytics-flink:** add support for Flink 2.2 ([#&#8203;37914](https://github.com/aws/aws-cdk/issues/37914)) ([a719f53](https://github.com/aws/aws-cdk/commit/a719f53b02ec0bfc85831b9ff5e1f2b832b060db)), closes [#&#8203;37915](https://github.com/aws/aws-cdk/issues/37915) [#&#8203;37915](https://github.com/aws/aws-cdk/issues/37915) - **lambda:** add s3 object storage mode ([#&#8203;38745](https://github.com/aws/aws-cdk/issues/38745)) ([7c429d9](https://github.com/aws/aws-cdk/commit/7c429d924991a9b186cdc4961719ed881a37fa5d)), closes [#&#8203;38260](https://github.com/aws/aws-cdk/issues/38260) [/github.com/aws/aws-cdk/pull/38278#discussion_r3841272090](https://github.com/aws//github.com/aws/aws-cdk/pull/38278/issues/discussion_r3841272090) - **s3tables:** make tableBucketName optional on TableBucket ([#&#8203;37749](https://github.com/aws/aws-cdk/issues/37749)) ([90e1bea](https://github.com/aws/aws-cdk/commit/90e1bea40fd838756bab116b02e99d2bd07c2db4)), closes [#&#8203;37747](https://github.com/aws/aws-cdk/issues/37747) - render property traces with 'cdk --debug' ([#&#8203;38844](https://github.com/aws/aws-cdk/issues/38844)) ([da68298](https://github.com/aws/aws-cdk/commit/da6829898a14eac5004be469e6528ceab08e61e1)) ##### Bug Fixes - **core:** upgrade CloudFormation validation to latest version ([#&#8203;38884](https://github.com/aws/aws-cdk/issues/38884)) ([0c5e732](https://github.com/aws/aws-cdk/commit/0c5e732d8e660b88490fb7bb0f50ab3cceeeb280)) - **ecs:** support digest references in TagParameterContainerImage via imageDigest option ([#&#8203;37868](https://github.com/aws/aws-cdk/issues/37868)) ([f482f4f](https://github.com/aws/aws-cdk/commit/f482f4f3402224b53e6bc4346cf369adae95b542)), closes [#&#8203;37718](https://github.com/aws/aws-cdk/issues/37718) - **ssm** secret.fromSsmParameter introduces W2001 warning ([#&#8203;38833](https://github.com/aws/aws-cdk/issues/38833)) ([9526219](https://github.com/aws/aws-cdk/commit/9526219d99fb1c4215ed9547b8c2d14f40a84af1)), closes [#&#8203;38396](https://github.com/aws/aws-cdk/issues/38396) - telemetry numbers don't allow making a good model for synth time yet ([#&#8203;38889](https://github.com/aws/aws-cdk/issues/38889)) ([600ffc8](https://github.com/aws/aws-cdk/commit/600ffc86ea378d9f707ff5b9f791678d0c564c84)) - validating CloudAssembly throws `Invalid URL` error ([#&#8203;38867](https://github.com/aws/aws-cdk/issues/38867)) ([6eb07dd](https://github.com/aws/aws-cdk/commit/6eb07ddd485295bac3b2d6f7b0183f348f1d2a5d)) - **cloudwatch:** iqm alarms are not rendered correctly ([#&#8203;38834](https://github.com/aws/aws-cdk/issues/38834)) ([7f714ce](https://github.com/aws/aws-cdk/commit/7f714ceea65edec9b0d835362779ef3544cfe4a3)), closes [#&#8203;28812](https://github.com/aws/aws-cdk/issues/28812) - **core:** `resolveReferences` should only update references that require updates on its second pass in nested stacks ([#&#8203;38813](https://github.com/aws/aws-cdk/issues/38813)) ([6cf5313](https://github.com/aws/aws-cdk/commit/6cf531379351235e97abdc5ee978dab42ae22037)) - **core:** acknowledgeWarning before emit on same construct is ignored ([#&#8203;38821](https://github.com/aws/aws-cdk/issues/38821)) ([e840b92](https://github.com/aws/aws-cdk/commit/e840b9252d940d00b2c9bcc53c415d4c1d9703de)), closes [#&#8203;38820](https://github.com/aws/aws-cdk/issues/38820) - **core:** validations.acknowledge() does not respect scopes ([#&#8203;38789](https://github.com/aws/aws-cdk/issues/38789)) ([2f32847](https://github.com/aws/aws-cdk/commit/2f328478a2078566fd84a080e07846963327e47a)), closes [#&#8203;38495](https://github.com/aws/aws-cdk/issues/38495) - **ec2:** synth-time AMI lookup leads to W9010 ([#&#8203;38840](https://github.com/aws/aws-cdk/issues/38840)) ([0870fcf](https://github.com/aws/aws-cdk/commit/0870fcf1432156a300aa43db7522de146bba7c39)), closes [#&#8203;38390](https://github.com/aws/aws-cdk/issues/38390) *** #### Alpha modules (2.271.0-alpha.0) ### [`v2.270.0`](https://github.com/aws/aws-cdk/releases/tag/v2.270.0) [Compare Source](https://github.com/aws/aws-cdk/compare/v2.269.0...v2.270.0) ##### ⚠ BREAKING CHANGES - \*\* L1 resources are automatically generated from public CloudFormation Resource Schemas. They are built to closely reflect the real state of CloudFormation. Sometimes these updates can contain changes that are incompatible with previous types, but more accurately reflect reality. In this release we have changed: aws-codecommit: AWS::CodeCommit::Repository: Id attribute removed. aws-config: AWS::Config::DeliveryChannel: DeliveryFrequency property values narrowed to an enum. aws-dms: AWS::DMS::ReplicationTask: Id attribute removed. ##### Features - update L1 CloudFormation resource definitions ([#&#8203;38823](https://github.com/aws/aws-cdk/issues/38823)) ([4386bf1](https://github.com/aws/aws-cdk/commit/4386bf1286d63877e1964a183488aa49ce9143ea)) - **core:** add cross-resource GameLift launch-path rules (CDK-GameLift-006/007) ([ba98771](https://github.com/aws/aws-cdk/commit/ba98771e41e726ba60c73f7d4f0da4b2a9c1eb06)) - **core:** merge default Rego rules into explicitly registered plugins ([160c8a6](https://github.com/aws/aws-cdk/commit/160c8a673b7a293ff623a069e4f128d3b383d678)) - **core:** replace schema-covered Rego rules with cross-field invariants ([07a8153](https://github.com/aws/aws-cdk/commit/07a815359516417d669f7af8dc52699410d3ac9b)) - **core:** ship default CloudFormation validation rules in Rego ([5388c88](https://github.com/aws/aws-cdk/commit/5388c8897efd0dc3f7c3e51aeec0e9aa6f60bb55)) - **core:** ship default CloudFormation validation rules in Rego ([#&#8203;38448](https://github.com/aws/aws-cdk/issues/38448)) ([4ccdad8](https://github.com/aws/aws-cdk/commit/4ccdad8de93ac9b03dbb317f60e14a4ae1151409)), closes [#&#8203;38456](https://github.com/aws/aws-cdk/issues/38456) - **glue:** graduate to stable 🚀 ([#&#8203;38799](https://github.com/aws/aws-cdk/issues/38799)) ([a9e36a3](https://github.com/aws/aws-cdk/commit/a9e36a33624d1f8b5dc9e13e2ec9558aa922dd3c)) - **lambda:** add DirectS3Read support for S3 Files filesystem mounts ([#&#8203;38752](https://github.com/aws/aws-cdk/issues/38752)) ([1482712](https://github.com/aws/aws-cdk/commit/14827127d8fa7cc61c234783099c18c73684944d)), closes [#&#8203;38751](https://github.com/aws/aws-cdk/issues/38751) ##### Bug Fixes - **apigatewayv2:** missing WebSocket Lambda permissions for routes sharing one integration ([#&#8203;38154](https://github.com/aws/aws-cdk/issues/38154)) ([4317f8e](https://github.com/aws/aws-cdk/commit/4317f8ebcc4a7e53cbcfae8c8c89abccca31fa98)), closes [#&#8203;38148](https://github.com/aws/aws-cdk/issues/38148) - **core:** annotations cannot be acked without feature flag ([#&#8203;38772](https://github.com/aws/aws-cdk/issues/38772)) ([941f847](https://github.com/aws/aws-cdk/commit/941f847f5c9fb74cca73cecd2e8ce21d4938c6ee)) - **ecs:** correct enableManagedDraining docs to reflect CloudFormation implicit default ([#&#8203;37228](https://github.com/aws/aws-cdk/issues/37228)) ([74c19a3](https://github.com/aws/aws-cdk/commit/74c19a3f106a4419a7c075279f5477b09972acce)), closes [#&#8203;35539](https://github.com/aws/aws-cdk/issues/35539) [/github.com/aws/aws-cdk/issues/35539#issuecomment-3319165306](https://github.com/aws//github.com/aws/aws-cdk/issues/35539/issues/issuecomment-3319165306) - **s3:** l2 construct `Bucket` replication metrics cannot be enabled without replication time control (RTC) ([#&#8203;35929](https://github.com/aws/aws-cdk/issues/35929)) ([cd97d96](https://github.com/aws/aws-cdk/commit/cd97d9608c648c33cd4ebfa632bed2b00e65f5d3)), closes [#&#8203;35772](https://github.com/aws/aws-cdk/issues/35772) [/github.com/aws/aws-cdk/issues/35772#issuecomment-3427574206](https://github.com/aws//github.com/aws/aws-cdk/issues/35772/issues/issuecomment-3427574206) *** #### Alpha modules (2.270.0-alpha.0) ### [`v2.269.0`](https://github.com/aws/aws-cdk/releases/tag/v2.269.0) [Compare Source](https://github.com/aws/aws-cdk/compare/v2.268.0...v2.269.0) ##### Features - **bedrockagentcore:** graduate Policy submodule to stable ([#&#8203;38687](https://github.com/aws/aws-cdk/issues/38687)) ([2b95e32](https://github.com/aws/aws-cdk/commit/2b95e329041ce1f54fd4a075229740af88484bdf)), closes [#&#8203;37219](https://github.com/aws/aws-cdk/issues/37219) - update L1 CloudFormation resource definitions ([#&#8203;38784](https://github.com/aws/aws-cdk/issues/38784)) ([1b5e2e0](https://github.com/aws/aws-cdk/commit/1b5e2e06b5688638775cd37e7ab3544d2cdd278e)) - **logs:** support DELIVERY log group class ([#&#8203;38703](https://github.com/aws/aws-cdk/issues/38703)) ([b7a057a](https://github.com/aws/aws-cdk/commit/b7a057a1abfb386a9738623c27680c38710e527c)), closes [#&#8203;34338](https://github.com/aws/aws-cdk/issues/34338) - **s3-deployment:** expose deployed object version IDs ([#&#8203;38766](https://github.com/aws/aws-cdk/issues/38766)) ([09342df](https://github.com/aws/aws-cdk/commit/09342df0b437365940f252d25fdc2e7637c4c5fe)), closes [#&#8203;38765](https://github.com/aws/aws-cdk/issues/38765) ##### Bug Fixes - **awslint:** use a default import for chalk ([#&#8203;38110](https://github.com/aws/aws-cdk/issues/38110)) ([36d14e0](https://github.com/aws/aws-cdk/commit/36d14e0c11b4ce19a76e2cef8a71457068e52a26)), closes [#&#8203;38109](https://github.com/aws/aws-cdk/issues/38109) [#&#8203;38058](https://github.com/aws/aws-cdk/issues/38058) - **core:** cdk-nag warnings cannot be suppressed ([#&#8203;38787](https://github.com/aws/aws-cdk/issues/38787)) ([211029f](https://github.com/aws/aws-cdk/commit/211029fb5ff35e180a43f9ac65ab9e5015aad416)) - **core:** cdk-nag's findings duplicated in multi-environment apps ([#&#8203;38707](https://github.com/aws/aws-cdk/issues/38707)) ([4b7b2e7](https://github.com/aws/aws-cdk/commit/4b7b2e74a67965e0cd326bb0a27b2d11a8f9aed8)), closes [#&#8203;38483](https://github.com/aws/aws-cdk/issues/38483) [#&#8203;38135](https://github.com/aws/aws-cdk/issues/38135) - **core:** tree.json generation is quadratic in the number of subtrees ([#&#8203;38761](https://github.com/aws/aws-cdk/issues/38761)) ([3d034b6](https://github.com/aws/aws-cdk/commit/3d034b63d58aa8f78d61596a682468724753dfec)), closes [#&#8203;38762](https://github.com/aws/aws-cdk/issues/38762) - **core:** unnecessary warnings around builtins and AZs ([#&#8203;38673](https://github.com/aws/aws-cdk/issues/38673)) ([6860777](https://github.com/aws/aws-cdk/commit/68607775642942161ba2602351a963745b0d4756)) - **core:** upgrade CloudFormation validation to latest version ([#&#8203;38804](https://github.com/aws/aws-cdk/issues/38804)) ([d703eb6](https://github.com/aws/aws-cdk/commit/d703eb67cec1d52a0e43ae3d739557f4162729ca)) - **dynamodb:** `TableV2` emits internal grants deprecation warnings ([#&#8203;38806](https://github.com/aws/aws-cdk/issues/38806)) ([57b3043](https://github.com/aws/aws-cdk/commit/57b304363240cbe333e6b3222d9ddb7803f81258)), closes [#&#8203;38709](https://github.com/aws/aws-cdk/issues/38709) [#&#8203;38399](https://github.com/aws/aws-cdk/issues/38399) [#&#8203;37892](https://github.com/aws/aws-cdk/issues/37892) - **ecs:** allow ephemeralStorageGiB for Windows Fargate platform version 1.0.0 ([#&#8203;37589](https://github.com/aws/aws-cdk/issues/37589)) ([855dfeb](https://github.com/aws/aws-cdk/commit/855dfeb67c8cba8cd5cc58f6e72e9de36ff92cf3)), closes [#&#8203;37510](https://github.com/aws/aws-cdk/issues/37510) - **ecs:** removing the last target group from a service is not deployed ([#&#8203;38776](https://github.com/aws/aws-cdk/issues/38776)) ([73100f6](https://github.com/aws/aws-cdk/commit/73100f60b5bff1e3dfbdb79754a07099f3ca4845)), closes [#&#8203;35446](https://github.com/aws/aws-cdk/issues/35446) [#&#8203;35446](https://github.com/aws/aws-cdk/issues/35446) [#&#8203;35452](https://github.com/aws/aws-cdk/issues/35452) - **lambda-go:** escape generated go build path arguments ([#&#8203;38785](https://github.com/aws/aws-cdk/issues/38785)) ([279d101](https://github.com/aws/aws-cdk/commit/279d10118d703446d7f30e983564f8bd8f197259)) - **s3-deployment:** sanitize all log outputs to mitigate CWE-117/93 ([#&#8203;37670](https://github.com/aws/aws-cdk/issues/37670)) ([47a3a38](https://github.com/aws/aws-cdk/commit/47a3a38b13324098c0c6588de8bd912a3f63ca30)), closes [#&#8203;37671](https://github.com/aws/aws-cdk/issues/37671) [#&#8203;30746](https://github.com/aws/aws-cdk/issues/30746) [#&#8203;28469](https://github.com/aws/aws-cdk/issues/28469) [#&#8203;30211](https://github.com/aws/aws-cdk/issues/30211) *** #### Alpha modules (2.269.0-alpha.0) ##### ⚠ BREAKING CHANGES - **glue-alpha:** Glue job constructs now reject construct-managed and Glue-reserved arguments passed through `defaultArguments`. Previously, a managed argument set via `defaultArguments` was silently honored in `SparkJob` and `PythonShellJob` (customer value won over the construct default) and silently ignored in `RayJob` (construct default won). Both behaviors let a caller bypass the construct's security and observability defaults with no error. Passing any of the following through `defaultArguments` now throws a `ValidationError` at synthesis time: - construct-managed arguments — `--enable-continuous-cloudwatch-log`, `--continuous-log-logGroup`, `--continuous-log-logStreamPrefix`, `--continuous-log-conversionPattern`, `--enable-continuous-log-filter`, `--enable-metrics`, `--enable-observability-metrics`, `--enable-spark-ui`, `--spark-event-logs-path`, `--job-language`, `--class`, `--extra-jars`, `--user-jars-first`, `--extra-py-files`, `--extra-files`, `library-set` - Glue-reserved arguments — `--debug`, `--mode`, `--JOB_NAME`, `--endpoint` A managed argument is rejected whether or not the current configuration emits it, so a disabled feature (e.g. `enableMetrics: false`) cannot be re-enabled through `defaultArguments`. Configure these through their dedicated props instead (`continuousLogging`, `enableMetrics`, `enableObservabilityMetrics`, `sparkUI`, `className`, `extraJars`, `extraJarsFirst`, `extraPythonFiles`, `extraFiles`). For example, replace `defaultArguments: { '--enable-continuous-cloudwatch-log': 'false' }` with `continuousLogging: { enabled: false }`. Arguments without a dedicated prop (e.g. `--enable-glue-datacatalog`) are unaffected and remain settable via `defaultArguments`. The `checkNoReservedArgs(defaultArguments?)` method on the `Job` base class was removed. It is replaced by two protected members: `setManagedArgument(key, value?)`, which each job class calls to declare (and, when a value is present, emit) a managed argument, and `mergeDefaultArguments(defaultArguments?)`, which validates the caller-supplied `defaultArguments` against the accumulated reserved set and returns the merged map. - **route53resolver-alpha:** `FirewallRuleGroupAssociation` now honors the previously-ignored `mutationProtection` and `name` props. Stacks that set `mutationProtection: true` will enable mutation protection on redeploy (which blocks further CloudFormation update/delete until it is set back to false); stacks that set `name` will write it to the template, which may replace the association. - **glue-alpha:** trigger `Action` and `Condition` are no longer plain objects — use `Action.job(...)` / `Action.crawler(...)` and `Condition.job(...)` / `Condition.crawler(...)`. Jobs are referenced via `IJobRef` and crawlers via `ICrawlerRef` (a `CfnCrawler` instance or `CfnCrawler.fromCrawlerName(...)`) instead of a `CfnCrawler` field or crawler-name string; `IJob` now extends the generated `IJobRef`. `addDailyScheduledTrigger`/`addWeeklyScheduledTrigger`/`addCustomScheduledTrigger` are replaced by `addScheduledTrigger(id, { schedule, ... })` (use `TriggerSchedule.daily()`/`weekly()`/`cron(...)`). `addNotifyEventTrigger` is renamed `addEventTrigger` (`NotifyEventTriggerOptions` → `EventTriggerOptions`). All `addXxxTrigger` methods now return `ITriggerRef` instead of `CfnTrigger`. - **glue-alpha:** PartitionProjectionConfiguration's variant fields (integerRange, dateRange, interval, digits, format, intervalUnit, values) are no longer public; DATE projection now takes `step: { interval, intervalUnit }` instead of top-level `interval`/`intervalUnit`. - **glue-alpha:** ConnectionOptions no longer has `subnet`, `vpc`, or `vpcSubnets`; use `network: ConnectionNetwork.subnet(...)` or `network: ConnectionNetwork.vpc(...)` instead. ##### Features - **glue-alpha:** ensure job parameters consistency ([#&#8203;38480](https://github.com/aws/aws-cdk/issues/38480)) ([bc7dc0c](https://github.com/aws/aws-cdk/commit/bc7dc0c30ab1f331c2ef7c9e66337ab7ea50f3bd)) - **glue-alpha:** model Connection VPC placement as a value object ([#&#8203;38729](https://github.com/aws/aws-cdk/issues/38729)) ([f72e9fe](https://github.com/aws/aws-cdk/commit/f72e9feb91de3e6de70d667641cd848f4d297185)) - **glue-alpha:** model partition projection variants as internal state ([#&#8203;38726](https://github.com/aws/aws-cdk/issues/38726)) ([16527cd](https://github.com/aws/aws-cdk/commit/16527cd788541825e10e9238e2f322bfaca03f6f)) - **glue-alpha:** overhaul the workflow trigger API ([#&#8203;38579](https://github.com/aws/aws-cdk/issues/38579)) ([c8f917d](https://github.com/aws/aws-cdk/commit/c8f917d0d636df2daf3abcd223997709d96bc433)) ##### Bug Fixes - **route53resolver-alpha:** association silently ignored mutationProtection and name ([#&#8203;38795](https://github.com/aws/aws-cdk/issues/38795)) ([5ab40b2](https://github.com/aws/aws-cdk/commit/5ab40b27c4c4181d1b44f9e5a1b64666e57c760f)) ### [`v2.268.0`](https://github.com/aws/aws-cdk/releases/tag/v2.268.0) [Compare Source](https://github.com/aws/aws-cdk/compare/v2.267.0...v2.268.0) ##### ⚠ BREAKING CHANGES L1 resources are automatically generated from public CloudFormation Resource Schemas. They are built to closely reflect the real state of CloudFormation. Sometimes these updates can contain changes that are incompatible with previous types, but more accurately reflect reality. In this release we have changed: - **aws-athena:** `AWS::Athena::Session` removed. - **aws-bcmdataexports:** `AWS::BCMDataExports::Table` removed. - **aws-bedrock:** `AWS::Bedrock::DefaultPromptRouter` and `AWS::Bedrock::ModelInvocationJob` removed. - **aws-bedrockagentcore:** `AWS::BedrockAgentCore::Browser`, `AWS::BedrockAgentCore::CodeInterpreter`, and `AWS::BedrockAgentCore::TokenVault` removed; `AWS::BedrockAgentCore::PaymentConnector` `ConnectorType` and `AWS::BedrockAgentCore::PaymentCredentialProvider` `CredentialProviderVendor` are now immutable; `AWS::BedrockAgentCore::CapacityProvider` `OperatingSystem` allowed values in the `LaunchParameters` type reduced from \[`LINUX_X86_64`, `LINUX_ARM64`, `MAC_ARM64`, `WINDOWS_X86_64`] to \[`LINUX_X86_64`, `LINUX_ARM64`]. - **aws-certificatemanager:** `AWS::CertificateManager::Certificate` `Id` attribute removed. - **aws-chime:** on both `AWS::Chime::AppInstance` and `AWS::Chime::AppInstanceBot`, the `CreatedTimestamp` and `LastUpdatedTimestamp` attribute types changed from `number` to `string`. - **aws-cloudformation:** `AWS::CloudFormation::ResourceScan` removed. - **aws-codeartifact:** `AWS::CodeArtifact::Package` removed. - **aws-codebuild:** `AWS::CodeBuild::Sandbox` removed; `AWS::CodeBuild::SourceCredential` `Id` attribute removed. - **aws-dax:** `AWS::DAX::ParameterGroup` `Id` attribute removed; `Description` property is now immutable. - **aws-dms:** `Id` attribute removed from `AWS::DMS::Endpoint`, `AWS::DMS::EventSubscription`, and `AWS::DMS::ReplicationSubnetGroup`; `AWS::DMS::ReplicationTask` `MigrationType` property is now immutable. - **aws-docdb:** `Id` attribute removed from `AWS::DocDB::DBClusterParameterGroup` and `AWS::DocDB::DBSubnetGroup`. - **aws-dynamodb:** `AWS::DynamoDB::Export` removed. - **aws-elasticache:** `AWS::ElastiCache::ReservedCacheNode` removed. - **aws-emr:** `AWS::EMR::NotebookExecution` removed. - **aws-events:** `AWS::Events::Replay` removed. - **aws-fis:** `AWS::FIS::SafetyLever` removed. - **aws-glue:** - `Id` attribute removed from `AWS::Glue::Classifier`, `AWS::Glue::Connection`, `AWS::Glue::CustomEntityType`, `AWS::Glue::DataQualityRuleset`, `AWS::Glue::MLTransform`, `AWS::Glue::SecurityConfiguration`, `AWS::Glue::TableOptimizer`, and `AWS::Glue::Workflow`. - `AWS::Glue::Connection`: complex-property types `AuthenticationConfigurationInput` and `OAuth2PropertiesInput` renamed to `AuthenticationConfiguration` and `OAuth2Properties` respectively. - `AWS::Glue::DataQualityRuleset`: `Name`, `TargetTable.DatabaseName`, and `TargetTable.TableName` properties are now required; `Name` property is now immutable; `Tags` property type changed from `json` to `map<string>`. - `AWS::Glue::CustomEntityType`: `Name` property is now immutable; `Tags` property is no longer recognised as resource tags. - `AWS::Glue::MLTransform`: `TransformEncryption` property is now immutable. - **aws-greengrassv2:** `AWS::GreengrassV2::Component` and `AWS::GreengrassV2::CoreDevice` removed. - **aws-identitystore:** `AWS::IdentityStore::AllGroupMemberships` removed. - **aws-imagebuilder:** `AWS::ImageBuilder::AllImageBuildVersions`, `AWS::ImageBuilder::AllWorkflowBuildVersions`, `AWS::ImageBuilder::WorkflowExecution`, and `AWS::ImageBuilder::WorkflowStepExecution` removed. - **aws-medialive:** `AWS::MediaLive::Offering` removed. - **aws-mediaconvert:** `AWS::MediaConvert::Preset` `Id` attribute removed. - **aws-mediapackage:** `AWS::MediaPackage::HarvestJob` removed. - **aws-memorydb:** `AWS::MemoryDB::MultiRegionParameterGroup` and `AWS::MemoryDB::ReservedNode` removed. - **aws-omics:** `AWS::Omics::Reference` removed. - **aws-osis:** `AWS::OSIS::PipelineBlueprint` removed. - **aws-personalize:** `AWS::Personalize::DataDeletionJob` and `AWS::Personalize::Recipe` removed. - **aws-redshiftserverless:** `AWS::RedshiftServerless::RecoveryPoint` removed. - **aws-route53:** `AWS::Route53::RecordSet` `GeoProximityLocation` property removed, along with its supporting `GeoProximityLocation` and `Coordinates` complex-property types; `Id` attribute removed. - **aws-sagemaker:** `AWS::SageMaker::ModelCardExportJob`, `AWS::SageMaker::MonitoringScheduleAlert`, and `AWS::SageMaker::TransformJob` removed. - **aws-ses:** `AWS::SES::ReceiptRuleSet` `Id` attribute removed. - **aws-signer:** `AWS::Signer::SigningJob` removed. - **aws-ssm:** `AWS::SSM::Session` removed; `AWS::SSM::Association` `InstanceId` property is now immutable. - **aws-sso:** `AWS::SSO::ApplicationProvider` removed. - **aws-stepfunctions:** `AWS::StepFunctions::MapRun` removed. - **aws-transcribe:** `AWS::Transcribe::MedicalTranscriptionJob` removed. - **aws-vpclattice:** `AWS::VpcLattice::ServiceNetwork` `SharingConfig` property is now immutable. ##### Features - update L1 CloudFormation resource definitions ([#&#8203;38732](https://github.com/aws/aws-cdk/issues/38732)) ([53fdc99](https://github.com/aws/aws-cdk/commit/53fdc99b368d5dcbfd6a27a51ee8b7897ed3f1d3)) - **codebuild:** add Node.js 24 Lambda build image constants ([#&#8203;38471](https://github.com/aws/aws-cdk/issues/38471)) ([41ca888](https://github.com/aws/aws-cdk/commit/41ca8888b90b1ff672a99cae32dcec8456a98c20)), closes [#&#8203;38172](https://github.com/aws/aws-cdk/issues/38172) [#&#8203;34197](https://github.com/aws/aws-cdk/issues/34197) - **ec2:** support CpuOptions on LaunchTemplate ([#&#8203;38193](https://github.com/aws/aws-cdk/issues/38193)) ([b0f7d9c](https://github.com/aws/aws-cdk/commit/b0f7d9c1573b68bf8a6ce1ae705037d3aa3691b2)), closes [#&#8203;38187](https://github.com/aws/aws-cdk/issues/38187) - **medialive:** new AWS Elemental MediaLive L2 Construct with integration on MediaConnect L2 alpha ([#&#8203;38563](https://github.com/aws/aws-cdk/issues/38563)) ([730b2ee](https://github.com/aws/aws-cdk/commit/730b2eec628fc22a08e4f95fcec5cf354e4e0688)) - update L1 CloudFormation resource definitions ([#&#8203;38645](https://github.com/aws/aws-cdk/issues/38645)) ([e238f54](https://github.com/aws/aws-cdk/commit/e238f5475418307cce0170f8860de863d9f01a7f)) - update L1 CloudFormation resource definitions ([#&#8203;38693](https://github.com/aws/aws-cdk/issues/38693)) ([51234fd](https://github.com/aws/aws-cdk/commit/51234fd77da6b54a8b5a439c846bb67ec4efa9dc)) - **s3-deployment:** run the deployment handler on arm64 (Graviton) ([#&#8203;37174](https://github.com/aws/aws-cdk/issues/37174)) ([c2df7a3](https://github.com/aws/aws-cdk/commit/c2df7a3bb5233952ad55ea1763920b8a0385fd32)), closes [#&#8203;29996](https://github.com/aws/aws-cdk/issues/29996) ##### Bug Fixes - **core:** ignored external symlinks throw validation error ([#&#8203;38679](https://github.com/aws/aws-cdk/issues/38679)) ([8fd1ef6](https://github.com/aws/aws-cdk/commit/8fd1ef68c45418680a85987e00c6a1ea85701b27)) - **core:** templates are not checked for circular dependencies ([#&#8203;38712](https://github.com/aws/aws-cdk/issues/38712)) ([688b0c1](https://github.com/aws/aws-cdk/commit/688b0c104a8d8a2e76f2c52c08725d0e79ac637a)) - **core:** upgrade CloudFormation validation to latest version ([#&#8203;38668](https://github.com/aws/aws-cdk/issues/38668)) ([d5df2ee](https://github.com/aws/aws-cdk/commit/d5df2ee5a1d856efaf11d07ca508bface1cf0423)) - **eks-v2:** generate and export L1 constructs from aws-eks-v2 ([#&#8203;37640](https://github.com/aws/aws-cdk/issues/37640)) ([ecdafa9](https://github.com/aws/aws-cdk/commit/ecdafa9f8b893d4a6c0109bd5ec65a08a07d7d96)), closes [#&#8203;37563](https://github.com/aws/aws-cdk/issues/37563) [#&#8203;37350](https://github.com/aws/aws-cdk/issues/37350) [#&#8203;37350](https://github.com/aws/aws-cdk/issues/37350) - **s3-deployment:** replace deprecated addDependency in integ test ([#&#8203;38684](https://github.com/aws/aws-cdk/issues/38684)) ([43c4921](https://github.com/aws/aws-cdk/commit/43c492160592721d63c2a42fd012c2689f868bb7)) *** #### Alpha modules (2.268.0-alpha.0) ##### ⚠ BREAKING CHANGES - **glue-alpha:** `DataQualityTargetTable`'s constructor is removed — use `DataQualityTargetTable.fromTable(database, table)` or `fromTableName(database, tableName)`; `IDatabase` now extends `IDatabaseRef`. - **glue-alpha**: `DataQualityRulesetProps.clientToken` is removed; use the `CfnDataQualityRuleset` L1 for request-level idempotency. - **glue-alpha:** S3Table.clientSideEncryptionKey is now kms.IKeyRef instead of kms.IKey. - **glue-alpha:** `DataQualityRulesetProps.rulesetName` is now required. `AWS::Glue::DataQualityRuleset` made `Name` a required property, so the name can no longer be left for CloudFormation to generate. ##### Features - **glue-alpha:** reference-typed DataQualityTargetTable and remove clientToken ([#&#8203;38730](https://github.com/aws/aws-cdk/issues/38730)) ([c8fafbd](https://github.com/aws/aws-cdk/commit/c8fafbddbf651176f02f7d9b6cc8a8707a959339)) ##### Code Refactoring - **glue-alpha:** use kms.IKeyRef for KMS key inputs where possible ([#&#8203;38725](https://github.com/aws/aws-cdk/issues/38725)) ([604ac23](https://github.com/aws/aws-cdk/commit/604ac236ed6d80d3f2fc03f7882414ed61ab8f3a)) ### [`v2.267.0`](https://github.com/aws/aws-cdk/releases/tag/v2.267.0) [Compare Source](https://github.com/aws/aws-cdk/compare/v2.266.0...v2.267.0) ##### ⚠ BREAKING CHANGES - **kinesisfirehose:** After this change, specifying an unsupported `timeZone` on the Firehose `S3Bucket` destination now throws a `ValidationError` during synthesis instead of failing at CloudFormation deployment. Affected values: 3-letter IANA abbreviations (e.g. `EST`), `Etc/UTC`, `Etc/GMT`, `Factory`, and strings containing characters outside `[a-zA-Z/_]+`. Use a supported standard IANA identifier (e.g. `America/New_York`) or `UTC` for synth to pass. ##### Features - **backup:** add indexActions prop to BackupPlanRule ([#&#8203;34051](https://github.com/aws/aws-cdk/issues/34051)) ([b8be853](https://github.com/aws/aws-cdk/commit/b8be853177df0d959662825c0c007bfc54f26171)), closes [#&#8203;34050](https://github.com/aws/aws-cdk/issues/34050) - **bedrockagentcore:** add manageDeliveryResourcePolicy opt-out for runtime observability ([#&#8203;38372](https://github.com/aws/aws-cdk/issues/38372)) ([5fb086b](https://github.com/aws/aws-cdk/commit/5fb086b20d8b26a202141593fd5d17264239aaba)), closes [#&#8203;38342](https://github.com/aws/aws-cdk/issues/38342) - **ci:** integration test deployment on maintainer approval ([#&#8203;38519](https://github.com/aws/aws-cdk/issues/38519)) ([c5f6b4f](https://github.com/aws/aws-cdk/commit/c5f6b4f1040559dd96ef0930e129f51c18debfbf)), closes [#&#8203;37333](https://github.com/aws/aws-cdk/issues/37333) - **core:** `Size` objects now properly stringify ([#&#8203;38662](https://github.com/aws/aws-cdk/issues/38662)) ([90fe151](https://github.com/aws/aws-cdk/commit/90fe1519489592b23b9329c99a3870d5368e1a1f)) - **sqs:** metricApproximateNumberOfMessagesOutstanding ([#&#8203;38661](https://github.com/aws/aws-cdk/issues/38661)) ([f29b27b](https://github.com/aws/aws-cdk/commit/f29b27bc52913f6252050d91d56bf9c311471a3b)) ##### Bug Fixes - **assets:** `SymlinkFollowMode.BLOCK_EXTERNAL` will throw errors while bundling ([#&#8203;38506](https://github.com/aws/aws-cdk/issues/38506)) ([a11e451](https://github.com/aws/aws-cdk/commit/a11e451ba1af395bff88344eb4bec2ea730b1a80)) - **bedrockagentcore:** least-privilege browser recording S3 grant ([#&#8203;38604](https://github.com/aws/aws-cdk/issues/38604)) ([7e11d11](https://github.com/aws/aws-cdk/commit/7e11d11e3a22ddbf8d82ed7cf7265c76ce63d868)) - **ci:** add environment for Atmosphere variables access ([#&#8203;38625](https://github.com/aws/aws-cdk/issues/38625)) ([785773e](https://github.com/aws/aws-cdk/commit/785773e65997a457ed52a3babbb2b18ee5a40319)), closes [#&#8203;38519](https://github.com/aws/aws-cdk/issues/38519) - **cloudfront-origins:** readTimeout and keepaliveTimeout reject valid values ([#&#8203;38432](https://github.com/aws/aws-cdk/issues/38432)) ([6251e1a](https://github.com/aws/aws-cdk/commit/6251e1ab798fbfd6b45de1d9a97672eef02aa9d9)), closes [#&#8203;38433](https://github.com/aws/aws-cdk/issues/38433) [#&#8203;18628](https://github.com/aws/aws-cdk/issues/18628) - **core:** performance counters use too much memory ([#&#8203;38620](https://github.com/aws/aws-cdk/issues/38620)) ([d0ce23c](https://github.com/aws/aws-cdk/commit/d0ce23c77b0379fcc522dfa99675e7d44311aabd)) - **core:** single file bundled output should be file ([#&#8203;38548](https://github.com/aws/aws-cdk/issues/38548)) ([9e22774](https://github.com/aws/aws-cdk/commit/9e227740eb70d287158a7ea9382ff597281cf1ac)) - **core:** stack.node.addDependency gets slower as stacks grow ([#&#8203;38597](https://github.com/aws/aws-cdk/issues/38597)) ([2ab9be4](https://github.com/aws/aws-cdk/commit/2ab9be40f2b3245d2c73f2b897441af4b5fef96c)), closes [#&#8203;38522](https://github.com/aws/aws-cdk/issues/38522) - **core:** symlinks in directory bundling output ([#&#8203;38665](https://github.com/aws/aws-cdk/issues/38665)) ([8d8ae2c](https://github.com/aws/aws-cdk/commit/8d8ae2c68c0af4d7773017f18e50546ae1fca8ad)) - **core:** validation plugin check adds too much overhead ([#&#8203;38619](https://github.com/aws/aws-cdk/issues/38619)) ([df15b9f](https://github.com/aws/aws-cdk/commit/df15b9f37bb0b424b14e063d6f96b21ea2819740)) - **dynamodb:** `TableV2.grants.*Data` does not include index resources ([#&#8203;37892](https://github.com/aws/aws-cdk/issues/37892)) ([e48a97f](https://github.com/aws/aws-cdk/commit/e48a97f53d08e3cb3f5081dda189c9718dd86c01)), closes [#&#8203;37569](https://github.com/aws/aws-cdk/issues/37569) - **dynamodb:** `TableV2MultiAccountReplica` rejects imported tables with tokenized ARNs ([#&#8203;38365](https://github.com/aws/aws-cdk/issues/38365)) ([08f05e5](https://github.com/aws/aws-cdk/commit/08f05e514675273618a2549e328dd38efab828ec)), closes [#&#8203;38354](https://github.com/aws/aws-cdk/issues/38354) - **dynamodb:** avoid TableGrantsProps deprecation warnings for TableV2 ([#&#8203;38399](https://github.com/aws/aws-cdk/issues/38399)) ([fb5c25b](https://github.com/aws/aws-cdk/commit/fb5c25bfdb972d2a279ef09025c07f83e5191254)), closes [#&#8203;37221](https://github.com/aws/aws-cdk/issues/37221) - **ec2:** `NatInstanceProvider` and `NatInstanceProviderV2` always trigger the keyName deprecation warning ([#&#8203;38347](https://github.com/aws/aws-cdk/issues/38347)) ([47f2151](https://github.com/aws/aws-cdk/commit/47f215178314d7383fa8c4de0178ffe7e7c507cf)), closes [#&#8203;30806](https://github.com/aws/aws-cdk/issues/30806) - **kinesisfirehose:** add validation for customTimeZone in S3BucketProps ([#&#8203;38514](https://github.com/aws/aws-cdk/issues/38514)) ([8cf9f90](https://github.com/aws/aws-cdk/commit/8cf9f90806febef5a31e272832b9af21de443842)), closes [#&#8203;36089](https://github.com/aws/aws-cdk/issues/36089) - **lambda:** allow SnapStart for container image functions ([#&#8203;38680](https://github.com/aws/aws-cdk/issues/38680)) ([a5adc00](https://github.com/aws/aws-cdk/commit/a5adc00abb30f6a48516c15615efda1b1b698ebf)), closes [#&#8203;38281](https://github.com/aws/aws-cdk/issues/38281) [#&#8203;38281](https://github.com/aws/aws-cdk/issues/38281) [#&#8203;38265](https://github.com/aws/aws-cdk/issues/38265) - **rds:** serverlessV2 capacity props reject tokens at synth time ([#&#8203;38044](https://github.com/aws/aws-cdk/issues/38044)) ([b7880de](https://github.com/aws/aws-cdk/commit/b7880de25ab26db3e37bf6b2aaf8d4b2dbe5d745)), closes [#&#8203;38043](https://github.com/aws/aws-cdk/issues/38043) [#&#8203;9044](https://github.com/aws/aws-cdk/issues/9044) [#&#8203;31810](https://github.com/aws/aws-cdk/issues/31810) [#&#8203;32905](https://github.com/aws/aws-cdk/issues/32905) - **s3-deployment:** increase default memory limit from 128MB to 1024MB ([#&#8203;35501](https://github.com/aws/aws-cdk/issues/35501)) ([7a04f32](https://github.com/aws/aws-cdk/commit/7a04f32d9498069012b825171dbed85dd861767a)), closes [#&#8203;35487](https://github.com/aws/aws-cdk/issues/35487) - **stepfunctions-tasks:** resolve EvaluateExpression paths via a values lookup ([#&#8203;38682](https://github.com/aws/aws-cdk/issues/38682)) ([02301ea](https://github.com/aws/aws-cdk/commit/02301eaeac9764af6040d7892f684e7728ab01d2)) - stack.availabilityZones are not stable strings ([#&#8203;38580](https://github.com/aws/aws-cdk/issues/38580)) ([f89474a](https://github.com/aws/aws-cdk/commit/f89474a338fe212886306e307d188190463c5824)) *** #### Alpha modules (2.267.0-alpha.0) ##### ⚠ BREAKING CHANGES - **glue-alpha:** schema `Type` is now an opaque class; construct column types via the `Schema` factories or `Schema.custom(...)` rather than `{ isPrimitive, inputString }` literals. `StorageParameter.custom(key, value)` requires a `string` value, and `StorageParameter.writeKmsKeyId` takes a `kms.IKey` instead of a string. - **glue-alpha:** `S3TableProps.bucket`/`encryption`/`encryptionKey` are removed. Use `storage: S3TableStorage.managedBucket(S3TableEncryption.kms(key?))` / `S3TableStorage.fromBucket(bucket)` and `clientSideEncryption: TableClientSideEncryption.kms(key?)`. `S3Table.encryption`/`encryptionKey` are removed (`clientSideEncryptionKey` exposes the client-side key; read `bucket.encryptionKey` for server-side). The `TableEncryption` enum and the deprecated `Table`/`TableProps` are removed — use `S3Table`. ##### Features - **glue-alpha:** add a typed secret input to Connection ([#&#8203;38585](https://github.com/aws/aws-cdk/issues/38585)) ([ede4a1c](https://github.com/aws/aws-cdk/commit/ede4a1c730af62df4df4b58496cdc37668ca3ad5)) - **glue-alpha:** add subnet selection to `Connection` ([#&#8203;38561](https://github.com/aws/aws-cdk/issues/38561)) ([f9d7eac](https://github.com/aws/aws-cdk/commit/f9d7eaca850773a16deb39cd2a2a789bb898264a)) - **glue-alpha:** model S3Table storage/encryption as value objects ([#&#8203;38591](https://github.com/aws/aws-cdk/issues/38591)) ([9990e16](https://github.com/aws/aws-cdk/commit/9990e16da78f19ce3bd5a015c3b67c31bbaf2881)) - **glue-alpha:** opaque Schema Type with Schema.custom, and stronger StorageParameter types ([#&#8203;38592](https://github.com/aws/aws-cdk/issues/38592)) ([5c45eb0](https://github.com/aws/aws-cdk/commit/5c45eb0ae65cc0f0bfe4fd6d248b62bd4c398868)) - **msk-alpha:** support Kafka 4.2 ([#&#8203;38323](https://github.com/aws/aws-cdk/issues/38323)) ([97b181c](https://github.com/aws/aws-cdk/commit/97b181c58367e38bced08c031c5d0bbeb98dd84b)) - **s3tables-alpha:** add storage class configuration support ([#&#8203;37339](https://github.com/aws/aws-cdk/issues/37339)) ([63ccf6d](https://github.com/aws/aws-cdk/commit/63ccf6d0248b353dc240c91a907d9ff27487b92d)) ##### Bug Fixes - **glue-alpha:** validate that DATE partition projection interval is set when required ([#&#8203;38594](https://github.com/aws/aws-cdk/issues/38594)) ([0e2b582](https://github.com/aws/aws-cdk/commit/0e2b582af1c5ac478e36cccc55523873302bf866)) - **lambda-python-alpha:** escape Docker bundling command arguments ([#&#8203;38583](https://github.com/aws/aws-cdk/issues/38583)) ([f7ce07b](https://github.com/aws/aws-cdk/commit/f7ce07beb41b7fd0214a647b5a009f8706339105)) ### [`v2.266.0`](https://github.com/aws/aws-cdk/releases/tag/v2.266.0) [Compare Source](https://github.com/aws/aws-cdk/compare/v2.265.0...v2.266.0) ##### Features - adding controlPlaneScalingConfig to Cluster ([#&#8203;36863](https://github.com/aws/aws-cdk/issues/36863)) ([94e5c1a](https://github.com/aws/aws-cdk/commit/94e5c1a64427374423e88c0b727fd19aa41a192c)) - update L1 CloudFormation resource definitions ([#&#8203;38578](https://github.com/aws/aws-cdk/issues/38578)) ([ccd2633](https://github.com/aws/aws-cdk/commit/ccd263359fd9a4f8725d2e3285d8a9641711cabb)) ##### Bug Fixes - **ec2:** add DependsOn VPCGatewayAttachment to IPv6 default route ([#&#8203;37893](https://github.com/aws/aws-cdk/issues/37893)) ([ab272bc](https://github.com/aws/aws-cdk/commit/ab272bc8b12614a37caa9c0679bc0c6b4163d352)), closes [#&#8203;37853](https://github.com/aws/aws-cdk/issues/37853) - **sns-subscriptions:** use regionalized service principal for opt-in region SQS subscriptions ([#&#8203;38339](https://github.com/aws/aws-cdk/issues/38339)) ([67a7eb1](https://github.com/aws/aws-cdk/commit/67a7eb1f104eea969a6539f074c7e0d282b92f59)), closes [#&#8203;32526](https://github.com/aws/aws-cdk/issues/32526) *** #### Alpha modules (2.266.0-alpha.0) ##### ⚠ BREAKING CHANGES - **glue-alpha:** `DataQualityRulesetProps.rulesetDqdl: string` is replaced by `dqdl: Dqdl`. Build it with `Dqdl.fromString('Rules = [ ... ]')`. - **glue-alpha:** `s3Encryption`, `cloudWatchEncryption`, and `jobBookmarksEncryption` are no longer object literals. Use `S3Encryption.s3Managed()` / `S3Encryption.kms(key?)`, `CloudWatchEncryption.kms(key?)`, and `JobBookmarksEncryption.clientSideKms(key?)`. The `CloudWatchEncryptionMode` and `JobBookmarksEncryptionMode` enums are removed (their mode is now implicit); `S3EncryptionMode` is retained. - **glue-alpha:** this is a corrective breaking change. Apps that leaned on the bug, and did things like `InputFormat x = OutputFormat.AVRO;` will get a compilation error in other jsii languages. The intended usage, on the other hand, was broken before and works now. - **glue-alpha:** `workerType` and `numberOfWorkers` are no longer top-level job props. For Spark jobs, pass them together via `workerConfiguration: { workerType, numberOfWorkers }`. `PythonShellJob` no longer accepts them (it is sized by `maxCapacity`). `RayJob` no longer accepts `workerType` (it is fixed to `Z.2X`). - **glue-alpha:** `SparkJobProps.enableMetrics` removed, which will cause a compilation error for any app using it. But there is no behavior change, since this is a dead prop. - **glue-alpha:** a differing/tokenized `has_encrypted_data` supplied via `parameters` now throws. ##### Features - **glue-alpha:** add warning for maxRetries when job run queuing is enabled ([#&#8203;38575](https://github.com/aws/aws-cdk/issues/38575)) ([09ae11e](https://github.com/aws/aws-cdk/commit/09ae11e81d44bd58059ac337d3c418254a6955a7)) - **glue-alpha:** model SecurityConfiguration encryption as factory subtypes ([#&#8203;38586](https://github.com/aws/aws-cdk/issues/38586)) ([e37e7a6](https://github.com/aws/aws-cdk/commit/e37e7a6ea3d525ca0b4048093416eac059272cdf)) - **glue-alpha:** new `hasEncryptedData` property ([#&#8203;38511](https://github.com/aws/aws-cdk/issues/38511)) ([c977e36](https://github.com/aws/aws-cdk/commit/c977e36c3aa43c0be3d043aef80775d9748477a6)) - **glue-alpha:** pair workerType and numberOfWorkers into a required workerConfiguration ([#&#8203;38576](https://github.com/aws/aws-cdk/issues/38576)) ([5f3b1b6](https://github.com/aws/aws-cdk/commit/5f3b1b6f3aa700d73fbc10c956ae53809af99047)) - **glue-alpha:** wrap DataQualityRuleset DQDL in a typed value object ([#&#8203;38587](https://github.com/aws/aws-cdk/issues/38587)) ([fd01268](https://github.com/aws/aws-cdk/commit/fd012680b1cff1905ad114082fc612ad7fb8992e)) ##### Bug Fixes - **glue-alpha:** correct OutputFormat.AVRO/ORC type and tidy GA-hygiene items ([#&#8203;38593](https://github.com/aws/aws-cdk/issues/38593)) ([35aefaf](https://github.com/aws/aws-cdk/commit/35aefaf5a72b89eda630de8cae38a1ed9c4c95ce)) - **glue-alpha:** omit comments from struct type strings ([#&#8203;38008](https://github.com/aws/aws-cdk/issues/38008)) ([5f16a86](https://github.com/aws/aws-cdk/commit/5f16a86dc8edefdb223260f8202acd272d43e643)), closes [#&#8203;26935](https://github.com/aws/aws-cdk/issues/26935) - **mediapackagev2-alpha:** add GetChannel grant on MediaPackageV2 ([#&#8203;38582](https://github.com/aws/aws-cdk/issues/38582)) ([74d922c](https://github.com/aws/aws-cdk/commit/74d922c4bf22fde05465f61c5dd19291b9db608f)), closes [#&#8203;38581](https://github.com/aws/aws-cdk/issues/38581) ### [`v2.265.0`](https://github.com/aws/aws-cdk/releases/tag/v2.265.0) [Compare Source](https://github.com/aws/aws-cdk/compare/v2.264.0...v2.265.0) ##### Features - **bedrock-agentcore:** add StreamDeliveryResources support to Memory L2 Construct ([#&#8203;37527](https://github.com/aws/aws-cdk/issues/37527)) ([817c50b](https://github.com/aws/aws-cdk/commit/817c50bd4169d2fd5ed4ca49c2ae1c9d94e5b76e)) - **cloudwatch:** support AT_LEAST expression for composite alarm rules ([#&#8203;37693](https://github.com/aws/aws-cdk/issues/37693)) ([974e43b](https://github.com/aws/aws-cdk/commit/974e43b2db796da073cc2a16b97fe8e17804b78f)), closes [#&#8203;37692](https://github.com/aws/aws-cdk/issues/37692) [#&#8203;36100](https://github.com/aws/aws-cdk/issues/36100) - **docdb:** add managed password support ([#&#8203;35711](https://github.com/aws/aws-cdk/issues/35711)) ([fcf54bf](https://github.com/aws/aws-cdk/commit/fcf54bf2aa9b011e226e830b51870ad3bb44a1b8)) - **ec2:** add ipAddressType and dnsRecordIpType to GatewayVpcEndpoint ([#&#8203;37900](https://github.com/aws/aws-cdk/issues/37900)) ([000f532](https://github.com/aws/aws-cdk/commit/000f5328c275a43da13de5df594b1bdd878abfca)), closes [#&#8203;37883](https://github.com/aws/aws-cdk/issues/37883) - **ec2:** add volume initialization rate to ebs props for launchtemplate ([#&#8203;36451](https://github.com/aws/aws-cdk/issues/36451)) ([da4281e](https://github.com/aws/aws-cdk/commit/da4281edc0956ef474dc4fc05d843e32fb67b1b8)), closes [#&#8203;36374](https://github.com/aws/aws-cdk/issues/36374) - **kinesisfirehose:** add HTTP Endpoint and Datadog destination ([#&#8203;33657](https://github.com/aws/aws-cdk/issues/33657)) ([4c47171](https://github.com/aws/aws-cdk/commit/4c471712d2d5c74b923c7f5c2c1d69c9f329a1ae)), closes [#&#8203;20354](https://github.com/aws/aws-cdk/issues/20354) [#&#8203;15502](https://github.com/aws/aws-cdk/issues/15502) ##### Bug Fixes - **cloudwatch:** make concrete widgets assignable to widget interface ([#&#8203;37695](https://github.com/aws/aws-cdk/issues/37695)) ([e322035](https://github.com/aws/aws-cdk/commit/e322035e259629275523b6f8b42ab66416b6a1e6)), closes [#&#8203;37600](https://github.com/aws/aws-cdk/issues/37600) - **core:** `cdk validate` can hang indefinitely ([#&#8203;38510](https://github.com/aws/aws-cdk/issues/38510)) ([0a238f3](https://github.com/aws/aws-cdk/commit/0a238f319359946e3c7dc2cec8d3a12b8e4b8773)), closes [#&#8203;38498](https://github.com/aws/aws-cdk/issues/38498) [#&#8203;38425](https://github.com/aws/aws-cdk/issues/38425) - **secretsmanager:** correct SAR rotation app versions for GovCloud ([#&#8203;38462](https://github.com/aws/aws-cdk/issues/38462)) ([a29b5c0](https://github.com/aws/aws-cdk/commit/a29b5c034cf5e5af571a6355d8027419c2426b35)) - bump brace-expansion to 5.0.9 to address CVE-2026-69152 ([#&#8203;38520](https://github.com/aws/aws-cdk/issues/38520)) ([8764b7b](https://github.com/aws/aws-cdk/commit/8764b7b7d54384d9bbea54877aaf9cf63087b926)), closes [#&#8203;38496](https://github.com/aws/aws-cdk/issues/38496) [#&#8203;38410](https://github.com/aws/aws-cdk/issues/38410) *** #### Alpha modules (2.265.0-alpha.0) ##### ⚠ BREAKING CHANGES - **glue-alpha:** PySparkFlexEtlJob and ScalaSparkFlexEtlJob now default to `GlueVersion.V5_0` instead of `V3_0`. Set `glueVersion` explicitly to keep the previous behavior. - **glue-alpha:** removal policy of existing `Database` resources will change to `RETAIN`. ##### Features - **glue-alpha:** default Flex jobs to Glue 5.0 ([#&#8203;38543](https://github.com/aws/aws-cdk/issues/38543)) ([36d4976](https://github.com/aws/aws-cdk/commit/36d4976e9d6575debcf68b5e666a5920d53f69ab)) - **glue-alpha:** removal policy is RETAIN for `Database` by default ([#&#8203;38535](https://github.com/aws/aws-cdk/issues/38535)) ([9669928](https://github.com/aws/aws-cdk/commit/9669928f7837798e3e7169bea55c3907ce16f440)) - **glue-alpha:** warn on plaintext secrets ([#&#8203;38538](https://github.com/aws/aws-cdk/issues/38538)) ([10bf0b5](https://github.com/aws/aws-cdk/commit/10bf0b596a06399271712987b0857df513b69ad5)) ##### Bug Fixes - **glue-alpha:** warn when S3Table grants cover a shared bucket ([#&#8203;38542](https://github.com/aws/aws-cdk/issues/38542)) ([d81d2d6](https://github.com/aws/aws-cdk/commit/d81d2d63613b5118ae3c7cc4c82b26aac2fd69f4)) - **mediaconnect-alpha:** update validation to allow adding an underscore to name ([#&#8203;38539](https://github.com/aws/aws-cdk/issues/38539)) ([7c85994](https://github.com/aws/aws-cdk/commit/7c85994cd1ee59204341ad7510124eafabe1eb6f)) ### [`v2.264.0`](https://github.com/aws/aws-cdk/releases/tag/v2.264.0) [Compare Source](https://github.com/aws/aws-cdk/compare/v2.263.0...v2.264.0) ##### ⚠ BREAKING CHANGES - **bedrockagentcore:** `Gateway` metric helpers now emit corrected CloudWatch dimensions per-gateway metrics use `{ Operation, Protocol, Resource }` (was `{ Resource }`). Alarms/dashboards built on the old dimensions must be updated. - **bedrockagentcore:** `RuntimeBase` metric helpers now emit corrected CloudWatch dimensions per-resource metrics use `{ Operation, Name, Resource }` (was `{ Resource }`) and aggregated metrics use `{ AggregateOperation }` (was `{ Resource: 'All' }`). Alarms/dashboards built on the old dimensions must be updated. ##### Features - update L1 CloudFormation resource definitions ([#&#8203;38526](https://github.com/aws/aws-cdk/issues/38526)) ([b5693cb](https://github.com/aws/aws-cdk/commit/b5693cbaea1e54ab027d18ca09c2c154dfc1fef1)) - **cloudwatch:** support alarm mute rules ([#&#8203;37504](https://github.com/aws/aws-cdk/issues/37504)) ([c3540bb](https://github.com/aws/aws-cdk/commit/c3540bbe3fc10467be331c82494abe46ecfd61fd)), closes [#&#8203;37502](https://github.com/aws/aws-cdk/issues/37502) - update L1 CloudFormation resource definitions ([#&#8203;38479](https://github.com/aws/aws-cdk/issues/38479)) ([279340d](https://github.com/aws/aws-cdk/commit/279340df42d2a9e5609b2f441eb341252448ed24)) ##### Bug Fixes - **bedrockagentcore:** gateway metrics emit correct CloudWatch dimension ([#&#8203;38487](https://github.com/aws/aws-cdk/issues/38487)) ([5a7d360](https://github.com/aws/aws-cdk/commit/5a7d360215479b345759a0aed77e003c9d2b5cbe)) - **bedrockagentcore:** runtime metrics emit correct CloudWatch dimensions ([#&#8203;38486](https://github.com/aws/aws-cdk/issues/38486)) ([4e44f24](https://github.com/aws/aws-cdk/commit/4e44f244f9079527923ee079f1dca9d3c5f01679)) - **cloudfront:** warn when minimumProtocolVersion is set without a certificate ([#&#8203;37250](https://github.com/aws/aws-cdk/issues/37250)) ([52ec5f7](https://github.com/aws/aws-cdk/commit/52ec5f76f1fd2cc3fa39f29a67cc32dc95074a03)), closes [#&#8203;35404](https://github.com/aws/aws-cdk/issues/35404) - **ec2:** allow EBS gp3 and io2 volumes up to 64 TiB ([#&#8203;37049](https://github.com/aws/aws-cdk/issues/37049)) ([10711ba](https://github.com/aws/aws-cdk/commit/10711bae19a620543d32a6f2d413815bb3f7c485)), closes [#&#8203;37045](https://github.com/aws/aws-cdk/issues/37045) - **stepfunctions-tasks:** call-rest-api `CallApiGatewayRestApiEndpoint` does not support `JsonATA` for api_path ([#&#8203;37738](https://github.com/aws/aws-cdk/issues/37738)) ([9f0afdc](https://github.com/aws/aws-cdk/commit/9f0afdc2ba501862c1097d7ad2938b7563b66c46)), closes [#&#8203;37728](https://github.com/aws/aws-cdk/issues/37728) [/github.com/aws/aws-cdk/blob/e207b76cc2503701b3c4e2c87023617b485b2fde/packages/aws-cdk-lib/aws-stepfunctions/lib/private/jsonata.ts#L1](https://github.com/aws//github.com/aws/aws-cdk/blob/e207b76cc2503701b3c4e2c87023617b485b2fde/packages/aws-cdk-lib/aws-stepfunctions/lib/private/jsonata.ts/issues/L1) *** #### Alpha modules (2.264.0-alpha.0) ##### ⚠ BREAKING CHANGES - **glue-alpha:** `IDatabase.catalogArn` and `IDatabase.catalogId` were removed in factor of a type safe `ICatalog`, which has `catalogArn` and `catalogId`. Consumers and implementations were updated accordingly. ##### Features - **glue-alpha:** new `Catalog` L2 ([#&#8203;38443](https://github.com/aws/aws-cdk/issues/38443)) ([6a8ba8e](https://github.com/aws/aws-cdk/commit/6a8ba8e6597dd73ab2e92ac2dbb688006bbb481b)) - **glue-alpha:** strengthen data encryption for `S3Table` ([#&#8203;38501](https://github.com/aws/aws-cdk/issues/38501)) ([eb81d5e](https://github.com/aws/aws-cdk/commit/eb81d5e68c429d33417a8609ddc1204e39102687)), closes [/docs.aws.amazon.com/securityhub/latest/userguide/s3-controls.html#s3-5](https://github.com/aws//docs.aws.amazon.com/securityhub/latest/userguide/s3-controls.html/issues/s3-5) ##### Bug Fixes - **glue-alpha:** enable key rotation for security configuration encryption ([#&#8203;38512](https://github.com/aws/aws-cdk/issues/38512)) ([18560e0](https://github.com/aws/aws-cdk/commit/18560e001cffa882ac498b363fc3edc047fea118)) - **mediaconnect-alpha:** addOutput options and simplified VPC interface referencing ([#&#8203;38515](https://github.com/aws/aws-cdk/issues/38515)) ([3c71466](https://github.com/aws/aws-cdk/commit/3c7146693547b05e048ac93f60bf6ace845270fc)), closes [#&#8203;38517](https://github.com/aws/aws-cdk/issues/38517) ### [`v2.263.0`](https://github.com/aws/aws-cdk/releases/tag/v2.263.0) [Compare Source](https://github.com/aws/aws-cdk/compare/v2.262.2...v2.263.0) ##### Features - **autoscaling:** add support for AutoScalingInstanceRefresh UpdatePolicy ([#&#8203;38277](https://github.com/aws/aws-cdk/issues/38277)) ([434157f](https://github.com/aws/aws-cdk/commit/434157f1259bfec093996829b0e5e0a1aa47721b)), closes [#&#8203;38276](https://github.com/aws/aws-cdk/issues/38276) - **docdb:** support per-instance maintenance window on DatabaseCluster ([#&#8203;38315](https://github.com/aws/aws-cdk/issues/38315)) ([5390624](https://github.com/aws/aws-cdk/commit/5390624e527abaa8ccca0f8bcdaae3520ce47683)), closes [#&#8203;30391](https://github.com/aws/aws-cdk/issues/30391) - **ecs:** add support for using existing Cloud Map namespaces in ECS clusters ([#&#8203;36812](https://github.com/aws/aws-cdk/issues/36812)) ([bda00bf](https://github.com/aws/aws-cdk/commit/bda00bf12b8fb730c93f236fe0f39e90e18164f1)), closes [#&#8203;26698](https://github.com/aws/aws-cdk/issues/26698) - **eks:** add Provisioned Control Plane support with controlPlaneScalingTier property ([#&#8203;36651](https://github.com/aws/aws-cdk/issues/36651)) ([5ea1054](https://github.com/aws/aws-cdk/commit/5ea1054ebf45c77980bb11093ae1917cf9ce1927)), closes [#&#8203;36650](https://github.com/aws/aws-cdk/issues/36650) - **eks:** add support for Kubernetes version 1.36 ([#&#8203;38441](https://github.com/aws/aws-cdk/issues/38441)) ([da27b6c](https://github.com/aws/aws-cdk/commit/da27b6cab6f2d263cf3f163546281daec22a06f8)), closes [#&#8203;38411](https://github.com/aws/aws-cdk/issues/38411) - **lambda:** add Java8AL2023, Java11AL2023 and Java17AL2023 runtime for Lambda [#&#8203;38418](https://github.com/aws/aws-cdk/issues/38418) ([#&#8203;38419](https://github.com/aws/aws-cdk/issues/38419)) ([1e55176](https://github.com/aws/aws-cdk/commit/1e55176a458afc9f6e653c92b7044b0c5ec9292b)) - **lambda:** add logGroup and systemLogLevel to CapacityProvider ([#&#8203;38183](https://github.com/aws/aws-cdk/issues/38183)) ([61a2e2d](https://github.com/aws/aws-cdk/commit/61a2e2d0caf49874652301c01c293b180baf617f)), closes [#&#8203;38182](https://github.com/aws/aws-cdk/issues/38182) - **lambda:** add PropagateTags to CapacityProvider for tag propagation ([#&#8203;38180](https://github.com/aws/aws-cdk/issues/38180)) ([6f86f97](https://github.com/aws/aws-cdk/commit/6f86f9778b5dbd461962fbcd7e063e10b8582469)), closes [#&#8203;38181](https://github.com/aws/aws-cdk/issues/38181) ##### Bug Fixes - **core:** upgrade cloudformation-validate library ([#&#8203;38444](https://github.com/aws/aws-cdk/issues/38444)) ([d26e507](https://github.com/aws/aws-cdk/commit/d26e5075987e2054bc014048efa36cb1bc07a9c6)), closes [#&#8203;38412](https://github.com/aws/aws-cdk/issues/38412) - bump brace-expansion to 5.0.8 to address CVE-2026-14257 ([#&#8203;38410](https://github.com/aws/aws-cdk/issues/38410)) ([5aaa395](https://github.com/aws/aws-cdk/commit/5aaa3950a2c69dfbd46e7eecc130b5ce5cc72df7)), closes [#&#8203;38409](https://github.com/aws/aws-cdk/issues/38409) [#&#8203;38063](https://github.com/aws/aws-cdk/issues/38063) *** #### Alpha modules (2.263.0-alpha.0) ##### ⚠ BREAKING CHANGES - **mediaconnect:** `removalPolicy` prop removed from `FlowProps`, `GatewayProps`, and `BridgeProps`. These resources now follow CloudFormation's default deletion behaviour (Delete). ##### Bug Fixes - **glue-alpha:** race condition when creating mutiple indices ([#&#8203;38016](https://github.com/aws/aws-cdk/issues/38016)) ([18b1947](https://github.com/aws/aws-cdk/commit/18b1947a9db0e695ec85888faf24939261ffbe30)), closes [#&#8203;24813](https://github.com/aws/aws-cdk/issues/24813) [#&#8203;34](https://github.com/aws/aws-cdk/issues/34) [#&#8203;34](https://github.com/aws/aws-cdk/issues/34) - **mediaconnect:** jsdoc typo ([#&#8203;38434](https://github.com/aws/aws-cdk/issues/38434)) ([7fe6d3d](https://github.com/aws/aws-cdk/commit/7fe6d3df03720b381bb989f289855557f2cd47ac)) - **mediaconnect:** remove default removal policy ([#&#8203;38437](https://github.com/aws/aws-cdk/issues/38437)) ([238193d](https://github.com/aws/aws-cdk/commit/238193de50910ac1da8fb9f31f01776863998989)) ### [`v2.262.2`](https://github.com/aws/aws-cdk/releases/tag/v2.262.2) [Compare Source](https://github.com/aws/aws-cdk/compare/v2.262.1...v2.262.2) ##### Bug Fixes - revert "fix(core): stack.node.addDependency gets slower as stacks grow ([#&#8203;38314](https://github.com/aws/aws-cdk/issues/38314))" ([#&#8203;38417](https://github.com/aws/aws-cdk/issues/38417)) ([d97dd8d](https://github.com/aws/aws-cdk/commit/d97dd8d5aae1bcddee95fc02ba723c1e8157487e)), closes [#&#8203;38406](https://github.com/aws/aws-cdk/issues/38406) [#&#8203;38406](https://github.com/aws/aws-cdk/issues/38406) *** #### Alpha modules (2.262.2-alpha.0) ### [`v2.262.1`](https://github.com/aws/aws-cdk/releases/tag/v2.262.1) [Compare Source](https://github.com/aws/aws-cdk/compare/v2.262.0...v2.262.1) ##### Bug Fixes - **core:** bump `@aws/cloudformation-validate` to 1.5.1-beta to fix install on Node != 22.x ([#&#8203;38382](https://github.com/aws/aws-cdk/issues/38382)) ([d409b96](https://github.com/aws/aws-cdk/commit/d409b96f69adb9423d812c5b761245024e49b8f8)), closes [#&#8203;38380](https://github.com/aws/aws-cdk/issues/38380) - **core:** env CDK_VALIDATION=false does not disable built-in template validation ([#&#8203;38379](https://github.com/aws/aws-cdk/issues/38379)) ([cc4208c](https://github.com/aws/aws-cdk/commit/cc4208cfe42507c35f1330a8a204f50e083dcb64)), closes [#&#8203;38378](https://github.com/aws/aws-cdk/issues/38378) *** #### Alpha modules (2.262.1-alpha.0) ### [`v2.262.0`](https://github.com/aws/aws-cdk/releases/tag/v2.262.0) [Compare Source](https://github.com/aws/aws-cdk/compare/v2.261.0...v2.262.0) ##### Features - **ecs:** add support ECS-optimized Amazon Linux 2023 (Neuron) AMI ([#&#8203;34689](https://github.com/aws/aws-cdk/issues/34689)) ([ad665c4](https://github.com/aws/aws-cdk/commit/ad665c48c4f4183fc862a548e010355677492381)) - **mediaconnect:** l2 construct ([#&#8203;37945](https://github.com/aws/aws-cdk/issues/37945)) ([8e9e001](https://github.com/aws/aws-cdk/commit/8e9e001d3d33b6417b7d330eced3d9e9a26d1927)) - update L1 CloudFormation resource definitions ([#&#8203;38275](https://github.com/aws/aws-cdk/issues/38275)) ([2b1c632](https://github.com/aws/aws-cdk/commit/2b1c632dc2ab754882bdae066555879d8c702944)) - **apigateway:** alb integration ([#&#8203;36247](https://github.com/aws/aws-cdk/issues/36247)) ([20dbdd9](https://github.com/aws/aws-cdk/commit/20dbdd9154c3142c996699f5c0af2bb12fb4cabb)), closes [#&#8203;36184](https://github.com/aws/aws-cdk/issues/36184) - **bedrockagentcore:** support service/region in IAM credential provider for gateway targets ([#&#8203;37697](https://github.com/aws/aws-cdk/issues/37697)) ([08a2543](https://github.com/aws/aws-cdk/commit/08a25439b2fdf874526e8ed2cc91789ce0d85ef6)), closes [#&#8203;37696](https://github.com/aws/aws-cdk/issues/37696) - **cloudfront:** add Managed-HostHeaderOnly origin request policy ([#&#8203;38236](https://github.com/aws/aws-cdk/issues/38236)) ([0e66e47](https://github.com/aws/aws-cdk/commit/0e66e47f66a93c5813cab47cb17d5dff913f1049)), closes [#&#8203;38234](https://github.com/aws/aws-cdk/issues/38234) - **core:** templates are validated against a comprehensive default rule set ([#&#8203;38135](https://github.com/aws/aws-cdk/issues/38135)) ([023c5bf](https://github.com/aws/aws-cdk/commit/023c5bf54816e5a0bdea355944d3db4a4d718bf9)) ##### Bug Fixes - cross-stack warnings are emitted for nested stacks ([#&#8203;38355](https://github.com/aws/aws-cdk/issues/38355)) ([db98909](https://github.com/aws/aws-cdk/commit/db989096b3da4a83ef01769a022420c91f736512)) - **apigateway:** revert alb integration that breaks jsii go packaging ([#&#8203;38305](https://github.com/aws/aws-cdk/issues/38305)) ([18158a4](https://github.com/aws/aws-cdk/commit/18158a4b27b422091bbbeaf6c69fb333797de798)), closes [#&#8203;36247](https://github.com/aws/aws-cdk/issues/36247) [#&#8203;36247](https://github.com/aws/aws-cdk/issues/36247) [#&#8203;36247](https://github.com/aws/aws-cdk/issues/36247) [#&#8203;36247](https://github.com/aws/aws-cdk/issues/36247) - **aws-cdk-lib:** fatal validations don't show plugin name ([#&#8203;38273](https://github.com/aws/aws-cdk/issues/38273)) ([a88d1ba](https://github.com/aws/aws-cdk/commit/a88d1bad3fa328569c30f3b143481fd1a7df954e)) - **aws-cdk-lib:** validation namespaces for annotations are inconsistent ([#&#8203;38256](https://github.com/aws/aws-cdk/issues/38256)) ([75893d9](https://github.com/aws/aws-cdk/commit/75893d9fb827b7d1c27073ab2a3018b2e7edccbd)) - **backup:** lifecycle and vault lock validations reject tokenized durations ([#&#8203;38264](https://github.com/aws/aws-cdk/issues/38264)) ([0ff20a3](https://github.com/aws/aws-cdk/commit/0ff20a3ae85f7412afe522f8917cf728547b137f)), closes [#&#8203;38263](https://github.com/aws/aws-cdk/issues/38263) [#&#8203;38246](https://github.com/aws/aws-cdk/issues/38246) [#&#8203;37751](https://github.com/aws/aws-cdk/issues/37751) [#&#8203;25943](https://github.com/aws/aws-cdk/issues/25943) [#&#8203;38246](https://github.com/aws/aws-cdk/issues/38246) [#&#8203;37751](https://github.com/aws/aws-cdk/issues/37751) [#&#8203;25943](https://github.com/aws/aws-cdk/issues/25943) - **certificatemanager:** use hasOwnProperty in apexDomain to prevent prototype collision ([#&#8203;37195](https://github.com/aws/aws-cdk/issues/37195)) ([ec38947](https://github.com/aws/aws-cdk/commit/ec3894712e06fddc05936d5911333695498b78f3)), closes [#&#8203;37193](https://github.com/aws/aws-cdk/issues/37193) - **cloudfront-origins:** validate httpPort and httpsPort range in HttpOrigin ([#&#8203;37872](https://github.com/aws/aws-cdk/issues/37872)) ([8a62b58](https://github.com/aws/aws-cdk/commit/8a62b589f662ead0d354ee519a04186f7f207193)) - **core:** stack-related validation has an empty construct path ([#&#8203;38350](https://github.com/aws/aws-cdk/issues/38350)) ([0af7c34](https://github.com/aws/aws-cdk/commit/0af7c343d26e3220eaf92315f8b62080694eab58)) - **core:** stack.node.addDependency gets slower as stacks grow ([#&#8203;38314](https://github.com/aws/aws-cdk/issues/38314)) ([0728618](https://github.com/aws/aws-cdk/commit/0728618443aa3cf39220e55a22e09158f4bd7f5a)) - **core:** synth crashes with EISDIR on a symlink-to-directory when a validation plugin is registered ([#&#8203;38299](https://github.com/aws/aws-cdk/issues/38299)) ([be0fdc4](https://github.com/aws/aws-cdk/commit/be0fdc4c83497393320a8860fc5e7c4e1c76130a)), closes [#&#8203;38295](https://github.com/aws/aws-cdk/issues/38295) - **elasticloadbalancingv2:** improve handling for `dropInvalidHeaderFields` in case of default or switching from true to false ([#&#8203;36483](https://github.com/aws/aws-cdk/issues/36483)) ([208b9db](https://github.com/aws/aws-cdk/commit/208b9db31ad3728b4898be12887e7310dbea2c0e)), closes [#&#8203;36409](https://github.com/aws/aws-cdk/issues/36409) - **lambda:** allow SnapStart for container image functions ([#&#8203;38265](https://github.com/aws/aws-cdk/issues/38265)) ([586dc4f](https://github.com/aws/aws-cdk/commit/586dc4f8488450e80bb849a0537adf552b3f6208)), closes [#&#8203;30898](https://github.com/aws/aws-cdk/issues/30898) - **lambda:** validations reject tokenized provisioned concurrency and async invoke config values ([#&#8203;38246](https://github.com/aws/aws-cdk/issues/38246)) ([4aa7e78](https://github.com/aws/aws-cdk/commit/4aa7e787560e57cf80b9412bc55a27492319e5ef)), closes [#&#8203;38245](https://github.com/aws/aws-cdk/issues/38245) [#&#8203;37197](https://github.com/aws/aws-cdk/issues/37197) [#&#8203;36275](https://github.com/aws/aws-cdk/issues/36275) [#&#8203;37197](https://github.com/aws/aws-cdk/issues/37197) - **opensearchservice:** allow gp3 ebs throughput up to 2000 MiB/s ([#&#8203;38001](https://github.com/aws/aws-cdk/issues/38001)) ([f0cfc5b](https://github.com/aws/aws-cdk/commit/f0cfc5be3e371b48fa25bdef62fd7a406b025f23)), closes [#&#8203;38000](https://github.com/aws/aws-cdk/issues/38000) [#&#8203;36074](https://github.com/aws/aws-cdk/issues/36074) - **spec2cdk:** add IVS to event pattern method name prefixes ([#&#8203;38322](https://github.com/aws/aws-cdk/issues/38322)) ([d6d1e8d](https://github.com/aws/aws-cdk/commit/d6d1e8d1b17eec00e50aa160fe592599674023d3)) - **validation:** incorrectly relative paths in Cloud Assemblies ([#&#8203;38352](https://github.com/aws/aws-cdk/issues/38352)) ([3f9422f](https://github.com/aws/aws-cdk/commit/3f9422f06c90305aaa7a90819023c9581917e595)), closes [#&#8203;38333](https://github.com/aws/aws-cdk/issues/38333) - **validation:** validation reports are not self-contained ([#&#8203;38333](https://github.com/aws/aws-cdk/issues/38333)) ([5d11d70](https://github.com/aws/aws-cdk/commit/5d11d70c126dde890918a0e21fb482610404be77)) ##### Reverts - **lambda:** revert SnapStart for container image functions ([#&#8203;38265](https://github.com/aws/aws-cdk/issues/38265)) ([#&#8203;38281](https://github.com/aws/aws-cdk/issues/38281)) ([3b92863](https://github.com/aws/aws-cdk/commit/3b928637f11f61cb8dd49a341222cd6df653d1b3)) *** #### Alpha modules (2.262.0-alpha.0) ##### Bug Fixes - **redshift-alpha:** quote identifiers and escape literals containing special characters ([#&#8203;38269](https://github.com/aws/aws-cdk/issues/38269)) ([3cb6844](https://github.com/aws/aws-cdk/commit/3cb684493ba4a86c8f96b3c57bb1df3541db87b7)) ### [`v2.261.0`](https://github.com/aws/aws-cdk/releases/tag/v2.261.0) [Compare Source](https://github.com/aws/aws-cdk/compare/v2.260.0...v2.261.0) ##### ⚠ BREAKING CHANGES - \*\* L1 resources are automatically generated from public CloudFormation Resource Schemas. They are built to closely reflect the real state of CloudFormation. Sometimes these updates can contain changes that are incompatible with previous types, but more accurately reflect reality. In this release we have changed: * aws-cloudwatch: AWS::CloudWatch::LogAlarm: QueryLanguage property has been removed from the ScheduledQueryConfiguration type. * aws-elasticloadbalancing: AWS::ElasticLoadBalancing::LoadBalancer: Id attribute has been removed and the primary identifier is now LoadBalancerName. ##### Features - update L1 CloudFormation resource definitions ([#&#8203;38189](https://github.com/aws/aws-cdk/issues/38189)) ([5aabd32](https://github.com/aws/aws-cdk/commit/5aabd323b3ec960a2525d2f5100bfa7463597fbd)) - **core:** add git source metadata to CloudFormation templates ([#&#8203;37368](https://github.com/aws/aws-cdk/issues/37368)) ([765271b](https://github.com/aws/aws-cdk/commit/765271b8581daf723de8329c9a00e424e3a9bbdc)) - **rds:** support native Secrets Manager integration for RDS Cluster and Instance ([#&#8203;35734](https://github.com/aws/aws-cdk/issues/35734)) ([07d5623](https://github.com/aws/aws-cdk/commit/07d5623bfd62de14844f52f7733e3da9e4b03daf)), closes [#&#8203;29239](https://github.com/aws/aws-cdk/issues/29239) ##### Bug Fixes - improve internal path detection ([#&#8203;38205](https://github.com/aws/aws-cdk/issues/38205)) ([6a1934d](https://github.com/aws/aws-cdk/commit/6a1934d59033e125004363bf32affbe5937948ce)) - **ecr-assets:** tarball asset build command not escaped ([#&#8203;38171](https://github.com/aws/aws-cdk/issues/38171)) ([bad8a3a](https://github.com/aws/aws-cdk/commit/bad8a3a2af8cdbeaeb09c29ed28b018152ad52b9)) - print validation errors according to new style ([#&#8203;38166](https://github.com/aws/aws-cdk/issues/38166)) ([031aba8](https://github.com/aws/aws-cdk/commit/031aba88ab51bb323d0dee987309ec1ff75878e3)) *** #### Alpha modules (2.261.0-alpha.0) ##### Features - **metrics-facade-alpha:** generate metrics facades ([#&#8203;37334](https://github.com/aws/aws-cdk/issues/37334)) ([aa9beb0](https://github.com/aws/aws-cdk/commit/aa9beb08e6740c16a682a93921959f2574d7ca99)) ### [`v2.260.0`](https://github.com/aws/aws-cdk/releases/tag/v2.260.0) [Compare Source](https://github.com/aws/aws-cdk/compare/v2.259.0...v2.260.0) ##### Features - update L1 CloudFormation resource definitions ([#&#8203;38151](https://github.com/aws/aws-cdk/issues/38151)) ([f266a47](https://github.com/aws/aws-cdk/commit/f266a47595832d6018b8a0d43dcae6afde511de6)), closes [/docs.aws.amazon.com/AmazonS3/latest/userguide/s3-files-prereq-policies.html#s3](https://github.com/aws//docs.aws.amazon.com/AmazonS3/latest/userguide/s3-files-prereq-policies.html/issues/s3) - **core:** add external traces to ConstructError ([#&#8203;38131](https://github.com/aws/aws-cdk/issues/38131)) ([e360dd9](https://github.com/aws/aws-cdk/commit/e360dd9b44d2111e28cd16ac683a813f33ed5793)) - **core:** append external stack traces to metadata if available ([#&#8203;38124](https://github.com/aws/aws-cdk/issues/38124)) ([c77a08c](https://github.com/aws/aws-cdk/commit/c77a08c19eb16a3734183f079e598b90383d28a3)) ##### Bug Fixes - **bundling:** docker build can be skipped if already performed ([#&#8203;38134](https://github.com/aws/aws-cdk/issues/38134)) ([2f9ae95](https://github.com/aws/aws-cdk/commit/2f9ae95d55cda7dc5011c8a04b66af7fca0c4f9d)) - **core:** stack traces contain decorator paths ([#&#8203;38130](https://github.com/aws/aws-cdk/issues/38130)) ([318f645](https://github.com/aws/aws-cdk/commit/318f645df3f0c903f64126975fb4a4a65c0a18d0)) - **core:** weak cross-stack references fail for list attributes ([#&#8203;37948](https://github.com/aws/aws-cdk/issues/37948)) ([6bb9d75](https://github.com/aws/aws-cdk/commit/6bb9d75f71c229d246e39942cdf37e7406dfd5cb)), closes [#&#8203;37910](https://github.com/aws/aws-cdk/issues/37910) - **lambda-nodejs:** reuse posixShellEscape for Docker bundling file operations ([#&#8203;38133](https://github.com/aws/aws-cdk/issues/38133)) ([baa9e1d](https://github.com/aws/aws-cdk/commit/baa9e1dff469306cc23b8f4bd232d703f98bf68a)) *** #### Alpha modules (2.260.0-alpha.0) ### [`v2.259.0`](https://github.com/aws/aws-cdk/releases/tag/v2.259.0) [Compare Source](https://github.com/aws/aws-cdk/compare/v2.258.1...v2.259.0) ##### ⚠ BREAKING CHANGES - **lambda:** `Runtime.NODEJS_LATEST` now resolves to `nodejs24.x` in every region. Customers who pin to a concrete runtime (`Runtime.NODEJS_22_X`, `useLatestRuntimeVersion: false` in `aws-lambda-nodejs.NodejsFunction`) are unaffected. Existing `AWS::Lambda::Function` resources synthesized with `NODEJS_LATEST` will see `Runtime: nodejs22.x` → `Runtime: nodejs24.x` on next deploy. Lambda accepts runtime updates **in place**. **Customer-code compatibility — IMPORTANT**: Node.js 24 removes support for callback-style asynchronous handlers (`(event, context, callback) => {...}`) per the [launch blog](https://aws.amazon.com/blogs/compute/node-js-24-runtime-now-available-in-aws-lambda/). Customers whose Lambda code still uses callback-based handlers will see runtime errors after the bump. Customers should migrate to `async (event, context) => {...}` or pin to `Runtime.NODEJS_22_X` explicitly. ##### Features - **core:** recommend the use of weak references if no choice has been made ([#&#8203;38070](https://github.com/aws/aws-cdk/issues/38070)) ([6e74e5e](https://github.com/aws/aws-cdk/commit/6e74e5ebbea3959a86af3aea038df0ab87aa27b6)) - **ecs:** add forceNewDeployment option for Fargate and EC2 services ([#&#8203;36797](https://github.com/aws/aws-cdk/issues/36797)) ([3d9c4df](https://github.com/aws/aws-cdk/commit/3d9c4df185026440f5668b82dd2adb47e0c366de)), closes [#&#8203;27762](https://github.com/aws/aws-cdk/issues/27762) - **eks:** use the recommended AL2023 instead of AL2 AMI type (under feature flag) ([#&#8203;37850](https://github.com/aws/aws-cdk/issues/37850)) ([6a2dcb7](https://github.com/aws/aws-cdk/commit/6a2dcb7ab6e2d4a69999625947ab6a152b82bc19)), closes [#&#8203;32211](https://github.com/aws/aws-cdk/issues/32211) - **lambda:** upgrade lambda and custom resource default runtime to nodejs24.x ([#&#8203;38031](https://github.com/aws/aws-cdk/issues/38031)) ([36c84c6](https://github.com/aws/aws-cdk/commit/36c84c6d6ef8a4772249afadec78c2d25c44cd90)) ##### Bug Fixes - **spec2cdk:** sanitize hyphens in EventBridge event namespace names ([#&#8203;38088](https://github.com/aws/aws-cdk/issues/38088)) ([b8f41bf](https://github.com/aws/aws-cdk/commit/b8f41bf4f2a8ef3556f3279c7fdd8259f3b6086b)), closes [40aws-cdk/spec2cdk/lib/naming/conventions.ts#L195](https://github.com/40aws-cdk/spec2cdk/lib/naming/conventions.ts/issues/L195) ##### Reverts - "chore(bundling): check if docker image is cached before building" ([#&#8203;38116](https://github.com/aws/aws-cdk/issues/38116)) ([359f2fb](https://github.com/aws/aws-cdk/commit/359f2fbbebb58da0e911b0550b49033fcc84f371)), closes [aws/aws-cdk#37951](https://github.com/aws/aws-cdk/issues/37951) *** #### Alpha modules (2.259.0-alpha.0) ### [`v2.258.1`](https://github.com/aws/aws-cdk/releases/tag/v2.258.1) [Compare Source](https://github.com/aws/aws-cdk/compare/v2.258.0...v2.258.1) ##### Reverts - "chore(bundling): check if docker image is cached before building" ([#&#8203;38116](https://github.com/aws/aws-cdk/issues/38116)) ([8ec236c](https://github.com/aws/aws-cdk/commit/8ec236cfd72bd53b44e1c29a62f3c3077923f43c)), closes [aws/aws-cdk#37951](https://github.com/aws/aws-cdk/issues/37951) *** #### Alpha modules (2.258.1-alpha.0) ### [`v2.258.0`](https://github.com/aws/aws-cdk/releases/tag/v2.258.0) [Compare Source](https://github.com/aws/aws-cdk/compare/v2.257.0...v2.258.0) ##### ⚠ BREAKING CHANGES - \*\* L1 resources are automatically generated from public CloudFormation Resource Schemas. They are built to closely reflect the real state of CloudFormation. Sometimes these updates can contain changes that are incompatible with previous types, but more accurately reflect reality. In this release we have changed: * aws-pcaconnectorad: AWS::PCAConnectorAD::ServicePrincipalName: ConnectorArn property is now required. * aws-pcaconnectorad: AWS::PCAConnectorAD::ServicePrincipalName: DirectoryRegistrationArn property is now required. * aws-pcaconnectorad: AWS::PCAConnectorAD::TemplateGroupAccessControlEntry: GroupSecurityIdentifier property is now required. * aws-pcaconnectorad: AWS::PCAConnectorAD::TemplateGroupAccessControlEntry: TemplateArn property is now required. ##### Features - **core:** trace property assignments in CfnResource.addPropertyOverride ([#&#8203;38072](https://github.com/aws/aws-cdk/issues/38072)) ([a226372](https://github.com/aws/aws-cdk/commit/a2263723ef9e09423512c1ea7620a586aa3b2090)) - update L1 CloudFormation resource definitions ([#&#8203;37993](https://github.com/aws/aws-cdk/issues/37993)) ([664a878](https://github.com/aws/aws-cdk/commit/664a878c881397408f021ec37133b588f5957bed)) - **aws-cdk-lib:** emits performance counters if synthesis is slow ([#&#8203;38004](https://github.com/aws/aws-cdk/issues/38004)) ([cb03794](https://github.com/aws/aws-cdk/commit/cb037946a08f8c5939ad1b6fc42f15badcc97c98)), closes [#&#8203;37919](https://github.com/aws/aws-cdk/issues/37919) [#&#8203;37843](https://github.com/aws/aws-cdk/issues/37843) - **bedrockagentcore:** expose default endpoint application log group on Runtime ([#&#8203;37812](https://github.com/aws/aws-cdk/issues/37812)) ([8e25d78](https://github.com/aws/aws-cdk/commit/8e25d789ad0555a1141614b792efc19cae4e8f5f)), closes [#&#8203;37796](https://github.com/aws/aws-cdk/issues/37796) - **core:** add scope to IPolicyValidationContext ([#&#8203;38006](https://github.com/aws/aws-cdk/issues/38006)) ([cae7456](https://github.com/aws/aws-cdk/commit/cae7456b0654f6cb5b4c0ded40b56bde1b77a001)) - **core:** allow validation plugins to create new files in cloud assembly ([#&#8203;38007](https://github.com/aws/aws-cdk/issues/38007)) ([d9f38a9](https://github.com/aws/aws-cdk/commit/d9f38a9d381d8523a683c72a72395ade9837ea7e)) - **core:** fine-grained control over cross-stack reference strength ([#&#8203;37840](https://github.com/aws/aws-cdk/issues/37840)) ([bddcd44](https://github.com/aws/aws-cdk/commit/bddcd4482464c847526ba0ac5e3e7d460020479b)) - **core:** include suppressed violations in validation-report.json ([#&#8203;38009](https://github.com/aws/aws-cdk/issues/38009)) ([f396892](https://github.com/aws/aws-cdk/commit/f396892379e90b1a75225a1238bccd06ca0571a6)) - **core:** new validation report schema ([#&#8203;37970](https://github.com/aws/aws-cdk/issues/37970)) ([4e09b52](https://github.com/aws/aws-cdk/commit/4e09b52989a91965c475a180ce729b906e5745fa)), closes [aws/aws-cdk-cli#1515](https://github.com/aws/aws-cdk-cli/issues/1515) - **eks:** add AlbControllerVersion support for v2.8.3 through v3.2.2 ([#&#8203;37752](https://github.com/aws/aws-cdk/issues/37752)) ([20abc6a](https://github.com/aws/aws-cdk/commit/20abc6aedf4c883f95368b015c41c73579d0ea8d)), closes [#&#8203;37414](https://github.com/aws/aws-cdk/issues/37414) - **eks:** add deletionProtection property to Cluster construct ([#&#8203;36474](https://github.com/aws/aws-cdk/issues/36474)) ([5b19ac5](https://github.com/aws/aws-cdk/commit/5b19ac5be5131d92dcf388a8f6a927cf634cab89)), closes [#&#8203;36460](https://github.com/aws/aws-cdk/issues/36460) - **elasticache:** replace CacheEngine/UserEngine enums with enum-like classes ([#&#8203;37816](https://github.com/aws/aws-cdk/issues/37816)) ([6ad84b3](https://github.com/aws/aws-cdk/commit/6ad84b3440d6388d97d23c24fddd50d8f9077deb)), closes [#&#8203;37813](https://github.com/aws/aws-cdk/issues/37813) ##### Bug Fixes - **autoscaling:** use of ScheduledAction.endTime is dangerous ([#&#8203;38014](https://github.com/aws/aws-cdk/issues/38014)) ([109fae7](https://github.com/aws/aws-cdk/commit/109fae75b07144378141ba3d1a5b019301bc0fb2)) - **aws-cdk-lib:** make token resolution \~25% faster ([#&#8203;37920](https://github.com/aws/aws-cdk/issues/37920)) ([87483dc](https://github.com/aws/aws-cdk/commit/87483dc4af1bb509b5acb97b99af68fed00f6a80)) - **bedrockagentcore:** relax allowlistedHeaders pattern to match CFN schema ([#&#8203;37969](https://github.com/aws/aws-cdk/issues/37969)) ([e0d6c8a](https://github.com/aws/aws-cdk/commit/e0d6c8a2cdd8d2cf5731eb511d93bbd16bbf2291)), closes [#&#8203;37964](https://github.com/aws/aws-cdk/issues/37964) - **cloudwatch:** metric math validation reports quoted strings as unknown identifiers ([#&#8203;37977](https://github.com/aws/aws-cdk/issues/37977)) ([59bae38](https://github.com/aws/aws-cdk/commit/59bae38ffd2720e9568fa97b019f3ce934fe7896)) - **core:** cross-region SSM writer orphans parameters when resource is replaced during stack update ([#&#8203;38059](https://github.com/aws/aws-cdk/issues/38059)) ([f130388](https://github.com/aws/aws-cdk/commit/f13038882ad792109ee9f94831595347731266db)) - **core:** handle string "false" for boolean context values in validation ([#&#8203;37989](https://github.com/aws/aws-cdk/issues/37989)) ([a26ed73](https://github.com/aws/aws-cdk/commit/a26ed7334344df5ec68f61c8d2a0157dfed5c0cc)) - **integ-tests:** responseURL logged in onTimeout ([#&#8203;37972](https://github.com/aws/aws-cdk/issues/37972)) ([b9259dd](https://github.com/aws/aws-cdk/commit/b9259dd430e013b806c52afa6bf5e8d7491f6bc6)) - **lambda-nodejs:** bundling rejects entry paths containing ".." ([#&#8203;38022](https://github.com/aws/aws-cdk/issues/38022)) ([a7cc53c](https://github.com/aws/aws-cdk/commit/a7cc53c0b1dfc569f934cc38b54d7f35172b66cd)), closes [#&#8203;38017](https://github.com/aws/aws-cdk/issues/38017) [#&#8203;37572](https://github.com/aws/aws-cdk/issues/37572) [#&#8203;37572](https://github.com/aws/aws-cdk/issues/37572) - **lambda-nodejs:** perf counters e2e test uses incorrect filename ([#&#8203;38033](https://github.com/aws/aws-cdk/issues/38033)) ([d88637f](https://github.com/aws/aws-cdk/commit/d88637fb21922374450730c2a15844fc966ca4e7)) *** #### Alpha modules (2.258.0-alpha.0) ##### Features - **integ-tests-alpha:** add option to set the provider log level ([#&#8203;38005](https://github.com/aws/aws-cdk/issues/38005)) ([c634a79](https://github.com/aws/aws-cdk/commit/c634a795de080df21b86fad191d05dfde884eb4e)) ##### Bug Fixes - **custom-resource-handlers:** deterministic asset hashes for generated lambdas ([#&#8203;37634](https://github.com/aws/aws-cdk/issues/37634)) ([6c3d5bc](https://github.com/aws/aws-cdk/commit/6c3d5bc36e19b8834319578fbd8525615a47a4b9)), closes [#&#8203;34307](https://github.com/aws/aws-cdk/issues/34307) - **glue-alpha:** deprecate Ray Jobs ([#&#8203;38055](https://github.com/aws/aws-cdk/issues/38055)) ([3fa428b](https://github.com/aws/aws-cdk/commit/3fa428b9b24d286841940cfff5200d16817196bf)) - **glue-alpha:** restore notifyDelayAfter to PySpark and Scala Spark ETL jobs ([#&#8203;37815](https://github.com/aws/aws-cdk/issues/37815)) ([05be88a](https://github.com/aws/aws-cdk/commit/05be88aa324635108076bdc648a4ee940d22a386)), closes [#&#8203;33839](https://github.com/aws/aws-cdk/issues/33839) - **integ-tests-alpha:** assertion failures print too much unnecessary information ([#&#8203;37974](https://github.com/aws/aws-cdk/issues/37974)) ([bc0de1d](https://github.com/aws/aws-cdk/commit/bc0de1dacc59b95a2e89f9c3ec96589e98b35ed2)) - **mediapackagev2-alpha:** cdnAuth on OriginEndpoint now generates the required policy ([#&#8203;38013](https://github.com/aws/aws-cdk/issues/38013)) ([1d56b46](https://github.com/aws/aws-cdk/commit/1d56b46abd477f188021d32d77551be1377765d0)) ### [`v2.257.0`](https://github.com/aws/aws-cdk/releases/tag/v2.257.0) [Compare Source](https://github.com/aws/aws-cdk/compare/v2.256.1...v2.257.0) ##### ⚠ BREAKING CHANGES - \*\* L1 resources are automatically generated from public CloudFormation Resource Schemas. They are built to closely reflect the real state of CloudFormation. Sometimes these updates can contain changes that are incompatible with previous types, but more accurately reflect reality. In this release we have changed: - **aws-neptunegraph**: AWS::NeptuneGraph::GraphSnapshot: GraphIdentifier property is now required. ##### Features - update L1 CloudFormation resource definitions ([#&#8203;37955](https://github.com/aws/aws-cdk/issues/37955)) ([211b06c](https://github.com/aws/aws-cdk/commit/211b06c28f20dbd2ff7c3fe37efa12636aee46c0)) - **core:** failSynthOnValidationErrors context key to suppress console output and exit code ([#&#8203;37909](https://github.com/aws/aws-cdk/issues/37909)) ([deb968f](https://github.com/aws/aws-cdk/commit/deb968fe326a850cdbcf434881839ae9a8b231e7)), closes [aws/aws-cdk-cli#1515](https://github.com/aws/aws-cdk-cli/issues/1515) *** #### Alpha modules (2.257.0-alpha.0) ### [`v2.256.1`](https://github.com/aws/aws-cdk/releases/tag/v2.256.1) [Compare Source](https://github.com/aws/aws-cdk/compare/v2.256.0...v2.256.1) ##### Bug Fixes - invalid lock file ([#&#8203;37943](https://github.com/aws/aws-cdk/issues/37943)) ([73ae91d](https://github.com/aws/aws-cdk/commit/73ae91d5eb074cb975a07de04238cf205111e2fb)), closes [#&#8203;37726](https://github.com/aws/aws-cdk/issues/37726) [#&#8203;37929](https://github.com/aws/aws-cdk/issues/37929) [#&#8203;37870](https://github.com/aws/aws-cdk/issues/37870) *** #### Alpha modules (2.256.1-alpha.0) ### [`v2.256.0`](https://github.com/aws/aws-cdk/releases/tag/v2.256.0) [Compare Source](https://github.com/aws/aws-cdk/compare/v2.255.0...v2.256.0) ##### Features - **aws-cdk-lib:** emits performance counters if synthesis is slow ([#&#8203;37919](https://github.com/aws/aws-cdk/issues/37919)) ([caa0f4c](https://github.com/aws/aws-cdk/commit/caa0f4c1eea4e9d47843b1fa2aee661ef0c3fa24)), closes [#&#8203;37843](https://github.com/aws/aws-cdk/issues/37843) - **core:** validations report is always written to cloud assembly ([#&#8203;37867](https://github.com/aws/aws-cdk/issues/37867)) ([dddc6e0](https://github.com/aws/aws-cdk/commit/dddc6e09fd9736126eacf40811450550b1c0695d)) - **ec2:** replace `any` return types with specific interfaces in `IPeer` methods ([#&#8203;36637](https://github.com/aws/aws-cdk/issues/36637)) ([626e44d](https://github.com/aws/aws-cdk/commit/626e44dfeff7d65bad094e744aaa0209c67fdbee)), closes [#&#8203;36636](https://github.com/aws/aws-cdk/issues/36636) - **s3:** support `bucketNamePrefix` and `bucketNamespace` properties ([#&#8203;37386](https://github.com/aws/aws-cdk/issues/37386)) ([997b003](https://github.com/aws/aws-cdk/commit/997b0039662034df9b01228bc45d4cb0ffabb40c)), closes [#&#8203;37760](https://github.com/aws/aws-cdk/issues/37760) ##### Bug Fixes - **core:** handle token-wrapped Boxes in property merge strategies ([#&#8203;37902](https://github.com/aws/aws-cdk/issues/37902)) ([18435e3](https://github.com/aws/aws-cdk/commit/18435e3c52df17be5a23931e18a1fd8fb7c4c4c3)) - **core:** prevent stack overflow on large construct trees ([#&#8203;37901](https://github.com/aws/aws-cdk/issues/37901)) ([10163cb](https://github.com/aws/aws-cdk/commit/10163cb8ca2b650f19a38afa04e78bd5f45d39f5)), closes [#&#8203;37903](https://github.com/aws/aws-cdk/issues/37903) *** #### Alpha modules (2.256.0-alpha.0) ### [`v2.255.0`](https://github.com/aws/aws-cdk/releases/tag/v2.255.0) [Compare Source](https://github.com/aws/aws-cdk/compare/v2.254.0...v2.255.0) ##### Features - **aws-cdk-lib:** emits performance counters if synthesis is slow ([#&#8203;37843](https://github.com/aws/aws-cdk/issues/37843)) ([ea33967](https://github.com/aws/aws-cdk/commit/ea339670cb537e0e9aeb6b419c8bd43591aec32b)) - **bedrockagentcore:** graduate to stable 🚀 ([#&#8203;37876](https://github.com/aws/aws-cdk/issues/37876)) ([00cf601](https://github.com/aws/aws-cdk/commit/00cf6015f30755653de7a541f79c944d4a68f423)) - **core:** builtin `PropertyMergeStrategy`s are now compatible with deferred `Box` values ([#&#8203;37844](https://github.com/aws/aws-cdk/issues/37844)) ([ca4b722](https://github.com/aws/aws-cdk/commit/ca4b72234cf17aa29dfe47ce11a9d6f262168173)) - **core:** persist asset fingerprinting cache ([#&#8203;37822](https://github.com/aws/aws-cdk/issues/37822)) ([605a776](https://github.com/aws/aws-cdk/commit/605a776f7708c1120e62d1cfdf2780b0dbe10552)) - **ec2:** add C8A instance type support ([#&#8203;36736](https://github.com/aws/aws-cdk/issues/36736)) ([0d088ca](https://github.com/aws/aws-cdk/commit/0d088ca0a6e720c25132d177e675ecfe08caff2f)), closes [#&#8203;36722](https://github.com/aws/aws-cdk/issues/36722) ##### Bug Fixes - **core:** cached `Lazy`s use the Box API internally ([#&#8203;37889](https://github.com/aws/aws-cdk/issues/37889)) ([464fa3d](https://github.com/aws/aws-cdk/commit/464fa3dfcc04f2adeb0b9f877ceaac2223afc0b8)) - **core:** default stack trace size adds unnecessary overhead ([#&#8203;37827](https://github.com/aws/aws-cdk/issues/37827)) ([0b1fb2b](https://github.com/aws/aws-cdk/commit/0b1fb2bb08ce338fe73b8ebb24be6b88d9210c1c)) - **core:** share a single IAM role across cross-account Fn::GetStackOutput consumers ([#&#8203;37871](https://github.com/aws/aws-cdk/issues/37871)) ([fee8b90](https://github.com/aws/aws-cdk/commit/fee8b90d07a70ad0d0fb4e963015df1d45ed1cb8)) - **dynamodb:** remove deprecated scope for stream grants ([#&#8203;36680](https://github.com/aws/aws-cdk/issues/36680)) ([570d552](https://github.com/aws/aws-cdk/commit/570d55285d9d0161545af6fe89b9bac052496add)), closes [#&#8203;36289](https://github.com/aws/aws-cdk/issues/36289) - **iam:** validate PolicyStatement SID is alphanumeric for identity policies ([#&#8203;36150](https://github.com/aws/aws-cdk/issues/36150)) ([a7edd72](https://github.com/aws/aws-cdk/commit/a7edd72c0181d7ff536ba870c8811c4abbb36754)), closes [#&#8203;34819](https://github.com/aws/aws-cdk/issues/34819) [#&#8203;34828](https://github.com/aws/aws-cdk/issues/34828) [#&#8203;34819](https://github.com/aws/aws-cdk/issues/34819) *** #### Alpha modules (2.255.0-alpha.0) ##### Features - **bedrock-agentcore-alpha:** Graduation of the library to stable. The **Policy** submodule is the only submodule that remains in alpha. All other constructs have graduated to stable in `aws-cdk-lib/aws-bedrockagentcore` and we recommend migrating to the stable versions ([#&#8203;37876](https://github.com/aws/aws-cdk/issues/37876)) ([00cf601](https://github.com/aws/aws-cdk/commit/00cf6015f30755653de7a541f79c944d4a68f423)) ### [`v2.254.0`](https://github.com/aws/aws-cdk/releases/tag/v2.254.0) [Compare Source](https://github.com/aws/aws-cdk/compare/v2.253.1...v2.254.0) ##### ⚠ BREAKING CHANGES - \*\* L1 resources are automatically generated from public CloudFormation Resource Schemas. They are built to closely reflect the real state of CloudFormation. Sometimes these updates can contain changes that are incompatible with previous types, but more accurately reflect reality. In this release we have changed: aws-elasticache: AWS::ElastiCache::CacheCluster: Id attribute removed. aws-sagemaker: AWS::SageMaker::Model: Id attribute removed. aws-vpclattice: AWS::VpcLattice::AuthPolicy: State attribute enum values changed from ACTIVE|INACTIVE to Active|Inactive. ##### Features - update L1 CloudFormation resource definitions ([#&#8203;37826](https://github.com/aws/aws-cdk/issues/37826)) ([fb4197e](https://github.com/aws/aws-cdk/commit/fb4197edd5916247bfc776bc6e8d6922a760bd89)) - **cloudwatch:** add PromQL Alarm L2 construct ([#&#8203;37793](https://github.com/aws/aws-cdk/issues/37793)) ([13a4924](https://github.com/aws/aws-cdk/commit/13a49245ba996328067c67b07b0e80123b2410a3)) - **core:** `PropertyMergeStrategy` now supports array merge strategies ([#&#8203;37841](https://github.com/aws/aws-cdk/issues/37841)) ([701305d](https://github.com/aws/aws-cdk/commit/701305d8c5903dc880b1c92ae9ba5e6475fcc267)) - **core:** plugin violations can be suppressed ([#&#8203;37808](https://github.com/aws/aws-cdk/issues/37808)) ([a47ad39](https://github.com/aws/aws-cdk/commit/a47ad39ad980fd388d4e72012a2de8ad2ce85f3f)), closes [#&#8203;37781](https://github.com/aws/aws-cdk/issues/37781) - **core:** weak cross environment references ([#&#8203;37800](https://github.com/aws/aws-cdk/issues/37800)) ([fe23dce](https://github.com/aws/aws-cdk/commit/fe23dce1fb20a0e6b21dd0780d91ed8e483be82e)) - **core:** weak cross-stack references in the same environment ([#&#8203;37824](https://github.com/aws/aws-cdk/issues/37824)) ([167ff3c](https://github.com/aws/aws-cdk/commit/167ff3c5feb42c9f131c4af5f34101f8b04212ca)) - **dynamodb:** resource policies for streams ([#&#8203;37254](https://github.com/aws/aws-cdk/issues/37254)) ([7e5679c](https://github.com/aws/aws-cdk/commit/7e5679cb1fb89125ea4fcf7174daa98b2ff8a42e)) - **lambda:** add SQS provisionedPollerConfig support with validation and fix type mismatch ([#&#8203;37550](https://github.com/aws/aws-cdk/issues/37550)) ([086738b](https://github.com/aws/aws-cdk/commit/086738b6062eece0fedc836ecb898a664fd9021c)), closes [#&#8203;37197](https://github.com/aws/aws-cdk/issues/37197) [/github.com/aws/aws-cdk/pull/37197#pullrequestreview-2772143562](https://github.com/aws//github.com/aws/aws-cdk/pull/37197/issues/pullrequestreview-2772143562) [#&#8203;37197](https://github.com/aws/aws-cdk/issues/37197) - **ses:** auto email validation for configuration sets ([#&#8203;36679](https://github.com/aws/aws-cdk/issues/36679)) ([3a58641](https://github.com/aws/aws-cdk/commit/3a586417d2bd922c04e0f47db5aa0391c21212a2)) ##### Bug Fixes - file fingerprinting is now \~33% faster ([#&#8203;37802](https://github.com/aws/aws-cdk/issues/37802)) ([b871018](https://github.com/aws/aws-cdk/commit/b8710183cd9a003a5f9898ed5c6985233375c5eb)) - **core:** "exports cannot be updated" for cross-region references ([#&#8203;37790](https://github.com/aws/aws-cdk/issues/37790)) ([af11f00](https://github.com/aws/aws-cdk/commit/af11f0032e4333cc936aadd697cbc92bc27a10a8)) - **rds:** add lower bound validation for ClusterInstance promotionTier ([#&#8203;37519](https://github.com/aws/aws-cdk/issues/37519)) ([16c0a29](https://github.com/aws/aws-cdk/commit/16c0a29d73f18d2586d07eef18bc589043f71ab0)), closes [#&#8203;37518](https://github.com/aws/aws-cdk/issues/37518) - **s3deploy:** empty sources leads to deployment error ([#&#8203;37786](https://github.com/aws/aws-cdk/issues/37786)) ([d28ad30](https://github.com/aws/aws-cdk/commit/d28ad30d2217ed3b66d2b610ea3da5a3caa78b13)) - bundled jsonschema in [@&#8203;aws-cdk/cloud-assembly-api](https://github.com/aws-cdk/cloud-assembly-api) causes ELSPROBLEMS ([#&#8203;37774](https://github.com/aws/aws-cdk/issues/37774)) ([64651d3](https://github.com/aws/aws-cdk/commit/64651d32713472e261a10e8de67c7632dc7a5ac5)), closes [#&#8203;37756](https://github.com/aws/aws-cdk/issues/37756) *** #### Alpha modules (2.254.0-alpha.0) ##### Features - **bedrock-agentcore-alpha:** add tags support to Evaluator and OnlineEvaluationConfig ([#&#8203;37804](https://github.com/aws/aws-cdk/issues/37804)) ([adbf88f](https://github.com/aws/aws-cdk/commit/adbf88faeb4d2b762563389aea160cfda496f200)) - **bedrock-agentcore-alpha:** add identity L2 constructs ([#&#8203;37610](https://github.com/aws/aws-cdk/issues/37610)) ([67c3af2](https://github.com/aws/aws-cdk/commit/67c3af260cedb8e610dff36f829afb36114dd93a)) - **mediapackagev2-alpha:** add OAC integration between CloudFront and MediaPackageV2 ([#&#8203;37701](https://github.com/aws/aws-cdk/issues/37701)) ([654f59c](https://github.com/aws/aws-cdk/commit/654f59c559f6eb2b5240e7885372ac82ea05a996)) ##### Bug Fixes - **bedrock-agentcore-alpha:** fix cedar policy bug ([#&#8203;37782](https://github.com/aws/aws-cdk/issues/37782)) ([e678d5c](https://github.com/aws/aws-cdk/commit/e678d5cc251f00a0a67bc308b562a3fddca6a73c)), closes [#&#8203;37828](https://github.com/aws/aws-cdk/issues/37828) - **custom-resource-handlers:** deployment fails when parameter already exists ([#&#8203;37852](https://github.com/aws/aws-cdk/issues/37852)) ([025c38c](https://github.com/aws/aws-cdk/commit/025c38ca989a234189b411df011a560a003107b3)) ### [`v2.253.1`](https://github.com/aws/aws-cdk/releases/tag/v2.253.1) [Compare Source](https://github.com/aws/aws-cdk/compare/v2.253.0...v2.253.1) ##### Bug Fixes - **core:** "exports cannot be updated" for cross-region references ([#&#8203;37790](https://github.com/aws/aws-cdk/issues/37790)) ([b0c00e2](https://github.com/aws/aws-cdk/commit/b0c00e2b1fde5da462d4fd848610f59e78b482ba)) - **s3deploy:** empty sources leads to deployment error ([#&#8203;37786](https://github.com/aws/aws-cdk/issues/37786)) ([f61656a](https://github.com/aws/aws-cdk/commit/f61656a3a408b0b50d79f43cdf18d0f5801e9a43)) *** #### Alpha modules (2.253.1-alpha.0) ### [`v2.253.0`](https://github.com/aws/aws-cdk/releases/tag/v2.253.0) [Compare Source](https://github.com/aws/aws-cdk/compare/v2.252.0...v2.253.0) ##### Features - update L1 CloudFormation resource definitions ([#&#8203;37753](https://github.com/aws/aws-cdk/issues/37753)) ([a661c2d](https://github.com/aws/aws-cdk/commit/a661c2ddee343a610b0ab312996ce34e6cacb571)) - **apigatewayv2-integrations:** auto-include EventBusName in HttpEventBridgeIntegration default parameter mapping ([#&#8203;36780](https://github.com/aws/aws-cdk/issues/36780)) ([9734bb4](https://github.com/aws/aws-cdk/commit/9734bb4382db1123b3c78ffea1130d702fb5a845)), closes [#&#8203;36775](https://github.com/aws/aws-cdk/issues/36775) - **core:** add Fn::GetStackOutput for cross-region references ([#&#8203;37724](https://github.com/aws/aws-cdk/issues/37724)) ([ffae861](https://github.com/aws/aws-cdk/commit/ffae8613d0f2dbb94ff7a2ea1e6cd53036bd9870)) - **core:** integrate construct annotations into validation report ([#&#8203;37712](https://github.com/aws/aws-cdk/issues/37712)) ([438bd0b](https://github.com/aws/aws-cdk/commit/438bd0b756603e60433c6bd9a080be7c234b1d56)) - **synthetics:** add Playwright 5.1 and 6.0 runtimes ([#&#8203;37665](https://github.com/aws/aws-cdk/issues/37665)) ([c1afb43](https://github.com/aws/aws-cdk/commit/c1afb43b16db8d4eeaeb4dda413fc64637b7e014)) - emr instance fleet priority allocation ([#&#8203;35731](https://github.com/aws/aws-cdk/issues/35731)) ([db1188a](https://github.com/aws/aws-cdk/commit/db1188a34b2ec4c37d6d9e5c44df65d784e9a5bf)), closes [#&#8203;35710](https://github.com/aws/aws-cdk/issues/35710) [/github.com/aws/aws-cdk/blob/3ec6d06c7c58e4f14b3fb114d7c35dc6d01794d9/packages/aws-cdk-lib/aws-stepfunctions-tasks/lib/emr/private/cluster-utils.ts#L91](https://github.com/aws//github.com/aws/aws-cdk/blob/3ec6d06c7c58e4f14b3fb114d7c35dc6d01794d9/packages/aws-cdk-lib/aws-stepfunctions-tasks/lib/emr/private/cluster-utils.ts/issues/L91) ##### Bug Fixes - **cloudfront:** skip cachePolicyName length validation for unresolved tokens ([#&#8203;37751](https://github.com/aws/aws-cdk/issues/37751)) ([3b96e97](https://github.com/aws/aws-cdk/commit/3b96e97af91701fc17e8c3ad35a8564d57085a9d)), closes [#&#8203;23567](https://github.com/aws/aws-cdk/issues/23567) [#&#8203;34102](https://github.com/aws/aws-cdk/issues/34102) - **cloudwatch:** remove false positive warning for CDK tokens in MathExpression ([#&#8203;36882](https://github.com/aws/aws-cdk/issues/36882)) ([c29dc17](https://github.com/aws/aws-cdk/commit/c29dc17e770183ef1c83595bd6873b2fb3379d7f)), closes [#&#8203;34977](https://github.com/aws/aws-cdk/issues/34977) - **codebuild:** correct S3 log encryption boolean inversion ([#&#8203;37761](https://github.com/aws/aws-cdk/issues/37761)) ([4031918](https://github.com/aws/aws-cdk/commit/40319185dc645d2afc6acf1d25547a86250e97af)) - **ecs:** enabling the circuitBreaker is not recommended loudly enough ([#&#8203;37755](https://github.com/aws/aws-cdk/issues/37755)) ([a52af7d](https://github.com/aws/aws-cdk/commit/a52af7dc4eb79fc145181602e13c864dd61a197a)) - **eks:** add dependency from HelmChart custom resource to s3 chartAsset IAM policy ([#&#8203;37731](https://github.com/aws/aws-cdk/issues/37731)) ([99d0a5b](https://github.com/aws/aws-cdk/commit/99d0a5ba83771e46aca9971d00af027f42078f4a)), closes [#&#8203;19880](https://github.com/aws/aws-cdk/issues/19880) *** #### Alpha modules (2.253.0-alpha.0) ##### Features - **bedrock-agentcore-alpha:** add OnlineEvaluationConfig and Evaluator L2 constructs ([#&#8203;37615](https://github.com/aws/aws-cdk/issues/37615)) ([c13de04](https://github.com/aws/aws-cdk/commit/c13de04223e32272b0c6c6dd4e2fca8e300fafa8)), closes [#&#8203;37614](https://github.com/aws/aws-cdk/issues/37614) - **glue-alpha:** add extraPythonFiles support to PythonShellJob ([#&#8203;37130](https://github.com/aws/aws-cdk/issues/37130)) ([c9c6f9c](https://github.com/aws/aws-cdk/commit/c9c6f9c1b7c12722d18a45bf8a02c09672f8720d)), closes [#&#8203;34448](https://github.com/aws/aws-cdk/issues/34448) ##### Bug Fixes - **bedrock-agentcore-alpha:** self-managed memory strategy validation throws on unresolved tokens ([#&#8203;37691](https://github.com/aws/aws-cdk/issues/37691)) ([7956537](https://github.com/aws/aws-cdk/commit/79565376cdb642d821625fe10ae5916e7d2e64fe)), closes [#&#8203;37197](https://github.com/aws/aws-cdk/issues/37197) ### [`v2.252.0`](https://github.com/aws/aws-cdk/releases/tag/v2.252.0) [Compare Source](https://github.com/aws/aws-cdk/compare/v2.251.0...v2.252.0) ##### Features - **core:** `Validations` class now supports `addWarning`, `addError`, and `acknowledge` ([#&#8203;37668](https://github.com/aws/aws-cdk/issues/37668)) ([5e8083c](https://github.com/aws/aws-cdk/commit/5e8083c79f2657fe2364a31ed3f26d0d88638920)), closes [aws/aws-cdk-rfcs#899](https://github.com/aws/aws-cdk-rfcs/issues/899) - **core:** add Box API for deferred values with accurate stack traces ([#&#8203;37604](https://github.com/aws/aws-cdk/issues/37604)) ([d592a96](https://github.com/aws/aws-cdk/commit/d592a969caf30c2f62df99c9a269722ae528cd65)) ##### Bug Fixes - **aws-cdk-lib:** cannot be used as a `bundledDependency` ([#&#8203;37726](https://github.com/aws/aws-cdk/issues/37726)) ([6ba0598](https://github.com/aws/aws-cdk/commit/6ba0598d0b1a099db9c74723ac2567cc947ad802)), closes [#&#8203;37717](https://github.com/aws/aws-cdk/issues/37717) - **s3:** resolve S3 notification removal race condition ([#&#8203;37708](https://github.com/aws/aws-cdk/issues/37708)) ([dc5be98](https://github.com/aws/aws-cdk/commit/dc5be981a9568a4bb60e47ec9106696650f0bfc8)), closes [#&#8203;37667](https://github.com/aws/aws-cdk/issues/37667) *** #### Alpha modules (2.252.0-alpha.0) ### [`v2.251.0`](https://github.com/aws/aws-cdk/releases/tag/v2.251.0) [Compare Source](https://github.com/aws/aws-cdk/compare/v2.250.0...v2.251.0) ##### ⚠ BREAKING CHANGES - \*\* L1 resources are automatically generated from public CloudFormation Resource Schemas. They are built to closely reflect the real state of CloudFormation. Sometimes these updates can contain changes that are incompatible with previous types, but more accurately reflect reality. In this release we have changed: aws-elasticloadbalancing: AWS::ElasticLoadBalancing::LoadBalancer: SourceSecurityGroup attribute removed. aws-elasticloadbalancing: AWS::ElasticLoadBalancing::LoadBalancer: PolicyItem type removed. aws-elasticloadbalancing: AWS::ElasticLoadBalancing::LoadBalancer: SourceSecurityGroup type removed. ##### Features - update L1 CloudFormation resource definitions ([#&#8203;37684](https://github.com/aws/aws-cdk/issues/37684)) ([9e6c2ef](https://github.com/aws/aws-cdk/commit/9e6c2efc42b72115414b5874cc77900de4ba13a5)) - **lambda:** add ruby 4.0 runtime ([#&#8203;37650](https://github.com/aws/aws-cdk/issues/37650)) ([04d4337](https://github.com/aws/aws-cdk/commit/04d4337b1d104d9f32e76109675f968da082781c)) - update L1 CloudFormation resource definitions ([#&#8203;37644](https://github.com/aws/aws-cdk/issues/37644)) ([e64f943](https://github.com/aws/aws-cdk/commit/e64f943fec033f404a4830133aa916ebaf0cc2aa)) - **core:** `Validations` class is the new way to add validation plugins to CDK Apps ([#&#8203;37611](https://github.com/aws/aws-cdk/issues/37611)) ([95696b4](https://github.com/aws/aws-cdk/commit/95696b463de0df91fb8d50b15add5200ac6818c1)), closes [#&#8203;37613](https://github.com/aws/aws-cdk/issues/37613) - **core:** graduate `policyValidationBeta1` interfaces to `policyValidation` ([#&#8203;37613](https://github.com/aws/aws-cdk/issues/37613)) ([8c613cf](https://github.com/aws/aws-cdk/commit/8c613cf291eda9920165585bda06c55ef28667bc)) - **ecs:** support for service connect access log configuration ([#&#8203;36067](https://github.com/aws/aws-cdk/issues/36067)) ([5ad1c06](https://github.com/aws/aws-cdk/commit/5ad1c06e196b9f3bfec2bc79c9d7aa85af366ee0)) - **route53:** accelerated recovery for public hosted zone ([#&#8203;36358](https://github.com/aws/aws-cdk/issues/36358)) ([f1b7b03](https://github.com/aws/aws-cdk/commit/f1b7b03e3f65253fed5d934fc2f1d1ea08e3e2fc)) - **synthetics:** support canary group ([#&#8203;35689](https://github.com/aws/aws-cdk/issues/35689)) ([20ccd31](https://github.com/aws/aws-cdk/commit/20ccd310789828854b85faadb603466ac405e695)), closes [#&#8203;34043](https://github.com/aws/aws-cdk/issues/34043) ##### Bug Fixes - **core:** `Stage.policyValidationBeta1` is mutable ([#&#8203;37612](https://github.com/aws/aws-cdk/issues/37612)) ([3c1faf1](https://github.com/aws/aws-cdk/commit/3c1faf13b325587971a461d1837734b09c92909d)) - **core:** construct creation stack traces are implicit ([#&#8203;37643](https://github.com/aws/aws-cdk/issues/37643)) ([5635c20](https://github.com/aws/aws-cdk/commit/5635c208a465772bacb9ea087af98e4e668b9125)) - **core:** synth output is not valid YAML when using policy validation ([#&#8203;37597](https://github.com/aws/aws-cdk/issues/37597)) ([927dd60](https://github.com/aws/aws-cdk/commit/927dd60d6bdab7a57a5b14bd8f0e7df6fe7cfdce)), closes [#&#8203;25331](https://github.com/aws/aws-cdk/issues/25331) - **core:** token stack traces expensively clutter --debug mode ([#&#8203;37642](https://github.com/aws/aws-cdk/issues/37642)) ([498c546](https://github.com/aws/aws-cdk/commit/498c5469f8f132103e16fdb89bd5cf17b1f84dbd)) - **core:** tree metadata does not contain logical ID ([#&#8203;37630](https://github.com/aws/aws-cdk/issues/37630)) ([284ab23](https://github.com/aws/aws-cdk/commit/284ab2367e8fe891fdf4cb2d5a193a695fc1bc49)) - **ec2:** fixing vpc endpoint for eu-isoe-west-1 region ([#&#8203;37596](https://github.com/aws/aws-cdk/issues/37596)) ([555c930](https://github.com/aws/aws-cdk/commit/555c930e3d3eb7248fc695c853ce50c06cd246bd)), closes [#&#8203;31690](https://github.com/aws/aws-cdk/issues/31690) - **events-targets:** make LogGroupTargetInput extend RuleTargetInput for JSII compatibility ([#&#8203;37451](https://github.com/aws/aws-cdk/issues/37451)) ([46dbc7a](https://github.com/aws/aws-cdk/commit/46dbc7abc92ceb84e5271698f5281941d8324769)), closes [#&#8203;36733](https://github.com/aws/aws-cdk/issues/36733) - **lambda:** add `Token.isUnresolved` checks to provisioned poller config validation ([#&#8203;37197](https://github.com/aws/aws-cdk/issues/37197)) ([667ed30](https://github.com/aws/aws-cdk/commit/667ed3019a02564c88fa2b8f7fe56bd46b760c67)) - **stepfunctions-tasks:** warn when CallAwsServiceCrossRegion endpoint is resolved from state input ([#&#8203;37646](https://github.com/aws/aws-cdk/issues/37646)) ([9fdf590](https://github.com/aws/aws-cdk/commit/9fdf5907b12713b62190de4f5ad7c79b97b3a7a4)) *** #### Alpha modules (2.251.0-alpha.0) ##### Features - **bedrock-agentcore-alpha:** add L2 constructs for policy and policy engine ([#&#8203;37238](https://github.com/aws/aws-cdk/issues/37238)) ([1e89e7e](https://github.com/aws/aws-cdk/commit/1e89e7e921a9946cb9c23f967c6b7a33a6048de4)) - **bedrock-agentcore-alpha:** add observability configuration for Runtime ([#&#8203;36689](https://github.com/aws/aws-cdk/issues/36689)) ([34b43aa](https://github.com/aws/aws-cdk/commit/34b43aabe2c3a946ba286812b402ce946222d820)), closes [#&#8203;36596](https://github.com/aws/aws-cdk/issues/36596) - **bedrock-agentcore-alpha:** support No Authorization for AgentCore Gateway ([#&#8203;36610](https://github.com/aws/aws-cdk/issues/36610)) ([f20bd8e](https://github.com/aws/aws-cdk/commit/f20bd8e43700877f7166cdac3cd994876963bc67)) - **dsql-alpha:** initial L2 construct ([#&#8203;34599](https://github.com/aws/aws-cdk/issues/34599)) ([be1a458](https://github.com/aws/aws-cdk/commit/be1a45861a5138b6e397cf076e39dfe0a18d4e99)), closes [#&#8203;34593](https://github.com/aws/aws-cdk/issues/34593) ### [`v2.250.0`](https://github.com/aws/aws-cdk/releases/tag/v2.250.0) [Compare Source](https://github.com/aws/aws-cdk/compare/v2.249.0...v2.250.0) ##### ⚠ BREAKING CHANGES - \*\* L1 resources are automatically generated from public CloudFormation Resource Schemas. They are built to closely reflect the real state of CloudFormation. Sometimes these updates can contain changes that are incompatible with previous types, but more accurately reflect reality. In this release we have changed: aws-emr: AWS::EMR::Cluster: MonitoringConfiguration property removed. aws-emr: AWS::EMR::Cluster: CloudWatchLogConfiguration type removed. aws-emr: AWS::EMR::Cluster: EMRConfiguration type removed. aws-emr: AWS::EMR::Cluster: MonitoringConfiguration type removed. ##### Features - **s3files:** s3Files Lambda L1 integration ([#&#8203;37547](https://github.com/aws/aws-cdk/issues/37547)) ([af41262](https://github.com/aws/aws-cdk/commit/af41262a657e9533abcf07c98d0d2c4fad5e35f0)) - update L1 CloudFormation resource definitions ([#&#8203;37582](https://github.com/aws/aws-cdk/issues/37582)) ([c99ce64](https://github.com/aws/aws-cdk/commit/c99ce64b7715f7bd40b09e08ecf5b05666a5f525)) - **mediapackagev2:** add region attribute on mediapackagev2 resources and extra naming validation ([#&#8203;37526](https://github.com/aws/aws-cdk/issues/37526)) ([112ed67](https://github.com/aws/aws-cdk/commit/112ed67da18a43019a17f330ec6db399cd7d64d0)) ##### Bug Fixes - **eks-v2:** respect securityGroup(s) in KubectlProviderOptions ([#&#8203;37247](https://github.com/aws/aws-cdk/issues/37247)) ([4c530fa](https://github.com/aws/aws-cdk/commit/4c530fa49bbf4b1956f7ebf92b7b517ff668dfdb)), closes [#&#8203;36653](https://github.com/aws/aws-cdk/issues/36653) - **lambda-nodejs:** if entry path is not under project root, bundling in Docker fails in an unclear way ([#&#8203;37572](https://github.com/aws/aws-cdk/issues/37572)) ([73662df](https://github.com/aws/aws-cdk/commit/73662dfdece2e9bacf0afcd8f40ae07b48ed7891)) *** #### Alpha modules (2.250.0-alpha.0) ### [`v2.249.0`](https://github.com/aws/aws-cdk/releases/tag/v2.249.0) [Compare Source](https://github.com/aws/aws-cdk/compare/v2.248.0...v2.249.0) ##### ⚠ BREAKING CHANGES - L1 resources are automatically generated from public CloudFormation Resource Schemas. They are built to closely reflect the real state of CloudFormation. Sometimes these updates can contain changes that are incompatible with previous types, but more accurately reflect reality. In this release we have changed: aws-appstream: AWS::AppStream::Stack: Id attribute removed. aws-appsync: AWS::AppSync::GraphQLApi: LogConfig.CloudWatchLogsRoleArn property is now required. aws-appsync: AWS::AppSync::GraphQLApi: LogConfig.FieldLogLevel property is now required. aws-kafkaconnect: AWS::KafkaConnect::Connector: ProvisionedCapacity.McuCount property is now required. ##### Features - **batch:** add AL2023 image types and default to AL2023 (under feature flag) ([#&#8203;37539](https://github.com/aws/aws-cdk/issues/37539)) ([6c1251c](https://github.com/aws/aws-cdk/commit/6c1251c5b18b99a31b6973d3877907f93b5130f0)), closes [#&#8203;35839](https://github.com/aws/aws-cdk/issues/35839) [#&#8203;37205](https://github.com/aws/aws-cdk/issues/37205) - update L1 CloudFormation resource definitions ([f28bb0e](https://github.com/aws/aws-cdk/commit/f28bb0ea65e6cd777299e14c364d33f8cd4a7af9)) - update L1 CloudFormation resource definitions ([#&#8203;37530](https://github.com/aws/aws-cdk/issues/37530)) ([117562c](https://github.com/aws/aws-cdk/commit/117562c3545720a5ed5127ecadae02787241b483)) - **core:** add source tracing for L1 construct property mutations ([#&#8203;37543](https://github.com/aws/aws-cdk/issues/37543)) ([8f38378](https://github.com/aws/aws-cdk/commit/8f3837807ef5d06d249c59cf9a567a71a4d4cc8d)) ##### Bug Fixes - ensure issues created outside templates receive needs-triage label ([#&#8203;37505](https://github.com/aws/aws-cdk/issues/37505)) ([58cb92a](https://github.com/aws/aws-cdk/commit/58cb92a30fb3c3984f9360a39cce3dbdf46999e9)), closes [#&#8203;37454](https://github.com/aws/aws-cdk/issues/37454) [Abogical/aws-cdk#24](https://github.com/Abogical/aws-cdk/issues/24) - include cfn-property-mixins in spec-update workflow gen step ([e847c52](https://github.com/aws/aws-cdk/commit/e847c52d750089aa0213f620fc55de70fc06b3cd)), closes [#&#8203;36300](https://github.com/aws/aws-cdk/issues/36300) *** #### Alpha modules (2.249.0-alpha.0) ### [`v2.248.0`](https://github.com/aws/aws-cdk/releases/tag/v2.248.0) [Compare Source](https://github.com/aws/aws-cdk/compare/v2.247.0...v2.248.0) ##### Bug Fixes - **eks:** downgrade isolated subnet validation from error to warning ([#&#8203;37500](https://github.com/aws/aws-cdk/issues/37500)) ([470856c](https://github.com/aws/aws-cdk/commit/470856cadcee34b2ec5e0620fab63838c223fd97)), closes [#&#8203;37491](https://github.com/aws/aws-cdk/issues/37491) *** #### Alpha modules (2.248.0-alpha.0) ### [`v2.247.0`](https://github.com/aws/aws-cdk/releases/tag/v2.247.0) [Compare Source](https://github.com/aws/aws-cdk/compare/v2.246.0...v2.247.0) ##### ⚠ BREAKING CHANGES - \*\* L1 resources are automatically generated from public CloudFormation Resource Schemas. They are built to closely reflect the real state of CloudFormation. Sometimes these updates can contain changes that are incompatible with previous types, but more accurately reflect reality. In this release we have changed: aws-bedrockagentcore: AWS::BedrockAgentCore::OnlineEvaluationConfig: ExecutionStatus attribute removed. aws-appstream: AWS::AppStream::ImageBuilder: Name property is now immutable. aws-eks: AWS::EKS::Capability: EKS_CAPABILITY_ACK_S3_LOGS vended log type removed. ##### Features - update L1 CloudFormation resource definitions ([#&#8203;37410](https://github.com/aws/aws-cdk/issues/37410)) ([bd2c318](https://github.com/aws/aws-cdk/commit/bd2c3187323c7bcf8a19943f86682c14c601d1a9)) - **apigatewayv2:** add role support for lambda authorizers ([#&#8203;35706](https://github.com/aws/aws-cdk/issues/35706)) ([2fb2f16](https://github.com/aws/aws-cdk/commit/2fb2f1650e957979e5ebf8292df3a95d41baa4ff)), closes [#&#8203;35696](https://github.com/aws/aws-cdk/issues/35696) - **batch:** skip unregister job definition on update ([#&#8203;36011](https://github.com/aws/aws-cdk/issues/36011)) ([2fb2240](https://github.com/aws/aws-cdk/commit/2fb2240d2b2ca922e0603c3e341bb61ce9131155)) - **elasticloadbalancingv2:** jwt verification for application load balancer ([#&#8203;36099](https://github.com/aws/aws-cdk/issues/36099)) ([aacd28a](https://github.com/aws/aws-cdk/commit/aacd28aac59dbf42973302e3165140d944356b32)), closes [#&#8203;36096](https://github.com/aws/aws-cdk/issues/36096) ##### Bug Fixes - bump brace-expansion from 5.0.3 to 5.0.5 to address CVE-2026-33750 ([#&#8203;37379](https://github.com/aws/aws-cdk/issues/37379)) ([69cf4c9](https://github.com/aws/aws-cdk/commit/69cf4c9c44c610eb029d92e355efcf6e7f931ed2)) - prevent prototype pollution in 2 APIs ([#&#8203;37453](https://github.com/aws/aws-cdk/issues/37453)) ([1016537](https://github.com/aws/aws-cdk/commit/101653766cab8a8112608e170f5e07f5b962ba49)) - **aws-cdk-lib:** condensed stack trace hides namespaced package name ([#&#8203;37413](https://github.com/aws/aws-cdk/issues/37413)) ([cb8e7fb](https://github.com/aws/aws-cdk/commit/cb8e7fbc9fc10682d505b2cdba1a7ce173b0dfd3)) *** #### Alpha modules (2.247.0-alpha.0) ##### Features - **mediapackagev2-alpha:** new L2 construct ([#&#8203;37279](https://github.com/aws/aws-cdk/issues/37279)) ([7debfb9](https://github.com/aws/aws-cdk/commit/7debfb9c5e807fac5df6e9e0ea3097d72325ffbc)) ### [`v2.246.0`](https://github.com/aws/aws-cdk/releases/tag/v2.246.0) [Compare Source](https://github.com/aws/aws-cdk/compare/v2.245.0...v2.246.0) ##### Features - **bedrock:** add MiniMax and GLM foundation model identifiers ([#&#8203;37348](https://github.com/aws/aws-cdk/issues/37348)) ([2015344](https://github.com/aws/aws-cdk/commit/201534444ac183959119c1849f34931fa8f3d18d)), closes [#&#8203;37347](https://github.com/aws/aws-cdk/issues/37347) ##### Bug Fixes - **dynamodb:** throw error when grantee is an unsupported ServicePrincipal ([#&#8203;37335](https://github.com/aws/aws-cdk/issues/37335)) ([d12754f](https://github.com/aws/aws-cdk/commit/d12754fdeda48181b235cbf563358ffeaa1e4c2f)), closes [#&#8203;35817](https://github.com/aws/aws-cdk/issues/35817) [/github.com/aws/aws-cdk/issues/37273#issuecomment-4099645443](https://github.com/aws//github.com/aws/aws-cdk/issues/37273/issues/issuecomment-4099645443) - **lambda-nodejs:** use powershell for spawn steps on Windows ([#&#8203;37412](https://github.com/aws/aws-cdk/issues/37412)) ([a92105c](https://github.com/aws/aws-cdk/commit/a92105c64c4ff30bd85f506ef4f7dec39a923871)), closes [#&#8203;37387](https://github.com/aws/aws-cdk/issues/37387) - **core:** noisy property deprecation warnings ([#&#8203;37415](https://github.com/aws/aws-cdk/pull/37415)) ([4fd0002](https://github.com/aws/aws-cdk/commit/4fd000271d26a3dd9f1617800d07e02b40af7db1)), closes [#&#8203;37407](https://github.com/aws/aws-cdk/issues/37407) ##### Reverts - **core:** add source tracing for L1 construct property mutations ([#&#8203;37415](https://github.com/aws/aws-cdk/issues/37415)) ([4fd0002](https://github.com/aws/aws-cdk/commit/4fd000271d26a3dd9f1617800d07e02b40af7db1)), closes [aws/aws-cdk#37285](https://github.com/aws/aws-cdk/issues/37285) *** #### Alpha modules (2.246.0-alpha.0) ### [`v2.245.0`](https://github.com/aws/aws-cdk/releases/tag/v2.245.0) [Compare Source](https://github.com/aws/aws-cdk/compare/v2.244.0...v2.245.0) ##### Features - update L1 CloudFormation resource definitions ([#&#8203;37332](https://github.com/aws/aws-cdk/issues/37332)) ([6cdf84a](https://github.com/aws/aws-cdk/commit/6cdf84aa9a50ef41dae54f14c2bcf4f48d46dbd1)) - **autoscaling:** add instanceLifecyclePolicy support to AutoScalingGroup Property ([#&#8203;36434](https://github.com/aws/aws-cdk/issues/36434)) ([b72ffcc](https://github.com/aws/aws-cdk/commit/b72ffcc343a7bff1745dfea4d1e8de4a0d6b998e)) - **cloudfront:** use JavaScript runtime 2.0 as the default for CloudFront Functions (under feature flag) ([#&#8203;35941](https://github.com/aws/aws-cdk/issues/35941)) ([cd0df14](https://github.com/aws/aws-cdk/commit/cd0df148fdb0d48b14d7d161641519942083b879)) - **core:** add source tracing for L1 construct property mutations ([#&#8203;37285](https://github.com/aws/aws-cdk/issues/37285)) ([f0b6da8](https://github.com/aws/aws-cdk/commit/f0b6da82b49da6611f871b67497db8d5004738a2)) - **ecr-assets:** add support for docker build context ([#&#8203;36930](https://github.com/aws/aws-cdk/issues/36930)) ([c0849ea](https://github.com/aws/aws-cdk/commit/c0849ea241c8f8707b26f07239aa1078b196bf1c)), closes [#&#8203;31598](https://github.com/aws/aws-cdk/issues/31598) - **s3:** add blockedEncryptionTypes field to s3.Bucket ([#&#8203;37047](https://github.com/aws/aws-cdk/issues/37047)) ([262e8a7](https://github.com/aws/aws-cdk/commit/262e8a76e7f50cefeceff265c7d135f35c0d520f)), closes [#&#8203;36988](https://github.com/aws/aws-cdk/issues/36988) - **synthetics:** add enum value for Synthetics Canary NodeJS 3.1 runtime ([#&#8203;37282](https://github.com/aws/aws-cdk/issues/37282)) ([af1e89c](https://github.com/aws/aws-cdk/commit/af1e89cbf7d9d96f0c23f05fb8bdca0e9d442b7d)), closes [/docs.aws.amazon.com/AmazonCloudWatch/latest/monitoring/CloudWatch_Synthetics_Library_Nodejs.html#CloudWatch_Synthetics_runtimeversion-syn-nodejs-3](https://github.com/aws//docs.aws.amazon.com/AmazonCloudWatch/latest/monitoring/CloudWatch_Synthetics_Library_Nodejs.html/issues/CloudWatch_Synthetics_runtimeversion-syn-nodejs-3) ##### Bug Fixes - **aws-cdk-lib:** toolkit is unaware of CDK app errors ([#&#8203;37294](https://github.com/aws/aws-cdk/issues/37294)) ([093de92](https://github.com/aws/aws-cdk/commit/093de927b4b5d0d0ad5c68580af1c7e7f56e12c6)) - **eks:** throw error when kubectl subnets are isolated ([#&#8203;37217](https://github.com/aws/aws-cdk/issues/37217)) ([73e5006](https://github.com/aws/aws-cdk/commit/73e50061168fc147d6af5fb60917ef003d385fd2)), closes [#&#8203;26613](https://github.com/aws/aws-cdk/issues/26613) - **lambda:** fix typo in addPermission() warning message ([#&#8203;37365](https://github.com/aws/aws-cdk/issues/37365)) ([fa21e62](https://github.com/aws/aws-cdk/commit/fa21e623484ad1ed191e542e93b16811a8ef08b6)) - **lambda-nodejs:** use direct spawn for local bundling ([#&#8203;37292](https://github.com/aws/aws-cdk/issues/37292)) ([9bf4263](https://github.com/aws/aws-cdk/commit/9bf4263ea631cae7c0cfff8872ec4fb3a3164cc1)) - **mixin:** use withMixin in Stack to set mixin metadata in its constructs ([#&#8203;37269](https://github.com/aws/aws-cdk/issues/37269)) ([293ce90](https://github.com/aws/aws-cdk/commit/293ce907d6c01e91e7f78bf9590e05aef4ae89a7)), closes [/github.com/aws/aws-cdk/blob/main/packages/aws-cdk-lib/core/lib/mixins/private/mixin-metadata.ts#L30](https://github.com/aws//github.com/aws/aws-cdk/blob/main/packages/aws-cdk-lib/core/lib/mixins/private/mixin-metadata.ts/issues/L30) - **rds:** enablePerformanceInsights false is ignored when other performance insight properties are set ([#&#8203;37287](https://github.com/aws/aws-cdk/issues/37287)) ([b4bca75](https://github.com/aws/aws-cdk/commit/b4bca75d23832576840e6780bf5a62c260761cd7)), closes [#&#8203;37051](https://github.com/aws/aws-cdk/issues/37051) - construct errors are rendered in a messy way ([#&#8203;37290](https://github.com/aws/aws-cdk/issues/37290)) ([5104256](https://github.com/aws/aws-cdk/commit/5104256853a1cede1494ff065e9ce7abbce69e58)) - **spec2cdk:** throw on unrecognized uppercase prefix in event pattern ([#&#8203;37283](https://github.com/aws/aws-cdk/issues/37283)) ([c68f2f5](https://github.com/aws/aws-cdk/commit/c68f2f5961b24fba3f4a4b769e355b00d91fd6a1)) *** #### Alpha modules (2.245.0-alpha.0) ##### Features - **s3tables-alpha:** add support for partition spec, sort order, and table properties ([#&#8203;36811](https://github.com/aws/aws-cdk/issues/36811)) ([2696cd1](https://github.com/aws/aws-cdk/commit/2696cd16e8e2edc8d40f1443b9c87eb6171e5d1f)) - **s3tables-alpha:** add metrics configuration support for TableBucket ([#&#8203;37275](https://github.com/aws/aws-cdk/issues/37275)) ([e8786f5](https://github.com/aws/aws-cdk/commit/e8786f5d782d906971f933a2d6d432309d5384d7)) - **s3tables-alpha:** implement ITaggableV2 on TableBucket and Table L2 constructs ([#&#8203;37277](https://github.com/aws/aws-cdk/issues/37277)) ([69c8944](https://github.com/aws/aws-cdk/commit/69c8944ea3f4abf0f4218af2fc42c8e862e8cad3)), closes [#&#8203;33054](https://github.com/aws/aws-cdk/issues/33054) ### [`v2.244.0`](https://github.com/aws/aws-cdk/releases/tag/v2.244.0) [Compare Source](https://github.com/aws/aws-cdk/compare/v2.243.0...v2.244.0) ##### Features - **codebuild:** add support for macOS 26 runners ([#&#8203;37240](https://github.com/aws/aws-cdk/issues/37240)) ([1b7b292](https://github.com/aws/aws-cdk/commit/1b7b2929fccd786c0bd38ea735b90aef9e470106)), closes [#&#8203;37241](https://github.com/aws/aws-cdk/issues/37241) [#&#8203;35836](https://github.com/aws/aws-cdk/issues/35836) - update L1 CloudFormation resource definitions ([#&#8203;37260](https://github.com/aws/aws-cdk/issues/37260)) ([40a5142](https://github.com/aws/aws-cdk/commit/40a5142771b1ea450a2f7c684e102548a626ddba)) - **rds:** add standalone resource creation for ParameterGroup ([#&#8203;37165](https://github.com/aws/aws-cdk/issues/37165)) ([5441a51](https://github.com/aws/aws-cdk/commit/5441a515b6aab9e091c7a09f96663c723b122bcf)), closes [#&#8203;9741](https://github.com/aws/aws-cdk/issues/9741) - **ecs:** add forceNewDeployment feature for ecs service ([#&#8203;35726](https://github.com/aws/aws-cdk/issues/35726)) ([d16dc7e](https://github.com/aws/aws-cdk/commit/d16dc7e433c4986f3473b2992ba36bee9fb64f1e)), closes [#&#8203;27762](https://github.com/aws/aws-cdk/issues/27762) - **mixins:** helpers to convert between Aspects and Mixins ([#&#8203;37235](https://github.com/aws/aws-cdk/issues/37235)) ([4537f69](https://github.com/aws/aws-cdk/commit/4537f694f7b8da5fa038b994031998c85bfbe3c8)) - **spec2cdk:** add `actions()` method to Grants classes ([#&#8203;36987](https://github.com/aws/aws-cdk/issues/36987)) ([bbeaf5d](https://github.com/aws/aws-cdk/commit/bbeaf5df5aef3f926586b4fe94fbcb6f903da8ce)) ##### Bug Fixes - **aws-cdk-lib:** error annotations now have error codes ([#&#8203;37270](https://github.com/aws/aws-cdk/issues/37270)) ([0b9629e](https://github.com/aws/aws-cdk/commit/0b9629e421a2edc41d749af13ba058eba14342fa)) - **eks:** clear OCI repo/version after local pull for Helm v4 compatibility ([#&#8203;37142](https://github.com/aws/aws-cdk/issues/37142)) ([e6a8804](https://github.com/aws/aws-cdk/commit/e6a88047b5776a69156ef5116930e5788ee550b7)), closes [/github.com/helm/helm/blob/v3.19.0/pkg/action/install.go#L753-L769](https://github.com/aws//github.com/helm/helm/blob/v3.19.0/pkg/action/install.go/issues/L753-L769) [/github.com/helm/helm/blob/main/pkg/action/install.go#L893-L909](https://github.com/aws//github.com/helm/helm/blob/main/pkg/action/install.go/issues/L893-L909) - all errors now have error codes ([#&#8203;36934](https://github.com/aws/aws-cdk/issues/36934)) ([408c12f](https://github.com/aws/aws-cdk/commit/408c12f0b00fede5c3a8b1d43024e961087adcfa)) *** #### Alpha modules (2.244.0-alpha.0) ##### Bug Fixes - **kinesisanalytics-flink-alpha:** mark deprecated flink runtimes as deprecated ([#&#8203;37155](https://github.com/aws/aws-cdk/issues/37155)) ([0a89447](https://github.com/aws/aws-cdk/commit/0a894472650bb1a2c41050ae2b00581fb937c924)) ### [`v2.243.0`](https://github.com/aws/aws-cdk/releases/tag/v2.243.0) [Compare Source](https://github.com/aws/aws-cdk/compare/v2.242.0...v2.243.0) ##### Features - update L1 CloudFormation resource definitions ([#&#8203;37201](https://github.com/aws/aws-cdk/issues/37201)) ([85daaf5](https://github.com/aws/aws-cdk/commit/85daaf5b58ca6c4184f215e48a4e953e228fd42e)) - **cfn-property-mixins:** graduate to stable [@&#8203;aws-cdk/cfn-property-mixins](https://github.com/aws-cdk/cfn-property-mixins) package ([#&#8203;37215](https://github.com/aws/aws-cdk/issues/37215)) ([f071e67](https://github.com/aws/aws-cdk/commit/f071e67878cf27aefd07c8820b2de8bdf5431d56)) ##### Bug Fixes - **dynamodb:** resource policies don't have the index ARNs when indexes are added after granting permissions ([#&#8203;37213](https://github.com/aws/aws-cdk/issues/37213)) ([eb37071](https://github.com/aws/aws-cdk/commit/eb37071ac4ce0c2aaef850315d6b2d7e0149fcdc)) *** #### Alpha modules (2.243.0-alpha.0) ### [`v2.242.0`](https://github.com/aws/aws-cdk/releases/tag/v2.242.0) [Compare Source](https://github.com/aws/aws-cdk/compare/v2.241.0...v2.242.0) ##### ⚠ BREAKING CHANGES - \*\* L1 resources are automatically generated from public CloudFormation Resource Schemas. They are built to closely reflect the real state of CloudFormation. Sometimes these updates can contain changes that are incompatible with previous types, but more accurately reflect reality. In this release we have changed: - **aws-ssm**: AWS::SSM::MaintenanceWindow: Id attribute removed. ##### Features - **core:** support `PropertyMergeStrategy` to merge arbitrary CFN property objects ([#&#8203;37206](https://github.com/aws/aws-cdk/issues/37206)) ([793ad97](https://github.com/aws/aws-cdk/commit/793ad97da99064741e54018a3d1dcb5800eb922e)) - **ecr:** add RepositoryAutoDeleteImages mixin ([#&#8203;37176](https://github.com/aws/aws-cdk/issues/37176)) ([3189116](https://github.com/aws/aws-cdk/commit/318911634d2ca20d2e631f40f2260053072dfb37)) - `s3` and `ecs` service mixins are now available in `aws-cdk-lib` ([#&#8203;37151](https://github.com/aws/aws-cdk/issues/37151)) ([52c99da](https://github.com/aws/aws-cdk/commit/52c99da86ccb17d4c6dcce8dfd1cf4849a83312c)) - update L1 CloudFormation resource definitions ([#&#8203;37173](https://github.com/aws/aws-cdk/issues/37173)) ([1dfaf5f](https://github.com/aws/aws-cdk/commit/1dfaf5f0b80a5b4083b42e679c90c9a51ca7d458)), closes [#&#8203;37BFF5](https://github.com/aws/aws-cdk/issues/37BFF5) [#&#8203;37BFF5](https://github.com/aws/aws-cdk/issues/37BFF5) - **apigateway:** add TLS 1.3 security policies for domain names ([#&#8203;36303](https://github.com/aws/aws-cdk/issues/36303)) ([9d0300b](https://github.com/aws/aws-cdk/commit/9d0300b44e3a2f7e964f2e3126e3b86725200874)), closes [#&#8203;36280](https://github.com/aws/aws-cdk/issues/36280) - **appsync:** add EnhancedMetricsConfigProperty for GraphQL api ([#&#8203;35328](https://github.com/aws/aws-cdk/issues/35328)) ([ebfaf89](https://github.com/aws/aws-cdk/commit/ebfaf89e6a9018d19eb29dcb42f2a1ec93e81d57)), closes [#&#8203;29933](https://github.com/aws/aws-cdk/issues/29933) - **opensearchservice:** s3 vectors engine ([#&#8203;36382](https://github.com/aws/aws-cdk/issues/36382)) ([c0b1d4e](https://github.com/aws/aws-cdk/commit/c0b1d4ea8de000106720978d4bf585b26ababb20)) - **s3:** graduate BucketAutoDeleteObjects mixin into aws-cdk-lib ([#&#8203;37161](https://github.com/aws/aws-cdk/issues/37161)) ([e5ddd79](https://github.com/aws/aws-cdk/commit/e5ddd799a29f0df5efaeb1e1a5644a8d85a9a60f)) ##### Bug Fixes - **aws-cdk-lib:** `Asset` uses a lot of memory ([#&#8203;37186](https://github.com/aws/aws-cdk/issues/37186)) ([70cae75](https://github.com/aws/aws-cdk/commit/70cae754867dbed305375f67cebbf864567de68f)) - large amounts of metadata can break 512MB string limit ([#&#8203;34480](https://github.com/aws/aws-cdk/issues/34480)) ([20c3154](https://github.com/aws/aws-cdk/commit/20c315457c234ea7fd882bb737621adbbbbf5228)) - **opensearchservice:** `enableAutoSoftwareUpdate: false` is not reflected in the CloudFormation template ([#&#8203;37152](https://github.com/aws/aws-cdk/issues/37152)) ([dec8e6f](https://github.com/aws/aws-cdk/commit/dec8e6fffc309743d5b79e15af4d1a0659d0d17e)), closes [#&#8203;36382](https://github.com/aws/aws-cdk/issues/36382) - **s3:** discover existing bucket policies in default trait factory ([#&#8203;37166](https://github.com/aws/aws-cdk/issues/37166)) ([f090816](https://github.com/aws/aws-cdk/commit/f09081640e6d9c6a75e146b8438e8b73a13c4974)) *** #### Alpha modules (2.242.0-alpha.0) ##### Features - **mixins-preview:** allow passing resource objects into properties in CFN Property mixins ([#&#8203;37148](https://github.com/aws/aws-cdk/issues/37148)) ([f238629](https://github.com/aws/aws-cdk/commit/f2386291a50961660135b6d13b576a3744fa5ecf)) - **mixins-preview:** generate EventBridge pattern for all events ([#&#8203;37081](https://github.com/aws/aws-cdk/issues/37081)) ([f30e836](https://github.com/aws/aws-cdk/commit/f30e8360112c724ce386f26d7d2bf10d6a58e479)) - **mixins-preview:** support custom merge strategies via IMergeStrategy ([#&#8203;37170](https://github.com/aws/aws-cdk/issues/37170)) ([0dec011](https://github.com/aws/aws-cdk/commit/0dec0113c45f5808e2afd45ac5be1d044e577a4b)) ### [`v2.241.0`](https://github.com/aws/aws-cdk/releases/tag/v2.241.0) [Compare Source](https://github.com/aws/aws-cdk/compare/v2.240.0...v2.241.0) ##### ⚠ BREAKING CHANGES - \*\* L1 resources are automatically generated from public CloudFormation Resource Schemas. They are built to closely reflect the real state of CloudFormation. Sometimes these updates can contain changes that are incompatible with previous types, but more accurately reflect reality. In this release we have changed: aws-codedeploy: AWS::CodeDeploy::DeploymentGroup: Id attribute removed. ##### Features - update L1 CloudFormation resource definitions ([#&#8203;37103](https://github.com/aws/aws-cdk/issues/37103)) ([f1ee45c](https://github.com/aws/aws-cdk/commit/f1ee45cdac16e804afbba2db05bc93c568915b73)) - **autoscaling:** add deletionProtection property to AutoScalingGroup ([#&#8203;36924](https://github.com/aws/aws-cdk/issues/36924)) ([467f2b4](https://github.com/aws/aws-cdk/commit/467f2b49debe7c05d427e7ca05cbff8b8e1780f2)) - **core:** introducing CDK Mixins ([#&#8203;37055](https://github.com/aws/aws-cdk/issues/37055)) ([cda96cb](https://github.com/aws/aws-cdk/commit/cda96cb9b408411da2e0f14b0a22c440b76943f4)) - **eks:** add support for Kubernetes version 1.35 ([#&#8203;37065](https://github.com/aws/aws-cdk/issues/37065)) ([909fca3](https://github.com/aws/aws-cdk/commit/909fca35ad5f9fda569ccbb8ea43a3175cdad4b2)), closes [#&#8203;36920](https://github.com/aws/aws-cdk/issues/36920) [#&#8203;36016](https://github.com/aws/aws-cdk/issues/36016) [cdklabs/awscdk-asset-kubectl#2669](https://github.com/cdklabs/awscdk-asset-kubectl/issues/2669) [#&#8203;37070](https://github.com/aws/aws-cdk/issues/37070) [#&#8203;36950](https://github.com/aws/aws-cdk/issues/36950) [#&#8203;36016](https://github.com/aws/aws-cdk/issues/36016) - **s3:** attribute-based access control ([#&#8203;36229](https://github.com/aws/aws-cdk/issues/36229)) ([9ec4db3](https://github.com/aws/aws-cdk/commit/9ec4db3add76e085ad12feef1f9a72483a30b202)) ##### Bug Fixes - bump minimatch to ^10.2.3 to resolve ReDoS vulnerabilities ([#&#8203;37127](https://github.com/aws/aws-cdk/issues/37127)) ([c359329](https://github.com/aws/aws-cdk/commit/c3593297569f051c70b506a2e7f4035f8c8ee662)), closes [#&#8203;37100](https://github.com/aws/aws-cdk/issues/37100) - **dynamodb:** fix SID for grants on multi-account global tables ([#&#8203;37057](https://github.com/aws/aws-cdk/issues/37057)) ([98d5e82](https://github.com/aws/aws-cdk/commit/98d5e82079b574913a46f4c0588e98bd0181acbe)) - **rds:** correct engine version deprecation tags and add missing versions ([#&#8203;37080](https://github.com/aws/aws-cdk/issues/37080)) ([127b359](https://github.com/aws/aws-cdk/commit/127b35989a2a64f66de241022ecfe643179b9dd6)), closes [#&#8203;37079](https://github.com/aws/aws-cdk/issues/37079) [#&#8203;36937](https://github.com/aws/aws-cdk/issues/36937) *** #### Alpha modules (2.241.0-alpha.0) ##### Features - **mixins-preview:** add `recordFields` and `outputFormat` to Vended Logs Mixin ([#&#8203;37042](https://github.com/aws/aws-cdk/issues/37042)) ([dd94c31](https://github.com/aws/aws-cdk/commit/dd94c312ae77cd9b51cbf6d544c85a2af6a7cdc8)) - **mixins-preview:** cross account delivery destinations ([#&#8203;36827](https://github.com/aws/aws-cdk/issues/36827)) ([a759eb6](https://github.com/aws/aws-cdk/commit/a759eb69d560ff039d09d62e91627bb267a664e5)) ### [`v2.240.0`](https://github.com/aws/aws-cdk/releases/tag/v2.240.0) [Compare Source](https://github.com/aws/aws-cdk/compare/v2.239.0...v2.240.0) ##### Features - update L1 CloudFormation resource definitions ([#&#8203;37039](https://github.com/aws/aws-cdk/issues/37039)) ([17b2d93](https://github.com/aws/aws-cdk/commit/17b2d93f1f1aa422729e344649d43eb92e3999de)) - **eks-v2:** graduate to stable 🚀 ([#&#8203;36950](https://github.com/aws/aws-cdk/issues/36950)) ([a7de51c](https://github.com/aws/aws-cdk/commit/a7de51c33497b0c4db26c344da19e72eeb9327a7)) - update L1 CloudFormation resource definitions ([#&#8203;37034](https://github.com/aws/aws-cdk/issues/37034)) ([62d40f8](https://github.com/aws/aws-cdk/commit/62d40f85388bfb78ad7997b75c094b5dfd52347d)) ##### Bug Fixes - bump minimatch to ^10.2.1 to resolve ReDoS vulnerability (GHSA-3ppc-4f35-3m26) ([#&#8203;37027](https://github.com/aws/aws-cdk/issues/37027)) ([e48ea41](https://github.com/aws/aws-cdk/commit/e48ea41cc049264cb3d64ac99b8250202de96c29)) *** #### Alpha modules (2.240.0-alpha.0) ### [`v2.239.0`](https://github.com/aws/aws-cdk/releases/tag/v2.239.0) [Compare Source](https://github.com/aws/aws-cdk/compare/v2.238.0...v2.239.0) ##### ⚠ BREAKING CHANGES - \*\* L1 resources are automatically generated from public CloudFormation Resource Schemas. They are built to closely reflect the real state of CloudFormation. Sometimes these updates can contain changes that are incompatible with previous types, but more accurately reflect reality. In this release we have changed: aws-licensemanager: AWS::LicenseManager::License: Beneficiary property is now required aws-licensemanager: AWS::LicenseManager::License: ProductSKU property is now required aws-sagemaker: AWS::SageMaker::Cluster: Orchestrator.Eks property is now immutable ##### Features - update L1 CloudFormation resource definitions ([#&#8203;37031](https://github.com/aws/aws-cdk/issues/37031)) ([bc65c09](https://github.com/aws/aws-cdk/commit/bc65c09fc43279ada39c9213e03f4e7fed103be8)) - **dynamodb:** add cross-account global table replication support ([#&#8203;36895](https://github.com/aws/aws-cdk/issues/36895)) ([353a9bb](https://github.com/aws/aws-cdk/commit/353a9bbb27c501972cc1638f7361060ba2e5aa1b)) - **kinesisfirehose:** support dynamic partitioning ([#&#8203;35903](https://github.com/aws/aws-cdk/issues/35903)) ([4f86a05](https://github.com/aws/aws-cdk/commit/4f86a05cbf43885e7017b3af3111315dbf31ff16)), closes [#&#8203;28740](https://github.com/aws/aws-cdk/issues/28740) - resource policy and encrypted resource wrappers for L1s ([#&#8203;36849](https://github.com/aws/aws-cdk/issues/36849)) ([ee87e26](https://github.com/aws/aws-cdk/commit/ee87e26dfd36fa3b36b20445071aeb577f114283)) - update L1 CloudFormation resource definitions ([#&#8203;36923](https://github.com/aws/aws-cdk/issues/36923)) ([64cfc4d](https://github.com/aws/aws-cdk/commit/64cfc4d3a38a7de070e56de2f5b28f91152de491)) - update L1 CloudFormation resource definitions ([#&#8203;36997](https://github.com/aws/aws-cdk/issues/36997)) ([e3eecad](https://github.com/aws/aws-cdk/commit/e3eecad143499cce542c30bce4554e88714e3029)) ##### Bug Fixes - **aws-cdk-lib:** update cloud-assembly-schema to resolve peer dependency conflict ([#&#8203;36953](https://github.com/aws/aws-cdk/issues/36953)) ([f194236](https://github.com/aws/aws-cdk/commit/f194236b086eaf49996e809f616919ee117c7ba1)), closes [#&#8203;36939](https://github.com/aws/aws-cdk/issues/36939) - **aws-cdk-lib:** upgrade version of `ajv` that triggers CVE scanners ([#&#8203;37022](https://github.com/aws/aws-cdk/issues/37022)) ([45662ba](https://github.com/aws/aws-cdk/commit/45662bad301cbaf67f3d13590c25adfab118bdf1)) - **ec2:** add VPC endpoint naming conventions for some isolated regions ([#&#8203;36794](https://github.com/aws/aws-cdk/issues/36794)) ([5a7fca5](https://github.com/aws/aws-cdk/commit/5a7fca5f91b11d572cbc25bf3b0efae1ee70cacd)) - **rds:** mark deprecated versions and add new engine versions ([#&#8203;36937](https://github.com/aws/aws-cdk/issues/36937)) ([6e061d0](https://github.com/aws/aws-cdk/commit/6e061d0df410556ffb45eed770436cfe7d0ad3e1)) *** #### Alpha modules (2.239.0-alpha.0) ##### ⚠ BREAKING CHANGES redshift-alpha: update default node type from `DC2_LARGE` to `RA3_LARGE` ##### Features - **bedrock-agentcore-alpha:** add `fromCodeAsset` method to create runtime artifact with local code assets ([#&#8203;36472](https://github.com/aws/aws-cdk/issues/36472)) ([c5a87e6](https://github.com/aws/aws-cdk/commit/c5a87e6682a3668de849d4c7a0913fdee3eb170c)), closes [#&#8203;36473](https://github.com/aws/aws-cdk/issues/36473) - **bedrock-agentcore-alpha:** added new target type (api gateway) in agentcore gateway target. ([#&#8203;36841](https://github.com/aws/aws-cdk/issues/36841)) ([0842754](https://github.com/aws/aws-cdk/commit/0842754ec56412a9b22f2e92f5aea7c86129ec52)), closes [#&#8203;36817](https://github.com/aws/aws-cdk/issues/36817) - **mixins-preview:** add ECS ClusterSettingsMixin ([#&#8203;36796](https://github.com/aws/aws-cdk/issues/36796)) ([b8ab5be](https://github.com/aws/aws-cdk/commit/b8ab5be8f2e0733433a55dd48b26e7f56f6e0393)) - **mixins-preview:** add s3 bucket mixin for publicAccessBlock ([#&#8203;36905](https://github.com/aws/aws-cdk/issues/36905)) ([feed4b2](https://github.com/aws/aws-cdk/commit/feed4b2690bd481e464dd3ececa4cba0997a03db)) - **mixins-preview:** send Vended Logs to pre-created DeliveryDestination using `toDestination()` ([#&#8203;36896](https://github.com/aws/aws-cdk/issues/36896)) ([48f1fe6](https://github.com/aws/aws-cdk/commit/48f1fe6aa86473a25ffdcf53cfecb5e1169b54db)) ##### Bug Fixes - **redshift-alpha:** update default node type from `DC2_LARGE` to `RA3_LARGE` ([#&#8203;36516](https://github.com/aws/aws-cdk/issues/36516)) ([ea19e5c](https://github.com/aws/aws-cdk/commit/ea19e5cde2e64d5cdcdfa3af41764542e77e221c)), closes [#&#8203;36416](https://github.com/aws/aws-cdk/issues/36416) ### [`v2.238.0`](https://github.com/aws/aws-cdk/releases/tag/v2.238.0) [Compare Source](https://github.com/aws/aws-cdk/compare/v2.237.1...v2.238.0) ##### ⚠ BREAKING CHANGES - **bedrock-agentcore:** Interface extensions require new property implementations - **aws-bedrock-agentcore-alpha:** - - IGateway now requires gatewayRef getter - - IGatewayTarget now requires gatewayTargetRef getter - - IMemory now requires memoryRef getter - - IBedrockAgentRuntime now requires runtimeRef getter - - IRuntimeEndpoint now requires runtimeEndpointRef getter - - IBrowserCustom now requires browserCustomRef getter - - ICodeInterpreterCustom now requires codeInterpreterCustomRef getter ##### Features - update L1 CloudFormation resource definitions ([#&#8203;36834](https://github.com/aws/aws-cdk/issues/36834)) ([5143fdf](https://github.com/aws/aws-cdk/commit/5143fdfb57024ced8d9a2988216c78690f6121b0)) - **core:** allow indentation suppression in nested stacks ([#&#8203;35122](https://github.com/aws/aws-cdk/issues/35122)) ([d629b15](https://github.com/aws/aws-cdk/commit/d629b15954bd313876de2df055265e27569af5a4)), closes [#&#8203;32798](https://github.com/aws/aws-cdk/issues/32798) [/github.com/aws/aws-cdk/blob/main/packages/aws-cdk-lib/core/lib/stack.ts#L207](https://github.com/aws//github.com/aws/aws-cdk/blob/main/packages/aws-cdk-lib/core/lib/stack.ts/issues/L207) [/github.com/aws/aws-cdk/blob/main/packages/aws-cdk-lib/core/lib/stack.ts#L207](https://github.com/aws//github.com/aws/aws-cdk/blob/main/packages/aws-cdk-lib/core/lib/stack.ts/issues/L207) [/github.com/aws/aws-cdk/blob/main/packages/aws-cdk-lib/core/lib/nested-stack.ts#L25C18-L25C34](https://github.com/aws//github.com/aws/aws-cdk/blob/main/packages/aws-cdk-lib/core/lib/nested-stack.ts/issues/L25C18-L25C34) - **ec2:** support Firehose `IDeliveryStreamRef` as flow log destination ([#&#8203;36278](https://github.com/aws/aws-cdk/issues/36278)) ([cd73498](https://github.com/aws/aws-cdk/commit/cd73498af34fcc150c1290c5bd1f21c272239802)), closes [#&#8203;33883](https://github.com/aws/aws-cdk/issues/33883) [#&#8203;34596](https://github.com/aws/aws-cdk/issues/34596) [#&#8203;33757](https://github.com/aws/aws-cdk/issues/33757) - **eks:** add removal policy for all constructs ([#&#8203;35835](https://github.com/aws/aws-cdk/issues/35835)) ([875d9b8](https://github.com/aws/aws-cdk/commit/875d9b8f7dc4e3e1a5187b89303de3645485e3cf)) - **eks:** add support for EC2, HYBRID_LINUX, and HYPERPOD_LINUX access entry types ([#&#8203;36350](https://github.com/aws/aws-cdk/issues/36350)) ([cc059c6](https://github.com/aws/aws-cdk/commit/cc059c6dcfe12240057f5fc58bd076083fd77acd)), closes [#&#8203;34394](https://github.com/aws/aws-cdk/issues/34394) - **glue:** typed partition projection ([#&#8203;35660](https://github.com/aws/aws-cdk/issues/35660)) ([cb1658f](https://github.com/aws/aws-cdk/commit/cb1658f42522ad9abaec4de6ce0c0d43292e73a1)), closes [#&#8203;35428](https://github.com/aws/aws-cdk/issues/35428) ##### Bug Fixes - **core:** intrinsic cfn function tokens are not detected as such in java ([#&#8203;36843](https://github.com/aws/aws-cdk/issues/36843)) ([3f29f11](https://github.com/aws/aws-cdk/commit/3f29f11d942b3f005732f17c3f606d081b8ba0d7)) - **events:** restore `Match.anyOf` support for raw strings ([#&#8203;36908](https://github.com/aws/aws-cdk/issues/36908)) ([6804c7c](https://github.com/aws/aws-cdk/commit/6804c7c75c7e67f1c61dac4aea43af5fa54969e2)), closes [#&#8203;36902](https://github.com/aws/aws-cdk/issues/36902) [#&#8203;36602](https://github.com/aws/aws-cdk/issues/36602) [#&#8203;36602](https://github.com/aws/aws-cdk/issues/36602) - **iam:** undeprecate openIdConnectProviderArn and openIdConnectProviderIssuer in IOidcProvider ([#&#8203;36859](https://github.com/aws/aws-cdk/issues/36859)) ([cbf0b03](https://github.com/aws/aws-cdk/commit/cbf0b03d58559574752b3ebe80e9cb596e0ef6b0)) ##### Miscellaneous Chores - **bedrock-agentcore:** reference interface ([#&#8203;36803](https://github.com/aws/aws-cdk/issues/36803)) ([87f1087](https://github.com/aws/aws-cdk/commit/87f1087060e7c15616500e31de6a0603c37b8843)) *** #### Alpha modules (2.238.0-alpha.0) ##### Features - **eks-v2-alpha:** add support for bootstrapSelfManagedAddons ([#&#8203;36740](https://github.com/aws/aws-cdk/issues/36740)) ([1ffe38d](https://github.com/aws/aws-cdk/commit/1ffe38dc950a096cb5e1c1ee20f2c49899dc0a23)) - **eks-v2-alpha:** add support for EKS hybrid nodes ([#&#8203;36749](https://github.com/aws/aws-cdk/issues/36749)) ([48ace56](https://github.com/aws/aws-cdk/commit/48ace56d82537630fc339cb41962473a97375aea)) ##### Bug Fixes - **eks-v2-alpha:** ensure kubectl provider and handler functions use the same vpc configuration ([#&#8203;36735](https://github.com/aws/aws-cdk/issues/36735)) ([4e02f08](https://github.com/aws/aws-cdk/commit/4e02f0896069105dae83c46f19f1b346a546ad57)), closes [#&#8203;34878](https://github.com/aws/aws-cdk/issues/34878) [#&#8203;34877](https://github.com/aws/aws-cdk/issues/34877) - **ivs-alpha:** add region constraints to integration tests ([#&#8203;36851](https://github.com/aws/aws-cdk/issues/36851)) ([d55fec4](https://github.com/aws/aws-cdk/commit/d55fec42357410b8263b814b931daf5dccc5c5e3)) - **mixins-preview:** apply mixins in order ([#&#8203;36847](https://github.com/aws/aws-cdk/issues/36847)) ([726060c](https://github.com/aws/aws-cdk/commit/726060c0ea9f57de4c6e13c1f50c330e4fc2608e)) - **mixins-preview:** apply mixins in order in `MixinApplicator` ([#&#8203;36877](https://github.com/aws/aws-cdk/issues/36877)) ([09db1c9](https://github.com/aws/aws-cdk/commit/09db1c99710c9f8e91774e767de93fff1a0d2650)), closes [#&#8203;36847](https://github.com/aws/aws-cdk/issues/36847) ### [`v2.237.1`](https://github.com/aws/aws-cdk/releases/tag/v2.237.1) [Compare Source](https://github.com/aws/aws-cdk/compare/v2.237.0...v2.237.1) ##### Bug Fixes - **core:** intrinsic cfn function tokens are not detected as such in java ([#&#8203;36843](https://github.com/aws/aws-cdk/issues/36843)) ([89cd54f](https://github.com/aws/aws-cdk/commit/89cd54f6097025bc3e98f2c4bc3caea7c22a61ab)) *** #### Alpha modules (2.237.1-alpha.0) ### [`v2.237.0`](https://github.com/aws/aws-cdk/releases/tag/v2.237.0) [Compare Source](https://github.com/aws/aws-cdk/compare/v2.236.0...v2.237.0) ##### ⚠ BREAKING CHANGES - **iam:** Receivers of `IEncryptedResource` objects now have fewer guarantees about the shape of the object. If you still require an `IResource`, change the type to `IEncryptedResource & IResource` and/or add a type guard check using `Resource.isResource()`. Implementations of `IEncryptedResource` no longer need to implement `IResource` but must continue to implement `IEnvironmentAware`. Since `IResource` extends `IEnvironmentAware`, there is no change for implementors. Calls to `GrantableResources.isEncryptedResource()` now require an `IEnvironmentAware` argument instead of `IConstruct`. ##### Features - **eks:** add OidcProviderNative using L1 and deprecate OpenIdConnectProvider custom resource ([#&#8203;36589](https://github.com/aws/aws-cdk/issues/36589)) ([09383cb](https://github.com/aws/aws-cdk/commit/09383cbad28336441f0fb405c9d8a190135620dc)) - **eks:** add support overwriteServiceAccount prop in service account construct ([#&#8203;36751](https://github.com/aws/aws-cdk/issues/36751)) ([3aa38f6](https://github.com/aws/aws-cdk/commit/3aa38f677d6d1c562c8c2e721b4b4a1f254270db)) - **kms:** make `trustAccountIdentities` optional in `KeyGrants` ([#&#8203;36786](https://github.com/aws/aws-cdk/issues/36786)) ([06676ac](https://github.com/aws/aws-cdk/commit/06676acaa1e8f4dc33c4690dd326cb867303ba0b)) - **lambda:** add observability support for kafka event source mappings ([#&#8203;36808](https://github.com/aws/aws-cdk/issues/36808)) ([dd8b419](https://github.com/aws/aws-cdk/commit/dd8b419b94e1cca719838ee9f85fe0c1ab40f394)) - update L1 CloudFormation resource definitions ([#&#8203;36799](https://github.com/aws/aws-cdk/issues/36799)) ([7ecd0a9](https://github.com/aws/aws-cdk/commit/7ecd0a9f1473809c1e196f4cfe7a23967a42378a)) - **opensearchservice:** support OI2 instance type with local NVMe storage ([#&#8203;36700](https://github.com/aws/aws-cdk/issues/36700)) ([034baf3](https://github.com/aws/aws-cdk/commit/034baf37e91fbc67235eaa96e2c5b7a557e37801)), closes [#&#8203;36698](https://github.com/aws/aws-cdk/issues/36698) ##### Bug Fixes - **iam:** `IEncryptedResource` extends `IEnvironmentAware` instead of `IResource` ([#&#8203;36787](https://github.com/aws/aws-cdk/issues/36787)) ([90ad834](https://github.com/aws/aws-cdk/commit/90ad834e7c65069e5ab8219600a4fdbef401bebb)) *** #### Alpha modules (2.237.0-alpha.0) ##### Features - **bedrock-agentcore-alpha:** add support for custom claims and scopes to runtime/gateway authorizers ([#&#8203;36810](https://github.com/aws/aws-cdk/issues/36810)) ([a3abcd0](https://github.com/aws/aws-cdk/commit/a3abcd010648e83bed273dff8f581291b5b3c902)) - **eks-v2-alpha:** pass additional helm chart values to aws-load-balancer-controller ([#&#8203;36754](https://github.com/aws/aws-cdk/issues/36754)) ([cf61814](https://github.com/aws/aws-cdk/commit/cf61814ac58448ddd70682e45c07dd8ca58c4fd1)), closes [/github.com/kubernetes-sigs/aws-load-balancer-controller/blob/main/helm/aws-load-balancer-controller/values.yaml#L199](https://github.com/aws//github.com/kubernetes-sigs/aws-load-balancer-controller/blob/main/helm/aws-load-balancer-controller/values.yaml/issues/L199) - **mixins-preview:** align Mixins API with latest RFC proposal ([#&#8203;36825](https://github.com/aws/aws-cdk/issues/36825)) ([82c2fdb](https://github.com/aws/aws-cdk/commit/82c2fdb246557fa4804e2dc88ce16c28db52956c)) - **mixins-preview:** handle destination bucket with KMS keys ([#&#8203;36776](https://github.com/aws/aws-cdk/issues/36776)) ([950401f](https://github.com/aws/aws-cdk/commit/950401f405751a7634927af0d7667c97ddddd73d)) ##### Bug Fixes - **bedrock-agentcore-alpha:** construct ID collision when multiple schemas are set ([#&#8203;36565](https://github.com/aws/aws-cdk/issues/36565)) ([9ebfb62](https://github.com/aws/aws-cdk/commit/9ebfb62d6c6599bee2bf477cdc6b4b6da0a4030a)), closes [#&#8203;36559](https://github.com/aws/aws-cdk/issues/36559) ### [`v2.236.0`](https://github.com/aws/aws-cdk/releases/tag/v2.236.0) [Compare Source](https://github.com/aws/aws-cdk/compare/v2.235.1...v2.236.0) ##### Features - update L1 CloudFormation resource definitions ([#&#8203;36721](https://github.com/aws/aws-cdk/issues/36721)) ([7a4a443](https://github.com/aws/aws-cdk/commit/7a4a44329d7b71a12ba566885aa5fd730c0c2475)) - **ecs:** add capacityOptionType (Spot support) to ManagedInstancesCapacityProvider L2 construct ([#&#8203;36497](https://github.com/aws/aws-cdk/issues/36497)) ([e8ad85b](https://github.com/aws/aws-cdk/commit/e8ad85b3122e8c84e19adf0ffdfd71d79ba090f9)), closes [#&#8203;35648](https://github.com/aws/aws-cdk/issues/35648) - **ecs:** add built-in Linear and Canary deployments ([#&#8203;35981](https://github.com/aws/aws-cdk/issues/35981)) ([67ac5e7](https://github.com/aws/aws-cdk/commit/67ac5e7685e6eb8993e49aa010e43d8002998498)), closes [#&#8203;35986](https://github.com/aws/aws-cdk/issues/35986) [#&#8203;35987](https://github.com/aws/aws-cdk/issues/35987) - **logs:** add support for deletion protection configuration ([#&#8203;36583](https://github.com/aws/aws-cdk/issues/36583)) ([c4d1389](https://github.com/aws/aws-cdk/commit/c4d13895339ef44ffc4cd6f86d80014a8d33a3f6)), closes [#&#8203;36554](https://github.com/aws/aws-cdk/issues/36554) [#&#8203;36554](https://github.com/aws/aws-cdk/issues/36554) ##### Bug Fixes - **apigatewayv2:** use custom domain name instead of regional domain name when importing domain name via fromDomainNameAttributes ([#&#8203;36710](https://github.com/aws/aws-cdk/issues/36710)) ([fe6eb0b](https://github.com/aws/aws-cdk/commit/fe6eb0b9130953d5ff35bd05b643253f9b6c3247)) - **batch:** undeprecate useOptimalInstanceClasses property ([#&#8203;36353](https://github.com/aws/aws-cdk/issues/36353)) ([3485d53](https://github.com/aws/aws-cdk/commit/3485d5399b6cfebc3461247643d4866242311152)), closes [#&#8203;36291](https://github.com/aws/aws-cdk/issues/36291) [#&#8203;36291](https://github.com/aws/aws-cdk/issues/36291) - **core:** resources allocate unnecessary string tokens upon instantiation ([#&#8203;36692](https://github.com/aws/aws-cdk/issues/36692)) ([59d4928](https://github.com/aws/aws-cdk/commit/59d49286f656a5341e907d298f30decbc8959bcf)) - **core:** tree.json unintentionally includes telemetry metadata ([#&#8203;36748](https://github.com/aws/aws-cdk/issues/36748)) ([87fd86b](https://github.com/aws/aws-cdk/commit/87fd86be736b24ab18ea2ee7a2c96b724a67c903)) - **scheduler:** scheduleName returns undefined when imported from ARN ([#&#8203;36400](https://github.com/aws/aws-cdk/issues/36400)) ([752bd9b](https://github.com/aws/aws-cdk/commit/752bd9b7c31d027be6918cd7c8ebddb4b3d29e77)), closes [#&#8203;36361](https://github.com/aws/aws-cdk/issues/36361) - recent change to IAlarmAction breaks too many implementors ([#&#8203;36695](https://github.com/aws/aws-cdk/issues/36695)) ([0c5b0db](https://github.com/aws/aws-cdk/commit/0c5b0dbb08bd1bc965067e1fbe7b2ec7e82e697b)) *** #### Alpha modules (2.236.0-alpha.0) ##### Features - **bedrock-agentcore-alpha:** added episodic memory strategy ([#&#8203;36591](https://github.com/aws/aws-cdk/issues/36591)) ([21dcfc6](https://github.com/aws/aws-cdk/commit/21dcfc6807a3876e2275bdac6f1e4f7564a66100)) - **bedrock-agentcore-alpha:** added gateway interceptors ([#&#8203;36604](https://github.com/aws/aws-cdk/issues/36604)) ([ba8aa48](https://github.com/aws/aws-cdk/commit/ba8aa48a33b1e008194d6b6b13d10c41019f56b4)) - **bedrock-agentcore-alpha:** make physical name properties optional for AgentCore resources ([#&#8203;36354](https://github.com/aws/aws-cdk/issues/36354)) ([5137d81](https://github.com/aws/aws-cdk/commit/5137d811a92eb63f52d2bfa0713a660f5476839e)), closes [#&#8203;36341](https://github.com/aws/aws-cdk/issues/36341) - **mixins-preview:** expose `BucketPolicyStatementsMixin` publicly ([#&#8203;36771](https://github.com/aws/aws-cdk/issues/36771)) ([458156d](https://github.com/aws/aws-cdk/commit/458156dd43ced89c893687415d7c2a2fce141653)) - **sagemaker:** add containerStartupHealthCheckTimeoutInSeconds support for EndpointConfig ([#&#8203;35626](https://github.com/aws/aws-cdk/issues/35626)) ([47d707a](https://github.com/aws/aws-cdk/commit/47d707aac809fda8ec5302bf927380e8060d380a)), closes [#&#8203;35566](https://github.com/aws/aws-cdk/issues/35566) ##### Bug Fixes - **eks-v2-alpha:** ensure kubectl provider access entry is depended upon by downstream resources ([#&#8203;36734](https://github.com/aws/aws-cdk/issues/36734)) ([e104f45](https://github.com/aws/aws-cdk/commit/e104f45654177e87e2fb46510f77d02fcf20c499)), closes [#&#8203;34898](https://github.com/aws/aws-cdk/issues/34898) [#&#8203;34897](https://github.com/aws/aws-cdk/issues/34897) ### [`v2.235.1`](https://github.com/aws/aws-cdk/releases/tag/v2.235.1) [Compare Source](https://github.com/aws/aws-cdk/compare/v2.235.0...v2.235.1) ##### Bug Fixes - **apigatewayv2:** use custom domain name instead of regional domain name when importing domain name via fromDomainNameAttributes ([#&#8203;36710](https://github.com/aws/aws-cdk/issues/36710)) ([29e5642](https://github.com/aws/aws-cdk/commit/29e5642266190ef7d8cf3cccdb50ea2caa6919db)) *** #### Alpha modules (2.235.1-alpha.0) ### [`v2.235.0`](https://github.com/aws/aws-cdk/releases/tag/v2.235.0) [Compare Source](https://github.com/aws/aws-cdk/compare/v2.234.1...v2.235.0) ##### ⚠ BREAKING CHANGES - \*\* L1 resources are automatically generated from public CloudFormation Resource Schemas. They are built to closely reflect the real state of CloudFormation. Sometimes these updates can contain changes that are incompatible with previous types, but more accurately reflect reality. In this release we have changed: * aws-ecs: AWS::ECS::CapacityProvider: ManagedInstancesNetworkConfiguration.SecurityGroups property is now required. - **ecs:** `securityGroups` is now required in `ManagedInstancesCapacityProviderProps`. CloudFormation has always required this field, so any code that omitted it would have failed at deployment time with a validation error. This change catches the error at compile time instead, improving the developer experience. If your code previously omitted `securityGroups`, you must now explicitly provide at least one security group. - **aws-cdk-lib:** `JobQueue.computeEnvironments` contains an `computeEnvironment: IComputeEnvironment → IComputeEnvironmentRef`. `BackupPlanRule.props` contains a `backupVault: IBackupVault → IBackupVaultRef`. `ApiDestination.fromApiDestinationAttributes()` return type `ApiDestination → IApiDestination`. This should never have returned a class but always an interface, as is the standard for referencing factories. `EventDestination.bus` changed `IEventBus →IEventBusRef`; `FlowLogDestination.bind()` now returns and `ICluster.executeCommandConfiguration` contains a member changing type `ILogGroup → ILogGroupRef`. - **events:** `ApiDestination.fromApiDestinationAttributes()` now returns an `IApiDestination`. It used to return an `ApiDestination` but this was a mistake, referencing methods always return a type by interface, not by class.`EventDestination.bus` used to be an `IEventBus` but is now an `IEventBusRef`; it needs to be type tested to assert it is actually an `IEventBus` if that is necessary. - **logs:** the return types of `FlowLogDestination.bind()` and `ICluster.executeCommandConfiguration` now contain an `ILogGroupRef` instead of an `ILogGroup`, which guarantees less. These fields are for communication between constructs, and their values should not be used by application builders. If they do, they will need to add a cast or a type check. - **iot-actions:** `enableBatchConfig` property is explicitly disabled by default. Even with this modification, the behavior of HttpAction remains unchanged from before, but only the Cfn template will be modified. ##### Features - update L1 CloudFormation resource definitions ([#&#8203;36694](https://github.com/aws/aws-cdk/issues/36694)) ([861f437](https://github.com/aws/aws-cdk/commit/861f437146d6bc284bfd3f6e09ccf22b542e281f)) - **apigatewayv2-integrations:** add PutEvents support for EventBridge integration ([#&#8203;35766](https://github.com/aws/aws-cdk/issues/35766)) ([d879e4d](https://github.com/aws/aws-cdk/commit/d879e4d4058932f5dafd468fee6eddef6dc793d2)), closes [#&#8203;35714](https://github.com/aws/aws-cdk/issues/35714) [#&#8203;35714](https://github.com/aws/aws-cdk/issues/35714) - **ecs:** add none log driver option for ECS containers ([#&#8203;35819](https://github.com/aws/aws-cdk/issues/35819)) ([5636820](https://github.com/aws/aws-cdk/commit/563682026f0941922cf1123687484966847f3cb0)), closes [#&#8203;35795](https://github.com/aws/aws-cdk/issues/35795) [#&#8203;35795](https://github.com/aws/aws-cdk/issues/35795) - **iot-actions:** batching HTTP action messages ([#&#8203;36642](https://github.com/aws/aws-cdk/issues/36642)) ([fbc50ea](https://github.com/aws/aws-cdk/commit/fbc50eaab2189552fd54c2c38998a85bde82581f)) - **rds:** add Read/Write IOPS metrics to DatabaseInstance and VolumeRead/Write IOPs metrics to DatabaseCluster ([#&#8203;35773](https://github.com/aws/aws-cdk/issues/35773)) ([d8e023d](https://github.com/aws/aws-cdk/commit/d8e023d823c316a91a771c533c12dc678b07d773)), closes [#&#8203;35327](https://github.com/aws/aws-cdk/issues/35327) [#&#8203;35327](https://github.com/aws/aws-cdk/issues/35327) - **rds:** support default auth scheme for RDS Proxy ([#&#8203;35635](https://github.com/aws/aws-cdk/issues/35635)) ([99f6c74](https://github.com/aws/aws-cdk/commit/99f6c74e214b8e015aaad3029208f2f6d974008b)), closes [#&#8203;35558](https://github.com/aws/aws-cdk/issues/35558) - **spec2cdk:** support for auto-generated grants in alpha modules ([#&#8203;36206](https://github.com/aws/aws-cdk/issues/36206)) ([776f837](https://github.com/aws/aws-cdk/commit/776f837f5b979a08c2c3113463a670ff00594710)) - **synthetics:** add syn-nodejs-3.0 runtime ([#&#8203;36652](https://github.com/aws/aws-cdk/issues/36652)) ([18f9fef](https://github.com/aws/aws-cdk/commit/18f9fef5a0a4288c3d001c25fe8420e2a002c8ce)), closes [#&#8203;36648](https://github.com/aws/aws-cdk/issues/36648) - **synthetics:** playwright 4.0 and 5.0 runtimes ([#&#8203;36590](https://github.com/aws/aws-cdk/issues/36590)) ([82cd9a6](https://github.com/aws/aws-cdk/commit/82cd9a685727241f37207f6f06797d316eb17ea2)) ##### Bug Fixes - **aws-cdk-lib:** reference interfaces for remaining services ([#&#8203;36359](https://github.com/aws/aws-cdk/issues/36359)) ([ed1f9de](https://github.com/aws/aws-cdk/commit/ed1f9de27b56310bfc2b1fe06679133242d746cc)) - **core:** make DetachedConstruct.node non-enumerable ([#&#8203;36672](https://github.com/aws/aws-cdk/issues/36672)) ([98d41ca](https://github.com/aws/aws-cdk/commit/98d41caf641fd086d940a3a8e769fac4eac6c361)), closes [#&#8203;36078](https://github.com/aws/aws-cdk/issues/36078) [#&#8203;36015](https://github.com/aws/aws-cdk/issues/36015) - **ecs:** make securityGroups required in ManagedInstancesCapacityProvider ([#&#8203;36685](https://github.com/aws/aws-cdk/issues/36685)) ([6734426](https://github.com/aws/aws-cdk/commit/6734426a517bc8bf3e4b9ea5d4206f40ae286d1e)) - **events:** event Matcher class to be compatible with mergeEventPattern function ([#&#8203;36602](https://github.com/aws/aws-cdk/issues/36602)) ([e3f7dba](https://github.com/aws/aws-cdk/commit/e3f7dba10e6e11af596f5458a6969fafb5313208)), closes [/github.com/aws/aws-cdk/blob/main/packages/aws-cdk-lib/aws-s3/lib/bucket.ts#L657-L657](https://github.com/aws//github.com/aws/aws-cdk/blob/main/packages/aws-cdk-lib/aws-s3/lib/bucket.ts/issues/L657-L657) - **opensearchservice:** use KMS Key ARN for cross-account encryption ([#&#8203;36020](https://github.com/aws/aws-cdk/issues/36020)) ([cccd94c](https://github.com/aws/aws-cdk/commit/cccd94cebb8aab3241afb2eda8571143eaa478c7)), closes [#&#8203;36017](https://github.com/aws/aws-cdk/issues/36017) - **stepfunctions:** allow JSONata expressions for Map maxConcurrency ([#&#8203;36462](https://github.com/aws/aws-cdk/issues/36462)) ([2230c87](https://github.com/aws/aws-cdk/commit/2230c878928d9724b15bd9f924ff7e47d324150c)), closes [#&#8203;36274](https://github.com/aws/aws-cdk/issues/36274) - `RuntimeError: apiEndpoint is not configured on the imported HttpApi` (revert of "chore(apigatewayv2): reference interfaces") ([#&#8203;36623](https://github.com/aws/aws-cdk/issues/36623)) ([fb17d39](https://github.com/aws/aws-cdk/commit/fb17d39054d9a41345a5b4c83c44b32a838e3c86)), closes [aws/aws-cdk#36378](https://github.com/aws/aws-cdk/issues/36378) ##### Miscellaneous Chores - **events:** reference interfaces ([#&#8203;36535](https://github.com/aws/aws-cdk/issues/36535)) ([0bea5c9](https://github.com/aws/aws-cdk/commit/0bea5c99c22ac71e0c7e860e2c42b85d8ba95fba)) - **logs:** reference interfaces ([#&#8203;36566](https://github.com/aws/aws-cdk/issues/36566)) ([5b426b8](https://github.com/aws/aws-cdk/commit/5b426b89114414b634e479f53b76b66337cd509a)) *** #### Alpha modules (2.235.0-alpha.0) ##### ⚠ BREAKING CHANGES - **bedrock-agentcore-alpha:** The User Pool Client will be replaced and new Resource Server and Domain resources will be added for existing Gateway stacks using the default Cognito authorizer. ##### Checklist - [x] My code adheres to the [CONTRIBUTING GUIDE](https://github.com/aws/aws-cdk/blob/main/CONTRIBUTING.md) and [DESIGN GUIDELINES](https://github.com/aws/aws-cdk/blob/main/docs/DESIGN_GUIDELINES.md) ##### Bug Fixes - **bedrock-agentcore-alpha:** default Cognito User Pool for AgentCore Gateway is not set up for M2M authentication. ([#&#8203;36323](https://github.com/aws/aws-cdk/issues/36323)) ([5a5605a](https://github.com/aws/aws-cdk/commit/5a5605aafdba676ea1d73edd3ebdbfaf7dfe668d)) ### [`v2.234.1`](https://github.com/aws/aws-cdk/releases/tag/v2.234.1) [Compare Source](https://github.com/aws/aws-cdk/compare/v2.234.0...v2.234.1) ##### Bug Fixes - `RuntimeError: apiEndpoint is not configured on the imported HttpApi` (revert of "chore(apigatewayv2): reference interfaces") ([#&#8203;36623](https://github.com/aws/aws-cdk/issues/36623)) ([1c10d49](https://github.com/aws/aws-cdk/commit/1c10d495ffd81a90a91cc6779c75e59f27bbc1e0)), closes [aws/aws-cdk#36378](https://github.com/aws/aws-cdk/issues/36378) *** #### Alpha modules (2.234.1-alpha.0) ### [`v2.234.0`](https://github.com/aws/aws-cdk/releases/tag/v2.234.0) [Compare Source](https://github.com/aws/aws-cdk/compare/v2.233.0...v2.234.0) ##### ⚠ BREAKING CHANGES - **batch:** unfortunately `JobQueue` exposes `public readonly computeEnvironments: OrderedComputeEnvironment[]`. The `computeEnvironment` member of that structure now fewer guarantees, and needs casting. This should not have been exposed, and we assume the use of the exposed property here is rare. - **backup:** unfortunately `BackupPlanRule` exposes `public readonly props: BackupPlanRuleProps`. The `backupVault` member of that structure now guarantees less, and needs casting. This should never have been exposed, and we assume the use of the exposed property here is rare. - \*\* L1 resources are automatically generated from public CloudFormation Resource Schemas. They are built to closely reflect the real state of CloudFormation. Sometimes these updates can contain changes that are incompatible with previous types, but more accurately reflect reality. In this release we have changed: aws-securityhub: AWS::SecurityHub::ConnectorV2: Provider.JiraCloud.AuthStatus attribute removed.\ aws-securityhub: AWS::SecurityHub::ConnectorV2: Provider.JiraCloud.AuthUrl attribute removed.\ aws-securityhub: AWS::SecurityHub::ConnectorV2: Provider.JiraCloud.CloudId attribute removed.\ aws-securityhub: AWS::SecurityHub::ConnectorV2: Provider.JiraCloud.Domain attribute removed.\ aws-securityhub: AWS::SecurityHub::ConnectorV2: Provider.ServiceNow\.AuthStatus attribute removed.\ aws-securityhub: AWS::SecurityHub::ConnectorV2: JiraCloud type removed, replaced by JiraCloudProviderConfiguration.\ aws-securityhub: AWS::SecurityHub::ConnectorV2: ServiceNow type removed, replaced by ServiceNowProviderConfiguration.\ aws-ssm: AWS::SSM::MaintenanceWindowTarget: Id attribute removed. ##### Features - **ecs:** automatically create ec2InstanceProfile for ManagedInstancesCapacityProvider ([#&#8203;35796](https://github.com/aws/aws-cdk/issues/35796)) ([9218ea8](https://github.com/aws/aws-cdk/commit/9218ea8356f43dacab177e1ae74c7bb7c4aceedd)) - **rds:** add name property to option group ([#&#8203;36319](https://github.com/aws/aws-cdk/issues/36319)) ([708d0ac](https://github.com/aws/aws-cdk/commit/708d0acce8e5c9339a9c8b2574d8b6e2556eebd8)), closes [#&#8203;35720](https://github.com/aws/aws-cdk/issues/35720) - **stepfunctions-tasks:** allow EcsRunTask on fargate and ec2 to set capacity provider strategy ([#&#8203;35465](https://github.com/aws/aws-cdk/issues/35465)) ([63ca2ae](https://github.com/aws/aws-cdk/commit/63ca2ae07507c0726c28c990931cca748eb0dcda)), closes [#&#8203;20013](https://github.com/aws/aws-cdk/issues/20013) [#&#8203;30171](https://github.com/aws/aws-cdk/issues/30171) [#&#8203;7967](https://github.com/aws/aws-cdk/issues/7967) - **synthetics:** add puppeteer 12.0/13.0 runtime ([#&#8203;36562](https://github.com/aws/aws-cdk/issues/36562)) ([5b74dd4](https://github.com/aws/aws-cdk/commit/5b74dd45abb700cebc33c811114c95f0b098aa6a)), closes [#&#8203;36501](https://github.com/aws/aws-cdk/issues/36501) ##### Bug Fixes - **cloudwatch:** skip MathExpression validation when prop is a token ([#&#8203;36487](https://github.com/aws/aws-cdk/issues/36487)) ([2845d47](https://github.com/aws/aws-cdk/commit/2845d47e074e3bf7e8d36bf655822c70ae53f094)) - **core:** `App.of()` returns incorrect values ([#&#8203;36475](https://github.com/aws/aws-cdk/issues/36475)) ([78034d3](https://github.com/aws/aws-cdk/commit/78034d32d0b120a4eabaf58d7a87a1c6649d1a8e)) - **core:** `arnForXxxx()` helpers ignore environments from referenced resources ([#&#8203;36599](https://github.com/aws/aws-cdk/issues/36599)) ([4744c59](https://github.com/aws/aws-cdk/commit/4744c5919b85a9943d704379a0413ddf242f97c0)) - **core:** account for `{ Ref }` incompatibility between schema and CFN ([#&#8203;36493](https://github.com/aws/aws-cdk/issues/36493)) ([3b06942](https://github.com/aws/aws-cdk/commit/3b069427f1e912b9deb8c237706c24833fd6fc04)) - **ec2:** add proper handling for VPC endpoint service name prefix eu.amazonaws for new region eusc-de-east-1 for ECR & API Gateway services ([#&#8203;36471](https://github.com/aws/aws-cdk/issues/36471)) ([d5561e0](https://github.com/aws/aws-cdk/commit/d5561e0a3f42e4e0c7ea49e2497bc3c5ced8355f)) - **lambda:** add token resolution validation to capacity providers ([#&#8203;36275](https://github.com/aws/aws-cdk/issues/36275)) ([c5fbd97](https://github.com/aws/aws-cdk/commit/c5fbd97c1496d1e4c1c8585cdf720bac2937e95c)) ##### Miscellaneous Chores - **backup:** reference interfaces ([#&#8203;36415](https://github.com/aws/aws-cdk/issues/36415)) ([4418612](https://github.com/aws/aws-cdk/commit/4418612ab36184bce45b827e8e5955dc00396853)) - **batch:** reference interfaces ([#&#8203;36522](https://github.com/aws/aws-cdk/issues/36522)) ([fefc7be](https://github.com/aws/aws-cdk/commit/fefc7be8f415edf3ee24e0f75768a6acdb12d391)) *** #### Alpha modules (2.234.0-alpha.0) ##### Features - **msk-alpha:** support express broker for Kafka v3.9 ([#&#8203;36450](https://github.com/aws/aws-cdk/issues/36450)) ([afcc953](https://github.com/aws/aws-cdk/commit/afcc95362cbf1dff56f2a3d96f37915dc877d01b)) ##### Bug Fixes - **elasticache-alpha:** deployment fails when serverlessCacheName or userGroupId is not specified ([#&#8203;36459](https://github.com/aws/aws-cdk/issues/36459)) ([b3f62f7](https://github.com/aws/aws-cdk/commit/b3f62f7acd935176d540d6c4e227a4c660fc7481)), closes [#&#8203;36458](https://github.com/aws/aws-cdk/issues/36458) - **elasticache-alpha:** security group for `ServerlessCache` does not use default endpoint port ([#&#8203;35738](https://github.com/aws/aws-cdk/issues/35738)) ([79d91ad](https://github.com/aws/aws-cdk/commit/79d91ad156452540525710b1c5049904bcbfc053)) ### [`v2.233.0`](https://github.com/aws/aws-cdk/releases/tag/v2.233.0) [Compare Source](https://github.com/aws/aws-cdk/compare/v2.232.2...v2.233.0) ##### ⚠ BREAKING CHANGES **CHANGES TO L1 RESOURCES:** L1 resources are automatically generated from public CloudFormation Resource Schemas. They are built to closely reflect the real state of CloudFormation. Sometimes these updates can contain changes that are incompatible with previous types, but more accurately reflect reality. In this release we have changed: aws-ec2: AWS::EC2::EC2Fleet: DefaultTargetCapacityType property is now immutable.\ aws-ec2: AWS::EC2::EC2Fleet: TargetCapacityUnitType property is now immutable. ##### Features - update L1 CloudFormation resource definitions ([#&#8203;36390](https://github.com/aws/aws-cdk/issues/36390)) ([a6077a2](https://github.com/aws/aws-cdk/commit/a6077a20bfa0658ea643ff2d74303d13247c861b)) - **events-targets:** support messageGroupId for standard SQS queues ([#&#8203;36068](https://github.com/aws/aws-cdk/issues/36068)) ([95d4ed5](https://github.com/aws/aws-cdk/commit/95d4ed53d054dad668453eb5e5fa6a79ddb158b5)) - update L1 CloudFormation resource definitions ([#&#8203;36367](https://github.com/aws/aws-cdk/issues/36367)) ([e551afe](https://github.com/aws/aws-cdk/commit/e551afe30a783d0102ff001e3729bafde5a644a7)) - **codebuild:** add support for macOS 15 runners ([#&#8203;35836](https://github.com/aws/aws-cdk/issues/35836)) ([1b8b4e3](https://github.com/aws/aws-cdk/commit/1b8b4e33f91a143b1654e20cdf7d5cbbd85811a7)) - **route53-patterns:** `HttpsRedirect` use `Distribution` as the default CloudFront distribution (under feature flag) ([#&#8203;34312](https://github.com/aws/aws-cdk/issues/34312)) ([e2987eb](https://github.com/aws/aws-cdk/commit/e2987eb322168e563d9ddf214cbffba7316dd821)), closes [#&#8203;31546](https://github.com/aws/aws-cdk/issues/31546) - update L1 CloudFormation resource definitions ([#&#8203;36326](https://github.com/aws/aws-cdk/issues/36326)) ([cb82627](https://github.com/aws/aws-cdk/commit/cb82627b311610b749a28537ff4ee133cfd9d2b9)) - **ec2:** add Interface VPC Endpoints for ACM and ACM-PCA ([#&#8203;35890](https://github.com/aws/aws-cdk/issues/35890)) ([06e6b25](https://github.com/aws/aws-cdk/commit/06e6b25c3a736be065a0a562ed0698c9a72ee66a)) - **route53:** support failover routing policy for record sets ([#&#8203;35909](https://github.com/aws/aws-cdk/issues/35909)) ([9395467](https://github.com/aws/aws-cdk/commit/9395467d3630da052ba5ffae3bbe51b9b13abaef)), closes [#&#8203;35910](https://github.com/aws/aws-cdk/issues/35910) ##### Bug Fixes - **aws-cdk-lib:** make grants factory methods public ([#&#8203;36317](https://github.com/aws/aws-cdk/issues/36317)) ([7dde625](https://github.com/aws/aws-cdk/commit/7dde6251abb58ba6e51df2725031089cefa37959)) - **ci:** checkout the pr head instead of the default main head ([#&#8203;36311](https://github.com/aws/aws-cdk/issues/36311)) ([a1cbcf9](https://github.com/aws/aws-cdk/commit/a1cbcf91e3105e731dc9c41c90a6592e539cde23)), closes [/github.com/aws/aws-cdk/blob/main/.github/workflows/integration-test-deployment.yml#L39C11-L39C57](https://github.com/aws//github.com/aws/aws-cdk/blob/main/.github/workflows/integration-test-deployment.yml/issues/L39C11-L39C57) - **cloudtrail:** do not attach s3 bucket permission when orgId is not set for organization trail ([#&#8203;30778](https://github.com/aws/aws-cdk/issues/30778)) ([61ee074](https://github.com/aws/aws-cdk/commit/61ee074843c51a3acc36691808c5653f4470b1e9)), closes [#&#8203;30490](https://github.com/aws/aws-cdk/issues/30490) - **custom-resources:** waiter state machine retry fails with ExecutionAlreadyExists ([#&#8203;35988](https://github.com/aws/aws-cdk/issues/35988)) ([36ea606](https://github.com/aws/aws-cdk/commit/36ea606334f1a4590a61d19b0675300ee202f798)), closes [#&#8203;35957](https://github.com/aws/aws-cdk/issues/35957) - **ecs:** removal of `canContainersAccessInstanceRole` instance role ([#&#8203;36362](https://github.com/aws/aws-cdk/issues/36362)) ([7395b41](https://github.com/aws/aws-cdk/commit/7395b41687718366940bddb9117bc3a8e9f09863)) - **pipelines:** propagate CodeBuild `fleet` and `certificate` ([#&#8203;35673](https://github.com/aws/aws-cdk/issues/35673)) ([71cfd60](https://github.com/aws/aws-cdk/commit/71cfd607999cfd84cfb4c62757be5c8325477770)), closes [#&#8203;35664](https://github.com/aws/aws-cdk/issues/35664) - **region-info:** standalone use of `@aws-cdk/region-info` throws an `Cannot find module 'aws-cdk-lib/core/lib/errors'` error ([#&#8203;36414](https://github.com/aws/aws-cdk/issues/36414)) ([01c7d2e](https://github.com/aws/aws-cdk/commit/01c7d2eda4df63db4b3c5c3edd05b95ceaf24236)), closes [#&#8203;36399](https://github.com/aws/aws-cdk/issues/36399) - ci fix for spec updater workflow ([#&#8203;36364](https://github.com/aws/aws-cdk/issues/36364)) ([a0b42cc](https://github.com/aws/aws-cdk/commit/a0b42ccb4fa496dba34c6146bba553d83f7ce54d)) - re-export of `ResourceEnvironment` is not an alias ([#&#8203;36370](https://github.com/aws/aws-cdk/issues/36370)) ([ba8e194](https://github.com/aws/aws-cdk/commit/ba8e194891e96848d512e1e60f9143746fde0954)) *** #### Alpha modules (2.233.0-alpha.0) ##### ⚠ BREAKING CHANGES - **bedrock-agentcore-alpha:** Runtime constructs will no longer automatically include lifecycleConfiguration with default values when not explicitly specified by users. - **elasticache-alpha:** The `engine` property in `NoPasswordUserProps` has been removed. ##### Bug Fixes - **bedrock-agentcore-alpha:** runtime construct incorrectly forces default lifecycleConfiguration values ([#&#8203;36379](https://github.com/aws/aws-cdk/issues/36379)) ([7954354](https://github.com/aws/aws-cdk/commit/795435459e06e90aa9818bc99967930b125754bf)), closes [#&#8203;36376](https://github.com/aws/aws-cdk/issues/36376) - **elasticache-alpha:** the default engine for NoPasswordUser contradict in the docs ([#&#8203;35920](https://github.com/aws/aws-cdk/issues/35920)) ([495fa37](https://github.com/aws/aws-cdk/commit/495fa3707a71f025f55bf37fdd13017554b89a32)), closes [#&#8203;35847](https://github.com/aws/aws-cdk/issues/35847) - **mixins-preview:** improving delivery source and delivery destination creation ([#&#8203;36314](https://github.com/aws/aws-cdk/issues/36314)) ([86092ab](https://github.com/aws/aws-cdk/commit/86092ab023681bcf81678ad881b990bccc457737)) ### [`v2.232.2`](https://github.com/aws/aws-cdk/releases/tag/v2.232.2) [Compare Source](https://github.com/aws/aws-cdk/compare/v2.232.1...v2.232.2) ##### Bug Fixes - re-export of `ResourceEnvironment` is not an alias ([#&#8203;36370](https://github.com/aws/aws-cdk/issues/36370)) ([6178d32](https://github.com/aws/aws-cdk/commit/6178d3222e17e77ea67eef060a3faec276595ae8)) *** #### Alpha modules (2.232.2-alpha.0) ### [`v2.232.1`](https://github.com/aws/aws-cdk/releases/tag/v2.232.1) [Compare Source](https://github.com/aws/aws-cdk/compare/v2.232.0...v2.232.1) ##### Bug Fixes - **core:** TypeScript properties missing for types which extend internal interfaces ([#&#8203;36313](https://github.com/aws/aws-cdk/issues/36313)) ([3e7e17c](https://github.com/aws/aws-cdk/commit/3e7e17c0def24567610a541e39195596f5d83387)), closes [#&#8203;36310](https://github.com/aws/aws-cdk/issues/36310) *** #### Alpha modules (2.232.1-alpha.0) ### [`v2.232.0`](https://github.com/aws/aws-cdk/releases/tag/v2.232.0) [Compare Source](https://github.com/aws/aws-cdk/compare/v2.231.0...v2.232.0) ##### Features - update L1 CloudFormation resource definitions ([#&#8203;36299](https://github.com/aws/aws-cdk/issues/36299)) ([0945692](https://github.com/aws/aws-cdk/commit/0945692b91b01b6a8c69e844cffe7629cc52695a)) - **bedrock-agentcore:** add fromImageUri method to AgentRuntimeArtifact ([#&#8203;36263](https://github.com/aws/aws-cdk/issues/36263)) ([ad25aba](https://github.com/aws/aws-cdk/commit/ad25aba9785c6801085525da4d6adcc8c3204a70)) - **lambda:** add support for durable functions ([#&#8203;36282](https://github.com/aws/aws-cdk/issues/36282)) ([599a1d3](https://github.com/aws/aws-cdk/commit/599a1d3b26a1a9edf22f1cde41da323e560145fb)) - update L1 CloudFormation resource definitions ([#&#8203;36277](https://github.com/aws/aws-cdk/issues/36277)) ([c4fa99b](https://github.com/aws/aws-cdk/commit/c4fa99b9149b512494c9ae94b8d4aebba4436eb0)) ##### Bug Fixes - **core:** temp cleanup does not work with jest ([#&#8203;36238](https://github.com/aws/aws-cdk/issues/36238)) ([1f4a224](https://github.com/aws/aws-cdk/commit/1f4a2249b2651115cf02a26fd4bba09b151f426e)), closes [#&#8203;36226](https://github.com/aws/aws-cdk/issues/36226) *** #### Alpha modules (2.232.0-alpha.0) ##### Bug Fixes - **bedrock-agentcore-alpha:** use static construct ID for asset-based runtime artifacts ([#&#8203;36241](https://github.com/aws/aws-cdk/issues/36241)) ([e2bdddd](https://github.com/aws/aws-cdk/commit/e2bdddd82f3e04f1cb2aebb187c580563bae453f)), closes [#&#8203;35968](https://github.com/aws/aws-cdk/issues/35968) - **mixins-preview:** service exports are different then in `aws-cdk-lib` ([#&#8203;36201](https://github.com/aws/aws-cdk/issues/36201)) ([5858006](https://github.com/aws/aws-cdk/commit/585800660b65a3a87d2b358054c7b5e162faabcf)), closes [#&#8203;36210](https://github.com/aws/aws-cdk/issues/36210) - **mixins-preview:** strongly-typed ConstructSelector interface ([#&#8203;36266](https://github.com/aws/aws-cdk/issues/36266)) ([1d2f473](https://github.com/aws/aws-cdk/commit/1d2f4730cc4358d35198980957e4fc01a21e9daf)) ### [`v2.231.0`](https://github.com/aws/aws-cdk/releases/tag/v2.231.0) [Compare Source](https://github.com/aws/aws-cdk/compare/v2.230.0...v2.231.0) ##### Features - **lambda:** support for capacity providers ([#&#8203;36255](https://github.com/aws/aws-cdk/issues/36255)) ([2e4c1cf](https://github.com/aws/aws-cdk/commit/2e4c1cfd461de82e837238ab80eb0be22e9ec4b6)) - update L1 CloudFormation resource definitions ([#&#8203;36253](https://github.com/aws/aws-cdk/issues/36253)) ([8410b13](https://github.com/aws/aws-cdk/commit/8410b1392b9e634282dd56e47b4778304c1afa32)) - **aws-cdk-lib:** add `arnFor<ResourceName>` for 47 more resources ([#&#8203;36231](https://github.com/aws/aws-cdk/issues/36231)) ([5a8be4f](https://github.com/aws/aws-cdk/commit/5a8be4f22b24b0c0ae72a0cf4f5152c678a19029)) - **aws-cdk-lib:** all L1s now have a `isCfn<ResourceName>` static helper to check if a value is this L1 resource ([#&#8203;36243](https://github.com/aws/aws-cdk/issues/36243)) ([dc9db9b](https://github.com/aws/aws-cdk/commit/dc9db9b83d9ff629e4b047da90fbb15935a623ca)) - **ec2:** expose EC2 instance MetadataOptions ([#&#8203;35369](https://github.com/aws/aws-cdk/issues/35369)) ([4056e14](https://github.com/aws/aws-cdk/commit/4056e14105f88c27799b00f0eea1f1b671c5b8c8)), closes [#&#8203;35357](https://github.com/aws/aws-cdk/issues/35357) ##### Bug Fixes - **dynamodb:** unsupported actions added to table resource policy ([#&#8203;36228](https://github.com/aws/aws-cdk/issues/36228)) ([10de047](https://github.com/aws/aws-cdk/commit/10de0470215a6d211983b1457218914bb3c3c388)), closes [#&#8203;32230](https://github.com/aws/aws-cdk/issues/32230) *** #### Alpha modules (2.231.0-alpha.0) ##### Features - **glue-alpha:** support Glue Version 5.1 ([#&#8203;36223](https://github.com/aws/aws-cdk/issues/36223)) ([b956492](https://github.com/aws/aws-cdk/commit/b9564923ee1136e7b680115a2983ad317b0c30fb)) - **imagebuilder-alpha:** add support for Image Construct ([#&#8203;36154](https://github.com/aws/aws-cdk/issues/36154)) ([eee3ae6](https://github.com/aws/aws-cdk/commit/eee3ae6a55ff632012c19c384bb11e91b820bcc3)), closes [aws/aws-cdk-rfcs#789](https://github.com/aws/aws-cdk-rfcs/issues/789) [aws/aws-cdk-rfcs#789](https://github.com/aws/aws-cdk-rfcs/issues/789) ### [`v2.230.0`](https://github.com/aws/aws-cdk/releases/tag/v2.230.0) [Compare Source](https://github.com/aws/aws-cdk/compare/v2.229.1...v2.230.0) ##### Features - **apigateway:** support response streaming with response transfer mode ([#&#8203;36155](https://github.com/aws/aws-cdk/issues/36155)) ([f431021](https://github.com/aws/aws-cdk/commit/f4310219ae134a03693330cb55da5fa1cb789c48)), closes [#&#8203;36156](https://github.com/aws/aws-cdk/issues/36156) - update L1 CloudFormation resource definitions ([f203b8e](https://github.com/aws/aws-cdk/commit/f203b8e2d1af592b70bfe8d1cafc496c5a28b0df)) - update L1 CloudFormation resource definitions ([#&#8203;36193](https://github.com/aws/aws-cdk/issues/36193)) ([d074024](https://github.com/aws/aws-cdk/commit/d0740240d4dc52524faa8328467c92c360f52cc8)) - **events:** the L2 `EventPattern` interfaces can be used with `CfnRule` ([#&#8203;36191](https://github.com/aws/aws-cdk/issues/36191)) ([efc135e](https://github.com/aws/aws-cdk/commit/efc135e60cacc55ccdf3b347c08fb78e5b735d3d)) - update L1 CloudFormation resource definitions ([#&#8203;36180](https://github.com/aws/aws-cdk/issues/36180)) ([5cddd7e](https://github.com/aws/aws-cdk/commit/5cddd7ec34392198436710635bcee1921ce35d10)) ##### Bug Fixes - **ecs:** wrong ARN generated in `Cluster.grantTaskProtection` method ([#&#8203;36207](https://github.com/aws/aws-cdk/issues/36207)) ([9b337df](https://github.com/aws/aws-cdk/commit/9b337dfe2ca0a3920f9542802da73b670915fe01)) - **ecs-patterns:** target group ID changes without setting feature flag ([#&#8203;36199](https://github.com/aws/aws-cdk/issues/36199)) ([b7ca082](https://github.com/aws/aws-cdk/commit/b7ca082ec460db7eccd96661623fb7f7cb26c34e)), closes [#&#8203;36149](https://github.com/aws/aws-cdk/issues/36149) - **scheduler:** wrong ARN generated in `ScheduleGroup.grant*` methods ([#&#8203;36175](https://github.com/aws/aws-cdk/issues/36175)) ([eae8838](https://github.com/aws/aws-cdk/commit/eae88380aa71bd841279fdfa37120ed244dd5eae)) *** #### Alpha modules (2.230.0-alpha.0) ##### Features - **bedrock-agentcore-alpha:** update resources on grantInvokeXXX for runtime ([#&#8203;35864](https://github.com/aws/aws-cdk/issues/35864)) ([5dad62f](https://github.com/aws/aws-cdk/commit/5dad62f94c1a9f02c5fda1df7aa105e14630beb3)) - **imagebuilder-alpha:** add support for Image Pipeline Construct ([#&#8203;36153](https://github.com/aws/aws-cdk/issues/36153)) ([d8c324a](https://github.com/aws/aws-cdk/commit/d8c324ae31db5997f9511e3f43affceea57d86c3)), closes [aws/aws-cdk-rfcs#789](https://github.com/aws/aws-cdk-rfcs/issues/789) [aws/aws-cdk-rfcs#789](https://github.com/aws/aws-cdk-rfcs/issues/789) - **imagebuilder-alpha:** add support for Lifecycle Policy Construct ([#&#8203;36152](https://github.com/aws/aws-cdk/issues/36152)) ([7e31eb6](https://github.com/aws/aws-cdk/commit/7e31eb6a310344634fefa0651bf55c7493fc09bd)), closes [aws/aws-cdk-rfcs#789](https://github.com/aws/aws-cdk-rfcs/issues/789) [aws/aws-cdk-rfcs#789](https://github.com/aws/aws-cdk-rfcs/issues/789) - **mixins-preview:** adds LogDelivery Mixins for 47 resources ([#&#8203;36158](https://github.com/aws/aws-cdk/issues/36158)) ([6607ce9](https://github.com/aws/aws-cdk/commit/6607ce95256acda86107fa30b1f000a9dc189df7)) - **mixins-preview:** vended log deliveries ([#&#8203;36138](https://github.com/aws/aws-cdk/issues/36138)) ([69442a8](https://github.com/aws/aws-cdk/commit/69442a88b16b39d485bf7ec57d520599c564a612)) - **mixins-preview:** helpers to generate EventBridge event patterns for 26 services ([#&#8203;36121](https://github.com/aws/aws-cdk/issues/36121)) ([073185d](https://github.com/aws/aws-cdk/commit/073185d46e5d8a95915579013d1ef8fe47e6343c)) ##### Bug Fixes - **mixins-preview:** `AutoDeleteObjects` mixin fails with cannot find file error ([#&#8203;36188](https://github.com/aws/aws-cdk/issues/36188)) ([3ef337d](https://github.com/aws/aws-cdk/commit/3ef337dba5d9f6f13ca8faa84376bd9177a7ecbd)), closes [aws-cdk/mixins-preview/lib/custom-resource-handlers/aws-s3/auto-delete-objects-provider.ts#L21](https://github.com/aws-cdk/mixins-preview/lib/custom-resource-handlers/aws-s3/auto-delete-objects-provider.ts/issues/L21) - **mixins-preview:** `ResourcePolicy with this name already exists` error when setting up `LogDelivery` ([#&#8203;36195](https://github.com/aws/aws-cdk/issues/36195)) ([f9aa31d](https://github.com/aws/aws-cdk/commit/f9aa31d021400aee8e172b3b0c949cd2d00473f7)) - **mixins-preview:** cannot use string literal types for `S3LogsDeliveryProps.permissionsVersion` ([#&#8203;36197](https://github.com/aws/aws-cdk/issues/36197)) ([cc491df](https://github.com/aws/aws-cdk/commit/cc491df13f6a4e62e0233b90dcc636efa34e32d7)) ### [`v2.229.1`](https://github.com/aws/aws-cdk/releases/tag/v2.229.1) [Compare Source](https://github.com/aws/aws-cdk/compare/v2.229.0...v2.229.1) ##### Bug Fixes - **scheduler:** wrong ARN generated in `ScheduleGroup.grant*` methods ([#&#8203;36175](https://github.com/aws/aws-cdk/issues/36175)) ([ca9fbdd](https://github.com/aws/aws-cdk/commit/ca9fbdd4c7d9551e18abe4967f0b8649302aaa56)) *** #### Alpha modules (2.229.1-alpha.0) ### [`v2.229.0`](https://github.com/aws/aws-cdk/releases/tag/v2.229.0) [Compare Source](https://github.com/aws/aws-cdk/compare/v2.228.0...v2.229.0) ##### Features - **agentcore:** add new properties for runtime, browser ([#&#8203;36003](https://github.com/aws/aws-cdk/issues/36003)) ([439495f](https://github.com/aws/aws-cdk/commit/439495fd2c60b5a9b1e413c089e6e5cb822cba90)) - **route53:** add `HostedZoneGrants` ([#&#8203;36109](https://github.com/aws/aws-cdk/issues/36109)) ([d24305c](https://github.com/aws/aws-cdk/commit/d24305c29d1e2968fbdbccbcd087ad7ac8d67332)) ##### Bug Fixes - **stepfunctions:** allow multiline jsonata strings ([#&#8203;35985](https://github.com/aws/aws-cdk/issues/35985)) ([8805e13](https://github.com/aws/aws-cdk/commit/8805e138a1a885dc068b984af838656ae5f384bc)), closes [#&#8203;35912](https://github.com/aws/aws-cdk/issues/35912) [#&#8203;35912](https://github.com/aws/aws-cdk/issues/35912) *** #### Alpha modules (2.229.0-alpha.0) ##### Features - **imagebuilder-alpha:** add support for Container Recipe Construct ([#&#8203;36091](https://github.com/aws/aws-cdk/issues/36091)) ([875e0e7](https://github.com/aws/aws-cdk/commit/875e0e72bcc791eac4ea93d223941bc3d4ba99e5)), closes [aws/aws-cdk-rfcs#789](https://github.com/aws/aws-cdk-rfcs/issues/789) [aws/aws-cdk-rfcs#789](https://github.com/aws/aws-cdk-rfcs/issues/789) - **imagebuilder-alpha:** add support for Image Recipe Construct ([#&#8203;36092](https://github.com/aws/aws-cdk/issues/36092)) ([4361f8b](https://github.com/aws/aws-cdk/commit/4361f8bd0fca4b6a69b69a9ca69f178b9b220db2)), closes [aws/aws-cdk-rfcs#789](https://github.com/aws/aws-cdk-rfcs/issues/789) [aws/aws-cdk-rfcs#789](https://github.com/aws/aws-cdk-rfcs/issues/789) - **imagebuilder-alpha:** add support for Workflow Construct ([#&#8203;36007](https://github.com/aws/aws-cdk/issues/36007)) ([616d32a](https://github.com/aws/aws-cdk/commit/616d32a0fde55abb203c7396801cf3adab8b5006)), closes [aws/aws-cdk-rfcs#789](https://github.com/aws/aws-cdk-rfcs/issues/789) [aws/aws-cdk-rfcs#789](https://github.com/aws/aws-cdk-rfcs/issues/789) - **mixins-preview:** developer preview of CDK Mixins ([#&#8203;36136](https://github.com/aws/aws-cdk/issues/36136)) ([0c6ee1d](https://github.com/aws/aws-cdk/commit/0c6ee1d2dc2b7474d767b947558369b3d67122d9)) ##### Bug Fixes - **bedrock-agentcore-alpha:** empty submodule accidentally exposed and runtime validation fix ([#&#8203;36148](https://github.com/aws/aws-cdk/issues/36148)) ([72d3e6f](https://github.com/aws/aws-cdk/commit/72d3e6f40528092e99fe2390e0d0101e1075e8af)) ### [`v2.228.0`](https://github.com/aws/aws-cdk/releases/tag/v2.228.0) [Compare Source](https://github.com/aws/aws-cdk/compare/v2.227.0...v2.228.0) ##### Features - **lambda:** add new lambda/kafka esm properties and on failure desitination ([65f9c35](https://github.com/aws/aws-cdk/commit/65f9c357e9a463ead608fa1d0118312b3c2cd09c)) ##### Bug Fixes - **cloudformation-include:** `TypeError` when including template with intrinsic functions ([#&#8203;36157](https://github.com/aws/aws-cdk/issues/36157)) ([f2a384b](https://github.com/aws/aws-cdk/commit/f2a384ba0092ccd76ff06b9a2e2e0a7eef7e0bfd)), closes [#&#8203;36140](https://github.com/aws/aws-cdk/issues/36140) [#&#8203;35838](https://github.com/aws/aws-cdk/issues/35838) *** #### Alpha modules (2.228.0-alpha.0) ### [`v2.227.0`](https://github.com/aws/aws-cdk/releases/tag/v2.227.0) [Compare Source](https://github.com/aws/aws-cdk/compare/v2.226.0...v2.227.0) **CHANGES TO L1 RESOURCES:** L1 resources are automatically generated from public CloudFormation Resource Schemas. They are built to closely reflect the real state of CloudFormation. Sometimes these updates can contain changes that are incompatible with previous types, but more accurately reflect reality. In this release we have changed: - **aws-backup**: AWS::Backup::LogicallyAirGappedBackupVault: EncryptionKeyArn attribute removed. ##### Features - **stepfunctions:** add `StateMachineGrants` ([#&#8203;36094](https://github.com/aws/aws-cdk/issues/36094)) ([59ef00d](https://github.com/aws/aws-cdk/commit/59ef00d6768ced403a88ed00da437e4d64489267)) - update L1 CloudFormation resource definitions ([#&#8203;36122](https://github.com/aws/aws-cdk/issues/36122)) ([51d805e](https://github.com/aws/aws-cdk/commit/51d805e8b06ff6c22097fe10f6cf71f84af119e0)) - **core:** cfn constructs (L1s) can now accept constructs as parameters for known resource relationships ([#&#8203;35838](https://github.com/aws/aws-cdk/issues/35838)) ([6be7b4b](https://github.com/aws/aws-cdk/commit/6be7b4bdad74fe2889bb0b7b33e9d5ad7ef2e415)) - factory methods for Grants made public ([#&#8203;36123](https://github.com/aws/aws-cdk/issues/36123)) ([f9a894f](https://github.com/aws/aws-cdk/commit/f9a894fe4dc35415405295ae60f713b8c32de375)) - **dynamodb:** add `TableGrants` and `StreamGrants` ([#&#8203;36093](https://github.com/aws/aws-cdk/issues/36093)) ([d0b074a](https://github.com/aws/aws-cdk/commit/d0b074a1bcc7ba54f809d7423bf744792dbaa690)) - **rds:** support instance and iam-db-auth-error CloudWatch log exports ([#&#8203;35058](https://github.com/aws/aws-cdk/issues/35058)) ([e71a8b1](https://github.com/aws/aws-cdk/commit/e71a8b1d167d2ba70472305b5a004b992f79fcc1)), closes [#&#8203;35018](https://github.com/aws/aws-cdk/issues/35018) - **s3:** add `BucketGrants` ([#&#8203;36102](https://github.com/aws/aws-cdk/issues/36102)) ([5891172](https://github.com/aws/aws-cdk/commit/58911727be529afa9d743492bebc1d8e7478a1d6)) - grants are now available through a separate class ([#&#8203;35782](https://github.com/aws/aws-cdk/issues/35782)) ([21fd959](https://github.com/aws/aws-cdk/commit/21fd9593c1d451d68b0f3825c47286a41fa5ea37)) *** #### Alpha modules (2.227.0-alpha.0) ##### Features - **bedrock-agentcore-alpha:** agentcore gateway L2 construct ([#&#8203;35771](https://github.com/aws/aws-cdk/issues/35771)) ([07c4a0d](https://github.com/aws/aws-cdk/commit/07c4a0dfd4f26519f433ec3dc19b4c294ae8d56e)) - **imagebuilder-alpha:** add support for Component Construct ([#&#8203;36107](https://github.com/aws/aws-cdk/issues/36107)) ([93a76e4](https://github.com/aws/aws-cdk/commit/93a76e481e79bb7e0df1aabcb158cc9b064345bf)), closes [#&#8203;36006](https://github.com/aws/aws-cdk/issues/36006) [#&#8203;36104](https://github.com/aws/aws-cdk/issues/36104) - **imagebuilder-alpha:** add support for Distribution Configuration Construct ([#&#8203;36108](https://github.com/aws/aws-cdk/issues/36108)) ([6051039](https://github.com/aws/aws-cdk/commit/605103939894a785062422f04ee31f5460b18d6f)), closes [#&#8203;36005](https://github.com/aws/aws-cdk/issues/36005) ##### Bug Fixes - **bedrock-agentcore-alpha:** fix unexpected validation error when properties are Token ([#&#8203;35978](https://github.com/aws/aws-cdk/issues/35978)) ([084b736](https://github.com/aws/aws-cdk/commit/084b736f80959ee17a28c2d9c355b0dcf1faa393)) ### [`v2.226.0`](https://github.com/aws/aws-cdk/releases/tag/v2.226.0) [Compare Source](https://github.com/aws/aws-cdk/compare/v2.225.0...v2.226.0) ##### Features - **dynamodb:** compound keys for global secondary indexes ([046b06d](https://github.com/aws/aws-cdk/commit/046b06d049641f7dd6b0f3fb20b7f8efcde750bf)) - **lambda:** add multi-tenancy support with TenancyConfig ([5f384db](https://github.com/aws/aws-cdk/commit/5f384dbf9ee5e81c644ade62837d80be98492794)) *** #### Alpha modules (2.226.0-alpha.0) ### [`v2.225.0`](https://github.com/aws/aws-cdk/releases/tag/v2.225.0) [Compare Source](https://github.com/aws/aws-cdk/compare/v2.224.0...v2.225.0) ##### ⚠ BREAKING CHANGES - \*\* L1 resources are automatically generated from public CloudFormation Resource Schemas. They are built to closely reflect the real state of CloudFormation. Sometimes these updates can contain changes that are incompatible with previous types, but more accurately reflect reality. In this release we have changed: - **aws-dynamodb**: AWS::DynamoDB::GlobalTable: ResourcePolicy property is now required. ##### Features - update L1 CloudFormation resource definitions ([#&#8203;36082](https://github.com/aws/aws-cdk/issues/36082)) ([3df1d81](https://github.com/aws/aws-cdk/commit/3df1d81014f305c21e33522aa7cd26a91a21371b)) - **custom-resource:** add External ID support for AwsCustomResource ([#&#8203;35252](https://github.com/aws/aws-cdk/issues/35252)) ([9f6c02b](https://github.com/aws/aws-cdk/commit/9f6c02ba7a1c5369add94d0f2c3ffe4ecadd2761)), closes [#&#8203;34018](https://github.com/aws/aws-cdk/issues/34018) - **route53:** support restricting delegated zone names when using grantDelegation ([#&#8203;35129](https://github.com/aws/aws-cdk/issues/35129)) ([d832aca](https://github.com/aws/aws-cdk/commit/d832aca6059a9737437d2fe9d349d79cddbb0605)) ##### Bug Fixes - **aws-cdk-lib:** temporary Cloud Assemblies are not cleaned up ([#&#8203;36043](https://github.com/aws/aws-cdk/issues/36043)) ([1ace1ef](https://github.com/aws/aws-cdk/commit/1ace1efdca879f3e871a7f32bababfe62d8b0afc)), closes [#&#8203;802](https://github.com/aws/aws-cdk/issues/802) - **cognito:** remove overly strict validation for threat protection on non-PLUS plans ([#&#8203;36027](https://github.com/aws/aws-cdk/issues/36027)) ([172c65f](https://github.com/aws/aws-cdk/commit/172c65feb7f25060abf98fc704d815acfe4c9d6d)), closes [#&#8203;36023](https://github.com/aws/aws-cdk/issues/36023) - **s3-deployment:** `Source.jsonData()` fails with null JSON values ([#&#8203;36054](https://github.com/aws/aws-cdk/issues/36054)) ([67b85f2](https://github.com/aws/aws-cdk/commit/67b85f2e71ca59bd7dd522bb5a63fef6401e51b0)), closes [#&#8203;36052](https://github.com/aws/aws-cdk/issues/36052) ##### Reverts - (dynamodb) revert Table.table field to private to fix .NET naming ([#&#8203;36029](https://github.com/aws/aws-cdk/issues/36029)) ([d84fce8](https://github.com/aws/aws-cdk/commit/d84fce84868157649f5a3cabbdbe06233317aacc)), closes [#&#8203;36025](https://github.com/aws/aws-cdk/issues/36025) [#&#8203;35554](https://github.com/aws/aws-cdk/issues/35554) *** #### Alpha modules (2.225.0-alpha.0) ### [`v2.224.0`](https://github.com/aws/aws-cdk/releases/tag/v2.224.0) [Compare Source](https://github.com/aws/aws-cdk/compare/v2.223.0...v2.224.0) ##### ⚠ BREAKING CHANGES - **aws-cdk-lib:** Reference interfaces (such as `IBucketRef,` `IRoleRef,` etc.) were moved to a new `aws-cdk-lib.interfaces` submodule to prevent cyclic dependencies between service modules. If you are importing reference interfaces, you have to update import statements accordingly. See [#&#8203;36060](https://github.com/aws/aws-cdk/issues/36060) for full details. - **Amazon.CDK.Lib (.NET):** The .NET namespace for multiple submodules has changed. If you are using any of the renamed submodules, you have to update `using` statements for these submodules. See [#&#8203;36037](https://github.com/aws/aws-cdk/issues/36037) for full details. - **L1 resources are automatically generated from public CloudFormation Resource Schemas.** They are built to closely reflect the real state of CloudFormation. Sometimes these updates can contain changes that are incompatible with previous types, but more accurately reflect reality. In this release we have changed: aws-opensearchserverless: AWS::OpenSearchServerless::Collection: StandbyReplicas property is now immutable. aws-servicecatalog: AWS::ServiceCatalog::PortfolioPrincipalAssociation: Id attribute removed. ##### Features - **apigateway:** add option for consolidating lambda permissions for rest and http lambda integrations ([#&#8203;36021](https://github.com/aws/aws-cdk/issues/36021)) ([35f8e46](https://github.com/aws/aws-cdk/commit/35f8e46b8bf78b91c8bf626bd6b9de30d88dbe87)), closes [#&#8203;9327](https://github.com/aws/aws-cdk/issues/9327) [#&#8203;19535](https://github.com/aws/aws-cdk/issues/19535) [#&#8203;35705](https://github.com/aws/aws-cdk/issues/35705) - update L1 CloudFormation resource definitions ([#&#8203;35994](https://github.com/aws/aws-cdk/issues/35994)) ([47a9a20](https://github.com/aws/aws-cdk/commit/47a9a201609805481040d8a085ffdf9b000c4c78)) - **core:** add methods to SecretValue and aws-secretsmanager Secret to obtain a literal (unresolved by CloudFormation) dynamic reference key ([#&#8203;34397](https://github.com/aws/aws-cdk/issues/34397)) ([#&#8203;35105](https://github.com/aws/aws-cdk/issues/35105)) ([457aa99](https://github.com/aws/aws-cdk/commit/457aa99259cd72f66fcc3f4db19aaa0e20d1e607)), closes [/github.com/aws/aws-cdk/blob/main/packages/aws-cdk-lib/core/lib/secret-value.ts#L98C17-L98C31](https://github.com/aws//github.com/aws/aws-cdk/blob/main/packages/aws-cdk-lib/core/lib/secret-value.ts/issues/L98C17-L98C31) [/github.com/aws/aws-cdk/blob/main/packages/aws-cdk-lib/aws-secretsmanager/lib/secret.ts#L499](https://github.com/aws//github.com/aws/aws-cdk/blob/main/packages/aws-cdk-lib/aws-secretsmanager/lib/secret.ts/issues/L499) - **eks:** add support for Kubernetes version 1.34 ([#&#8203;36016](https://github.com/aws/aws-cdk/issues/36016)) ([60096ac](https://github.com/aws/aws-cdk/commit/60096ac4afbb0964a3ef4e5f702b9102c01de927)), closes [#&#8203;35717](https://github.com/aws/aws-cdk/issues/35717) - **lambda:** add nodejs24.x runtime for Lambda ([#&#8203;36001](https://github.com/aws/aws-cdk/issues/36001)) ([404bf1a](https://github.com/aws/aws-cdk/commit/404bf1a90a01ad9e4afc8dbb7fbcd269701117b9)) - **sagemaker:** add support for serverless inference endpoints ([#&#8203;35557](https://github.com/aws/aws-cdk/issues/35557)) ([3f5c5ac](https://github.com/aws/aws-cdk/commit/3f5c5acc0f5f03cbbfb8fa0c4c1f18383ae602cd)), closes [#&#8203;23148](https://github.com/aws/aws-cdk/issues/23148) [#&#8203;23148](https://github.com/aws/aws-cdk/issues/23148) - **stepfunctions-tasks:** add architecture support to EvaluateExpression ([#&#8203;35468](https://github.com/aws/aws-cdk/issues/35468)) ([771ea13](https://github.com/aws/aws-cdk/commit/771ea13c3067ee87b15575049d3ad6a10a393518)), closes [#&#8203;34974](https://github.com/aws/aws-cdk/issues/34974) ##### Bug Fixes - **aws-cdk-lib:** move reference interfaces to their own submodules ([#&#8203;35971](https://github.com/aws/aws-cdk/issues/35971)) ([1e4dfe6](https://github.com/aws/aws-cdk/commit/1e4dfe67d92dbedda198ee459ca019c15a736ac1)) - **aws-cdk-lib:** multiple submodules use an incorrect namespace for .NET ([#&#8203;36002](https://github.com/aws/aws-cdk/issues/36002)) ([e48e584](https://github.com/aws/aws-cdk/commit/e48e5848d1703d08f9afdd257482c07ba41928a1)) - **dynamodb:** resolve circular dependency with AccountRootPrincipal grants ([#&#8203;35983](https://github.com/aws/aws-cdk/issues/35983)) ([24d2adf](https://github.com/aws/aws-cdk/commit/24d2adf6acb4a9225be5483725e6fda644121203)), closes [#&#8203;35967](https://github.com/aws/aws-cdk/issues/35967) - **ecs:** allow empty placementStrategies on EC2Service ([#&#8203;35580](https://github.com/aws/aws-cdk/issues/35580)) ([0d773b1](https://github.com/aws/aws-cdk/commit/0d773b115f67d55239112f919381efad6a531efc)), closes [#&#8203;30382](https://github.com/aws/aws-cdk/issues/30382) [/github.com/aws/aws-cdk/pull/27572#issuecomment-1766287866](https://github.com/aws//github.com/aws/aws-cdk/pull/27572/issues/issuecomment-1766287866) *** #### Alpha modules (2.224.0-alpha.0) ##### Features - **imagebuilder-alpha:** add support for EC2 Image Builder L2 Constructs - Infrastructure Configuration ([#&#8203;35882](https://github.com/aws/aws-cdk/issues/35882)) ([db1d964](https://github.com/aws/aws-cdk/commit/db1d964b7775e0609c137b12051bac535094f8cd)), closes [aws/aws-cdk-rfcs#789](https://github.com/aws/aws-cdk-rfcs/issues/789) [aws/aws-cdk-rfcs#789](https://github.com/aws/aws-cdk-rfcs/issues/789) ### [`v2.223.0`](https://github.com/aws/aws-cdk/releases/tag/v2.223.0) [Compare Source](https://github.com/aws/aws-cdk/compare/v2.222.0...v2.223.0) ##### ⚠ BREAKING CHANGES L1 resources are automatically generated from public CloudFormation Resource Schemas. They are built to closely reflect the real state of CloudFormation. Sometimes these updates can contain changes that are incompatible with previous types, but more accurately reflect reality. In this release we have changed: - **aws-dynamodb**: AWS::DynamoDB::GlobalTable: GlobalTableSettingsReplicationMode property removed. - **aws-dynamodb**: AWS::DynamoDB::GlobalTable: GlobalTableSourceArn property removed. - **aws-dynamodb**: AWS::DynamoDB::Table: GlobalTableSettingsReplicationMode property removed. - **aws-events**: AWS::Events::EventBusPolicy: Id attribute removed. ##### Features - update L1 CloudFormation resource definitions ([#&#8203;35926](https://github.com/aws/aws-cdk/issues/35926)) ([3f4d585](https://github.com/aws/aws-cdk/commit/3f4d58548be8022660f62a99e43061fa54bd8588)) - **ec2:** support for Cloud Wan Core Network routes ([#&#8203;35008](https://github.com/aws/aws-cdk/issues/35008)) ([fba027b](https://github.com/aws/aws-cdk/commit/fba027bf2039c90265f4632bd76619f4bcde6f81)) - **s3-deployment:** support securityGroups in BucketDeploymentProps ([#&#8203;33233](https://github.com/aws/aws-cdk/issues/33233)) ([f2a3166](https://github.com/aws/aws-cdk/commit/f2a31666fa92d284f6e8602e475aa0b7fca05ef7)), closes [#&#8203;33229](https://github.com/aws/aws-cdk/issues/33229) ##### Bug Fixes - **stepfunctions:** `DistributedMap` ResultWriter correct query language selection ([#&#8203;35834](https://github.com/aws/aws-cdk/issues/35834)) ([75b8ead](https://github.com/aws/aws-cdk/commit/75b8eadb3761f02798061fe5578af82f785f687a)), closes [#&#8203;35403](https://github.com/aws/aws-cdk/issues/35403) - onEvent function to pass all the options to rule resource ([#&#8203;35829](https://github.com/aws/aws-cdk/issues/35829)) ([3d7023d](https://github.com/aws/aws-cdk/commit/3d7023d4c6ee29b945034e56fd94b228f6e313f2)) *** #### Alpha modules (2.223.0-alpha.0) ### [`v2.222.0`](https://github.com/aws/aws-cdk/releases/tag/v2.222.0) [Compare Source](https://github.com/aws/aws-cdk/compare/v2.221.1...v2.222.0) ##### ⚠ BREAKING CHANGES - **bedrock-agentcore:** The signature of `RuntimeAuthorizerConfiguration.usingCognito()` has changed to accept IUserPool and IUserPoolClient constructs instead of string parameters, and now supports multiple clients. ##### Features - **apigateway:** add `binaryMediaTypes` property to SpecRestApi ([#&#8203;35502](https://github.com/aws/aws-cdk/issues/35502)) ([bf10d94](https://github.com/aws/aws-cdk/commit/bf10d94484c5a78a86a5a38db093b48eec0b42d7)), closes [#&#8203;35498](https://github.com/aws/aws-cdk/issues/35498) - **apigatewayv2:** `WebSocketStage` support accessLogSettings ([#&#8203;34766](https://github.com/aws/aws-cdk/issues/34766)) ([dad112e](https://github.com/aws/aws-cdk/commit/dad112e27b0326746c84cab574ee1b2109d5afdd)), closes [#&#8203;21935](https://github.com/aws/aws-cdk/issues/21935) - **bedrock-agentcore:** use IUserPool and IUserPoolClient interfaces instead of string identifiers ([#&#8203;35860](https://github.com/aws/aws-cdk/issues/35860)) ([a38afc9](https://github.com/aws/aws-cdk/commit/a38afc9bdc57143c971e4654fae2fd3c3a0dbef6)), closes [#&#8203;35854](https://github.com/aws/aws-cdk/issues/35854) - **core:** `IEnvironmentAware` interface to retrieve a construct's environment ([#&#8203;35817](https://github.com/aws/aws-cdk/issues/35817)) ([8ee5d4b](https://github.com/aws/aws-cdk/commit/8ee5d4b012b2d6a157b0e4915976e0a487cde115)) - **elasticloadbalancingv2:** create security group settings for NLB by default (under feature flag) ([#&#8203;34675](https://github.com/aws/aws-cdk/issues/34675)) ([ff83cfd](https://github.com/aws/aws-cdk/commit/ff83cfd883ab04a5137ca6d9f28629fc2f5676ad)), closes [#&#8203;34606](https://github.com/aws/aws-cdk/issues/34606) [/github.com/aws/aws-cdk/issues/34606#issuecomment-2931313249](https://github.com/aws//github.com/aws/aws-cdk/issues/34606/issues/issuecomment-2931313249) - **events-targets:** support Amazon Data Firehose target using Firehose's `IDeliveryStream` ([#&#8203;33798](https://github.com/aws/aws-cdk/issues/33798)) ([a374b6b](https://github.com/aws/aws-cdk/commit/a374b6b2dd071bbd15b3a824e1aaa1002d0dc018)), closes [#&#8203;33757](https://github.com/aws/aws-cdk/issues/33757) [#&#8203;33758](https://github.com/aws/aws-cdk/issues/33758) - **kinesisfirehose:** add built-in data processors to decompress CloudWatch logs and extract messages ([#&#8203;33749](https://github.com/aws/aws-cdk/issues/33749)) ([5dec21e](https://github.com/aws/aws-cdk/commit/5dec21e882f0e33b3ed436ac4ce82f0c290c06a4)), closes [#&#8203;33691](https://github.com/aws/aws-cdk/issues/33691) [#&#8203;20242](https://github.com/aws/aws-cdk/issues/20242) [/github.com/aws/aws-cdk/issues/33691#issuecomment-2713012245](https://github.com/aws//github.com/aws/aws-cdk/issues/33691/issues/issuecomment-2713012245) - **lambda:** add Java25 runtime for Lambda ([#&#8203;35867](https://github.com/aws/aws-cdk/issues/35867)) ([db71fac](https://github.com/aws/aws-cdk/commit/db71facb53f3024d68d5497befe39989cd55d593)) - **lambda:** add Python 3.14 runtime for Lambda ([#&#8203;35869](https://github.com/aws/aws-cdk/issues/35869)) ([ebef303](https://github.com/aws/aws-cdk/commit/ebef303ea22c6eab7ea33505961ecce0b2c99a7a)) - **memory:** add agentcore memory l2 construct ([#&#8203;35757](https://github.com/aws/aws-cdk/issues/35757)) ([6a2e17e](https://github.com/aws/aws-cdk/commit/6a2e17e8280affd152ad4e24d505bc4593b790eb)) - **msk:** support Express brokers ([#&#8203;34741](https://github.com/aws/aws-cdk/issues/34741)) ([0a69e5f](https://github.com/aws/aws-cdk/commit/0a69e5f165c20d5106d0d159ce6b023d228e5fea)), closes [#&#8203;32923](https://github.com/aws/aws-cdk/issues/32923) ##### Bug Fixes - **agentcore:** `addToRolePolicy` for runtime with imported role destroys and recreates policies on every deployment ([#&#8203;35842](https://github.com/aws/aws-cdk/issues/35842)) ([92525e4](https://github.com/aws/aws-cdk/commit/92525e45e4f8688ddd4892e43885e33e9d812c6c)), closes [#&#8203;35844](https://github.com/aws/aws-cdk/issues/35844) [40aws-cdk/aws-bedrock-agentcore-alpha/agentcore/runtime/runtime-base.ts#L253](https://github.com/40aws-cdk/aws-bedrock-agentcore-alpha/agentcore/runtime/runtime-base.ts/issues/L253) - **agentcore:** custom execution role policy for runtime lacks proper permissions ([#&#8203;35849](https://github.com/aws/aws-cdk/issues/35849)) ([ee94b63](https://github.com/aws/aws-cdk/commit/ee94b63161b6ff2a930ef4acb1e65e01d1ac570a)), closes [#&#8203;35852](https://github.com/aws/aws-cdk/issues/35852) [40aws-cdk/aws-bedrock-agentcore-alpha/agentcore/runtime/runtime-artifact.ts#L65](https://github.com/40aws-cdk/aws-bedrock-agentcore-alpha/agentcore/runtime/runtime-artifact.ts/issues/L65) [40aws-cdk/aws-bedrock-agentcore-alpha/agentcore/runtime/runtime.ts#L252-L259](https://github.com/40aws-cdk/aws-bedrock-agentcore-alpha/agentcore/runtime/runtime.ts/issues/L252-L259) [/github.com/aws/aws-cdk/blob/v2.221.0/packages/aws-cdk-lib/aws-codepipeline/lib/pipeline.ts#L693](https://github.com/aws//github.com/aws/aws-cdk/blob/v2.221.0/packages/aws-cdk-lib/aws-codepipeline/lib/pipeline.ts/issues/L693) [/github.com/aws/aws-cdk/blob/v2.221.0/packages/aws-cdk-lib/aws-lambda/lib/function.ts#L1468](https://github.com/aws//github.com/aws/aws-cdk/blob/v2.221.0/packages/aws-cdk-lib/aws-lambda/lib/function.ts/issues/L1468) [/github.com/aws/aws-cdk/blob/v2.221.0/packages/aws-cdk-lib/aws-ecs/lib/base/base-service.ts#L1161](https://github.com/aws//github.com/aws/aws-cdk/blob/v2.221.0/packages/aws-cdk-lib/aws-ecs/lib/base/base-service.ts/issues/L1161) - **dynamodb:** addToResourcePolicy has no effect ([#&#8203;35554](https://github.com/aws/aws-cdk/issues/35554)) ([94d7e34](https://github.com/aws/aws-cdk/commit/94d7e34ebff8f8dbd17ee712d724974179fe7076)), closes [#&#8203;35062](https://github.com/aws/aws-cdk/issues/35062) - **ecs:** remove empty CfnClusterCapacityProviderAssociations resource ([#&#8203;35783](https://github.com/aws/aws-cdk/issues/35783)) ([c8a131b](https://github.com/aws/aws-cdk/commit/c8a131b935af27726131fb670ee84b15152296e0)), closes [#&#8203;35699](https://github.com/aws/aws-cdk/issues/35699) [#&#8203;35742](https://github.com/aws/aws-cdk/issues/35742) - **iam:** cannot grant lambda:InvokeFunction on ManagedPolicy or Policy via `grantInvoke()` method ([#&#8203;32984](https://github.com/aws/aws-cdk/issues/32984)) ([a07d75a](https://github.com/aws/aws-cdk/commit/a07d75a11c83fb0d9e92fc31f416403e09d1efdf)), closes [#&#8203;32980](https://github.com/aws/aws-cdk/issues/32980) [/github.com/aws/aws-cdk/pull/32984#pullrequestreview-2863553504](https://github.com/aws//github.com/aws/aws-cdk/pull/32984/issues/pullrequestreview-2863553504) - compilation failure in Go ([#&#8203;35871](https://github.com/aws/aws-cdk/issues/35871)) ([5e4f603](https://github.com/aws/aws-cdk/commit/5e4f603a17faf543dfacfba209b8e17b50ffbdca)), closes [aws/aws-cdk#35770](https://github.com/aws/aws-cdk/issues/35770) [#&#8203;35862](https://github.com/aws/aws-cdk/issues/35862) - **ec2:** remove PassRole policy emitted by cloudwatch vpc flow destination ([#&#8203;35762](https://github.com/aws/aws-cdk/issues/35762)) ([c4b80df](https://github.com/aws/aws-cdk/commit/c4b80df3e7611b55f7adbdc43673ec102a3a1a7b)), closes [#&#8203;35729](https://github.com/aws/aws-cdk/issues/35729) *** #### Alpha modules (2.222.0-alpha.0) ##### Features - **eks-v2-alpha:** eks-v2-alpha is now in developer preview ([#&#8203;35801](https://github.com/aws/aws-cdk/issues/35801)) ([32afc0f](https://github.com/aws/aws-cdk/commit/32afc0ff940394da737714e599ddc3c25ff738e3)) ##### Bug Fixes - **bedrock-alpha:** apply permission dependency to existing and non-existing roles ([#&#8203;35123](https://github.com/aws/aws-cdk/issues/35123)) ([b39ccf3](https://github.com/aws/aws-cdk/commit/b39ccf3a874401c2a0a7ae0806f1be02b9b75d5e)), closes [#&#8203;35120](https://github.com/aws/aws-cdk/issues/35120) - **eks-v2-alpha:** remove hyphen from Go package name ([#&#8203;35927](https://github.com/aws/aws-cdk/issues/35927)) ([2cdfc8a](https://github.com/aws/aws-cdk/commit/2cdfc8a909ce3752833e46dd2ed0106fee0e785a)) ### [`v2.221.1`](https://github.com/aws/aws-cdk/releases/tag/v2.221.1) [Compare Source](https://github.com/aws/aws-cdk/compare/v2.221.0...v2.221.1) ##### Bug Fixes - compilation failure in Go ([#&#8203;35871](https://github.com/aws/aws-cdk/issues/35871)) ([4379f66](https://github.com/aws/aws-cdk/commit/4379f66f42ee9adaffbc2836399c75f86d6bf784)), closes [aws/aws-cdk#35770](https://github.com/aws/aws-cdk/issues/35770) [#&#8203;35862](https://github.com/aws/aws-cdk/issues/35862) *** #### Alpha modules (2.221.1-alpha.0) ### [`v2.221.0`](https://github.com/aws/aws-cdk/releases/tag/v2.221.0) [Compare Source](https://github.com/aws/aws-cdk/compare/v2.220.0...v2.221.0) ##### ⚠ BREAKING CHANGES - \*\* L1 resources are automatically generated from public CloudFormation Resource Schemas. They are built to closely reflect the real state of CloudFormation. Sometimes these updates can contain changes that are incompatible with previous types, but more accurately reflect reality. In this release we have changed: * **aws-datazone**: AWS::DataZone::ProjectProfile: Id property removed. * **aws-logs**: AWS::Logs::DeliveryDestination: DeliveryDestinationType attribute removed. * **aws-s3**: AWS::S3::AccessGrantsLocation: IamRoleArn property is now required. * **aws-s3**: AWS::S3::AccessGrantsLocation: LocationScope property is now required. * **aws-servicecatalog**: AWS::ServiceCatalog::TagOptionAssociation: Id attribute removed. ##### Features - update L1 CloudFormation resource definitions ([#&#8203;35816](https://github.com/aws/aws-cdk/issues/35816)) ([82bef28](https://github.com/aws/aws-cdk/commit/82bef28a322a436d0c99adf8cb097008591f3952)) - **agentcore:** add agentcore L2 constructs for 1p tools ([#&#8203;35577](https://github.com/aws/aws-cdk/issues/35577)) ([3087ffa](https://github.com/aws/aws-cdk/commit/3087ffa33fdde85d02ec2574854856762866ca7d)) - **agentcore:** add agentcore runtime L2 construct ([#&#8203;35623](https://github.com/aws/aws-cdk/issues/35623)) ([c57484a](https://github.com/aws/aws-cdk/commit/c57484ababbf99b13660ab597e5738819b1855a6)) - **ecr:** image tag mutability exclusion filters ([#&#8203;35246](https://github.com/aws/aws-cdk/issues/35246)) ([f6dd5cf](https://github.com/aws/aws-cdk/commit/f6dd5cfd50209b82b654935fc965819a46bd0247)), closes [#&#8203;35454](https://github.com/aws/aws-cdk/issues/35454) - **ecs:** implement IConnectable interface for ManagedInstancesCapacityProvider ([#&#8203;35745](https://github.com/aws/aws-cdk/issues/35745)) ([fd5ff76](https://github.com/aws/aws-cdk/commit/fd5ff76c9707b36e878d58e20d7544b80e53d603)) - **kinesisfirehose:** support DeliveryStream record format conversion for S3 Bucket Destination ([#&#8203;35410](https://github.com/aws/aws-cdk/issues/35410)) ([79bcba2](https://github.com/aws/aws-cdk/commit/79bcba24313955bcb7e3e4d02d3d2cc11db5cd7d)), closes [#&#8203;15501](https://github.com/aws/aws-cdk/issues/15501) [/github.com/aws/aws-cdk/issues/15501#issuecomment-3255582302](https://github.com/aws//github.com/aws/aws-cdk/issues/15501/issues/issuecomment-3255582302) - update L1 CloudFormation resource definitions ([#&#8203;35769](https://github.com/aws/aws-cdk/issues/35769)) ([a165905](https://github.com/aws/aws-cdk/commit/a16590513ff1dcd41141e77eec5ebfaef2dff3c4)) ##### Bug Fixes - **ecs-patterns:** resolve target group conflict when updating ALB internetFacing or loadBalancerName (under feature flag) ([#&#8203;35508](https://github.com/aws/aws-cdk/issues/35508)) ([69b9c03](https://github.com/aws/aws-cdk/commit/69b9c03583ef5542aee93c5c011304314ddcd4fc)), closes [#&#8203;33253](https://github.com/aws/aws-cdk/issues/33253) [#&#8203;33253](https://github.com/aws/aws-cdk/issues/33253) [#&#8203;33253](https://github.com/aws/aws-cdk/issues/33253) - **lambda:** can't find entry file under ESM module system ([#&#8203;35797](https://github.com/aws/aws-cdk/issues/35797)) ([7becd79](https://github.com/aws/aws-cdk/commit/7becd79b95d4e6a2290b39cb39e9b7ae1c92c78e)), closes [#&#8203;21630](https://github.com/aws/aws-cdk/issues/21630) - **lambda-runtime:** change fallback for latest lambda node runtime to node 22.x ([#&#8203;35764](https://github.com/aws/aws-cdk/issues/35764)) ([10fcb1b](https://github.com/aws/aws-cdk/commit/10fcb1bcfde256373a2b240a86bb776fc7de9c92)) - **opensearchservice:** add i8g nodes validation without EBS ([#&#8203;35668](https://github.com/aws/aws-cdk/issues/35668)) ([9594842](https://github.com/aws/aws-cdk/commit/9594842729f96967eb9bdba1c856d962a97ad3cf)), closes [#&#8203;35666](https://github.com/aws/aws-cdk/issues/35666) - **s3-deployment:** handle empty string in Source.data() ([#&#8203;35824](https://github.com/aws/aws-cdk/issues/35824)) ([95c8d73](https://github.com/aws/aws-cdk/commit/95c8d73c3e95ae421b314101f34d422503981fb7)), closes [#&#8203;35809](https://github.com/aws/aws-cdk/issues/35809) - **stepfunctions-tasks:** allow passing apiEndpoint as intrinsic function (under feature flag) ([#&#8203;32139](https://github.com/aws/aws-cdk/issues/32139)) ([ddfef06](https://github.com/aws/aws-cdk/commit/ddfef06e6893d55f605c475dbb13bdb22efcfbaa)), closes [#&#8203;29925](https://github.com/aws/aws-cdk/issues/29925) [#&#8203;29925](https://github.com/aws/aws-cdk/issues/29925) [#&#8203;30749](https://github.com/aws/aws-cdk/issues/30749) *** #### Alpha modules (2.221.0-alpha.0) ##### Features - **msk-alpha:** support Kafka 4.1 ([#&#8203;35759](https://github.com/aws/aws-cdk/issues/35759)) ([67539de](https://github.com/aws/aws-cdk/commit/67539de15ee70a61629fa8dfc7f7b42b187a82e0)) ##### Bug Fixes - **elasticache-alpha:** cannot import Redis 7 serverless cache ([#&#8203;35629](https://github.com/aws/aws-cdk/issues/35629)) ([2bde1a0](https://github.com/aws/aws-cdk/commit/2bde1a02ecb1fc3439249eb1bb756bf335ec3553)) ### [`v2.220.0`](https://github.com/aws/aws-cdk/releases/tag/v2.220.0) [Compare Source](https://github.com/aws/aws-cdk/compare/v2.219.0...v2.220.0) ##### ⚠ BREAKING CHANGES *** L1 resources are automatically generated from public CloudFormation Resource Schemas. They are built to closely reflect the real state of CloudFormation. Sometimes these updates can contain changes that are incompatible with previous types, but more accurately reflect reality. In this release we have changed: - **aws-neptune**: AWS::Neptune::EventSubscription: SnsTopicArn property is now required. - **aws-neptune**: AWS::Neptune::EventSubscription: Id attribute removed. - **aws-servicecatalog**: AWS::ServiceCatalog::PortfolioShare: Id attribute removed. - **aws-lex**: AWS::Lex::ResourcePolicy: ResourceArn property is now immutable. Co-authored-by: aws-cdk-automation <aws-cdk-automation@users.noreply.github.com> *** ##### Features - **batch:** ec2 Managed Compute Environment support default instance classes, deprecate `useOptimalInstanceClasses` ([#&#8203;35537](https://github.com/aws/aws-cdk/issues/35537)) ([9d59dd8](https://github.com/aws/aws-cdk/commit/9d59dd8676bdfbba6f562d82411a527e1f7b6296)), closes [#&#8203;35515](https://github.com/aws/aws-cdk/issues/35515) - **kinesis:** shard-level metrics for stream ([#&#8203;34963](https://github.com/aws/aws-cdk/issues/34963)) ([ce9b3a8](https://github.com/aws/aws-cdk/commit/ce9b3a8ddba75b646db54f6b8834067d6f50cea5)) - **lambda:** refactor Function URL permissions ([#&#8203;35725](https://github.com/aws/aws-cdk/issues/35725)) ([d38d015](https://github.com/aws/aws-cdk/commit/d38d015dfe752249236224c25946d8acc12448f5)) - update L1 CloudFormation resource definitions ([#&#8203;35679](https://github.com/aws/aws-cdk/issues/35679)) ([dec6e6a](https://github.com/aws/aws-cdk/commit/dec6e6a24ae4529b64eebeb529a92772e6a292d7)) - update L1 CloudFormation resource definitions ([#&#8203;35695](https://github.com/aws/aws-cdk/issues/35695)) ([8a6cf46](https://github.com/aws/aws-cdk/commit/8a6cf46db1d3821cd2a16f0209dc70b03c1e2485)) - update L1 CloudFormation resource definitions ([#&#8203;35712](https://github.com/aws/aws-cdk/issues/35712)) ([27a8760](https://github.com/aws/aws-cdk/commit/27a8760c1905badbc8597926473da01796bc29fa)) - **amplify:** support build compute type ([#&#8203;34796](https://github.com/aws/aws-cdk/issues/34796)) ([a02c656](https://github.com/aws/aws-cdk/commit/a02c6565cf0768024de244b96ecfc0d972c89f3d)) - **cloudfront-origins:** add ipAddressType property to Lambda Function URL origins ([#&#8203;35458](https://github.com/aws/aws-cdk/issues/35458)) ([6cf6dc8](https://github.com/aws/aws-cdk/commit/6cf6dc800d888fcce1746fd8564fa2e7371a21cc)), closes [#&#8203;35450](https://github.com/aws/aws-cdk/issues/35450) - **ec2:** add BEDROCK_AGENTCORE and BEDROCK_AGENTCORE_GATEWAY to InterfaceVpcEndpointAwsService ([#&#8203;35667](https://github.com/aws/aws-cdk/issues/35667)) ([6966c03](https://github.com/aws/aws-cdk/commit/6966c03b1a7aece0846f5a91bbeb825cd7491689)) - **ec2:** support for automatic VPN session reconnect on client VPN endpoint ([#&#8203;35538](https://github.com/aws/aws-cdk/issues/35538)) ([9536472](https://github.com/aws/aws-cdk/commit/95364728f518c46cd6035dbea3953bdd71839e66)) - **eks:** add removal policy support for EKS cluster construct ([#&#8203;35560](https://github.com/aws/aws-cdk/issues/35560)) ([4b4e322](https://github.com/aws/aws-cdk/commit/4b4e3221182fba200c2b1f25043904e9dc1f10fb)), closes [#&#8203;25544](https://github.com/aws/aws-cdk/issues/25544) - **logs:** add parameter to allow metric filter on transformed logs ([#&#8203;35359](https://github.com/aws/aws-cdk/issues/35359)) ([effa46d](https://github.com/aws/aws-cdk/commit/effa46d0e6edd197fa53f94bb9d3d6fc071afa25)) - **opensearch:** add OpenSearch 3.1 engine version ([#&#8203;35477](https://github.com/aws/aws-cdk/issues/35477)) ([3bd7cf9](https://github.com/aws/aws-cdk/commit/3bd7cf944f2ec0b4b0191942682d19b954423536)), closes [#&#8203;35471](https://github.com/aws/aws-cdk/issues/35471) - **route53:** add fromPrivateHostedZoneAttributes function to PrivateHostedZone ([#&#8203;35552](https://github.com/aws/aws-cdk/issues/35552)) ([c8d7a79](https://github.com/aws/aws-cdk/commit/c8d7a79f204315a2dab1700ce5c358d73aa80756)), closes [#&#8203;23268](https://github.com/aws/aws-cdk/issues/23268) - **synthetics:** allow root level canary scripts files for Puppeteer versions 11 and greater ([#&#8203;35426](https://github.com/aws/aws-cdk/issues/35426)) ([46fb2dc](https://github.com/aws/aws-cdk/commit/46fb2dc010afd029d318b8c5f033bd94b23a60c4)) ##### Bug Fixes - **cloudwatch:** metric period in AnomalyDetectionAlarm is not being respected ([#&#8203;35319](https://github.com/aws/aws-cdk/issues/35319)) ([c7d8004](https://github.com/aws/aws-cdk/commit/c7d80040d0d64858a083757dd4805df70460bc10)), closes [#&#8203;34614](https://github.com/aws/aws-cdk/issues/34614) [/github.com/aws/aws-cdk/blob/6966c03b1a7aece0846f5a91bbeb825cd7491689/packages/aws-cdk-lib/aws-cloudwatch/lib/private/alarm-options.ts#L16-L18](https://github.com/aws//github.com/aws/aws-cdk/blob/6966c03b1a7aece0846f5a91bbeb825cd7491689/packages/aws-cdk-lib/aws-cloudwatch/lib/private/alarm-options.ts/issues/L16-L18) [/github.com/aws/aws-cdk/blob/86638f6daca6ead382d0b9c1cf65bb04f70d4b3d/packages/aws-cdk-lib/package.json#L32](https://github.com/aws//github.com/aws/aws-cdk/blob/86638f6daca6ead382d0b9c1cf65bb04f70d4b3d/packages/aws-cdk-lib/package.json/issues/L32) [/github.com/aws/aws-cdk/pull/35319#discussion_r2407134489](https://github.com/aws//github.com/aws/aws-cdk/pull/35319/issues/discussion_r2407134489) - **ecs:** update task definition validations for managed instances ([#&#8203;35684](https://github.com/aws/aws-cdk/issues/35684)) ([8638a78](https://github.com/aws/aws-cdk/commit/8638a788e4c4bc482139830b53ca460f490ca322)), closes [#&#8203;35644](https://github.com/aws/aws-cdk/issues/35644) - **lambda-nodejs:** bump bun to 1.2.23 for ARM64 support ([#&#8203;35702](https://github.com/aws/aws-cdk/issues/35702)) ([3aa186c](https://github.com/aws/aws-cdk/commit/3aa186c7b5c2aba8a84e1cee9278034136cd9d03)), closes [#&#8203;35534](https://github.com/aws/aws-cdk/issues/35534) - **s3:** resolve synthesis error in BucketPolicy.fromCfnBucketPolicy() ([#&#8203;35633](https://github.com/aws/aws-cdk/issues/35633)) ([d9085cc](https://github.com/aws/aws-cdk/commit/d9085cc851a4fe16419c4c3f5c51e6c1b032e786)), closes [#&#8203;34322](https://github.com/aws/aws-cdk/issues/34322) - **s3tables:** s3 table bucket read access role uses incorrect permission for s3tables:ListNamespaces ([#&#8203;35420](https://github.com/aws/aws-cdk/issues/35420)) ([eb949bb](https://github.com/aws/aws-cdk/commit/eb949bb13a145c046d096937ce1e9c26d4b84f7b)) *** #### Alpha modules (2.220.0-alpha.0) ##### Bug Fixes - **amplify-alpha:** handle empty customResponseHeaders array ([#&#8203;35700](https://github.com/aws/aws-cdk/issues/35700)) ([57f9068](https://github.com/aws/aws-cdk/commit/57f90687d56ebe2cdc3fd5cff1dc35329c502ee4)), closes [#&#8203;35693](https://github.com/aws/aws-cdk/issues/35693) ### [`v2.219.0`](https://github.com/aws/aws-cdk/releases/tag/v2.219.0) [Compare Source](https://github.com/aws/aws-cdk/compare/v2.218.0...v2.219.0) ##### ⚠ BREAKING CHANGES - \*\* L1 resources are automatically generated from public CloudFormation Resource Schemas. They are built to closely reflect the real state of CloudFormation. Sometimes these updates can contain changes that are incompatible with previous types, but more accurately reflect reality. In this release we have changed: aws-servicecatalog: AWS::ServiceCatalog::PortfolioPrincipalAssociation: PortfolioId property is now required. aws-servicecatalog: AWS::ServiceCatalog::PortfolioPrincipalAssociation: PrincipalARN property is now required. aws-servicecatalog: AWS::ServiceCatalog::PortfolioProductAssociation: Id attribute removed. Co-authored-by: aws-cdk-automation <aws-cdk-automation@users.noreply.github.com> ##### Features - **ecs:** new L2 construct for ManagedInstances CapacityProvider ([#&#8203;35648](https://github.com/aws/aws-cdk/issues/35648)) ([c72a09b](https://github.com/aws/aws-cdk/commit/c72a09bbd712e22ee53cfa7d7362228660980754)) - update L1 CloudFormation resource definitions ([#&#8203;35646](https://github.com/aws/aws-cdk/issues/35646)) ([860ce0d](https://github.com/aws/aws-cdk/commit/860ce0d4aeeff9fd46442b1b18faecaeb46009fa)) - **codebuild:** add custom instance type and VPC to Fleets ([#&#8203;34572](https://github.com/aws/aws-cdk/issues/34572)) ([5c2781b](https://github.com/aws/aws-cdk/commit/5c2781bbadfef8481fbc5d808dc34b7d6379a467)) - **codebuild:** support overflow behavior of fleet ([#&#8203;35480](https://github.com/aws/aws-cdk/issues/35480)) ([e4113b0](https://github.com/aws/aws-cdk/commit/e4113b04d0b0b00ec54425e63a42b9d4c03c08f9)) - update L1 CloudFormation resource definitions ([#&#8203;35614](https://github.com/aws/aws-cdk/issues/35614)) ([fb0a114](https://github.com/aws/aws-cdk/commit/fb0a114a835c592594e241ae6752ad98db287ac6)) ##### Bug Fixes - **cloudfront:** edgefunction does not propagate stack tags correctly ([#&#8203;35518](https://github.com/aws/aws-cdk/issues/35518)) ([63088e8](https://github.com/aws/aws-cdk/commit/63088e8778bcaaad29eb55ddd3ce9005a79eab86)) *** #### Alpha modules (2.219.0-alpha.0) ### [`v2.218.0`](https://github.com/aws/aws-cdk/releases/tag/v2.218.0) [Compare Source](https://github.com/aws/aws-cdk/compare/v2.217.0...v2.218.0) ##### Features - **cloudfront-origins:** ip address type for http origin ([#&#8203;35445](https://github.com/aws/aws-cdk/issues/35445)) ([196c7ae](https://github.com/aws/aws-cdk/commit/196c7ae65b0066d2eea8440a0dc58adf22667a00)), closes [#&#8203;35427](https://github.com/aws/aws-cdk/issues/35427) - **docdb:** support for serverless clusters ([#&#8203;35574](https://github.com/aws/aws-cdk/issues/35574)) ([89bfef7](https://github.com/aws/aws-cdk/commit/89bfef76557d2fd693e248191c3f436c9daf90b1)), closes [#&#8203;35199](https://github.com/aws/aws-cdk/issues/35199) - **pipelines:** `CodeBuildFactory` support Docker server ([#&#8203;35584](https://github.com/aws/aws-cdk/issues/35584)) ([c62d996](https://github.com/aws/aws-cdk/commit/c62d99603b75165b179726c7a0be4457ca1bda86)) - **spec2cdk:** generate `from<Resource>Arn` and `from<Resource><Prop>` in every L1 ([#&#8203;35470](https://github.com/aws/aws-cdk/issues/35470)) ([c588061](https://github.com/aws/aws-cdk/commit/c5880614297a1e81e6ab034bb6a922050e9c22b8)) *** #### Alpha modules (2.218.0-alpha.0) - **elasticache-alpha:** implement Serverless ElastiCache L2 Construct ([#&#8203;35424](https://github.com/aws/aws-cdk/issues/35424)) ([0e08c8c](https://github.com/aws/aws-cdk/commit/0e08c8ccc17f45a9023433c17c22a951b23cad43)) ### [`v2.217.0`](https://github.com/aws/aws-cdk/releases/tag/v2.217.0) [Compare Source](https://github.com/aws/aws-cdk/compare/v2.216.0...v2.217.0) ##### Features - update L1 CloudFormation resource definitions ([#&#8203;35491](https://github.com/aws/aws-cdk/issues/35491)) ([d095f68](https://github.com/aws/aws-cdk/commit/d095f687e77bed7d064dc30938a69f51d8b2c6a8)) - update L1 CloudFormation resource definitions ([#&#8203;35567](https://github.com/aws/aws-cdk/issues/35567)) ([b0ccf81](https://github.com/aws/aws-cdk/commit/b0ccf819277bd65057de87de8a43fbc8f09a03f7)) ##### Bug Fixes - **cloudfront:** `Function` ARN reference changed from GetAtt to Ref ([#&#8203;35547](https://github.com/aws/aws-cdk/issues/35547)) ([8a26869](https://github.com/aws/aws-cdk/commit/8a26869586e56e85994822815a21596aecf68453)), closes [#&#8203;35531](https://github.com/aws/aws-cdk/issues/35531) - **core:** negated gitignore patterns inside subdirectories are not including matched files ([#&#8203;35511](https://github.com/aws/aws-cdk/issues/35511)) ([44781ef](https://github.com/aws/aws-cdk/commit/44781efe38113a7f7b86d74c605274fecbaca546)), closes [#&#8203;9146](https://github.com/aws/aws-cdk/issues/9146) [#&#8203;22002](https://github.com/aws/aws-cdk/issues/22002) - **kms:** `Alias` reference incorrectly resolves to underlying `Key` ([#&#8203;35545](https://github.com/aws/aws-cdk/issues/35545)) ([43ffcff](https://github.com/aws/aws-cdk/commit/43ffcff6a5092b9ec5030ba020c366ca7d6a8820)), closes [#&#8203;35543](https://github.com/aws/aws-cdk/issues/35543) - **lambda:** function.latestVersion points to wrong ARN ([#&#8203;35546](https://github.com/aws/aws-cdk/issues/35546)) ([761dde2](https://github.com/aws/aws-cdk/commit/761dde288dce01cca60cbfd44e79b9bab9e0faf3)), closes [#&#8203;35545](https://github.com/aws/aws-cdk/issues/35545) - **rds:** cannot use connections in rds.DatabaseInstance.fromLookup ([#&#8203;35193](https://github.com/aws/aws-cdk/issues/35193)) ([973d234](https://github.com/aws/aws-cdk/commit/973d23460787d3dc2eb1883eddb120a67cb8688f)), closes [#&#8203;35192](https://github.com/aws/aws-cdk/issues/35192) ##### Reverts - **dynamodb:** use keyId instead of keyArn for TableV2 replica encryption ([#&#8203;35568](https://github.com/aws/aws-cdk/issues/35568)) ([b1f7f78](https://github.com/aws/aws-cdk/commit/b1f7f78ebc3ebdb5995bfb8b500e4b2ccd505afa)), closes [aws/aws-cdk#35144](https://github.com/aws/aws-cdk/issues/35144) [#&#8203;35144](https://github.com/aws/aws-cdk/issues/35144) [#&#8203;35551](https://github.com/aws/aws-cdk/issues/35551) *** #### Alpha modules (2.217.0-alpha.0) ### [`v2.216.0`](https://github.com/aws/aws-cdk/releases/tag/v2.216.0) [Compare Source](https://github.com/aws/aws-cdk/compare/v2.215.0...v2.216.0) ##### Features - **apigatewayv2:** add disableSchemaValidation for Websocket api ([#&#8203;35290](https://github.com/aws/aws-cdk/issues/35290)) ([bc391ce](https://github.com/aws/aws-cdk/commit/bc391ce0e2acc7714c204953cc5ca318624f721c)) - **cloudfront-origins:** response completion timeout ([#&#8203;35485](https://github.com/aws/aws-cdk/issues/35485)) ([7d70bf4](https://github.com/aws/aws-cdk/commit/7d70bf488f6cef512dd680ecb2bf6e0d979eccb2)) - **elasticloadbalancingv2:** support target group health attributes ([#&#8203;33351](https://github.com/aws/aws-cdk/issues/33351)) ([2de6e39](https://github.com/aws/aws-cdk/commit/2de6e39a440a0043e6fd1c4206f6f7bcda307e31)), closes [#&#8203;31821](https://github.com/aws/aws-cdk/issues/31821) - **events:** add support for Event Bus Logging Configuration ([#&#8203;35201](https://github.com/aws/aws-cdk/issues/35201)) ([7ceaefb](https://github.com/aws/aws-cdk/commit/7ceaefb7442e24f0eab8eb584aedec983157b125)), closes [#&#8203;35000](https://github.com/aws/aws-cdk/issues/35000) - **route53:** add SVCB and HTTPS resource record classes ([#&#8203;34744](https://github.com/aws/aws-cdk/issues/34744)) ([8be219a](https://github.com/aws/aws-cdk/commit/8be219ac4406a6eb84b4ec0f37fb31d835ffe25e)), closes [#&#8203;34673](https://github.com/aws/aws-cdk/issues/34673) - **stepfunctions-tasks:** `EmrCreateClusterOptions` support ebsRootVolumeIops, ebsRootVolumeThroughput and managedScalingPolicy ([#&#8203;34677](https://github.com/aws/aws-cdk/issues/34677)) ([b3ad6f9](https://github.com/aws/aws-cdk/commit/b3ad6f974fed3597bbb36c2cd2b2eae43a6abcad)), closes [#&#8203;33431](https://github.com/aws/aws-cdk/issues/33431) ##### Bug Fixes - **cloudformation-include:** aws::novalue type validation error for non-string properties ([#&#8203;35425](https://github.com/aws/aws-cdk/issues/35425)) ([ce76a56](https://github.com/aws/aws-cdk/commit/ce76a56d11e11633562369e61fe950a8434b881e)), closes [#&#8203;18420](https://github.com/aws/aws-cdk/issues/18420) - **kinesisanalytics:** deprecate using KinesisAnalyticsV2 from `aws-kinesisanalytics`, use `aws-kinesisanalyticsv2` instead ([#&#8203;35519](https://github.com/aws/aws-cdk/issues/35519)) ([4255b23](https://github.com/aws/aws-cdk/commit/4255b2356af288efe0c21be5adc54d0b5393a77f)) - **kms:** cannot access aliasTargetKey on an Alias imported by Alias.fromAliasName ([#&#8203;35521](https://github.com/aws/aws-cdk/issues/35521)) ([c0c9933](https://github.com/aws/aws-cdk/commit/c0c9933137c29c16d5b552a371b59d8d18743ba0)), closes [#&#8203;35520](https://github.com/aws/aws-cdk/issues/35520) - **secretsmanager:** `SecretRotationApplication` creates lambda on python 3.9 which is EOL ([#&#8203;35528](https://github.com/aws/aws-cdk/issues/35528)) ([756b683](https://github.com/aws/aws-cdk/commit/756b683dea9bd23acb0494eaccbd36a340375af5)), closes [#&#8203;34168](https://github.com/aws/aws-cdk/issues/34168) - **secretsmanager:** secret transformation ([#&#8203;35202](https://github.com/aws/aws-cdk/issues/35202)) ([f4b26af](https://github.com/aws/aws-cdk/commit/f4b26af43985b55b4b0c36f76b478300ae9f55a0)), closes [#&#8203;34168](https://github.com/aws/aws-cdk/issues/34168) *** #### Alpha modules (2.216.0-alpha.0) ### [`v2.215.0`](https://github.com/aws/aws-cdk/releases/tag/v2.215.0) [Compare Source](https://github.com/aws/aws-cdk/compare/v2.214.1...v2.215.0) ##### Features - **33270:** support new bun lock file ([#&#8203;34873](https://github.com/aws/aws-cdk/issues/34873)) ([0a55ed1](https://github.com/aws/aws-cdk/commit/0a55ed1a01009d28739e8f081b1ce0ad78eac73d)), closes [#&#8203;33270](https://github.com/aws/aws-cdk/issues/33270) - **codebuild:** support remote Docker server ([#&#8203;34976](https://github.com/aws/aws-cdk/issues/34976)) ([eb8e74b](https://github.com/aws/aws-cdk/commit/eb8e74b8146d57a6f85484a2db053e1bfc27864e)), closes [#&#8203;34494](https://github.com/aws/aws-cdk/issues/34494) - update L1 CloudFormation resource definitions ([#&#8203;35435](https://github.com/aws/aws-cdk/issues/35435)) ([d7f211f](https://github.com/aws/aws-cdk/commit/d7f211fe7b6134c1f1f95561f352cb7e66a7d387)) - **batch:** ecs execute command ([#&#8203;35341](https://github.com/aws/aws-cdk/issues/35341)) ([30722f2](https://github.com/aws/aws-cdk/commit/30722f28e5b9f9fd1ce9e06450a076c7b5356c4e)) - **custom-resource:** upgrade to python runtime 3.13 for custom resources ([#&#8203;35342](https://github.com/aws/aws-cdk/issues/35342)) ([3db140e](https://github.com/aws/aws-cdk/commit/3db140e63518dc1deeff3881e72e2fb0512c330e)) - **rds:** add DatabaseProxyEndpoint L2 construct ([#&#8203;35064](https://github.com/aws/aws-cdk/issues/35064)) ([04d8a95](https://github.com/aws/aws-cdk/commit/04d8a9538296a61829f15686a4310d6278065645)), closes [#&#8203;14186](https://github.com/aws/aws-cdk/issues/14186) - **stepfunctions-tasks:** add Node.js 22 support to EvaluateExpression ([#&#8203;35370](https://github.com/aws/aws-cdk/issues/35370)) ([640821d](https://github.com/aws/aws-cdk/commit/640821d8229c85fbb716b62abc452d85745ab79e)), closes [#&#8203;35353](https://github.com/aws/aws-cdk/issues/35353) - **synthetics:** browser type for canary ([#&#8203;35423](https://github.com/aws/aws-cdk/issues/35423)) ([fe0708b](https://github.com/aws/aws-cdk/commit/fe0708bb97aedc29ecbd7137e2086ab845cd886f)) - new resource interfaces shared by both L1s and L2s ([#&#8203;35032](https://github.com/aws/aws-cdk/issues/35032)) ([5e8c0d5](https://github.com/aws/aws-cdk/commit/5e8c0d5665f97d37f58271b972e4fe384278c1ee)) ##### Bug Fixes - correct typo 'notfication' to 'notification' in Stack docstring ([#&#8203;35455](https://github.com/aws/aws-cdk/issues/35455)) ([bfb54b0](https://github.com/aws/aws-cdk/commit/bfb54b003125d57a9ec287e4a44eaf5dc8038ad1)), closes [#&#8203;35433](https://github.com/aws/aws-cdk/issues/35433) - **ecr-assets:** `TarballImageAsset` respects CDK_DOCKER environment variable ([#&#8203;35344](https://github.com/aws/aws-cdk/issues/35344)) ([8bf6b00](https://github.com/aws/aws-cdk/commit/8bf6b00e1d6235f1e47617ab66484effaefce411)), closes [#&#8203;35336](https://github.com/aws/aws-cdk/issues/35336) - **s3:** scope BucketNotificationsHandler IAM permissions to specific bucket ARNs ([#&#8203;35334](https://github.com/aws/aws-cdk/issues/35334)) ([c0300d2](https://github.com/aws/aws-cdk/commit/c0300d266a80b5aa16caeb5c71d4f76357892ee1)), closes [#&#8203;35331](https://github.com/aws/aws-cdk/issues/35331) - **stepfunctions:** incorrect/missing permissions to run/redrive DistributedMap in state machine ([#&#8203;34760](https://github.com/aws/aws-cdk/issues/34760)) ([bbebb79](https://github.com/aws/aws-cdk/commit/bbebb793565381ff2fb113595bd37848011307fb)), closes [#&#8203;35390](https://github.com/aws/aws-cdk/issues/35390) [/github.com/aws/aws-cdk/issues/28820#issuecomment-2065316882](https://github.com/aws//github.com/aws/aws-cdk/issues/28820/issues/issuecomment-2065316882) [/github.com/aws/aws-cdk/blob/aea1372ab7bc68c489cea5ee5e499233755910e8/packages/aws-cdk-lib/aws-stepfunctions/lib/state-graph.ts#L178-L180](https://github.com/aws//github.com/aws/aws-cdk/blob/aea1372ab7bc68c489cea5ee5e499233755910e8/packages/aws-cdk-lib/aws-stepfunctions/lib/state-graph.ts/issues/L178-L180) - **stepfunctions:** unable to run distributed map when only defined in nested StateGraphs ([#&#8203;35417](https://github.com/aws/aws-cdk/issues/35417)) ([036b413](https://github.com/aws/aws-cdk/commit/036b413f9f2af39506b7e7335a6fa2822cb9c658)), closes [#&#8203;35391](https://github.com/aws/aws-cdk/issues/35391) [/github.com/aws/aws-cdk/pull/34760#discussion_r2313620609](https://github.com/aws//github.com/aws/aws-cdk/pull/34760/issues/discussion_r2313620609) *** #### Alpha modules (2.215.0-alpha.0) ##### Bug Fixes - **bedrock-alpha:** added missing validation when prompt uses default variant ([#&#8203;35366](https://github.com/aws/aws-cdk/issues/35366)) ([cbd271e](https://github.com/aws/aws-cdk/commit/cbd271e36b68adbbaa1c87f95e7b99eaf3817264)) ### [`v2.214.1`](https://github.com/aws/aws-cdk/releases/tag/v2.214.1) [Compare Source](https://github.com/aws/aws-cdk/compare/v2.214.0...v2.214.1) ##### Features - introduce reference interfaces, but don't require them yet ([09fc592](https://github.com/aws/aws-cdk/commit/09fc592f8debaf0b66ad5bec57d677ab776c0d6f)) *** #### Alpha modules (2.214.1-alpha.0) ### [`v2.214.0`](https://github.com/aws/aws-cdk/releases/tag/v2.214.0) [Compare Source](https://github.com/aws/aws-cdk/compare/v2.213.0...v2.214.0) ##### CHANGES TO L1 RESOURCES - L1 resources are automatically generated from public CloudFormation Resource Schemas. They are build to closely reflect the real state of CloudFormation. Sometimes these updates can contain changes that are incompatible with previous types, but more accurately reflect reality. In this release we have changed: - **aws-ecs**: AWS::ECS::Service: AvailabilityZoneRebalancing property default value changed from "ENABLED" to "DISABLED". ##### Features - **acm:** add support for ACM exportable public certificates ([#&#8203;35079](https://github.com/aws/aws-cdk/issues/35079)) ([c158e80](https://github.com/aws/aws-cdk/commit/c158e806f6bf8a5a5c8464f44c8a9f9f2b3586bf)), closes [#&#8203;35078](https://github.com/aws/aws-cdk/issues/35078) - **cloudwatch:** add option to show labels on pie chart ([#&#8203;34745](https://github.com/aws/aws-cdk/issues/34745)) ([83f0a61](https://github.com/aws/aws-cdk/commit/83f0a61b838777ab6239bede77472f6667a0e441)), closes [#&#8203;28929](https://github.com/aws/aws-cdk/issues/28929) - **cognito:** support refresh token rotation ([#&#8203;34360](https://github.com/aws/aws-cdk/issues/34360)) ([74f8ad9](https://github.com/aws/aws-cdk/commit/74f8ad98c122f1c4c8f3ee10bd582feec80b55bf)), closes [#&#8203;34344](https://github.com/aws/aws-cdk/issues/34344) - **core:** `DockerBuildOptions` support network param ([#&#8203;34725](https://github.com/aws/aws-cdk/issues/34725)) ([bc333e2](https://github.com/aws/aws-cdk/commit/bc333e267620fa2e3b7add39c565548e778cd01f)), closes [#&#8203;34514](https://github.com/aws/aws-cdk/issues/34514) - **dynamodb:** adding ContributorInsightsMode feature ([#&#8203;35332](https://github.com/aws/aws-cdk/issues/35332)) ([f12ead2](https://github.com/aws/aws-cdk/commit/f12ead206b659941ef05464a708b6d23eada4ba0)) - **rds:** retain automated backups for database cluster ([#&#8203;35372](https://github.com/aws/aws-cdk/issues/35372)) ([2ffc666](https://github.com/aws/aws-cdk/commit/2ffc666a0e7fdcbbaa072bb9b91f19e4a80e9e46)) - update L1 CloudFormation resource definitions ([#&#8203;35320](https://github.com/aws/aws-cdk/issues/35320)) ([0d674e4](https://github.com/aws/aws-cdk/commit/0d674e4ac4b2f3544e917367af891bba03cf39b0)) - update L1 CloudFormation resource definitions ([#&#8203;35382](https://github.com/aws/aws-cdk/issues/35382)) ([8f708df](https://github.com/aws/aws-cdk/commit/8f708df13344ea4a8fd3a1b50ab2bf9dce4b556a)) - **ecs:** volume initialization rate ([#&#8203;34962](https://github.com/aws/aws-cdk/issues/34962)) ([b8dfbc4](https://github.com/aws/aws-cdk/commit/b8dfbc466cf8fac4641d9e8c111525e2dc7a1848)) - **events:** enable customer managed keys to be used with Archive ([#&#8203;35253](https://github.com/aws/aws-cdk/issues/35253)) ([9f5e507](https://github.com/aws/aws-cdk/commit/9f5e507a12fbf430307bc6aa688446ec62414abd)) - **sns:** add notExistsCondition method ([#&#8203;34712](https://github.com/aws/aws-cdk/issues/34712)) ([fd8677b](https://github.com/aws/aws-cdk/commit/fd8677bb93fb8776abb4510631d750bc88ff920d)), closes [#&#8203;34707](https://github.com/aws/aws-cdk/issues/34707) ##### Bug Fixes - lazy loading to improve startup time slows down large programs ([#&#8203;35335](https://github.com/aws/aws-cdk/issues/35335)) ([6755a4e](https://github.com/aws/aws-cdk/commit/6755a4ea48f2963a4c3274e6fed938b4dc0f9f42)) - **cloudwatch:** `AlarmRule.concat` cover empty operands ([#&#8203;34757](https://github.com/aws/aws-cdk/issues/34757)) ([a01aa38](https://github.com/aws/aws-cdk/commit/a01aa38f044a5d3314831e0c912533917bdb8020)), closes [#&#8203;34662](https://github.com/aws/aws-cdk/issues/34662) - **ecs_patterns:** openListener should be false when custom sg is provided ([#&#8203;35297](https://github.com/aws/aws-cdk/issues/35297)) ([ccb1955](https://github.com/aws/aws-cdk/commit/ccb1955978e9e7851299d46f3bb4647bf4fd1a13)), closes [#&#8203;35292](https://github.com/aws/aws-cdk/issues/35292) [#ffcdd2](https://github.com/aws/aws-cdk/issues/ffcdd2) [#e8f5e8](https://github.com/aws/aws-cdk/issues/e8f5e8) [#fff3e0](https://github.com/aws/aws-cdk/issues/fff3e0) [#f5f5f5](https://github.com/aws/aws-cdk/issues/f5f5f5) - **eks:** kubectlProvider should use the AmazonEC2ContainerRegistryPullOnly managed policy ([#&#8203;35248](https://github.com/aws/aws-cdk/issues/35248)) ([1b6e962](https://github.com/aws/aws-cdk/commit/1b6e9628b18fe686c25f60e690193a7f0b331318)), closes [#&#8203;35244](https://github.com/aws/aws-cdk/issues/35244) - **stepfunctions-tasks:** map bedrockagent service to bedrock IAM prefix ([#&#8203;35147](https://github.com/aws/aws-cdk/issues/35147)) ([86638f6](https://github.com/aws/aws-cdk/commit/86638f6daca6ead382d0b9c1cf65bb04f70d4b3d)), closes [#&#8203;35146](https://github.com/aws/aws-cdk/issues/35146) - stop passing the deprecated property to Cfn construct ([#&#8203;35080](https://github.com/aws/aws-cdk/issues/35080)) ([a20afcd](https://github.com/aws/aws-cdk/commit/a20afcd4aaf275b01df4fc1eff930aa9dcb66d1d)), closes [#&#8203;34895](https://github.com/aws/aws-cdk/issues/34895) - **s3-deployment:** intermittent CreateInvalidation and/or wait errors ([#&#8203;34859](https://github.com/aws/aws-cdk/issues/34859)) ([628425c](https://github.com/aws/aws-cdk/commit/628425c9649a5ae7ca60b7ec7f9ac6237a4c1d11)), closes [#&#8203;15891](https://github.com/aws/aws-cdk/issues/15891) [#&#8203;15891](https://github.com/aws/aws-cdk/issues/15891) *** #### Alpha modules (2.214.0-alpha.0) ##### Features - **bedrock-alpha:** add guardrails l2 construct ([#&#8203;34765](https://github.com/aws/aws-cdk/issues/34765)) ([b4fdb2b](https://github.com/aws/aws-cdk/commit/b4fdb2b494abf41eccab90cca0d0f64d38009fbe)) - **eks-v2-alpha:** support eks with k8s 1.33 ([#&#8203;34713](https://github.com/aws/aws-cdk/issues/34713)) ([c24565e](https://github.com/aws/aws-cdk/commit/c24565e015d692e9a9c5dc9703372ec51b04be6b)), closes [#&#8203;34520](https://github.com/aws/aws-cdk/issues/34520) [#&#8203;34911](https://github.com/aws/aws-cdk/issues/34911) - **s3tables-alpha:** add TablePolicy support to L2 construct library ([#&#8203;35223](https://github.com/aws/aws-cdk/issues/35223)) ([2741dfb](https://github.com/aws/aws-cdk/commit/2741dfbf69bbfa3e4353b4b3cbb4423fddc53226)), closes [#&#8203;33054](https://github.com/aws/aws-cdk/issues/33054) ### [`v2.213.0`](https://github.com/aws/aws-cdk/releases/tag/v2.213.0) [Compare Source](https://github.com/aws/aws-cdk/compare/v2.212.0...v2.213.0) ##### Features - **dynamodb:** adding ContributorInsightsMode feature ([#&#8203;35332](https://github.com/aws/aws-cdk/issues/35332)) ([d2c93e4](https://github.com/aws/aws-cdk/commit/d2c93e4b75391aad38b0f472e78d2a7d8879e2b8)) *** #### Alpha modules (2.213.0-alpha.0) ##### Features - **s3tables-alpha:** add TablePolicy support to L2 construct library ([#&#8203;35223](https://github.com/aws/aws-cdk/issues/35223)) ([a4aad78](https://github.com/aws/aws-cdk/commit/a4aad78a45fb776f2c2c71cb7818b4f8cbeaadd0)), closes [#&#8203;33054](https://github.com/aws/aws-cdk/issues/33054) ### [`v2.212.0`](https://github.com/aws/aws-cdk/releases/tag/v2.212.0) [Compare Source](https://github.com/aws/aws-cdk/compare/v2.211.0...v2.212.0) ##### CHANGES TO L1 RESOURCES - L1 resources are automatically generated from public CloudFormation Resource Schemas. They are build to closely reflect the real state of CloudFormation. Sometimes these updates can contain changes that are incompatible with previous types, but more accurately reflect reality. In this release we have changed: - **aws-rds**: AWS::RDS::DBInstance:`StatusInfos` property is removed. - **aws-sagemaker**: AWS::SageMaker::Domain: `SingleSignOnApplicationArn` property is removed. - **aws-cloudfront**: AWS::CloudFront::Function: `Name` property is now set as immutable. ##### Features - implement UsagePlan and ApiKey support in L2 constructs for aws-apigatewayv2 (WebSocketApi) ([#&#8203;35060](https://github.com/aws/aws-cdk/issues/35060)) ([f7faffe](https://github.com/aws/aws-cdk/commit/f7faffe132b281e3799d23f931f5ac90272a67ef)), closes [#&#8203;28756](https://github.com/aws/aws-cdk/issues/28756) - update L1 CloudFormation resource definitions ([#&#8203;35256](https://github.com/aws/aws-cdk/issues/35256)) ([d79fd85](https://github.com/aws/aws-cdk/commit/d79fd85cba91b296db7295068169504610158011)) ##### Bug Fixes - **apigateway:** invalid JSON structure in StepFunctions error responses causes 500s ([#&#8203;34787](https://github.com/aws/aws-cdk/issues/34787)) ([0d5ce56](https://github.com/aws/aws-cdk/commit/0d5ce566cc92840c8ea1619a4928b8b963f0877f)), closes [#&#8203;34777](https://github.com/aws/aws-cdk/issues/34777) - **aws-cdk-lib:** feature flag report contains unnecessary flags ([#&#8203;35227](https://github.com/aws/aws-cdk/issues/35227)) ([566f6ca](https://github.com/aws/aws-cdk/commit/566f6ca930dcc323f782720e6651c54e740acea4)) - **s3-deployment:** list tokens in Source.jsonData are not resolved. ([#&#8203;35169](https://github.com/aws/aws-cdk/issues/35169)) ([1efb764](https://github.com/aws/aws-cdk/commit/1efb764a96c30f7dbfbf9d78f9aaf3d7ac0300c9)), closes [#&#8203;35145](https://github.com/aws/aws-cdk/issues/35145) [#&#8203;35145](https://github.com/aws/aws-cdk/issues/35145) - **signer:** not correctly passing signingProfileName to CfnSigningProfile ([#&#8203;35033](https://github.com/aws/aws-cdk/issues/35033)) ([aaaa9cc](https://github.com/aws/aws-cdk/commit/aaaa9cc330ea1e2854e764e164fe432aeb8606ca)), closes [#&#8203;35030](https://github.com/aws/aws-cdk/issues/35030) ##### Reverts - **docs:** revert ECS and Fargate service documentation for new AZ rebalancing default values ([#&#8203;35233](https://github.com/aws/aws-cdk/issues/35233)) ([7c0084a](https://github.com/aws/aws-cdk/commit/7c0084a9d486048f84b0e78a959fe93cffb6d628)), closes [#&#8203;35156](https://github.com/aws/aws-cdk/issues/35156) *** #### Alpha modules (2.212.0-alpha.0) ### [`v2.211.0`](https://github.com/aws/aws-cdk/releases/tag/v2.211.0) [Compare Source](https://github.com/aws/aws-cdk/compare/v2.210.0...v2.211.0) ##### ⚠ BREAKING CHANGES **cloudformation:** L1 resources are automatically generated from public CloudFormation Resource Schemas. They are build to closely reflect the real state of CloudFormation. Sometimes these updates can contain changes that are incompatible with previous types, but more accurately reflect reality. In this release we have changed: - **aws-opsworkscm**: CfnServer resource is no longer provisionable (AWS::OpsWorksCM::Server). Service is on deprecation path - **aws-iotfleetwise**: Properties `DataDestinationConfigs`, `SignalsToCollect` and `SignalsToFetch` in resource `CfnCampaign` are now marked as immutable (they will cause a replacement of the resource if updated) ##### Features - **cloudformation:** update L1 CloudFormation resource definitions ([#&#8203;35138](https://github.com/aws/aws-cdk/issues/35138)) ([3eb8ec0](https://github.com/aws/aws-cdk/commit/3eb8ec05b23555c4d9a202dad5a64ec62bf61af1)) - **dynamodb:** tableV2 MRSC feature addition ([#&#8203;34909](https://github.com/aws/aws-cdk/issues/34909)) ([6b318f5](https://github.com/aws/aws-cdk/commit/6b318f53bbaa1d79ffa8fcdfc3b321d49c8fdd43)), closes [#&#8203;34883](https://github.com/aws/aws-cdk/issues/34883) - **ec2:** support the new `ServiceRegion` property for `AWS::EC2::VPCEndpoint` ([#&#8203;35025](https://github.com/aws/aws-cdk/issues/35025)) ([fee0638](https://github.com/aws/aws-cdk/commit/fee06382e0f36f7f241196b67a23a760eb9da099)), closes [#&#8203;32785](https://github.com/aws/aws-cdk/issues/32785) [#&#8203;33959](https://github.com/aws/aws-cdk/issues/33959) - **ecs:** add L2 support for native ECS blue/green deployments ([#&#8203;35179](https://github.com/aws/aws-cdk/issues/35179)) ([4d2f463](https://github.com/aws/aws-cdk/commit/4d2f4636ebef20d7d3588d17c02ef2db8b5f17b3)), closes [#&#8203;35061](https://github.com/aws/aws-cdk/issues/35061) [#&#8203;35170](https://github.com/aws/aws-cdk/issues/35170) [#&#8203;35167](https://github.com/aws/aws-cdk/issues/35167) ##### Bug Fixes - **dynamodb:** use keyId instead of keyArn for TableV2 replica encryption ([#&#8203;35144](https://github.com/aws/aws-cdk/issues/35144)) ([787b8ed](https://github.com/aws/aws-cdk/commit/787b8ed4a3f0aedf5b339048ee868f8ea700c4cd)), closes [#&#8203;35136](https://github.com/aws/aws-cdk/issues/35136) *** #### Alpha modules (2.211.0-alpha.0) ### [`v2.210.0`](https://github.com/aws/aws-cdk/releases/tag/v2.210.0) [Compare Source](https://github.com/aws/aws-cdk/compare/v2.209.1...v2.210.0) ##### Reverts - **ecs:** add support for native blue/green deployments in ECS L2 ([#&#8203;35061](https://github.com/aws/aws-cdk/issues/35061)) ([#&#8203;35170](https://github.com/aws/aws-cdk/issues/35170)) ([88696e9](https://github.com/aws/aws-cdk/commit/88696e9cba3c65f1a21708bd736f36f257914537)), closes [#&#8203;35167](https://github.com/aws/aws-cdk/issues/35167) *** #### Alpha modules (2.210.0-alpha.0) ##### Features - **glue-alpha:** add optional metrics control for cost optimization ([#&#8203;35154](https://github.com/aws/aws-cdk/issues/35154)) ([6e24133](https://github.com/aws/aws-cdk/commit/6e24133d26dc2cde2cbefa8736495bfc423c5e56)), closes [#&#8203;35149](https://github.com/aws/aws-cdk/issues/35149) ### [`v2.209.1`](https://github.com/aws/aws-cdk/releases/tag/v2.209.1) [Compare Source](https://github.com/aws/aws-cdk/compare/v2.209.0...v2.209.1) ##### Bug Fixes - **eks:** fix helm commands not running ecr public login ([#&#8203;35161](https://github.com/aws/aws-cdk/issues/35161)) ([d860ee8](https://github.com/aws/aws-cdk/commit/d860ee8835e112b675f26fda78a601b066e09f5f)) *** #### Alpha modules (2.209.1-alpha.0) ##### Bug Fixes - **eks-v2-alpha:** fix helm commands not running ecr public login ([#&#8203;35162](https://github.com/aws/aws-cdk/issues/35162)) ([6c2a8b8](https://github.com/aws/aws-cdk/commit/6c2a8b8fd54991ce2c8557578eeb8199b8af38ac)) ### [`v2.209.0`](https://github.com/aws/aws-cdk/releases/tag/v2.209.0) [Compare Source](https://github.com/aws/aws-cdk/compare/v2.208.0...v2.209.0) ##### Features - **ecs:** add support for native blue/green deployments in ECS L2 ([#&#8203;35061](https://github.com/aws/aws-cdk/issues/35061)) ([3723aca](https://github.com/aws/aws-cdk/commit/3723acab5e97b92a8be5cbeb1bc950469d614050)), closes [#&#8203;35010](https://github.com/aws/aws-cdk/issues/35010) - add new field to feature flag report ([#&#8203;35108](https://github.com/aws/aws-cdk/issues/35108)) ([8bff8f9](https://github.com/aws/aws-cdk/commit/8bff8f9ba540a28596fe150cef83b5da6f501c2e)) - **inferenceprofiles:** add inference and cross-region inference pro… ([#&#8203;35048](https://github.com/aws/aws-cdk/issues/35048)) ([87770ef](https://github.com/aws/aws-cdk/commit/87770efbe2edc7b923c0a63e7c78fe6fe030f0b8)) - deprecating delete existing field in ARecord ([#&#8203;35039](https://github.com/aws/aws-cdk/issues/35039)) ([49b2627](https://github.com/aws/aws-cdk/commit/49b26273a3c549ba56b22a3c0d86fa95c06d909b)), closes [#&#8203;34230](https://github.com/aws/aws-cdk/issues/34230) - **s3-tables:** add L2 construct support for Table and Namespace resources ([#&#8203;35023](https://github.com/aws/aws-cdk/issues/35023)) ([576c9ec](https://github.com/aws/aws-cdk/commit/576c9ecb6dd618f0cba497306e29fb44a0ce33a8)), closes [#&#8203;33054](https://github.com/aws/aws-cdk/issues/33054) ##### Bug Fixes - **app-staging-synthesizer:** custom bootstrap qualifier is not passed through to deployment role name ([#&#8203;35118](https://github.com/aws/aws-cdk/issues/35118)) ([6525d51](https://github.com/aws/aws-cdk/commit/6525d5116052553b693abf0aa6611b129240fbd2)), closes [#&#8203;28195](https://github.com/aws/aws-cdk/issues/28195) [#&#8203;28195](https://github.com/aws/aws-cdk/issues/28195) - **codebuild:** support Windows Server Core 2022 image with on-demand capacity ([#&#8203;35152](https://github.com/aws/aws-cdk/issues/35152)) ([a595884](https://github.com/aws/aws-cdk/commit/a59588468277179c7ba0e75d3a97fbb84498f4aa)), closes [#&#8203;29754](https://github.com/aws/aws-cdk/issues/29754) - **eks:** remove usage of shell=True in helm commands ([#&#8203;35148](https://github.com/aws/aws-cdk/issues/35148)) ([918593d](https://github.com/aws/aws-cdk/commit/918593d9a1b0bbf2068d2f160579f8d361712338)) - **eks-v2:** remove usage of shell=True in helm commands ([#&#8203;35141](https://github.com/aws/aws-cdk/issues/35141)) ([cd9d69c](https://github.com/aws/aws-cdk/commit/cd9d69c1069a8b366797c19ad6989206e3f4205e)) - **rds:** can not lookup VPC Security Groups with fromLookup method ([#&#8203;34906](https://github.com/aws/aws-cdk/issues/34906)) ([ae87e26](https://github.com/aws/aws-cdk/commit/ae87e2610cf82f88ed84a7bac774447a10b9667f)) *** #### Alpha modules (2.209.0-alpha.0) ### [`v2.208.0`](https://github.com/aws/aws-cdk/releases/tag/v2.208.0) [Compare Source](https://github.com/aws/aws-cdk/compare/v2.207.0...v2.208.0) ##### Features - update L1 CloudFormation resource definitions ([#&#8203;35054](https://github.com/aws/aws-cdk/issues/35054)) ([a2b3e78](https://github.com/aws/aws-cdk/commit/a2b3e788fdedff02ce2abd8998c37d4da5a5dc2d)) - **region-info:** add support for region ap-southeast-6 ([#&#8203;35036](https://github.com/aws/aws-cdk/pull/35036)) ##### Bug Fixes - **core:** `Tag must have a value` error is impossible to attribute to a specific tag ([#&#8203;35091](https://github.com/aws/aws-cdk/issues/35091)) ([6c4181b](https://github.com/aws/aws-cdk/commit/6c4181bbe1c28b8080ba5f12716ad91475b2b3f5)) - **custom-resources:** use loggingFormat instead of deprecated logFormat ([#&#8203;35015](https://github.com/aws/aws-cdk/issues/35015)) ([81fe660](https://github.com/aws/aws-cdk/commit/81fe66029bba42135143874072f16387f7edc741)), closes [#&#8203;35002](https://github.com/aws/aws-cdk/issues/35002) - **logs:** query strings can have multiple stats commands ([#&#8203;34590](https://github.com/aws/aws-cdk/issues/34590)) ([57ae6f9](https://github.com/aws/aws-cdk/commit/57ae6f92949623d93c73ff23057291ba0f5eb95b)), closes [#&#8203;34578](https://github.com/aws/aws-cdk/issues/34578) [#&#8203;34578](https://github.com/aws/aws-cdk/issues/34578) - **logs:** revert "exposed metric from the metric filter will now include the dimension map ([#&#8203;34648](https://github.com/aws/aws-cdk/issues/34648))" ([#&#8203;35102](https://github.com/aws/aws-cdk/issues/35102)) ([24bbced](https://github.com/aws/aws-cdk/commit/24bbced7e67ec6265713cf46c51b110f38b6cf7d)), closes [#&#8203;35097](https://github.com/aws/aws-cdk/issues/35097) *** #### Alpha modules (2.208.0-alpha.0) ##### Features - **glue:** throw ValidationError instead of untyped errors ([#&#8203;35084](https://github.com/aws/aws-cdk/issues/35084)) ([1e20df6](https://github.com/aws/aws-cdk/commit/1e20df640dfe1ddfd082d459fc9ff5e063b1a95c)) ### [`v2.207.0`](https://github.com/aws/aws-cdk/releases/tag/v2.207.0) [Compare Source](https://github.com/aws/aws-cdk/compare/v2.206.0...v2.207.0) ##### Features - **core:** allow validation report multi-write based on context keys ([#&#8203;34927](https://github.com/aws/aws-cdk/issues/34927)) ([9571599](https://github.com/aws/aws-cdk/commit/9571599b58e0a84d2e162fac4e61546aefda90c6)) - update L1 CloudFormation resource definitions ([#&#8203;35020](https://github.com/aws/aws-cdk/issues/35020)) ([3f695b3](https://github.com/aws/aws-cdk/commit/3f695b38a97d1a74cb3c1c62c0b54d4c5a67dd67)) - **bedrockprompt:** add prompt management to bedrock agents ([#&#8203;34754](https://github.com/aws/aws-cdk/issues/34754)) ([c0d27ee](https://github.com/aws/aws-cdk/commit/c0d27ee3bd4f6c31e1116f6bfc5551f25932aad9)) - **cloudwatch:** add search expression to graph widget in cloudwatch dashboard ([#&#8203;34933](https://github.com/aws/aws-cdk/issues/34933)) ([e3f505e](https://github.com/aws/aws-cdk/commit/e3f505eeb5ac1e3222a7e0d11c29b66fc2fe0dbd)), closes [#&#8203;7237](https://github.com/aws/aws-cdk/issues/7237) - **core:** addInfoV2 method for suppressible info Annotations ([#&#8203;34872](https://github.com/aws/aws-cdk/issues/34872)) ([fb1792c](https://github.com/aws/aws-cdk/commit/fb1792c8cfde9a5af95a9fa10d1fd6f8a30a7e78)), closes [#&#8203;34871](https://github.com/aws/aws-cdk/issues/34871) - **logs:** support ADC regions for infrequent access log class ([#&#8203;34999](https://github.com/aws/aws-cdk/issues/34999)) ([1c57d69](https://github.com/aws/aws-cdk/commit/1c57d69656f6cfbf204f2861f328002167760f13)) - **rds:** support Database Insights for RDS instances ([#&#8203;34854](https://github.com/aws/aws-cdk/issues/34854)) ([304e2db](https://github.com/aws/aws-cdk/commit/304e2db2638a830757f9ca0012b1f84230f3e0aa)), closes [#&#8203;34743](https://github.com/aws/aws-cdk/issues/34743) [#&#8203;32851](https://github.com/aws/aws-cdk/issues/32851) - cloudwatch logs transformer support ([#&#8203;34996](https://github.com/aws/aws-cdk/issues/34996)) ([ba61463](https://github.com/aws/aws-cdk/commit/ba6146391e0237af2063a11e34569bf61c4a132e)), closes [#&#8203;34861](https://github.com/aws/aws-cdk/issues/34861) ##### Bug Fixes - **autoscaling:** add an option to run validation when migrating to launch template ([#&#8203;34832](https://github.com/aws/aws-cdk/issues/34832)) ([c8d62f3](https://github.com/aws/aws-cdk/commit/c8d62f316799b07d8b927ad7ccd41bad49944178)), closes [#&#8203;34283](https://github.com/aws/aws-cdk/issues/34283) - **core:** fix asset bundling for nested stack with exclusive flag ([#&#8203;30983](https://github.com/aws/aws-cdk/issues/30983)) ([992b0a5](https://github.com/aws/aws-cdk/commit/992b0a5c3b8716bea56ad934c79506d329f4c19b)), closes [#&#8203;30967](https://github.com/aws/aws-cdk/issues/30967) [#&#8203;30967](https://github.com/aws/aws-cdk/issues/30967) - **kinesisfirehose:** can't call grantPrincipal multiple times ([#&#8203;34682](https://github.com/aws/aws-cdk/issues/34682)) ([ea226b5](https://github.com/aws/aws-cdk/commit/ea226b5e57b198add48aa07add748749171f9535)) - **s3-deployment:** broken cross stack reference when using Source.data ([#&#8203;34916](https://github.com/aws/aws-cdk/issues/34916)) ([0591c44](https://github.com/aws/aws-cdk/commit/0591c44d78ba3a98d6d37224f4451707ec2c1da8)), closes [#&#8203;22843](https://github.com/aws/aws-cdk/issues/22843) [#&#8203;22843](https://github.com/aws/aws-cdk/issues/22843) *** #### Alpha modules (2.207.0-alpha.0) ### [`v2.206.0`](https://github.com/aws/aws-cdk/releases/tag/v2.206.0) [Compare Source](https://github.com/aws/aws-cdk/compare/v2.205.0...v2.206.0) ##### Features - **custom-resource:** Added async custom resource provider framework logging off by default ([1302e3d](https://github.com/aws/aws-cdk/commit/1302e3d81a2df8e5976c9a10603efb238dcf35ae)) - **ecs:** add L1 native blue/green deployment support for ECS services ([3ef87e4](https://github.com/aws/aws-cdk/commit/3ef87e496965dc9c8efec6d5924658f45719134e)) *** #### Alpha modules (2.206.0-alpha.0) ### [`v2.205.0`](https://github.com/aws/aws-cdk/releases/tag/v2.205.0) [Compare Source](https://github.com/aws/aws-cdk/compare/v2.204.0...v2.205.0) ##### Features - **kinesisfirehose:** support custom time zone settings for S3 destination ([#&#8203;34738](https://github.com/aws/aws-cdk/issues/34738)) ([2bbe762](https://github.com/aws/aws-cdk/commit/2bbe7629ef6a7bf89001501037a988385a94f926)), closes [#&#8203;34737](https://github.com/aws/aws-cdk/issues/34737) - update L1 CloudFormation resource definitions ([#&#8203;34979](https://github.com/aws/aws-cdk/issues/34979)) ([2e0e536](https://github.com/aws/aws-cdk/commit/2e0e5362826449410210e82e17e052d384b37f36)) - **codebuild:** cache sharing of CodeBuild projects ([#&#8203;34257](https://github.com/aws/aws-cdk/issues/34257)) ([21e2d1e](https://github.com/aws/aws-cdk/commit/21e2d1e73ed8ba0d1f7bc2683dec7d5fe0fec25f)), closes [/docs.aws.amazon.com/codebuild/latest/userguide/caching-s3.html#caching-s3](https://github.com/aws//docs.aws.amazon.com/codebuild/latest/userguide/caching-s3.html/issues/caching-s3) - update L1 CloudFormation resource definitions ([#&#8203;34915](https://github.com/aws/aws-cdk/issues/34915)) ([748d03c](https://github.com/aws/aws-cdk/commit/748d03c99de6242e0b9bed91d8c015249106fdca)) - **cloudwatch-dashboards:** add support for queryLanguage property ([#&#8203;34547](https://github.com/aws/aws-cdk/issues/34547)) ([8a77828](https://github.com/aws/aws-cdk/commit/8a77828ab14f635953af27a1b00174d988e85303)), closes [#&#8203;34482](https://github.com/aws/aws-cdk/issues/34482) [/github.com/aws/aws-cdk/issues/34482#issuecomment-2887841701](https://github.com/aws//github.com/aws/aws-cdk/issues/34482/issues/issuecomment-2887841701) - **ec2:** add c8gn instance class ([#&#8203;34866](https://github.com/aws/aws-cdk/issues/34866)) ([aaf442b](https://github.com/aws/aws-cdk/commit/aaf442b87ec64576ddb9dc88919134665cee3fa7)) - **events:** add `arnForPolicy` attribute for api destination ([#&#8203;34315](https://github.com/aws/aws-cdk/issues/34315)) ([e0ac9f8](https://github.com/aws/aws-cdk/commit/e0ac9f8ee3394f666bf84066b89eb83be9b7361e)) - **rds:** add `fromLookup` method for Amazon Aurora Database Cluster ([#&#8203;34849](https://github.com/aws/aws-cdk/issues/34849)) ([23ca6fc](https://github.com/aws/aws-cdk/commit/23ca6fca7a0d029aa76dbdedb99770e8069024ca)), closes [#&#8203;34848](https://github.com/aws/aws-cdk/issues/34848) [#&#8203;33258](https://github.com/aws/aws-cdk/issues/33258) - **synthetics:** add `maxRetries` prop to configure automatic retries on canary runs ([#&#8203;34541](https://github.com/aws/aws-cdk/issues/34541)) ([54d8a84](https://github.com/aws/aws-cdk/commit/54d8a84b88c1bbde4937cc1b28e27d11aa813b0b)), closes [#&#8203;34511](https://github.com/aws/aws-cdk/issues/34511) - **synthetics:** add support for tag replication for aws synthetics ([#&#8203;34830](https://github.com/aws/aws-cdk/issues/34830)) ([5ff59d9](https://github.com/aws/aws-cdk/commit/5ff59d9c7e4959b9de8754b5a8d838810335240a)) - **core:** report feature flag info into Cloud Assembly ([#&#8203;34919](https://github.com/aws/aws-cdk/issues/34919)) ([72733ea](https://github.com/aws/aws-cdk/commit/72733ea4528911a11fb0d0411e7641ddd47fc60a)) ##### Bug Fixes - **codecov:** update codecov-upload.yml with a git checkout step ([#&#8203;34929](https://github.com/aws/aws-cdk/issues/34929)) ([0a0adf7](https://github.com/aws/aws-cdk/commit/0a0adf7ce2f06b13d8cf5150810214ae5b9ffb69)) - **lambda:** handle token resolution issues in addToRolePolicy ([#&#8203;34904](https://github.com/aws/aws-cdk/issues/34904)) ([6cd1802](https://github.com/aws/aws-cdk/commit/6cd1802d7fbfb5896a7c194099247eb4e05f4c5f)), closes [#&#8203;34894](https://github.com/aws/aws-cdk/issues/34894) - **pipelines:** ensure assets with same hash but different destinations are published separately ([#&#8203;34790](https://github.com/aws/aws-cdk/issues/34790)) ([05afab3](https://github.com/aws/aws-cdk/commit/05afab30b9c6071307f38ecc54c0594bec14f2b3)), closes [#&#8203;31070](https://github.com/aws/aws-cdk/issues/31070) [#&#8203;31070](https://github.com/aws/aws-cdk/issues/31070) - **region-info:** integ use standalone package ([#&#8203;34782](https://github.com/aws/aws-cdk/issues/34782)) ([6d1bcb3](https://github.com/aws/aws-cdk/commit/6d1bcb3cc66490afb3c707cf3f3fd63d88d0a08b)), closes [#&#8203;34692](https://github.com/aws/aws-cdk/issues/34692) [/github.com/aws/aws-cdk/blob/1ae14635cbbc8ba0f2dab8cbeb72c4af0fddce7a/packages/aws-cdk-lib/package.json#L507-L511](https://github.com/aws//github.com/aws/aws-cdk/blob/1ae14635cbbc8ba0f2dab8cbeb72c4af0fddce7a/packages/aws-cdk-lib/package.json/issues/L507-L511) - **tags:** excludeResourceTypes does not work for tags applied at stack level (under feature flag) ([#&#8203;31443](https://github.com/aws/aws-cdk/issues/31443)) ([4c7d9f4](https://github.com/aws/aws-cdk/commit/4c7d9f41090992dbd91aa8c783cbfd4da4571fa7)), closes [#&#8203;28017](https://github.com/aws/aws-cdk/issues/28017) [#&#8203;33945](https://github.com/aws/aws-cdk/issues/33945) [#&#8203;30055](https://github.com/aws/aws-cdk/issues/30055) ##### ⚠ CHANGES TO L1 RESOURCES L1 resources are automatically generated from public CloudFormation Resource Schemas. They are build to closely reflect the real state of CloudFormation. Sometimes these updates can contain changes that are incompatible with previous types, but more accurately reflect reality. In this release we have changed: - ***aws-cdk-lib.aws_ec2.CfnTrafficMirrorFilterRule***: `Id` attribute was removed - ***aws-cdk-lib.aws_kinesis.StreamConsumer***: `Id` attribute was removed - ***aws-cdk-lib.aws_neptune.DBInstance***: `Id` attribute was removed *** #### Alpha modules (2.205.0-alpha.0) ### [`v2.204.0`](https://github.com/aws/aws-cdk/releases/tag/v2.204.0) [Compare Source](https://github.com/aws/aws-cdk/compare/v2.203.1...v2.204.0) ##### Features - **apigatewayv2:** add stage variables support for HTTP and WebSocket API ([#&#8203;34548](https://github.com/aws/aws-cdk/issues/34548)) ([965e055](https://github.com/aws/aws-cdk/commit/965e055acbcf7c61bdd24efae16d3949567a498c)) - **cloudwatch:** add id and visible properties for CloudWatch Metric ([#&#8203;34870](https://github.com/aws/aws-cdk/issues/34870)) ([879afd6](https://github.com/aws/aws-cdk/commit/879afd61d72757dd387f47849ac93c8126a46e40)), closes [#&#8203;19876](https://github.com/aws/aws-cdk/issues/19876) - report feature flags into Cloud Assembly ([#&#8203;34884](https://github.com/aws/aws-cdk/issues/34884)) ([f70e46c](https://github.com/aws/aws-cdk/commit/f70e46cf87f27d0132f706921736802d477a6d58)), closes [#&#8203;34798](https://github.com/aws/aws-cdk/issues/34798) - **region-info:** add support for region eusc-de ([#&#8203;34860](https://github.com/aws/aws-cdk/pull/34860)) ##### Bug Fixes - **ecr-assets:** incorrect handling of nested excludes in .dockerignore ([#&#8203;34810](https://github.com/aws/aws-cdk/issues/34810)) ([8328c79](https://github.com/aws/aws-cdk/commit/8328c7952da9b423eaa8f02020da72c02586d429)), closes [#&#8203;13636](https://github.com/aws/aws-cdk/issues/13636) [#&#8203;13636](https://github.com/aws/aws-cdk/issues/13636) - "Invalid Assembly Manifest" when used with CLI 2.1017.0 and 2.1018.0 ([#&#8203;34880](https://github.com/aws/aws-cdk/issues/34880)) ([741b0a7](https://github.com/aws/aws-cdk/commit/741b0a7d0ac1a4b97c328f7a448c8e22fa2bda30)), closes [aws/aws-cdk#34798](https://github.com/aws/aws-cdk/issues/34798) *** #### Alpha modules (2.204.0-alpha.0) ##### Features - **lambda-python-alpha:** support uv ([#&#8203;33880](https://github.com/aws/aws-cdk/issues/33880)) ([ac6f136](https://github.com/aws/aws-cdk/commit/ac6f13695ba84d5358b69c0763c2f611af54e826)), closes [#&#8203;31238](https://github.com/aws/aws-cdk/issues/31238) [#&#8203;32413](https://github.com/aws/aws-cdk/issues/32413) ### [`v2.203.1`](https://github.com/aws/aws-cdk/releases/tag/v2.203.1) [Compare Source](https://github.com/aws/aws-cdk/compare/v2.203.0...v2.203.1) ##### Bug Fixes - "Invalid Assembly Manifest" when used with CLI 2.1017.0 and 2.1018.0 ([#&#8203;34880](https://github.com/aws/aws-cdk/issues/34880)) ([32ee050](https://github.com/aws/aws-cdk/commit/32ee0504a83647a88b24361094ef76aef18e7b8b)), closes [aws/aws-cdk#34798](https://github.com/aws/aws-cdk/issues/34798) *** #### Alpha modules (2.203.1-alpha.0) ### [`v2.203.0`](https://github.com/aws/aws-cdk/releases/tag/v2.203.0) [Compare Source](https://github.com/aws/aws-cdk/compare/v2.202.0...v2.203.0) ##### ⚠ BREAKING CHANGES TO EXPERIMENTAL FEATURES - **cloudformation:** Some L1 resources experienced breaking changes due to updated CloudFormation resources. Please check the notes for each specific module for more information. * ***aws-cdk-lib.aws_kendra.CfnDataSource.TemplateConfigurationProperty***: `template` property here has changed from `string` to `json` ##### Features - **rds:** instance engine lifecycle support ([#&#8203;34719](https://github.com/aws/aws-cdk/issues/34719)) ([bab7413](https://github.com/aws/aws-cdk/commit/bab74137f17bb0759b1a922d8e88df5c0f6e9bc1)), closes [#&#8203;34492](https://github.com/aws/aws-cdk/issues/34492) - report feature flag configuration into Cloud Assembly ([#&#8203;34798](https://github.com/aws/aws-cdk/issues/34798)) ([76af7dc](https://github.com/aws/aws-cdk/commit/76af7dc8b5bc80dcc00ad9f3bbf6dc8fecfec5c3)) - **backup:** add support for ScheduleExpressionTimezone ([#&#8203;34603](https://github.com/aws/aws-cdk/issues/34603)) ([8ceea43](https://github.com/aws/aws-cdk/commit/8ceea437e332d4a1339c26f13b59b424ef389135)), closes [#&#8203;34532](https://github.com/aws/aws-cdk/issues/34532) - **cloudformation:** update L1 CloudFormation resource definitions ([#&#8203;34839](https://github.com/aws/aws-cdk/issues/34839)) ([4c75889](https://github.com/aws/aws-cdk/commit/4c75889fb44e16bc5ef979c5c6d42390ddc0a17b)) - **cloudwatch:** add account id field for log query and metric widgets to support cross account visibility ([#&#8203;34793](https://github.com/aws/aws-cdk/issues/34793)) ([ac4d09d](https://github.com/aws/aws-cdk/commit/ac4d09d91bcedc4dca144ba68b1951cc12c9b70c)), closes [#&#8203;26105](https://github.com/aws/aws-cdk/issues/26105) - **lambda:** function log removal policy ([#&#8203;34723](https://github.com/aws/aws-cdk/issues/34723)) ([0388483](https://github.com/aws/aws-cdk/commit/0388483537bbd2f6fef4e8dd3156341a90ee9d68)), closes [#&#8203;34669](https://github.com/aws/aws-cdk/issues/34669) - **pipelines:** cdk-assets version is configurable ([#&#8203;34802](https://github.com/aws/aws-cdk/issues/34802)) ([a361c9c](https://github.com/aws/aws-cdk/commit/a361c9ce325f6d1f63a62c69d26af4ce6b2e12f3)) - update L1 CloudFormation resource definitions ([#&#8203;34792](https://github.com/aws/aws-cdk/issues/34792)) ([074cb8c](https://github.com/aws/aws-cdk/commit/074cb8c8502463e658ab009c5bebf5a84ad6555b)) ##### Bug Fixes - **codecov:** update codecov-upload.yml ([#&#8203;34845](https://github.com/aws/aws-cdk/issues/34845)) ([8055016](https://github.com/aws/aws-cdk/commit/805501692991825aa4949bf830fa40e4e1c4cd6b)), closes [/github.com/aws/aws-cdk/blob/main/codecov.yml#L35](https://github.com/aws//github.com/aws/aws-cdk/blob/main/codecov.yml/issues/L35) - **codecov:** update codecov-upload.yml action to upload report with correct path ([#&#8203;34814](https://github.com/aws/aws-cdk/issues/34814)) ([705e76b](https://github.com/aws/aws-cdk/commit/705e76bf22da1e743f22428aab4c36f900b484e5)) - **stepfunctions-tasks:** properly serialize CallAwsServiceCrossRegion Lambda responses ([#&#8203;34843](https://github.com/aws/aws-cdk/issues/34843)) ([a4b15df](https://github.com/aws/aws-cdk/commit/a4b15df5d1669056947df757471ad0b921335f23)), closes [#&#8203;34768](https://github.com/aws/aws-cdk/issues/34768) ##### Reverts - "ci: add tool to sync with project board" ([#&#8203;34817](https://github.com/aws/aws-cdk/issues/34817)) ([1965014](https://github.com/aws/aws-cdk/commit/1965014d1233b956fc2c6cbbdf72bfade9aaab5d)), closes [aws/aws-cdk#34776](https://github.com/aws/aws-cdk/issues/34776) *** #### Alpha modules (2.203.0-alpha.0) ##### Features - **ec2:** support for client route enforcement for client VPN endpoint ([#&#8203;34405](https://github.com/aws/aws-cdk/issues/34405)) ([063f4e7](https://github.com/aws/aws-cdk/commit/063f4e79d7416c52b622450222c5439e893ca74c)) ##### Bug Fixes - **ec2:** don't use inferenceAccellerators in the constructors if not needed ([#&#8203;34618](https://github.com/aws/aws-cdk/issues/34618)) ([054c6c5](https://github.com/aws/aws-cdk/commit/054c6c53982b8ba33ca31af6752b1662ed5752b8)), closes [#&#8203;33505](https://github.com/aws/aws-cdk/issues/33505) [/github.com/aws/aws-cdk/issues/33505#issuecomment-2770818825](https://github.com/aws//github.com/aws/aws-cdk/issues/33505/issues/issuecomment-2770818825) [#&#8203;34610](https://github.com/aws/aws-cdk/issues/34610) ### [`v2.202.0`](https://github.com/aws/aws-cdk/releases/tag/v2.202.0) [Compare Source](https://github.com/aws/aws-cdk/compare/v2.201.0...v2.202.0) ##### Features - **lambda:** support for schema registry for kafka ([#&#8203;34746](https://github.com/aws/aws-cdk/issues/34746)) ([c6ea664](https://github.com/aws/aws-cdk/commit/c6ea66448e85639b79cc6cc35929708ab45915bc)) - update L1 CloudFormation resource definitions ([#&#8203;34730](https://github.com/aws/aws-cdk/issues/34730)) ([47a3ee3](https://github.com/aws/aws-cdk/commit/47a3ee3e7590fd085530cd16417fd506c5b9f4d7)) - **cdk-pipeline:** add url and sns topic for manual approval in cdk pipeline (re-create PR since original is auto-closed) ([#&#8203;34654](https://github.com/aws/aws-cdk/issues/34654)) ([39f1636](https://github.com/aws/aws-cdk/commit/39f163696935b34be6acdafa3f465b4f68ac7e08)), closes [#&#8203;32809](https://github.com/aws/aws-cdk/issues/32809) [#&#8203;12273](https://github.com/aws/aws-cdk/issues/12273) [#&#8203;34227](https://github.com/aws/aws-cdk/issues/34227) - **eks:** support eks with k8s 1.33 ([#&#8203;34602](https://github.com/aws/aws-cdk/issues/34602)) ([fc46733](https://github.com/aws/aws-cdk/commit/fc4673371b67c244262a863d975b11baddf6f597)), closes [#&#8203;34520](https://github.com/aws/aws-cdk/issues/34520) [/github.com/aws/aws-cdk/pull/33339#issuecomment-2643498256](https://github.com/aws//github.com/aws/aws-cdk/pull/33339/issues/issuecomment-2643498256) - **kms:** implement .grant methods for Alias.fromAliasName (under feature flag) ([#&#8203;34237](https://github.com/aws/aws-cdk/issues/34237)) ([8e19dd6](https://github.com/aws/aws-cdk/commit/8e19dd63f9f5de9b57d1964b4aac05748b72da87)), closes [#&#8203;22697](https://github.com/aws/aws-cdk/issues/22697) - **opensearch:** add logic to only log specific field when less verbosity is needed for opensearch access policy custom resource ([#&#8203;34701](https://github.com/aws/aws-cdk/issues/34701)) ([856e3b1](https://github.com/aws/aws-cdk/commit/856e3b185a794a58b2f1b0ddc01c6e2338fc35b8)), closes [#&#8203;29093](https://github.com/aws/aws-cdk/issues/29093) - exclude `lambda.Version` and `apigateway.Deployment` from refactoring ([#&#8203;34710](https://github.com/aws/aws-cdk/issues/34710)) ([dd14a17](https://github.com/aws/aws-cdk/commit/dd14a17500e0028e9544e33dbb9b7329ec1ae0d2)) ##### Bug Fixes - **core:** splitting tree.json produces a lot of files ([#&#8203;34718](https://github.com/aws/aws-cdk/issues/34718)) ([650134f](https://github.com/aws/aws-cdk/commit/650134fa95aafbfd6608eefda30415159a32da6d)), closes [#&#8203;34478](https://github.com/aws/aws-cdk/issues/34478) [#&#8203;34627](https://github.com/aws/aws-cdk/issues/34627) - **pipelines:** use display name for `Asset` actions when `publishAssetsInParallel` is false ([#&#8203;34049](https://github.com/aws/aws-cdk/issues/34049)) ([754ad50](https://github.com/aws/aws-cdk/commit/754ad507548df813a2755bb0da78ea2fa9a573cb)), closes [#&#8203;34042](https://github.com/aws/aws-cdk/issues/34042) [#&#8203;33844](https://github.com/aws/aws-cdk/issues/33844) - **route53:** warn when ttl is provided with alias target in RecordSet ([#&#8203;34526](https://github.com/aws/aws-cdk/issues/34526)) ([993d2fd](https://github.com/aws/aws-cdk/commit/993d2fdf8430b8c4d4167e6c125bcd15578bd150)) - **test-app:** fix spelling error ([#&#8203;34762](https://github.com/aws/aws-cdk/issues/34762)) ([1885062](https://github.com/aws/aws-cdk/commit/188506292cefb8da24dc8fd1dbfbeaf21c51fbc5)) *** #### Alpha modules (2.202.0-alpha.0) ##### Features - **amplify:** add compute role support for Amplify branches ([#&#8203;34708](https://github.com/aws/aws-cdk/issues/34708)) ([817a21a](https://github.com/aws/aws-cdk/commit/817a21a782da035f7878facf8cc4d938250b70e0)) - **amplify-alpha:** support custom response headers in monorepo structures ([#&#8203;31771](https://github.com/aws/aws-cdk/issues/31771)) ([aea1372](https://github.com/aws/aws-cdk/commit/aea1372ab7bc68c489cea5ee5e499233755910e8)), closes [#&#8203;31758](https://github.com/aws/aws-cdk/issues/31758) ### [`v2.201.0`](https://github.com/aws/aws-cdk/releases/tag/v2.201.0) [Compare Source](https://github.com/aws/aws-cdk/compare/v2.200.2...v2.201.0) ##### Features - **opensearch:** update default TLS security policy to TLS 1.2 for OpenSearch domains ([#&#8203;34660](https://github.com/aws/aws-cdk/issues/34660)) ([3cc2dc2](https://github.com/aws/aws-cdk/commit/3cc2dc24159425b60a63c22db9ec992810e6c0d1)), closes [#&#8203;34658](https://github.com/aws/aws-cdk/issues/34658) - update L1 CloudFormation resource definitions ([#&#8203;34659](https://github.com/aws/aws-cdk/issues/34659)) ([ef02724](https://github.com/aws/aws-cdk/commit/ef0272442d415ff7c6d5943b15b5833e0ae2e1bd)) - update L1 CloudFormation resource definitions ([#&#8203;34687](https://github.com/aws/aws-cdk/issues/34687)) ([025c82e](https://github.com/aws/aws-cdk/commit/025c82ea6e93a4cfa1c400c6b0512a21d3da91ab)) - **appconfig:** support customer managed key for hosted configuration ([#&#8203;34256](https://github.com/aws/aws-cdk/issues/34256)) ([484719e](https://github.com/aws/aws-cdk/commit/484719eb601bf2e11ce55b8966d78a8fa51eb234)) - **codepipeline-actions:** native Amazon EC2 deployment support ([#&#8203;33604](https://github.com/aws/aws-cdk/issues/33604)) ([9d39db7](https://github.com/aws/aws-cdk/commit/9d39db7ae1124c25408d65119d054f4ac5f1d937)), closes [#&#8203;33584](https://github.com/aws/aws-cdk/issues/33584) [/docs.aws.amazon.com/codepipeline/latest/userguide/action-reference-EC2Deploy.html#action-reference-EC2](https://github.com/aws//docs.aws.amazon.com/codepipeline/latest/userguide/action-reference-EC2Deploy.html/issues/action-reference-EC2) - **core:** support adding additional cache key to cdk context values ([#&#8203;31586](https://github.com/aws/aws-cdk/issues/31586)) ([8848134](https://github.com/aws/aws-cdk/commit/8848134530af4755e5558472619fdb364b1890f8)), closes [#&#8203;26982](https://github.com/aws/aws-cdk/issues/26982) - **core:** throw typed Errors ([#&#8203;34587](https://github.com/aws/aws-cdk/issues/34587)) ([4e63b1a](https://github.com/aws/aws-cdk/commit/4e63b1afde1bf2aaaa01dace9b53f9bdbafe9340)), closes [#&#8203;32569](https://github.com/aws/aws-cdk/issues/32569) - **eks:** added support for `bootstrapSelfManagedAddons` ([#&#8203;33597](https://github.com/aws/aws-cdk/issues/33597)) ([cedc1b0](https://github.com/aws/aws-cdk/commit/cedc1b065bfbbc59920098028edfa929ed1f25ce)), closes [#&#8203;30792](https://github.com/aws/aws-cdk/issues/30792) - **rds:** `DatabaseInstanceFromSnapshot` support `clusterSnapshotIdentifier` ([#&#8203;33982](https://github.com/aws/aws-cdk/issues/33982)) ([48d30b6](https://github.com/aws/aws-cdk/commit/48d30b611e624773ac081eb6594c3b9f59e053c2)), closes [#&#8203;33889](https://github.com/aws/aws-cdk/issues/33889) - **rds:** support auto-pause configuration for Aurora Serverless v2 ([#&#8203;34173](https://github.com/aws/aws-cdk/issues/34173)) ([2c55c28](https://github.com/aws/aws-cdk/commit/2c55c287016fed75428d8723d04facf08fb5896a)), closes [#&#8203;32280](https://github.com/aws/aws-cdk/issues/32280) [#&#8203;32563](https://github.com/aws/aws-cdk/issues/32563) - **stepfunctions:** add support for Jsonata expressions to Map.ItemSelector ([#&#8203;34625](https://github.com/aws/aws-cdk/issues/34625)) ([dc30faa](https://github.com/aws/aws-cdk/commit/dc30faa3d7506537ce4c56f291874b20d2c61334)), closes [#&#8203;34538](https://github.com/aws/aws-cdk/issues/34538) [/github.com/aws/aws-cdk/blob/ed08f3f0b8ecd79a2fa5e804acc73a9ff23eab80/packages/aws-cdk-lib/aws-stepfunctions/lib/states/map-base.ts#L60-L77](https://github.com/aws//github.com/aws/aws-cdk/blob/ed08f3f0b8ecd79a2fa5e804acc73a9ff23eab80/packages/aws-cdk-lib/aws-stepfunctions/lib/states/map-base.ts/issues/L60-L77) - **synthetics:** playwright 2.0 runtime ([#&#8203;34609](https://github.com/aws/aws-cdk/issues/34609)) ([1418204](https://github.com/aws/aws-cdk/commit/1418204c40cdea59ced042768ae7f57b1f47eeb6)) - **synthetics:** safe canary update ([#&#8203;34608](https://github.com/aws/aws-cdk/issues/34608)) ([89c5350](https://github.com/aws/aws-cdk/commit/89c5350f16cc5132b6eebab1859948c69d0c5719)) ##### Bug Fixes - export errors to make it available in region-info/lib/fact.ts ([#&#8203;34691](https://github.com/aws/aws-cdk/issues/34691)) ([5c8f50c](https://github.com/aws/aws-cdk/commit/5c8f50c904fee3033ecd2bc151324cd897f931da)), closes [#&#8203;34690](https://github.com/aws/aws-cdk/issues/34690) [#&#8203;34690](https://github.com/aws/aws-cdk/issues/34690) [#&#8203;33384](https://github.com/aws/aws-cdk/issues/33384) - **apigateway:** correct `JsonSchema.additionalItems` property type ([#&#8203;33879](https://github.com/aws/aws-cdk/issues/33879)) ([464d521](https://github.com/aws/aws-cdk/commit/464d52155f00ffa083cac7ba569a06640574cef1)), closes [#&#8203;33878](https://github.com/aws/aws-cdk/issues/33878) [#&#8203;33878](https://github.com/aws/aws-cdk/issues/33878) - **cloudfront:** use wildcard when grant some cloudfront permission ([#&#8203;33802](https://github.com/aws/aws-cdk/issues/33802)) ([452a5e1](https://github.com/aws/aws-cdk/commit/452a5e13f73046d1e58e5a92d33ae1e896c3251b)), closes [#&#8203;33249](https://github.com/aws/aws-cdk/issues/33249) - **lambda:** disable aws-lambda:useCdkManagedLogGroup feature flag when not set ([#&#8203;34613](https://github.com/aws/aws-cdk/issues/34613)) ([d696688](https://github.com/aws/aws-cdk/commit/d6966888924e08e153297b9616ec6d4c15d92c73)), closes [#&#8203;34612](https://github.com/aws/aws-cdk/issues/34612) [#&#8203;34612](https://github.com/aws/aws-cdk/issues/34612) - **logs:** exposed metric from the metric filter will now include the dimension map ([#&#8203;34648](https://github.com/aws/aws-cdk/issues/34648)) ([892b013](https://github.com/aws/aws-cdk/commit/892b013157fe4d3a8793a833cebf3e7bd4916348)), closes [#&#8203;34643](https://github.com/aws/aws-cdk/issues/34643) - **opensearch:** opensearchservice: existing integ test is failing ([#&#8203;34680](https://github.com/aws/aws-cdk/issues/34680)) ([be21625](https://github.com/aws/aws-cdk/commit/be216256072da04a9d08e2f833cffd9ff08334df)), closes [1#L59](https://github.com/aws/1/issues/L59) - typo in jsdoc of noncurrentVersionTransitions property ([#&#8203;34620](https://github.com/aws/aws-cdk/issues/34620)) ([ed08f3f](https://github.com/aws/aws-cdk/commit/ed08f3f0b8ecd79a2fa5e804acc73a9ff23eab80)) *** #### Alpha modules (2.201.0-alpha.0) ##### Features - **amplify:** add skew protection feature for Amplify branches ([#&#8203;34656](https://github.com/aws/aws-cdk/issues/34656)) ([8808998](https://github.com/aws/aws-cdk/commit/8808998d0ba6e5e22e36888c10474f9788a77454)) - **bedrock:** adding bedrock l2 construct features ([#&#8203;34065](https://github.com/aws/aws-cdk/issues/34065)) ([a028927](https://github.com/aws/aws-cdk/commit/a0289271aa9990f85c120d0549b878bd3c6ea484)) - **ec2:** add interface VPC endpoint for DSQL ([#&#8203;34487](https://github.com/aws/aws-cdk/issues/34487)) ([3e53c2c](https://github.com/aws/aws-cdk/commit/3e53c2c0449692e639779c4315a34bca3b778cf4)) - **ec2:** support Firehose `IDeliveryStream` as flow log destination ([#&#8203;34596](https://github.com/aws/aws-cdk/issues/34596)) ([cdfe6e7](https://github.com/aws/aws-cdk/commit/cdfe6e7e2946e80b3dffe9b23fd30659c0b88b99)), closes [#&#8203;33883](https://github.com/aws/aws-cdk/issues/33883) [#&#8203;33757](https://github.com/aws/aws-cdk/issues/33757) - **ec2:** volume initialization rate for EBS volume ([#&#8203;34570](https://github.com/aws/aws-cdk/issues/34570)) ([527d483](https://github.com/aws/aws-cdk/commit/527d483a670042caed1ba8366de81f38dde12a51)) ##### Reverts - **ec2:** support Firehose `IDeliveryStream` as flow log destination ([#&#8203;34665](https://github.com/aws/aws-cdk/issues/34665)) ([b77bd0e](https://github.com/aws/aws-cdk/commit/b77bd0e0da635098ca951c7f8b030bcb3cb387dd)), closes [aws/aws-cdk#34596](https://github.com/aws/aws-cdk/issues/34596) ### [`v2.200.2`](https://github.com/aws/aws-cdk/releases/tag/v2.200.2) [Compare Source](https://github.com/aws/aws-cdk/compare/v2.200.1...v2.200.2) ##### Bug Fixes - export errors to make it available in region-info/lib/fact.ts ([#&#8203;34691](https://github.com/aws/aws-cdk/issues/34691)) ([4a75032](https://github.com/aws/aws-cdk/commit/4a7503208e9c4b7a245aca6ef6013a54a4b252a6)), closes [#&#8203;34690](https://github.com/aws/aws-cdk/issues/34690) [#&#8203;34690](https://github.com/aws/aws-cdk/issues/34690) [#&#8203;33384](https://github.com/aws/aws-cdk/issues/33384) *** #### Alpha modules (2.200.2-alpha.0) ### [`v2.200.1`](https://github.com/aws/aws-cdk/releases/tag/v2.200.1) [Compare Source](https://github.com/aws/aws-cdk/compare/v2.200.0...v2.200.1) ##### Bug Fixes - **lambda:** disable aws-lambda:useCdkManagedLogGroup feature flag when not set ([#&#8203;34613](https://github.com/aws/aws-cdk/issues/34613)) ([b4cab7f](https://github.com/aws/aws-cdk/commit/b4cab7f41b311f48316220aaf9283833cb755ad9)), closes [#&#8203;34612](https://github.com/aws/aws-cdk/issues/34612) [#&#8203;34612](https://github.com/aws/aws-cdk/issues/34612) *** #### Alpha modules (2.200.1-alpha.0) ### [`v2.200.0`](https://github.com/aws/aws-cdk/releases/tag/v2.200.0) [Compare Source](https://github.com/aws/aws-cdk/compare/v2.199.0...v2.200.0) ##### Features - update L1 CloudFormation resource definitions ([#&#8203;34594](https://github.com/aws/aws-cdk/issues/34594)) ([1e37ee7](https://github.com/aws/aws-cdk/commit/1e37ee71971a3cdb619ba40e321def3072112e2b)) - **custom-resources:** throw `ValidationError` instead of untyped Errors ([#&#8203;33392](https://github.com/aws/aws-cdk/issues/33392)) ([1dacaa3](https://github.com/aws/aws-cdk/commit/1dacaa30fc7311ee1344493715787561118b660d)), closes [#&#8203;32569](https://github.com/aws/aws-cdk/issues/32569) - **ec2:** implement `IPeer` to `PrefixList` to be usable as a connection peer ([#&#8203;33617](https://github.com/aws/aws-cdk/issues/33617)) ([c277419](https://github.com/aws/aws-cdk/commit/c277419f3931ab50f757844323863b25be875d96)), closes [#&#8203;33607](https://github.com/aws/aws-cdk/issues/33607) - **iam:** introduce `OidcProviderNative` construct utilizing the native CloudFormation resource ([#&#8203;28634](https://github.com/aws/aws-cdk/issues/28634)) ([d8e6c09](https://github.com/aws/aws-cdk/commit/d8e6c09083d4958c1967bc19ff30cf15820580af)), closes [#&#8203;21197](https://github.com/aws/aws-cdk/issues/21197) - **iam:** throw `ValidationError`s instead of untyped errors ([#&#8203;34579](https://github.com/aws/aws-cdk/issues/34579)) ([bd5caba](https://github.com/aws/aws-cdk/commit/bd5caba44ed4485a8a8360f475c76543c2d0c4e4)), closes [#&#8203;32569](https://github.com/aws/aws-cdk/issues/32569) - **lambda:** allow propagating function tags to loggroup ([#&#8203;34556](https://github.com/aws/aws-cdk/issues/34556)) ([f556fd1](https://github.com/aws/aws-cdk/commit/f556fd18f789a8498f32298c07973e8aae4d3798)) - **lambda:** throw `ValidationError`s instead of untyped errors ([#&#8203;34577](https://github.com/aws/aws-cdk/issues/34577)) ([6ccdd81](https://github.com/aws/aws-cdk/commit/6ccdd81b2601ea54cf83e6601208bc21c03944e4)), closes [#&#8203;32569](https://github.com/aws/aws-cdk/issues/32569) - **region-info:** throw `ValidationError` instead of untyped Errors ([#&#8203;33384](https://github.com/aws/aws-cdk/issues/33384)) ([303daf2](https://github.com/aws/aws-cdk/commit/303daf28d893ffa7829431b130299cc8efbd6f49)), closes [#&#8203;32569](https://github.com/aws/aws-cdk/issues/32569) - **s3:** add `grantReplicationPermission` for IAM Role permissions ([#&#8203;34138](https://github.com/aws/aws-cdk/issues/34138)) ([bfa6490](https://github.com/aws/aws-cdk/commit/bfa649073d6753d36fc46ba66f611308ad2b6029)), closes [#&#8203;34119](https://github.com/aws/aws-cdk/issues/34119) - **secretsmanager:** throw `ValidationError`s instead of untyped errors ([#&#8203;34580](https://github.com/aws/aws-cdk/issues/34580)) ([4d591ef](https://github.com/aws/aws-cdk/commit/4d591efd7c6c14666a351edf5aa784b57140d9dc)), closes [#&#8203;32569](https://github.com/aws/aws-cdk/issues/32569) - **servicecatalog:** throw `ValidationError`s instead of untyped errors ([#&#8203;34581](https://github.com/aws/aws-cdk/issues/34581)) ([3895d76](https://github.com/aws/aws-cdk/commit/3895d764e790ac7b4f09ccf5051a941d3cd22278)), closes [#&#8203;32569](https://github.com/aws/aws-cdk/issues/32569) - **sns-subscriptions:** support Amazon Data Firehose subscription ([#&#8203;33811](https://github.com/aws/aws-cdk/issues/33811)) ([632179c](https://github.com/aws/aws-cdk/commit/632179c629b0a03fd0a42fda98b8bd04a5a00112)), closes [#&#8203;14391](https://github.com/aws/aws-cdk/issues/14391) - **stepfunctions:** add grant API for RedriveExecution ([#&#8203;34554](https://github.com/aws/aws-cdk/issues/34554)) ([e03939d](https://github.com/aws/aws-cdk/commit/e03939d0091bfb24923619161948aad67524315e)), closes [#&#8203;33578](https://github.com/aws/aws-cdk/issues/33578) ##### Bug Fixes - **ec2:** validate throughput property on EC2 instance block devices ([#&#8203;34571](https://github.com/aws/aws-cdk/issues/34571)) ([b31580a](https://github.com/aws/aws-cdk/commit/b31580a202aea30b8657988daaa232283053e856)), closes [#&#8203;34033](https://github.com/aws/aws-cdk/issues/34033) - **elasticloadbalancingv2:** fix incorrect max for minimumCapacityUnit ([#&#8203;34586](https://github.com/aws/aws-cdk/issues/34586)) ([8f19b26](https://github.com/aws/aws-cdk/commit/8f19b2646a4085b436f662a79236a17c41fa1162)), closes [#&#8203;34582](https://github.com/aws/aws-cdk/issues/34582) *** #### Alpha modules (2.200.0-alpha.0) ##### Features - **msk:** support Kafka 4.0 ([#&#8203;34501](https://github.com/aws/aws-cdk/issues/34501)) ([aa40e38](https://github.com/aws/aws-cdk/commit/aa40e382ddd585f027febcc994a8e32491bf37c1)) ### [`v2.199.0`](https://github.com/aws/aws-cdk/releases/tag/v2.199.0) [Compare Source](https://github.com/aws/aws-cdk/compare/v2.198.0...v2.199.0) ##### ⚠ BREAKING CHANGES TO EXPERIMENTAL FEATURES - **cloudformation:** Some L1 resources experienced breaking changes due to updated CloudFormation resources. Please check the notes for each specific module for more information. - **vpc-lattice**: the `name` and `resourceConfigurationType` property in `CfnResourceConfigurationProps` has changed from optional to required. Also, the `name`, `subnetIds` and `vpcIdentifier` properties in `CfnResourceGatewayProps` have changed from optional to mandatory. ##### Features - **appconfig:** deletion protection check for configuration profile ([#&#8203;34418](https://github.com/aws/aws-cdk/issues/34418)) ([ce88c76](https://github.com/aws/aws-cdk/commit/ce88c7616188183059640f9e16fedc2e256e0b40)) - **cloudformation:** update L1 CloudFormation resource definitions ([#&#8203;34555](https://github.com/aws/aws-cdk/issues/34555)) ([64662b2](https://github.com/aws/aws-cdk/commit/64662b2225dce18ee2da0eb46331a3a0155ecfb5)) - **ecs-patterns:** add minHealthyPercent and maxHealthyPercent props to NetworkMultipleTargetGroupsFargateService ([#&#8203;34516](https://github.com/aws/aws-cdk/issues/34516)) ([a434aed](https://github.com/aws/aws-cdk/commit/a434aed1c9edc1b427a891cf70cc26f1657600d6)), closes [#&#8203;34368](https://github.com/aws/aws-cdk/issues/34368) - **eks:** `Addon` support configurationValues ([#&#8203;34061](https://github.com/aws/aws-cdk/issues/34061)) ([b420033](https://github.com/aws/aws-cdk/commit/b42003344d75bbdb2df71e7da52f9af5e956f64b)), closes [#&#8203;34001](https://github.com/aws/aws-cdk/issues/34001) - **events-targets:** enable opt-in to use an IAM role for SnsTopic target ([#&#8203;34259](https://github.com/aws/aws-cdk/issues/34259)) ([a3a0cf0](https://github.com/aws/aws-cdk/commit/a3a0cf0dc2ea2ecfc077af3f1939117623baa559)) - **stepfunctions-tasks:** bedrock createModelCustomizationJob integration ([#&#8203;31913](https://github.com/aws/aws-cdk/issues/31913)) ([0c653d3](https://github.com/aws/aws-cdk/commit/0c653d3a1d29324025a0ab451e72e4ca3f048ca3)), closes [#&#8203;29042](https://github.com/aws/aws-cdk/issues/29042) ##### Bug Fixes - **elasticloadbalancingv2:** add validation on application listeners for certificates on HTTP protocol ([#&#8203;34233](https://github.com/aws/aws-cdk/issues/34233)) ([ca065bb](https://github.com/aws/aws-cdk/commit/ca065bbd936372098e7d76e4cf8f890f20d4c085)) - **rds:** fix incorrect import/export combination check in AuroraMysqlEngineVersion.of() ([#&#8203;33564](https://github.com/aws/aws-cdk/issues/33564)) ([9e41154](https://github.com/aws/aws-cdk/commit/9e41154c31253932520887748307405a3f38d0e7)), closes [#&#8203;33562](https://github.com/aws/aws-cdk/issues/33562) [#&#8203;33562](https://github.com/aws/aws-cdk/issues/33562) *** #### Alpha modules (2.199.0-alpha.0) ### [`v2.198.0`](https://github.com/aws/aws-cdk/releases/tag/v2.198.0) [Compare Source](https://github.com/aws/aws-cdk/compare/v2.197.0...v2.198.0) ##### Features - update L1 CloudFormation resource definitions ([#&#8203;34528](https://github.com/aws/aws-cdk/issues/34528)) ([92ad68a](https://github.com/aws/aws-cdk/commit/92ad68a4acae7786ee09734c9201e17c697544d1)) ##### Bug Fixes - synthesis fails if `tree.json` exceeds 512MB ([#&#8203;34478](https://github.com/aws/aws-cdk/issues/34478)) ([ff2f4af](https://github.com/aws/aws-cdk/commit/ff2f4af6302209d559c63124c37d4e761d6e4d80)) - **aws-ecs-patterns:** add missing redirectHTTP dependency on default ALB listener ([7b9a07b](https://github.com/aws/aws-cdk/commit/7b9a07baa21f77c93073820782a63162c828c2e9)) - **ecs-patterns:** add missing redirectHTTP dependency on main listener in ApplicationLoadBalancedFargateService ([#&#8203;34510](https://github.com/aws/aws-cdk/issues/34510)) ([8e4ca14](https://github.com/aws/aws-cdk/commit/8e4ca1449196394101f1c4cb01f3767307df2b56)), closes [#&#8203;34235](https://github.com/aws/aws-cdk/issues/34235) [/github.com/aws/aws-cdk/blob/2bdc07e45f836a710bc049d43a2462806af1c75d/packages/aws-cdk-lib/aws-ecs-patterns/lib/base/application-load-balanced-service-base.ts#L508](https://github.com/aws//github.com/aws/aws-cdk/blob/2bdc07e45f836a710bc049d43a2462806af1c75d/packages/aws-cdk-lib/aws-ecs-patterns/lib/base/application-load-balanced-service-base.ts/issues/L508) - **route53:** avoid setting unnecessary properties for Recovery Control type Route53 health check ([#&#8203;34272](https://github.com/aws/aws-cdk/issues/34272)) ([6bc01c9](https://github.com/aws/aws-cdk/commit/6bc01c9d449f93c40fd90e34fcb5a0014b4e5841)), closes [#&#8203;34262](https://github.com/aws/aws-cdk/issues/34262) - **ses-actions:** condition should use SourceAccount ([#&#8203;34081](https://github.com/aws/aws-cdk/issues/34081)) ([f68b947](https://github.com/aws/aws-cdk/commit/f68b9479e6fdfec0447b2760ae5a97543e2c673d)), closes [#&#8203;29811](https://github.com/aws/aws-cdk/issues/29811) [#&#8203;30143](https://github.com/aws/aws-cdk/issues/30143) [#&#8203;29833](https://github.com/aws/aws-cdk/issues/29833) [#&#8203;30375](https://github.com/aws/aws-cdk/issues/30375) *** #### Alpha modules (2.198.0-alpha.0) ##### ⚠ BREAKING CHANGES TO EXPERIMENTAL FEATURES - **amplify:** A compute role is created when `platform` is `Platform.WEB_COMPUTE` or `Platform.WEB_DYNAMIC`. ##### Features - **amplify:** add compute role support for Amplify app ([#&#8203;33962](https://github.com/aws/aws-cdk/issues/33962)) ([7490b92](https://github.com/aws/aws-cdk/commit/7490b921aa2c464e32ad27064fa4b84571d5ba1a)), closes [#&#8203;33882](https://github.com/aws/aws-cdk/issues/33882) - **ec2:** add i7i instance class ([#&#8203;34453](https://github.com/aws/aws-cdk/issues/34453)) ([3fe8ab4](https://github.com/aws/aws-cdk/commit/3fe8ab4bb100e23042f3d55d4a52bfc8cdbf495a)) ### [`v2.197.0`](https://github.com/aws/aws-cdk/releases/tag/v2.197.0) [Compare Source](https://github.com/aws/aws-cdk/compare/v2.196.1...v2.197.0) ##### Features - update L1 CloudFormation resource definitions ([#&#8203;34497](https://github.com/aws/aws-cdk/issues/34497)) ([6b7cdcf](https://github.com/aws/aws-cdk/commit/6b7cdcfc683b81523863d6610c1d5828fb75715e)) - **cloudwatch:** anomaly detection alarms ([#&#8203;31232](https://github.com/aws/aws-cdk/issues/31232)) ([e2aa338](https://github.com/aws/aws-cdk/commit/e2aa338a744ee367c23f5579dee974fac3210d19)), closes [#&#8203;10540](https://github.com/aws/aws-cdk/issues/10540) [#&#8203;10540](https://github.com/aws/aws-cdk/issues/10540) - **custom-resource:** update default node runtime to node22 in custom resources for commercial, china and gov regions ([#&#8203;34319](https://github.com/aws/aws-cdk/issues/34319)) ([eb5e688](https://github.com/aws/aws-cdk/commit/eb5e688ebb6a72c2f106da73ecedb86749f159fa)) ##### Bug Fixes - **core:** `platform` is ignored during asset bundling ([#&#8203;33865](https://github.com/aws/aws-cdk/issues/33865)) ([91bec88](https://github.com/aws/aws-cdk/commit/91bec884da06d44b000e839121d5e2d8c5171daf)), closes [#&#8203;30239](https://github.com/aws/aws-cdk/issues/30239) - **lambda-nodejs:** instantiating `NodejsFunction` without the `entry` property fails ([#&#8203;34498](https://github.com/aws/aws-cdk/issues/34498)) ([36ce84d](https://github.com/aws/aws-cdk/commit/36ce84de93acdcdacf68f42720c5f12a5b8b2e9f)) *** #### Alpha modules (2.197.0-alpha.0) ### [`v2.196.1`](https://github.com/aws/aws-cdk/releases/tag/v2.196.1) [Compare Source](https://github.com/aws/aws-cdk/compare/v2.196.0...v2.196.1) ##### Bug Fixes - **lambda-nodejs:** instantiating `NodejsFunction` without the `entry` property fails ([#&#8203;34498](https://github.com/aws/aws-cdk/issues/34498)) ([27e0f3a](https://github.com/aws/aws-cdk/commit/27e0f3a1d525512db53fc99432597d8e091ab9d0)) *** #### Alpha modules (2.196.1-alpha.0) ### [`v2.196.0`](https://github.com/aws/aws-cdk/releases/tag/v2.196.0) [Compare Source](https://github.com/aws/aws-cdk/compare/v2.195.0...v2.196.0) ##### ⚠ BREAKING CHANGES TO EXPERIMENTAL FEATURES - **cloudformation:** Some L1 resources experienced breaking changes due to updated CloudFormation resources. Please check the notes for each specific module for more information. - **Logs**: The type of property `DeliveryDestinationPolicy` of resource `AWS::Logs::DeliveryDestination` changed to be `DestinationPolicy` instead of JSON. ##### Features - **apigatewayv2:** add dualstack support to domain name ([#&#8203;34111](https://github.com/aws/aws-cdk/issues/34111)) ([8aa2f81](https://github.com/aws/aws-cdk/commit/8aa2f8118d31c78b56d9aeb95b5de36dc57a9049)), closes [#&#8203;34054](https://github.com/aws/aws-cdk/issues/34054) [/docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-apigatewayv2-domainname-domainnameconfiguration.html#cfn-apigatewayv2](https://github.com/aws//docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-apigatewayv2-domainname-domainnameconfiguration.html/issues/cfn-apigatewayv2) - **cloudformation:** update L1 CloudFormation resource definitions ([#&#8203;34425](https://github.com/aws/aws-cdk/issues/34425)) ([6460ffe](https://github.com/aws/aws-cdk/commit/6460ffeca6bae09d40a24134041839401165e1f2)) - **ecs:** throw `ValidationError`s instead of untyped errors ([#&#8203;34427](https://github.com/aws/aws-cdk/issues/34427)) ([5cfea39](https://github.com/aws/aws-cdk/commit/5cfea3975ec0d52051bfc1aeccf16bc6798984fd)), closes [#&#8203;32569](https://github.com/aws/aws-cdk/issues/32569) - **eks:** throw `ValidationError`s instead of untyped errors ([#&#8203;34428](https://github.com/aws/aws-cdk/issues/34428)) ([2e7c55b](https://github.com/aws/aws-cdk/commit/2e7c55b9a56b895da63cab5f981d86379c8e5cf5)), closes [#&#8203;32569](https://github.com/aws/aws-cdk/issues/32569) - **elasticloadbalancingv2:** add support for multi-value headers in Lambda target groups ([#&#8203;34298](https://github.com/aws/aws-cdk/issues/34298)) ([c8b98e7](https://github.com/aws/aws-cdk/commit/c8b98e77aaad308613730f9261be22b7085d1e19)) - **elasticsearch:** throw `ValidationError`s instead of untyped errors ([#&#8203;34429](https://github.com/aws/aws-cdk/issues/34429)) ([13d9645](https://github.com/aws/aws-cdk/commit/13d9645dfa67311ea22c03b18cd35f2f34941594)), closes [#&#8203;32569](https://github.com/aws/aws-cdk/issues/32569) - **events-targets:** throw `ValidationError`s instead of untyped errors ([#&#8203;34430](https://github.com/aws/aws-cdk/issues/34430)) ([e493cc8](https://github.com/aws/aws-cdk/commit/e493cc80ea6c0be6df1371de44d2965d83121a81)), closes [#&#8203;32569](https://github.com/aws/aws-cdk/issues/32569) - **globalaccelerator:** throw `ValidationError`s instead of untyped errors ([#&#8203;34426](https://github.com/aws/aws-cdk/issues/34426)) ([5ee092a](https://github.com/aws/aws-cdk/commit/5ee092a5c3abfc25c5d9c02cd7086bbcaab01556)), closes [#&#8203;32569](https://github.com/aws/aws-cdk/issues/32569) - **kms:** throw `ValidationError`s instead of untyped errors ([#&#8203;34431](https://github.com/aws/aws-cdk/issues/34431)) ([10756c1](https://github.com/aws/aws-cdk/commit/10756c148634e9ea470e6e397642b90ff31a5b0e)), closes [#&#8203;32569](https://github.com/aws/aws-cdk/issues/32569) - **opensearchservice:** throw `ValidationError`s instead of untyped errors ([#&#8203;34432](https://github.com/aws/aws-cdk/issues/34432)) ([5509923](https://github.com/aws/aws-cdk/commit/550992360bd3c57c134d1003836a97b242e011e5)), closes [#&#8203;32569](https://github.com/aws/aws-cdk/issues/32569) - **rds:** add Aurora MySQL versions 2.11.6, 2.12.5, 3.04.4 ([#&#8203;34443](https://github.com/aws/aws-cdk/issues/34443)) ([d03e856](https://github.com/aws/aws-cdk/commit/d03e856421f8924caeaffe2154073e647de797e9)) - **region-info:** update Metadata regions ([#&#8203;34414](https://github.com/aws/aws-cdk/issues/34414)) ([957d8e3](https://github.com/aws/aws-cdk/commit/957d8e36ba0f2ce0a75df21dc5777b25f80bc5b3)) - **route53:** add cidrRoutingConfig property ([#&#8203;34301](https://github.com/aws/aws-cdk/issues/34301)) ([5cd82f5](https://github.com/aws/aws-cdk/commit/5cd82f5bad90cd8b8201eb7147728f49b3be5111)) - **s3-tables:** add KMS support for TableBucket L2 construct ([#&#8203;34281](https://github.com/aws/aws-cdk/issues/34281)) ([ac0e4ca](https://github.com/aws/aws-cdk/commit/ac0e4ca7a4173a413fab6dd045364aa8e8e620b3)) - **scheduler:** throw `ValidationError`s instead of untyped errors ([#&#8203;34434](https://github.com/aws/aws-cdk/issues/34434)) ([bc7c4e8](https://github.com/aws/aws-cdk/commit/bc7c4e808bd626dd6349fec1c6a90b45406984dc)), closes [#&#8203;32569](https://github.com/aws/aws-cdk/issues/32569) - **servicediscovery:** throw `ValidationError`s instead of untyped errors ([#&#8203;34435](https://github.com/aws/aws-cdk/issues/34435)) ([28048b3](https://github.com/aws/aws-cdk/commit/28048b3fc47314d3d1d9aa4ab891153f47a0472e)), closes [#&#8203;32569](https://github.com/aws/aws-cdk/issues/32569) - **ses:** https policy for custom tracking domain ([#&#8203;34314](https://github.com/aws/aws-cdk/issues/34314)) ([60d7aea](https://github.com/aws/aws-cdk/commit/60d7aea2b9f5cea2224acda8e4ecab5be87180fe)) - **sns-subscriptions:** throw `ValidationError`s instead of untyped errors ([#&#8203;34436](https://github.com/aws/aws-cdk/issues/34436)) ([98e352d](https://github.com/aws/aws-cdk/commit/98e352d600b6fb9833888d73ca61a2c54fb76e3f)), closes [#&#8203;32569](https://github.com/aws/aws-cdk/issues/32569) - **stepfunctions:** `ResultWriter` support JSONPath/JSONata bucket ([#&#8203;33793](https://github.com/aws/aws-cdk/issues/33793)) ([8a5aecb](https://github.com/aws/aws-cdk/commit/8a5aecb2d138cd04d0d2dcc5e1001c4d6ef46152)), closes [#&#8203;32687](https://github.com/aws/aws-cdk/issues/32687) - **stepfunctions:** add parameters to parallel state ([#&#8203;34131](https://github.com/aws/aws-cdk/issues/34131)) ([0f71ee1](https://github.com/aws/aws-cdk/commit/0f71ee19e1e1ff1832d5b80a4f13505ddf7e5bc8)), closes [#&#8203;32791](https://github.com/aws/aws-cdk/issues/32791) - property injectors and make all L2 Constructors injectable ([#&#8203;34419](https://github.com/aws/aws-cdk/issues/34419)) ([4dc523f](https://github.com/aws/aws-cdk/commit/4dc523f9254c0574fc410cc2ca9462288b417bc8)) - **stepfunctions:** throw `ValidationError`s instead of untyped errors ([#&#8203;34438](https://github.com/aws/aws-cdk/issues/34438)) ([e828389](https://github.com/aws/aws-cdk/commit/e828389dc169d2c50c259ad3e141a0ca54504ecf)), closes [#&#8203;32569](https://github.com/aws/aws-cdk/issues/32569) - support healthCheckGracePeriod in QueueProcessingFargateService ([#&#8203;34231](https://github.com/aws/aws-cdk/issues/34231)) ([ae0c7b7](https://github.com/aws/aws-cdk/commit/ae0c7b717994a6bba79ddf0a82984b48fba937cc)), closes [#&#8203;34220](https://github.com/aws/aws-cdk/issues/34220) - **synthetics:** add 5.0 and 5.1 python canary runtimes ([#&#8203;34254](https://github.com/aws/aws-cdk/issues/34254)) ([639b883](https://github.com/aws/aws-cdk/commit/639b883e8af190e94329c8bac74e05757c318d88)), closes [#&#8203;34252](https://github.com/aws/aws-cdk/issues/34252) ##### Bug Fixes - **cloudwatch-actions:** lambda permission use unique prefix id ([#&#8203;34269](https://github.com/aws/aws-cdk/issues/34269)) ([9ddc00a](https://github.com/aws/aws-cdk/commit/9ddc00a93b4443f2c2c1657f03b120d5ba0bec54)), closes [#&#8203;33958](https://github.com/aws/aws-cdk/issues/33958) - **eks:** eks cluster name exceeding the limit of 100 characters ([#&#8203;34449](https://github.com/aws/aws-cdk/issues/34449)) ([5197882](https://github.com/aws/aws-cdk/commit/51978822a7a0e1fcff3461de0eb62533575dfafd)) - **s3:** updating blockPublicAccess to enable default true settings (under feature flag) ([#&#8203;33702](https://github.com/aws/aws-cdk/issues/33702)) ([904e3a3](https://github.com/aws/aws-cdk/commit/904e3a39f10c9e993701c79999bdd0ff90c1ce5f)), closes [#&#8203;32811](https://github.com/aws/aws-cdk/issues/32811) [40aws-cdk-testing/framework-integ/test/aws-s3/test/integ.bucket-block-access.ts#L1-L42](https://github.com/40aws-cdk-testing/framework-integ/test/aws-s3/test/integ.bucket-block-access.ts/issues/L1-L42) *** #### Alpha modules (2.196.0-alpha.0) ##### Features - **msk:** support Kafka versions 3.9.x and 3.9.x Kraft ([#&#8203;34213](https://github.com/aws/aws-cdk/issues/34213)) ([a1226db](https://github.com/aws/aws-cdk/commit/a1226db3164f885ab1bbf13a18697831cfde74d0)) - **pipes-targets:** add SNS ([#&#8203;34159](https://github.com/aws/aws-cdk/issues/34159)) ([2f846b3](https://github.com/aws/aws-cdk/commit/2f846b395cc5061363bd6def946a04740ac0139b)) - **s3tables:** server-side encryption by customer managed KMS key ([#&#8203;34229](https://github.com/aws/aws-cdk/issues/34229)) ([488f0db](https://github.com/aws/aws-cdk/commit/488f0db714c20fcaf5dbdf682277a70c6a938d3f)) ##### Bug Fixes - **ec2:** dual-stack vpc without private subnets creates EgressOnlyInternetGateway (under feature flag) ([#&#8203;34437](https://github.com/aws/aws-cdk/issues/34437)) ([35e818b](https://github.com/aws/aws-cdk/commit/35e818b4f86638b5fe6074705511d1eee16266d2)), closes [#&#8203;30981](https://github.com/aws/aws-cdk/issues/30981) - **ec2-alpha:** fix resource id references and tags for migration behind feature flag ([#&#8203;34377](https://github.com/aws/aws-cdk/issues/34377)) ([aa73534](https://github.com/aws/aws-cdk/commit/aa735341a8e95224a14241b5e1c5c5ba71de5022)) ### [`v2.195.0`](https://github.com/aws/aws-cdk/releases/tag/v2.195.0) [Compare Source](https://github.com/aws/aws-cdk/compare/v2.194.0...v2.195.0) ##### Features - publish 'app-staging-synthesizer-alpha' for Go ([#&#8203;34364](https://github.com/aws/aws-cdk/issues/34364)) ([4e3df41](https://github.com/aws/aws-cdk/commit/4e3df41b308b277a568efa77e965cea958a63df9)) - update L1 CloudFormation resource definitions ([#&#8203;34357](https://github.com/aws/aws-cdk/issues/34357)) ([24a40a9](https://github.com/aws/aws-cdk/commit/24a40a9b8e56e6ce3c37036b3db4d5039c882bba)) - **apigateway:** dualstack REST API ([#&#8203;34114](https://github.com/aws/aws-cdk/issues/34114)) ([efdcb9d](https://github.com/aws/aws-cdk/commit/efdcb9ddfebc9c3333745a40fa90eb99b410316d)) ##### Bug Fixes - **codepipeline:** allow both `pullRequestFilter` and `pushFilter` ([#&#8203;34267](https://github.com/aws/aws-cdk/issues/34267)) ([1cac5a0](https://github.com/aws/aws-cdk/commit/1cac5a080c78182268128b9b7ad3501179a7e3e1)), closes [#&#8203;34253](https://github.com/aws/aws-cdk/issues/34253) - **route53-targets:** beanstalk allow specifying `hostedZoneId` to support token endpoint with default value derived from stack region or endpointUrl ([#&#8203;34122](https://github.com/aws/aws-cdk/issues/34122)) ([9e52752](https://github.com/aws/aws-cdk/commit/9e527522c5ea6967d3b51ade75790ad98982dd83)), closes [#&#8203;31843](https://github.com/aws/aws-cdk/issues/31843) - **s3-notifications:** add a key policy to trust S3 for notifications to an SNS topic encrypted with a KMS key (under feature flag) ([#&#8203;33858](https://github.com/aws/aws-cdk/issues/33858)) ([1e87861](https://github.com/aws/aws-cdk/commit/1e87861b3d0631fd0d24aedd4328d1eb67beb26c)), closes [#&#8203;16271](https://github.com/aws/aws-cdk/issues/16271) ##### Reverts - "chore: make all L2 Constructs property injectable during release" ([#&#8203;34371](https://github.com/aws/aws-cdk/issues/34371)) ([1e722ad](https://github.com/aws/aws-cdk/commit/1e722ad198952688ba33e4f698456d05dd90d524)), closes [aws/aws-cdk#34328](https://github.com/aws/aws-cdk/issues/34328) - "feat: property injection for 122 constructs" ([#&#8203;34370](https://github.com/aws/aws-cdk/issues/34370)) ([2594f3c](https://github.com/aws/aws-cdk/commit/2594f3cab68e130d0b9f62ae622c9bc7b92cd14e)), closes [aws/aws-cdk#33887](https://github.com/aws/aws-cdk/issues/33887) *** #### Alpha modules (2.195.0-alpha.0) ##### ⚠ BREAKING CHANGES TO EXPERIMENTAL FEATURES - **iot:** By default, `deviceDertificateAgeCheck` is automatically enabled. ##### Features - **iot:** device certificate age check audit configuration ([#&#8203;33816](https://github.com/aws/aws-cdk/issues/33816)) ([9ad383d](https://github.com/aws/aws-cdk/commit/9ad383d5300c5d5f5a9d2552fbd541436570a404)) - **location:** support L2 API Key Construct ([#&#8203;32733](https://github.com/aws/aws-cdk/issues/32733)) ([d867878](https://github.com/aws/aws-cdk/commit/d86787889dd49dce220324d141bf48e1bfa8fc3b)), closes [#&#8203;30684](https://github.com/aws/aws-cdk/issues/30684) ##### Bug Fixes - **amplify-alpha:** example code for adding a custom rule is wrong ([#&#8203;34353](https://github.com/aws/aws-cdk/issues/34353)) ([8ab2606](https://github.com/aws/aws-cdk/commit/8ab2606b7b8de068a70dfaf02c5d96651ef5d286)), closes [#&#8203;34351](https://github.com/aws/aws-cdk/issues/34351) ### [`v2.194.0`](https://github.com/aws/aws-cdk/releases/tag/v2.194.0) [Compare Source](https://github.com/aws/aws-cdk/compare/v2.193.0...v2.194.0) ##### Features - update L1 CloudFormation resource definitions ([#&#8203;34278](https://github.com/aws/aws-cdk/issues/34278)) ([e37faed](https://github.com/aws/aws-cdk/commit/e37faed95deb25be05826c2e1f2781b0e51ca26e)) - **events:** throw `ValidationErrors` instead of untyped Errors ([#&#8203;34316](https://github.com/aws/aws-cdk/issues/34316)) ([06b463f](https://github.com/aws/aws-cdk/commit/06b463fd5a92aab9ffc9d016d85b977f64379550)), closes [#&#8203;32569](https://github.com/aws/aws-cdk/issues/32569) *** #### Alpha modules (2.194.0-alpha.0) ### [`v2.193.0`](https://github.com/aws/aws-cdk/releases/tag/v2.193.0) [Compare Source](https://github.com/aws/aws-cdk/compare/v2.192.0...v2.193.0) ##### Features - **appsync:** add support for data source integrations ([#&#8203;34248](https://github.com/aws/aws-cdk/issues/34248)) ([2fac64e](https://github.com/aws/aws-cdk/commit/2fac64eda44710f6a70661555d0ab84bb76a279c)), closes [#&#8203;34264](https://github.com/aws/aws-cdk/issues/34264) - **codepipeline-actions:** add pipeline invoke action support. ([#&#8203;34039](https://github.com/aws/aws-cdk/issues/34039)) ([5488048](https://github.com/aws/aws-cdk/commit/5488048e0aa5b7237087cd36a99b0c118e6ba180)), closes [#&#8203;33818](https://github.com/aws/aws-cdk/issues/33818) - **eks:** pass additional helm chart values to aws-load-balancer-controller ([#&#8203;34077](https://github.com/aws/aws-cdk/issues/34077)) ([6f0605b](https://github.com/aws/aws-cdk/commit/6f0605b5cfb8f4bfe9fa67ef88fb875cb1c589e7)), closes [#&#8203;29707](https://github.com/aws/aws-cdk/issues/29707) [/github.com/kubernetes-sigs/aws-load-balancer-controller/blob/main/helm/aws-load-balancer-controller/values.yaml#L199](https://github.com/aws//github.com/kubernetes-sigs/aws-load-balancer-controller/blob/main/helm/aws-load-balancer-controller/values.yaml/issues/L199) - **kinesis:** throw `ValidationErrors` instead of untyped Errors ([#&#8203;34239](https://github.com/aws/aws-cdk/issues/34239)) ([7f378b6](https://github.com/aws/aws-cdk/commit/7f378b6ee87a9ad89772d3cdd77c89d6a9ab8209)), closes [#&#8203;32569](https://github.com/aws/aws-cdk/issues/32569) ##### Bug Fixes - **efs:** support imported subnet ([#&#8203;34041](https://github.com/aws/aws-cdk/issues/34041)) ([20df8fb](https://github.com/aws/aws-cdk/commit/20df8fb9fdc41f65ce80e45bdb9aa8aa1da83fac)), closes [#&#8203;33876](https://github.com/aws/aws-cdk/issues/33876) - **stepfunctions:** containsTaskToken doesn't handle null values ([#&#8203;34295](https://github.com/aws/aws-cdk/issues/34295)) ([37a66da](https://github.com/aws/aws-cdk/commit/37a66da60a4fa9626780e63abbe1d3fabaf93258)), closes [#&#8203;34293](https://github.com/aws/aws-cdk/issues/34293) *** #### Alpha modules (2.193.0-alpha.0) ##### Features - **pipes-targets-alpha:** support Amazon Data Firehose target ([#&#8203;33860](https://github.com/aws/aws-cdk/issues/33860)) ([ebf1ea2](https://github.com/aws/aws-cdk/commit/ebf1ea2a57ec7876fffbe16eddac6b409ae79074)) ### [`v2.192.0`](https://github.com/aws/aws-cdk/releases/tag/v2.192.0) [Compare Source](https://github.com/aws/aws-cdk/compare/v2.191.0...v2.192.0) ##### Features - **apigateway:** add `mode` property for `SpecRestApi` ([#&#8203;34198](https://github.com/aws/aws-cdk/issues/34198)) ([feadd8c](https://github.com/aws/aws-cdk/commit/feadd8c79b9857b65453bea5e8519cdfa218ed46)) - **events:** `Rule` support role ([#&#8203;33779](https://github.com/aws/aws-cdk/issues/33779)) ([9e4c9a9](https://github.com/aws/aws-cdk/commit/9e4c9a9f886354edd0c01b94a8cdae205fbe8f5a)), closes [#&#8203;33722](https://github.com/aws/aws-cdk/issues/33722) - **iam:** support `Role.fromLookup()` method ([#&#8203;33603](https://github.com/aws/aws-cdk/issues/33603)) ([9e3cbf6](https://github.com/aws/aws-cdk/commit/9e3cbf65f71ddcf98c79f9a20a7e82ae8bf4d7da)), closes [#&#8203;33602](https://github.com/aws/aws-cdk/issues/33602) - **rds:** add support for SQL Server engine versions 15.00.4430.1.v1 and 16.00.4185.3.v1 ([#&#8203;34175](https://github.com/aws/aws-cdk/issues/34175)) ([63f09f1](https://github.com/aws/aws-cdk/commit/63f09f1c713f08a814bfa0c378f1c3c29f5b5669)) - **ses:** add fromEmailIdentityArn ([#&#8203;33984](https://github.com/aws/aws-cdk/issues/33984)) ([72ee4a7](https://github.com/aws/aws-cdk/commit/72ee4a78829b3c35d0adf488f0eef86fc06e9a8f)), closes [#&#8203;33981](https://github.com/aws/aws-cdk/issues/33981) ##### Bug Fixes - **eks:** update aws-node-termination-handler chart version ([#&#8203;34218](https://github.com/aws/aws-cdk/issues/34218)) ([3380742](https://github.com/aws/aws-cdk/commit/3380742ce6aa9ec929cbe842aa27855f6cc93b0f)), closes [/github.com/aws/aws-cdk/blob/58c2631de585b300cf8573ab423dcc75791cc3d2/packages/aws-cdk-lib/aws-eks/lib/cluster.ts#L1184-L1188](https://github.com/aws//github.com/aws/aws-cdk/blob/58c2631de585b300cf8573ab423dcc75791cc3d2/packages/aws-cdk-lib/aws-eks/lib/cluster.ts/issues/L1184-L1188) *** #### Alpha modules (2.192.0-alpha.0) ##### Features - **applicationsignals-alpha:** introduce Application Signals L2 constructs ([#&#8203;32931](https://github.com/aws/aws-cdk/issues/32931)) ([e7a6e14](https://github.com/aws/aws-cdk/commit/e7a6e14d7c3ddfbff8b1fd3f583abeefeed1258a)) ### [`v2.191.0`](https://github.com/aws/aws-cdk/releases/tag/v2.191.0) [Compare Source](https://github.com/aws/aws-cdk/compare/v2.190.0...v2.191.0) ##### ⚠ BREAKING CHANGES TO EXPERIMENTAL FEATURES - **neptune-alpha**: `Id` attribute is being removed from the AWS::Neptune::DBClusterParameterGroup and AWS::Neptune::DBParameterGroup resources ##### ⚠ BREAKING CHANGES TO L1 constructs - **cloudformation:** Some L1 resources experienced breaking changes due to updated CloudFormation resources. Please check the notes for each specific module for more information. - **aws-launchwizard**: `specifications` prop moved from required to optional in CfnDeployment - **aws-ses**: `attribute` attribute moved from required to optional in RuleBooleanToEvaluateProperty ##### Features - **cloudformation:** update L1 CloudFormation resource definitions ([#&#8203;34207](https://github.com/aws/aws-cdk/issues/34207)) ([adfa416](https://github.com/aws/aws-cdk/commit/adfa416fba36a5cf25a6dcb1dbdbec18029d9860)) - update L1 CloudFormation resource definitions ([e3483c2](https://github.com/aws/aws-cdk/commit/e3483c2dc947d41059b127db77a6382ad1ed6f62)) - **codebuild:** add additional build images for lambda ([#&#8203;34197](https://github.com/aws/aws-cdk/issues/34197)) ([5a265d1](https://github.com/aws/aws-cdk/commit/5a265d1f6f3ebfcade0cf2807b720a35845a0d60)) - **rds:** add Aurora MySQL versions 2.12.4, 3.08.2 ([#&#8203;34045](https://github.com/aws/aws-cdk/issues/34045)) ([1dd993e](https://github.com/aws/aws-cdk/commit/1dd993e51dc90b13cec18809173275944075afdb)) *** #### Alpha modules (2.191.0-alpha.0) ##### Features - **location:** throw ValidationError instead of untyped errors ([#&#8203;34174](https://github.com/aws/aws-cdk/issues/34174)) ([2ecf14a](https://github.com/aws/aws-cdk/commit/2ecf14a0c3e5a988532975536980d81589ea448e)) - **msk:** throw ValidationError instead of untyped errors ([#&#8203;34214](https://github.com/aws/aws-cdk/issues/34214)) ([02cb5a4](https://github.com/aws/aws-cdk/commit/02cb5a4284e9aad2f8cc4fc8fcb2c1aebe8f92be)) ### [`v2.190.0`](https://github.com/aws/aws-cdk/releases/tag/v2.190.0) [Compare Source](https://github.com/aws/aws-cdk/compare/v2.189.1...v2.190.0) ##### ⚠ BREAKING CHANGES TO EXPERIMENTAL FEATURES - **cloudformation:** Some L1 resources experienced breaking changes due to updated CloudFormation resources. Please check the notes for each specific module for more information. - **backup**: The `ScheduleStatus` property has been removed from `AWS::Backup::RestoreTestingPlan`. - **eks**: The `DisableSessionTags` and `TargetRoleArn` properties and `ExternalId` attribute have been removed from `AWS::EKS::PodIdentityAssociation`. - **neptune**: The `Id` attribute has been removed from `AWS::Neptune::DBSubnetGroup`. - **rds**: The `CertificateDetails` and `Endpoint` properties have been removed from `AWS::RDS::DBInstance`. - **redshiftserverless**: The `Workgroup.BaseCapacity` attribute has been removed from `AWS::RedshiftServerless::Workgroup`. - **s3-deployment**: The automatic JSON escaping behavior introduced in PR [#&#8203;33698](https://github.com/aws/aws-cdk/pull/33698) is now opt-in via the new `escape` parameter in `Source.jsonData()`. Users who were relying on the automatic JSON escaping for handling special characters in JSON files will need to explicitly enable this behavior by passing `{ escape: true }` as the third parameter. ##### Features - **apigatewayv2:** `HttpStage` access logging ([#&#8203;33977](https://github.com/aws/aws-cdk/issues/33977)) ([d04e40f](https://github.com/aws/aws-cdk/commit/d04e40fd11fc9fa51fe16709edae3d312b99142d)), closes [#&#8203;11100](https://github.com/aws/aws-cdk/issues/11100) - **bedrock:** support Amazon Nova Sonic 1.0 ([#&#8203;34134](https://github.com/aws/aws-cdk/issues/34134)) ([9ffa244](https://github.com/aws/aws-cdk/commit/9ffa244a15f101c71f59ad782841dc430e6b6034)) - **cloudformation:** update L1 CloudFormation resource definitions ([#&#8203;34164](https://github.com/aws/aws-cdk/issues/34164)) ([4c3ed77](https://github.com/aws/aws-cdk/commit/4c3ed77b4ae16157459c490f961545cf59232177)) - **cloudfront:** backfill enum values in cloudfront module ([#&#8203;34075](https://github.com/aws/aws-cdk/issues/34075)) ([d43e829](https://github.com/aws/aws-cdk/commit/d43e829ace151de1a49fa1a9753f9a3663717dbe)) - **cognito-identitypool:** throw ValidationErrors instead of untyped Errors ([#&#8203;34109](https://github.com/aws/aws-cdk/issues/34109)) ([faee209](https://github.com/aws/aws-cdk/commit/faee209d4fd98b024aa15f138d61af61c25d2eb7)) - **elasticloadbalancingv2:** subnet mappings for network load balancer ([#&#8203;33736](https://github.com/aws/aws-cdk/issues/33736)) ([c6905c6](https://github.com/aws/aws-cdk/commit/c6905c64dd20889397719e506b8398046b81aef5)), closes [#&#8203;9696](https://github.com/aws/aws-cdk/issues/9696) - **fsx:** throw `ValidationErrors` instead of untyped Errors ([#&#8203;34120](https://github.com/aws/aws-cdk/issues/34120)) ([271e439](https://github.com/aws/aws-cdk/commit/271e439e1f49ab31e31e3b6fb43508ca8c5606a8)), closes [#&#8203;32569](https://github.com/aws/aws-cdk/issues/32569) - **rds:** new `DatabaseInstance.fromLookup` ([#&#8203;33258](https://github.com/aws/aws-cdk/issues/33258)) ([eb97d2d](https://github.com/aws/aws-cdk/commit/eb97d2d2afd1557bf53c0d36ff6c2eba88e2c48e)) - **s3:** allow specifying a custom IAM Role for bucket replication ([#&#8203;33978](https://github.com/aws/aws-cdk/issues/33978)) ([615f626](https://github.com/aws/aws-cdk/commit/615f626570e86f6a1fe9204495e9291e02703c7f)), closes [#&#8203;33974](https://github.com/aws/aws-cdk/issues/33974) - **ses:** throw ValidationErrors instead of untyped Errors ([#&#8203;34098](https://github.com/aws/aws-cdk/issues/34098)) ([7147e75](https://github.com/aws/aws-cdk/commit/7147e755ae2bd38ea47f943b318bcaf310206e20)) - **stepfunctions:** add support for custom WriterConfig fields for ResultWriter in Distributed Map ([#&#8203;33772](https://github.com/aws/aws-cdk/issues/33772)) and ([#&#8203;33601](https://github.com/aws/aws-cdk/issues/33601)) ([#&#8203;33831](https://github.com/aws/aws-cdk/issues/33831)) ([78af355](https://github.com/aws/aws-cdk/commit/78af355ec9a670985e477e2ea9fb448cef728a91)) ##### Bug Fixes - **cloudfront:** fix validation for unresolved webAclId tokens ([#&#8203;34102](https://github.com/aws/aws-cdk/issues/34102)) ([f2c5f26](https://github.com/aws/aws-cdk/commit/f2c5f26e134ee32aaf2653e217de56289fcf11f1)), closes [#&#8203;34099](https://github.com/aws/aws-cdk/issues/34099) - **core:** implicit Aspect applications do not override custom Aspect applications ([#&#8203;34132](https://github.com/aws/aws-cdk/issues/34132)) ([9a76fdc](https://github.com/aws/aws-cdk/commit/9a76fdceff8dcb53047a49419cdbd712cd26e67c)) - **core:** typo ([#&#8203;34123](https://github.com/aws/aws-cdk/issues/34123)) ([753ed62](https://github.com/aws/aws-cdk/commit/753ed62697c7f1dd9376f09f06eaa1c97c25b4ef)) - **custom-resources:** custom resource config addLogRetentionLifetime parameter typo ([#&#8203;34090](https://github.com/aws/aws-cdk/issues/34090)) ([78be158](https://github.com/aws/aws-cdk/commit/78be1581ddeb79d5a6c746abe32c2aea16424408)), closes [#&#8203;34083](https://github.com/aws/aws-cdk/issues/34083) - **ecs:** `FluentdLogDriver` add `async` replacing deprecated `asyncConnect` ([#&#8203;34059](https://github.com/aws/aws-cdk/issues/34059)) ([c993d34](https://github.com/aws/aws-cdk/commit/c993d344a5005a8b14431706de01478e31c49964)), closes [#&#8203;34055](https://github.com/aws/aws-cdk/issues/34055) - **eks:** integ test faild with InvalidParameterException ([#&#8203;33767](https://github.com/aws/aws-cdk/issues/33767)) ([b19eb69](https://github.com/aws/aws-cdk/commit/b19eb69840206d82e21297bd9af550b9b84208c7)), closes [/github.com/aws/aws-cdk/pull/33673#issuecomment-2721663660](https://github.com/aws//github.com/aws/aws-cdk/pull/33673/issues/issuecomment-2721663660) - **s3-deployment:** optimize memory usage for large files ([#&#8203;34020](https://github.com/aws/aws-cdk/issues/34020)) ([7d82072](https://github.com/aws/aws-cdk/commit/7d820723dc6513f1fa3ef6a7d5050336538a2ab5)), closes [#&#8203;34002](https://github.com/aws/aws-cdk/issues/34002) [#&#8203;22661](https://github.com/aws/aws-cdk/issues/22661) [#&#8203;33698](https://github.com/aws/aws-cdk/issues/33698) [#&#8203;33698](https://github.com/aws/aws-cdk/issues/33698) [#&#8203;33698](https://github.com/aws/aws-cdk/issues/33698) ##### Reverts - **ecs:** add validation checks to memory cpu combinations of FARGATE compatible task definitions ([#&#8203;34155](https://github.com/aws/aws-cdk/issues/34155)) ([c4fd9fd](https://github.com/aws/aws-cdk/commit/c4fd9fd4c3f9ebd0469dba3c9fdf6e875efa3064)), closes [aws/aws-cdk#33608](https://github.com/aws/aws-cdk/issues/33608) *** #### Alpha modules (2.190.0-alpha.0) ##### ⚠ BREAKING CHANGES TO EXPERIMENTAL FEATURES - **ec2-alpha:** The logical ID for the NAT Gateway, defined using the `addNatGateways` method, will be changed, resulting in the NAT Gateway being recreated. Additionally, the domain for the Elastic IP (EIP) will be set to `vpc`, which will also trigger its recreation in the account. ##### Features - **ec2:** enabling features for ipv6 and dualstack support with corresponding unit tests ([#&#8203;33898](https://github.com/aws/aws-cdk/issues/33898)) ([47a65db](https://github.com/aws/aws-cdk/commit/47a65dbf00ce2a866be2546dcca5be818db70824)), closes [#&#8203;3873](https://github.com/aws/aws-cdk/issues/3873) [#&#8203;33493](https://github.com/aws/aws-cdk/issues/33493) [#&#8203;33493](https://github.com/aws/aws-cdk/issues/33493) - **ec2:** throw ValidationErrors instead of untyped Errors ([#&#8203;34127](https://github.com/aws/aws-cdk/issues/34127)) ([93313dd](https://github.com/aws/aws-cdk/commit/93313dded1d719691689c6fb59d7a7a77bb7dade)) - **neptune-alpha:** add engine versions up to v1.4.5.0 ([#&#8203;33989](https://github.com/aws/aws-cdk/issues/33989)) ([07f1d0a](https://github.com/aws/aws-cdk/commit/07f1d0a9d381fb9bceab0f836a2f1eb7977610c7)), closes [#&#8203;33807](https://github.com/aws/aws-cdk/issues/33807) ##### Bug Fixes - **ec2-alpha:** add multiple NATGW to the VPC using addNatGateway method ([#&#8203;34094](https://github.com/aws/aws-cdk/issues/34094)) ([ccd8de7](https://github.com/aws/aws-cdk/commit/ccd8de71c02068e43d36e2445dbb5e51f4aa695b)) - **ec2-alpha:** update default config for Subnet's `assignIpv6AddressOnCreation` ([#&#8203;34116](https://github.com/aws/aws-cdk/issues/34116)) ([dff2798](https://github.com/aws/aws-cdk/commit/dff279800edd9688fa5de04766ae2667472fe861)) ### [`v2.189.1`](https://github.com/aws/aws-cdk/releases/tag/v2.189.1) [Compare Source](https://github.com/aws/aws-cdk/compare/v2.189.0...v2.189.1) ##### Bug Fixes - **core:** implicit Aspect applications do not override custom Aspect applications ([#&#8203;34132](https://github.com/aws/aws-cdk/issues/34132)) ([b7f4bc7](https://github.com/aws/aws-cdk/commit/b7f4bc7aee1d99b70e4d9d3cedea53e910ee37ef)) *** #### Alpha modules (2.189.1-alpha.0) ### [`v2.189.0`](https://github.com/aws/aws-cdk/releases/tag/v2.189.0) [Compare Source](https://github.com/aws/aws-cdk/compare/v2.188.0...v2.189.0) ##### Features - **apigatewayv2:** dualstack HTTP and WebSocket API ([#&#8203;34054](https://github.com/aws/aws-cdk/issues/34054)) ([eec900e](https://github.com/aws/aws-cdk/commit/eec900e90f38f34f896b22cf36cb225fc9c13cc8)) - update L1 CloudFormation resource definitions ([#&#8203;34064](https://github.com/aws/aws-cdk/issues/34064)) ([9cb2602](https://github.com/aws/aws-cdk/commit/9cb260266e92f45e40a19667e29ccf2decb3d2b8)) - **bedrock:** support Amazon Nova Reel 1.1 ([#&#8203;34070](https://github.com/aws/aws-cdk/issues/34070)) ([3da0c4d](https://github.com/aws/aws-cdk/commit/3da0c4d267dbb693ffc01b9fae69cebcb180cdec)) - support L2 constructs for Amazon S3 Tables ([#&#8203;33599](https://github.com/aws/aws-cdk/issues/33599)) ([2e95252](https://github.com/aws/aws-cdk/commit/2e95252fecbb1fec9874fd5af4b4bd6449d50471)) - **pipelines:** add `V2` pipeline type support in L3 construct ([#&#8203;34005](https://github.com/aws/aws-cdk/issues/34005)) ([994e952](https://github.com/aws/aws-cdk/commit/994e95289b589596179553a5b9d7201155bd9ed1)), closes [#&#8203;33995](https://github.com/aws/aws-cdk/issues/33995) ##### Bug Fixes - **codepipeline:** replace account root principal with pipeline role in trust policy for cross-account actions (under feature flag) ([#&#8203;34074](https://github.com/aws/aws-cdk/issues/34074)) ([2d901f4](https://github.com/aws/aws-cdk/commit/2d901f4e7bb982221e1a48a13666939140109d5a)) - **custom-resources:** `AwsCustomResource` assumed role session name may contain invalid characters ([#&#8203;34016](https://github.com/aws/aws-cdk/issues/34016)) ([32b6b4d](https://github.com/aws/aws-cdk/commit/32b6b4d7fa99723efb667239fbe455ede43b92c6)), closes [#&#8203;23260](https://github.com/aws/aws-cdk/issues/23260) [#&#8203;34011](https://github.com/aws/aws-cdk/issues/34011) *** #### Alpha modules (2.189.0-alpha.0) ##### Features - **ec2-alpha:** implement mapPublicIpOnLaunch prop in SubnetV2 ([#&#8203;34057](https://github.com/aws/aws-cdk/issues/34057)) ([836c5cf](https://github.com/aws/aws-cdk/commit/836c5cf3e4c627f817e4dc8ed2af28a5bba54792)), closes [#&#8203;32159](https://github.com/aws/aws-cdk/issues/32159) ##### Bug Fixes - **amplify:** unable to re-run integ test due to missing `status` field in `customRule` ([#&#8203;33973](https://github.com/aws/aws-cdk/issues/33973)) ([6638c08](https://github.com/aws/aws-cdk/commit/6638c08d56afe7ecc4f23cff4cf334b887001e5e)), closes [#&#8203;33962](https://github.com/aws/aws-cdk/issues/33962) ### [`v2.188.0`](https://github.com/aws/aws-cdk/releases/tag/v2.188.0) [Compare Source](https://github.com/aws/aws-cdk/compare/v2.187.0...v2.188.0) ##### Features - update L1 CloudFormation resource definitions ([#&#8203;33980](https://github.com/aws/aws-cdk/issues/33980)) ([0923b5e](https://github.com/aws/aws-cdk/commit/0923b5e82dd0c8da864f0c806f295fae270c22c1)) - update L1 CloudFormation resource definitions ([#&#8203;34029](https://github.com/aws/aws-cdk/issues/34029)) ([be6210f](https://github.com/aws/aws-cdk/commit/be6210f246b97befcdc9446862e991071738008d)) - **codepipeline:** add usePipelineRoleForActions field support in L2 ([#&#8203;33961](https://github.com/aws/aws-cdk/issues/33961)) ([d8bbc1c](https://github.com/aws/aws-cdk/commit/d8bbc1c3f8479ab5031b8684364735b9a6c31fa2)) - **codepipeline-actions:** support `ECRBuildAndPublish` action ([#&#8203;33375](https://github.com/aws/aws-cdk/issues/33375)) ([c5cd679](https://github.com/aws/aws-cdk/commit/c5cd679b2f979b9e51c7a071b18d930d3a475129)), closes [#&#8203;33376](https://github.com/aws/aws-cdk/issues/33376) - **codepipeline-actions:** support `InspectorEcrImageScanAction` and `InspectorSourceCodeScanAction` actions ([#&#8203;33378](https://github.com/aws/aws-cdk/issues/33378)) ([2dc8cc7](https://github.com/aws/aws-cdk/commit/2dc8cc7f703ebcd61f2b5f4d20401a1ade788e7a)), closes [#&#8203;33377](https://github.com/aws/aws-cdk/issues/33377) - **cognito:** v3.0 pre token generation trigger event ([#&#8203;33778](https://github.com/aws/aws-cdk/issues/33778)) ([ea1436f](https://github.com/aws/aws-cdk/commit/ea1436f85d036bddb9a96dd54f02a639c3aab212)), closes [#&#8203;33733](https://github.com/aws/aws-cdk/issues/33733) - **events-targets:** support ApiGatewayV2 HttpApi ([#&#8203;33864](https://github.com/aws/aws-cdk/issues/33864)) ([91a3076](https://github.com/aws/aws-cdk/commit/91a3076fb16369629a710ebc560c103a91c2ea20)), closes [#&#8203;26649](https://github.com/aws/aws-cdk/issues/26649) - **kinesisfirehose:** support S3 file extension format ([#&#8203;33776](https://github.com/aws/aws-cdk/issues/33776)) ([e314a9a](https://github.com/aws/aws-cdk/commit/e314a9aa5d149704cc2abd30927a41d317a3ce6c)), closes [#&#8203;32154](https://github.com/aws/aws-cdk/issues/32154) - **logs-destinations:** support Amazon Data Firehose logs destination ([#&#8203;33683](https://github.com/aws/aws-cdk/issues/33683)) ([a8edf69](https://github.com/aws/aws-cdk/commit/a8edf696e91c44cbda286889896464960dd03266)), closes [#&#8203;32038](https://github.com/aws/aws-cdk/issues/32038) [#&#8203;24766](https://github.com/aws/aws-cdk/issues/24766) - **pipelines:** actions can default to the pipeline service role instead of a newly created role ([#&#8203;33991](https://github.com/aws/aws-cdk/issues/33991)) ([2ebc51e](https://github.com/aws/aws-cdk/commit/2ebc51e694e85aa0d8e0401dbb1fc1037298eda5)) - **rds:** engine lifecycle support ([#&#8203;33902](https://github.com/aws/aws-cdk/issues/33902)) ([c0f8d29](https://github.com/aws/aws-cdk/commit/c0f8d293df157cd196e2bd9fb569374d0535f471)), closes [#&#8203;33859](https://github.com/aws/aws-cdk/issues/33859) ##### Bug Fixes - **cloudformation-include:** parse MinActiveInstancesPercent in AutoScalingRollingUpdate policy ([#&#8203;33852](https://github.com/aws/aws-cdk/issues/33852)) ([89d2d5c](https://github.com/aws/aws-cdk/commit/89d2d5c561860c1a9b55e1660efeec068fc4e6a3)), closes [#&#8203;33810](https://github.com/aws/aws-cdk/issues/33810) [#&#8203;33810](https://github.com/aws/aws-cdk/issues/33810) - **cx-api:** adding missing readme ([#&#8203;34003](https://github.com/aws/aws-cdk/issues/34003)) ([1c5cbfa](https://github.com/aws/aws-cdk/commit/1c5cbfa2798a68c99ce58dd8164c1aa01e7bd885)), closes [#&#8203;34006](https://github.com/aws/aws-cdk/issues/34006) [1#L698-L714](https://github.com/aws/1/issues/L698-L714) - **ecr-assets:** handle Docker 27.4+ output format in TarballImageAsset ([#&#8203;33967](https://github.com/aws/aws-cdk/issues/33967)) ([009680d](https://github.com/aws/aws-cdk/commit/009680dc758c62843e06005d6b0172c0c2f95bdb)), closes [#&#8203;33428](https://github.com/aws/aws-cdk/issues/33428) - **eks:** Only one type of update can be allowed with updateVersion ([#&#8203;33975](https://github.com/aws/aws-cdk/issues/33975)) ([95c06e2](https://github.com/aws/aws-cdk/commit/95c06e268025ca947254ee2e931b8546333cd065)), closes [#&#8203;33452](https://github.com/aws/aws-cdk/issues/33452) - **iam:** add validation for OrganizationPrincipal IDs ([#&#8203;33968](https://github.com/aws/aws-cdk/issues/33968)) ([217d75f](https://github.com/aws/aws-cdk/commit/217d75f28b48778777ebe218cd71386b79dcc74b)), closes [#&#8203;32756](https://github.com/aws/aws-cdk/issues/32756) [#&#8203;33555](https://github.com/aws/aws-cdk/issues/33555) [#&#8203;33773](https://github.com/aws/aws-cdk/issues/33773) - **lambda:** allow retryAttempts = -1 for infinite retries in EventSourceMapping ([#&#8203;34009](https://github.com/aws/aws-cdk/issues/34009)) ([88e04f0](https://github.com/aws/aws-cdk/commit/88e04f02251baa1604c3d613499984101f96d4df)), closes [#&#8203;34007](https://github.com/aws/aws-cdk/issues/34007) - **lambda:** deprecate default feature flag [@&#8203;aws-cdk/aws-lambda](https://github.com/aws-cdk/aws-lambda):createNewPoliciesWithAddToRolePolicy ([#&#8203;34010](https://github.com/aws/aws-cdk/issues/34010)) ([242091a](https://github.com/aws/aws-cdk/commit/242091ae2edacc90017919b52d4461790c587de9)), closes [#&#8203;33688](https://github.com/aws/aws-cdk/issues/33688) - **pipelines:** can't have the same asset display name 3 times ([#&#8203;34017](https://github.com/aws/aws-cdk/issues/34017)) ([1418277](https://github.com/aws/aws-cdk/commit/1418277cb80f1340e9c0d4f36905d805d95ad5ec)), closes [#&#8203;33844](https://github.com/aws/aws-cdk/issues/33844) [#&#8203;34004](https://github.com/aws/aws-cdk/issues/34004) - **stepfunctions-tasks:** associateWithParent when using JSONata ([#&#8203;33972](https://github.com/aws/aws-cdk/issues/33972)) ([e839d45](https://github.com/aws/aws-cdk/commit/e839d451f323293a26d321db1885bfa41070fcf8)), closes [#&#8203;33850](https://github.com/aws/aws-cdk/issues/33850) - customer aspect cannot add Tags if a BucketNotifications construct is present ([#&#8203;33979](https://github.com/aws/aws-cdk/issues/33979)) ([2cff67e](https://github.com/aws/aws-cdk/commit/2cff67e53dd67725ac9f5b12d5374a2803361e84)), closes [#&#8203;33943](https://github.com/aws/aws-cdk/issues/33943) *** #### Alpha modules (2.188.0-alpha.0) ##### Features - **ec2:** add mailmanager vpc endpoints ([#&#8203;33996](https://github.com/aws/aws-cdk/issues/33996)) ([7ee77d7](https://github.com/aws/aws-cdk/commit/7ee77d71df569d21c280866976109333e3266132)) - **eks-v2-alpha:** add new nodegroup ami type ([#&#8203;34025](https://github.com/aws/aws-cdk/issues/34025)) ([864a7c6](https://github.com/aws/aws-cdk/commit/864a7c6f6811777971d1349e7552567604167f02)) ##### Bug Fixes - **ec2-alpha:** addInternetGW handles shared route table for subnets ([#&#8203;33824](https://github.com/aws/aws-cdk/issues/33824)) ([3154d01](https://github.com/aws/aws-cdk/commit/3154d016ba31455f2d57ff5d90ee7b394c25e88f)), closes [#&#8203;33672](https://github.com/aws/aws-cdk/issues/33672) ### [`v2.187.0`](https://github.com/aws/aws-cdk/releases/tag/v2.187.0) [Compare Source](https://github.com/aws/aws-cdk/compare/v2.186.0...v2.187.0) ##### Features - **cx-api:** declare support for CDK_TOOLKIT_VERSION env var ([#&#8203;33963](https://github.com/aws/aws-cdk/issues/33963)) ([22dc717](https://github.com/aws/aws-cdk/commit/22dc717f8884f18c8afbc5367f40f0e733ce7a6e)) - update L1 CloudFormation resource definitions ([#&#8203;33954](https://github.com/aws/aws-cdk/issues/33954)) ([7c15988](https://github.com/aws/aws-cdk/commit/7c1598818ac4802f98b5bc583bdb38d28a971362)) - **ecr:** lookup existing repository ([#&#8203;33662](https://github.com/aws/aws-cdk/issues/33662)) ([5fff3d6](https://github.com/aws/aws-cdk/commit/5fff3d6c090a5c381af5a02be4bb588390ea0ee4)), closes [#&#8203;8461](https://github.com/aws/aws-cdk/issues/8461) - **eks:** `Nodegroup` support `nodeRepairConfig` ([#&#8203;32626](https://github.com/aws/aws-cdk/issues/32626)) ([b9cb47c](https://github.com/aws/aws-cdk/commit/b9cb47c4dbaacd839ddfdc38febdc58260d20c57)), closes [#&#8203;32562](https://github.com/aws/aws-cdk/issues/32562) - **kinesisfirehose:** throw `ValidationErrors` instead of untyped Errors ([#&#8203;33912](https://github.com/aws/aws-cdk/issues/33912)) ([8b23b5d](https://github.com/aws/aws-cdk/commit/8b23b5db3668c5c5b845e06397bf0001a55f5d0e)), closes [#&#8203;32569](https://github.com/aws/aws-cdk/issues/32569) - **lambda-event-sources:** starting position timestamp for kafka ([#&#8203;31439](https://github.com/aws/aws-cdk/issues/31439)) ([5077d8a](https://github.com/aws/aws-cdk/commit/5077d8abe0a776c6b3e762c2d1f38f0da2003b48)), closes [#&#8203;31808](https://github.com/aws/aws-cdk/issues/31808) - show friendly display names for assets ([#&#8203;33844](https://github.com/aws/aws-cdk/issues/33844)) ([4e958d4](https://github.com/aws/aws-cdk/commit/4e958d41f2825fd9c20ae27643aefd4c11d7aa8e)) ##### Bug Fixes - **cognito:** fix logging behaviour for user pool client custom resource ([#&#8203;33983](https://github.com/aws/aws-cdk/issues/33983)) ([d02e64a](https://github.com/aws/aws-cdk/commit/d02e64aac18a72195ddcdb973defea7f32382c33)), closes [GHSA-qq4x-c6h6-rfxh](https://github.com/aws/aws-cdk/security/advisories/GHSA-qq4x-c6h6-rfxh) - **core:** asset names for nested stacks contain Tokens ([#&#8203;33966](https://github.com/aws/aws-cdk/issues/33966)) ([85fc87f](https://github.com/aws/aws-cdk/commit/85fc87f0773ca1e68b395dcc5aae6103b239c38d)) - **dynamodb:** table v1 retain replica table if table is retain ([#&#8203;33953](https://github.com/aws/aws-cdk/issues/33953)) ([21d0a5c](https://github.com/aws/aws-cdk/commit/21d0a5ce687e88250a08492e7c5f43cc30da50cf)), closes [#&#8203;33952](https://github.com/aws/aws-cdk/issues/33952) - **eks:** looked up vpc causing premature validation errors for private subnets ([#&#8203;33786](https://github.com/aws/aws-cdk/issues/33786)) ([73744b4](https://github.com/aws/aws-cdk/commit/73744b452c2dd6809fddb123fa2ef6087ed18287)), closes [#&#8203;22025](https://github.com/aws/aws-cdk/issues/22025) [/github.com/aws/aws-cdk/blob/main/packages/aws-cdk-lib/aws-ec2/lib/vpc.ts#L2705](https://github.com/aws//github.com/aws/aws-cdk/blob/main/packages/aws-cdk-lib/aws-ec2/lib/vpc.ts/issues/L2705) *** #### Alpha modules (2.187.0-alpha.0) ##### Features - **apprunner:** throw ValidationError instead of untyped errors ([#&#8203;33914](https://github.com/aws/aws-cdk/issues/33914)) ([38f89af](https://github.com/aws/aws-cdk/commit/38f89afe2ffdf67b0918e38f861166bdb0f8738f)) - **ec2:** adding `placementGroup` to `LaunchTemplateProps` and `LaunchTemplate` ([#&#8203;33726](https://github.com/aws/aws-cdk/issues/33726)) ([e5f71db](https://github.com/aws/aws-cdk/commit/e5f71db53ce985172e565eb9da5692d77ab7b268)), closes [#&#8203;33721](https://github.com/aws/aws-cdk/issues/33721) - **ec2:** support the new `SupportedRegions` property for `AWS::EC2::VPCEndpointService` ([#&#8203;33959](https://github.com/aws/aws-cdk/issues/33959)) ([0c77cb6](https://github.com/aws/aws-cdk/commit/0c77cb627e1e7e729205624a9603331f5442af8e)) - **iot:** backfill enum values in iot module ([#&#8203;33969](https://github.com/aws/aws-cdk/issues/33969)) ([2a8a8a3](https://github.com/aws/aws-cdk/commit/2a8a8a36ed872f7f3de4b24fd7d9c874a3da9dbf)) ### [`v2.186.0`](https://github.com/aws/aws-cdk/releases/tag/v2.186.0) [Compare Source](https://github.com/aws/aws-cdk/compare/v2.185.0...v2.186.0) ##### ⚠ BREAKING CHANGES TO EXPERIMENTAL FEATURES - **redshiftserverless:** The `CfnWorkgroup.attrWorkgroupMaxCapacity` attribute has been removed. - **quicksight:** The `CfnAnalysis.SheetTextBoxProperty.interactions`, `CfnDashboard.SheetTextBoxProperty.interactions`, and `CfnTemplate.SheetTextBoxProperty.interactions` properties have been removed. - **imagebuilder:** The `CfnDistributionConfiguration.DistributionProperty.ssmParameterConfigurations` property has been removed. ##### Features - **codecommit:** throw `ValidationErrors` instead of untyped Errors ([#&#8203;33854](https://github.com/aws/aws-cdk/issues/33854)) ([f28eae2](https://github.com/aws/aws-cdk/commit/f28eae24348c9a90335d8ece7330e1dd9b6675f2)), closes [#&#8203;32569](https://github.com/aws/aws-cdk/issues/32569) - **codedeploy:** throw `ValidationErrors` instead of untyped Errors ([#&#8203;33853](https://github.com/aws/aws-cdk/issues/33853)) ([b6b91dd](https://github.com/aws/aws-cdk/commit/b6b91dd00187e53c79bea9ee9f43fe9c2adfe487)), closes [#&#8203;32569](https://github.com/aws/aws-cdk/issues/32569) - **codepipeline:** branches and files support in git push filter L2 construct ([#&#8203;33872](https://github.com/aws/aws-cdk/issues/33872)) ([45623d6](https://github.com/aws/aws-cdk/commit/45623d6b002a51706f1931dcdce80742618d9969)) - **codepipeline:** stage level condition feature L2 construct ([#&#8203;33809](https://github.com/aws/aws-cdk/issues/33809)) ([8e4374f](https://github.com/aws/aws-cdk/commit/8e4374fbb4905016ddb575c3b03f662f394444ce)) - **codepipeline:** throw `ValidationErrors` instead of untyped Errors ([#&#8203;33855](https://github.com/aws/aws-cdk/issues/33855)) ([3ff5501](https://github.com/aws/aws-cdk/commit/3ff5501b3cd4fd10eeba5f4bebbbe7e064f844c5)), closes [#&#8203;32569](https://github.com/aws/aws-cdk/issues/32569) - **cognito-identitypool:** graduate to stable 🚀 ([#&#8203;33905](https://github.com/aws/aws-cdk/issues/33905)) ([ba52ac7](https://github.com/aws/aws-cdk/commit/ba52ac7dbdff56fe93da29f97d81cf1e3fd666f4)), closes [#&#8203;27483](https://github.com/aws/aws-cdk/issues/27483) - **config:** throw `ValidationErrors` instead of untyped Errors ([#&#8203;33869](https://github.com/aws/aws-cdk/issues/33869)) ([5bc9292](https://github.com/aws/aws-cdk/commit/5bc92922230e3efaef2658ca85be59e912c1625d)), closes [#&#8203;32569](https://github.com/aws/aws-cdk/issues/32569) - **docdb:** throw `ValidationErrors` instead of untyped Errors ([#&#8203;33870](https://github.com/aws/aws-cdk/issues/33870)) ([2dc5d70](https://github.com/aws/aws-cdk/commit/2dc5d702bc55030927dd45fe88a6cd68f629fee9)), closes [#&#8203;32569](https://github.com/aws/aws-cdk/issues/32569) - **dynamodb:** throw `ValidationErrors` instead of untyped Errors ([#&#8203;33871](https://github.com/aws/aws-cdk/issues/33871)) ([a9bae27](https://github.com/aws/aws-cdk/commit/a9bae276f595d3b3d18c8a56d40549ab1044cbb7)), closes [#&#8203;32569](https://github.com/aws/aws-cdk/issues/32569) - **ecr-assets:** throw `ValidationErrors` instead of untyped Errors ([#&#8203;33899](https://github.com/aws/aws-cdk/issues/33899)) ([0787840](https://github.com/aws/aws-cdk/commit/0787840f1ed50c7e7863e1188d8a7c9d3d0d14e7)) - **efs:** throw `ValidationErrors` instead of untyped Errors ([#&#8203;33885](https://github.com/aws/aws-cdk/issues/33885)) ([6bf8095](https://github.com/aws/aws-cdk/commit/6bf809578b00377306aa1258fcfbc807c70f9148)) - **imagebuilder:** update L1 CloudFormation resource definitions ([#&#8203;33909](https://github.com/aws/aws-cdk/issues/33909)) ([8cac7bc](https://github.com/aws/aws-cdk/commit/8cac7bc567aba2aed1f7c877b0ea5c0447a56c1c)), closes [#&#8203;33906](https://github.com/aws/aws-cdk/issues/33906) - **lambda:** add Ruby3.4 Lambda runtime support ([#&#8203;33832](https://github.com/aws/aws-cdk/issues/33832)) ([3154615](https://github.com/aws/aws-cdk/commit/31546155504f2d7719747f607d509e67009d38f0)) - **quicksight:** update L1 CloudFormation resource definitions ([#&#8203;33910](https://github.com/aws/aws-cdk/issues/33910)) ([21e21cb](https://github.com/aws/aws-cdk/commit/21e21cb2e5261e47f6a9f7c45a9d9609c93112a7)), closes [#&#8203;33906](https://github.com/aws/aws-cdk/issues/33906) - **redshiftserverless:** update L1 CloudFormation resource definitions ([#&#8203;33911](https://github.com/aws/aws-cdk/issues/33911)) ([fb9fa74](https://github.com/aws/aws-cdk/commit/fb9fa74dbc80009aabe6260087e873b275b45fea)), closes [#&#8203;33906](https://github.com/aws/aws-cdk/issues/33906) - update L1 CloudFormation resource definitions ([#&#8203;33906](https://github.com/aws/aws-cdk/issues/33906)) ([b855978](https://github.com/aws/aws-cdk/commit/b8559782d95eb10e8678f407d61e8c4b00114733)) - **scheduler-and-scheduler-targets:** graduate to stable 🚀 ([#&#8203;33903](https://github.com/aws/aws-cdk/issues/33903)) ([1740f87](https://github.com/aws/aws-cdk/commit/1740f878ff35ac222d328c36f6b496d979236919)), closes [#&#8203;31785](https://github.com/aws/aws-cdk/issues/31785) - **scheduler-targets:** EcsRunTask scheduler target ([#&#8203;33697](https://github.com/aws/aws-cdk/issues/33697)) ([3fe58b5](https://github.com/aws/aws-cdk/commit/3fe58b5e96790a5b9cf758d9bda3b06cfe28d603)), closes [#&#8203;27456](https://github.com/aws/aws-cdk/issues/27456) ##### Bug Fixes - context provider's `ignoreErrorOnMissingContext` parameter is misleading ([#&#8203;33875](https://github.com/aws/aws-cdk/issues/33875)) ([b3187b9](https://github.com/aws/aws-cdk/commit/b3187b94c3b3e1c9fcbfc101f69d3f2ebf39e8fd)) - **core:** does not generate a valid artifact id from some construct IDs ([#&#8203;33863](https://github.com/aws/aws-cdk/issues/33863)) ([6a5638a](https://github.com/aws/aws-cdk/commit/6a5638a0a5a4550a15895de36a084be2a68d8009)), closes [#&#8203;32808](https://github.com/aws/aws-cdk/issues/32808) - **cx-api:** adding missing readme ([#&#8203;33867](https://github.com/aws/aws-cdk/issues/33867)) ([6761f56](https://github.com/aws/aws-cdk/commit/6761f56d65a49b50547e7189bf89b7d2ea523c2e)), closes [#&#8203;33866](https://github.com/aws/aws-cdk/issues/33866) [1#L662-L681](https://github.com/aws/1/issues/L662-L681) - **events:** now `EventBus.grantPutEventsTo` correctly handles service principals (under feature flag) ([#&#8203;33729](https://github.com/aws/aws-cdk/issues/33729)) ([38d82c4](https://github.com/aws/aws-cdk/commit/38d82c4264e9edf25d982530283049f338f9f455)), closes [#&#8203;22080](https://github.com/aws/aws-cdk/issues/22080) [#&#8203;22080](https://github.com/aws/aws-cdk/issues/22080) *** #### Alpha modules (2.186.0-alpha.0) ##### Features - **ec2:** backfill missing enums for ec2 ([#&#8203;33821](https://github.com/aws/aws-cdk/issues/33821)) ([ae3fd67](https://github.com/aws/aws-cdk/commit/ae3fd67d3e153187d2e6fa53df9ec78080fe71d0)), closes [/docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ec2-vpc.html#cfn-ec2](https://github.com/aws//docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ec2-vpc.html/issues/cfn-ec2) [/docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ec2-vpcendpoint.html#cfn-ec2](https://github.com/aws//docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ec2-vpcendpoint.html/issues/cfn-ec2) - **ec2:** support `PrefixList.fromLookup()` ([#&#8203;33619](https://github.com/aws/aws-cdk/issues/33619)) ([b6a15f3](https://github.com/aws/aws-cdk/commit/b6a15f384e79eb0020f46ffeea20507f07380a97)), closes [aws/aws-cdk#33606](https://github.com/aws/aws-cdk/issues/33606) [aws/aws-cdk#15115](https://github.com/aws/aws-cdk/issues/15115) - **ec2:** support AWS::EC2::VPCEndpointService SupportedIpAddressTypes property ([#&#8203;33877](https://github.com/aws/aws-cdk/issues/33877)) ([ed5df9c](https://github.com/aws/aws-cdk/commit/ed5df9cac46dd862ec67751f5d0e6a53f81e8d0a)) ##### Bug Fixes - **eks-v2-alpha:** prevent IAM role creation when node pools are empty ([#&#8203;33894](https://github.com/aws/aws-cdk/issues/33894)) ([55bf451](https://github.com/aws/aws-cdk/commit/55bf451c48da33ce2ecda1c17cccdedea4e3527f)), closes [#&#8203;33771](https://github.com/aws/aws-cdk/issues/33771) ### [`v2.185.0`](https://github.com/aws/aws-cdk/releases/tag/v2.185.0) [Compare Source](https://github.com/aws/aws-cdk/compare/v2.184.1...v2.185.0) ##### Features - **s3-deployment:** backfill missing enums for s3-deployment ([#&#8203;33819](https://github.com/aws/aws-cdk/issues/33819)) ([2623e00](https://github.com/aws/aws-cdk/commit/2623e00546721f43a180871e2f8fb72712a9ffa1)), closes [/docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-s3-bucket-serversideencryptionbydefault.html#aws-properties-s3](https://github.com/aws//docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-s3-bucket-serversideencryptionbydefault.html/issues/aws-properties-s3) - update L1 CloudFormation resource definitions ([#&#8203;33800](https://github.com/aws/aws-cdk/issues/33800)) ([fada917](https://github.com/aws/aws-cdk/commit/fada917f8197527cd90622614fe1b6769c6cab1a)) - **ecs:** add validation checks to memory cpu combinations of FARGATE compatible task definitions ([#&#8203;33608](https://github.com/aws/aws-cdk/issues/33608)) ([734ca66](https://github.com/aws/aws-cdk/commit/734ca662c82cbedf06393d223a870381ad55520c)), closes [#&#8203;22216](https://github.com/aws/aws-cdk/issues/22216) [/github.com/aws/aws-cdk/issues/31106#issuecomment-2289166090](https://github.com/aws//github.com/aws/aws-cdk/issues/31106/issues/issuecomment-2289166090) - **ecs:** backfill missing enums for ecs ([#&#8203;33644](https://github.com/aws/aws-cdk/issues/33644)) ([28c6a22](https://github.com/aws/aws-cdk/commit/28c6a22f14ea10c76c1aee87b57d3931809daba8)) - **eks:** backfill missing enums for eks ([#&#8203;33646](https://github.com/aws/aws-cdk/issues/33646)) ([f67a88b](https://github.com/aws/aws-cdk/commit/f67a88bf77db6b100fff07aab1a161167ba319e6)) - **logs:** throw `ValidationError` instead of untyped Errors ([#&#8203;33753](https://github.com/aws/aws-cdk/issues/33753)) ([1fea9f1](https://github.com/aws/aws-cdk/commit/1fea9f167a0521b49b5d0738b27f07fcfa3b36ad)) ##### Bug Fixes - **core:** remove whitespaces in tree.json ([#&#8203;33784](https://github.com/aws/aws-cdk/issues/33784)) ([73b9138](https://github.com/aws/aws-cdk/commit/73b91382c6f681e91b662dc0599cc19ba91c8a5a)), closes [#&#8203;27261](https://github.com/aws/aws-cdk/issues/27261) [#&#8203;27261](https://github.com/aws/aws-cdk/issues/27261) - **s3:** add validation for lifecycle rule transitions ([#&#8203;33731](https://github.com/aws/aws-cdk/issues/33731)) ([4128ff4](https://github.com/aws/aws-cdk/commit/4128ff44bf5f1112467851ce61c1826107e3a07d)), closes [#&#8203;22103](https://github.com/aws/aws-cdk/issues/22103) [#&#8203;22103](https://github.com/aws/aws-cdk/issues/22103) - **s3-deployment:** handle properly quoted strings in JSON files ([#&#8203;33698](https://github.com/aws/aws-cdk/issues/33698)) ([bff85e8](https://github.com/aws/aws-cdk/commit/bff85e88fbe0ddb10bdcde8039af1736afa77cc2)), closes [#&#8203;22661](https://github.com/aws/aws-cdk/issues/22661) [#&#8203;22661](https://github.com/aws/aws-cdk/issues/22661) - **stepfunctions-tasks:** jobQueueArn support JsonPath or JSONata ([#&#8203;33670](https://github.com/aws/aws-cdk/issues/33670)) ([1c09c8b](https://github.com/aws/aws-cdk/commit/1c09c8bb404b03929f245f7a888dfd84ac7cab32)), closes [#&#8203;33580](https://github.com/aws/aws-cdk/issues/33580) *** #### Alpha modules (2.185.0-alpha.0) ##### ⚠ BREAKING CHANGES TO EXPERIMENTAL FEATURES - **scheduler-targets-alpha:** The class `KinesisDataFirehosePutRecord` has been renamed to `FirehosePutRecord`. ##### Bug Fixes - **scheduler-targets-alpha:** rename `KinesisDataFirehosePutRecord` to `FirehosePutRecord` ([#&#8203;33758](https://github.com/aws/aws-cdk/issues/33758)) ([e6f5bc8](https://github.com/aws/aws-cdk/commit/e6f5bc8915081a74a83e4055ccbaa11987ba943c)), closes [#&#8203;33757](https://github.com/aws/aws-cdk/issues/33757) [#&#8203;33798](https://github.com/aws/aws-cdk/issues/33798) ### [`v2.184.1`](https://github.com/aws/aws-cdk/releases/tag/v2.184.1) [Compare Source](https://github.com/aws/aws-cdk/compare/v2.184.0...v2.184.1) ##### Reverts - **iam:** fix(iam): adding organization id pattern verification ([#&#8203;33773](https://github.com/aws/aws-cdk/pull/33773)) ([f7ed316](https://github.com/aws/aws-cdk/commit/f7ed3165056c385249735ebb17a53d0fedd69c54)), closes [aws/aws-cdk#33768](https://github.com/aws/aws-cdk/issues/33768) *** #### Alpha modules (2.184.1-alpha.0) ### [`v2.184.0`](https://github.com/aws/aws-cdk/releases/tag/v2.184.0) [Compare Source](https://github.com/aws/aws-cdk/compare/v2.183.0...v2.184.0) ##### Features - **ecr:** throw ValidationError instead of untyped Errors ([#&#8203;33750](https://github.com/aws/aws-cdk/issues/33750)) ([242690f](https://github.com/aws/aws-cdk/commit/242690f9aa897b11e1b1a73036a9927ed3473eb2)) - **lambda:** support s3 OFD for Kinesis/DynamoDB ([#&#8203;33739](https://github.com/aws/aws-cdk/issues/33739)) ([3f1fecf](https://github.com/aws/aws-cdk/commit/3f1fecfecb871d3912a74471a555b223a6dcaa20)) - **rds:** allow to specify availability zone for Aurora instances ([#&#8203;33515](https://github.com/aws/aws-cdk/issues/33515)) ([583d5f2](https://github.com/aws/aws-cdk/commit/583d5f24f03d3b2f8b072d0a41d41b75f8814f8c)), closes [#&#8203;33503](https://github.com/aws/aws-cdk/issues/33503) [#&#8203;30618](https://github.com/aws/aws-cdk/issues/30618) ##### Bug Fixes - **codepipeline:** replace account root principal with current pipeline role in the trust policy under ff: [@&#8203;aws-cdk/pipelines](https://github.com/aws-cdk/pipelines):reduceStageRoleTrustScope ([#&#8203;33742](https://github.com/aws/aws-cdk/issues/33742)) ([a64b01c](https://github.com/aws/aws-cdk/commit/a64b01cc2969822bb92d7bd72152ecb2ccf1c1cf)), closes [#&#8203;33709](https://github.com/aws/aws-cdk/issues/33709) - **core:** message including tokens from annotations cannot output correctly ([#&#8203;33706](https://github.com/aws/aws-cdk/issues/33706)) ([55a3c4c](https://github.com/aws/aws-cdk/commit/55a3c4caefdb283280d6c16d3719f3e311e31ec9)), closes [#&#8203;33707](https://github.com/aws/aws-cdk/issues/33707) - **events-targets:** add LogGroupTargetInput.fromObjectV2() method ([#&#8203;33720](https://github.com/aws/aws-cdk/issues/33720)) ([584a58c](https://github.com/aws/aws-cdk/commit/584a58c2dcd43d9ebd2533186a2f5f9a083bb478)) *** #### Alpha modules (2.184.0-alpha.0) ##### ⚠ BREAKING CHANGES TO EXPERIMENTAL FEATURES - **glue-alpha:** Updated casing of `workflow.addconditionalTrigger` to `workflow.addConditionalTrigger`. ##### Bug Fixes - **glue-alpha:** inconsistent workflow addconditionalTrigger casing ([#&#8203;33752](https://github.com/aws/aws-cdk/issues/33752)) ([4886a3e](https://github.com/aws/aws-cdk/commit/4886a3e503b22f3dfadca908501a2cb208c2ebee)), closes [#&#8203;33751](https://github.com/aws/aws-cdk/issues/33751) [#&#8203;33751](https://github.com/aws/aws-cdk/issues/33751) ### [`v2.183.0`](https://github.com/aws/aws-cdk/releases/tag/v2.183.0) [Compare Source](https://github.com/aws/aws-cdk/compare/v2.182.0...v2.183.0) ##### Features - **bedrock:** support DeepSeek R1 ([#&#8203;33727](https://github.com/aws/aws-cdk/issues/33727)) ([3de0818](https://github.com/aws/aws-cdk/commit/3de0818b92c7130ac31f647329a265a742d4bc04)) - **rds:** add MySQL enginge versions 5.7.44(patch), 8.0.41 and 8.4.4 ([#&#8203;33732](https://github.com/aws/aws-cdk/issues/33732)) ([d1a8cbe](https://github.com/aws/aws-cdk/commit/d1a8cbeaa8153296ecf2d797d95fa31fd6b79582)) - update L1 CloudFormation resource definitions ([#&#8203;33718](https://github.com/aws/aws-cdk/issues/33718)) ([c4fceb2](https://github.com/aws/aws-cdk/commit/c4fceb2f28b9582cd957040a2c9e983343b9eba9)) - **codebuild:** throw `ValidationError` instead of untyped Errors ([#&#8203;33700](https://github.com/aws/aws-cdk/issues/33700)) ([d12854a](https://github.com/aws/aws-cdk/commit/d12854a96cebb428feb78908a093743889ef52bf)), closes [#&#8203;32569](https://github.com/aws/aws-cdk/issues/32569) - **core:** `RemovalPolicies.of(scope)` ([#&#8203;32283](https://github.com/aws/aws-cdk/issues/32283)) ([34c547c](https://github.com/aws/aws-cdk/commit/34c547c83e9fa5f055b0c60be975087e4f836ebb)) - **logs:** add support for fieldIndexPolicies in log group L2 Construct ([#&#8203;33416](https://github.com/aws/aws-cdk/issues/33416)) ([6c882e0](https://github.com/aws/aws-cdk/commit/6c882e0acc36b632ff80286e72bac08734d70d72)), closes [#&#8203;33366](https://github.com/aws/aws-cdk/issues/33366) - **lambda:** backfill missing enums for lambda ([#&#8203;33651](https://github.com/aws/aws-cdk/issues/33651)) ([4227747](https://github.com/aws/aws-cdk/pull/33740/commits/42277471040c4c845d9a4f1b3649df9cb675ecfb)) - **rds:** add new MariaDB engine versions 10.5.28, 10.6.21, 10.11.11, and 11.4.5 ([#&#8203;33665](https://github.com/aws/aws-cdk/issues/33665)) ([7f5bf4e](https://github.com/aws/aws-cdk/pull/33740/commits/7f5bf4e311555bdf7aa0d7637d7b89dd0421c2f6)) - **ec2:** add VPC interface endpoints for Location Service ([#&#8203;33667](https://github.com/aws/aws-cdk/issues/33667)) ([4bc151b](https://github.com/aws/aws-cdk/pull/33740/commits/4bc151bafdd4398f632b06f7d801c2a550e2340a)) - **ec2:** add VPC interface endpoints for WAFV2 ([#&#8203;33685](https://github.com/aws/aws-cdk/issues/33685)) ([5eb11d2](https://github.com/aws/aws-cdk/pull/33740/commits/5eb11d26d00a5cccc18d9e4e6483dd613d4c4dbb)) - **ec2:** add VPC interface endpoints for Emr Serverless ([#&#8203;33715](https://github.com/aws/aws-cdk/issues/33715)) ([25619a0](https://github.com/aws/aws-cdk/pull/33740/commits/25619a01e78040c8b9442a9a7ed434b936e01491)) - **ec2:** add VPC interface endpoints for Security Lake ([#&#8203;33728](https://github.com/aws/aws-cdk/issues/33728)) ([5fcbe2a](https://github.com/aws/aws-cdk/pull/33740/commits/5fcbe2ac2e3c377e39b38c278434997dbed19ab6)) ##### Bug Fixes - **core:** pressing Ctrl-C when content is bundled leaves broken asset ([#&#8203;33692](https://github.com/aws/aws-cdk/issues/33692)) ([00ef50d](https://github.com/aws/aws-cdk/commit/00ef50d36d5b7322f71e38062f03017eff878705)), closes [#&#8203;33201](https://github.com/aws/aws-cdk/issues/33201) [#&#8203;32869](https://github.com/aws/aws-cdk/issues/32869) [#&#8203;14474](https://github.com/aws/aws-cdk/issues/14474) - **custom-resources:** fix circular dependency when a custom role provided to Provider ([#&#8203;33600](https://github.com/aws/aws-cdk/issues/33600)) ([77b6fa9](https://github.com/aws/aws-cdk/commit/77b6fa94c0446ec81e5ae8949d6d0eb571d89dea)), closes [#&#8203;20360](https://github.com/aws/aws-cdk/issues/20360) - **efs:** cannot run an integ test when `transitionToArchivePolicy` is specified and `throughputMode` is `undefined` ([#&#8203;33713](https://github.com/aws/aws-cdk/issues/33713)) ([842201c](https://github.com/aws/aws-cdk/commit/842201c344a6f76f8cfd74b65cd73f63259b777b)) - **eks:** cluster deployment issue when the authentication mode is not changing ([#&#8203;33680](https://github.com/aws/aws-cdk/issues/33680)) ([ba2dfd1](https://github.com/aws/aws-cdk/commit/ba2dfd10504504d78e55bc242a4747024a504389)) *** #### Alpha modules (2.183.0-alpha.0) ##### ⚠ BREAKING CHANGES TO EXPERIMENTAL FEATURES - **scheduler-targets-alpha:** The `InspectorStartAssessmentRun` target's constructor now accepts `IAssessmentTemplate` instead of `CfnAssessmentTemplate` as its parameter type. To migrate existing code, use the `AssessmentTemplate.fromCfnAssessmentTemplate()` method to convert your `CfnAssessmentTemplate` instances to `IAssessmentTemplate`. ##### Features - **kinesisanalytics-flink-alpha:** backfill missing enums for kinesisanalytics-flink-alpha ([#&#8203;33632](https://github.com/aws/aws-cdk/pull/33632)) ([b55199a](https://github.com/aws/aws-cdk/pull/33740/commits/b55199a782582348408fb75123c533977b38326d)) - **kinesisfirehose-destinations-alpha:** backfill missing enums for kinesisfirehose-destinations-alpha ([#&#8203;33633](https://github.com/aws/aws-cdk/pull/33633)) ([6ed7a45](https://github.com/aws/aws-cdk/pull/33740/commits/6ed7a452e261b0033b44d0b2b61b18466d6e6b48)) ##### Bug Fixes - **scheduler-alpha:** deprecate `Group` in favour of `ScheduleGroup` ([#&#8203;33678](https://github.com/aws/aws-cdk/issues/33678)) ([4d8eae9](https://github.com/aws/aws-cdk/commit/4d8eae9da577a94114602df261c98b65aa616956)) - **scheduler-targets-alpha:** update inspector target to use IAssessmentTemplate instead of CfnAssessmentTemplate ([#&#8203;33682](https://github.com/aws/aws-cdk/issues/33682)) ([50ba3ef](https://github.com/aws/aws-cdk/commit/50ba3efabca81a3c57ce34654f8ec1002deace6f)) ### [`v2.182.0`](https://github.com/aws/aws-cdk/releases/tag/v2.182.0) [Compare Source](https://github.com/aws/aws-cdk/compare/v2.181.1...v2.182.0) ##### Features - **assertions:** added getResourceId method to Template ([#&#8203;33521](https://github.com/aws/aws-cdk/issues/33521)) ([a96b0f1](https://github.com/aws/aws-cdk/commit/a96b0f1dca27b262fb2c72637ed9043830477c2c)) - **autoscaling:** add new `HealthChecks` for multiple health check types, including EBS and VPC_LATTICE types ([#&#8203;31286](https://github.com/aws/aws-cdk/issues/31286)) ([b3edd0d](https://github.com/aws/aws-cdk/commit/b3edd0da9d0f49070b94120051c48716a69102c3)), closes [#&#8203;31289](https://github.com/aws/aws-cdk/issues/31289) [/github.com/aws/aws-cdk/blob/main/packages/aws-cdk-lib/aws-autoscaling/lib/auto-scaling-group.ts#L233](https://github.com/aws//github.com/aws/aws-cdk/blob/main/packages/aws-cdk-lib/aws-autoscaling/lib/auto-scaling-group.ts/issues/L233) [/github.com/aws/aws-cdk/blob/main/packages/aws-cdk-lib/aws-autoscaling/lib/auto-scaling-group.ts#L2232-L2258](https://github.com/aws//github.com/aws/aws-cdk/blob/main/packages/aws-cdk-lib/aws-autoscaling/lib/auto-scaling-group.ts/issues/L2232-L2258) [/github.com/aws/aws-cdk/pull/31286#discussion_r1740763781](https://github.com/aws//github.com/aws/aws-cdk/pull/31286/issues/discussion_r1740763781) - **ecs:** encrypting managed storage ([#&#8203;33535](https://github.com/aws/aws-cdk/issues/33535)) ([07f0fe3](https://github.com/aws/aws-cdk/commit/07f0fe3a851cce328433ada9aac674ab9464b5ca)), closes [#&#8203;33380](https://github.com/aws/aws-cdk/issues/33380) - **inspector:** add minimal L2 interface for Inspector assessment template and fromCfnAssessmentTemplate() ([#&#8203;33614](https://github.com/aws/aws-cdk/issues/33614)) ([d51f70a](https://github.com/aws/aws-cdk/commit/d51f70ab40d237a3145d986e75c7ea2465afd6b4)) - **opensearchservice:** nodeoptions for domain ([#&#8203;32936](https://github.com/aws/aws-cdk/issues/32936)) ([1b6f0c3](https://github.com/aws/aws-cdk/commit/1b6f0c3d0eb4aedfc72c716ee18aa3ae4dbf16b8)), closes [#&#8203;32553](https://github.com/aws/aws-cdk/issues/32553) - **rds:** `DatabaseCluster` support `replicationSourceIdentifier` ([#&#8203;33471](https://github.com/aws/aws-cdk/issues/33471)) ([878ad54](https://github.com/aws/aws-cdk/commit/878ad546c2d4f330c777734a0c7919bd6ce46395)), closes [#&#8203;33280](https://github.com/aws/aws-cdk/issues/33280) - update L1 CloudFormation resource definitions ([#&#8203;33676](https://github.com/aws/aws-cdk/issues/33676)) ([92dba49](https://github.com/aws/aws-cdk/commit/92dba49571caec118001b9f13b82378bec2150f0)) - upgrade [@&#8203;aws-cdk/cloud-assembly-schema](https://github.com/aws-cdk/cloud-assembly-schema) to v40 ([#&#8203;33620](https://github.com/aws/aws-cdk/issues/33620)) ([127059e](https://github.com/aws/aws-cdk/commit/127059e890c78fcfaf11a97a961395b2ceb2a339)) ##### Bug Fixes - **apigateway:** move endpointConfiguration to RestApiBaseProps ([#&#8203;33514](https://github.com/aws/aws-cdk/issues/33514)) ([e07a89c](https://github.com/aws/aws-cdk/commit/e07a89ccb053fe22bcb96456c75304ac7a3c7670)), closes [#&#8203;33295](https://github.com/aws/aws-cdk/issues/33295) - **appsync:** appsync Event API integration assertion tests ([#&#8203;33572](https://github.com/aws/aws-cdk/issues/33572)) ([6f966a6](https://github.com/aws/aws-cdk/commit/6f966a6dcc010fe6af7999e7b5f97a447287aed3)) - **cloudwatch:** update regex expression that prevents CloudWatch:Mah:UnknownIdentifier warnings ([#&#8203;33591](https://github.com/aws/aws-cdk/issues/33591)) ([#&#8203;33592](https://github.com/aws/aws-cdk/issues/33592)) ([97744e7](https://github.com/aws/aws-cdk/commit/97744e746670bf067da40c8ff6a902a9c15b707e)) - **iam:** adding organization id pattern verification ([#&#8203;33555](https://github.com/aws/aws-cdk/issues/33555)) ([6df9bfe](https://github.com/aws/aws-cdk/commit/6df9bfe566a913c6c0538b2f380a83d06891a027)), closes [#&#8203;32756](https://github.com/aws/aws-cdk/issues/32756) - **lambda-nodejs:** do not require a frozen lockfile for bun ([#&#8203;32908](https://github.com/aws/aws-cdk/issues/32908)) ([a21190e](https://github.com/aws/aws-cdk/commit/a21190eb85bbc64820389ca5979a324932b9ab4b)), closes [#&#8203;32906](https://github.com/aws/aws-cdk/issues/32906) [#&#8203;32906](https://github.com/aws/aws-cdk/issues/32906) - **s3:** cannot deploy multiple replication source buckets (under feature flag) ([#&#8203;33360](https://github.com/aws/aws-cdk/issues/33360)) ([d580853](https://github.com/aws/aws-cdk/commit/d580853c546b4ee2d49afb52be75b4eb036bd6cd)), closes [#&#8203;33355](https://github.com/aws/aws-cdk/issues/33355) - **sns:** for SSE topics, add KMS permissions in grantPublish ([#&#8203;32794](https://github.com/aws/aws-cdk/issues/32794)) ([f1c0926](https://github.com/aws/aws-cdk/commit/f1c092634a391b0b7aed0f75626dd6d0ffd56564)), closes [#&#8203;18387](https://github.com/aws/aws-cdk/issues/18387) [#&#8203;31012](https://github.com/aws/aws-cdk/issues/31012) [#&#8203;24848](https://github.com/aws/aws-cdk/issues/24848) [#&#8203;16271](https://github.com/aws/aws-cdk/issues/16271) [#&#8203;29511](https://github.com/aws/aws-cdk/issues/29511) [/github.com/aws/aws-cdk/issues/16271#issuecomment-917221985](https://github.com/aws//github.com/aws/aws-cdk/issues/16271/issues/issuecomment-917221985) *** #### Alpha modules (2.182.0-alpha.0) ##### Features - **pipes-alpha:** support for customer-managed KMS keys to encrypt pipe data ([#&#8203;33546](https://github.com/aws/aws-cdk/issues/33546)) ([dd0d62f](https://github.com/aws/aws-cdk/commit/dd0d62f84da06e2cafbe7a8bac80899d86b6f153)), closes [#&#8203;31453](https://github.com/aws/aws-cdk/issues/31453) ##### Bug Fixes - **cognito-identitypool-alpha:** prevent stacks from not deploying correctly ([#&#8203;33609](https://github.com/aws/aws-cdk/issues/33609)) ([e220bc8](https://github.com/aws/aws-cdk/commit/e220bc8ca9b75bcbb4bb7447703f32737b47fc77)), closes [#&#8203;33510](https://github.com/aws/aws-cdk/issues/33510) - **eks-v2-alpha:** can't delete fargate cluster ([#&#8203;33573](https://github.com/aws/aws-cdk/issues/33573)) ([4ada313](https://github.com/aws/aws-cdk/commit/4ada3132e73e8f6b299548003d46e68f9db353a5)), closes [#&#8203;33347](https://github.com/aws/aws-cdk/issues/33347) - **scheduler-targets:** update kinesis firehose imports ([#&#8203;33615](https://github.com/aws/aws-cdk/issues/33615)) ([1df1a78](https://github.com/aws/aws-cdk/commit/1df1a784ca4d4ed8c724f0a8840137724fb46ca9)) ### [`v2.181.1`](https://github.com/aws/aws-cdk/releases/tag/v2.181.1) [Compare Source](https://github.com/aws/aws-cdk/compare/v2.181.0...v2.181.1) *** #### Alpha modules (2.181.1-alpha.0) ##### ⚠ BREAKING CHANGES TO EXPERIMENTAL FEATURES - **cognito-identitypool-alpha:** Any `IdentityPool` resources deployed in versions `>=2.179.0` will now fail to deploy. You will need to delete the `IdentityPoolRoleAttachment` from your stack via the console before redeploying. ##### Bug Fixes - **cognito-identitypool-alpha:** prevent stacks from not deploying correctly ([#&#8203;33609](https://github.com/aws/aws-cdk/issues/33609)) ([a1e2afe](https://github.com/aws/aws-cdk/commit/a1e2afe67cc907fa278503ebc886aa3b5bf97887)), closes [#&#8203;33510](https://github.com/aws/aws-cdk/issues/33510) ### [`v2.181.0`](https://github.com/aws/aws-cdk/releases/tag/v2.181.0) [Compare Source](https://github.com/aws/aws-cdk/compare/v2.180.0...v2.181.0) ##### Features - update L1 CloudFormation resource definitions ([#&#8203;33579](https://github.com/aws/aws-cdk/issues/33579)) ([a6bfe3c](https://github.com/aws/aws-cdk/commit/a6bfe3c7dec693c7ed50dde71f29041d92eb56f8)) - **rds:** scheduling modifications in the next scheduled maintenance window ([#&#8203;33448](https://github.com/aws/aws-cdk/issues/33448)) ([be2c7d0](https://github.com/aws/aws-cdk/commit/be2c7d0b79d1b021b02ba6be8399fab01e62b775)), closes [#&#8203;33447](https://github.com/aws/aws-cdk/issues/33447) - **stepfunctions:** add support for custom CSV delimiters in S3CsvItemReader ([#&#8203;33558](https://github.com/aws/aws-cdk/issues/33558)) ([43ae4fc](https://github.com/aws/aws-cdk/commit/43ae4fca35dbb6467d0f15cf575fde886c2093f8)), closes [#&#8203;33418](https://github.com/aws/aws-cdk/issues/33418) ##### Bug Fixes - **cognito:** re-adding threat protection capabilities and clarifying feature plans ([#&#8203;33565](https://github.com/aws/aws-cdk/issues/33565)) ([2f9bc41](https://github.com/aws/aws-cdk/commit/2f9bc41080966cb840e12eb05c66fa6f9192a959)), closes [#&#8203;33393](https://github.com/aws/aws-cdk/issues/33393) [#&#8203;32367](https://github.com/aws/aws-cdk/issues/32367) [#&#8203;32367](https://github.com/aws/aws-cdk/issues/32367) [#&#8203;33393](https://github.com/aws/aws-cdk/issues/33393) - **core:** `serviceTimeout` for `CustomResource` does not work with token ([#&#8203;33541](https://github.com/aws/aws-cdk/issues/33541)) ([bc91c70](https://github.com/aws/aws-cdk/commit/bc91c70129f4946f0a9b26a61c9cbf3a6fd8282d)), closes [#&#8203;33513](https://github.com/aws/aws-cdk/issues/33513) [/github.com/go-to-k/aws-cdk/blob/75e52619cd09f363882ff62561a53cd5cd79ab30/packages/aws-cdk-lib/core/lib/custom-resource.ts#L169](https://github.com/aws//github.com/go-to-k/aws-cdk/blob/75e52619cd09f363882ff62561a53cd5cd79ab30/packages/aws-cdk-lib/core/lib/custom-resource.ts/issues/L169) [/github.com/go-to-k/aws-cdk/blob/75e52619cd09f363882ff62561a53cd5cd79ab30/packages/aws-cdk-lib/core/lib/duration.ts#L332](https://github.com/aws//github.com/go-to-k/aws-cdk/blob/75e52619cd09f363882ff62561a53cd5cd79ab30/packages/aws-cdk-lib/core/lib/duration.ts/issues/L332) - **core:** cross-stack references to NestedStack list values produces invalid outputs ([#&#8203;32575](https://github.com/aws/aws-cdk/issues/32575)) ([f9252ab](https://github.com/aws/aws-cdk/commit/f9252ab927b092ac0f0862f315e7067fb928f09b)), closes [#&#8203;27233](https://github.com/aws/aws-cdk/issues/27233) - **core:** wrong priority for tag aspects ([#&#8203;33460](https://github.com/aws/aws-cdk/issues/33460)) ([0b9ffeb](https://github.com/aws/aws-cdk/commit/0b9ffeb6b2fb0f5e66634bda777b9745259b2b8d)) - **rds:** `monitoringInterval` in `DatabaseClusterProps` does not work with token ([#&#8203;33516](https://github.com/aws/aws-cdk/issues/33516)) ([f9b28b9](https://github.com/aws/aws-cdk/commit/f9b28b9392fadd53919fbca7f2e50f07a67936b1)), closes [#&#8203;33504](https://github.com/aws/aws-cdk/issues/33504) - **stepfunctions-tasks:** `SageMakerCreateTrainingJob` add sagemaker:AddTags permission ([#&#8203;32536](https://github.com/aws/aws-cdk/issues/32536)) ([3b07346](https://github.com/aws/aws-cdk/commit/3b073465a31dd2aee52671de52b483ef23d9cc6b)), closes [#&#8203;32294](https://github.com/aws/aws-cdk/issues/32294) *** #### Alpha modules (2.181.0-alpha.0) ##### Features - **eks-v2-alpha:** eks auto mode support ([#&#8203;33373](https://github.com/aws/aws-cdk/issues/33373)) ([e03d112](https://github.com/aws/aws-cdk/commit/e03d1126231cc99a69c83d1f0146aa36b4d2b8ef)) - **msk:** support for Kafka version 3.8.x and add deprecated labels to legacy versions ([#&#8203;33553](https://github.com/aws/aws-cdk/issues/33553)) ([29623d1](https://github.com/aws/aws-cdk/commit/29623d1c1f27f5733dec9b6ae0dc3efb53e28fe5)) - **redshift-alpha:** maintenance track name ([#&#8203;33552](https://github.com/aws/aws-cdk/issues/33552)) ([9ac3084](https://github.com/aws/aws-cdk/commit/9ac30842b304e2a9814caf02c21a331736c258ce)) ### [`v2.180.0`](https://github.com/aws/aws-cdk/releases/tag/v2.180.0) [Compare Source](https://github.com/aws/aws-cdk/compare/v2.179.0...v2.180.0) ##### Features - **cloudfront-origins:** read versioned access level ([#&#8203;33038](https://github.com/aws/aws-cdk/issues/33038)) ([315be88](https://github.com/aws/aws-cdk/commit/315be8876cf246196376f2470d53ff2c16fbd392)), closes [#&#8203;33034](https://github.com/aws/aws-cdk/issues/33034) - update L1 CloudFormation resource definitions ([#&#8203;33531](https://github.com/aws/aws-cdk/issues/33531)) ([93a3348](https://github.com/aws/aws-cdk/commit/93a3348ffc7ac9b833aa16e1d1aa766587fe7bca)), closes [/docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-ec2-security-group.html#cfn-ec2](https://github.com/aws//docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-ec2-security-group.html/issues/cfn-ec2) - **cloudfront:** support gRPC for distribution ([#&#8203;32535](https://github.com/aws/aws-cdk/issues/32535)) ([1b116b9](https://github.com/aws/aws-cdk/commit/1b116b9dd4f387d405160ba7ed6ef128eb3abbbe)), closes [#&#8203;32534](https://github.com/aws/aws-cdk/issues/32534) - **cloudfront:** vpc origins ([#&#8203;33318](https://github.com/aws/aws-cdk/issues/33318)) ([8f3e793](https://github.com/aws/aws-cdk/commit/8f3e79387ec34fa3a9f84ad0a0cfa8b22b456ae7)), closes [#&#8203;32396](https://github.com/aws/aws-cdk/issues/32396) - **cloudwatch:** throw `ValidationErrors` instead of untyped Errors ([#&#8203;33456](https://github.com/aws/aws-cdk/issues/33456)) ([6098816](https://github.com/aws/aws-cdk/commit/60988169cacd1e541058011f0c37993dd9b0f2e5)), closes [#&#8203;32569](https://github.com/aws/aws-cdk/issues/32569) - **codepipeline-actions:** support `timeout` for `ManualApprovalAction` ([#&#8203;33472](https://github.com/aws/aws-cdk/issues/33472)) ([7901f07](https://github.com/aws/aws-cdk/commit/7901f07b1d3d4358bca1506904837538a6527ed0)), closes [#&#8203;33473](https://github.com/aws/aws-cdk/issues/33473) - **kinesis:** support stream consumers ([#&#8203;32087](https://github.com/aws/aws-cdk/issues/32087)) ([f4453c7](https://github.com/aws/aws-cdk/commit/f4453c7bc9be0d84f44e67a1632e0f60e32805c8)), closes [#&#8203;32050](https://github.com/aws/aws-cdk/issues/32050) - **ses:** configurationset support default event bus and firehose as destination ([#&#8203;33093](https://github.com/aws/aws-cdk/issues/33093)) ([d8b0da7](https://github.com/aws/aws-cdk/commit/d8b0da7705823147473caa863bd6231515f7585d)), closes [#&#8203;32835](https://github.com/aws/aws-cdk/issues/32835) [#&#8203;30671](https://github.com/aws/aws-cdk/issues/30671) ##### Bug Fixes - **core:** adding warnings to alert when properties will be overwritten ([#&#8203;33507](https://github.com/aws/aws-cdk/issues/33507)) ([b06daf8](https://github.com/aws/aws-cdk/commit/b06daf836bcbb690d34d1a3439fd6db36cb1f203)), closes [#&#8203;32468](https://github.com/aws/aws-cdk/issues/32468) - **lambda:** updating addToRolePolicy to avoid circular dependency potential (under feature flag) ([#&#8203;33291](https://github.com/aws/aws-cdk/issues/33291)) ([d946eb7](https://github.com/aws/aws-cdk/commit/d946eb729a731c1877a95f3db9b6aceab84a6a15)) - **logs:** `DataProtectionPolicy` template key must be PascalCase ([#&#8203;33462](https://github.com/aws/aws-cdk/issues/33462)) ([0379878](https://github.com/aws/aws-cdk/commit/0379878c2f573450f1839a61580e1332dad999eb)), closes [#&#8203;33408](https://github.com/aws/aws-cdk/issues/33408) [#&#8203;26728](https://github.com/aws/aws-cdk/issues/26728) - **stepfunctions:** disabling logging still requires LogGroup ([#&#8203;30816](https://github.com/aws/aws-cdk/issues/30816)) ([a2cd7ae](https://github.com/aws/aws-cdk/commit/a2cd7ae80168610db2df515a11e2a68571c662fb)), closes [#&#8203;30814](https://github.com/aws/aws-cdk/issues/30814) - **stepfunctions:** various JSONata query language fix ([#&#8203;33404](https://github.com/aws/aws-cdk/issues/33404)) ([b16fac2](https://github.com/aws/aws-cdk/commit/b16fac2cc3e86f7409c7ef990338e9c0e1d96c2f)), closes [#&#8203;33403](https://github.com/aws/aws-cdk/issues/33403) [#&#8203;33374](https://github.com/aws/aws-cdk/issues/33374) [#&#8203;33396](https://github.com/aws/aws-cdk/issues/33396) [/github.com/aws/aws-cdk/blob/main/packages/aws-cdk-lib/aws-stepfunctions/lib/states/state.ts#L398](https://github.com/aws//github.com/aws/aws-cdk/blob/main/packages/aws-cdk-lib/aws-stepfunctions/lib/states/state.ts/issues/L398) *** #### Alpha modules (2.180.0-alpha.0) ##### Features - **glue-alpha:** include extra jars parameter in pyspark jobs ([#&#8203;33238](https://github.com/aws/aws-cdk/issues/33238)) ([be3bce3](https://github.com/aws/aws-cdk/commit/be3bce385c18af99b1fb3d0940a2cbec4f51e8d3)), closes [#&#8203;33225](https://github.com/aws/aws-cdk/issues/33225) ### [`v2.179.0`](https://github.com/aws/aws-cdk/releases/tag/v2.179.0) [Compare Source](https://github.com/aws/aws-cdk/compare/v2.178.2...v2.179.0) ##### ⚠ BREAKING CHANGES TO EXPERIMENTAL FEATURES - **eks:** `kubectlLayer` property is now required in EKS `Cluster` and `FargateCluster` constructs. The default value for `kubectlLayer` is outdated and hence being removed. You can specify your own kubectlLayer version based on your Kubernetes version. ##### Features - reset L1 CloudFormation resource definitions to last known working version ([#&#8203;33481](https://github.com/aws/aws-cdk/pull/33481)) - **cloudtrail:** throw `ValidationErrors` instead of untyped Errors ([#&#8203;33455](https://github.com/aws/aws-cdk/issues/33455)) ([11a75b2](https://github.com/aws/aws-cdk/commit/11a75b287bbbc6067df52cf5946634877351d515)), closes [#&#8203;32569](https://github.com/aws/aws-cdk/issues/32569) - update L1 CloudFormation resource definitions ([#&#8203;33445](https://github.com/aws/aws-cdk/issues/33445)) ([531280f](https://github.com/aws/aws-cdk/commit/531280f0bf8f73d173cd420a1642277119181dca)) - update L1 CloudFormation resource definitions ([#&#8203;33475](https://github.com/aws/aws-cdk/issues/33475)) ([a7cacb8](https://github.com/aws/aws-cdk/commit/a7cacb8278896d54a2e7ff6384a8d4218fed0b33)) - update L1 CloudFormation resource definitions ([#&#8203;33476](https://github.com/aws/aws-cdk/issues/33476)) ([3a61695](https://github.com/aws/aws-cdk/commit/3a61695730d7b1d8e0023aca542e039ed7f59011)) - update L1 CloudFormation resource definitions ([#&#8203;33480](https://github.com/aws/aws-cdk/issues/33480)) ([67e596e](https://github.com/aws/aws-cdk/commit/67e596e9b324f4a255f2d9e8189d108404ecc630)) - **apigateway:** resource policy configuration for private API ([#&#8203;32719](https://github.com/aws/aws-cdk/issues/32719)) ([628e649](https://github.com/aws/aws-cdk/commit/628e6498392016c08cf55c52e0615afcbc2419ed)), closes [#&#8203;31660](https://github.com/aws/aws-cdk/issues/31660) [#&#8203;31692](https://github.com/aws/aws-cdk/issues/31692) - **apigatewayv2:** stage support `detailedMetricsEnabled` property ([#&#8203;33267](https://github.com/aws/aws-cdk/issues/33267)) ([0abcacf](https://github.com/aws/aws-cdk/commit/0abcacffc18044cdb52b9bfe207033d172002783)), closes [#&#8203;33222](https://github.com/aws/aws-cdk/issues/33222) - **apigatewayv2-integrations:** sqs integrations ([#&#8203;29646](https://github.com/aws/aws-cdk/issues/29646)) ([775c009](https://github.com/aws/aws-cdk/commit/775c009151f0208a3757daff0bae48339f523cb6)), closes [#&#8203;24785](https://github.com/aws/aws-cdk/issues/24785) - **appconfig:** throw `ValidationError` instead of untyped Errors ([#&#8203;33386](https://github.com/aws/aws-cdk/issues/33386)) ([b4efb1e](https://github.com/aws/aws-cdk/commit/b4efb1eeeb2377ad9ba3504ff518dbc052d7d9f7)), closes [#&#8203;32569](https://github.com/aws/aws-cdk/issues/32569) - **assertions:** throw typed errors ([#&#8203;33382](https://github.com/aws/aws-cdk/issues/33382)) ([0f57bd3](https://github.com/aws/aws-cdk/commit/0f57bd33bf48d18a622f6f54131227bd70bb7325)), closes [#&#8203;32569](https://github.com/aws/aws-cdk/issues/32569) - **assets:** throw `ValidationError` instead of untyped Errors ([#&#8203;33383](https://github.com/aws/aws-cdk/issues/33383)) ([19cf902](https://github.com/aws/aws-cdk/commit/19cf902bc0c21868a429b19c43e7a7978de6bda0)), closes [#&#8203;32569](https://github.com/aws/aws-cdk/issues/32569) - **autoscaling:** throw `ValidationError` instead of untyped Errors ([#&#8203;33388](https://github.com/aws/aws-cdk/issues/33388)) ([d3f3309](https://github.com/aws/aws-cdk/commit/d3f3309fb43b80bb630e57951fc8531deb4a0dd9)), closes [#&#8203;32569](https://github.com/aws/aws-cdk/issues/32569) - **backup:** throw `ValidationError` instead of untyped Errors ([#&#8203;33387](https://github.com/aws/aws-cdk/issues/33387)) ([48f2bf7](https://github.com/aws/aws-cdk/commit/48f2bf7de2911563f19abdfa54bcd987376ffa83)), closes [#&#8203;32569](https://github.com/aws/aws-cdk/issues/32569) - **batch:** throw `ValidationError` instead of untyped Errors ([#&#8203;33389](https://github.com/aws/aws-cdk/issues/33389)) ([c83ca82](https://github.com/aws/aws-cdk/commit/c83ca82aa7bbd1cad52d66ce0a047651559967f5)), closes [#&#8203;32569](https://github.com/aws/aws-cdk/issues/32569) - **certificatemanager:** throw `ValidationErrors` instead of untyped Errors ([#&#8203;33440](https://github.com/aws/aws-cdk/issues/33440)) ([76848e4](https://github.com/aws/aws-cdk/commit/76848e47742ea94ebf73ce2900d217a78c6a794b)), closes [#&#8203;32569](https://github.com/aws/aws-cdk/issues/32569) - **chatbot:** throw `ValidationError` instead of untyped Error ([#&#8203;33439](https://github.com/aws/aws-cdk/issues/33439)) ([ede5842](https://github.com/aws/aws-cdk/commit/ede58421df045196d7f9e196fc38cc9ffa10eaf5)), closes [#&#8203;32569](https://github.com/aws/aws-cdk/issues/32569) - **cloudformation-include:** throw `ValidationError` instead of untyped Errors ([#&#8203;33391](https://github.com/aws/aws-cdk/issues/33391)) ([92a9a73](https://github.com/aws/aws-cdk/commit/92a9a73ae9b97b3a5ca2a305f41d657b911db2a6)), closes [#&#8203;32569](https://github.com/aws/aws-cdk/issues/32569) - **cloudfront:** throw `ValidationErrors` instead of untyped Errors ([#&#8203;33438](https://github.com/aws/aws-cdk/issues/33438)) ([c08c7f0](https://github.com/aws/aws-cdk/commit/c08c7f0a5b68a4af668d84bb21f0dbafdfe90715)), closes [#&#8203;32569](https://github.com/aws/aws-cdk/issues/32569) - **codebuild:** attribute-based compute type for Fleet ([#&#8203;32251](https://github.com/aws/aws-cdk/issues/32251)) ([9fd62cb](https://github.com/aws/aws-cdk/commit/9fd62cb79d0f263b216b8b5ff2a0f0ecb0df157b)) - **codepipeline-actions:** support commands action ([#&#8203;31667](https://github.com/aws/aws-cdk/issues/31667)) ([2637d46](https://github.com/aws/aws-cdk/commit/2637d467c6e571f99859efbeb4fa3cc5a2c52345)), closes [#&#8203;31666](https://github.com/aws/aws-cdk/issues/31666) - **cognito:** add analyticsConfiguration to UserPoolClient ([#&#8203;32862](https://github.com/aws/aws-cdk/issues/32862)) ([1c98881](https://github.com/aws/aws-cdk/commit/1c988814753c0fd2e8a7daff00918d6d03072812)), closes [#&#8203;32837](https://github.com/aws/aws-cdk/issues/32837) - **cognito:** choice-based authentication (passwordless sign-in / passkey sign-in) ([#&#8203;32369](https://github.com/aws/aws-cdk/issues/32369)) ([9a6e5cc](https://github.com/aws/aws-cdk/commit/9a6e5cc13ee000ee35ee86b4e91183548a1e47b5)), closes [#&#8203;32265](https://github.com/aws/aws-cdk/issues/32265) [#&#8203;32367](https://github.com/aws/aws-cdk/issues/32367) [#&#8203;32273](https://github.com/aws/aws-cdk/issues/32273) - **cx-api:** throw `CloudAssemblyError` instead of untyped Errors ([#&#8203;33390](https://github.com/aws/aws-cdk/issues/33390)) ([ae95d95](https://github.com/aws/aws-cdk/commit/ae95d9571c0fb4469e5c91ffc443ff04e965d1db)), closes [#&#8203;32569](https://github.com/aws/aws-cdk/issues/32569) - **eks:** add L2 constructs to support EKS Hybrid Nodes ([#&#8203;32389](https://github.com/aws/aws-cdk/issues/32389)) ([b91965c](https://github.com/aws/aws-cdk/commit/b91965c2f041eb62a70346974bc38e05860d0ed2)) - **eks:** make kubectlLayer property required from optional ([#&#8203;32930](https://github.com/aws/aws-cdk/issues/32930)) ([b11f663](https://github.com/aws/aws-cdk/commit/b11f6637710d730c83ebb0a8a81a3ac0b550b7db)), closes [/github.com/aws/aws-cdk/blob/main/packages/aws-cdk-lib/package.json#L123](https://github.com/aws//github.com/aws/aws-cdk/blob/main/packages/aws-cdk-lib/package.json/issues/L123) - **eks:** support eks with k8s 1.32 ([#&#8203;33339](https://github.com/aws/aws-cdk/issues/33339)) ([3490d2e](https://github.com/aws/aws-cdk/commit/3490d2ef8071ae040f38b35901a5801c60163817)) - **elasticloadbalancingv2:** minimum Loadbalancer Capacity Unit (LCU) reservation ([#&#8203;32382](https://github.com/aws/aws-cdk/issues/32382)) ([9b178c1](https://github.com/aws/aws-cdk/commit/9b178c1dd8c2dc4507dc9ce812d3118397907283)) - **events-targets:** allow all ECS TaskOverrides ([#&#8203;32344](https://github.com/aws/aws-cdk/issues/32344)) ([aebb331](https://github.com/aws/aws-cdk/commit/aebb331e60b736969f5bccbf5b427e11dc5fc997)), closes [#&#8203;32217](https://github.com/aws/aws-cdk/issues/32217) [#&#8203;32217](https://github.com/aws/aws-cdk/issues/32217) [/github.com/aws/aws-cdk/blob/1b7265bf5cc623b2e362266c96ce866df539581f/packages/aws-cdk-lib/aws-events-targets/lib/ecs-task.ts#L225-L227](https://github.com/aws//github.com/aws/aws-cdk/blob/1b7265bf5cc623b2e362266c96ce866df539581f/packages/aws-cdk-lib/aws-events-targets/lib/ecs-task.ts/issues/L225-L227) - **logs:** support regex patterns for JSON Metrics filters ([#&#8203;30741](https://github.com/aws/aws-cdk/issues/30741)) ([c89afe3](https://github.com/aws/aws-cdk/commit/c89afe302abb249c631d9855aca205b3ed8e4c3a)), closes [#&#8203;30451](https://github.com/aws/aws-cdk/issues/30451) - **pipelines:** throw `ValidationError` instead of untyped Errors ([#&#8203;33385](https://github.com/aws/aws-cdk/issues/33385)) ([14b1098](https://github.com/aws/aws-cdk/commit/14b109851d5dd05c28f90903359835bf01578399)), closes [#&#8203;32569](https://github.com/aws/aws-cdk/issues/32569) - **stepfunctions-tasks:** allow region override in call-rest-api task ([#&#8203;33252](https://github.com/aws/aws-cdk/issues/33252)) ([59470c5](https://github.com/aws/aws-cdk/commit/59470c5698a984baeccc45ab8875f59bfa63fb3c)) - update L1 CloudFormation resource definitions ([#&#8203;33363](https://github.com/aws/aws-cdk/issues/33363)) ([ba485ef](https://github.com/aws/aws-cdk/commit/ba485efe3b018b9236ef4bac5ba41f63926336ce)), closes [/docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-ec2-security-group.html#cfn-ec2](https://github.com/aws//docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-ec2-security-group.html/issues/cfn-ec2) - **rds:** support Database Insights for Aurora databases ([#&#8203;32851](https://github.com/aws/aws-cdk/issues/32851)) ([f6ed4be](https://github.com/aws/aws-cdk/commit/f6ed4bef8a8f7ab64eefc553714dd066048307af)), closes [#&#8203;32680](https://github.com/aws/aws-cdk/issues/32680) ##### Bug Fixes - **cli:** cdk diff fails when deploy role requires tags ([#&#8203;33340](https://github.com/aws/aws-cdk/issues/33340)) ([f1d9a7d](https://github.com/aws/aws-cdk/commit/f1d9a7d9053d9c5eef5fba0a215f7658cff6ec3f)) - **cli:** do not print credentials refreshed by plugins ([#&#8203;33398](https://github.com/aws/aws-cdk/issues/33398)) ([a7d7373](https://github.com/aws/aws-cdk/commit/a7d73732cc41db518bd92eac3fd2e0f159ab3b7a)), closes [#&#8203;33394](https://github.com/aws/aws-cdk/issues/33394) [#&#8203;33394](https://github.com/aws/aws-cdk/issues/33394) - **cli:** init templates still assume the same versions ([#&#8203;33449](https://github.com/aws/aws-cdk/issues/33449)) ([523e0f0](https://github.com/aws/aws-cdk/commit/523e0f00e7d135078e07834ca941dd52196f5212)) - **cli:** old setInterval remains and is not cleared in garbage collection ([#&#8203;32985](https://github.com/aws/aws-cdk/issues/32985)) ([a2166e2](https://github.com/aws/aws-cdk/commit/a2166e2e1bd0a757a2adfdb5ef02d421945ca943)), closes [#&#8203;32742](https://github.com/aws/aws-cdk/issues/32742) [/github.com/aws/aws-cdk/blob/899965d6147829b8f8ac52ac8c1350de50d7b6d0/packages/aws-cdk/lib/api/garbage-collection/progress-printer.ts#L44](https://github.com/aws//github.com/aws/aws-cdk/blob/899965d6147829b8f8ac52ac8c1350de50d7b6d0/packages/aws-cdk/lib/api/garbage-collection/progress-printer.ts/issues/L44) - **eks:** `cluster.addHelmChart` ignores `skipCrds` ([#&#8203;31832](https://github.com/aws/aws-cdk/issues/31832)) ([ee63467](https://github.com/aws/aws-cdk/commit/ee63467c76c6b1c4449b377b9c53e33eaf6dc061)), closes [#&#8203;31831](https://github.com/aws/aws-cdk/issues/31831) - **opensearchservice:** wrong iops limit checks ([#&#8203;33401](https://github.com/aws/aws-cdk/issues/33401)) ([1d15d49](https://github.com/aws/aws-cdk/commit/1d15d492f137ab1dec871db4f7409ced4c550d3c)), closes [#&#8203;29711](https://github.com/aws/aws-cdk/issues/29711) - do not skip bundling for stacks during CDK Import, otherwise fails ([#&#8203;33322](https://github.com/aws/aws-cdk/issues/33322)) ([5160796](https://github.com/aws/aws-cdk/commit/5160796d2f5282a49f662e62082c73cb525f5e19)), closes [#&#8203;31999](https://github.com/aws/aws-cdk/issues/31999) [#&#8203;31677](https://github.com/aws/aws-cdk/issues/31677) [#&#8203;31999](https://github.com/aws/aws-cdk/issues/31999) [#&#8203;31677](https://github.com/aws/aws-cdk/issues/31677) [#&#8203;9540](https://github.com/aws/aws-cdk/issues/9540) [#&#8203;17666](https://github.com/aws/aws-cdk/issues/17666) - **lambda-event-sources:** `SelfManagedKafkaEventSource` cannot be used in NPM symlinked workspaces ([#&#8203;32937](https://github.com/aws/aws-cdk/issues/32937)) ([fe656af](https://github.com/aws/aws-cdk/commit/fe656af00174fd134c29cbcf289f0e73f2e9db5c)) - **stepfunctions-tasks:** `CallAwsServiceCrossRegion` doesn't work with WAIT_FOR_TASK_TOKEN ([#&#8203;32807](https://github.com/aws/aws-cdk/issues/32807)) ([800b775](https://github.com/aws/aws-cdk/commit/800b775fbce97b4ffec0d5709f295929d170ea7f)), closes [#&#8203;32746](https://github.com/aws/aws-cdk/issues/32746) [/github.com/aws/aws-cdk/blob/bbdd42c8f45916d5c6945f3429916f6199d2ec66/packages/aws-cdk-lib/aws-stepfunctions-tasks/lib/lambda/invoke.ts#L146-L165](https://github.com/aws//github.com/aws/aws-cdk/blob/bbdd42c8f45916d5c6945f3429916f6199d2ec66/packages/aws-cdk-lib/aws-stepfunctions-tasks/lib/lambda/invoke.ts/issues/L146-L165) - **stepfunctions-tasks:** CallAwsServiceCrossRegion doesn't work with WAIT_FOR_TASK_TOKEN ([cbd8ecf](https://github.com/aws/aws-cdk/commit/cbd8ecf95f0724f88f643bdc1d2c0b1256a8bed1)) - **vpc:** typo VPC Endpoint Payment Cryptography ([#&#8203;33018](https://github.com/aws/aws-cdk/issues/33018)) ([51e671f](https://github.com/aws/aws-cdk/commit/51e671f19c7b5ff08e342aad5fceae75615c7410)), closes [#&#8203;33017](https://github.com/aws/aws-cdk/issues/33017) *** #### Alpha modules (2.179.0-alpha.0) ##### ⚠ BREAKING CHANGES TO EXPERIMENTAL FEATURES - **cognito-identitypool-alpha:** The `IdentityPoolRoleAttachment` construct and `IdentityPool.addRoleMappings()` function will no longer exist. This is to disambiguate that only one role attachment can exist per Identity Pool. If you are using the `IdentityPool` construct, this change will trigger a redeployment. If you need to add role mappings, please do so when the `IdentityPool` is created. ##### Features - **eks-v2-alpha:** support eks with k8s 1.32 ([#&#8203;33344](https://github.com/aws/aws-cdk/issues/33344)) ([7175a04](https://github.com/aws/aws-cdk/commit/7175a042b66426864fae5199715f7076f4a95335)) - **ivs:** support Multitrack Video ([#&#8203;33370](https://github.com/aws/aws-cdk/issues/33370)) ([29d1945](https://github.com/aws/aws-cdk/commit/29d194513fb9da44c9f2c1b28484381d7fb9feb3)) ##### Bug Fixes - **cognito-identitypool-alpha:** remove `RoleAttachment` construct ([#&#8203;33305](https://github.com/aws/aws-cdk/issues/33305)) ([9449f9c](https://github.com/aws/aws-cdk/commit/9449f9c805b045bab11a27b21924470672e804fe)), closes [#&#8203;23449](https://github.com/aws/aws-cdk/issues/23449) - **integ-tests:** http flattenResponse ([#&#8203;30361](https://github.com/aws/aws-cdk/issues/30361)) ([4744ee5](https://github.com/aws/aws-cdk/commit/4744ee578116add497e5314a30629939925b015c)), closes [#&#8203;30327](https://github.com/aws/aws-cdk/issues/30327) - **msk:** allow both sasl/scram and iam auth ([#&#8203;31743](https://github.com/aws/aws-cdk/issues/31743)) ([fbcb732](https://github.com/aws/aws-cdk/commit/fbcb732ed5224d2ad5a8218229762efa13db689e)), closes [/github.com/aws/aws-cdk/pull/14647#issuecomment-2129517358](https://github.com/aws//github.com/aws/aws-cdk/pull/14647/issues/issuecomment-2129517358) [#&#8203;32779](https://github.com/aws/aws-cdk/issues/32779) ### [`v2.178.2`](https://github.com/aws/aws-cdk/releases/tag/v2.178.2) [Compare Source](https://github.com/aws/aws-cdk/compare/v2.178.1...v2.178.2) ##### Bug Fixes - **cli:** do not print credentials refreshed by plugins ([#&#8203;33398](https://github.com/aws/aws-cdk/issues/33398)) ([727d42f](https://github.com/aws/aws-cdk/commit/727d42f3b1677ec97d9358588667da1bfc2c1151)), closes [#&#8203;33394](https://github.com/aws/aws-cdk/issues/33394) [#&#8203;33394](https://github.com/aws/aws-cdk/issues/33394) *** #### Alpha modules (2.178.2-alpha.0) ### [`v2.178.1`](https://github.com/aws/aws-cdk/releases/tag/v2.178.1) [Compare Source](https://github.com/aws/aws-cdk/compare/v2.178.0...v2.178.1) ##### Bug Fixes - **cli:** sdk logging is always present even when not turned on ([#&#8203;33324](https://github.com/aws/aws-cdk/issues/33324)) ([29a9a6d](https://github.com/aws/aws-cdk/commit/29a9a6d9c2ce8b24564ae521563b061276a93e87)), closes [#&#8203;33320](https://github.com/aws/aws-cdk/issues/33320) - **custom-resource:** provider framework lambda missing GetFunction permission ([#&#8203;33315](https://github.com/aws/aws-cdk/issues/33315)) *** #### Alpha modules (2.178.1-alpha.0) ### [`v2.178.0`](https://github.com/aws/aws-cdk/releases/tag/v2.178.0) [Compare Source](https://github.com/aws/aws-cdk/compare/v2.177.0...v2.178.0) ##### Features - **apigateway:** throw `ValidationError` instead of untyped errors ([#&#8203;33075](https://github.com/aws/aws-cdk/issues/33075)) ([04efe6c](https://github.com/aws/aws-cdk/commit/04efe6cf9d1ba9e524f34c2699414053ee7fe444)), closes [#&#8203;32569](https://github.com/aws/aws-cdk/issues/32569) - **applicationautoscaling:** throw `ValidationError` instead of untyped errors ([#&#8203;33172](https://github.com/aws/aws-cdk/issues/33172)) ([abd4a3e](https://github.com/aws/aws-cdk/commit/abd4a3e997e2a456d31b9bb4669b22e12c364c01)), closes [#&#8203;32569](https://github.com/aws/aws-cdk/issues/32569) - **appmesh:** throw `ValidationError` istead of untyped Errors ([#&#8203;33245](https://github.com/aws/aws-cdk/issues/33245)) ([ba2f5c8](https://github.com/aws/aws-cdk/commit/ba2f5c862cf1d1a52d399ba82639650d61c7d549)), closes [#&#8203;32569](https://github.com/aws/aws-cdk/issues/32569) - **appsync:** add L2 constructs for AWS AppSync Events ([#&#8203;32505](https://github.com/aws/aws-cdk/issues/32505)) ([9ae1d34](https://github.com/aws/aws-cdk/commit/9ae1d34b128a0a4332fb43ab2c5ccacbdb337a51)), closes [#&#8203;32004](https://github.com/aws/aws-cdk/issues/32004) - **appsync:** throw `ValidationError` instead of untyped errors ([#&#8203;33206](https://github.com/aws/aws-cdk/issues/33206)) ([ab9dd0a](https://github.com/aws/aws-cdk/commit/ab9dd0a40a9ad703004f68e83d23a0e684734f57)), closes [#&#8203;32569](https://github.com/aws/aws-cdk/issues/32569) - **bedrock:** support Luma AI's Ray2 visual AI model ([#&#8203;33163](https://github.com/aws/aws-cdk/issues/33163)) ([01abd83](https://github.com/aws/aws-cdk/commit/01abd83652632aa705ac8b972baf86c12deb5a64)) - **cloudfront:** add origin group selection criteria to L2 Distribution and L2 OriginGroup ([#&#8203;32740](https://github.com/aws/aws-cdk/issues/32740)) ([1b35c4e](https://github.com/aws/aws-cdk/commit/1b35c4e49feee8457f2d0964de04d36eea048291)) - **cognito:** support password history size ([#&#8203;33164](https://github.com/aws/aws-cdk/issues/33164)) ([988043e](https://github.com/aws/aws-cdk/commit/988043e70673f179e3f6ecde1bbaced2406d6dfe)), closes [#&#8203;33106](https://github.com/aws/aws-cdk/issues/33106) - **cognito:** throw `ValidationError` instead of untyped errors ([#&#8203;33170](https://github.com/aws/aws-cdk/issues/33170)) ([ecbe1bf](https://github.com/aws/aws-cdk/commit/ecbe1bf8e7e43d7423abfe93aa1c09189bf418c0)) - **custom-resource:** update default node runtime to node20 for China and Gov regions ([#&#8203;33112](https://github.com/aws/aws-cdk/issues/33112)) ([8c13cf2](https://github.com/aws/aws-cdk/commit/8c13cf236bf05122492bf125873861fc47a2a184)) - **dynamodb:** add pointintimerecoveryspecification and deprecate old ([#&#8203;33059](https://github.com/aws/aws-cdk/issues/33059)) ([aec64f0](https://github.com/aws/aws-cdk/commit/aec64f05c0598fa619dd1f973e90eef9155b94e3)), closes [#&#8203;32786](https://github.com/aws/aws-cdk/issues/32786) - **ecs:** `ExternalService` support daemon scheduling strategy ([#&#8203;32630](https://github.com/aws/aws-cdk/issues/32630)) ([361c7d3](https://github.com/aws/aws-cdk/commit/361c7d33e8735bf9a1ae611244c65deaa5bf6c3b)), closes [#&#8203;32538](https://github.com/aws/aws-cdk/issues/32538) - **ecs:** add `tls` property to a ServiceConnectService ([#&#8203;32605](https://github.com/aws/aws-cdk/issues/32605)) ([d32baf6](https://github.com/aws/aws-cdk/commit/d32baf6833bdad56ddecc332e45e3c30341455e6)), closes [#&#8203;32583](https://github.com/aws/aws-cdk/issues/32583) - **ecs:** support availability zone rebalancing ([#&#8203;32263](https://github.com/aws/aws-cdk/issues/32263)) ([a8e2622](https://github.com/aws/aws-cdk/commit/a8e262274225b0757f96197c36e8d7090d4390be)), closes [#&#8203;32226](https://github.com/aws/aws-cdk/issues/32226) - **ecs:** support container version consistency ([#&#8203;32225](https://github.com/aws/aws-cdk/issues/32225)) ([37df0d2](https://github.com/aws/aws-cdk/commit/37df0d29d4108389de2a42572913038a187a8228)), closes [#&#8203;32202](https://github.com/aws/aws-cdk/issues/32202) - **ecs:** mark TaskDefinition inferenceAccelerators as deprecated ([#&#8203;33248](https://github.com/aws/aws-cdk/issues/33248)) - **ecs-patterns:** add `containerCpu` and `containerMemoryLimitMiB` property to `ApplicationLoadBalancedFargateService` ([#&#8203;30920](https://github.com/aws/aws-cdk/issues/30920)) ([4dd97bc](https://github.com/aws/aws-cdk/commit/4dd97bc211810323b1dccf466e7b57b395d5c873)), closes [#&#8203;20638](https://github.com/aws/aws-cdk/issues/20638) [#&#8203;20638](https://github.com/aws/aws-cdk/issues/20638) - **elasticloadbalancingv2:** support AdvertiseTrustStoreCaNames for mTLS ([#&#8203;32678](https://github.com/aws/aws-cdk/issues/32678)) ([6a77e4f](https://github.com/aws/aws-cdk/commit/6a77e4f5cd872b4f3b985f1ea6eebd5d54aebd70)) - **kinesisfirehose:** graduate to stable 🚀 ([#&#8203;33296](https://github.com/aws/aws-cdk/issues/33296)) ([7aaac12](https://github.com/aws/aws-cdk/commit/7aaac1246cb016f37813a9f93bc780383db66edd)) - enable additional metadata collection (under feature flag) ([#&#8203;33232](https://github.com/aws/aws-cdk/issues/33232)) ([6b9e47a](https://github.com/aws/aws-cdk/commit/6b9e47a1529319561bc1040739fe02bac15895bf)), closes [/github.com/aws/aws-cdk/pull/33232/files#diff-81f821b1205e7040fc3103bf7c0114060a6d5c43ebd2994aa4ed5906e42c9c5fR33](https://github.com/aws//github.com/aws/aws-cdk/pull/33232/files/issues/diff-81f821b1205e7040fc3103bf7c0114060a6d5c43ebd2994aa4ed5906e42c9c5fR33) - metadata collection for construct methods ([#&#8203;33292](https://github.com/aws/aws-cdk/issues/33292)) ([bc96ee1](https://github.com/aws/aws-cdk/commit/bc96ee17a18c19b98e4ad052bed7c24da2371050)) - throw `ValidationError` instead of untyped errors in L1s ([#&#8203;33032](https://github.com/aws/aws-cdk/issues/33032)) ([1b666db](https://github.com/aws/aws-cdk/commit/1b666db6a55c2871dfca15bf7ddf1189fda7b17c)), closes [#&#8203;32569](https://github.com/aws/aws-cdk/issues/32569) - update L1 CloudFormation resource definitions ([#&#8203;33191](https://github.com/aws/aws-cdk/issues/33191)) ([1beaf83](https://github.com/aws/aws-cdk/commit/1beaf83cf38c4a511e3b2d60c5b0713576e50f1d)) - update L1 CloudFormation resource definitions ([#&#8203;33272](https://github.com/aws/aws-cdk/issues/33272)) ([80073c8](https://github.com/aws/aws-cdk/commit/80073c8d309ef30da5950ffe53a99820b01c3bf4)) - **lambda:** latest versions for ADOT Lambda Layers (v0.115.0) ([#&#8203;32783](https://github.com/aws/aws-cdk/issues/32783)) ([39e5578](https://github.com/aws/aws-cdk/commit/39e557869883d37b3fb0c2a57403c8496b5d917e)) - **rds:** support Aurora PostgreSQL Limitless Database PostgreSQL 16.6 ([#&#8203;33162](https://github.com/aws/aws-cdk/issues/33162)) ([111ffc2](https://github.com/aws/aws-cdk/commit/111ffc210d7230a25be4711f6623e3303a884496)), closes [/docs.aws.amazon.com/AmazonRDS/latest/AuroraPostgreSQLReleaseNotes/limitless-updates.html#16](https://github.com/aws//docs.aws.amazon.com/AmazonRDS/latest/AuroraPostgreSQLReleaseNotes/limitless-updates.html/issues/16) - **sns:** support high throughput mode for FIFO topics ([#&#8203;33056](https://github.com/aws/aws-cdk/issues/33056)) ([bfa0f15](https://github.com/aws/aws-cdk/commit/bfa0f15edaeac4be8f4dee66149db51432a6a8d2)) - **stepfunctions:** add support JSONata and variables ([#&#8203;32343](https://github.com/aws/aws-cdk/issues/32343)) ([0bb3d6f](https://github.com/aws/aws-cdk/commit/0bb3d6f5914ef5911d09046f98f69b7ea02e8691)), closes [#&#8203;32262](https://github.com/aws/aws-cdk/issues/32262) [#&#8203;32262](https://github.com/aws/aws-cdk/issues/32262) [/github.com/aws/aws-cdk/pull/32343#issuecomment-2524096740](https://github.com/aws//github.com/aws/aws-cdk/pull/32343/issues/issuecomment-2524096740) ##### Bug Fixes - **apigatewayv2:** incorrect arn function causing unwanted behavior ([#&#8203;33100](https://github.com/aws/aws-cdk/issues/33100)) ([ffe9863](https://github.com/aws/aws-cdk/commit/ffe98638de6c9cfe40eabc22980501c8943d5534)), closes [#&#8203;33218](https://github.com/aws/aws-cdk/issues/33218) - **batch:** support cfn parameters for managed compute environment properties minvcpus, maxvcpus, and spotbidpercentage ([#&#8203;32954](https://github.com/aws/aws-cdk/issues/32954)) ([5fef9e0](https://github.com/aws/aws-cdk/commit/5fef9e0eb0ad4faf8a85e98d7aa64c00fb4085b4)), closes [#&#8203;32905](https://github.com/aws/aws-cdk/issues/32905) - **cli:** array arguments in cdk.json are ignored ([#&#8203;33107](https://github.com/aws/aws-cdk/issues/33107)) ([2eff2bd](https://github.com/aws/aws-cdk/commit/2eff2bd3dabe1467376871e1aa9c56e8f99ce313)), closes [#&#8203;32814](https://github.com/aws/aws-cdk/issues/32814) - **custom-resources:** incorrect IAM prefix generated for CloudWatch actions ([#&#8203;33078](https://github.com/aws/aws-cdk/issues/33078)) ([c76f668](https://github.com/aws/aws-cdk/commit/c76f668863d858b4cd21bd19aae9afb1be43a34c)), closes [#&#8203;32968](https://github.com/aws/aws-cdk/issues/32968) - **sns:** topic policy is not created even if enforceSSL enabled ([#&#8203;31569](https://github.com/aws/aws-cdk/issues/31569)) ([b3975c5](https://github.com/aws/aws-cdk/commit/b3975c5dc83c5d82a23db079df42d70efe79530e)), closes [#&#8203;31558](https://github.com/aws/aws-cdk/issues/31558) *** #### Alpha modules (2.178.0-alpha.0) ##### ⚠ BREAKING CHANGES TO EXPERIMENTAL FEATURES - **ec2-alpha:** `operatingRegion` property under IPAM class is now renamed to `operatingRegions`. ##### ⚠ BREAKING CHANGES TO STABLE MODULES - **ecs:** The `TaskDefinitionProps.inferenceAccelerators` attribute and `TaskDefinition.addInferenceAccelerator()` method will be marked as deprecated. ##### Features - **ec2-alpha:** `ec2-alpha` module is now in Developer Preview ([#&#8203;33230](https://github.com/aws/aws-cdk/issues/33230)) ([a06f91a](https://github.com/aws/aws-cdk/commit/a06f91a79ff979b76f84dde4dec6f4d5db33e75f)) - **ec2-alpha:** add Transit Gateway L2 ([#&#8203;32956](https://github.com/aws/aws-cdk/issues/32956)) ([af44791](https://github.com/aws/aws-cdk/commit/af44791ab55188bad67bb4130f9139335708a2e5)) - **eks-v2:** new eks v2 alpha module ([#&#8203;33215](https://github.com/aws/aws-cdk/issues/33215)) ([ccc9f5e](https://github.com/aws/aws-cdk/commit/ccc9f5e213ed4001e31aaab9bb26ae472d511b77)) - **msk:** support ServerlessCluster ([#&#8203;32780](https://github.com/aws/aws-cdk/issues/32780)) ([86ce155](https://github.com/aws/aws-cdk/commit/86ce1550abf9809ca9c16a4842b7445f0cce34e3)), closes [#&#8203;28709](https://github.com/aws/aws-cdk/issues/28709) ##### Bug Fixes - **ec2-alpha:** readme updates, new unit tests, logic update ([#&#8203;33086](https://github.com/aws/aws-cdk/issues/33086)) ([bcb7f9b](https://github.com/aws/aws-cdk/commit/bcb7f9bb16d6a3df55ba8d49594031d18296ca6c)), closes [#&#8203;30762](https://github.com/aws/aws-cdk/issues/30762) ### [`v2.177.0`](https://github.com/aws/aws-cdk/releases/tag/v2.177.0) [Compare Source](https://github.com/aws/aws-cdk/compare/v2.176.0...v2.177.0) ##### Features - **apigatewayv2:** throw `ValidationError` instead of untyped errors ([#&#8203;33072](https://github.com/aws/aws-cdk/issues/33072)) ([8b472fc](https://github.com/aws/aws-cdk/commit/8b472fc5a68c2c83349dbfc11fa502f08d0bd5c8)), closes [#&#8203;32569](https://github.com/aws/aws-cdk/issues/32569) - **apigatewayv2:** throw `ValidationError` instead of untyped errors ([#&#8203;33082](https://github.com/aws/aws-cdk/issues/33082)) ([5377586](https://github.com/aws/aws-cdk/commit/537758607623d364529ccad78983eaa3f380762e)), closes [#&#8203;32569](https://github.com/aws/aws-cdk/issues/32569) - **apigatewayv2-authorizers:** throw `ValidationError` instead of untyped errors ([#&#8203;33076](https://github.com/aws/aws-cdk/issues/33076)) ([dd34d2e](https://github.com/aws/aws-cdk/commit/dd34d2e3286048eb5079d93b743c444c4ee1e9bf)), closes [#&#8203;32569](https://github.com/aws/aws-cdk/issues/32569) - **bedrock:** deprecate Claude 2, 2.1, Instant ([#&#8203;33058](https://github.com/aws/aws-cdk/issues/33058)) ([c0ed449](https://github.com/aws/aws-cdk/commit/c0ed4491a399cff5a098b0e4de389437c0cb55ba)) - **cli:** add --untrust option to bootstrap ([#&#8203;33091](https://github.com/aws/aws-cdk/issues/33091)) ([4713bdd](https://github.com/aws/aws-cdk/commit/4713bdd3bdd64e924c403c6c680d3205e4cef491)) - **cli:** show all information from waiter errors ([#&#8203;33035](https://github.com/aws/aws-cdk/issues/33035)) ([b512a72](https://github.com/aws/aws-cdk/commit/b512a72cd6457a4d95d7346338894a4e3ed503f3)) - **cli:** throw typed errors ([#&#8203;33005](https://github.com/aws/aws-cdk/issues/33005)) ([bf81b3c](https://github.com/aws/aws-cdk/commit/bf81b3ce17941f1f84b386f1e935150893b58315)), closes [#&#8203;32548](https://github.com/aws/aws-cdk/issues/32548) - **cloudfront-origins:** list access level for 404 response ([#&#8203;32059](https://github.com/aws/aws-cdk/issues/32059)) ([2b2443d](https://github.com/aws/aws-cdk/commit/2b2443de2f566f1595657f94195d8b61243fb800)), closes [#&#8203;13983](https://github.com/aws/aws-cdk/issues/13983) [#&#8203;31689](https://github.com/aws/aws-cdk/issues/31689) - **cognito:** managed login ([#&#8203;33097](https://github.com/aws/aws-cdk/issues/33097)) ([188f52d](https://github.com/aws/aws-cdk/commit/188f52d5750274b86c5ebc6ce55ec7cdbc6fc8a7)) - **elbv2:** throw `ValidationError` intsead of untyped errors ([#&#8203;33111](https://github.com/aws/aws-cdk/issues/33111)) ([cc1988a](https://github.com/aws/aws-cdk/commit/cc1988acd3a5d8f6a348140af8ca69176b18a52c)), closes [#&#8203;32569](https://github.com/aws/aws-cdk/issues/32569) - **lambda:** throw `ValidationError` instead of untyped errors ([#&#8203;33033](https://github.com/aws/aws-cdk/issues/33033)) ([a928748](https://github.com/aws/aws-cdk/commit/a928748717baf6d7eb90724c2fd7ee980eda284b)), closes [#&#8203;32569](https://github.com/aws/aws-cdk/issues/32569) - **rds:** throw `ValidationError` instead of untyped errors ([#&#8203;33042](https://github.com/aws/aws-cdk/issues/33042)) ([0b2db62](https://github.com/aws/aws-cdk/commit/0b2db62850913a1af5b0018aff7c71fad6a7714f)), closes [#&#8203;32569](https://github.com/aws/aws-cdk/issues/32569) - **route53:** throw `ValidationError` instead of untyped errors ([#&#8203;33110](https://github.com/aws/aws-cdk/issues/33110)) ([5e0f16d](https://github.com/aws/aws-cdk/commit/5e0f16d5f5782784a7b572caa6531460bb4eed50)), closes [#&#8203;32569](https://github.com/aws/aws-cdk/issues/32569) - **s3:** replicating objects ([#&#8203;30966](https://github.com/aws/aws-cdk/issues/30966)) ([9d8a7e2](https://github.com/aws/aws-cdk/commit/9d8a7e20fbdb0fa956bf01b0f1dc6b26173dd161)), closes [#&#8203;1680](https://github.com/aws/aws-cdk/issues/1680) [/docs.aws.amazon.com/ja_jp/AWSCloudFormation/latest/UserGuide/aws-properties-s3-bucket-replicationrulefilter.html#cfn-s3](https://github.com/aws//docs.aws.amazon.com/ja_jp/AWSCloudFormation/latest/UserGuide/aws-properties-s3-bucket-replicationrulefilter.html/issues/cfn-s3) [/docs.aws.amazon.com/ja_jp/AWSCloudFormation/latest/UserGuide/aws-properties-s3-bucket-replicationrule.html#cfn-s3](https://github.com/aws//docs.aws.amazon.com/ja_jp/AWSCloudFormation/latest/UserGuide/aws-properties-s3-bucket-replicationrule.html/issues/cfn-s3) [/docs.aws.amazon.com/ja_jp/AWSCloudFormation/latest/UserGuide/aws-properties-s3-bucket-replicationrule.html#cfn-s3](https://github.com/aws//docs.aws.amazon.com/ja_jp/AWSCloudFormation/latest/UserGuide/aws-properties-s3-bucket-replicationrule.html/issues/cfn-s3) - **s3:** throw `ValidationError` instead of untyped errors ([#&#8203;33031](https://github.com/aws/aws-cdk/issues/33031)) ([61e876b](https://github.com/aws/aws-cdk/commit/61e876bd3ed65742b9b4321d0a514dfc606313f4)), closes [#&#8203;32569](https://github.com/aws/aws-cdk/issues/32569) - **s3:** throw `ValidationError` instead of untyped errors ([#&#8203;33109](https://github.com/aws/aws-cdk/issues/33109)) ([aea8f3b](https://github.com/aws/aws-cdk/commit/aea8f3b4f1bf80d5ffa390fee2986d864cd842c5)), closes [#&#8203;32569](https://github.com/aws/aws-cdk/issues/32569) - **sns:** throw `ValidationError` instead of untyped errors ([#&#8203;33045](https://github.com/aws/aws-cdk/issues/33045)) ([7452462](https://github.com/aws/aws-cdk/commit/7452462550a100f5bd2dcab6f495c9f68bf0db4a)), closes [#&#8203;32569](https://github.com/aws/aws-cdk/issues/32569) - **sqs:** throw `ValidationError` instead of untyped errors ([#&#8203;33046](https://github.com/aws/aws-cdk/issues/33046)) ([6469412](https://github.com/aws/aws-cdk/commit/64694124e37113eaeed50635e5d1fb8db9badc89)), closes [#&#8203;32569](https://github.com/aws/aws-cdk/issues/32569) - **ssm:** throw `ValidationError` instead of untyped errors ([#&#8203;33067](https://github.com/aws/aws-cdk/issues/33067)) ([6677b33](https://github.com/aws/aws-cdk/commit/6677b3373157c71b104c97ae3bbece39e44e29de)), closes [#&#8203;32569](https://github.com/aws/aws-cdk/issues/32569) - **synthetics:** cleanup provisioned lambda and layers for canary ([#&#8203;32738](https://github.com/aws/aws-cdk/issues/32738)) ([bdb4a59](https://github.com/aws/aws-cdk/commit/bdb4a594c16a2051ca157f5f06f059d7edcf457c)) - **synthetics:** node playwright 1.0 and python selenium 4.1 runtime ([#&#8203;32245](https://github.com/aws/aws-cdk/issues/32245)) ([d68020b](https://github.com/aws/aws-cdk/commit/d68020b8c1dc957a7e99aefab31de91f5a304b31)), closes [/docs.aws.amazon.com/AmazonCloudWatch/latest/monitoring/CloudWatch_Synthetics_Library_python_selenium.html#CloudWatch_Synthetics_runtimeversion-syn-python-selenium-4](https://github.com/aws//docs.aws.amazon.com/AmazonCloudWatch/latest/monitoring/CloudWatch_Synthetics_Library_python_selenium.html/issues/CloudWatch_Synthetics_runtimeversion-syn-python-selenium-4) - **synthetics:** throw `ValidationError` instead of untyped errors ([#&#8203;33079](https://github.com/aws/aws-cdk/issues/33079)) ([e4703c1](https://github.com/aws/aws-cdk/commit/e4703c19598753a2b6f240b906d3e1da3954851f)), closes [#&#8203;32569](https://github.com/aws/aws-cdk/issues/32569) - **VpcV2:** add BYOIP IPv6 to VPCv2 ([#&#8203;32927](https://github.com/aws/aws-cdk/issues/32927)) ([93c95fc](https://github.com/aws/aws-cdk/commit/93c95fc1a4f547d309732ae7b32f65e3763c2d37)) - update L1 CloudFormation resource definitions ([#&#8203;33019](https://github.com/aws/aws-cdk/issues/33019)) ([e31924a](https://github.com/aws/aws-cdk/commit/e31924a7ec472f165382f5cca8b55b747e9c4208)), closes [/docs.aws.amazon.com/AmazonCloudWatch/latest/logs/CloudWatch-Logs-Transformation.html#CloudWatch-Logs-Transformation-parseRoute53](https://github.com/aws//docs.aws.amazon.com/AmazonCloudWatch/latest/logs/CloudWatch-Logs-Transformation.html/issues/CloudWatch-Logs-Transformation-parseRoute53) [/docs.aws.amazon.com/AmazonCloudWatch/latest/logs/CloudWatch-Logs-Transformation-Processors.html#CloudWatch-Logs-Transformation-parseRoute53](https://github.com/aws//docs.aws.amazon.com/AmazonCloudWatch/latest/logs/CloudWatch-Logs-Transformation-Processors.html/issues/CloudWatch-Logs-Transformation-parseRoute53) ##### Bug Fixes - **bundling:** enclosing metafile & tsconfig paths with quotes ([#&#8203;32725](https://github.com/aws/aws-cdk/issues/32725)) ([5410e10](https://github.com/aws/aws-cdk/commit/5410e1016b39ef3ef45a02da151ce40c83ce9e0d)) - **cli:** disallow import of internal cli libraries ([#&#8203;33021](https://github.com/aws/aws-cdk/issues/33021)) ([e5ac918](https://github.com/aws/aws-cdk/commit/e5ac918efbb66674176c81171e0d61affddcbeab)) - **cli:** trace output (-vv) is useless when files are uploaded ([#&#8203;33104](https://github.com/aws/aws-cdk/issues/33104)) ([d95add3](https://github.com/aws/aws-cdk/commit/d95add33fc3fe355752ff56cd37381cb808890b6)) - **cloudfront:** add validations on ResponseHeadersCorsBehavior.accessControlAllowMethods ([#&#8203;32769](https://github.com/aws/aws-cdk/issues/32769)) ([4c42800](https://github.com/aws/aws-cdk/commit/4c4280050e67d5779edeb09baf3287b431839aed)) - **cx-api:** cannot detect CloudAssembly across different libraries ([#&#8203;32998](https://github.com/aws/aws-cdk/issues/32998)) ([94ba772](https://github.com/aws/aws-cdk/commit/94ba7721b5c6adeb7974152d67d7b56524687cbe)), closes [aws/aws-cdk#31041](https://github.com/aws/aws-cdk/issues/31041) - **rds:** does not print all failed validations for DatabaseCluster props ([#&#8203;32841](https://github.com/aws/aws-cdk/issues/32841)) ([344d916](https://github.com/aws/aws-cdk/commit/344d916480f6facc437841033cd3d072ebc07010)), closes [#&#8203;32840](https://github.com/aws/aws-cdk/issues/32840) [#&#8203;32840](https://github.com/aws/aws-cdk/issues/32840) [/github.com/aws/aws-cdk/pull/32151/files#diff-49b4a9e1bf0b7db3ab71f4f08580da0cb2191d84605dc82a70c324bd122d5cf7R805-R828](https://github.com/aws//github.com/aws/aws-cdk/pull/32151/files/issues/diff-49b4a9e1bf0b7db3ab71f4f08580da0cb2191d84605dc82a70c324bd122d5cf7R805-R828) [/github.com/aws/aws-cdk/pull/32841/files#diff-5d08d37e744e173239879212c59fd45cb9a279349f3dfb1c66923cb015ed3a3](https://github.com/aws//github.com/aws/aws-cdk/pull/32841/files/issues/diff-5d08d37e744e173239879212c59fd45cb9a279349f3dfb1c66923cb015ed3a3) [/github.com/aws/aws-cdk/blob/3e4f3773bfa48b75bf0adc7d53d46bbec7714a9e/packages/aws-cdk-lib/aws-ec2/lib/volume.ts#L672-L743](https://github.com/aws//github.com/aws/aws-cdk/blob/3e4f3773bfa48b75bf0adc7d53d46bbec7714a9e/packages/aws-cdk-lib/aws-ec2/lib/volume.ts/issues/L672-L743) [/github.com/aws/aws-cdk/blob/3e4f3773bfa48b75bf0adc7d53d46bbec7714a9e/packages/aws-cdk-lib/aws-stepfunctions-tasks/lib/eventbridge-scheduler/create-schedule.ts#L324-L362](https://github.com/aws//github.com/aws/aws-cdk/blob/3e4f3773bfa48b75bf0adc7d53d46bbec7714a9e/packages/aws-cdk-lib/aws-stepfunctions-tasks/lib/eventbridge-scheduler/create-schedule.ts/issues/L324-L362) [/github.com/aws/aws-cdk/blob/3e4f3773bfa48b75bf0adc7d53d46bbec7714a9e/packages/aws-cdk-lib/aws-fsx/lib/lustre-file-system.ts#L360-L380](https://github.com/aws//github.com/aws/aws-cdk/blob/3e4f3773bfa48b75bf0adc7d53d46bbec7714a9e/packages/aws-cdk-lib/aws-fsx/lib/lustre-file-system.ts/issues/L360-L380) - **sqs:** does not print all failed validations for Queue props ([#&#8203;33070](https://github.com/aws/aws-cdk/issues/33070)) ([b77e937](https://github.com/aws/aws-cdk/commit/b77e9379e8d1e6d653042a2be35efb18983e1973)), closes [#&#8203;33098](https://github.com/aws/aws-cdk/issues/33098) [#&#8203;33098](https://github.com/aws/aws-cdk/issues/33098) - update fetchOpenPullRequests method to pass organisation in github action workflow for prioritization ([#&#8203;33073](https://github.com/aws/aws-cdk/issues/33073)) ([066cd4f](https://github.com/aws/aws-cdk/commit/066cd4f45e194cff5ed39582e50f5b95e83cbeed)) *** #### Alpha modules (2.177.0-alpha.0) ##### ⚠ BREAKING CHANGES TO EXPERIMENTAL FEATURES - **glue-alpha:** Developers must refactor their existing Job instantiation method calls to choose the right job type and language, and use the new constants static values to define the associated Job configuration settings. See the RFC and/or new README for examples. ##### Description of how you validated changes Increased unit test coverage to > 90%, consulted with Glue service team on best practices and sane defaults, updated integration tests. ##### Features - **amplify-alpha:** throw `ValidationError` instead of untyped errors ([#&#8203;33141](https://github.com/aws/aws-cdk/issues/33141)) ([a7cd9eb](https://github.com/aws/aws-cdk/commit/a7cd9ebc55f8fd70a469aea7dcf1c16919475982)), closes [#&#8203;32569](https://github.com/aws/aws-cdk/issues/32569) ##### Bug Fixes - **custom-resource-handlers:** do not allow unauthorized connection for iam OIDC connection (under feature flag) ([#&#8203;32921](https://github.com/aws/aws-cdk/issues/32921)) ([3e4f377](https://github.com/aws/aws-cdk/commit/3e4f3773bfa48b75bf0adc7d53d46bbec7714a9e)), closes [#&#8203;32920](https://github.com/aws/aws-cdk/issues/32920) ##### Code Refactoring - **glue-alpha:** Refactored glue-alpha L2 CDK construct RFC 0497 ([#&#8203;32521](https://github.com/aws/aws-cdk/issues/32521)) ([1a18dc9](https://github.com/aws/aws-cdk/commit/1a18dc951a3946430231b685bd3584f62055127c)) ### [`v2.176.0`](https://github.com/aws/aws-cdk/releases/tag/v2.176.0) [Compare Source](https://github.com/aws/aws-cdk/compare/v2.175.1...v2.176.0) ##### Features - **apigatewayv2-integrations:** `WebSocketMockIntegration` props ([#&#8203;30622](https://github.com/aws/aws-cdk/issues/30622)) ([a5a0168](https://github.com/aws/aws-cdk/commit/a5a0168cdf0f6a3429d67cb8d300d3a3f987d0fe)), closes [#&#8203;29661](https://github.com/aws/aws-cdk/issues/29661) - **codebuild:** add new BuildImages ([#&#8203;32525](https://github.com/aws/aws-cdk/issues/32525)) ([a734841](https://github.com/aws/aws-cdk/commit/a73484142ce78dbf0a63ef5bfdb9603062916399)) - **ecs:** enable Enhanced Observability for Container Insights ([#&#8203;32622](https://github.com/aws/aws-cdk/issues/32622)) ([79ab137](https://github.com/aws/aws-cdk/commit/79ab137aa07337972d1da459db9b1a698a2d4513)), closes [#&#8203;32618](https://github.com/aws/aws-cdk/issues/32618) - update L1 CloudFormation resource definitions ([#&#8203;32847](https://github.com/aws/aws-cdk/issues/32847)) ([9317203](https://github.com/aws/aws-cdk/commit/93172033e4a8346a86ee00017acba57b57f22aab)) - **appconfig:** environment deletion protection ([#&#8203;32737](https://github.com/aws/aws-cdk/issues/32737)) ([393e5c0](https://github.com/aws/aws-cdk/commit/393e5c0058560ff10acdc2892cc40ad542dc1629)) ##### Bug Fixes - **cli:** "no stack found in the main cloud assembly" ([#&#8203;32839](https://github.com/aws/aws-cdk/issues/32839)) ([3c0acce](https://github.com/aws/aws-cdk/commit/3c0acce39c6179ed18cc14d33622c69a4978ec97)), closes [aws/aws-cdk#32636](https://github.com/aws/aws-cdk/issues/32636) [#&#8203;32836](https://github.com/aws/aws-cdk/issues/32836) [#&#8203;32836](https://github.com/aws/aws-cdk/issues/32836) - **core:** use correct formatting for aggregate errors in `aws-cdk` ([#&#8203;32817](https://github.com/aws/aws-cdk/issues/32817)) ([97af31b](https://github.com/aws/aws-cdk/commit/97af31b4562506570632c79bde79c0aaee31826a)), closes [#&#8203;32237](https://github.com/aws/aws-cdk/issues/32237) - **elasticloadbalancingv2:** open, dual-stack-without-public-ipv4 ALB does not allow IPv6 inbound traffic (under feature flag) ([#&#8203;32765](https://github.com/aws/aws-cdk/issues/32765)) ([aff160b](https://github.com/aws/aws-cdk/commit/aff160b62a067bcd89feb97e020287e614e39111)), closes [#&#8203;32197](https://github.com/aws/aws-cdk/issues/32197) - **rds:** clusterScailabilityType is spelled wrong and should be clusterScalabilityType ([#&#8203;32825](https://github.com/aws/aws-cdk/issues/32825)) ([d39e835](https://github.com/aws/aws-cdk/commit/d39e8356643ab89fec791df725af4ad8f0bbaecd)), closes [#&#8203;32415](https://github.com/aws/aws-cdk/issues/32415) [#&#8203;32415](https://github.com/aws/aws-cdk/issues/32415) - **rds:** incorrect version definition of MySQL 8.4.3 ([#&#8203;32934](https://github.com/aws/aws-cdk/issues/32934)) ([3fbc785](https://github.com/aws/aws-cdk/commit/3fbc785522e25deb1a1167f2f655235ae3f2e762)), closes [#&#8203;32933](https://github.com/aws/aws-cdk/issues/32933) ##### Reverts - **prlint:** fail prlinter on codecov failures, with exemption label ([#&#8203;32867](https://github.com/aws/aws-cdk/issues/32867)) ([928d3bb](https://github.com/aws/aws-cdk/commit/928d3bb05da1be25159c58cb4f8b13c44a258ba1)), closes [aws/aws-cdk#32674](https://github.com/aws/aws-cdk/issues/32674) *** #### Alpha modules (2.176.0-alpha.0) ##### Features - **scheduler-targets:** add support for universal target ([#&#8203;32341](https://github.com/aws/aws-cdk/issues/32341)) ([021e6d6](https://github.com/aws/aws-cdk/commit/021e6d6ca6c01ecece485f7a51620fd42e632f0b)), closes [#&#8203;32328](https://github.com/aws/aws-cdk/issues/32328) ##### Bug Fixes - **msk:** clusterName validation in Cluster class is incorrect ([#&#8203;32792](https://github.com/aws/aws-cdk/issues/32792)) ([41ddd46](https://github.com/aws/aws-cdk/commit/41ddd46dc17e0afd551cce2737ecc11ed343de04)), closes [/github.com/aws/aws-cdk/pull/32505#discussion_r1891027876](https://github.com/aws//github.com/aws/aws-cdk/pull/32505/issues/discussion_r1891027876) ### [`v2.175.1`](https://github.com/aws/aws-cdk/releases/tag/v2.175.1) [Compare Source](https://github.com/aws/aws-cdk/compare/v2.175.0...v2.175.1) ##### Bug Fixes - **cli:** "no stack found in the main cloud assembly" ([#&#8203;32839](https://github.com/aws/aws-cdk/issues/32839)) ([7b68908](https://github.com/aws/aws-cdk/commit/7b68908dbebde02037d8b7650f4bb10d4c5db89d)), closes [aws/aws-cdk#32636](https://github.com/aws/aws-cdk/issues/32636) [#&#8203;32836](https://github.com/aws/aws-cdk/issues/32836) [#&#8203;32836](https://github.com/aws/aws-cdk/issues/32836) *** #### Alpha modules (2.175.1-alpha.0) ### [`v2.175.0`](https://github.com/aws/aws-cdk/releases/tag/v2.175.0) [Compare Source](https://github.com/aws/aws-cdk/compare/v2.174.1...v2.175.0) ##### Features - **ecs:** enable fault injection flag ([#&#8203;32598](https://github.com/aws/aws-cdk/issues/32598)) ([ed366ce](https://github.com/aws/aws-cdk/commit/ed366ce812a94066de04e9862d6cbd1083bf5d9c)) - **ecs:** warning when creating a service with the default minHealthyPercent ([#&#8203;31738](https://github.com/aws/aws-cdk/issues/31738)) ([3606deb](https://github.com/aws/aws-cdk/commit/3606deb5b519365d846e6e66406c835889827055)), closes [#&#8203;31705](https://github.com/aws/aws-cdk/issues/31705) - update L1 CloudFormation resource definitions ([#&#8203;32768](https://github.com/aws/aws-cdk/issues/32768)) ([107eed3](https://github.com/aws/aws-cdk/commit/107eed3b50e86246da03d6b59197452e2af0bfaf)) - **cli:** warn of non-existent stacks in `cdk destroy` ([#&#8203;32636](https://github.com/aws/aws-cdk/issues/32636)) ([c199378](https://github.com/aws/aws-cdk/commit/c199378667cb63ffe8636dda6b6316dcc6eb47e9)), closes [#&#8203;32545](https://github.com/aws/aws-cdk/issues/32545) [#&#8203;27179](https://github.com/aws/aws-cdk/issues/27179) [40aws-cdk-testing/cli-integ/tests/cli-integ-tests/cli.integtest.ts#L190](https://github.com/40aws-cdk-testing/cli-integ/tests/cli-integ-tests/cli.integtest.ts/issues/L190) [aws-cdk-testing/cli-integ/tests/cli-integ-tests/cli.integtest.ts#L286-L291](https://github.com/aws-cdk-testing/cli-integ/tests/cli-integ-tests/cli.integtest.ts/issues/L286-L291) - **eks:** update nodegroup gpu check ([#&#8203;32715](https://github.com/aws/aws-cdk/issues/32715)) ([693afea](https://github.com/aws/aws-cdk/commit/693afea86310fd444d237b9f70204fbf4bb5a68d)), closes [#&#8203;31347](https://github.com/aws/aws-cdk/issues/31347) - update L1 CloudFormation resource definitions ([#&#8203;32755](https://github.com/aws/aws-cdk/issues/32755)) ([8f97112](https://github.com/aws/aws-cdk/commit/8f97112c89c6b39e299b0cd437336bab11cfdaf8)) - **kms:** add sign and verify related grant methods ([#&#8203;32681](https://github.com/aws/aws-cdk/issues/32681)) ([86d2853](https://github.com/aws/aws-cdk/commit/86d2853a9a919669694a2448805a092839a7f4db)), closes [#&#8203;23185](https://github.com/aws/aws-cdk/issues/23185) ##### Bug Fixes - **cli:** cannot set environment variable `CI=false` ([#&#8203;32749](https://github.com/aws/aws-cdk/issues/32749)) ([26b361d](https://github.com/aws/aws-cdk/commit/26b361de357a3b83c59dc4931d4797328d220534)) - **cli:** requiresRefresh function does not respect null ([#&#8203;32666](https://github.com/aws/aws-cdk/issues/32666)) ([2abc23c](https://github.com/aws/aws-cdk/commit/2abc23c4cfdf27e8623fea3d3fbb71ad7e25dbbe)), closes [#&#8203;32653](https://github.com/aws/aws-cdk/issues/32653) [/github.com/smithy-lang/smithy-typescript/blob/main/packages/property-provider/src/memoize.ts#L27](https://github.com/aws//github.com/smithy-lang/smithy-typescript/blob/main/packages/property-provider/src/memoize.ts/issues/L27) - **cloudwatch:** render region and accountId when directly set on metrics ([#&#8203;32325](https://github.com/aws/aws-cdk/issues/32325)) ([c393481](https://github.com/aws/aws-cdk/commit/c3934817ea15bb3187f67112a1d56c13aa555524)), closes [#&#8203;28731](https://github.com/aws/aws-cdk/issues/28731) - **ecs:** outdated linux commands for `canContainersAccessInstanceRole=false` and also deprecate property ([#&#8203;32763](https://github.com/aws/aws-cdk/issues/32763)) ([bbdd42c](https://github.com/aws/aws-cdk/commit/bbdd42c8f45916d5c6945f3429916f6199d2ec66)), closes [#&#8203;28518](https://github.com/aws/aws-cdk/issues/28518) *** #### Alpha modules (2.175.0-alpha.0) ##### Features - **s3objectlambda:** open s3 access point arn ([#&#8203;32661](https://github.com/aws/aws-cdk/issues/32661)) ([0486b9c](https://github.com/aws/aws-cdk/commit/0486b9c5e2b4286499a9d3f87a0db7c95741fb6b)), closes [#&#8203;31950](https://github.com/aws/aws-cdk/issues/31950) ##### Bug Fixes - **apprunner:** the Service class does not implement IService ([#&#8203;32771](https://github.com/aws/aws-cdk/issues/32771)) ([3d56efa](https://github.com/aws/aws-cdk/commit/3d56efa20ef92761ed22f12e4f651856b6889be3)), closes [#&#8203;32745](https://github.com/aws/aws-cdk/issues/32745) - **integ-runner:** `ENOENT` no such file or directory 'recommended-feature-flags.json' ([#&#8203;32750](https://github.com/aws/aws-cdk/issues/32750)) ([f809b94](https://github.com/aws/aws-cdk/commit/f809b94d9952b8203221e73e177d2615c21248a8)) ### [`v2.174.1`](https://github.com/aws/aws-cdk/releases/tag/v2.174.1) [Compare Source](https://github.com/aws/aws-cdk/compare/v2.174.0...v2.174.1) ##### Features - update L1 CloudFormation resource definitions ([#&#8203;32755](https://github.com/aws/aws-cdk/issues/32755)) ([0bc32c9](https://github.com/aws/aws-cdk/commit/0bc32c9acca6f8524ca0c8d925534ede79950213)) - update L1 CloudFormation resource definitions ([#&#8203;32768](https://github.com/aws/aws-cdk/issues/32768)) ([20070a4](https://github.com/aws/aws-cdk/commit/20070a4cc77133e4fbdb556655cb3d0127620397)) *** #### Alpha modules (2.174.1-alpha.0) ### [`v2.174.0`](https://github.com/aws/aws-cdk/releases/tag/v2.174.0) [Compare Source](https://github.com/aws/aws-cdk/compare/v2.173.4...v2.174.0) ##### Features - **codebuild:** add new environment types ([#&#8203;32729](https://github.com/aws/aws-cdk/issues/32729)) ([a10c369](https://github.com/aws/aws-cdk/commit/a10c369bfc65c37217e289c06673889b1ff99476)), closes [#&#8203;32728](https://github.com/aws/aws-cdk/issues/32728) - **custom-resource:** add serviceTimeout property for custom resources ([#&#8203;30911](https://github.com/aws/aws-cdk/issues/30911)) ([d599900](https://github.com/aws/aws-cdk/commit/d599900d224e6ae798795f6634f46044acbc4725)), closes [#&#8203;30517](https://github.com/aws/aws-cdk/issues/30517) - update L1 CloudFormation resource definitions ([#&#8203;32685](https://github.com/aws/aws-cdk/issues/32685)) ([fe3af93](https://github.com/aws/aws-cdk/commit/fe3af935dadd88c51a30fb20d0b30afdffea03bc)) - update L1 CloudFormation resource definitions ([#&#8203;32712](https://github.com/aws/aws-cdk/issues/32712)) ([3170e1c](https://github.com/aws/aws-cdk/commit/3170e1c4aae644c2e2b2f0ce4d7e690ebe925c4f)) - update L1 CloudFormation resource definitions ([#&#8203;32726](https://github.com/aws/aws-cdk/issues/32726)) ([de04742](https://github.com/aws/aws-cdk/commit/de04742a8692bcc55d742255555985fc287056d2)) - **autoscaling:** add `availabilityZoneDistribution` property to an AutoScalingGroup ([#&#8203;32100](https://github.com/aws/aws-cdk/issues/32100)) ([ecfce7c](https://github.com/aws/aws-cdk/commit/ecfce7c6975a484401b42d1dcf7276d5907d6350)) - **bedrock:** additional foundation models ([#&#8203;32684](https://github.com/aws/aws-cdk/issues/32684)) ([fcf4ecd](https://github.com/aws/aws-cdk/commit/fcf4ecda4822cc8556409d4ff323e49cdbd985a7)) - **cli:** support CloudFormation simplified resource import ([#&#8203;32676](https://github.com/aws/aws-cdk/issues/32676)) ([ca33f0a](https://github.com/aws/aws-cdk/commit/ca33f0aa59c6e8390fdd46dca16c02cf10c2fcf9)), closes [#&#8203;28060](https://github.com/aws/aws-cdk/issues/28060) - **cli-plugin-contract:** introduce a public contract between CLI and plugins ([#&#8203;32111](https://github.com/aws/aws-cdk/issues/32111)) ([fbaab1d](https://github.com/aws/aws-cdk/commit/fbaab1de81e89fc1c65bd55c514f6471d36df800)) - **rds:** support 11.22-rds.20241121 for RDS PostgreSQL ([#&#8203;32508](https://github.com/aws/aws-cdk/issues/32508)) ([491475a](https://github.com/aws/aws-cdk/commit/491475a7451c151a2f6718185fc5d62e80a1b212)) - **rds:** supports minors 11.4.4, 10.11.10, 10.6.20, 10.5.27 for RDS for MariaDB ([#&#8203;32632](https://github.com/aws/aws-cdk/issues/32632)) ([b8e79b6](https://github.com/aws/aws-cdk/commit/b8e79b6fbb8841b32838ebadb9ba7a127dc1f6ba)) - update L1 CloudFormation resource definitions ([#&#8203;32582](https://github.com/aws/aws-cdk/issues/32582)) ([ff57cc3](https://github.com/aws/aws-cdk/commit/ff57cc3e0d0ea33285e2deaa5b7c50cab520f624)) - update L1 CloudFormation resource definitions ([#&#8203;32645](https://github.com/aws/aws-cdk/issues/32645)) ([a0525f5](https://github.com/aws/aws-cdk/commit/a0525f54771b24859140c8915ccb86b1be644e1b)) - **appconfig:** add atDeploymentTick extension action point to L2 Constructs ([#&#8203;32490](https://github.com/aws/aws-cdk/issues/32490)) ([225d261](https://github.com/aws/aws-cdk/commit/225d261bf2d8f4ada3ac06de9f9f11e4586510b2)) - **cloudfront:** distribution ARN property ([#&#8203;32531](https://github.com/aws/aws-cdk/issues/32531)) ([b7e6141](https://github.com/aws/aws-cdk/commit/b7e6141dbb6b55a36bb3590a0cdadef2c478a348)), closes [#&#8203;32530](https://github.com/aws/aws-cdk/issues/32530) - **codebuild:** support auto retry limit for Project ([#&#8203;32507](https://github.com/aws/aws-cdk/issues/32507)) ([2c109cf](https://github.com/aws/aws-cdk/commit/2c109cf3b5bff9cb53ba70889ee60aaa602430f1)), closes [#&#8203;32446](https://github.com/aws/aws-cdk/issues/32446) - **ecs:** machineImageType support AL2023 ([#&#8203;32509](https://github.com/aws/aws-cdk/issues/32509)) ([4b696bc](https://github.com/aws/aws-cdk/commit/4b696bc338ec0048e202201273f5220ff40a7e8f)), closes [#&#8203;32496](https://github.com/aws/aws-cdk/issues/32496) [#&#8203;32469](https://github.com/aws/aws-cdk/issues/32469) - update L1 CloudFormation resource definitions ([#&#8203;32540](https://github.com/aws/aws-cdk/issues/32540)) ([2e3b2ac](https://github.com/aws/aws-cdk/commit/2e3b2ac51c459e4d8a4bc7e6f488e2bab433cea7)) ##### Bug Fixes - **cli:** notices don't work behind a proxy ([#&#8203;32590](https://github.com/aws/aws-cdk/issues/32590)) ([3377c3b](https://github.com/aws/aws-cdk/commit/3377c3bdb61885df54c9a6663439e4b44b435017)) - **cli:** outdated dependency on `@aws-cdk/cloud-assembly-schema` ([#&#8203;32704](https://github.com/aws/aws-cdk/issues/32704)) ([3b162fc](https://github.com/aws/aws-cdk/commit/3b162fcb4f31f707fdcd8c4001cf8f42f760d5e3)) - **cli:** unhandled nextToken returned by listImagesCommand in garbage collector for ECR ([#&#8203;32679](https://github.com/aws/aws-cdk/issues/32679)) ([d9346bc](https://github.com/aws/aws-cdk/commit/d9346bc9eedd2054bde00be930e80fa28bdd3a6e)), closes [#&#8203;32498](https://github.com/aws/aws-cdk/issues/32498) - **opensearch:** add I4I and R7GD to list of OpenSearch nodes not requiring EBS volumes ([#&#8203;32592](https://github.com/aws/aws-cdk/issues/32592)) ([e364d2b](https://github.com/aws/aws-cdk/commit/e364d2b6808fd703600bff07634c4ac3486f6367)), closes [#&#8203;32070](https://github.com/aws/aws-cdk/issues/32070) [#&#8203;32138](https://github.com/aws/aws-cdk/issues/32138) - bump jsii 5.5 to 5.6 ([#&#8203;32588](https://github.com/aws/aws-cdk/issues/32588)) ([57bba19](https://github.com/aws/aws-cdk/commit/57bba195fc590b4beeab6a524fcffcc3b16b0d81)) - **cdk:** changed retry mechanism for hotswapping AppSync.function ([#&#8203;32179](https://github.com/aws/aws-cdk/issues/32179)) ([d14d784](https://github.com/aws/aws-cdk/commit/d14d784c30bb0cb70beb2405b1042157aaa0a4e1)) - **cli:** allow credential plugins to return `null` for `expiration` ([#&#8203;32554](https://github.com/aws/aws-cdk/issues/32554)) ([d4f6946](https://github.com/aws/aws-cdk/commit/d4f6946dbc97161749a33d3e89514a8f7ca4aa0a)) - **cli:** cdk deploy -R does not disable rollback ([#&#8203;32514](https://github.com/aws/aws-cdk/issues/32514)) ([2e75924](https://github.com/aws/aws-cdk/commit/2e759243cfb7a6c2e72f57abf31703ea8ed9ac12)), closes [#&#8203;31850](https://github.com/aws/aws-cdk/issues/31850) - **cli:** doesn't support plugins that return initially empty credentials ([#&#8203;32552](https://github.com/aws/aws-cdk/issues/32552)) ([38116b0](https://github.com/aws/aws-cdk/commit/38116b0ce7afda179c0067dfc5f19f24409f7fbe)) - **cli:** getting credentials via SSO fails when the region is set in the profile ([#&#8203;32520](https://github.com/aws/aws-cdk/issues/32520)) ([bf026bd](https://github.com/aws/aws-cdk/commit/bf026bdd8557305d427510af49f1bc538d439cb6)) - **lambda:** add [@&#8203;deprecated](https://github.com/deprecated) tag to python3.8 ([#&#8203;32162](https://github.com/aws/aws-cdk/issues/32162)) ([27619cc](https://github.com/aws/aws-cdk/commit/27619cc401829a851f211e0b7e81fcf84c5cbd44)) - **route53-targets:** deprecated method for dns name is used in userpool domain target (under feature flag) ([#&#8203;31403](https://github.com/aws/aws-cdk/issues/31403)) ([5e73dd0](https://github.com/aws/aws-cdk/commit/5e73dd089360a999cd86920b6d42bf69b1c0ded1)) ##### Reverts - **ecs:** machineImageType support AL2023 ([#&#8203;32550](https://github.com/aws/aws-cdk/issues/32550)) ([e8d8237](https://github.com/aws/aws-cdk/commit/e8d823797c5020193bfe2c6fef39369057717298)), closes [aws/aws-cdk#32509](https://github.com/aws/aws-cdk/issues/32509) *** #### Alpha modules (2.174.0-alpha.0) ##### Features - **glue:** support AWS Glue 5.0 ([#&#8203;32467](https://github.com/aws/aws-cdk/issues/32467)) ([ca01a25](https://github.com/aws/aws-cdk/commit/ca01a25d1328685fc9a362a1e2cbe7738389956c)) - **ec2:** add c8g and m8g instance classes ([#&#8203;32528](https://github.com/aws/aws-cdk/issues/32528)) ([a81eec6](https://github.com/aws/aws-cdk/commit/a81eec66fecfc6dd27f3a4328888bd3f0c97b159)), closes [#&#8203;32522](https://github.com/aws/aws-cdk/issues/32522) - **msk-alpha:** new KafkaVersions `3_7_X` and `3_7_X_KRAFT` ([#&#8203;32515](https://github.com/aws/aws-cdk/issues/32515)) ([cbacf4d](https://github.com/aws/aws-cdk/commit/cbacf4d9adde9a06fc78387b37ba1f97b2de2493)) ##### Bug Fixes - **ec2-alpha:** do not use string comparison in `rangesOverlap` ([#&#8203;32269](https://github.com/aws/aws-cdk/issues/32269)) ([87e21d6](https://github.com/aws/aws-cdk/commit/87e21d625af86873716734dd5568940d41096c45)), closes [#&#8203;32145](https://github.com/aws/aws-cdk/issues/32145) - **redshift-alpha:** extract tableName from custom resource functions ([#&#8203;32452](https://github.com/aws/aws-cdk/issues/32452)) ([283edd6](https://github.com/aws/aws-cdk/commit/283edd6601ac54cf868213d68edb7c76b3a45223)), closes [PR#24308](https://github.com/aws/PR/issues/24308) - **redshift-alpha:** use same role for database-query singleton function ([#&#8203;32363](https://github.com/aws/aws-cdk/issues/32363)) ([db950b3](https://github.com/aws/aws-cdk/commit/db950b30271e5776915936f91fa975b121a6e62c)), closes [#&#8203;32089](https://github.com/aws/aws-cdk/issues/32089) ### [`v2.173.4`](https://github.com/aws/aws-cdk/releases/tag/v2.173.4) [Compare Source](https://github.com/aws/aws-cdk/compare/v2.173.3...v2.173.4) ##### Bug Fixes - **cli:** cli still fails for some plugins returning `expiration: null` ([#&#8203;32668](https://github.com/aws/aws-cdk/issues/32668)) ([4da2f65](https://github.com/aws/aws-cdk/commit/4da2f6553cf488897c0ec10cce063bd3168b726f)), closes [#&#8203;32111](https://github.com/aws/aws-cdk/issues/32111) *** #### Alpha modules (2.173.4-alpha.0) ### [`v2.173.3`](https://github.com/aws/aws-cdk/releases/tag/v2.173.3) [Compare Source](https://github.com/aws/aws-cdk/compare/v2.173.2...v2.173.3) ##### Bug Fixes - **aspects:** "localAspects is not iterable" error ([#&#8203;32647](https://github.com/aws/aws-cdk/issues/32647)) ([8948ecb](https://github.com/aws/aws-cdk/commit/8948ecb22627ef57498e68fb721b0598aaa530ee)), closes [#&#8203;32470](https://github.com/aws/aws-cdk/issues/32470) *** #### Alpha modules (2.173.3-alpha.0) ### [`v2.173.2`](https://github.com/aws/aws-cdk/releases/tag/v2.173.2) [Compare Source](https://github.com/aws/aws-cdk/compare/v2.173.1...v2.173.2) ##### Bug Fixes - **cli:** allow credential plugins to return `null` for `expiration` ([#&#8203;32554](https://github.com/aws/aws-cdk/issues/32554)) ([e59b1db](https://github.com/aws/aws-cdk/commit/e59b1db4d8da5fc11d0e3beeb136593440100325)) - **cli:** doesn't support plugins that return initially empty credentials ([#&#8203;32552](https://github.com/aws/aws-cdk/issues/32552)) ([7ee9b90](https://github.com/aws/aws-cdk/commit/7ee9b909695aca317a11aad16ca983dcc6d6f85a)) *** #### Alpha modules (2.173.2-alpha.0) ### [`v2.173.1`](https://github.com/aws/aws-cdk/releases/tag/v2.173.1) [Compare Source](https://github.com/aws/aws-cdk/compare/v2.173.0...v2.173.1) ##### Bug Fixes - **cli:** getting credentials via SSO fails when the region is set in the profile ([#&#8203;32520](https://github.com/aws/aws-cdk/issues/32520)) ([01fec04](https://github.com/aws/aws-cdk/commit/01fec04ea8c0e33a406e6727801f8bc133a21196)) *** #### Alpha modules (2.173.1-alpha.0) ### [`v2.173.0`](https://github.com/aws/aws-cdk/releases/tag/v2.173.0) [Compare Source](https://github.com/aws/aws-cdk/compare/v2.172.0...v2.173.0) ##### Features - **cognito:** user pool feature plans ([#&#8203;32367](https://github.com/aws/aws-cdk/issues/32367)) ([39c22de](https://github.com/aws/aws-cdk/commit/39c22ded8f7f9b6f08c77113330d6169662094f2)), closes [#&#8203;32369](https://github.com/aws/aws-cdk/issues/32369) - **dynamodb:** add precision timestamp for kinesis stream ([#&#8203;31863](https://github.com/aws/aws-cdk/issues/31863)) ([625c431](https://github.com/aws/aws-cdk/commit/625c431334730cb7e5d429d39c5a586cc53771a8)), closes [#&#8203;31761](https://github.com/aws/aws-cdk/issues/31761) - **dynamodb:** add warm-throughput to L2 constructs ([#&#8203;32390](https://github.com/aws/aws-cdk/issues/32390)) ([496bc78](https://github.com/aws/aws-cdk/commit/496bc78a25fc6ad31e22bd93f698f21df1fc44c0)), closes [#&#8203;32127](https://github.com/aws/aws-cdk/issues/32127) - **route53:** added EvaluateTargetHealth to Route53 Alias targets ([#&#8203;9481](https://github.com/aws/aws-cdk/issues/9481)) ([#&#8203;30664](https://github.com/aws/aws-cdk/issues/30664)) ([c23be8c](https://github.com/aws/aws-cdk/commit/c23be8c24457e03001c16d3a8804ab558e62e899)), closes [#&#8203;30739](https://github.com/aws/aws-cdk/issues/30739) - **route53:** added L2 construct for Route53's health checks ([#&#8203;30739](https://github.com/aws/aws-cdk/issues/30739)) ([7fdd974](https://github.com/aws/aws-cdk/commit/7fdd974d08d7a6aa3c8bd8aac0fb99dcdd7d0381)), closes [#&#8203;9481](https://github.com/aws/aws-cdk/issues/9481) [#&#8203;30664](https://github.com/aws/aws-cdk/issues/30664) - **stepfunctions-tasks:** support dynamic values for Glue Job Worker Type ([#&#8203;32453](https://github.com/aws/aws-cdk/issues/32453)) ([7df954c](https://github.com/aws/aws-cdk/commit/7df954ca4279fa9734181264af7e55ff1463cbd4)) - update L1 CloudFormation resource definitions ([#&#8203;32446](https://github.com/aws/aws-cdk/issues/32446)) ([093c540](https://github.com/aws/aws-cdk/commit/093c54042acff6e362e6cf7eb30254f879b94966)) ##### Bug Fixes - **autoscaling:** `AutoScalingGroup` requireImdsv2 with launchTemplate or mixedInstancesPolicy throws unclear error ([#&#8203;32220](https://github.com/aws/aws-cdk/issues/32220)) ([06cdaac](https://github.com/aws/aws-cdk/commit/06cdaacbd3385df51e4632aa8d943ce647855e82)), closes [#&#8203;27586](https://github.com/aws/aws-cdk/issues/27586) [#&#8203;27586](https://github.com/aws/aws-cdk/issues/27586) - **cli:** assuming a role from the INI file fails in non-commercial regions ([#&#8203;32456](https://github.com/aws/aws-cdk/issues/32456)) ([7028242](https://github.com/aws/aws-cdk/commit/70282420238a094a7e604f8f6ff25b2f761dc5df)) - **cloudformation-include:** string arrays inside unknown properties cannot be parsed ([#&#8203;32461](https://github.com/aws/aws-cdk/issues/32461)) ([0c2f98b](https://github.com/aws/aws-cdk/commit/0c2f98b00f70bae8995f0a593e1853e93b3fb706)) - **cloudwatch:** `period` of each metric in `usingMetrics` for `MathExpression` is ignored ([#&#8203;30986](https://github.com/aws/aws-cdk/issues/30986)) ([59e96a3](https://github.com/aws/aws-cdk/commit/59e96a36f559d51467b00e92102bd9450f38a139)), closes [/github.com/aws/aws-cdk/blob/main/packages/aws-cdk-lib/aws-cloudwatch/lib/metric.ts#L606-L608](https://github.com/aws//github.com/aws/aws-cdk/blob/main/packages/aws-cdk-lib/aws-cloudwatch/lib/metric.ts/issues/L606-L608) [/github.com/aws/aws-cdk/blob/main/packages/aws-cdk-lib/aws-cloudwatch/lib/metric.ts#L566](https://github.com/aws//github.com/aws/aws-cdk/blob/main/packages/aws-cdk-lib/aws-cloudwatch/lib/metric.ts/issues/L566) - **elasticloadbalancingv2:** cannot create UDP listener for dual-stack NLB ([#&#8203;32184](https://github.com/aws/aws-cdk/issues/32184)) ([e9c6e23](https://github.com/aws/aws-cdk/commit/e9c6e23ec49405c2f24b7a78ffb427dff6b72822)), closes [/github.com/aws/aws-cdk/pull/32184#issuecomment-2510536270](https://github.com/aws//github.com/aws/aws-cdk/pull/32184/issues/issuecomment-2510536270) - **lambda:** improve validation errors for lambda functions ([#&#8203;32323](https://github.com/aws/aws-cdk/issues/32323)) ([2607eb3](https://github.com/aws/aws-cdk/commit/2607eb3a905f735b96713dda4f32d28d10d686fd)), closes [#&#8203;32324](https://github.com/aws/aws-cdk/issues/32324) - **rds:** serverlessV2MaxCapacity can be set to 0.5, which is invalid ([#&#8203;32232](https://github.com/aws/aws-cdk/issues/32232)) ([3fe229d](https://github.com/aws/aws-cdk/commit/3fe229d0eb48fe405e00bf3717face3c4cfc2cc1)), closes [/docs.aws.amazon.com/ja_jp/AWSCloudFormation/latest/UserGuide/aws-properties-rds-dbcluster-serverlessv2scalingconfiguration.html#cfn-rds-dbcluster-serverlessv2](https://github.com/aws//docs.aws.amazon.com/ja_jp/AWSCloudFormation/latest/UserGuide/aws-properties-rds-dbcluster-serverlessv2scalingconfiguration.html/issues/cfn-rds-dbcluster-serverlessv2) - **stepfunctions-task:** elasticloadbalancingv2 service policy ([#&#8203;32419](https://github.com/aws/aws-cdk/issues/32419)) ([2677fce](https://github.com/aws/aws-cdk/commit/2677fce46275c9bdb54c1c6379b04f805c2ec9b2)), closes [#&#8203;32417](https://github.com/aws/aws-cdk/issues/32417) [/github.com/aws/aws-cdk/blame/2607eb3a905f735b96713dda4f32d28d10d686fd/packages/aws-cdk-lib/aws-stepfunctions-tasks/lib/aws-sdk/call-aws-service.ts#L93-L97](https://github.com/aws//github.com/aws/aws-cdk/blame/2607eb3a905f735b96713dda4f32d28d10d686fd/packages/aws-cdk-lib/aws-stepfunctions-tasks/lib/aws-sdk/call-aws-service.ts/issues/L93-L97) - **synthetics:** canary name can be up to 255 characters ([#&#8203;32385](https://github.com/aws/aws-cdk/issues/32385)) ([231e1bf](https://github.com/aws/aws-cdk/commit/231e1bf98597bcaf90a75632f9e217fbf33d585a)), closes [#&#8203;32376](https://github.com/aws/aws-cdk/issues/32376) *** #### Alpha modules (2.173.0-alpha.0) ##### Features - **redshift-alpha:** add support for RA3.large node type ([#&#8203;31637](https://github.com/aws/aws-cdk/issues/31637)) ([ce0e09f](https://github.com/aws/aws-cdk/commit/ce0e09fea17c78d40026df114796bc89ad365d18)), closes [#&#8203;31634](https://github.com/aws/aws-cdk/issues/31634) ### [`v2.172.0`](https://github.com/aws/aws-cdk/releases/tag/v2.172.0) [Compare Source](https://github.com/aws/aws-cdk/compare/v2.171.1...v2.172.0) ##### ⚠ BREAKING CHANGES TO EXPERIMENTAL FEATURES - **apigateway:** We will be removing deprecated `APIGatewayV2` constructs from `aws-apigateway` module. ##### Features - **aspects:** priority-ordered aspect invocation ([#&#8203;32097](https://github.com/aws/aws-cdk/issues/32097)) ([8ccdff4](https://github.com/aws/aws-cdk/commit/8ccdff4ee083d66f73259223ba75ba0b8a0752a0)), closes [#&#8203;21341](https://github.com/aws/aws-cdk/issues/21341) - **cognito:** new `cloudFrontEndpoint` method for user pool domain without custom resource ([#&#8203;31402](https://github.com/aws/aws-cdk/issues/31402)) ([deeb2ad](https://github.com/aws/aws-cdk/commit/deeb2ad0bc38101a9f1fa8162ad5d6008900a98d)), closes [#&#8203;31342](https://github.com/aws/aws-cdk/issues/31342) - **cognito:** support for ALLOW_USER_AUTH explicit auth flow ([#&#8203;32273](https://github.com/aws/aws-cdk/issues/32273)) ([c5bcfdc](https://github.com/aws/aws-cdk/commit/c5bcfdc57aa763539b31f4e7f6f115f707c401a4)) - **elasticloadbalancingv2:** ip address type for both network and application target group ([#&#8203;32189](https://github.com/aws/aws-cdk/issues/32189)) ([7cc5f30](https://github.com/aws/aws-cdk/commit/7cc5f305c839048454240f8d6db1614e2dfa4c53)) - **events:** add filter rules for prefixEqualsIgnoreCase, suffixEqualsIgnoreCase, wildcard, and anythingBut\* matches ([#&#8203;32063](https://github.com/aws/aws-cdk/issues/32063)) ([0ce71fc](https://github.com/aws/aws-cdk/commit/0ce71fc50cffffc04d9d1bc9c98c9c04e77bfe1f)), closes [#&#8203;28462](https://github.com/aws/aws-cdk/issues/28462) - **lambda-nodejs:** add bun support ([#&#8203;31770](https://github.com/aws/aws-cdk/issues/31770)) ([aed8ad1](https://github.com/aws/aws-cdk/commit/aed8ad10c3d86497be34b2889466f770910d36ef)), closes [#&#8203;31753](https://github.com/aws/aws-cdk/issues/31753) [#&#8203;31753](https://github.com/aws/aws-cdk/issues/31753) - **rds:** limitless database cluster ([#&#8203;32151](https://github.com/aws/aws-cdk/issues/32151)) ([f4c19c7](https://github.com/aws/aws-cdk/commit/f4c19c71ca8a34188f1d26f756ef5b3ec218b5c2)) - **ses:** add support to disable account-level suppression list ([#&#8203;32168](https://github.com/aws/aws-cdk/issues/32168)) ([bb50c1a](https://github.com/aws/aws-cdk/commit/bb50c1abc8c507e2b877a952377adc607b936eab)), closes [#&#8203;32149](https://github.com/aws/aws-cdk/issues/32149) - update L1 CloudFormation resource definitions ([#&#8203;32272](https://github.com/aws/aws-cdk/issues/32272)) ([421d327](https://github.com/aws/aws-cdk/commit/421d32708f5018353b2c5db1751cb3415412b985)) - update L1 CloudFormation resource definitions ([#&#8203;32356](https://github.com/aws/aws-cdk/issues/32356)) ([9e6bb24](https://github.com/aws/aws-cdk/commit/9e6bb24f533c11bbb74a30a729566f91f5d6a13f)) - **route53-targets:** add `AppSync` route53 target ([#&#8203;31976](https://github.com/aws/aws-cdk/issues/31976)) ([dc7574a](https://github.com/aws/aws-cdk/commit/dc7574a3c048fdb58ca1ac996dbe46fd54b59993)), closes [#&#8203;26109](https://github.com/aws/aws-cdk/issues/26109) ##### Bug Fixes - **apigateway:** remove deprecated apigatewayv2 from aws-apigateway module ([#&#8203;32297](https://github.com/aws/aws-cdk/issues/32297)) ([4db9565](https://github.com/aws/aws-cdk/commit/4db956597b41bb9d7dd8e1d65b39643772065353)) - **appsync:** `appsync.HttpDataSourceProps` erroneously extends `BaseDataSourceProps` ([#&#8203;32065](https://github.com/aws/aws-cdk/issues/32065)) ([4e7f5c4](https://github.com/aws/aws-cdk/commit/4e7f5c4469509ed4e1d586a9c5263f19b540a7bd)), closes [#&#8203;29689](https://github.com/aws/aws-cdk/issues/29689) - **cli:** assume role calls are skipping the proxy ([#&#8203;32291](https://github.com/aws/aws-cdk/issues/32291)) ([6c0f74e](https://github.com/aws/aws-cdk/commit/6c0f74e4b37b8ef81c927adca1112680d0bf2ad0)) - **cli:** lambda hotswap fails if `lambda:GetFunctionConfiguration` action is not allowed ([#&#8203;32301](https://github.com/aws/aws-cdk/issues/32301)) ([be000a2](https://github.com/aws/aws-cdk/commit/be000a251b781b0b0870930992793df5a2fc4b01)), closes [#&#8203;32219](https://github.com/aws/aws-cdk/issues/32219) - **cli:** mfa code is not requested when `$AWS_PROFILE` is used ([#&#8203;32313](https://github.com/aws/aws-cdk/issues/32313)) ([6458439](https://github.com/aws/aws-cdk/commit/6458439b08f9ce1f49c1137dd85bb582550a5f52)), closes [#&#8203;32312](https://github.com/aws/aws-cdk/issues/32312) - **cli:** remove source maps ([#&#8203;32317](https://github.com/aws/aws-cdk/issues/32317)) ([512cf95](https://github.com/aws/aws-cdk/commit/512cf952f3971cd302fb1cca7c24149b43832280)), closes [#&#8203;19930](https://github.com/aws/aws-cdk/issues/19930) [#&#8203;19930](https://github.com/aws/aws-cdk/issues/19930) - **cli:** short-lived credentials are not refreshed ([#&#8203;32354](https://github.com/aws/aws-cdk/issues/32354)) ([058a0bf](https://github.com/aws/aws-cdk/commit/058a0bfc22036230252fcbc026576260723f6d28)) - **cli:** warns about missing `--no-rollback` flag that is present ([#&#8203;32309](https://github.com/aws/aws-cdk/issues/32309)) ([559d676](https://github.com/aws/aws-cdk/commit/559d676e2989739b38491b1f767face839d39f69)), closes [#&#8203;32295](https://github.com/aws/aws-cdk/issues/32295) - **cloudformation-include:** drops unknown policy attributes ([#&#8203;32321](https://github.com/aws/aws-cdk/issues/32321)) ([20edc7f](https://github.com/aws/aws-cdk/commit/20edc7fe5e891461a8188d306dcc0f776041cf8f)) - **cloudfront:** propagate `originAccessControlId` CloudFront Origin property to CloudFormation templates ([#&#8203;32020](https://github.com/aws/aws-cdk/issues/32020)) ([f9708a6](https://github.com/aws/aws-cdk/commit/f9708a634ceaef7f62e8193443ea30fe9e2fbad6)), closes [#&#8203;32018](https://github.com/aws/aws-cdk/issues/32018) - **iam:** `Role.addManagedPolicy()` does not work for imported roles `IRole` ([#&#8203;31212](https://github.com/aws/aws-cdk/issues/31212)) ([c78ef1b](https://github.com/aws/aws-cdk/commit/c78ef1b43a18e1ffc93fcbdee9dd2e91fa750a36)), closes [#&#8203;8307](https://github.com/aws/aws-cdk/issues/8307) *** #### Alpha modules (2.172.0-alpha.0) ##### Features - **ec2:** default BastionHostLinux to use Amazon Linux 2023 (under feature flag) ([#&#8203;31996](https://github.com/aws/aws-cdk/issues/31996)) ([bf77e51](https://github.com/aws/aws-cdk/commit/bf77e51c90e3da972c464430d579695163160a13)), closes [#&#8203;29493](https://github.com/aws/aws-cdk/issues/29493) [#&#8203;29493](https://github.com/aws/aws-cdk/issues/29493) - **ec2:** instance support passing IAM instance profile ([#&#8203;32073](https://github.com/aws/aws-cdk/issues/32073)) ([cf89d0f](https://github.com/aws/aws-cdk/commit/cf89d0f67f6d03bdeec38a4ffb48d3cda59db7cc)), closes [#&#8203;8348](https://github.com/aws/aws-cdk/issues/8348) - **neptune:** auto minor version upgrade for an instance ([#&#8203;31988](https://github.com/aws/aws-cdk/issues/31988)) ([d95db49](https://github.com/aws/aws-cdk/commit/d95db491f7c1fd11dd42299f99d40fd94b0d642f)) - **pipes:** add LogDestination implementation ([#&#8203;31672](https://github.com/aws/aws-cdk/issues/31672)) ([af5345e](https://github.com/aws/aws-cdk/commit/af5345e9ed2528bde2af6cd4b2428654b096eb93)), closes [#&#8203;31671](https://github.com/aws/aws-cdk/issues/31671) - **pipes-targets:** add API Gateway ([#&#8203;31954](https://github.com/aws/aws-cdk/issues/31954)) ([c77536f](https://github.com/aws/aws-cdk/commit/c77536f8999e221c8d6dae5742f484a04b05bac5)) - **redshift:** execute resource action ([#&#8203;31995](https://github.com/aws/aws-cdk/issues/31995)) ([40835a0](https://github.com/aws/aws-cdk/commit/40835a01536509daefa44e5e4cad5d8829d8dd1c)) ##### Bug Fixes - **scheduler-targets-alpha:** incorrect validation of maximumEventAge ([#&#8203;32284](https://github.com/aws/aws-cdk/issues/32284)) ([2eebc59](https://github.com/aws/aws-cdk/commit/2eebc5913966f0266efbad65c3f137c07c75270b)) ### [`v2.171.1`](https://github.com/aws/aws-cdk/releases/tag/v2.171.1) [Compare Source](https://github.com/aws/aws-cdk/compare/v2.171.0...v2.171.1) ##### Bug Fixes - **cli:** lambda hotswap fails if `lambda:GetFunctionConfiguration` action is not allowed ([#&#8203;32301](https://github.com/aws/aws-cdk/issues/32301)) ([a073e93](https://github.com/aws/aws-cdk/commit/a073e9302dbd4213275e99c86476ab8152af7caf)), closes [/github.com/aws/aws-sdk-js-v3/blob/main/clients/client-lambda/src/waiters/waitForFunctionUpdatedV2.ts#L10](https://github.com/aws//github.com/aws/aws-sdk-js-v3/blob/main/clients/client-lambda/src/waiters/waitForFunctionUpdatedV2.ts/issues/L10) [/github.com/aws/aws-sdk-js-v3/blob/main/clients/client-lambda/src/waiters/waitForFunctionUpdated.ts#L13](https://github.com/aws//github.com/aws/aws-sdk-js-v3/blob/main/clients/client-lambda/src/waiters/waitForFunctionUpdated.ts/issues/L13) *** #### Alpha modules (2.171.1-alpha.0) ### [`v2.171.0`](https://github.com/aws/aws-cdk/releases/tag/v2.171.0) [Compare Source](https://github.com/aws/aws-cdk/compare/v2.170.0...v2.171.0) ##### Features - **rds:** enhanced monitoring configuration at the cluster level ([#&#8203;32157](https://github.com/aws/aws-cdk/issues/32157)) ([01f2dcd](https://github.com/aws/aws-cdk/commit/01f2dcd6fb892905afae735c791ddbb3e6adbcb1)), closes [#&#8203;32151](https://github.com/aws/aws-cdk/issues/32151) - **rds:** support zero ACU for Aurora Serverless V2 ([#&#8203;32231](https://github.com/aws/aws-cdk/issues/32231)) ([d1b07d9](https://github.com/aws/aws-cdk/commit/d1b07d9aeadab65db5672272050e64672e7d6beb)) ##### Bug Fixes - **cli:** sso with proxy fails ([#&#8203;32261](https://github.com/aws/aws-cdk/issues/32261)) ([bedcf16](https://github.com/aws/aws-cdk/commit/bedcf164a2b7cbd613ac645d477302c93ddfa4b6)) *** #### Alpha modules (2.171.0-alpha.0) ### [`v2.170.0`](https://github.com/aws/aws-cdk/releases/tag/v2.170.0) [Compare Source](https://github.com/aws/aws-cdk/compare/v2.169.0...v2.170.0) ##### Features - **lambda:** support for Provisioned Pollers ([#&#8203;32205](https://github.com/aws/aws-cdk/issues/32205)) ([68b969e](https://github.com/aws/aws-cdk/commit/68b969e6006212b2930844226f7817c81cfd8e18)) - **vpcv2:** vpc peering connection construct ([#&#8203;31645](https://github.com/aws/aws-cdk/issues/31645)) ([e1195f9](https://github.com/aws/aws-cdk/commit/e1195f93f9ee12b86d38bc7a64b2118ba204ef9e)), closes [RFC#507](https://github.com/aws/RFC/issues/507) [1#L252](https://github.com/aws/1/issues/L252) ##### Bug Fixes - **cli:** sts retry options are ignored ([#&#8203;32227](https://github.com/aws/aws-cdk/issues/32227)) ([193ab8c](https://github.com/aws/aws-cdk/commit/193ab8cf892a3d2a3dbafc6db9f7a1d246fab2ec)) ##### Reverts - "fix(ecr): allow creating repository uri to use tokens like cfn params" ([#&#8203;32241](https://github.com/aws/aws-cdk/issues/32241)) ([b3e39a9](https://github.com/aws/aws-cdk/commit/b3e39a9a264511475ebb2bc8889325a096780d93)), closes [#&#8203;32238](https://github.com/aws/aws-cdk/issues/32238) *** #### Alpha modules (2.170.0-alpha.0) ### [`v2.169.0`](https://github.com/aws/aws-cdk/releases/tag/v2.169.0) [Compare Source](https://github.com/aws/aws-cdk/compare/v2.168.0...v2.169.0) ##### Features - **cloudfront:** add `attachWebAclId` method for Distribution ([#&#8203;30567](https://github.com/aws/aws-cdk/issues/30567)) ([cbe2bec](https://github.com/aws/aws-cdk/commit/cbe2bec488ff9b9823eacf6de14dff1dcb3033a1)) - update L1 CloudFormation resource definitions ([#&#8203;32223](https://github.com/aws/aws-cdk/issues/32223)) ([5d61a1b](https://github.com/aws/aws-cdk/commit/5d61a1bdc69ce6578e42c6915cc5ccf206fd0c58)) - **sns:** add delivery policy to sns subscriptions ([#&#8203;30830](https://github.com/aws/aws-cdk/issues/30830)) ([27babe6](https://github.com/aws/aws-cdk/commit/27babe66d750454a82bbcca9bd4b584e88e2ace8)), closes [#&#8203;17576](https://github.com/aws/aws-cdk/issues/17576) ##### Bug Fixes - **cli:** cannot assume a doubly-chained role ([#&#8203;32216](https://github.com/aws/aws-cdk/issues/32216)) ([8746e44](https://github.com/aws/aws-cdk/commit/8746e44c0ac57035308cc401f70012f735b047b5)) - **cli:** proxy is not configured correctly ([#&#8203;32213](https://github.com/aws/aws-cdk/issues/32213)) ([ec58c77](https://github.com/aws/aws-cdk/commit/ec58c77b4d24c21f799a9ab259ec46cc0f47989b)) - **s3:** key rotation is not enabled while creating KMS encrypted S3 buckets ([#&#8203;32064](https://github.com/aws/aws-cdk/issues/32064)) ([e3024fc](https://github.com/aws/aws-cdk/commit/e3024fcda91ccb2760248839a91572f991dc1f63)), closes [#&#8203;31982](https://github.com/aws/aws-cdk/issues/31982) *** #### Alpha modules (2.169.0-alpha.0) ##### Features - **location:** support Map ([#&#8203;30648](https://github.com/aws/aws-cdk/issues/30648)) ([98b801c](https://github.com/aws/aws-cdk/commit/98b801cae9c7a957469ef61121878d81a09f4cfe)), closes [#&#8203;30647](https://github.com/aws/aws-cdk/issues/30647) - **scheduler:** `scheduler` and `scheduler-targets` modules are now in Developer Preview ([#&#8203;32207](https://github.com/aws/aws-cdk/issues/32207)) ([8776832](https://github.com/aws/aws-cdk/commit/877683233f1af9674cd2e715411eed6ebc4e3e11)), closes [#&#8203;31785](https://github.com/aws/aws-cdk/issues/31785) ##### Bug Fixes - **location:** underscores are not allowed in the name ([#&#8203;32046](https://github.com/aws/aws-cdk/issues/32046)) ([f6ad9c9](https://github.com/aws/aws-cdk/commit/f6ad9c99db902064ab62e236fec3d7fbfcca828a)) ### [`v2.168.0`](https://github.com/aws/aws-cdk/releases/tag/v2.168.0) [Compare Source](https://github.com/aws/aws-cdk/compare/v2.167.2...v2.168.0) ##### Features - **cloudfront:** `function URL` origin access control L2 construct ([#&#8203;31339](https://github.com/aws/aws-cdk/issues/31339)) ([b8f47c8](https://github.com/aws/aws-cdk/commit/b8f47c819f9f823748fd86593d2611410f6b84ec)), closes [#&#8203;31629](https://github.com/aws/aws-cdk/issues/31629) - **elasticloadbalancingv2:** support target group level cross-zone settings for ALB and NLB ([#&#8203;31814](https://github.com/aws/aws-cdk/issues/31814)) ([6b0b1e1](https://github.com/aws/aws-cdk/commit/6b0b1e1dbef6f5bffa1a35aae45d38a6b99d1ba5)), closes [#&#8203;31790](https://github.com/aws/aws-cdk/issues/31790) - **lambda:** add NodeJS 22.x support ([#&#8203;32104](https://github.com/aws/aws-cdk/issues/32104)) ([baa8561](https://github.com/aws/aws-cdk/commit/baa8561254090690bd59d75de8fa6a0cd6d55632)) - **lambda:** support observability for ESM ( DDB, Kinesis, SQS) ([#&#8203;32204](https://github.com/aws/aws-cdk/issues/32204)) ([6317a2a](https://github.com/aws/aws-cdk/commit/6317a2ad034e98d8e6990a6cd347f0b6f06d7666)) - **lambda-destinations:** support Lambda async S3 destination ([#&#8203;31709](https://github.com/aws/aws-cdk/issues/31709)) ([e1a2f68](https://github.com/aws/aws-cdk/commit/e1a2f6800c8c4ed08811c4f47bf3404e9a446790)) - **ses:** maximum delivery time for emails ([#&#8203;32102](https://github.com/aws/aws-cdk/issues/32102)) ([771eeff](https://github.com/aws/aws-cdk/commit/771eeff283644e766af67f7a86da772736dbeac2)) - update L1 CloudFormation resource definitions ([#&#8203;32175](https://github.com/aws/aws-cdk/issues/32175)) ([6820c62](https://github.com/aws/aws-cdk/commit/6820c629d55e49d4383a0594a2137bb9e0a5907a)) - **rds:** support 8.0.40 engine version for RDS for MySQL ([#&#8203;32117](https://github.com/aws/aws-cdk/issues/32117)) ([dcb5cf1](https://github.com/aws/aws-cdk/commit/dcb5cf1130529231fe8c86265115bd18f7b1efb9)) - **stepfunctions-tasks:** create scheduler ([#&#8203;29458](https://github.com/aws/aws-cdk/issues/29458)) ([d14a01c](https://github.com/aws/aws-cdk/commit/d14a01c5ca75fcec01810bb6fc9ac708c719ee7f)), closes [#&#8203;29351](https://github.com/aws/aws-cdk/issues/29351) ##### Bug Fixes - **cdk:** remove source-map-support from typescript init templates ([#&#8203;32113](https://github.com/aws/aws-cdk/issues/32113)) ([d5c0aa2](https://github.com/aws/aws-cdk/commit/d5c0aa2864a80387c858d4db68e65aab4bf67f3f)), closes [#&#8203;20754](https://github.com/aws/aws-cdk/issues/20754) [#&#8203;30231](https://github.com/aws/aws-cdk/issues/30231) - **cdk:** use built-in source map support ([#&#8203;32115](https://github.com/aws/aws-cdk/issues/32115)) ([5d499dc](https://github.com/aws/aws-cdk/commit/5d499dcb0ee2a056a644affad51b65c7964fbe9d)) - **cli:** `cdk diff` always falls back to template only diff ([#&#8203;32165](https://github.com/aws/aws-cdk/issues/32165)) ([089e9d8](https://github.com/aws/aws-cdk/commit/089e9d8af66be29c0365445f63ba008855f2557c)) - **cli:** excessive stack event polling during deployment ([#&#8203;32196](https://github.com/aws/aws-cdk/issues/32196)) ([a8bc46d](https://github.com/aws/aws-cdk/commit/a8bc46d80d5f29f511eebc74c8482c1ac2675349)), closes [/github.com/aws/aws-cdk/blob/7bb9203eb95fe894c0d40942ff49c782a9fec251/packages/aws-cdk/lib/api/util/cloudformation/stack-event-poller.ts#L73-L74](https://github.com/aws//github.com/aws/aws-cdk/blob/7bb9203eb95fe894c0d40942ff49c782a9fec251/packages/aws-cdk/lib/api/util/cloudformation/stack-event-poller.ts/issues/L73-L74) - **cli:** externally managed stack notification arns are deleted on `deploy` ([#&#8203;32163](https://github.com/aws/aws-cdk/issues/32163)) ([9966f57](https://github.com/aws/aws-cdk/commit/9966f57f079029265e560514954a6658780be04a)) - **cli:** failure to get credentials when session token is not set ([#&#8203;32134](https://github.com/aws/aws-cdk/issues/32134)) ([9ef4e72](https://github.com/aws/aws-cdk/commit/9ef4e72663d33fe0cfaaaf31a1ee46925d5bc330)) - **cli:** region specified in `~/.aws/credentials` is ignored ([#&#8203;32133](https://github.com/aws/aws-cdk/issues/32133)) ([d1b3c81](https://github.com/aws/aws-cdk/commit/d1b3c817676df87d24ad1b97af9b304f7c8526a3)), closes [#&#8203;32130](https://github.com/aws/aws-cdk/issues/32130) - **cli:** the LoadBalancerProvider doesn't match LBs when querying by a subset of tags ([#&#8203;32164](https://github.com/aws/aws-cdk/issues/32164)) ([f75dc72](https://github.com/aws/aws-cdk/commit/f75dc72ce7fec3293a4b768a4402e75857039583)) - **eks:** eks.AccessEntryType.STANDARD maps to a wrong value ([#&#8203;31147](https://github.com/aws/aws-cdk/issues/31147)) ([1bbb456](https://github.com/aws/aws-cdk/commit/1bbb456576b611aedfa6d4b09a38df22167542f4)) *** #### Alpha modules (2.168.0-alpha.0) ##### Bug Fixes - **scheduler-targets-alpha:** imported target resources as schedule target throws synth error ([#&#8203;32105](https://github.com/aws/aws-cdk/issues/32105)) ([1a8306f](https://github.com/aws/aws-cdk/commit/1a8306fab7d746fb66019979e8f353e17499cfbf)), closes [#&#8203;31785](https://github.com/aws/aws-cdk/issues/31785) [/github.com/aws/aws-cdk/pull/29615#issuecomment-2417858246](https://github.com/aws//github.com/aws/aws-cdk/pull/29615/issues/issuecomment-2417858246) - **scheduler-targets-alpha:** kinesis data firehose target uses l1 instead of l2 ([#&#8203;32150](https://github.com/aws/aws-cdk/issues/32150)) ([11384f0](https://github.com/aws/aws-cdk/commit/11384f0718947aebe519e346ffe31429289a9a63)), closes [#&#8203;31785](https://github.com/aws/aws-cdk/issues/31785) - **scheduler-targets-alpha:** scope down permissions for sqs and kinesis stream targets ([#&#8203;32122](https://github.com/aws/aws-cdk/issues/32122)) ([6bb142e](https://github.com/aws/aws-cdk/commit/6bb142e805fdd754755cc54c31c0e6e7970be7f9)), closes [#&#8203;31785](https://github.com/aws/aws-cdk/issues/31785) ### [`v2.167.2`](https://github.com/aws/aws-cdk/releases/tag/v2.167.2) [Compare Source](https://github.com/aws/aws-cdk/compare/v2.167.1...v2.167.2) ##### Bug Fixes - **cli:** `cdk diff` always falls back to template only diff ([#&#8203;32165](https://github.com/aws/aws-cdk/issues/32165)) ([3fd9699](https://github.com/aws/aws-cdk/commit/3fd969988c599bf15b9b68d718505fcf92045b3a)) - **cli:** externally managed stack notification arns are deleted on `deploy` ([#&#8203;32163](https://github.com/aws/aws-cdk/issues/32163)) ([465da31](https://github.com/aws/aws-cdk/commit/465da319ea173fba8ae395b8b897607cf2075eaa)) - **cli:** the LoadBalancerProvider doesn't match LBs when querying by a subset of tags ([#&#8203;32164](https://github.com/aws/aws-cdk/issues/32164)) ([a0b47c5](https://github.com/aws/aws-cdk/commit/a0b47c5b530abe13b547d7263f437997148eb630)) *** #### Alpha modules (2.167.2-alpha.0) ### [`v2.167.1`](https://github.com/aws/aws-cdk/releases/tag/v2.167.1) [Compare Source](https://github.com/aws/aws-cdk/compare/v2.167.0...v2.167.1) ##### Bug Fixes - **cli:** failure to get credentials when session token is not set ([#&#8203;32134](https://github.com/aws/aws-cdk/issues/32134)) ([425efbc](https://github.com/aws/aws-cdk/commit/425efbc3625d4512b83225dcb1d1c155d13b4b9e)), closes [#&#8203;32120](https://github.com/aws/aws-cdk/issues/32120) - **cli:** region specified in `~/.aws/credentials` is ignored ([#&#8203;32133](https://github.com/aws/aws-cdk/issues/32133)) ([9859f33](https://github.com/aws/aws-cdk/commit/9859f33a11fb385419c611945bd9bb171b458dad)), closes [#&#8203;32130](https://github.com/aws/aws-cdk/issues/32130) *** #### Alpha modules (2.167.1-alpha.0) ### [`v2.167.0`](https://github.com/aws/aws-cdk/releases/tag/v2.167.0) [Compare Source](https://github.com/aws/aws-cdk/compare/v2.166.0...v2.167.0) ##### Features - **cli:** upgrade aws-sdk to sdkv3 ([#&#8203;31702](https://github.com/aws/aws-cdk/issues/31702)) ([5bc0662](https://github.com/aws/aws-cdk/commit/5bc0662bacf7eca814f09b7560d77a68e3f5ddea)), closes [#&#8203;25870](https://github.com/aws/aws-cdk/issues/25870) [#&#8203;26292](https://github.com/aws/aws-cdk/issues/26292) [#&#8203;20956](https://github.com/aws/aws-cdk/issues/20956) [#&#8203;24744](https://github.com/aws/aws-cdk/issues/24744) [#&#8203;27265](https://github.com/aws/aws-cdk/issues/27265) - **elasticloadbalancingv2:** enable zonal shift for network load balancer ([#&#8203;31990](https://github.com/aws/aws-cdk/issues/31990)) ([497abdc](https://github.com/aws/aws-cdk/commit/497abdc72482173c45a674ab24f2c18dbdcfaf93)), closes [#&#8203;31983](https://github.com/aws/aws-cdk/issues/31983) - **kms:** support KEY_AGREEMENT for keyUsage ([#&#8203;30993](https://github.com/aws/aws-cdk/issues/30993)) ([2323877](https://github.com/aws/aws-cdk/commit/23238774aa3ca9a80dd406a43e51c3a6bbb68d42)), closes [#&#8203;30989](https://github.com/aws/aws-cdk/issues/30989) - **lambda:** add Python 3.13 runtime ([#&#8203;32054](https://github.com/aws/aws-cdk/issues/32054)) ([e0ebcfe](https://github.com/aws/aws-cdk/commit/e0ebcfe8821d97788356798512a5c4e1e508cd7c)) - **lambda:** add supportsSnapStart config to dotnet8 and python 3.12 ([#&#8203;32112](https://github.com/aws/aws-cdk/issues/32112)) ([53f4713](https://github.com/aws/aws-cdk/commit/53f47133fd8ce1bfdd77eb81c197665006b35105)) - **lambda:** support for customer managed encryption (CMCMK) ([#&#8203;32072](https://github.com/aws/aws-cdk/issues/32072)) ([2f16415](https://github.com/aws/aws-cdk/commit/2f16415c45fcbd11103788ed0aece10e521c8e59)) - update L1 CloudFormation resource definitions ([#&#8203;32090](https://github.com/aws/aws-cdk/issues/32090)) ([6303b72](https://github.com/aws/aws-cdk/commit/6303b72580e0381dcbb291ad7f424cfd4b5de329)) - **rds:** support minor engine versions for oracle ([#&#8203;32058](https://github.com/aws/aws-cdk/issues/32058)) ([3d72b63](https://github.com/aws/aws-cdk/commit/3d72b63b0f2cf0649f5e1c5d0469faf51441db49)) - **rds:** support minor versions for RDS for SQL Server ([#&#8203;32055](https://github.com/aws/aws-cdk/issues/32055)) ([8c80bf8](https://github.com/aws/aws-cdk/commit/8c80bf8a6c0e8c1113135bb6c91b8432ad562c47)) - **service-catalog:** allow Product Stack to override analytics reporting and stack descriptions ([#&#8203;31985](https://github.com/aws/aws-cdk/issues/31985)) ([d8ad02a](https://github.com/aws/aws-cdk/commit/d8ad02a956a07e917919e2f4666f6488ca6592e6)), closes [#&#8203;31924](https://github.com/aws/aws-cdk/issues/31924) ##### Bug Fixes - **ecr:** allow creating repository uri to use tokens like cfn params ([#&#8203;32053](https://github.com/aws/aws-cdk/issues/32053)) ([5648199](https://github.com/aws/aws-cdk/commit/5648199440e4ff89d1f2869865752ed140c256db)), closes [#&#8203;31860](https://github.com/aws/aws-cdk/issues/31860) *** #### Alpha modules (2.167.0-alpha.0) ##### Features - **ivs:** support recording configuration for channel ([#&#8203;31899](https://github.com/aws/aws-cdk/issues/31899)) ([8a3734d](https://github.com/aws/aws-cdk/commit/8a3734d25ce36460b6fee583a7e2049b17f79d87)), closes [#&#8203;31780](https://github.com/aws/aws-cdk/issues/31780) - **redshift:** relocating a cluster ([#&#8203;31993](https://github.com/aws/aws-cdk/issues/31993)) ([b763d86](https://github.com/aws/aws-cdk/commit/b763d866d660f72bf70c1cf37dadd58769642746)) ##### Bug Fixes - **scheduler-targets-alpha:** add dlq policy to execution role instead of queue policy ([#&#8203;32032](https://github.com/aws/aws-cdk/issues/32032)) ([b953b2a](https://github.com/aws/aws-cdk/commit/b953b2a3f01a1e75baf6426bbff5f63e49d3e626)), closes [#&#8203;31785](https://github.com/aws/aws-cdk/issues/31785) ### [`v2.166.0`](https://github.com/aws/aws-cdk/releases/tag/v2.166.0) [Compare Source](https://github.com/aws/aws-cdk/compare/v2.165.0...v2.166.0) ##### Features - **cli:** automatically roll back stacks if necessary ([#&#8203;31920](https://github.com/aws/aws-cdk/issues/31920)) ([2f9fb1e](https://github.com/aws/aws-cdk/commit/2f9fb1e050331efbbe84bb0d5943ff7798cbf3fe)), closes [#&#8203;30546](https://github.com/aws/aws-cdk/issues/30546) - **kinesis:** support resource policy for a data stream ([#&#8203;31909](https://github.com/aws/aws-cdk/issues/31909)) ([18fbd6d](https://github.com/aws/aws-cdk/commit/18fbd6d5a1a3069b0fc1356d87e534a75239e668)), closes [#&#8203;28814](https://github.com/aws/aws-cdk/issues/28814) - **rds:** configure `autoMinorVersionUpgrade` for a database cluster ([#&#8203;31962](https://github.com/aws/aws-cdk/issues/31962)) ([0fb6106](https://github.com/aws/aws-cdk/commit/0fb610678495deb150fad1adebde259fc5fc0993)) - **route53:** support HTTPS, SSHFP, SVCB, and TLSA DNS resource record ([#&#8203;31955](https://github.com/aws/aws-cdk/issues/31955)) ([afc2b0d](https://github.com/aws/aws-cdk/commit/afc2b0d1d1d620e6350e96cc464428485fca198e)), closes [/docs.aws.amazon.com/ja_jp/AWSCloudFormation/latest/UserGuide/aws-resource-route53-recordset.html#cfn-route53](https://github.com/aws//docs.aws.amazon.com/ja_jp/AWSCloudFormation/latest/UserGuide/aws-resource-route53-recordset.html/issues/cfn-route53) - **synthetics:** add `artifactS3Encryption` property to the Canary Construct. ([#&#8203;30197](https://github.com/aws/aws-cdk/issues/30197)) ([1f39cb9](https://github.com/aws/aws-cdk/commit/1f39cb9e0770b5c02302b9b36ac874ee6bf53329)), closes [#&#8203;30190](https://github.com/aws/aws-cdk/issues/30190) - update L1 CloudFormation resource definitions ([#&#8203;32007](https://github.com/aws/aws-cdk/issues/32007)) ([be6a964](https://github.com/aws/aws-cdk/commit/be6a964ec17f22a065aa64511f7d3d31341d0ba5)) ##### Bug Fixes - deploy-time stack tags cause synthesis to fail ([#&#8203;32041](https://github.com/aws/aws-cdk/issues/32041)) ([18c19fd](https://github.com/aws/aws-cdk/commit/18c19fd49f2b83fee3d1cdb7de8b53ea310729b4)), closes [#&#8203;32040](https://github.com/aws/aws-cdk/issues/32040) - **aws_route53:** cannot use CfnParameter.valueAsNumber for L2 RecordSet weight ([#&#8203;31823](https://github.com/aws/aws-cdk/issues/31823)) ([14561ac](https://github.com/aws/aws-cdk/commit/14561aca0ad9c0d5eef29729dbc97fc3ccd4d171)), closes [#&#8203;31810](https://github.com/aws/aws-cdk/issues/31810) - **cli:** asset uploads fail if Object Lock is enabled on access bucket ([#&#8203;31937](https://github.com/aws/aws-cdk/issues/31937)) ([ab1e91d](https://github.com/aws/aws-cdk/commit/ab1e91d11ec2d3abc1edad318b7ea67ff91c9a88)) - **dynamoDB:** make TableV2 taggable ([#&#8203;31867](https://github.com/aws/aws-cdk/issues/31867)) ([796c6d1](https://github.com/aws/aws-cdk/commit/796c6d170a91d9f5fa96f3915a6fb6a7f7bddff3)), closes [#&#8203;30631](https://github.com/aws/aws-cdk/issues/30631) - **opensearch:** add I4G to list of OpenSearch nodes not requiring EBS volumes ([#&#8203;31948](https://github.com/aws/aws-cdk/issues/31948)) ([73378f2](https://github.com/aws/aws-cdk/commit/73378f288e8c422228fbd145d9d41efcb3605857)) *** #### Alpha modules (2.166.0-alpha.0) ##### ⚠ BREAKING CHANGES TO EXPERIMENTAL FEATURES - **scheduler-targets-alpha:** Schedule Target will reuse role if target is re-used across schedules. This change triggered replacement of existing roles for Schedule as logical ID of the roles are changed. ##### Features - **glue-alpha:** add job run queuing to Glue job ([#&#8203;31830](https://github.com/aws/aws-cdk/issues/31830)) ([5fca268](https://github.com/aws/aws-cdk/commit/5fca268e455c1ae7c424a4dec01c0c08bec3c16c)), closes [#&#8203;31826](https://github.com/aws/aws-cdk/issues/31826) ##### Bug Fixes - **scheduler-targets-alpha:** create a role per target instead of singleton schedule target role ([#&#8203;31895](https://github.com/aws/aws-cdk/issues/31895)) ([aee1b30](https://github.com/aws/aws-cdk/commit/aee1b30adabebe1712720d0d7d27ed4704ac9719)), closes [#&#8203;31785](https://github.com/aws/aws-cdk/issues/31785) ### [`v2.165.0`](https://github.com/aws/aws-cdk/releases/tag/v2.165.0) [Compare Source](https://github.com/aws/aws-cdk/compare/v2.164.1...v2.165.0) ##### Features - **bootstrap:** add lifecycle rule to abort multipart uploads after 7 days ([#&#8203;31956](https://github.com/aws/aws-cdk/issues/31956)) ([b800da8](https://github.com/aws/aws-cdk/commit/b800da8172919a1ab27f885549e701d98323c9bb)), closes [#&#8203;29045](https://github.com/aws/aws-cdk/issues/29045) - **bootstrap:** delete noncurrent versions after 30 days ([#&#8203;31949](https://github.com/aws/aws-cdk/issues/31949)) ([579041e](https://github.com/aws/aws-cdk/commit/579041e5d41e780ce1f6fb9f778c353868fb6938)) - **cli:** garbage collect ecr assets (under --unstable flag) ([#&#8203;31841](https://github.com/aws/aws-cdk/issues/31841)) ([da85e54](https://github.com/aws/aws-cdk/commit/da85e54d7d3dfb4e33942f58564e91039e7d22ff)), closes [#&#8203;31611](https://github.com/aws/aws-cdk/issues/31611) - **codebuild:** add support of organization webhook in github source ([#&#8203;31740](https://github.com/aws/aws-cdk/issues/31740)) ([8c15b5f](https://github.com/aws/aws-cdk/commit/8c15b5f19a0c289fd0dad8c35b6734232d957836)), closes [#&#8203;31736](https://github.com/aws/aws-cdk/issues/31736) - **cognito:** support UserPoolGroup ([#&#8203;31351](https://github.com/aws/aws-cdk/issues/31351)) ([408b20f](https://github.com/aws/aws-cdk/commit/408b20f92122069a04ff5776b4783ae220d04a56)), closes [#&#8203;21026](https://github.com/aws/aws-cdk/issues/21026) - update L1 CloudFormation resource definitions ([#&#8203;31917](https://github.com/aws/aws-cdk/issues/31917)) ([8c93291](https://github.com/aws/aws-cdk/commit/8c93291f789b441397bc5a64308816e89f682199)) ##### Bug Fixes - **assertions:** throw error or warn when `synth` is called multiple times on mutated construct tree ([#&#8203;31865](https://github.com/aws/aws-cdk/issues/31865)) ([a261c9d](https://github.com/aws/aws-cdk/commit/a261c9d8a316ec389f19c873122691d48c5ca16d)), closes [#&#8203;24689](https://github.com/aws/aws-cdk/issues/24689) - **cli:** ecr garbage collection hangs when repository has no images ([#&#8203;31951](https://github.com/aws/aws-cdk/issues/31951)) ([a235a9f](https://github.com/aws/aws-cdk/commit/a235a9fad29bf0da141b27ca391861fa613f42b8)) - **cli:** garbage collection ignores review_in_progress stacks ([#&#8203;31906](https://github.com/aws/aws-cdk/issues/31906)) ([cb3ecfe](https://github.com/aws/aws-cdk/commit/cb3ecfe8f255e626db3706632c9590c86c28bea5)) - **s3-assets:** cannot publish a file without extension ([#&#8203;30597](https://github.com/aws/aws-cdk/issues/30597)) ([ccab485](https://github.com/aws/aws-cdk/commit/ccab485b87a7090ddf0773508d7b8ee84ff654b0)), closes [#&#8203;30471](https://github.com/aws/aws-cdk/issues/30471) - **sqs:** queue with `fifo: false` does not deploy ([#&#8203;31922](https://github.com/aws/aws-cdk/issues/31922)) ([a9d3b02](https://github.com/aws/aws-cdk/commit/a9d3b02783104fe862a3e863e8c89af845b49c8c)), closes [#&#8203;8550](https://github.com/aws/aws-cdk/issues/8550) - enable node-fips compatible body checksums for S3 ([#&#8203;31883](https://github.com/aws/aws-cdk/issues/31883)) ([4f29c1d](https://github.com/aws/aws-cdk/commit/4f29c1d04533b68535c1a5706855066d1d1ea577)) *** #### Alpha modules (2.165.0-alpha.0) ##### ⚠ BREAKING CHANGES TO EXPERIMENTAL FEATURES - **ec2-alpha:** The new `VpcCidrBlock` L2 construct replaces `CfnVPCCidrBlock`. This change alters the logical ID of `AWS::EC2::VPCCidrBlock` resources in CloudFormation templates. Existing deployments will see errors like `CIDR range conflicts with x.xx.xx.xx/xx with association ID vpc-cidr-assoc-ABCD`. To resolve this, you must recreate your existing stacks to use the new module. ##### Features - **apprunner:** support vpc ingress connection ([#&#8203;30623](https://github.com/aws/aws-cdk/issues/30623)) ([048e753](https://github.com/aws/aws-cdk/commit/048e7538dd71d69c2add28ff454b6d9c69b4f256)), closes [#&#8203;22850](https://github.com/aws/aws-cdk/issues/22850) - **ec2-alpha:** adding imports for SubnetV2 and VpcV2 ([#&#8203;31765](https://github.com/aws/aws-cdk/issues/31765)) ([d108a80](https://github.com/aws/aws-cdk/commit/d108a8003e463301acea15076501cd815b0eda4a)) - **location:** support Tracker and TrackerConsumer ([#&#8203;31268](https://github.com/aws/aws-cdk/issues/31268)) ([046f041](https://github.com/aws/aws-cdk/commit/046f0418a3de08a59c940a7a3d93148cb5f0659b)), closes [#&#8203;30712](https://github.com/aws/aws-cdk/issues/30712) - **pipes-enrichments:** support API Gateway enrichment ([#&#8203;31794](https://github.com/aws/aws-cdk/issues/31794)) ([09052c2](https://github.com/aws/aws-cdk/commit/09052c2060c410028896fd54e76a857b2141c8a4)), closes [#&#8203;29384](https://github.com/aws/aws-cdk/issues/29384) - **pipes-targets:** add SageMaker ([#&#8203;30696](https://github.com/aws/aws-cdk/issues/30696)) ([a5fdf57](https://github.com/aws/aws-cdk/commit/a5fdf570beb1456b1307276f56d90fd1ba0b46d8)) - **redshift-alpha:** query execution timeout setting during table creation ([#&#8203;31818](https://github.com/aws/aws-cdk/issues/31818)) ([40f07ae](https://github.com/aws/aws-cdk/commit/40f07ae330d074cfa7861e24a0427da7ec427f68)), closes [#&#8203;31329](https://github.com/aws/aws-cdk/issues/31329) - **kinesisfirehose-alpha:** kinesis firehose and kinesis firehose destinations modules are now in Developer Preview ([#&#8203;31952](https://github.com/aws/aws-cdk/pull/31952)) ##### Bug Fixes - **location:** remove base class from PlaceIndex class ([#&#8203;31287](https://github.com/aws/aws-cdk/issues/31287)) ([bc67866](https://github.com/aws/aws-cdk/commit/bc67866f579c401556d427eb150bcd118d69bd17)), closes [#&#8203;30711](https://github.com/aws/aws-cdk/issues/30711) [#&#8203;30682](https://github.com/aws/aws-cdk/issues/30682) - **scheduler-alpha:** scheduler input always get transformed to string with extra double quotes ([#&#8203;31894](https://github.com/aws/aws-cdk/issues/31894)) ([186b8ab](https://github.com/aws/aws-cdk/commit/186b8abfab8452b31cba13b56998242f63c43159)) - **scheduler-alpha:** too many KMS permissions granted ([#&#8203;31923](https://github.com/aws/aws-cdk/issues/31923)) ([06678a3](https://github.com/aws/aws-cdk/commit/06678a39e029582af14c8b021f946b9ce9cac9be)), closes [#&#8203;31785](https://github.com/aws/aws-cdk/issues/31785) ### [`v2.164.1`](https://github.com/aws/aws-cdk/releases/tag/v2.164.1) [Compare Source](https://github.com/aws/aws-cdk/compare/v2.164.0...v2.164.1) ##### Bug Fixes - enable node-fips compatible body checksums for S3 ([#&#8203;31883](https://github.com/aws/aws-cdk/issues/31883)) ([290a499](https://github.com/aws/aws-cdk/commit/290a499f31413bd71eece4ad9f196eb5993747a9)) *** #### Alpha modules (2.164.1-alpha.0) ### [`v2.164.0`](https://github.com/aws/aws-cdk/releases/tag/v2.164.0) [Compare Source](https://github.com/aws/aws-cdk/compare/v2.163.1...v2.164.0) ##### Features - **cli:** add ability to configure hotswap properties for ECS ([#&#8203;30511](https://github.com/aws/aws-cdk/issues/30511)) ([fee2cf8](https://github.com/aws/aws-cdk/commit/fee2cf88c58c6c1f25b9e6fad87c8042de464fd9)), closes [#&#8203;29618](https://github.com/aws/aws-cdk/issues/29618) - **cognito:** support email based MFA ([#&#8203;31816](https://github.com/aws/aws-cdk/issues/31816)) ([f9d6eef](https://github.com/aws/aws-cdk/commit/f9d6eefd52d5bdc63ff2be844f567e8f1d0b4258)), closes [#&#8203;31815](https://github.com/aws/aws-cdk/issues/31815) - **cognito:** the Cognito Identity Pools module is now in Developer Preview ([#&#8203;31854](https://github.com/aws/aws-cdk/issues/31854)) ([b22899f](https://github.com/aws/aws-cdk/commit/b22899f9dee04d5c446ebcdfff810a954ac08dc6)) ##### Bug Fixes - **cli:** cross-account asset publishing doesn't work without bootstrap stack ([#&#8203;31876](https://github.com/aws/aws-cdk/issues/31876)) ([427bf63](https://github.com/aws/aws-cdk/commit/427bf630cb2e28ec98477b313eef32d5b9b91525)), closes [#&#8203;31866](https://github.com/aws/aws-cdk/issues/31866) - **cli:** deploy-role is not authorized to perform DescribeStackResources ([#&#8203;31878](https://github.com/aws/aws-cdk/issues/31878)) ([8d06824](https://github.com/aws/aws-cdk/commit/8d06824298d80b18c6b0143a9ac38b79ea5d6253)) - **core:** fix policy synthesizer logic for precreated roles ([#&#8203;31710](https://github.com/aws/aws-cdk/issues/31710)) ([aae03c9](https://github.com/aws/aws-cdk/commit/aae03c9f899ec2a77b841207ef0b4eb3a7e0ae00)) - **dynamodb:** replication regions are incompatible with resource policies in TableV2 and feature flag ([#&#8203;31513](https://github.com/aws/aws-cdk/issues/31513)) ([0b03eb0](https://github.com/aws/aws-cdk/commit/0b03eb0f62c132c1bd586a8ec31818398d07707f)), closes [#&#8203;30705](https://github.com/aws/aws-cdk/issues/30705) - **events-targets:** kinesis Stream target with Customer-Managed KMS key causes EventBridge FailedInvocations ([#&#8203;31836](https://github.com/aws/aws-cdk/issues/31836)) ([58dfda0](https://github.com/aws/aws-cdk/commit/58dfda087a8aabde2683cd99df005d6e5e73a7ce)), closes [#&#8203;10996](https://github.com/aws/aws-cdk/issues/10996) *** #### Alpha modules (2.164.0-alpha.0) ##### Features - **iot:** scheduled audit ([#&#8203;31776](https://github.com/aws/aws-cdk/issues/31776)) ([366b492](https://github.com/aws/aws-cdk/commit/366b4927c50168113dd4057f6255ab6c76278135)), closes [#&#8203;31779](https://github.com/aws/aws-cdk/issues/31779) ##### Bug Fixes - **ec2:** allow NAT instance to associate public IP ([#&#8203;31812](https://github.com/aws/aws-cdk/issues/31812)) ([e96b4ce](https://github.com/aws/aws-cdk/commit/e96b4ce4ae64076e4c2e688c649c69fb15a624d6)), closes [#&#8203;31711](https://github.com/aws/aws-cdk/issues/31711) - **scheduler-targets-alpha:** imported lambda function as schedule target throws synth error ([#&#8203;31837](https://github.com/aws/aws-cdk/issues/31837)) ([d1d179f](https://github.com/aws/aws-cdk/commit/d1d179f617f83bbb3bf44d3cc629be8eed0d4e2b)), closes [#&#8203;29284](https://github.com/aws/aws-cdk/issues/29284) ### [`v2.163.1`](https://github.com/aws/aws-cdk/releases/tag/v2.163.1) [Compare Source](https://github.com/aws/aws-cdk/compare/v2.163.0...v2.163.1) ##### Bug Fixes - 'Need to perform AWS calls for account' when doing cross-account deployments ([#&#8203;31846](https://github.com/aws/aws-cdk/issues/31846)) ([5aa63d1](https://github.com/aws/aws-cdk/commit/5aa63d136294a42df2f65a3705655eb3c108fc2c)), closes [#&#8203;31845](https://github.com/aws/aws-cdk/issues/31845) *** #### Alpha modules (2.163.1-alpha.0) ### [`v2.163.0`](https://github.com/aws/aws-cdk/releases/tag/v2.163.0) [Compare Source](https://github.com/aws/aws-cdk/compare/v2.162.1...v2.163.0) ##### Features - **cli:** garbage collect s3 assets (under `--unstable` flag) ([#&#8203;31611](https://github.com/aws/aws-cdk/issues/31611)) ([0a0e4ad](https://github.com/aws/aws-cdk/commit/0a0e4ad271197ccec2242d247516616f966a959c)) - **cognito:** support `emailVerified` for `AttributeMapping` interface ([#&#8203;31632](https://github.com/aws/aws-cdk/issues/31632)) ([5de7835](https://github.com/aws/aws-cdk/commit/5de783504111b6a04dc8d1da7c67a30200f3e3e5)), closes [#&#8203;30467](https://github.com/aws/aws-cdk/issues/30467) [#&#8203;30467](https://github.com/aws/aws-cdk/issues/30467) - **dynamodb:** enable contributor insights for global secondary index ([#&#8203;30560](https://github.com/aws/aws-cdk/issues/30560)) ([799b541](https://github.com/aws/aws-cdk/commit/799b541135d0fb9cea31ddf29a8dacc1a94cb0fc)), closes [#&#8203;15671](https://github.com/aws/aws-cdk/issues/15671) - **ecs-patterns:** support NLB with TLS listener and target group ([#&#8203;30611](https://github.com/aws/aws-cdk/issues/30611)) ([f4f8abc](https://github.com/aws/aws-cdk/commit/f4f8abcb2a6df6a26b289b49b7738efce78b2936)), closes [#&#8203;8517](https://github.com/aws/aws-cdk/issues/8517) - **efs:** allow AccessPoint to set client token ([#&#8203;31184](https://github.com/aws/aws-cdk/issues/31184)) ([8208774](https://github.com/aws/aws-cdk/commit/8208774fb9a5f9d58a5fea24e60aa6862e861aba)) - **events:** dead letter queue for an Event Bus ([#&#8203;30628](https://github.com/aws/aws-cdk/issues/30628)) ([318eae6](https://github.com/aws/aws-cdk/commit/318eae6c9eca456e0c34ed21855dad9d2bfa2a0f)), closes [#&#8203;30531](https://github.com/aws/aws-cdk/issues/30531) - **fsx:** specify file system type version for the Lustre file system ([#&#8203;31136](https://github.com/aws/aws-cdk/issues/31136)) ([252cca9](https://github.com/aws/aws-cdk/commit/252cca9351be0dc09c242107639dceee74b96898)), closes [#&#8203;31130](https://github.com/aws/aws-cdk/issues/31130) - **fsx:** support HDD storage type for a Lustre file systems ([#&#8203;30207](https://github.com/aws/aws-cdk/issues/30207)) ([2d9aefb](https://github.com/aws/aws-cdk/commit/2d9aefbb6c2c5323d3d2d17e5961fb2300c25fa3)), closes [#&#8203;30206](https://github.com/aws/aws-cdk/issues/30206) - **iam:** allow creating service principal using custom name ([#&#8203;31793](https://github.com/aws/aws-cdk/issues/31793)) ([3d650c3](https://github.com/aws/aws-cdk/commit/3d650c30a2e1a47584b3dacd632269bab2071348)), closes [#&#8203;31767](https://github.com/aws/aws-cdk/issues/31767) - **kms:** allow `fromLookup` method to return dummy key if target key was not found ([#&#8203;31676](https://github.com/aws/aws-cdk/issues/31676)) ([34bdeca](https://github.com/aws/aws-cdk/commit/34bdecad76ac93d7dc4f8321352e851cebc75e17)), closes [#&#8203;31574](https://github.com/aws/aws-cdk/issues/31574) [/github.com/aws/aws-cdk/blob/v2.161.0/packages/aws-cdk-lib/aws-kms/lib/key.ts#L686](https://github.com/aws//github.com/aws/aws-cdk/blob/v2.161.0/packages/aws-cdk-lib/aws-kms/lib/key.ts/issues/L686) [/github.com/aws/aws-cdk/issues/31574#issuecomment-2399080697](https://github.com/aws//github.com/aws/aws-cdk/issues/31574/issues/issuecomment-2399080697) - **rds:** support local write forwarding for an aurora PostgreSQL cluster ([#&#8203;31803](https://github.com/aws/aws-cdk/issues/31803)) ([a32436a](https://github.com/aws/aws-cdk/commit/a32436a5ea834b29faed19f37652fb4dae3fb1d7)), closes [#&#8203;31802](https://github.com/aws/aws-cdk/issues/31802) - **s3:** support `transitionDefaultMinimumObjectSize` for life cycle ([#&#8203;31778](https://github.com/aws/aws-cdk/issues/31778)) ([4aa117b](https://github.com/aws/aws-cdk/commit/4aa117b34c95555ea7d53dfa748a048196bf4044)), closes [#&#8203;31777](https://github.com/aws/aws-cdk/issues/31777) [/docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-s3-bucket-lifecycleconfiguration.html#cfn-s3](https://github.com/aws//docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-s3-bucket-lifecycleconfiguration.html/issues/cfn-s3) - update L1 CloudFormation resource definitions ([#&#8203;31752](https://github.com/aws/aws-cdk/issues/31752)) ([8067294](https://github.com/aws/aws-cdk/commit/8067294f6c378795538d7ed2a8e0741310bec0b9)) - update L1 CloudFormation resource definitions ([#&#8203;31800](https://github.com/aws/aws-cdk/issues/31800)) ([fccb006](https://github.com/aws/aws-cdk/commit/fccb0060759af997db1bf2b69a27d1c0d282e28c)) - **rds:** support performance insights configuration at cluster level ([#&#8203;31385](https://github.com/aws/aws-cdk/issues/31385)) ([7d6bf77](https://github.com/aws/aws-cdk/commit/7d6bf773d3a8f17d94c4aa5d5aa9025270c254aa)), closes [#&#8203;31375](https://github.com/aws/aws-cdk/issues/31375) - disallow cross account asset publishing in some scenarios ([#&#8203;31623](https://github.com/aws/aws-cdk/issues/31623)) ([edd031d](https://github.com/aws/aws-cdk/commit/edd031d3c76a870991bf8a5f021f8043d6a2b871)) - **step-functions:** add bucketNamePath in item reader ([#&#8203;31619](https://github.com/aws/aws-cdk/issues/31619)) ([97130d8](https://github.com/aws/aws-cdk/commit/97130d80824cbbef4323ed7ead00fcfdc61fe7fb)), closes [#&#8203;29409](https://github.com/aws/aws-cdk/issues/29409) ##### Bug Fixes - **cli:** `cdk import` errors with 'S3 error: Access Denied' ([#&#8203;31727](https://github.com/aws/aws-cdk/issues/31727)) ([cd324d0](https://github.com/aws/aws-cdk/commit/cd324d028e03215e877f13a26992ebd5a2b4db03)), closes [#&#8203;31597](https://github.com/aws/aws-cdk/issues/31597) [#&#8203;31716](https://github.com/aws/aws-cdk/issues/31716) - **lambda:** filterRule.null() returns empty array ([#&#8203;31701](https://github.com/aws/aws-cdk/issues/31701)) ([5830ee1](https://github.com/aws/aws-cdk/commit/5830ee1eb29fc025c3ebe1451647c79cef155ea1)), closes [#&#8203;31458](https://github.com/aws/aws-cdk/issues/31458) - **s3:** add support for uppercase characters in legacy bucket names ([#&#8203;31813](https://github.com/aws/aws-cdk/issues/31813)) ([7bebf40](https://github.com/aws/aws-cdk/commit/7bebf400a6e271c3f50402a5e72aff1f1b8be109)), closes [#&#8203;31731](https://github.com/aws/aws-cdk/issues/31731) - **stepfunctions-tasks:** stateMachine construct doesn't generate a valid policy for default StateMachineRole ([#&#8203;31801](https://github.com/aws/aws-cdk/issues/31801)) ([efbbddb](https://github.com/aws/aws-cdk/commit/efbbddbee370a9b4dba2fbea4c92b44ad39be973)), closes [#&#8203;31714](https://github.com/aws/aws-cdk/issues/31714) *** #### Alpha modules (2.163.0-alpha.0) ##### Features - **ec2:** disable api termination ([#&#8203;30620](https://github.com/aws/aws-cdk/issues/30620)) ([108737d](https://github.com/aws/aws-cdk/commit/108737d613e2a2da20a53fe92a4dac2b43d21044)) - **kinesisfirehose-alpha:** refactor sourceStream property to support multiple types of sources ([#&#8203;31723](https://github.com/aws/aws-cdk/issues/31723)) ([0260046](https://github.com/aws/aws-cdk/commit/026004682f25d324b5f82b8d0ed92820c55233c1)) - **pipes-enrichments:** support API destination enrichment ([#&#8203;31312](https://github.com/aws/aws-cdk/issues/31312)) ([1557793](https://github.com/aws/aws-cdk/commit/1557793f696da77ab592e81165dbbb5c0886e7e2)), closes [#&#8203;29383](https://github.com/aws/aws-cdk/issues/29383) - **pipes-targets:** add CloudWatch Logs ([#&#8203;30665](https://github.com/aws/aws-cdk/issues/30665)) ([893769e](https://github.com/aws/aws-cdk/commit/893769ed22818a6c31ec1bdd58d458f50ba28c48)) ##### Bug Fixes - **ec2:** exposed userDataCausesReplacement in BastionHostLinuxProps ([#&#8203;31416](https://github.com/aws/aws-cdk/issues/31416)) ([029c298](https://github.com/aws/aws-cdk/commit/029c298db9875214eb16b88689b13f5e244b5ea4)), closes [#&#8203;31348](https://github.com/aws/aws-cdk/issues/31348) - **scheduler-alpha:** remove `targetOverrides` prop from Schedule ([#&#8203;31799](https://github.com/aws/aws-cdk/issues/31799)) ([be4154b](https://github.com/aws/aws-cdk/commit/be4154b3a2bba28700b8476dfb26af54da0bdc6f)) ### [`v2.162.1`](https://github.com/aws/aws-cdk/releases/tag/v2.162.1) [Compare Source](https://github.com/aws/aws-cdk/compare/v2.162.0...v2.162.1) ##### Bug Fixes - **cli:** `cdk import` errors with 'S3 error: Access Denied' ([#&#8203;31727](https://github.com/aws/aws-cdk/issues/31727)) ([5c2787a](https://github.com/aws/aws-cdk/commit/5c2787ab9ee35b36f91d9a2889b92c6ac85e2fcb)), closes [#&#8203;31597](https://github.com/aws/aws-cdk/issues/31597) [#&#8203;31716](https://github.com/aws/aws-cdk/issues/31716) *** #### Alpha modules (2.162.1-alpha.0) ### [`v2.162.0`](https://github.com/aws/aws-cdk/releases/tag/v2.162.0) [Compare Source](https://github.com/aws/aws-cdk/compare/v2.161.1...v2.162.0) ##### Features - **appsync:** add `ownerContact` property to the `GraphqlApi` ([#&#8203;31585](https://github.com/aws/aws-cdk/issues/31585)) ([a8b2f01](https://github.com/aws/aws-cdk/commit/a8b2f0120d90ac5ed9ed8e222a673d996ea057fa)) - **cdk:** expose authorizer id and authorization type ([#&#8203;31622](https://github.com/aws/aws-cdk/issues/31622)) ([daaf0aa](https://github.com/aws/aws-cdk/commit/daaf0aaa18e5f0120e58c9d7655605c5351e8671)), closes [#&#8203;31605](https://github.com/aws/aws-cdk/issues/31605) - **cli:** cdk rollback ([#&#8203;31684](https://github.com/aws/aws-cdk/issues/31684)) ([3e40edc](https://github.com/aws/aws-cdk/commit/3e40edce14080939baa8b5b3a3a100e991d965fd)), closes [#&#8203;31407](https://github.com/aws/aws-cdk/issues/31407) - **ecs:** add fargate ephemeral storage encryption to cluster settings ([#&#8203;30759](https://github.com/aws/aws-cdk/issues/30759)) ([642a944](https://github.com/aws/aws-cdk/commit/642a9444e9549b04949ae81656aba0d8525e75f4)), closes [#&#8203;30721](https://github.com/aws/aws-cdk/issues/30721) - **eks:** support eks with k8s 1.31 ([#&#8203;31707](https://github.com/aws/aws-cdk/issues/31707)) ([fc09bc1](https://github.com/aws/aws-cdk/commit/fc09bc19166b2e4b76de6b836505c7b421111449)) - **elasticloadbalancingv2:** support TCP idle timeout for Network Load Balancer Listener ([#&#8203;31584](https://github.com/aws/aws-cdk/issues/31584)) ([8d851a9](https://github.com/aws/aws-cdk/commit/8d851a96a4d59b6cf03ca44ed1eac0c65602e27f)), closes [#&#8203;31310](https://github.com/aws/aws-cdk/issues/31310) - update L1 CloudFormation resource definitions ([#&#8203;31688](https://github.com/aws/aws-cdk/issues/31688)) ([b211189](https://github.com/aws/aws-cdk/commit/b2111890d55f33f43c42f27d2da6ede7de702f25)) - **rds:** enable `grantDataApiAccess` method for imported database cluster ([#&#8203;31280](https://github.com/aws/aws-cdk/issues/31280)) ([3c92012](https://github.com/aws/aws-cdk/commit/3c9201296e16a790f9ceccc8862f10e6d23e9d7d)), closes [#&#8203;31116](https://github.com/aws/aws-cdk/issues/31116) [/github.com/aws/aws-cdk/blob/main/packages/aws-cdk-lib/aws-rds/lib/cluster.ts#L983](https://github.com/aws//github.com/aws/aws-cdk/blob/main/packages/aws-cdk-lib/aws-rds/lib/cluster.ts/issues/L983) [/github.com/aws/aws-cdk/blob/main/packages/aws-cdk-lib/aws-rds/lib/cluster.ts#L523-L526](https://github.com/aws//github.com/aws/aws-cdk/blob/main/packages/aws-cdk-lib/aws-rds/lib/cluster.ts/issues/L523-L526) ##### Bug Fixes - **core:** `cdk diff` on large templates fails when passing in `toolkitStackName` and `qualifier` ([#&#8203;31636](https://github.com/aws/aws-cdk/issues/31636)) ([f603c97](https://github.com/aws/aws-cdk/commit/f603c97bc82172219d3715505fe228c1bb02f475)), closes [#&#8203;29179](https://github.com/aws/aws-cdk/issues/29179) - **ecs:** ecs exec cannot be enabled for ECS Anywhere (ecs.ExternalService) ([#&#8203;31374](https://github.com/aws/aws-cdk/issues/31374)) ([cff1fcd](https://github.com/aws/aws-cdk/commit/cff1fcd6961227f5ef8fd0c1fd3a6d108dc28e34)), closes [#&#8203;31181](https://github.com/aws/aws-cdk/issues/31181) - **elasticloadbalancingv2:** `http2Enabled` with true is ignored in ApplicationLoadBalancer ([#&#8203;31675](https://github.com/aws/aws-cdk/issues/31675)) ([c1b240e](https://github.com/aws/aws-cdk/commit/c1b240ee6fdba9a0ca1126c97c5e0173bae007ce)), closes [#&#8203;31609](https://github.com/aws/aws-cdk/issues/31609) - **event-targets:** ecsTask uses invalid task definition arn in policy ([#&#8203;31615](https://github.com/aws/aws-cdk/issues/31615)) ([4ada3ea](https://github.com/aws/aws-cdk/commit/4ada3ea4c06bb1f9155bbe2928f64babe4527d0d)), closes [#&#8203;30390](https://github.com/aws/aws-cdk/issues/30390) [#&#8203;30484](https://github.com/aws/aws-cdk/issues/30484) - **iam:** override Role.applyRemovalPolicy for customizeRoles ([#&#8203;31652](https://github.com/aws/aws-cdk/issues/31652)) ([35ed5c6](https://github.com/aws/aws-cdk/commit/35ed5c64db787c74abc21ce75176eaa8d240689f)), closes [#&#8203;31651](https://github.com/aws/aws-cdk/issues/31651) - **s3:** unable to update the s3 event notifications on an existing S3 bucket ([#&#8203;31431](https://github.com/aws/aws-cdk/issues/31431)) ([0a56c0d](https://github.com/aws/aws-cdk/commit/0a56c0db7e9851af26e65a05521e0ec082a06c9c)), closes [#&#8203;31303](https://github.com/aws/aws-cdk/issues/31303) *** #### Alpha modules (2.162.0-alpha.0) ##### ⚠ BREAKING CHANGES TO EXPERIMENTAL FEATURES - **kinesisfirehose-alpha:** replaced `destinations` property with `destination` (singular) and changed the type from array of Destinations to a single Destination. Old behaviour would only allow an array with a single Destination to be passed in anyway. ##### Features - **iot-alpha:** support for account audit configuration ([#&#8203;31661](https://github.com/aws/aws-cdk/issues/31661)) ([fc19571](https://github.com/aws/aws-cdk/commit/fc19571c6392e905ff03998d0e8bc4e3b01399f4)), closes [#&#8203;31663](https://github.com/aws/aws-cdk/issues/31663) - **pipes-targets:** add EventBridge ([#&#8203;30654](https://github.com/aws/aws-cdk/issues/30654)) ([842f49a](https://github.com/aws/aws-cdk/commit/842f49a224ceadb1ef973dc3048ee3ac52d8f118)) ##### Bug Fixes - **cli-lib:** cannot bootstrap specific environment ([#&#8203;31713](https://github.com/aws/aws-cdk/issues/31713)) ([fec4bb1](https://github.com/aws/aws-cdk/commit/fec4bb1c26db54bbb151bd05239e1fc1be5de657)) ##### Miscellaneous Chores - **kinesisfirehose-alpha:** replace`destinations` property with `destination` and change type from array to single IDestination ([#&#8203;31630](https://github.com/aws/aws-cdk/issues/31630)) ([1e2cff1](https://github.com/aws/aws-cdk/commit/1e2cff19eec234e1d1f7f501230cba01b220a09b)) ### [`v2.161.1`](https://github.com/aws/aws-cdk/releases/tag/v2.161.1) [Compare Source](https://github.com/aws/aws-cdk/compare/v2.161.0...v2.161.1) ##### Reverts - feat(cli): cdk rollback ([#&#8203;31407](https://github.com/aws/aws-cdk/issues/31407)) ([#&#8203;31657](https://github.com/aws/aws-cdk/issues/31657)) ([29bf223](https://github.com/aws/aws-cdk/commit/29bf2233a33d3ded20639279fa712a5b036fe041)) *** #### Alpha modules (2.161.1-alpha.0) ### [`v2.161.0`](https://github.com/aws/aws-cdk/releases/tag/v2.161.0) [Compare Source](https://github.com/aws/aws-cdk/compare/v2.160.0...v2.161.0) ##### Features - update L1 CloudFormation resource definitions ([#&#8203;31640](https://github.com/aws/aws-cdk/issues/31640)) ([79d9c4d](https://github.com/aws/aws-cdk/commit/79d9c4ddd4b96a4d4bd0c38a83687229253449fc)), closes [/docs.aws.amazon.com/datasync/latest/userguide/create-locations-cli.html#create-location-s3](https://github.com/aws//docs.aws.amazon.com/datasync/latest/userguide/create-locations-cli.html/issues/create-location-s3) - **bedrock:** support meta llama3-2 ([#&#8203;31568](https://github.com/aws/aws-cdk/issues/31568)) ([4ddc702](https://github.com/aws/aws-cdk/commit/4ddc702236e74abd179b5d866614066f71a0f91b)) - **cli:** `cdk rollback` ([#&#8203;31407](https://github.com/aws/aws-cdk/issues/31407)) ([0755561](https://github.com/aws/aws-cdk/commit/0755561b79d6be0744b0b21504fe54ffcf2b618a)), closes [#&#8203;30546](https://github.com/aws/aws-cdk/issues/30546) - **cli:** notices on bootstrap version ([#&#8203;31555](https://github.com/aws/aws-cdk/issues/31555)) ([b0e4a54](https://github.com/aws/aws-cdk/commit/b0e4a544aecce86e8b41e7cd148a139c2e34bfbd)) - **ecs:** support restart policy for container ([#&#8203;31228](https://github.com/aws/aws-cdk/issues/31228)) ([a22e8cc](https://github.com/aws/aws-cdk/commit/a22e8cc8e2bd458fa2b972a76cd5c1f8c57a88d1)), closes [#&#8203;31127](https://github.com/aws/aws-cdk/issues/31127) [#&#8203;31425](https://github.com/aws/aws-cdk/issues/31425) - **logs:** add metric methods for log group IncomingLogEvents and IncomingBytes ([#&#8203;31535](https://github.com/aws/aws-cdk/issues/31535)) ([2813eb2](https://github.com/aws/aws-cdk/commit/2813eb26c5ae7457591897fd898438019af8ea65)), closes [#&#8203;30034](https://github.com/aws/aws-cdk/issues/30034) - **rds:** support for local write forwarding in an Aurora Mysql cluster ([#&#8203;31524](https://github.com/aws/aws-cdk/issues/31524)) ([48c4192](https://github.com/aws/aws-cdk/commit/48c4192736c5ad1ea96f2b6760466031219adfbf)), closes [#&#8203;31523](https://github.com/aws/aws-cdk/issues/31523) - **s3-deployment:** added property outputObjectKeys for BucketDeployment ([#&#8203;31452](https://github.com/aws/aws-cdk/issues/31452)) ([54c01cb](https://github.com/aws/aws-cdk/commit/54c01cbb24242f5646f2798f8b28ec6172dedbc9)), closes [#&#8203;28579](https://github.com/aws/aws-cdk/issues/28579) ##### Bug Fixes - **appsync:** lambda authorizer permission is not scoped to appsync api arn ([#&#8203;31567](https://github.com/aws/aws-cdk/issues/31567)) ([c7cee15](https://github.com/aws/aws-cdk/commit/c7cee1525deb48d915740c9b30bdc6f886d17aa5)), closes [#&#8203;31550](https://github.com/aws/aws-cdk/issues/31550) [/docs.aws.amazon.com/controltower/latest/controlreference/lambda-rules.html#ct-lambda-pr-2](https://github.com/aws//docs.aws.amazon.com/controltower/latest/controlreference/lambda-rules.html/issues/ct-lambda-pr-2) - **batch:** remove default optimal for arm based instance types and add error checks ([#&#8203;31510](https://github.com/aws/aws-cdk/issues/31510)) ([7e80cc9](https://github.com/aws/aws-cdk/commit/7e80cc9665c0a1f7e82b124991d946a4234313c2)), closes [#&#8203;31148](https://github.com/aws/aws-cdk/issues/31148) - **cdk:** `cdk diff --quiet` to print stack name when there is diffs ([#&#8203;30186](https://github.com/aws/aws-cdk/issues/30186)) ([bcf9209](https://github.com/aws/aws-cdk/commit/bcf9209fb1b9e9aa295f50c5681201db094b8c00)), closes [#&#8203;27128](https://github.com/aws/aws-cdk/issues/27128) - **cli:** deployment errors are printed 3 times ([#&#8203;31389](https://github.com/aws/aws-cdk/issues/31389)) ([4b00ffe](https://github.com/aws/aws-cdk/commit/4b00ffeb86b3ebb9a0190c2842bd36ebb4043f52)) - **core:** `isTaggable` function can return undefined instead of false ([#&#8203;31600](https://github.com/aws/aws-cdk/issues/31600)) ([be70c82](https://github.com/aws/aws-cdk/commit/be70c822a1608cb43a4b4b17fc0430f3352797c6)), closes [#&#8203;26495](https://github.com/aws/aws-cdk/issues/26495) - **core:** apps that use token-aware-stringify are construct-instantiation-order-dependent ([#&#8203;31470](https://github.com/aws/aws-cdk/issues/31470)) ([4128bf1](https://github.com/aws/aws-cdk/commit/4128bf16b94c3fc9b654187abc8b52638d712999)), closes [#&#8203;31345](https://github.com/aws/aws-cdk/issues/31345) [#&#8203;31345](https://github.com/aws/aws-cdk/issues/31345) - **core:** file asset publishing role not used in `cdk diff` to upload large templates ([#&#8203;31597](https://github.com/aws/aws-cdk/issues/31597)) ([be1207b](https://github.com/aws/aws-cdk/commit/be1207beedb01fc1cf773f13705ddae19c3209f0)), closes [#&#8203;29936](https://github.com/aws/aws-cdk/issues/29936) [/github.com/aws/aws-cdk/blob/main/packages/aws-cdk/lib/api/bootstrap/bootstrap-template.yaml#L275](https://github.com/aws//github.com/aws/aws-cdk/blob/main/packages/aws-cdk/lib/api/bootstrap/bootstrap-template.yaml/issues/L275) [/github.com/aws/aws-cdk/blob/4b00ffeb86b3ebb9a0190c2842bd36ebb4043f52/packages/aws-cdk/lib/api/deployments.ts#L605](https://github.com/aws//github.com/aws/aws-cdk/blob/4b00ffeb86b3ebb9a0190c2842bd36ebb4043f52/packages/aws-cdk/lib/api/deployments.ts/issues/L605) - **core:** throw on intrinsics in CFN update and create policies ([#&#8203;31578](https://github.com/aws/aws-cdk/issues/31578)) ([9410361](https://github.com/aws/aws-cdk/commit/941036100f1633a5693075ea07477122bab9cbb2)), closes [#&#8203;27578](https://github.com/aws/aws-cdk/issues/27578) [#&#8203;30740](https://github.com/aws/aws-cdk/issues/30740) - **lambda:** configuring log retention fails on 70+ Lambdas ([#&#8203;31340](https://github.com/aws/aws-cdk/issues/31340)) ([a2d42d2](https://github.com/aws/aws-cdk/commit/a2d42d20ad4439ba294d1027152a16fb19786df3)), closes [#&#8203;31338](https://github.com/aws/aws-cdk/issues/31338) - **lambda-nodejs:** remove smithy models from bundling for AWS SDK v3 runtimes (under feature flag) ([#&#8203;31639](https://github.com/aws/aws-cdk/issues/31639)) ([19ee46d](https://github.com/aws/aws-cdk/commit/19ee46d7653894f0669aff3872c6c5314be0666c)) - **pipelines:** "Node with duplicate id" on duplicate stack names ([#&#8203;31328](https://github.com/aws/aws-cdk/issues/31328)) ([16b74f3](https://github.com/aws/aws-cdk/commit/16b74f337e351b177aaeed2d80c519ff264c3e11)), closes [#&#8203;30960](https://github.com/aws/aws-cdk/issues/30960) - **rds:** fixed the IAM policy that grantConnect() generates for DatabaseInstanceReadReplica ([#&#8203;31579](https://github.com/aws/aws-cdk/issues/31579)) ([52f676c](https://github.com/aws/aws-cdk/commit/52f676ca82a6078425020efcef73da8bd6afa261)), closes [#&#8203;31061](https://github.com/aws/aws-cdk/issues/31061) - **stack:** check stack tags for deploy-time values ([#&#8203;31457](https://github.com/aws/aws-cdk/issues/31457)) ([abd1768](https://github.com/aws/aws-cdk/commit/abd176866a3ab3ce14b20bd5773ab3b23b1b7677)), closes [#&#8203;28017](https://github.com/aws/aws-cdk/issues/28017) - update L1 CloudFormation resource definitions by removing outdated schema overrides ([#&#8203;31539](https://github.com/aws/aws-cdk/issues/31539)) ([218331b](https://github.com/aws/aws-cdk/commit/218331bd1f87897bf6cbd42a2059d570b59bfb3f)) *** #### Alpha modules (2.161.0-alpha.0) ##### ⚠ BREAKING CHANGES TO EXPERIMENTAL FEATURES - **kinesisfirehose-destinations:** the `logging` and `logGroup` properties in `DestinationLoggingProps` have been removed and replaced with a single optional property `loggingConfig` which accepts a class of type `LoggingConfig`. ##### Details Combine the `logging` and `logGroup` properties into a single new optional property called `loggingConfig` which accepts a class of type `LoggingConfig`. `LoggingConfig` is an abstract class which can be instantiated through either an instance of `EnableLogging` or `DisableLogging` which can be used in the following 3 ways: ```ts import * as logs from 'aws-cdk-lib/aws-logs'; const logGroup = new logs.LogGroup(this, 'Log Group'); declare const bucket: s3.Bucket; // 1. Enable logging with no parameters - a log group will be created for you const destinationWithLogging = new destinations.S3Bucket(bucket, { loggingConfig: new destinations.EnableLogging(), }); // 2. Enable a logging and pass in a logGroup to be used const destinationWithLoggingAndMyLogGroup = new destinations.S3Bucket(bucket, { loggingConfig: new destinations.EnableLogging(logGroup), }); // 3. Disable logging (does not accept any parameters so it is now impossible to provide a logGroup in this case) const destinationWithoutLogging = new destinations.S3Bucket(bucket, { loggingConfig: new destinations.DisableLogging(), }); ``` ##### Description of how you validated changes unit + integ test ##### Checklist - [x] My code adheres to the [CONTRIBUTING GUIDE](https://github.com/aws/aws-cdk/blob/main/CONTRIBUTING.md) and [DESIGN GUIDELINES](https://github.com/aws/aws-cdk/blob/main/docs/DESIGN_GUIDELINES.md) ##### Features - **ec2:** add interface endpoint dynamodb ([#&#8203;30162](https://github.com/aws/aws-cdk/issues/30162)) ([182804a](https://github.com/aws/aws-cdk/commit/182804a3b3116924e2f7a8e50a22e2e7d99c71ae)), closes [#&#8203;29547](https://github.com/aws/aws-cdk/issues/29547) - **pipes-sources:** add Kinesis and DynamoDB ([#&#8203;29476](https://github.com/aws/aws-cdk/issues/29476)) ([00c2efb](https://github.com/aws/aws-cdk/commit/00c2efb323fdba21191c69e7f970e2cd78c37d68)), closes [#&#8203;29378](https://github.com/aws/aws-cdk/issues/29378) [#&#8203;29377](https://github.com/aws/aws-cdk/issues/29377) - **pipes-targets:** add API destination ([#&#8203;30756](https://github.com/aws/aws-cdk/issues/30756)) ([5e08c98](https://github.com/aws/aws-cdk/commit/5e08c981dd2a309c84abc01a0c8b358e55b5cc4c)), closes [/github.com/aws/aws-cdk/blob/main/packages/aws-cdk-lib/aws-events-targets/lib/api-gateway.ts#L11-L32](https://github.com/aws//github.com/aws/aws-cdk/blob/main/packages/aws-cdk-lib/aws-events-targets/lib/api-gateway.ts/issues/L11-L32) - **pipes-targets:** add Kinesis ([#&#8203;30656](https://github.com/aws/aws-cdk/issues/30656)) ([d0c99d8](https://github.com/aws/aws-cdk/commit/d0c99d85e0bd85beea78ce65f843d319abd493ce)) - **redshift:** supports excludeCharacters settings for DatabaseSecret ([#&#8203;30563](https://github.com/aws/aws-cdk/issues/30563)) ([a1c46cf](https://github.com/aws/aws-cdk/commit/a1c46cfc5eefa58640324420a3dc15b32c37e7dd)), closes [#&#8203;26847](https://github.com/aws/aws-cdk/issues/26847) ##### Bug Fixes - **custom-resource-handlers:** better fallback for require failures ([#&#8203;31571](https://github.com/aws/aws-cdk/issues/31571)) ([00cdbcb](https://github.com/aws/aws-cdk/commit/00cdbcba93baa9a605f62ae8c18c0880ec15aea2)), closes [#&#8203;30067](https://github.com/aws/aws-cdk/issues/30067) ##### Miscellaneous Chores - **kinesisfirehose-destinations:** refactor logging to combine logGroup and logging properties into loggingConfig ([#&#8203;31488](https://github.com/aws/aws-cdk/issues/31488)) ([c4bda64](https://github.com/aws/aws-cdk/commit/c4bda6409cea78dbfa51fb6437f61fb13d0d0abb)) ### [`v2.160.0`](https://github.com/aws/aws-cdk/releases/tag/v2.160.0) [Compare Source](https://github.com/aws/aws-cdk/compare/v2.159.1...v2.160.0) ##### Features - allow all `sts` options for roles assumed by the cli ([#&#8203;31089](https://github.com/aws/aws-cdk/issues/31089)) ([5e95ba2](https://github.com/aws/aws-cdk/commit/5e95ba2b7a24b2598cf00890e1e7d569914f27c9)), closes [#&#8203;26157](https://github.com/aws/aws-cdk/issues/26157) [#&#8203;22535](https://github.com/aws/aws-cdk/issues/22535) - update L1 CloudFormation resource definitions ([#&#8203;31534](https://github.com/aws/aws-cdk/issues/31534)) ([cd17fed](https://github.com/aws/aws-cdk/commit/cd17fed31d5476be06de85ff942ccb4ce2c827d2)) - **core:** configure Stack SNS notification ARNs on the Stack construct ([#&#8203;31107](https://github.com/aws/aws-cdk/issues/31107)) ([1593500](https://github.com/aws/aws-cdk/commit/1593500735e6ddbcc087f005c5124f5ec57aec20)), closes [#&#8203;8581](https://github.com/aws/aws-cdk/issues/8581) - **stepfunctions:** add support for EncryptionConfiguration ([#&#8203;30959](https://github.com/aws/aws-cdk/issues/30959)) ([b49032b](https://github.com/aws/aws-cdk/commit/b49032b3a6e549783b45492ffc76880fbcd58e68)) *** #### Alpha modules (2.160.0-alpha.0) ##### Features - **kinesisanalytics-flink:** support Apache Flink 1.20 ([#&#8203;31349](https://github.com/aws/aws-cdk/issues/31349)) ([b3b9aa8](https://github.com/aws/aws-cdk/commit/b3b9aa8a4584e178808f5babe0583749d1a87da5)) ##### Bug Fixes - **cognito-identitypool-alpha:** cannot configure roleMappings with imported userPool and client ([#&#8203;30421](https://github.com/aws/aws-cdk/issues/30421)) ([0fdd6a9](https://github.com/aws/aws-cdk/commit/0fdd6a92ac7196e5498969be2743019f825b9262)), closes [#&#8203;30304](https://github.com/aws/aws-cdk/issues/30304) [/github.com/aws/aws-cdk/blob/c3003ab41f0efc763f39eb2cab490c8a005e146b/packages/aws-cdk-lib/aws-cognito/lib/user-pool.ts#L902](https://github.com/aws//github.com/aws/aws-cdk/blob/c3003ab41f0efc763f39eb2cab490c8a005e146b/packages/aws-cdk-lib/aws-cognito/lib/user-pool.ts/issues/L902) - **ec2:** instance resourceSignalTimeout overwrites initOptions.timeout ([#&#8203;31446](https://github.com/aws/aws-cdk/issues/31446)) ([a29bf19](https://github.com/aws/aws-cdk/commit/a29bf19be1e17c13b85f6edd45c382c1f0d89702)), closes [#&#8203;30052](https://github.com/aws/aws-cdk/issues/30052) ### [`v2.159.1`](https://github.com/aws/aws-cdk/releases/tag/v2.159.1) [Compare Source](https://github.com/aws/aws-cdk/compare/v2.159.0...v2.159.1) ##### Reverts - fix(ec2): fixing vpc endpoint pattern for ecr and ecr docker ([#&#8203;31496](https://github.com/aws/aws-cdk/issues/31496)) ([f7e8452](https://github.com/aws/aws-cdk/commit/f7e8452012623d55a21428edafdc12c29f7fc92b)) *** #### Alpha modules (2.159.1-alpha.0) ### [`v2.159.0`](https://github.com/aws/aws-cdk/releases/tag/v2.159.0) [Compare Source](https://github.com/aws/aws-cdk/compare/v2.158.0...v2.159.0) ##### Features - update L1 CloudFormation resource definitions ([#&#8203;31484](https://github.com/aws/aws-cdk/issues/31484)) ([60ce351](https://github.com/aws/aws-cdk/commit/60ce351c16eda105ba3514508c00a6b05282384e)), closes [/docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-ec2-launchtemplate-launchtemplatedata.html#cfn-ec2](https://github.com/aws//docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-ec2-launchtemplate-launchtemplatedata.html/issues/cfn-ec2) [/docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-ec2-launchtemplate-launchtemplatedata.html#cfn-ec2](https://github.com/aws//docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-ec2-launchtemplate-launchtemplatedata.html/issues/cfn-ec2) [/docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-ec2-launchtemplate-launchtemplatedata.html#cfn-ec2](https://github.com/aws//docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-ec2-launchtemplate-launchtemplatedata.html/issues/cfn-ec2) [/docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-ec2-launchtemplate-launchtemplatedata.html#cfn-ec2](https://github.com/aws//docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-ec2-launchtemplate-launchtemplatedata.html/issues/cfn-ec2) - **opensearch:** support OpenSearch version 2.15 ([#&#8203;31398](https://github.com/aws/aws-cdk/issues/31398)) ([33eea3f](https://github.com/aws/aws-cdk/commit/33eea3f7f2e832d63dc2c1823c56f5e235c80076)) - update L1 CloudFormation resource definitions ([#&#8203;31460](https://github.com/aws/aws-cdk/issues/31460)) ([e220e90](https://github.com/aws/aws-cdk/commit/e220e90c879360447c5c1f6034213018d98ca636)) - **apigatewayv2:** support for setting `routeSelectionExpression` for an HTTP API ([#&#8203;31373](https://github.com/aws/aws-cdk/issues/31373)) ([36baf51](https://github.com/aws/aws-cdk/commit/36baf5172d3d70bb906a5dccbf28b22b1473ed11)), closes [#&#8203;31104](https://github.com/aws/aws-cdk/issues/31104) - **elasticloadbalancingv2:** alb dualstack without public ipv4 ([#&#8203;30248](https://github.com/aws/aws-cdk/issues/30248)) ([4068af3](https://github.com/aws/aws-cdk/commit/4068af3c047bbd2351593aa107e69c1eb6001fc9)), closes [#&#8203;30256](https://github.com/aws/aws-cdk/issues/30256) - **events-target:** support Dead Letter Queue for Kinesis Stream Event Target ([#&#8203;31435](https://github.com/aws/aws-cdk/issues/31435)) ([358f231](https://github.com/aws/aws-cdk/commit/358f231adb628b308c2240e99166fe1f0a83bee9)), closes [#&#8203;31428](https://github.com/aws/aws-cdk/issues/31428) [#&#8203;13600](https://github.com/aws/aws-cdk/issues/13600) - **stepfunctions-tasks:** support idle timeout for EmrCreateCluster ([#&#8203;31142](https://github.com/aws/aws-cdk/issues/31142)) ([432ffaf](https://github.com/aws/aws-cdk/commit/432ffafb8e06d695609ec3881b8fe7f24b4dc391)), closes [#&#8203;29926](https://github.com/aws/aws-cdk/issues/29926) - **vpcv2:** implementation of add gateway method ([#&#8203;31224](https://github.com/aws/aws-cdk/issues/31224)) ([4b90bfc](https://github.com/aws/aws-cdk/commit/4b90bfc3cebcb38d312dcecc46bbfe856b39a44f)) ##### Bug Fixes - **cli:** bootstrap respects qualifier from cdk.json ([#&#8203;31410](https://github.com/aws/aws-cdk/issues/31410)) ([44134ad](https://github.com/aws/aws-cdk/commit/44134adfe8701c4e5b51ae3a34cd1d09f91735ec)), closes [#&#8203;28249](https://github.com/aws/aws-cdk/issues/28249) - **cli:** hotswapping appsync functions fails when API does not return function on the first page ([#&#8203;31406](https://github.com/aws/aws-cdk/issues/31406)) ([0da4f43](https://github.com/aws/aws-cdk/commit/0da4f4347b0852b7eb7742504ae613a9c14b5958)), closes [/github.com/aws/aws-cdk/blob/1e203753519e10e19ef0db87e1382377b609bcaa/packages/aws-cdk/lib/api/evaluate-cloudformation-template.ts#L23-L36](https://github.com/aws//github.com/aws/aws-cdk/blob/1e203753519e10e19ef0db87e1382377b609bcaa/packages/aws-cdk/lib/api/evaluate-cloudformation-template.ts/issues/L23-L36) - **cli:** release outdir lock when synth fails ([#&#8203;30874](https://github.com/aws/aws-cdk/issues/30874)) ([b6ad97f](https://github.com/aws/aws-cdk/commit/b6ad97f4b4e1c185ddc53f60e15b0dabd8022694)), closes [#&#8203;27864](https://github.com/aws/aws-cdk/issues/27864) - **cognito:** deprecate privateKey and add privateKeyValue as typed SecureValue ([#&#8203;31409](https://github.com/aws/aws-cdk/issues/31409)) ([7ee183d](https://github.com/aws/aws-cdk/commit/7ee183d788a71015fb5aeafeaee1fa8001cc44ad)), closes [/github.com/aws/aws-cdk/blob/1e203753519e10e19ef0db87e1382377b609bcaa/packages/aws-cdk-lib/aws-cognito/lib/user-pool-idps/google.ts#L28](https://github.com/aws//github.com/aws/aws-cdk/blob/1e203753519e10e19ef0db87e1382377b609bcaa/packages/aws-cdk-lib/aws-cognito/lib/user-pool-idps/google.ts/issues/L28) - **ecs:** reduce ecs service task role cloudwatch permissions when no log configured (under feature flag) ([#&#8203;31475](https://github.com/aws/aws-cdk/issues/31475)) ([de7ab7c](https://github.com/aws/aws-cdk/commit/de7ab7c662d326b9818514e236d82ea1228d1263)) - **eks:** fargateCluster compatibility with AuthenticationMode.API ([#&#8203;31267](https://github.com/aws/aws-cdk/issues/31267)) ([4d12833](https://github.com/aws/aws-cdk/commit/4d128330b058bf92c405661f6a2cb29fccaf6b38)) - **eks:** update private ecr repo url regex ([#&#8203;31394](https://github.com/aws/aws-cdk/issues/31394)) ([386fca3](https://github.com/aws/aws-cdk/commit/386fca3e1408a9389efac08598bde2d93d53fbba)) - **lambda:** invalid Version object created from Version.fromVersionArn ([#&#8203;31433](https://github.com/aws/aws-cdk/issues/31433)) ([1726abd](https://github.com/aws/aws-cdk/commit/1726abddbe10a22c092de7bf0b566710d13f5efd)) - **ssm:** update ssm-context to prevent raising an error on missing parameter ([#&#8203;31415](https://github.com/aws/aws-cdk/issues/31415)) ([ff02cca](https://github.com/aws/aws-cdk/commit/ff02ccaf12bddc9ed9236c5b5f2693604745f3c6)), closes [#&#8203;7051](https://github.com/aws/aws-cdk/issues/7051) [#&#8203;22064](https://github.com/aws/aws-cdk/issues/22064) [#&#8203;7259](https://github.com/aws/aws-cdk/issues/7259) - pipelines ties cli version with cdk-assets version ([#&#8203;31261](https://github.com/aws/aws-cdk/issues/31261)) ([4392ab4](https://github.com/aws/aws-cdk/commit/4392ab46de282a4f70365be0952c308e2d7cb8b8)), closes [#&#8203;31253](https://github.com/aws/aws-cdk/issues/31253) *** #### Alpha modules (2.159.0-alpha.0) ##### ⚠ BREAKING CHANGES TO EXPERIMENTAL FEATURES - **kinesisfirehose-alpha:** `encryptionKey` property is removed and `encryption` property type has changed from the `StreamEncryption` enum to the `StreamEncryption` class. To pass in a KMS key for the customer managed key case, use `StreamEncryption.customerManagedKey(key)` ##### Details Replaced `encryption` and `encryptionKey` properties with a single property `encryption` of type `StreamEncryption` and is used by calling one of the 3 methods: ```ts SreamEncryption.unencrypted() StreamEncryption.awsOwnedKey() StreamEncryption.customerManagedKey(key?: IKey) ``` This makes it so it's not longer possible to pass in a key when the encryption type is AWS owned or unencrypted. The `key` is an optional parameter in `StreamEncryption.customerManagedKey(key?: IKey)` so following the previous behaviour, if a key is provided it will be used, otherwise a key will be created for the user. ##### Description of how you validated changes Generated templates do not change so behaviour remains the same. Updated integ/unit tests. ##### Checklist - [x] My code adheres to the [CONTRIBUTING GUIDE](https://github.com/aws/aws-cdk/blob/main/CONTRIBUTING.md) and [DESIGN GUIDELINES](https://github.com/aws/aws-cdk/blob/main/docs/DESIGN_GUIDELINES.md) ##### Features - **ivs:** support RTMP ingest for IVS channel ([#&#8203;31380](https://github.com/aws/aws-cdk/issues/31380)) ([a907a7e](https://github.com/aws/aws-cdk/commit/a907a7eb0a54f51b6e77ff57cac278de9574eee2)) ##### Bug Fixes - **ec2:** fixing vpc endpoint pattern for ecr and ecr docker ([#&#8203;31434](https://github.com/aws/aws-cdk/issues/31434)) ([95c49ab](https://github.com/aws/aws-cdk/commit/95c49abdfa4ad77a0c0fcb82a230778dcc2ea59a)) ##### Miscellaneous Chores - **kinesisfirehose-alpha:** refactor encryption property to combine encryptionKey ([#&#8203;31430](https://github.com/aws/aws-cdk/issues/31430)) ([8e92185](https://github.com/aws/aws-cdk/commit/8e9218525b606d72b2dfe55933fa1c515d26d386)) ### [`v2.158.0`](https://github.com/aws/aws-cdk/releases/tag/v2.158.0) [Compare Source](https://github.com/aws/aws-cdk/compare/v2.157.0...v2.158.0) ##### Bug Fixes - **cloudformation-include:** can't use CFN intrinsics in Tags ([#&#8203;30515](https://github.com/aws/aws-cdk/issues/30515)) ([af9e6ba](https://github.com/aws/aws-cdk/commit/af9e6bae94c0c303364c2c4f2033eb3823fb59c9)), closes [#&#8203;27594](https://github.com/aws/aws-cdk/issues/27594) *** #### Alpha modules (2.158.0-alpha.0) ##### Features - **amplify:** support cache configuration for app ([#&#8203;31381](https://github.com/aws/aws-cdk/issues/31381)) ([b7bd041](https://github.com/aws/aws-cdk/commit/b7bd0416dc1f809eac22b9dbc49a1947e1cfc262)) - **iot:** configure IoT Logging ([#&#8203;31352](https://github.com/aws/aws-cdk/issues/31352)) ([6348717](https://github.com/aws/aws-cdk/commit/63487174736236e329488f4d06b29110d910a031)), closes [#&#8203;31357](https://github.com/aws/aws-cdk/issues/31357) ### [`v2.157.0`](https://github.com/aws/aws-cdk/releases/tag/v2.157.0) [Compare Source](https://github.com/aws/aws-cdk/compare/v2.156.0...v2.157.0) ##### Features - update L1 CloudFormation resource definitions ([#&#8203;31361](https://github.com/aws/aws-cdk/issues/31361)) ([bc4dbfd](https://github.com/aws/aws-cdk/commit/bc4dbfdb05a1fe02d30c4724958d09f239a3656f)) - **appsync:** support DEBUG and INFO logging levels for AppSync GraphQL APIs ([#&#8203;31326](https://github.com/aws/aws-cdk/issues/31326)) ([4b9643f](https://github.com/aws/aws-cdk/commit/4b9643f28edc2c530809931ccd7a17a811891af2)) - **lambda:** added new property allowAllIpv6Outbound to FunctionOptions ([#&#8203;31013](https://github.com/aws/aws-cdk/issues/31013)) ([fa55194](https://github.com/aws/aws-cdk/commit/fa55194698960b9161590e05cf1138a813315615)), closes [#&#8203;30994](https://github.com/aws/aws-cdk/issues/30994) ##### Bug Fixes - **rds:** proxy target group does not depend on database instances when using writer property for database cluster ([#&#8203;31354](https://github.com/aws/aws-cdk/issues/31354)) ([6542207](https://github.com/aws/aws-cdk/commit/65422077123fa5870106e29594b8f0392484da3f)), closes [#&#8203;31304](https://github.com/aws/aws-cdk/issues/31304) [/github.com/aws/aws-cdk/blob/main/packages/aws-cdk-lib/aws-rds/lib/proxy.ts#L535-L539](https://github.com/aws//github.com/aws/aws-cdk/blob/main/packages/aws-cdk-lib/aws-rds/lib/proxy.ts/issues/L535-L539) *** #### Alpha modules (2.157.0-alpha.0) ### [`v2.156.0`](https://github.com/aws/aws-cdk/releases/tag/v2.156.0) [Compare Source](https://github.com/aws/aws-cdk/compare/v2.155.0...v2.156.0) ##### Features - **bedrock:** add Stable Image Ultra, Stable Diffusion 3 Large, and Stable Image Core model identifiers ([#&#8203;31327](https://github.com/aws/aws-cdk/issues/31327)) ([586cb04](https://github.com/aws/aws-cdk/commit/586cb04a975403ecdbb18d37fae06a4671d3a752)) - **cloudfront:** s3 origin access control L2 construct ([#&#8203;31254](https://github.com/aws/aws-cdk/issues/31254)) ([30675f0](https://github.com/aws/aws-cdk/commit/30675f01aa2a4c87dcdf493140c257119eb16af1)), closes [#&#8203;21771](https://github.com/aws/aws-cdk/issues/21771) - **codebuild:** support three arm-based compute types, Medium, X-Large and 2X-Large ([#&#8203;31214](https://github.com/aws/aws-cdk/issues/31214)) ([39492e9](https://github.com/aws/aws-cdk/commit/39492e967f511de12524c2600c2108f3ec4c7493)), closes [#&#8203;30869](https://github.com/aws/aws-cdk/issues/30869) - **docdb:** i/o optimized storage type ([#&#8203;30163](https://github.com/aws/aws-cdk/issues/30163)) ([7ed221c](https://github.com/aws/aws-cdk/commit/7ed221cc03739ec30a0f9b9cd8a635f90f609c2b)), closes [#&#8203;30165](https://github.com/aws/aws-cdk/issues/30165) - **ecs-patterns:** dualstack ALB ([#&#8203;30089](https://github.com/aws/aws-cdk/issues/30089)) ([98ea3db](https://github.com/aws/aws-cdk/commit/98ea3db176268cba6cf81e29a135ca0d55c3b1e2)), closes [#&#8203;29039](https://github.com/aws/aws-cdk/issues/29039) - **eks:** support alb controller versions 2.7.0-2.8.2 ([#&#8203;31264](https://github.com/aws/aws-cdk/issues/31264)) ([a3863a6](https://github.com/aws/aws-cdk/commit/a3863a6b5607dd462b3774f01f21d9dea4fd15d5)) - **events-targets:** support for `RedshiftDataParameters` ([#&#8203;29462](https://github.com/aws/aws-cdk/issues/29462)) ([84c6442](https://github.com/aws/aws-cdk/commit/84c6442d6a4253472df1fee5589f154590bae182)), closes [#&#8203;15712](https://github.com/aws/aws-cdk/issues/15712) [#&#8203;31017](https://github.com/aws/aws-cdk/issues/31017) - **synthetics:** syn-nodejs-puppeteer-9.0 as supported runtime ([#&#8203;31272](https://github.com/aws/aws-cdk/issues/31272)) ([c1d7782](https://github.com/aws/aws-cdk/commit/c1d778254346aea444ae844a17d0cab296cce4bb)), closes [#&#8203;31271](https://github.com/aws/aws-cdk/issues/31271) - **custom-resources:** update python runtime for custom resources ([#&#8203;31166](https://github.com/aws/aws-cdk/pull/31166)) ([03ebca8](https://github.com/aws/aws-cdk/commit/03ebca8a9768b6415e6942893e0310ac412d4b80)), closes [#&#8203;31245](https://github.com/aws/aws-cdk/issues/31245) ##### Bug Fixes - **custom-resources:** remove presigned url from cloudwatch logs ([#&#8203;31322](https://github.com/aws/aws-cdk/issues/31322)) ([b5e4496](https://github.com/aws/aws-cdk/commit/b5e4496084356ff0c00f103442ba58c1e6abb481)) - **eks:** albController incompatibility with AuthenticationMode.API mode ([#&#8203;31258](https://github.com/aws/aws-cdk/issues/31258)) ([427cd61](https://github.com/aws/aws-cdk/commit/427cd61205aa61ef60bc083647c50df53795f22c)) - **prlint:** a review label doesn't appear when a PR is approved if there are too many comments ([#&#8203;31290](https://github.com/aws/aws-cdk/issues/31290)) ([1c63070](https://github.com/aws/aws-cdk/commit/1c63070ddf4756f3456e66e1bad3186eb368cf92)), closes [#&#8203;31294](https://github.com/aws/aws-cdk/issues/31294) [/github.com/aws/aws-cdk/pull/30920#issuecomment-2324932936](https://github.com/aws//github.com/aws/aws-cdk/pull/30920/issues/issuecomment-2324932936) [aws-cdk/prlint/lint.ts#L377](https://github.com/aws-cdk/prlint/lint.ts/issues/L377) [40aws-cdk/prlint/lint.ts#L376](https://github.com/40aws-cdk/prlint/lint.ts/issues/L376) - **stepfunctions-tasks:** add back BedrockInvokeModel to use JsonPath ([#&#8203;31325](https://github.com/aws/aws-cdk/issues/31325)) ([5b059b9](https://github.com/aws/aws-cdk/commit/5b059b9354be9fb13cac02e832892b194a35a186)), closes [aws/aws-cdk#31308](https://github.com/aws/aws-cdk/issues/31308) - **stepfunctions-tasks:** fix bedrock input/output path in step-funct… ([#&#8203;31305](https://github.com/aws/aws-cdk/issues/31305)) ([a190935](https://github.com/aws/aws-cdk/commit/a19093517fffbb2d0cacb109e9f6aa3b56f430d2)), closes [#&#8203;31302](https://github.com/aws/aws-cdk/issues/31302) [PR#30298](https://github.com/aws/PR/issues/30298) [#&#8203;29229](https://github.com/aws/aws-cdk/issues/29229) - **stepfunctions-tasks:** sageMakerCreateTrainingJob does not correctly support empty inputDataConfig ([#&#8203;31210](https://github.com/aws/aws-cdk/issues/31210)) ([6d43146](https://github.com/aws/aws-cdk/commit/6d43146f525c587a17bfc09c57d18b22b5a6a515)), closes [#&#8203;31132](https://github.com/aws/aws-cdk/issues/31132) *** #### Alpha modules (2.156.0-alpha.0) ##### Features - **location:** support RouteCalculator ([#&#8203;30682](https://github.com/aws/aws-cdk/issues/30682)) ([574d383](https://github.com/aws/aws-cdk/commit/574d383ef0a5b78564bbba76e5a14a049129c042)), closes [#&#8203;30681](https://github.com/aws/aws-cdk/issues/30681) - **neptune-alpha:** specify port for the cluster ([#&#8203;31137](https://github.com/aws/aws-cdk/issues/31137)) ([130b62b](https://github.com/aws/aws-cdk/commit/130b62b7904a10145b810837323451263ec7d66f)), closes [#&#8203;31074](https://github.com/aws/aws-cdk/issues/31074) - **scheduler:** validate schedule name length ([#&#8203;31200](https://github.com/aws/aws-cdk/issues/31200)) ([d0f9688](https://github.com/aws/aws-cdk/commit/d0f9688423d1e12c00aebb7a9ff3cecd68d3bb3c)) ##### Bug Fixes - **scheduler:** the value of the description property is not reflected to the resource. ([#&#8203;31276](https://github.com/aws/aws-cdk/issues/31276)) ([a3332b6](https://github.com/aws/aws-cdk/commit/a3332b61514f13fa3c5aef87041cb2d7f81a1e92)), closes [#&#8203;31269](https://github.com/aws/aws-cdk/issues/31269) ### [`v2.155.0`](https://github.com/aws/aws-cdk/releases/tag/v2.155.0) [Compare Source](https://github.com/aws/aws-cdk/compare/v2.154.1...v2.155.0) ##### Features - **codebuild:** macOS codebuild support ([#&#8203;31203](https://github.com/aws/aws-cdk/issues/31203)) ([823ff6e](https://github.com/aws/aws-cdk/commit/823ff6e03899f790a4cb1c43f92a02cc906ac356)), closes [#&#8203;31170](https://github.com/aws/aws-cdk/issues/31170) - **eks:** `preserveOnDelete` for EKS addon ([#&#8203;30776](https://github.com/aws/aws-cdk/issues/30776)) ([23fba1c](https://github.com/aws/aws-cdk/commit/23fba1c7ea49def9fc5c0f558246d8ec1879c91e)) - **kms:** add `multiRegion` property to a `Key` ([#&#8203;31125](https://github.com/aws/aws-cdk/issues/31125)) ([3dc4c50](https://github.com/aws/aws-cdk/commit/3dc4c502340610c573125a3d44d74bf2dfd944a9)) - **stepfunctions-tasks:** add cpu and memory parameters to EcsRunTask ([#&#8203;30140](https://github.com/aws/aws-cdk/issues/30140)) ([986e378](https://github.com/aws/aws-cdk/commit/986e378a27b19271695f735ad01603a4c1386d25)), closes [#&#8203;30027](https://github.com/aws/aws-cdk/issues/30027) - **synthetics:** add syn-python-selenium-4.0 runtime ([#&#8203;31101](https://github.com/aws/aws-cdk/issues/31101)) ([cc75ded](https://github.com/aws/aws-cdk/commit/cc75dedcb35850250dcf27bc06ba2c08a7f9bfff)), closes [#&#8203;30137](https://github.com/aws/aws-cdk/issues/30137) [/docs.aws.amazon.com/AmazonCloudWatch/latest/monitoring/CloudWatch_Synthetics_Library_python_selenium.html#CloudWatch_Synthetics_runtimeversion-syn-python-selenium-4](https://github.com/aws//docs.aws.amazon.com/AmazonCloudWatch/latest/monitoring/CloudWatch_Synthetics_Library_python_selenium.html/issues/CloudWatch_Synthetics_runtimeversion-syn-python-selenium-4) - update L1 CloudFormation resource definitions ([#&#8203;31193](https://github.com/aws/aws-cdk/issues/31193)) ([e942b67](https://github.com/aws/aws-cdk/commit/e942b67a64bcd78abf6029e501bc6ca260441bf0)) - update L1 CloudFormation resource definitions ([#&#8203;31194](https://github.com/aws/aws-cdk/issues/31194)) ([5468983](https://github.com/aws/aws-cdk/commit/5468983944fa3e2783c39813e0bcb47a5fb82811)) - update L1 CloudFormation resource definitions ([#&#8203;31221](https://github.com/aws/aws-cdk/issues/31221)) ([b754353](https://github.com/aws/aws-cdk/commit/b7543532fb9c80bf69e197242bd55febafcd84f5)) ##### Bug Fixes - **cloudfront:** requirement of domainNames prevents moving a domain name between distributions ([#&#8203;31001](https://github.com/aws/aws-cdk/issues/31001)) ([acdf7d3](https://github.com/aws/aws-cdk/commit/acdf7d3a1ffe2cbc8239cd0b788dc47b99e35184)), closes [#&#8203;29960](https://github.com/aws/aws-cdk/issues/29960) [#&#8203;29329](https://github.com/aws/aws-cdk/issues/29329) - **eks:** can't update authMode with the same mode ([#&#8203;31043](https://github.com/aws/aws-cdk/issues/31043)) ([64df08b](https://github.com/aws/aws-cdk/commit/64df08b80ad8c69c99c9e0178ccd58bd177fbd78)) - **lambda-event-source:** allow dynamodb filtering on boolean value ([#&#8203;31011](https://github.com/aws/aws-cdk/issues/31011)) ([9946ab0](https://github.com/aws/aws-cdk/commit/9946ab03672bf6664e8ec95a81ddb67c3bb2f63b)), closes [#&#8203;30734](https://github.com/aws/aws-cdk/issues/30734) - **s3:** bucket notifications in owning stack deletes bucket notifications from other stacks ([#&#8203;31091](https://github.com/aws/aws-cdk/issues/31091)) ([0b09e52](https://github.com/aws/aws-cdk/commit/0b09e528b4565d4e4cce9a965578a537aac96b1f)) *** #### Alpha modules (2.155.0-alpha.0) ##### Features - **ec2:** `ipv6AddressCount` property for an instance ([#&#8203;31076](https://github.com/aws/aws-cdk/issues/31076)) ([e3e5e1c](https://github.com/aws/aws-cdk/commit/e3e5e1c5a29a5da8759c2e821ef108eade8b87ea)), closes [#&#8203;31075](https://github.com/aws/aws-cdk/issues/31075) - **ec2:** support throughput on LaunchTemplate EBS volumes ([#&#8203;30716](https://github.com/aws/aws-cdk/issues/30716)) ([6ed0bed](https://github.com/aws/aws-cdk/commit/6ed0bed61088765b9f0aa736d7daea4cbea05b3d)), closes [#&#8203;24341](https://github.com/aws/aws-cdk/issues/24341) [#&#8203;22441](https://github.com/aws/aws-cdk/issues/22441) - **location:** support GeofenceCollection ([#&#8203;30711](https://github.com/aws/aws-cdk/issues/30711)) ([04d73ac](https://github.com/aws/aws-cdk/commit/04d73acc5e95568bd410a714ef00e7edb192681a)), closes [#&#8203;30710](https://github.com/aws/aws-cdk/issues/30710) ### [`v2.154.1`](https://github.com/aws/aws-cdk/releases/tag/v2.154.1) [Compare Source](https://github.com/aws/aws-cdk/compare/v2.154.0...v2.154.1) ##### Features - update L1 CloudFormation resource definitions ([#&#8203;31193](https://github.com/aws/aws-cdk/issues/31193)) ([aa97525](https://github.com/aws/aws-cdk/commit/aa975253fe7f21f20c1d0a92f0b9c4fd28ed3236)) - update L1 CloudFormation resource definitions ([#&#8203;31194](https://github.com/aws/aws-cdk/issues/31194)) ([2191264](https://github.com/aws/aws-cdk/commit/2191264491dbf373c0678f6984a1beab7d913d5f)) ##### Bug Fixes - **cloudfront:** requirement of domainNames prevents moving a domain name between distributions ([#&#8203;31001](https://github.com/aws/aws-cdk/issues/31001)) ([1255ce3](https://github.com/aws/aws-cdk/commit/1255ce3b68341755f1bd8f44d68d0da8558a1a5e)), closes [#&#8203;29960](https://github.com/aws/aws-cdk/issues/29960) [#&#8203;29329](https://github.com/aws/aws-cdk/issues/29329) *** #### Alpha modules (2.154.1-alpha.0) ### [`v2.154.0`](https://github.com/aws/aws-cdk/releases/tag/v2.154.0) [Compare Source](https://github.com/aws/aws-cdk/compare/v2.153.0...v2.154.0) ##### Features - update L1 CloudFormation resource definitions ([#&#8203;31145](https://github.com/aws/aws-cdk/issues/31145)) ([5387605](https://github.com/aws/aws-cdk/commit/53876051da7fac7398cbfdc87f991f5b009d2e3a)) - **batch:** add ECS_AL2023 ([#&#8203;30928](https://github.com/aws/aws-cdk/issues/30928)) ([d45bf08](https://github.com/aws/aws-cdk/commit/d45bf08c3fa6d342cf06fe26b748b5e367c3e5e3)) - **CLI:** synth displays "AssertDescription: CDK bootstrap stack version 6 required" ([#&#8203;31092](https://github.com/aws/aws-cdk/issues/31092)) ([751a922](https://github.com/aws/aws-cdk/commit/751a922de30e88a1faa7a20fb7b29cb43856d522)), closes [#&#8203;17942](https://github.com/aws/aws-cdk/issues/17942) - **core:** configure SNS topics to receive stack events on the Stack construct ([#&#8203;30551](https://github.com/aws/aws-cdk/issues/30551)) ([0cdce20](https://github.com/aws/aws-cdk/commit/0cdce20a8688bb233930542d01358e26e5ba8a61)), closes [#&#8203;8581](https://github.com/aws/aws-cdk/issues/8581) - **dynamodb:** adding on-demand-throughput to table ([#&#8203;30725](https://github.com/aws/aws-cdk/issues/30725)) ([d5a19bb](https://github.com/aws/aws-cdk/commit/d5a19bb3eeda50a7b08e2b814dfcf76e6ac21fdc)), closes [#&#8203;30091](https://github.com/aws/aws-cdk/issues/30091) - **elasticloadbalancingv2:** connection logs for ALB ([#&#8203;30599](https://github.com/aws/aws-cdk/issues/30599)) ([7c4f423](https://github.com/aws/aws-cdk/commit/7c4f423bf14af996203b090429b8c59bd32f50d8)) - **elasticloadbalancingv2:** support Mutual Authentication with TLS for Application Load Balancer ([#&#8203;30784](https://github.com/aws/aws-cdk/issues/30784)) ([7eae4d1](https://github.com/aws/aws-cdk/commit/7eae4d1358762d72d96b08c6cd020628d3cb77f2)), closes [#&#8203;28206](https://github.com/aws/aws-cdk/issues/28206) - **region-info:** update Metadata regions ([#&#8203;31044](https://github.com/aws/aws-cdk/issues/31044)) ([ae7d181](https://github.com/aws/aws-cdk/commit/ae7d1814900fc10ab489bc7a4cfe8ccd1694e8f8)) - **region-info:** update Metadata regions ([#&#8203;31046](https://github.com/aws/aws-cdk/issues/31046)) ([6ec69b9](https://github.com/aws/aws-cdk/commit/6ec69b9184417c7fb5d4df808b57ae59c546753c)) - **region-info:** update Metadata regions ([#&#8203;31047](https://github.com/aws/aws-cdk/issues/31047)) ([9025635](https://github.com/aws/aws-cdk/commit/9025635e7401388a4192d34b9fbe2ae28d849587)) - **s3:** add skip destination validation property ([#&#8203;30916](https://github.com/aws/aws-cdk/issues/30916)) ([ffc40e5](https://github.com/aws/aws-cdk/commit/ffc40e537d03a6fea4bfb36e3b94c7525629e907)), closes [#&#8203;30914](https://github.com/aws/aws-cdk/issues/30914) [#&#8203;30914](https://github.com/aws/aws-cdk/issues/30914) - **ssm:** support cross-account sharing ([#&#8203;30646](https://github.com/aws/aws-cdk/issues/30646)) ([1eb1ea6](https://github.com/aws/aws-cdk/commit/1eb1ea6ba64f41ba040d9470156d566c9ce6c3e0)), closes [#&#8203;29292](https://github.com/aws/aws-cdk/issues/29292) - set log retention of all CDK-vended custom resources with CustomResourceConfig ([#&#8203;31041](https://github.com/aws/aws-cdk/issues/31041)) ([f2babd9](https://github.com/aws/aws-cdk/commit/f2babd9373523cc3d5708349db5c3c270e99ae1a)) - update L1 CloudFormation resource definitions ([#&#8203;31025](https://github.com/aws/aws-cdk/issues/31025)) ([5414932](https://github.com/aws/aws-cdk/commit/541493297dd996725b060c84d23651a69e239750)) - update L1 CloudFormation resource definitions ([#&#8203;31086](https://github.com/aws/aws-cdk/issues/31086)) ([62a641c](https://github.com/aws/aws-cdk/commit/62a641c1ff77270ead66113716545d415a3b18e1)) - update L1 CloudFormation resource definitions ([#&#8203;31120](https://github.com/aws/aws-cdk/issues/31120)) ([931ebba](https://github.com/aws/aws-cdk/commit/931ebba02ca43b173cb7770e9cb703f05646683b)) - **vpc:** support custom route and subnet ([#&#8203;30538](https://github.com/aws/aws-cdk/issues/30538)) ([e17fdd7](https://github.com/aws/aws-cdk/commit/e17fdd76959e8aafd07cfa1db34325f1c24b3acf)), closes [RFC#507](https://github.com/aws/RFC/issues/507) ##### Bug Fixes - **elasticloadbalancingv2-targets:** add AlbListenerTarget for NLBs, deprecate AlbTarget due to ALB listener race conditions ([#&#8203;17208](https://github.com/aws/aws-cdk/issues/17208)) ([#&#8203;30396](https://github.com/aws/aws-cdk/issues/30396)) ([1fca1e5](https://github.com/aws/aws-cdk/commit/1fca1e5b92ba760a33652f39c2345f6aa1eaa9f7)), closes [/github.com/aws/aws-cdk/issues/17208#issuecomment-1681475590](https://github.com/aws//github.com/aws/aws-cdk/issues/17208/issues/issuecomment-1681475590) - **lambda:** validate localMountPath format and length ([#&#8203;31019](https://github.com/aws/aws-cdk/issues/31019)) ([c159e77](https://github.com/aws/aws-cdk/commit/c159e77ab34701fc6780b9501f1692fbf2366b04)) - **vpc-v2:** fixing default scope id ([#&#8203;31102](https://github.com/aws/aws-cdk/issues/31102)) ([0007a29](https://github.com/aws/aws-cdk/commit/0007a29714cf04abb307845874dde27c813d45dd)) ##### Reverts - feat(core): configure SNS topics to receive stack events on the Stack construct ([#&#8203;31100](https://github.com/aws/aws-cdk/issues/31100)) ([5f30aa5](https://github.com/aws/aws-cdk/commit/5f30aa5f81ef823422e994563cefc9e8a15e82f8)), closes [aws/aws-cdk#30551](https://github.com/aws/aws-cdk/issues/30551) - feat(ec2): security group lookup via filters ([#&#8203;31065](https://github.com/aws/aws-cdk/issues/31065)) ([79b5cd2](https://github.com/aws/aws-cdk/commit/79b5cd2390508e7b5c3d5c93001e30387bf88a4e)), closes [aws/aws-cdk#30625](https://github.com/aws/aws-cdk/issues/30625) - feat(ecs): add validation checks to memory cpu combinations of FARGATE compatible task definitions ([#&#8203;31110](https://github.com/aws/aws-cdk/issues/31110)) ([ffba5b1](https://github.com/aws/aws-cdk/commit/ffba5b1d0a8dfece02a9d5ad8a989955a7f4a812)) *** #### Alpha modules (2.154.0-alpha.0) ##### Features - **amplify:** support custom certificate ([#&#8203;30791](https://github.com/aws/aws-cdk/issues/30791)) ([8d76778](https://github.com/aws/aws-cdk/commit/8d767786fe88d0ed60104ea6f48176e8981dd0fa)), closes [#&#8203;30594](https://github.com/aws/aws-cdk/issues/30594) - **ec2:** security group lookup via filters ([#&#8203;30625](https://github.com/aws/aws-cdk/issues/30625)) ([abc78bf](https://github.com/aws/aws-cdk/commit/abc78bfa613453185e59d5d9a17e5c5cfb5437b3)), closes [#&#8203;30331](https://github.com/aws/aws-cdk/issues/30331) - **sagemaker:** network isolation for a model ([#&#8203;30657](https://github.com/aws/aws-cdk/issues/30657)) ([f1af7fc](https://github.com/aws/aws-cdk/commit/f1af7fc66b5ca5b3a4780ed695045d2da65df3ba)) ##### Bug Fixes - **cli-lib-alpha:** bootstrap fails with "bad argument name" error for trust and trustForLookup ([#&#8203;31159](https://github.com/aws/aws-cdk/issues/31159)) ([b11ca4a](https://github.com/aws/aws-cdk/commit/b11ca4ae27753e33f5c44baedf1529489c4e081a)), closes [#&#8203;30404](https://github.com/aws/aws-cdk/issues/30404) - **cognito-identitypool-alpha:** validation error if provided id is a token ([#&#8203;30882](https://github.com/aws/aws-cdk/issues/30882)) ([ad1b797](https://github.com/aws/aws-cdk/commit/ad1b7977768430da0ce262103e8a91f0e632ffe2)), closes [#&#8203;29780](https://github.com/aws/aws-cdk/issues/29780) [#&#8203;28184](https://github.com/aws/aws-cdk/issues/28184) - **ec2:** prevent deduplication of init command args ([#&#8203;30821](https://github.com/aws/aws-cdk/issues/30821)) ([1e7c690](https://github.com/aws/aws-cdk/commit/1e7c690f5ec404d7c620dc54692999fee67b3eaf)), closes [#&#8203;26221](https://github.com/aws/aws-cdk/issues/26221) ### [`v2.153.0`](https://github.com/aws/aws-cdk/releases/tag/v2.153.0) [Compare Source](https://github.com/aws/aws-cdk/compare/v2.152.0...v2.153.0) ##### Features - **lambda:** support Recursive Loop Protection property ([572fe0a](https://github.com/aws/aws-cdk/commit/572fe0a68f18724f5b43460c1858634b5aff45e5)) *** #### Alpha modules (2.153.0-alpha.0) ### [`v2.152.0`](https://github.com/aws/aws-cdk/releases/tag/v2.152.0) [Compare Source](https://github.com/aws/aws-cdk/compare/v2.151.1...v2.152.0) ##### Features - **lambda:** support filter criteria encryption ([6aa72a2](https://github.com/aws/aws-cdk/commit/6aa72a215859ab96e9fd8b4ccee0d40bda753200)) *** #### Alpha modules (2.152.0-alpha.0) ### [`v2.151.1`](https://github.com/aws/aws-cdk/releases/tag/v2.151.1) [Compare Source](https://github.com/aws/aws-cdk/compare/v2.151.0...v2.151.1) ##### Reverts - feat(ecs): add validation checks to memory cpu combinations of FARGATE compatible task definitions ([#&#8203;31110](https://github.com/aws/aws-cdk/issues/31110)) ([8fdf015](https://github.com/aws/aws-cdk/commit/8fdf015fdc310d6d62cec31b6d89e1ff1decb8b6)) *** #### Alpha modules (2.151.1-alpha.0) </details> --- ### Configuration 📅 **Schedule**: (UTC) - Branch creation - At any time (no schedule defined) - Automerge - At any time (no schedule defined) 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR has been generated by [Mend Renovate CLI](https://github.com/renovatebot/renovate). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0NC4xODguMCIsInVwZGF0ZWRJblZlciI6IjQ0LjE4OC4wIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6W119-->
Update dependency aws-cdk-lib to v2.275.0
Some checks failed
renovate/artifacts Artifact file update failure
e4964d3777
renovate commented 2026-10-27 12:16:08 +00:00
Author
Collaborator

⚠️ Artifact update problem

Renovate failed to update an artifact related to this branch. You probably do not want to merge this PR as-is.

♻ Renovate will retry this branch, including artifacts, only when one of the following happens:

  • any of the package files in this branch needs updating, or
  • the branch becomes conflicted, or
  • you click the rebase/retry checkbox if found above, or
  • you rename this PR's title to start with "rebase!" to trigger it manually

The artifact failure details are included below:

File name: cdk-pipeline/package-lock.json
npm warn Unknown env config "store". This will error in a future major version of npm. See `npm help npmrc` for supported config options.
npm error code EALLOWREMOTE
npm error Fetching packages of type "remote" have been disabled
npm error Refusing to fetch "https://registry.npmjs.org/aws-cdk-lib/-/aws-cdk-lib-2.275.0.tgz"
npm error A complete log of this run can be found in: /tmp/renovate/cache/others/npm/_logs/2026-10-27T12_15_50_969Z-debug-0.log
### ⚠️ Artifact update problem Renovate failed to update an artifact related to this branch. You probably do not want to merge this PR as-is. ♻ Renovate will retry this branch, including artifacts, only when one of the following happens: - any of the package files in this branch needs updating, or - the branch becomes conflicted, or - you click the rebase/retry checkbox if found above, or - you rename this PR's title to start with "rebase!" to trigger it manually The artifact failure details are included below: ##### File name: cdk-pipeline/package-lock.json ``` npm warn Unknown env config "store". This will error in a future major version of npm. See `npm help npmrc` for supported config options. npm error code EALLOWREMOTE npm error Fetching packages of type "remote" have been disabled npm error Refusing to fetch "https://registry.npmjs.org/aws-cdk-lib/-/aws-cdk-lib-2.275.0.tgz" npm error A complete log of this run can be found in: /tmp/renovate/cache/others/npm/_logs/2026-10-27T12_15_50_969Z-debug-0.log ```
Some checks failed
renovate/artifacts Artifact file update failure
This pull request can be merged automatically.
You are not authorized to merge this pull request.
View command line instructions

Checkout

From your project repository, check out a new branch and test the changes.
git fetch -u origin "renovate/aws-cdk-monorepo:renovate/aws-cdk-monorepo"
git switch "renovate/aws-cdk-monorepo"

Merge

Merge the changes and update on Forgejo.

Warning: The "Autodetect manual merge" setting is not enabled for this repository, you will have to mark this pull request as manually merged afterwards.

git switch "main"
git merge --no-ff "renovate/aws-cdk-monorepo"
git switch "renovate/aws-cdk-monorepo"
git rebase "main"
git switch "main"
git merge --ff-only "renovate/aws-cdk-monorepo"
git switch "renovate/aws-cdk-monorepo"
git rebase "main"
git switch "main"
git merge --no-ff "renovate/aws-cdk-monorepo"
git switch "main"
git merge --squash "renovate/aws-cdk-monorepo"
git switch "main"
git merge --ff-only "renovate/aws-cdk-monorepo"
git switch "main"
git merge "renovate/aws-cdk-monorepo"
git push origin "main"
Sign in to join this conversation.
Reviewers
No reviewers
Labels
Clear labels   
bug
Something isn't working

  
documentation
Improvements or additions to documentation

  
duplicate
This issue or pull request already exists

  
enhancement
New feature or request

  
good first issue
Good for newcomers

  
help wanted
Extra attention is needed

  
invalid
This doesn't seem right

  
question
Further information is requested

  
wontfix
This will not be worked on

No labels
bug
documentation
duplicate
enhancement
good first issue
help wanted
invalid
question
wontfix
Milestone
Clear milestone
No items
No milestone
Projects
Clear projects
No items
No project
Assignees
Clear assignees
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set

Reference
andylockran/codemetrics-deploy!6
No description provided.