aws-cdk

Bug Fixes

• cloudformation-include: can't use CFN intrinsics in Tags (#30515) (af9e6ba), closes #27594

Alpha modules (2.158.0-alpha.0)

Features

• amplify: support cache configuration for app (#31381) (b7bd041)
• iot: configure IoT Logging (#31352) (6348717), closes #31357

Features

• update L1 CloudFormation resource definitions (#31361) (bc4dbfd)
• appsync: support DEBUG and INFO logging levels for AppSync GraphQL APIs (#31326) (4b9643f)
• lambda: added new property allowAllIpv6Outbound to FunctionOptions (#31013) (fa55194), closes #30994

Bug Fixes

• rds: proxy target group does not depend on database instances when using writer property for database cluster (#31354) (6542207), closes #31304 /github.com/aws/aws-cdk/blob/main/packages/aws-cdk-lib/aws-rds/lib/proxy.ts#L535-L539

Alpha modules (2.157.0-alpha.0)

Features

• bedrock: add Stable Image Ultra, Stable Diffusion 3 Large, and Stable Image Core model identifiers (#31327) (586cb04)
• cloudfront: s3 origin access control L2 construct (#31254) (30675f0), closes #21771
• codebuild: support three arm-based compute types, Medium, X-Large and 2X-Large (#31214) (39492e9), closes #30869
• docdb: i/o optimized storage type (#30163) (7ed221c), closes #30165
• ecs-patterns: dualstack ALB (#30089) (98ea3db), closes #29039
• eks: support alb controller versions 2.7.0-2.8.2 (#31264) (a3863a6)
• events-targets: support for RedshiftDataParameters (#29462) (84c6442), closes #15712 #31017
• synthetics: syn-nodejs-puppeteer-9.0 as supported runtime (#31272) (c1d7782), closes #31271
• custom-resources: update python runtime for custom resources (#31166) (03ebca8), closes #31245

Bug Fixes

• custom-resources: remove presigned url from cloudwatch logs (#31322) (b5e4496)
• eks: albController incompatibility with AuthenticationMode.API mode (#31258) (427cd61)
• prlint: a review label doesn't appear when a PR is approved if there are too many comments (#31290) (1c63070), closes #31294 /github.com/aws/aws-cdk/pull/30920#issuecomment-2324932936 aws-cdk/prlint/lint.ts#L377 40aws-cdk/prlint/lint.ts#L376
• stepfunctions-tasks: add back BedrockInvokeModel to use JsonPath (#31325) (5b059b9), closes aws/aws-cdk#31308
• stepfunctions-tasks: fix bedrock input/output path in step-funct… (#31305) (a190935), closes #31302 PR#30298 #29229
• stepfunctions-tasks: sageMakerCreateTrainingJob does not correctly support empty inputDataConfig (#31210) (6d43146), closes #31132

Alpha modules (2.156.0-alpha.0)

Features

• location: support RouteCalculator (#30682) (574d383), closes #30681
• neptune-alpha: specify port for the cluster (#31137) (130b62b), closes #31074
• scheduler: validate schedule name length (#31200) (d0f9688)

Bug Fixes

• scheduler: the value of the description property is not reflected to the resource. (#31276) (a3332b6), closes #31269

Features

• codebuild: macOS codebuild support (#31203) (823ff6e), closes #31170
• eks: preserveOnDelete for EKS addon (#30776) (23fba1c)
• kms: add multiRegion property to a Key (#31125) (3dc4c50)
• stepfunctions-tasks: add cpu and memory parameters to EcsRunTask (#30140) (986e378), closes #30027
• synthetics: add syn-python-selenium-4.0 runtime (#31101) (cc75ded), closes #30137 /docs.aws.amazon.com/AmazonCloudWatch/latest/monitoring/CloudWatch_Synthetics_Library_python_selenium.html#CloudWatch_Synthetics_runtimeversion-syn-python-selenium-4
• update L1 CloudFormation resource definitions (#31193) (e942b67)
• update L1 CloudFormation resource definitions (#31194) (5468983)
• update L1 CloudFormation resource definitions (#31221) (b754353)

Bug Fixes

• cloudfront: requirement of domainNames prevents moving a domain name between distributions (#31001) (acdf7d3), closes #29960 #29329
• eks: can't update authMode with the same mode (#31043) (64df08b)
• lambda-event-source: allow dynamodb filtering on boolean value (#31011) (9946ab0), closes #30734
• s3: bucket notifications in owning stack deletes bucket notifications from other stacks (#31091) (0b09e52)

Alpha modules (2.155.0-alpha.0)

Features

• ec2: ipv6AddressCount property for an instance (#31076) (e3e5e1c), closes #31075
• ec2: support throughput on LaunchTemplate EBS volumes (#30716) (6ed0bed), closes #24341 #22441
• location: support GeofenceCollection (#30711) (04d73ac), closes #30710

Features

• update L1 CloudFormation resource definitions (#31193) (aa97525)
• update L1 CloudFormation resource definitions (#31194) (2191264)

Bug Fixes

• cloudfront: requirement of domainNames prevents moving a domain name between distributions (#31001) (1255ce3), closes #29960 #29329

Alpha modules (2.154.1-alpha.0)

Features

• update L1 CloudFormation resource definitions (#31145) (5387605)
• batch: add ECS_AL2023 (#30928) (d45bf08)
• CLI: synth displays "AssertDescription: CDK bootstrap stack version 6 required" (#31092) (751a922), closes #17942
• core: configure SNS topics to receive stack events on the Stack construct (#30551) (0cdce20), closes #8581
• dynamodb: adding on-demand-throughput to table (#30725) (d5a19bb), closes #30091
• elasticloadbalancingv2: connection logs for ALB (#30599) (7c4f423)
• elasticloadbalancingv2: support Mutual Authentication with TLS for Application Load Balancer (#30784) (7eae4d1), closes #28206
• region-info: update Metadata regions (#31044) (ae7d181)
• region-info: update Metadata regions (#31046) (6ec69b9)
• region-info: update Metadata regions (#31047) (9025635)
• s3: add skip destination validation property (#30916) (ffc40e5), closes #30914 #30914
• ssm: support cross-account sharing (#30646) (1eb1ea6), closes #29292
• set log retention of all CDK-vended custom resources with CustomResourceConfig (#31041) (f2babd9)
• update L1 CloudFormation resource definitions (#31025) (5414932)
• update L1 CloudFormation resource definitions (#31086) (62a641c)
• update L1 CloudFormation resource definitions (#31120) (931ebba)
• vpc: support custom route and subnet (#30538) (e17fdd7), closes RFC#507

Bug Fixes

• elasticloadbalancingv2-targets: add AlbListenerTarget for NLBs, deprecate AlbTarget due to ALB listener race conditions (#17208) (#30396) (1fca1e5), closes /github.com/aws/aws-cdk/issues/17208#issuecomment-1681475590
• lambda: validate localMountPath format and length (#31019) (c159e77)
• vpc-v2: fixing default scope id (#31102) (0007a29)

Reverts

• feat(core): configure SNS topics to receive stack events on the Stack construct (#31100) (5f30aa5), closes aws/aws-cdk#30551
• feat(ec2): security group lookup via filters (#31065) (79b5cd2), closes aws/aws-cdk#30625
• feat(ecs): add validation checks to memory cpu combinations of FARGATE compatible task definitions (#31110) (ffba5b1)

Alpha modules (2.154.0-alpha.0)

Features

• amplify: support custom certificate (#30791) (8d76778), closes #30594
• ec2: security group lookup via filters (#30625) (abc78bf), closes #30331
• sagemaker: network isolation for a model (#30657) (f1af7fc)

Bug Fixes

• cli-lib-alpha: bootstrap fails with "bad argument name" error for trust and trustForLookup (#31159) (b11ca4a), closes #30404
• cognito-identitypool-alpha: validation error if provided id is a token (#30882) (ad1b797), closes #29780 #28184
• ec2: prevent deduplication of init command args (#30821) (1e7c690), closes #26221

Features

• lambda: support Recursive Loop Protection property (572fe0a)

Alpha modules (2.153.0-alpha.0)

Features

• lambda: support filter criteria encryption (6aa72a2)

Alpha modules (2.152.0-alpha.0)

Reverts

• feat(ecs): add validation checks to memory cpu combinations of FARGATE compatible task definitions (#31110) (8fdf015)

Alpha modules (2.151.1-alpha.0)

Features

• apigatewayv2: add description property for stage (#30820) (8651bbe)
• ec2: add versionDescription property for LaunchTemplate (#30837) (597228c)
• ecs: add validation checks to memory cpu combinations of FARGATE compatible task definitions (#30166) (8b4685e), closes #22216
• elasticloadbalancingv2: support Weighted Random algorithm and Automatic Target Weights for alb (#30542) (d0a609d), closes #29969
• events: add description property for eventBus (#30935) (28fbc82)
• events: support customer managed key for event bus (#30493) (8c44aa7)
• synthetics: add activeTracing, memory and timeout property to Canary class (#30556) (9295a85), closes #9300 #14086 #28152 #9300
• update L1 CloudFormation resource definitions (#30973) (63c45e4)
• sns: add validation of displayName for topic (#30770) (da2ec75)
• stepfunctions-tasks: allow BedrockInvokeModel to use JsonPath (#30298) (f5dd73b), closes #29229

Bug Fixes

• appconfig: sourcedConfiguration doesn't use retrievalRole (#30733) (9d79c51), closes #30609
• ec2: export NatGatewayProvider for consistency with NatInstanceProvider (#28810) (fbc28bc), closes #28372
• ecs: fromServiceArnWithCluster not accepting value from SSM Parameter string (#30902) (0baa573), closes #30798
• stepfunctions: allow disable x-ray (#30808) (d56d05c), closes #30796
• stepfunctions-tasks: fix the generated IAM policy for EFS operations (#30896) (31808b4), closes #30862
• stepfunctions-tasks: run task perm no longer valid (#30788) (82b163d), closes #30751

Alpha modules (2.151.0-alpha.0)

Features

• kinesisanalytics-flink: add support for Flink 1.19 (#30723) (c185194), closes /docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-kinesisanalyticsv2-application.html#aws-resource-kinesisanalyticsv2

Features

• update L1 CloudFormation resource definitions (#30921) (153a698)
• ec2: add g6 instance (#30693) (90a41d5), closes #30683
• lambda: add SnapStart support for arm64 functions (#30898) (b4377a5), closes #30899
• logs: enabling IA log group creation in CN and GovCloud regions (#30904) (230b56b)
• update L1 CloudFormation resource definitions (#30860) (ce7a8d5)

Bug Fixes

• custom-resources: provider framework will always log all data including confidential data (#30689) (9bd92da), closes #30275
• stepfunctions-tasks: allow camelCase for parameters of CallAwsServiceCrossRegion (#30795) (5d6ace8), closes #30799

Alpha modules (2.150.0-alpha.0)

Features

• codedeploy: zonal configuration for ServerDeploymentConfig (#30429) (da0dc57), closes #30430
• codestarnotifications: add createdBy property for notification rule (#30780) (a68b418)
• stepfunctions-tasks: add guardrailConfiguration and trace property to the BedrockInvokeModel (#30426) (772b1d1), closes #30425
• stepfunctions-tasks: enable resultReuseConfiguration in AthenaStartQueryExecution (#30447) (046bf56), closes #30446
• update L1 CloudFormation resource definitions (#30786) (6d0a09f)

Bug Fixes

• apigateway: authorization scope is not added when not explicitly defining authorization type in method or root api (#30822) (e4367a0), closes #30444
• scheduler-targetes-alpha: multiple schedules cause resolution error during synth (#30634) (727e886), closes #28713

Alpha modules (2.149.0-alpha.0)

Bug Fixes

• apigateway: authorization scope is not added when not explicitly defining authorization type in method or root api (#30822) (4bee768), closes #30444

Alpha modules (2.148.1-alpha.0)

Features

• lambda: add grantInvokeLatestVersion to grant invoke only to latest function version (#29856) (61c28dd), closes #20177
• update L1 CloudFormation resource definitions (#30722) (4ceeced), closes /docs.aws.amazon.com/service-terms/#87
• codebuild: adding project.visibility (#30103) (1bacb69)
• codedeploy: termination hook (#30644) (8f652a7)
• cognito: add defaultRedirectUri to UserPoolClient (#30481) (f2c5f68)
• eks: eks pod identities (#30576) (9437b4d), closes /github.com/aws/aws-cdk/blob/b196b13b0b8a54dcacadf87fdbe744772a6e6c4d/packages/aws-cdk-lib/aws-eks/lib/oidc-provider.ts#L36 /github.com/aws/aws-cdk/blob/b196b13b0b8a54dcacadf87fdbe744772a6e6c4d/packages/aws-cdk-lib/aws-eks/lib/oidc-provider.ts#L36 /github.com/aws/aws-cdk/blob/b196b13b0b8a54dcacadf87fdbe744772a6e6c4d/packages/aws-cdk-lib/aws-iam/lib/role.ts#L373 #30519
• stepfunctions-tasks: step functions task for cross-region AWS API call (#30061) (1397737), closes #29918
• update L1 CloudFormation resource definitions (#30642) (2a659f0)
• fsx: add properties to enable automatic backups for Lustre file system (#30343) (3b95777), closes #30340

Bug Fixes

• ecs: let AsgCapacityProvider use IAutoScalingGroup only when Managed Termination Protection is disable (#30335) (efee07d), closes #29174
• lambda-nodejs: breaking change in esbuild causes import module error (#30726) (7f5ce4b), closes #30717
• s3: allow import S3 bucket with a legacy name (#30679) (e09126f), closes #22640
• s3-notifications: unable to delete the existing S3 event notifications (#30610) (b880067), closes #28915s too broad (under feature flag) (#30389) (8ebfade), closes #30368

Reverts

• fix(core): overrideLogicalId validation (#30695) (0aa2be7), closes aws/aws-cdk#29708
• route53 CrossAccountZoneDelegationRecord fails at deployment time with imported delegatedZone (#30440)" (#30606) (95280a0), closes #30600

Alpha modules (2.148.0-alpha.0)

Features

• apprunner: add AutoScalingConfiguration for AppRunner Service (#30358) (a598508), closes #30353
• apprunner: add ObservabilityConfiguration for AppRunner Service (#30359) (9e9cc27), closes #22985
• pipes-enrichments: add Step Functions enrichment eventbridge pipes (#30495) (8b495f9), closes #29385
• pipes-targets: add lambda function (#30271) (f594fae), closes #30270

Bug Fixes

• apprunner: auto deployment fails after new container image pushed due to lack of a permission (#30630) (cce10b1), closes #26640 /github.com/aws/aws-cdk/blob/main/packages/aws-cdk-lib/aws-ecr/lib/repository.ts#L385 40aws-cdk/aws-apprunner-alpha/lib/service.ts#L1303 40aws-cdk/aws-apprunner-alpha/lib/service.ts#L1368

Bug Fixes

• lambda-nodejs: breaking change in esbuild causes import module error (#30726) (06c14b1), closes #30717

Alpha modules (2.147.3-alpha.0)

Reverts

• fix(core): overrideLogicalId validation (#29708) (b196b13)

Alpha modules (2.147.2-alpha.0)

Reverts

• route53 CrossAccountZoneDelegationRecord fails at deployment time with imported delegatedZone (#30440)" (#30606) (69eb617), closes #30600

Alpha modules (2.147.1-alpha.0)

Features

• ec2: add nitro enclave and hibernation settings to the Instance Construct (#30228) (4e9ef15)
• ses: allow VDM settings at the configuration set level (#30051) (49a98ac), closes #30041
• stepfunctions-tasks: support FLEX execution class for GlueStartJobRun (#30534) (c826d8f), closes #30533
• update L1 CloudFormation resource definitions (#30569) (a5c6d21), closes /docs.aws.amazon.com/AmazonRDS/latest/AuroraUserGuide/aurora-serverless-v2.requirements.html#aurora-serverless-v2 /docs.aws.amazon.com/AmazonRDS/latest/AuroraUserGuide/aurora-serverless-v2.requirements.html#aurora-serverless-v2

Bug Fixes

• apigateway: remove timeout upper bound max (#30547) (3c36fe9), closes #30539
• core: overrideLogicalId validation (#29708) (b196b13), closes #29701
• globalaccelerator-endpoints: add preserveClientIp option for net… (#30346) (c1e1b4d)
• stepfunctions: add docs and warning DistributedMap Class ignores executionType in the ProcessorConfig (#30301) (0499adf), closes #30194 #27913 #28821

Alpha modules (2.147.0-alpha.0)

Bug Fixes

• custom-resource-handlers: don't recursively process s3 bucket objects (#30209) (25835e4), closes #30573 /github.com/aws/aws-cdk/pull/30209#issuecomment-2118991218

Features

• appsync: add maxBatchSize property to the AppSyncFunction Construct (#30266) (f1dc142)
• eks: support AccessConfig for the Cluster construct (#30016) (f45f2ca), closes #28588
• opensearch: add OpenSearch 2.13 engine version (#30399) (db3e77d)
• implement node runtime region awareness for cdk vended custom resources (#30108) (69c5dde)
• codebuild: add missing types for webhook filters (#30064) (1d93094), closes #30062
• sns: add grantSubscribe method (#30486) (36a48ad), closes #29049
• update L1 CloudFormation resource definitions (#30508) (06d0a1b)

Bug Fixes

• cloudfront: make long function name deterministic (#30392) (e19d18b), closes #20017 #15523 #28629
• route53: delegation fails with public and private hosted zones with same name (#30439) (1f866c9), closes #30262

Alpha modules (2.146.0-alpha.0)

Features

• apprunner: add ipAddressType property to the Service class (#30351) (665396f)

Features

• config: proactive evaluation mode (#30174) (516ecef), closes #30172
• eks: support for Kubernetes version 1.30 (#30454) (d2ea280)
• update L1 CloudFormation resource definitions (#30438) (3ee5ce0)
• chatbot: configure userRoleRequired for the SlackChannelConfiguration (#30420) (5b84ca6), closes #30403
• codebuild: Fleet L2 (#29754) (940e799), closes #29617 #29616
• logs: add distribution property to the Subscription class (#30423) (0e95bf0), closes #30422

Bug Fixes

• custom-resources: logApiResponseData is added to custom resource event properties by default (#30418) (a899ac6), closes #30121 #29949 #29648
• route53 CrossAccountZoneDelegationRecord fails at deployment time with imported delegatedZone (#30440) (a3d9b10), closes #28581
• apigateway: allow overriding authorizer on methods (#30415) (1b8d73c), closes #8827

Alpha modules (2.145.0-alpha.0)