v2.214.1

Features

• introduce reference interfaces, but don't require them yet (09fc592)

---

Alpha modules (2.214.1-alpha.0)

v2.219.0

⚠ BREAKING CHANGES

• ** L1 resources are automatically generated from public CloudFormation Resource Schemas. They are built to closely reflect the real state of CloudFormation. Sometimes these updates can contain changes that are incompatible with previous types, but more accurately reflect reality. In this release we have changed:

aws-servicecatalog: AWS::ServiceCatalog::PortfolioPrincipalAssociation: PortfolioId property is now required.
aws-servicecatalog: AWS::ServiceCatalog::PortfolioPrincipalAssociation: PrincipalARN property is now required.
aws-servicecatalog: AWS::ServiceCatalog::PortfolioProductAssociation: Id attribute removed.

Co-authored-by: aws-cdk-automation [email protected]

Features

• ecs: new L2 construct for ManagedInstances CapacityProvider (#35648) (c72a09b)
• update L1 CloudFormation resource definitions (#35646) (860ce0d)
• codebuild: add custom instance type and VPC to Fleets (#34572) (5c2781b)
• codebuild: support overflow behavior of fleet (#35480) (e4113b0)
• update L1 CloudFormation resource definitions (#35614) (fb0a114)

Bug Fixes

• cloudfront: edgefunction does not propagate stack tags correctly (#35518) (63088e8)

---

Alpha modules (2.219.0-alpha.0)

v2.218.0

Features

• cloudfront-origins: ip address type for http origin (#35445) (196c7ae), closes #35427
• docdb: support for serverless clusters (#35574) (89bfef7), closes #35199
• pipelines: CodeBuildFactory support Docker server (#35584) (c62d996)
• spec2cdk: generate from<Resource>Arn and from<Resource><Prop> in every L1 (#35470) (c588061)

---

Alpha modules (2.218.0-alpha.0)

• elasticache-alpha: implement Serverless ElastiCache L2 Construct (#35424) (0e08c8c)

v2.217.0

Features

• update L1 CloudFormation resource definitions (#35491) (d095f68)
• update L1 CloudFormation resource definitions (#35567) (b0ccf81)

Bug Fixes

• cloudfront: Function ARN reference changed from GetAtt to Ref (#35547) (8a26869), closes #35531
• core: negated gitignore patterns inside subdirectories are not including matched files (#35511) (44781ef), closes #9146 #22002
• kms: Alias reference incorrectly resolves to underlying Key (#35545) (43ffcff), closes #35543
• lambda: function.latestVersion points to wrong ARN (#35546) (761dde2), closes #35545
• rds: cannot use connections in rds.DatabaseInstance.fromLookup (#35193) (973d234), closes #35192

Reverts

• dynamodb: use keyId instead of keyArn for TableV2 replica encryption (#35568) (b1f7f78), closes aws/aws-cdk#35144 #35144 #35551

---

Alpha modules (2.217.0-alpha.0)

v2.216.0

Features

• apigatewayv2: add disableSchemaValidation for Websocket api (#35290) (bc391ce)
• cloudfront-origins: response completion timeout (#35485) (7d70bf4)
• elasticloadbalancingv2: support target group health attributes (#33351) (2de6e39), closes #31821
• events: add support for Event Bus Logging Configuration (#35201) (7ceaefb), closes #35000
• route53: add SVCB and HTTPS resource record classes (#34744) (8be219a), closes #34673
• stepfunctions-tasks: EmrCreateClusterOptions support ebsRootVolumeIops, ebsRootVolumeThroughput and managedScalingPolicy (#34677) (b3ad6f9), closes #33431

Bug Fixes

• cloudformation-include: aws::novalue type validation error for non-string properties (#35425) (ce76a56), closes #18420
• kinesisanalytics: deprecate using KinesisAnalyticsV2 from aws-kinesisanalytics, use aws-kinesisanalyticsv2 instead (#35519) (4255b23)
• kms: cannot access aliasTargetKey on an Alias imported by Alias.fromAliasName (#35521) (c0c9933), closes #35520
• secretsmanager: SecretRotationApplication creates lambda on python 3.9 which is EOL (#35528) (756b683), closes #34168
• secretsmanager: secret transformation (#35202) (f4b26af), closes #34168

---

Alpha modules (2.216.0-alpha.0)

v2.215.0

Features

• 33270: support new bun lock file (#34873) (0a55ed1), closes #33270
• codebuild: support remote Docker server (#34976) (eb8e74b), closes #34494
• update L1 CloudFormation resource definitions (#35435) (d7f211f)
• batch: ecs execute command (#35341) (30722f2)
• custom-resource: upgrade to python runtime 3.13 for custom resources (#35342) (3db140e)
• rds: add DatabaseProxyEndpoint L2 construct (#35064) (04d8a95), closes #14186
• stepfunctions-tasks: add Node.js 22 support to EvaluateExpression (#35370) (640821d), closes #35353
• synthetics: browser type for canary (#35423) (fe0708b)
• new resource interfaces shared by both L1s and L2s (#35032) (5e8c0d5)

Bug Fixes

• correct typo 'notfication' to 'notification' in Stack docstring (#35455) (bfb54b0), closes #35433
• ecr-assets: TarballImageAsset respects CDK_DOCKER environment variable (#35344) (8bf6b00), closes #35336
• s3: scope BucketNotificationsHandler IAM permissions to specific bucket ARNs (#35334) (c0300d2), closes #35331
• stepfunctions: incorrect/missing permissions to run/redrive DistributedMap in state machine (#34760) (bbebb79), closes #35390 /github.com/aws/aws-cdk/issues/28820#issuecomment-2065316882 /github.com/aws/aws-cdk/blob/aea1372ab7bc68c489cea5ee5e499233755910e8/packages/aws-cdk-lib/aws-stepfunctions/lib/state-graph.ts#L178-L180
• stepfunctions: unable to run distributed map when only defined in nested StateGraphs (#35417) (036b413), closes #35391 /github.com/aws/aws-cdk/pull/34760#discussion_r2313620609

---

Alpha modules (2.215.0-alpha.0)

Bug Fixes

• bedrock-alpha: added missing validation when prompt uses default variant (#35366) (cbd271e)

v2.214.0

CHANGES TO L1 RESOURCES

• L1 resources are automatically generated from public CloudFormation Resource Schemas. They are build to closely reflect the real state of CloudFormation. Sometimes these updates can contain changes that are incompatible with previous types, but more accurately reflect reality. In this release we have changed:

  • aws-ecs: AWS::ECS::Service: AvailabilityZoneRebalancing property default value changed from "ENABLED" to "DISABLED".

Features

• acm: add support for ACM exportable public certificates (#35079) (c158e80), closes #35078
• cloudwatch: add option to show labels on pie chart (#34745) (83f0a61), closes #28929
• cognito: support refresh token rotation (#34360) (74f8ad9), closes #34344
• core: DockerBuildOptions support network param (#34725) (bc333e2), closes #34514
• dynamodb: adding ContributorInsightsMode feature (#35332) (f12ead2)
• rds: retain automated backups for database cluster (#35372) (2ffc666)
• update L1 CloudFormation resource definitions (#35320) (0d674e4)
• update L1 CloudFormation resource definitions (#35382) (8f708df)
• ecs: volume initialization rate (#34962) (b8dfbc4)
• events: enable customer managed keys to be used with Archive (#35253) (9f5e507)
• sns: add notExistsCondition method (#34712) (fd8677b), closes #34707

Bug Fixes

• lazy loading to improve startup time slows down large programs (#35335) (6755a4e)
• cloudwatch: AlarmRule.concat cover empty operands (#34757) (a01aa38), closes #34662
• ecs_patterns: openListener should be false when custom sg is provided (#35297) (ccb1955), closes #35292 #ffcdd2 #e8f5e8 #fff3e0 #f5f5f5
• eks: kubectlProvider should use the AmazonEC2ContainerRegistryPullOnly managed policy (#35248) (1b6e962), closes #35244
• stepfunctions-tasks: map bedrockagent service to bedrock IAM prefix (#35147) (86638f6), closes #35146
• stop passing the deprecated property to Cfn construct (#35080) (a20afcd), closes #34895
• s3-deployment: intermittent CreateInvalidation and/or wait errors (#34859) (628425c), closes #15891 #15891

---

Alpha modules (2.214.0-alpha.0)

Features

• bedrock-alpha: add guardrails l2 construct (#34765) (b4fdb2b)
• eks-v2-alpha: support eks with k8s 1.33 (#34713) (c24565e), closes #34520 #34911
• s3tables-alpha: add TablePolicy support to L2 construct library (#35223) (2741dfb), closes #33054

v2.213.0

Features

• dynamodb: adding ContributorInsightsMode feature (#35332) (d2c93e4)

---

Alpha modules (2.213.0-alpha.0)

Features

• s3tables-alpha: add TablePolicy support to L2 construct library (#35223) (a4aad78), closes #33054

v2.212.0

CHANGES TO L1 RESOURCES

• L1 resources are automatically generated from public CloudFormation Resource Schemas. They are build to closely reflect the real state of CloudFormation. Sometimes these updates can contain changes that are incompatible with previous types, but more accurately reflect reality. In this release we have changed:
• aws-rds: AWS::RDS::DBInstance:StatusInfos property is removed.
• aws-sagemaker: AWS::SageMaker::Domain: SingleSignOnApplicationArn property is removed.
• aws-cloudfront: AWS::CloudFront::Function: Name property is now set as immutable.

Features

• implement UsagePlan and ApiKey support in L2 constructs for aws-apigatewayv2 (WebSocketApi) (#35060) (f7faffe), closes #28756
• update L1 CloudFormation resource definitions (#35256) (d79fd85)

Bug Fixes

• apigateway: invalid JSON structure in StepFunctions error responses causes 500s (#34787) (0d5ce56), closes #34777
• aws-cdk-lib: feature flag report contains unnecessary flags (#35227) (566f6ca)
• s3-deployment: list tokens in Source.jsonData are not resolved. (#35169) (1efb764), closes #35145 #35145
• signer: not correctly passing signingProfileName to CfnSigningProfile (#35033) (aaaa9cc), closes #35030

Reverts

• docs: revert ECS and Fargate service documentation for new AZ rebalancing default values (#35233) (7c0084a), closes #35156

---

Alpha modules (2.212.0-alpha.0)

v2.211.0

⚠ BREAKING CHANGES

cloudformation: L1 resources are automatically generated from
public CloudFormation Resource Schemas. They are build to closely
reflect the real state of CloudFormation. Sometimes these updates can
contain changes that are incompatible with previous types, but more
accurately reflect reality. In this release we have changed:

• aws-opsworkscm: CfnServer resource is no longer provisionable
  (AWS::OpsWorksCM::Server). Service is on deprecation path
• aws-iotfleetwise: Properties DataDestinationConfigs,
  SignalsToCollect and SignalsToFetch in resource CfnCampaign are
  now marked as immutable (they will cause a replacement of the resource
  if updated)

Features

• cloudformation: update L1 CloudFormation resource definitions (#35138) (3eb8ec0)
• dynamodb: tableV2 MRSC feature addition (#34909) (6b318f5), closes #34883
• ec2: support the new ServiceRegion property for AWS::EC2::VPCEndpoint (#35025) (fee0638), closes #32785 #33959
• ecs: add L2 support for native ECS blue/green deployments (#35179) (4d2f463), closes #35061 #35170 #35167

Bug Fixes

• dynamodb: use keyId instead of keyArn for TableV2 replica encryption (#35144) (787b8ed), closes #35136

---

Alpha modules (2.211.0-alpha.0)