v2.202.0

Features

• lambda: support for schema registry for kafka (#34746) (c6ea664)
• update L1 CloudFormation resource definitions (#34730) (47a3ee3)
• cdk-pipeline: add url and sns topic for manual approval in cdk pipeline (re-create PR since original is auto-closed) (#34654) (39f1636), closes #32809 #12273 #34227
• eks: support eks with k8s 1.33 (#34602) (fc46733), closes #34520 /github.com/aws/aws-cdk/pull/33339#issuecomment-2643498256
• kms: implement .grant methods for Alias.fromAliasName (under feature flag) (#34237) (8e19dd6), closes #22697
• opensearch: add logic to only log specific field when less verbosity is needed for opensearch access policy custom resource (#34701) (856e3b1), closes #29093
• exclude lambda.Version and apigateway.Deployment from refactoring (#34710) (dd14a17)

Bug Fixes

• core: splitting tree.json produces a lot of files (#34718) (650134f), closes #34478 #34627
• pipelines: use display name for Asset actions when publishAssetsInParallel is false (#34049) (754ad50), closes #34042 #33844
• route53: warn when ttl is provided with alias target in RecordSet (#34526) (993d2fd)
• test-app: fix spelling error (#34762) (1885062)

---

Alpha modules (2.202.0-alpha.0)

Features

• amplify: add compute role support for Amplify branches (#34708) (817a21a)
• amplify-alpha: support custom response headers in monorepo structures (#31771) (aea1372), closes #31758

v2.201.0

Features

• opensearch: update default TLS security policy to TLS 1.2 for OpenSearch domains (#34660) (3cc2dc2), closes #34658
• update L1 CloudFormation resource definitions (#34659) (ef02724)
• update L1 CloudFormation resource definitions (#34687) (025c82e)
• appconfig: support customer managed key for hosted configuration (#34256) (484719e)
• codepipeline-actions: native Amazon EC2 deployment support (#33604) (9d39db7), closes #33584 /docs.aws.amazon.com/codepipeline/latest/userguide/action-reference-EC2Deploy.html#action-reference-EC2
• core: support adding additional cache key to cdk context values (#31586) (8848134), closes #26982
• core: throw typed Errors (#34587) (4e63b1a), closes #32569
• eks: added support for bootstrapSelfManagedAddons (#33597) (cedc1b0), closes #30792
• rds: DatabaseInstanceFromSnapshot support clusterSnapshotIdentifier (#33982) (48d30b6), closes #33889
• rds: support auto-pause configuration for Aurora Serverless v2 (#34173) (2c55c28), closes #32280 #32563
• stepfunctions: add support for Jsonata expressions to Map.ItemSelector (#34625) (dc30faa), closes #34538 /github.com/aws/aws-cdk/blob/ed08f3f0b8ecd79a2fa5e804acc73a9ff23eab80/packages/aws-cdk-lib/aws-stepfunctions/lib/states/map-base.ts#L60-L77
• synthetics: playwright 2.0 runtime (#34609) (1418204)
• synthetics: safe canary update (#34608) (89c5350)

Bug Fixes

• export errors to make it available in region-info/lib/fact.ts (#34691) (5c8f50c), closes #34690 #34690 #33384
• apigateway: correct JsonSchema.additionalItems property type (#33879) (464d521), closes #33878 #33878
• cloudfront: use wildcard when grant some cloudfront permission (#33802) (452a5e1), closes #33249
• lambda: disable aws-lambda:useCdkManagedLogGroup feature flag when not set (#34613) (d696688), closes #34612 #34612
• logs: exposed metric from the metric filter will now include the dimension map (#34648) (892b013), closes #34643
• opensearch: opensearchservice: existing integ test is failing (#34680) (be21625), closes 1#L59
• typo in jsdoc of noncurrentVersionTransitions property (#34620) (ed08f3f)

---

Alpha modules (2.201.0-alpha.0)

Features

• amplify: add skew protection feature for Amplify branches (#34656) (8808998)
• bedrock: adding bedrock l2 construct features (#34065) (a028927)
• ec2: add interface VPC endpoint for DSQL (#34487) (3e53c2c)
• ec2: support Firehose IDeliveryStream as flow log destination (#34596) (cdfe6e7), closes #33883 #33757
• ec2: volume initialization rate for EBS volume (#34570) (527d483)

Reverts

• ec2: support Firehose IDeliveryStream as flow log destination (#34665) (b77bd0e), closes aws/aws-cdk#34596

v2.200.2

Bug Fixes

• export errors to make it available in region-info/lib/fact.ts (#34691) (4a75032), closes #34690 #34690 #33384

---

Alpha modules (2.200.2-alpha.0)

v2.200.1

Bug Fixes

• lambda: disable aws-lambda:useCdkManagedLogGroup feature flag when not set (#34613) (b4cab7f), closes #34612 #34612

---

Alpha modules (2.200.1-alpha.0)

v2.200.0

Features

• update L1 CloudFormation resource definitions (#34594) (1e37ee7)
• custom-resources: throw ValidationError instead of untyped Errors (#33392) (1dacaa3), closes #32569
• ec2: implement IPeer to PrefixList to be usable as a connection peer (#33617) (c277419), closes #33607
• iam: introduce OidcProviderNative construct utilizing the native CloudFormation resource (#28634) (d8e6c09), closes #21197
• iam: throw ValidationErrors instead of untyped errors (#34579) (bd5caba), closes #32569
• lambda: allow propagating function tags to loggroup (#34556) (f556fd1)
• lambda: throw ValidationErrors instead of untyped errors (#34577) (6ccdd81), closes #32569
• region-info: throw ValidationError instead of untyped Errors (#33384) (303daf2), closes #32569
• s3: add grantReplicationPermission for IAM Role permissions (#34138) (bfa6490), closes #34119
• secretsmanager: throw ValidationErrors instead of untyped errors (#34580) (4d591ef), closes #32569
• servicecatalog: throw ValidationErrors instead of untyped errors (#34581) (3895d76), closes #32569
• sns-subscriptions: support Amazon Data Firehose subscription (#33811) (632179c), closes #14391
• stepfunctions: add grant API for RedriveExecution (#34554) (e03939d), closes #33578

Bug Fixes

• ec2: validate throughput property on EC2 instance block devices (#34571) (b31580a), closes #34033
• elasticloadbalancingv2: fix incorrect max for minimumCapacityUnit (#34586) (8f19b26), closes #34582

---

Alpha modules (2.200.0-alpha.0)

Features

• msk: support Kafka 4.0 (#34501) (aa40e38)

v2.199.0

⚠ BREAKING CHANGES TO EXPERIMENTAL FEATURES

• cloudformation: Some L1 resources experienced breaking changes due to updated CloudFormation resources. Please check the notes for each specific module for more information.
• vpc-lattice: the name and resourceConfigurationType property in CfnResourceConfigurationProps has changed from optional to required. Also, the name, subnetIds and vpcIdentifier properties in CfnResourceGatewayProps have changed from optional to mandatory.

Features

• appconfig: deletion protection check for configuration profile (#34418) (ce88c76)
• cloudformation: update L1 CloudFormation resource definitions (#34555) (64662b2)
• ecs-patterns: add minHealthyPercent and maxHealthyPercent props to NetworkMultipleTargetGroupsFargateService (#34516) (a434aed), closes #34368
• eks: Addon support configurationValues (#34061) (b420033), closes #34001
• events-targets: enable opt-in to use an IAM role for SnsTopic target (#34259) (a3a0cf0)
• stepfunctions-tasks: bedrock createModelCustomizationJob integration (#31913) (0c653d3), closes #29042

Bug Fixes

• elasticloadbalancingv2: add validation on application listeners for certificates on HTTP protocol (#34233) (ca065bb)
• rds: fix incorrect import/export combination check in AuroraMysqlEngineVersion.of() (#33564) (9e41154), closes #33562 #33562

---

Alpha modules (2.199.0-alpha.0)

v2.198.0

Features

• update L1 CloudFormation resource definitions (#34528) (92ad68a)

Bug Fixes

• synthesis fails if tree.json exceeds 512MB (#34478) (ff2f4af)
• aws-ecs-patterns: add missing redirectHTTP dependency on default ALB listener (7b9a07b)
• ecs-patterns: add missing redirectHTTP dependency on main listener in ApplicationLoadBalancedFargateService (#34510) (8e4ca14), closes #34235 /github.com/aws/aws-cdk/blob/2bdc07e45f836a710bc049d43a2462806af1c75d/packages/aws-cdk-lib/aws-ecs-patterns/lib/base/application-load-balanced-service-base.ts#L508
• route53: avoid setting unnecessary properties for Recovery Control type Route53 health check (#34272) (6bc01c9), closes #34262
• ses-actions: condition should use SourceAccount (#34081) (f68b947), closes #29811 #30143 #29833 #30375

---

Alpha modules (2.198.0-alpha.0)

⚠ BREAKING CHANGES TO EXPERIMENTAL FEATURES

• amplify: A compute role is created when platform is Platform.WEB_COMPUTE or Platform.WEB_DYNAMIC.

Features

• amplify: add compute role support for Amplify app (#33962) (7490b92), closes #33882
• ec2: add i7i instance class (#34453) (3fe8ab4)

v2.197.0

Features

• update L1 CloudFormation resource definitions (#34497) (6b7cdcf)
• cloudwatch: anomaly detection alarms (#31232) (e2aa338), closes #10540 #10540
• custom-resource: update default node runtime to node22 in custom resources for commercial, china and gov regions (#34319) (eb5e688)

Bug Fixes

• core: platform is ignored during asset bundling (#33865) (91bec88), closes #30239
• lambda-nodejs: instantiating NodejsFunction without the entry property fails (#34498) (36ce84d)

---

Alpha modules (2.197.0-alpha.0)

v2.196.1

Bug Fixes

• lambda-nodejs: instantiating NodejsFunction without the entry property fails (#34498) (27e0f3a)

---

Alpha modules (2.196.1-alpha.0)

v2.196.0

⚠ BREAKING CHANGES TO EXPERIMENTAL FEATURES

• cloudformation: Some L1 resources experienced breaking changes due to updated CloudFormation resources. Please check the notes for each specific module for more information.
• Logs: The type of property DeliveryDestinationPolicy of resource AWS::Logs::DeliveryDestination changed to be DestinationPolicy instead of JSON.

Features

• apigatewayv2: add dualstack support to domain name (#34111) (8aa2f81), closes #34054 /docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-apigatewayv2-domainname-domainnameconfiguration.html#cfn-apigatewayv2
• cloudformation: update L1 CloudFormation resource definitions (#34425) (6460ffe)
• ecs: throw ValidationErrors instead of untyped errors (#34427) (5cfea39), closes #32569
• eks: throw ValidationErrors instead of untyped errors (#34428) (2e7c55b), closes #32569
• elasticloadbalancingv2: add support for multi-value headers in Lambda target groups (#34298) (c8b98e7)
• elasticsearch: throw ValidationErrors instead of untyped errors (#34429) (13d9645), closes #32569
• events-targets: throw ValidationErrors instead of untyped errors (#34430) (e493cc8), closes #32569
• globalaccelerator: throw ValidationErrors instead of untyped errors (#34426) (5ee092a), closes #32569
• kms: throw ValidationErrors instead of untyped errors (#34431) (10756c1), closes #32569
• opensearchservice: throw ValidationErrors instead of untyped errors (#34432) (5509923), closes #32569
• rds: add Aurora MySQL versions 2.11.6, 2.12.5, 3.04.4 (#34443) (d03e856)
• region-info: update Metadata regions (#34414) (957d8e3)
• route53: add cidrRoutingConfig property (#34301) (5cd82f5)
• s3-tables: add KMS support for TableBucket L2 construct (#34281) (ac0e4ca)
• scheduler: throw ValidationErrors instead of untyped errors (#34434) (bc7c4e8), closes #32569
• servicediscovery: throw ValidationErrors instead of untyped errors (#34435) (28048b3), closes #32569
• ses: https policy for custom tracking domain (#34314) (60d7aea)
• sns-subscriptions: throw ValidationErrors instead of untyped errors (#34436) (98e352d), closes #32569
• stepfunctions: ResultWriter support JSONPath/JSONata bucket (#33793) (8a5aecb), closes #32687
• stepfunctions: add parameters to parallel state (#34131) (0f71ee1), closes #32791
• property injectors and make all L2 Constructors injectable (#34419) (4dc523f)
• stepfunctions: throw ValidationErrors instead of untyped errors (#34438) (e828389), closes #32569
• support healthCheckGracePeriod in QueueProcessingFargateService (#34231) (ae0c7b7), closes #34220
• synthetics: add 5.0 and 5.1 python canary runtimes (#34254) (639b883), closes #34252

Bug Fixes

• cloudwatch-actions: lambda permission use unique prefix id (#34269) (9ddc00a), closes #33958
• eks: eks cluster name exceeding the limit of 100 characters (#34449) (5197882)
• s3: updating blockPublicAccess to enable default true settings (under feature flag) (#33702) (904e3a3), closes #32811 40aws-cdk-testing/framework-integ/test/aws-s3/test/integ.bucket-block-access.ts#L1-L42

---

Alpha modules (2.196.0-alpha.0)

Features

• msk: support Kafka versions 3.9.x and 3.9.x Kraft (#34213) (a1226db)
• pipes-targets: add SNS (#34159) (2f846b3)
• s3tables: server-side encryption by customer managed KMS key (#34229) (488f0db)

Bug Fixes

• ec2: dual-stack vpc without private subnets creates EgressOnlyInternetGateway (under feature flag) (#34437) (35e818b), closes #30981
• ec2-alpha: fix resource id references and tags for migration behind feature flag (#34377) (aa73534)