Releases: aws/aws-cdk
Releases · aws/aws-cdk
v2.220.0
⚠ BREAKING CHANGES
L1 resources are automatically generated from public CloudFormation Resource Schemas. They are built to closely reflect the real state of CloudFormation. Sometimes these updates can contain changes that are incompatible with previous types, but more accurately reflect reality. In this release we have changed:
- aws-neptune: AWS::Neptune::EventSubscription: SnsTopicArn property is now required.
- aws-neptune: AWS::Neptune::EventSubscription: Id attribute removed.
- aws-servicecatalog: AWS::ServiceCatalog::PortfolioShare: Id attribute removed.
- aws-lex: AWS::Lex::ResourcePolicy: ResourceArn property is now immutable.
Co-authored-by: aws-cdk-automation aws-cdk-automation@users.noreply.github.com
Features
- batch: ec2 Managed Compute Environment support default instance classes, deprecate
useOptimalInstanceClasses(#35537) (9d59dd8), closes #35515 - kinesis: shard-level metrics for stream (#34963) (ce9b3a8)
- lambda: refactor Function URL permissions (#35725) (d38d015)
- update L1 CloudFormation resource definitions (#35679) (dec6e6a)
- update L1 CloudFormation resource definitions (#35695) (8a6cf46)
- update L1 CloudFormation resource definitions (#35712) (27a8760)
- amplify: support build compute type (#34796) (a02c656)
- cloudfront-origins: add ipAddressType property to Lambda Function URL origins (#35458) (6cf6dc8), closes #35450
- ec2: add BEDROCK_AGENTCORE and BEDROCK_AGENTCORE_GATEWAY to InterfaceVpcEndpointAwsService (#35667) (6966c03)
- ec2: support for automatic VPN session reconnect on client VPN endpoint (#35538) (9536472)
- eks: add removal policy support for EKS cluster construct (#35560) (4b4e322), closes #25544
- logs: add parameter to allow metric filter on transformed logs (#35359) (effa46d)
- opensearch: add OpenSearch 3.1 engine version (#35477) (3bd7cf9), closes #35471
- route53: add fromPrivateHostedZoneAttributes function to PrivateHostedZone (#35552) (c8d7a79), closes #23268
- synthetics: allow root level canary scripts files for Puppeteer versions 11 and greater (#35426) (46fb2dc)
Bug Fixes
- cloudwatch: metric period in AnomalyDetectionAlarm is not being respected (#35319) (c7d8004), closes #34614 /github.com/aws/aws-cdk/blob/6966c03b1a7aece0846f5a91bbeb825cd7491689/packages/aws-cdk-lib/aws-cloudwatch/lib/private/alarm-options.ts#L16-L18 /github.com/aws/aws-cdk/blob/86638f6daca6ead382d0b9c1cf65bb04f70d4b3d/packages/aws-cdk-lib/package.json#L32 /github.com/aws/aws-cdk/pull/35319#discussion_r2407134489
- ecs: update task definition validations for managed instances (#35684) (8638a78), closes #35644
- lambda-nodejs: bump bun to 1.2.23 for ARM64 support (#35702) (3aa186c), closes #35534
- s3: resolve synthesis error in BucketPolicy.fromCfnBucketPolicy() (#35633) (d9085cc), closes #34322
- s3tables: s3 table bucket read access role uses incorrect permission for s3tables:ListNamespaces (#35420) (eb949bb)
Alpha modules (2.220.0-alpha.0)
Bug Fixes
v2.214.1
v2.219.0
⚠ BREAKING CHANGES
- ** L1 resources are automatically generated from public CloudFormation Resource Schemas. They are built to closely reflect the real state of CloudFormation. Sometimes these updates can contain changes that are incompatible with previous types, but more accurately reflect reality. In this release we have changed:
aws-servicecatalog: AWS::ServiceCatalog::PortfolioPrincipalAssociation: PortfolioId property is now required.
aws-servicecatalog: AWS::ServiceCatalog::PortfolioPrincipalAssociation: PrincipalARN property is now required.
aws-servicecatalog: AWS::ServiceCatalog::PortfolioProductAssociation: Id attribute removed.
Co-authored-by: aws-cdk-automation aws-cdk-automation@users.noreply.github.com
Features
- ecs: new L2 construct for ManagedInstances CapacityProvider (#35648) (c72a09b)
- update L1 CloudFormation resource definitions (#35646) (860ce0d)
- codebuild: add custom instance type and VPC to Fleets (#34572) (5c2781b)
- codebuild: support overflow behavior of fleet (#35480) (e4113b0)
- update L1 CloudFormation resource definitions (#35614) (fb0a114)
Bug Fixes
Alpha modules (2.219.0-alpha.0)
v2.218.0
Features
- cloudfront-origins: ip address type for http origin (#35445) (196c7ae), closes #35427
- docdb: support for serverless clusters (#35574) (89bfef7), closes #35199
- pipelines:
CodeBuildFactorysupport Docker server (#35584) (c62d996) - spec2cdk: generate
from<Resource>Arnandfrom<Resource><Prop>in every L1 (#35470) (c588061)
Alpha modules (2.218.0-alpha.0)
v2.217.0
Features
- update L1 CloudFormation resource definitions (#35491) (d095f68)
- update L1 CloudFormation resource definitions (#35567) (b0ccf81)
Bug Fixes
- cloudfront:
FunctionARN reference changed from GetAtt to Ref (#35547) (8a26869), closes #35531 - core: negated gitignore patterns inside subdirectories are not including matched files (#35511) (44781ef), closes #9146 #22002
- kms:
Aliasreference incorrectly resolves to underlyingKey(#35545) (43ffcff), closes #35543 - lambda: function.latestVersion points to wrong ARN (#35546) (761dde2), closes #35545
- rds: cannot use connections in rds.DatabaseInstance.fromLookup (#35193) (973d234), closes #35192
Reverts
- dynamodb: use keyId instead of keyArn for TableV2 replica encryption (#35568) (b1f7f78), closes aws/aws-cdk#35144 #35144 #35551
Alpha modules (2.217.0-alpha.0)
v2.216.0
Features
- apigatewayv2: add disableSchemaValidation for Websocket api (#35290) (bc391ce)
- cloudfront-origins: response completion timeout (#35485) (7d70bf4)
- elasticloadbalancingv2: support target group health attributes (#33351) (2de6e39), closes #31821
- events: add support for Event Bus Logging Configuration (#35201) (7ceaefb), closes #35000
- route53: add SVCB and HTTPS resource record classes (#34744) (8be219a), closes #34673
- stepfunctions-tasks:
EmrCreateClusterOptionssupport ebsRootVolumeIops, ebsRootVolumeThroughput and managedScalingPolicy (#34677) (b3ad6f9), closes #33431
Bug Fixes
- cloudformation-include: aws::novalue type validation error for non-string properties (#35425) (ce76a56), closes #18420
- kinesisanalytics: deprecate using KinesisAnalyticsV2 from
aws-kinesisanalytics, useaws-kinesisanalyticsv2instead (#35519) (4255b23) - kms: cannot access aliasTargetKey on an Alias imported by Alias.fromAliasName (#35521) (c0c9933), closes #35520
- secretsmanager:
SecretRotationApplicationcreates lambda on python 3.9 which is EOL (#35528) (756b683), closes #34168 - secretsmanager: secret transformation (#35202) (f4b26af), closes #34168
Alpha modules (2.216.0-alpha.0)
v2.215.0
Features
- 33270: support new bun lock file (#34873) (0a55ed1), closes #33270
- codebuild: support remote Docker server (#34976) (eb8e74b), closes #34494
- update L1 CloudFormation resource definitions (#35435) (d7f211f)
- batch: ecs execute command (#35341) (30722f2)
- custom-resource: upgrade to python runtime 3.13 for custom resources (#35342) (3db140e)
- rds: add DatabaseProxyEndpoint L2 construct (#35064) (04d8a95), closes #14186
- stepfunctions-tasks: add Node.js 22 support to EvaluateExpression (#35370) (640821d), closes #35353
- synthetics: browser type for canary (#35423) (fe0708b)
- new resource interfaces shared by both L1s and L2s (#35032) (5e8c0d5)
Bug Fixes
- correct typo 'notfication' to 'notification' in Stack docstring (#35455) (bfb54b0), closes #35433
- ecr-assets:
TarballImageAssetrespects CDK_DOCKER environment variable (#35344) (8bf6b00), closes #35336 - s3: scope BucketNotificationsHandler IAM permissions to specific bucket ARNs (#35334) (c0300d2), closes #35331
- stepfunctions: incorrect/missing permissions to run/redrive DistributedMap in state machine (#34760) (bbebb79), closes #35390 /github.com/aws/aws-cdk/issues/28820#issuecomment-2065316882 /github.com/aws/aws-cdk/blob/aea1372ab7bc68c489cea5ee5e499233755910e8/packages/aws-cdk-lib/aws-stepfunctions/lib/state-graph.ts#L178-L180
- stepfunctions: unable to run distributed map when only defined in nested StateGraphs (#35417) (036b413), closes #35391 /github.com/aws/aws-cdk/pull/34760#discussion_r2313620609
Alpha modules (2.215.0-alpha.0)
Bug Fixes
v2.214.0
CHANGES TO L1 RESOURCES
-
L1 resources are automatically generated from public CloudFormation Resource Schemas. They are build to closely reflect the real state of CloudFormation. Sometimes these updates can contain changes that are incompatible with previous types, but more accurately reflect reality. In this release we have changed:
- aws-ecs: AWS::ECS::Service: AvailabilityZoneRebalancing property default value changed from "ENABLED" to "DISABLED".
Features
- acm: add support for ACM exportable public certificates (#35079) (c158e80), closes #35078
- cloudwatch: add option to show labels on pie chart (#34745) (83f0a61), closes #28929
- cognito: support refresh token rotation (#34360) (74f8ad9), closes #34344
- core:
DockerBuildOptionssupport network param (#34725) (bc333e2), closes #34514 - dynamodb: adding ContributorInsightsMode feature (#35332) (f12ead2)
- rds: retain automated backups for database cluster (#35372) (2ffc666)
- update L1 CloudFormation resource definitions (#35320) (0d674e4)
- update L1 CloudFormation resource definitions (#35382) (8f708df)
- ecs: volume initialization rate (#34962) (b8dfbc4)
- events: enable customer managed keys to be used with Archive (#35253) (9f5e507)
- sns: add notExistsCondition method (#34712) (fd8677b), closes #34707
Bug Fixes
- lazy loading to improve startup time slows down large programs (#35335) (6755a4e)
- cloudwatch:
AlarmRule.concatcover empty operands (#34757) (a01aa38), closes #34662 - ecs_patterns: openListener should be false when custom sg is provided (#35297) (ccb1955), closes #35292 #ffcdd2 #e8f5e8 #fff3e0 #f5f5f5
- eks: kubectlProvider should use the AmazonEC2ContainerRegistryPullOnly managed policy (#35248) (1b6e962), closes #35244
- stepfunctions-tasks: map bedrockagent service to bedrock IAM prefix (#35147) (86638f6), closes #35146
- stop passing the deprecated property to Cfn construct (#35080) (a20afcd), closes #34895
- s3-deployment: intermittent CreateInvalidation and/or wait errors (#34859) (628425c), closes #15891 #15891
Alpha modules (2.214.0-alpha.0)
Features
v2.213.0
v2.212.0
CHANGES TO L1 RESOURCES
- L1 resources are automatically generated from public CloudFormation Resource Schemas. They are build to closely reflect the real state of CloudFormation. Sometimes these updates can contain changes that are incompatible with previous types, but more accurately reflect reality. In this release we have changed:
- aws-rds: AWS::RDS::DBInstance:
StatusInfosproperty is removed. - aws-sagemaker: AWS::SageMaker::Domain:
SingleSignOnApplicationArnproperty is removed. - aws-cloudfront: AWS::CloudFront::Function:
Nameproperty is now set as immutable.
Features
- implement UsagePlan and ApiKey support in L2 constructs for aws-apigatewayv2 (WebSocketApi) (#35060) (f7faffe), closes #28756
- update L1 CloudFormation resource definitions (#35256) (d79fd85)
Bug Fixes
- apigateway: invalid JSON structure in StepFunctions error responses causes 500s (#34787) (0d5ce56), closes #34777
- aws-cdk-lib: feature flag report contains unnecessary flags (#35227) (566f6ca)
- s3-deployment: list tokens in Source.jsonData are not resolved. (#35169) (1efb764), closes #35145 #35145
- signer: not correctly passing signingProfileName to CfnSigningProfile (#35033) (aaaa9cc), closes #35030
Reverts
- docs: revert ECS and Fargate service documentation for new AZ rebalancing default values (#35233) (7c0084a), closes #35156