v2.203.0

⚠ BREAKING CHANGES TO EXPERIMENTAL FEATURES

• cloudformation: Some L1 resources experienced breaking changes due to updated CloudFormation resources. Please check the notes for each specific module for more information.

• aws-cdk-lib.aws_kendra.CfnDataSource.TemplateConfigurationProperty: template property here has changed from string to json

Features

• rds: instance engine lifecycle support (#34719) (bab7413), closes #34492
• report feature flag configuration into Cloud Assembly (#34798) (76af7dc)
• backup: add support for ScheduleExpressionTimezone (#34603) (8ceea43), closes #34532
• cloudformation: update L1 CloudFormation resource definitions (#34839) (4c75889)
• cloudwatch: add account id field for log query and metric widgets to support cross account visibility (#34793) (ac4d09d), closes #26105
• lambda: function log removal policy (#34723) (0388483), closes #34669
• pipelines: cdk-assets version is configurable (#34802) (a361c9c)
• update L1 CloudFormation resource definitions (#34792) (074cb8c)

Bug Fixes

• codecov: update codecov-upload.yml (#34845) (8055016), closes /github.com/aws/aws-cdk/blob/main/codecov.yml#L35
• codecov: update codecov-upload.yml action to upload report with correct path (#34814) (705e76b)
• stepfunctions-tasks: properly serialize CallAwsServiceCrossRegion Lambda responses (#34843) (a4b15df), closes #34768

Reverts

• "ci: add tool to sync with project board" (#34817) (1965014), closes aws/aws-cdk#34776

---

Alpha modules (2.203.0-alpha.0)

Features

• ec2: support for client route enforcement for client VPN endpoint (#34405) (063f4e7)

Bug Fixes

• ec2: don't use inferenceAccellerators in the constructors if not needed (#34618) (054c6c5), closes #33505 /github.com/aws/aws-cdk/issues/33505#issuecomment-2770818825 #34610

v2.202.0

Features

• lambda: support for schema registry for kafka (#34746) (c6ea664)
• update L1 CloudFormation resource definitions (#34730) (47a3ee3)
• cdk-pipeline: add url and sns topic for manual approval in cdk pipeline (re-create PR since original is auto-closed) (#34654) (39f1636), closes #32809 #12273 #34227
• eks: support eks with k8s 1.33 (#34602) (fc46733), closes #34520 /github.com/aws/aws-cdk/pull/33339#issuecomment-2643498256
• kms: implement .grant methods for Alias.fromAliasName (under feature flag) (#34237) (8e19dd6), closes #22697
• opensearch: add logic to only log specific field when less verbosity is needed for opensearch access policy custom resource (#34701) (856e3b1), closes #29093
• exclude lambda.Version and apigateway.Deployment from refactoring (#34710) (dd14a17)

Bug Fixes

• core: splitting tree.json produces a lot of files (#34718) (650134f), closes #34478 #34627
• pipelines: use display name for Asset actions when publishAssetsInParallel is false (#34049) (754ad50), closes #34042 #33844
• route53: warn when ttl is provided with alias target in RecordSet (#34526) (993d2fd)
• test-app: fix spelling error (#34762) (1885062)

---

Alpha modules (2.202.0-alpha.0)

Features

• amplify: add compute role support for Amplify branches (#34708) (817a21a)
• amplify-alpha: support custom response headers in monorepo structures (#31771) (aea1372), closes #31758

v2.201.0

Features

• opensearch: update default TLS security policy to TLS 1.2 for OpenSearch domains (#34660) (3cc2dc2), closes #34658
• update L1 CloudFormation resource definitions (#34659) (ef02724)
• update L1 CloudFormation resource definitions (#34687) (025c82e)
• appconfig: support customer managed key for hosted configuration (#34256) (484719e)
• codepipeline-actions: native Amazon EC2 deployment support (#33604) (9d39db7), closes #33584 /docs.aws.amazon.com/codepipeline/latest/userguide/action-reference-EC2Deploy.html#action-reference-EC2
• core: support adding additional cache key to cdk context values (#31586) (8848134), closes #26982
• core: throw typed Errors (#34587) (4e63b1a), closes #32569
• eks: added support for bootstrapSelfManagedAddons (#33597) (cedc1b0), closes #30792
• rds: DatabaseInstanceFromSnapshot support clusterSnapshotIdentifier (#33982) (48d30b6), closes #33889
• rds: support auto-pause configuration for Aurora Serverless v2 (#34173) (2c55c28), closes #32280 #32563
• stepfunctions: add support for Jsonata expressions to Map.ItemSelector (#34625) (dc30faa), closes #34538 /github.com/aws/aws-cdk/blob/ed08f3f0b8ecd79a2fa5e804acc73a9ff23eab80/packages/aws-cdk-lib/aws-stepfunctions/lib/states/map-base.ts#L60-L77
• synthetics: playwright 2.0 runtime (#34609) (1418204)
• synthetics: safe canary update (#34608) (89c5350)

Bug Fixes

• export errors to make it available in region-info/lib/fact.ts (#34691) (5c8f50c), closes #34690 #34690 #33384
• apigateway: correct JsonSchema.additionalItems property type (#33879) (464d521), closes #33878 #33878
• cloudfront: use wildcard when grant some cloudfront permission (#33802) (452a5e1), closes #33249
• lambda: disable aws-lambda:useCdkManagedLogGroup feature flag when not set (#34613) (d696688), closes #34612 #34612
• logs: exposed metric from the metric filter will now include the dimension map (#34648) (892b013), closes #34643
• opensearch: opensearchservice: existing integ test is failing (#34680) (be21625), closes 1#L59
• typo in jsdoc of noncurrentVersionTransitions property (#34620) (ed08f3f)

---

Alpha modules (2.201.0-alpha.0)

Features

• amplify: add skew protection feature for Amplify branches (#34656) (8808998)
• bedrock: adding bedrock l2 construct features (#34065) (a028927)
• ec2: add interface VPC endpoint for DSQL (#34487) (3e53c2c)
• ec2: support Firehose IDeliveryStream as flow log destination (#34596) (cdfe6e7), closes #33883 #33757
• ec2: volume initialization rate for EBS volume (#34570) (527d483)

Reverts

• ec2: support Firehose IDeliveryStream as flow log destination (#34665) (b77bd0e), closes aws/aws-cdk#34596

v2.200.2

Bug Fixes

• export errors to make it available in region-info/lib/fact.ts (#34691) (4a75032), closes #34690 #34690 #33384

---

Alpha modules (2.200.2-alpha.0)

v2.200.1

Bug Fixes

• lambda: disable aws-lambda:useCdkManagedLogGroup feature flag when not set (#34613) (b4cab7f), closes #34612 #34612

---

Alpha modules (2.200.1-alpha.0)

v2.200.0

Features

• update L1 CloudFormation resource definitions (#34594) (1e37ee7)
• custom-resources: throw ValidationError instead of untyped Errors (#33392) (1dacaa3), closes #32569
• ec2: implement IPeer to PrefixList to be usable as a connection peer (#33617) (c277419), closes #33607
• iam: introduce OidcProviderNative construct utilizing the native CloudFormation resource (#28634) (d8e6c09), closes #21197
• iam: throw ValidationErrors instead of untyped errors (#34579) (bd5caba), closes #32569
• lambda: allow propagating function tags to loggroup (#34556) (f556fd1)
• lambda: throw ValidationErrors instead of untyped errors (#34577) (6ccdd81), closes #32569
• region-info: throw ValidationError instead of untyped Errors (#33384) (303daf2), closes #32569
• s3: add grantReplicationPermission for IAM Role permissions (#34138) (bfa6490), closes #34119
• secretsmanager: throw ValidationErrors instead of untyped errors (#34580) (4d591ef), closes #32569
• servicecatalog: throw ValidationErrors instead of untyped errors (#34581) (3895d76), closes #32569
• sns-subscriptions: support Amazon Data Firehose subscription (#33811) (632179c), closes #14391
• stepfunctions: add grant API for RedriveExecution (#34554) (e03939d), closes #33578

Bug Fixes

• ec2: validate throughput property on EC2 instance block devices (#34571) (b31580a), closes #34033
• elasticloadbalancingv2: fix incorrect max for minimumCapacityUnit (#34586) (8f19b26), closes #34582

---

Alpha modules (2.200.0-alpha.0)

Features

• msk: support Kafka 4.0 (#34501) (aa40e38)

v2.199.0

⚠ BREAKING CHANGES TO EXPERIMENTAL FEATURES

• cloudformation: Some L1 resources experienced breaking changes due to updated CloudFormation resources. Please check the notes for each specific module for more information.
• vpc-lattice: the name and resourceConfigurationType property in CfnResourceConfigurationProps has changed from optional to required. Also, the name, subnetIds and vpcIdentifier properties in CfnResourceGatewayProps have changed from optional to mandatory.

Features

• appconfig: deletion protection check for configuration profile (#34418) (ce88c76)
• cloudformation: update L1 CloudFormation resource definitions (#34555) (64662b2)
• ecs-patterns: add minHealthyPercent and maxHealthyPercent props to NetworkMultipleTargetGroupsFargateService (#34516) (a434aed), closes #34368
• eks: Addon support configurationValues (#34061) (b420033), closes #34001
• events-targets: enable opt-in to use an IAM role for SnsTopic target (#34259) (a3a0cf0)
• stepfunctions-tasks: bedrock createModelCustomizationJob integration (#31913) (0c653d3), closes #29042

Bug Fixes

• elasticloadbalancingv2: add validation on application listeners for certificates on HTTP protocol (#34233) (ca065bb)
• rds: fix incorrect import/export combination check in AuroraMysqlEngineVersion.of() (#33564) (9e41154), closes #33562 #33562

---

Alpha modules (2.199.0-alpha.0)

v2.198.0

Features

• update L1 CloudFormation resource definitions (#34528) (92ad68a)

Bug Fixes

• synthesis fails if tree.json exceeds 512MB (#34478) (ff2f4af)
• aws-ecs-patterns: add missing redirectHTTP dependency on default ALB listener (7b9a07b)
• ecs-patterns: add missing redirectHTTP dependency on main listener in ApplicationLoadBalancedFargateService (#34510) (8e4ca14), closes #34235 /github.com/aws/aws-cdk/blob/2bdc07e45f836a710bc049d43a2462806af1c75d/packages/aws-cdk-lib/aws-ecs-patterns/lib/base/application-load-balanced-service-base.ts#L508
• route53: avoid setting unnecessary properties for Recovery Control type Route53 health check (#34272) (6bc01c9), closes #34262
• ses-actions: condition should use SourceAccount (#34081) (f68b947), closes #29811 #30143 #29833 #30375

---

Alpha modules (2.198.0-alpha.0)

⚠ BREAKING CHANGES TO EXPERIMENTAL FEATURES

• amplify: A compute role is created when platform is Platform.WEB_COMPUTE or Platform.WEB_DYNAMIC.

Features

• amplify: add compute role support for Amplify app (#33962) (7490b92), closes #33882
• ec2: add i7i instance class (#34453) (3fe8ab4)

v2.197.0

Features

• update L1 CloudFormation resource definitions (#34497) (6b7cdcf)
• cloudwatch: anomaly detection alarms (#31232) (e2aa338), closes #10540 #10540
• custom-resource: update default node runtime to node22 in custom resources for commercial, china and gov regions (#34319) (eb5e688)

Bug Fixes

• core: platform is ignored during asset bundling (#33865) (91bec88), closes #30239
• lambda-nodejs: instantiating NodejsFunction without the entry property fails (#34498) (36ce84d)

---

Alpha modules (2.197.0-alpha.0)

v2.196.1

Bug Fixes

• lambda-nodejs: instantiating NodejsFunction without the entry property fails (#34498) (27e0f3a)

---

Alpha modules (2.196.1-alpha.0)