v2.142.0

Features

• asg: support keypair functionality for asg (#29679) (f6b649d), closes #29237
• codepipeline: GitPullRequestFilter for pipeline trigger (#29128) (5ce1b64), closes #29126
• docdb: add copyTagsToSnapshot property to the DatabaseCluster Construct (#30120) (30f0db6), closes #30090
• docdb: support CA certificate for cluster instances (#28791) (e87f25e), closes #27138 #28356
• events-targets: add support for AppSync as an EventBridge rule target (#29584) (5be88a3), closes #29884
• servicecatalog: ProductStack memoryLimit prop (#30105) (4b6dc8c), closes #29862

Bug Fixes

• apigateway: set authorization scope when authorization type is Cognito (#30035) (38a2284)
• autoscaling: cooldown cannot be set with step scaling actions (#30150) (6810762), closes #29779
• cli: cdk bootstrap --help does not show some options (#30113) (8debd20)
• cli: handle attributes of AWS::KMS::Key when hotswapping (#30112) (a1dcaa6), closes #25418
• cli: template created during import should be written to assets folder (#29830) (a96cf55), closes #22928 #22530
• diff: properties from ChangeSet diff were ignored (#30093) (9c3f3f5), closes #29731
• ecs: require task pidMode for Linux-based Fargate tasks, not host (#30020) (3e9e0a8), closes #29995
• eks: in place updates for EKS security group and Subnets (#30114) (eb39d9e), closes #28584
• iam: fromUserArn returns incorrect principalAccount (#30023) (f9f3681), closes /github.com/aws/aws-cdk/issues/29999#issuecomment-2087672380
• s3: add bucket policy dependency to notification resource (#30053) (71986ff), closes #27600 #16811
• stepfunctions-tasks: documentation fix for retryOnServiceExceptions (#30077) (205163f)

---

Alpha modules (2.142.0-alpha.0)

Features

• pipes-targets: add step function target (#29987) (b0975e4), closes #29665 #29665
• redshift: multi AZ cluster (#29976) (a53517c)

v2.141.0

Features

• rds: implement setting parameter group name (#29965) (50331a1)
• support for IAM Identity Center in security diff (#30009) (0a3cb94), closes #29835
• update L1 CloudFormation resource definitions (#30074) (8e98078)

Bug Fixes

• ecr: incorrect format for rule pattern (#29243) (fff9cf6), closes #29225
• pipelines: pipeline asset role trust policy has account root principal (#30084) (3928eae)

---

Alpha modules (2.141.0-alpha.0)

v2.140.0

Features

• update L1 CloudFormation resource definitions (#30037) (bb7e4d8)
• api-gateway: deploy RestApi to existing stage (#29486) (f0835d9), closes #25582
• cloudfront: add autoPublish property to the Function (#30030) (5dd72b8), closes #30028
• codecommit: kmsKey for repository (#29988) (5f8e52e)
• ec2: add support for environment files and variables in systemd (#29629) (90f1aa9)
• efs: allow to specify az for one-zone (#30010) (cbf130e)
• allow to register an existing record created manually as an alias ARecord target (#29565) (4f8b7db), closes #23048
• update L1 CloudFormation resource definitions (#29997) (c949076), closes /docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ec2-launchtemplate.html#aws-resource-ec2 /docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ec2-launchtemplate.html#aws-resource-ec2
• ec2: ebs optimized instance (#29962) (767ac65)
• eks: add atomic flag for aws-eks Helm Chart (#29454) (666f24f), closes #22254
• events: fromApiDestinationAttributes import method (#29943) (db155e1), closes #29942
• kms: key rotation period (#29928) (a6a5219), closes #29927

Bug Fixes

• crossRegionReference: error message missing stack information (#29961) (4f1c94b), closes #29699 #29699
• custom-resources: fails to use latest SDK version (#29958) (247aa35), closes #29891
• stepfunctions: regex in DistributedMap label is incorrectly escaping characters (#29765) (7c4eb71)
• cdk diff prints upgrade bootstrap warning even when current version exceeds the recommended version (#29938) (28b0080), closes #28888

---

Alpha modules (2.140.0-alpha.0)

v2.139.1

Reverts

• fix(lambda): version.fromVersionArn creates invalid Version object (#30003) (ced7a46)

---

Alpha modules (2.139.1-alpha.0)

v2.139.0

Features

• appconfig: constrain environments to a single deployment at a time (#29500) (3dd834d), closes #29345
• ecs: support pidMode for FargateTaskDefinition (#29670) (ed75b16), closes #29619
• ecs: support adding docker labels after container construction (#29734) (8e215b3), closes #29728
• efs: replicating file systems (#29347) (a15dc93), closes #21455
• ses-actions: WorkMail rule action (#29854) (6fdc458)
• update L1 CloudFormation resource definitions (#29924) (27b7a45)

Bug Fixes

• CLI: diff --template crashes (#29896) (466f170), closes #29890
• CLI: bootstrap shows no hotswap changes when there are no changes (#29877) (2126ee5), closes #25736
• custom-resource-handler: auto-delete-[objects|images] breaks on cloudformation rollback (#29581) (69ea52f)
• custom-resources: cannot set logging for state machine generated in CompleteHandler (#28706) (99041b2), closes #27283 #28577 #28744 #27310 #28699 #28587
• eks: incorrect nodegroupName(under feature flag) (#29794) (8bb8c55)
• elasticloadbalancingv2: crossZoneEnabled does not support false for ALB (#29907) (f6c902e)
• events-targets: ApiGateway events target should accept IRestApi (#29397) (8e1fefd), closes #16423 /github.com/aws/aws-cdk/pull/16542#discussion_r713676896 /github.com/aws/aws-cdk/pull/16542#issuecomment-925051255
• s3-notifications: cdk destroy deletes external/existing s3 notification events (#29939) (7360a88)
• ses-actions: permissions too wide for S3 action (#29833) (2da544f), closes #29811 #29823 /docs.aws.amazon.com/ses/latest/dg/receiving-email-permissions.html#receiving-email-permissions-s3

---

Alpha modules (2.139.0-alpha.0)

v2.138.0

Features

• AppSync: addRdsDataSource support for DatabaseCluster (#29544) (1894f2d), closes #29302
• cognito: support provider details for UserPoolIdentityProviderSaml (#29588) (375f1a6), closes #29494 #29598
• custom-resources: add logging property to AwsSdkCall and create Logging class (#29648) (b049064)
• ec2: well-known port aliases (#29793) (f10494c)
• elasticloadbalancingv2: add removeSuffix param for ExternalApplicationListener.addAction() (#29746) (f4af330), closes #29496
• route53: DNSSEC zone signing (#28604) (213fffc)
• sns: add TracingConfig prop (#29783) (f14b60f), closes #29714
• stepfunctions-tasks: add httpinvoke step functions task (#28673) (178e481), closes #28278
• update L1 CloudFormation resource definitions (#29798) (7103fed), closes /docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ec2-launchtemplate.html#aws-resource-ec2 /docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ec2-launchtemplate.html#aws-resource-ec2 /docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-ec2-security-group.html#cfn-ec2 /docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-ec2-security-group.html#cfn-ec2

Bug Fixes

• ecs-patterns: integ test failed with certificate error (#29623) (5347369), closes /github.com/aws/aws-cdk/pull/29186#issuecomment-1959231406 /github.com/aws/aws-cdk/pull/29186#issuecomment-1959231406
• eks: add support of Helm charts located in ECR of AWS CN region (#29778) (0da25e5), closes #28460
• globalaccelerator: changing installLatestAwsSdk breaks Security Group reference (#29620) (ece7eb6), closes #23796 /github.com/aws/aws-cdk/blob/main/packages/aws-cdk-lib/aws-globalaccelerator/lib/_accelerator-security-group.ts#L32
• lambda: version.fromVersionArn creates invalid Version object (#29820) (8198884)
• spec2cdk: get tag gives null result in Java CDK (#29870) (5a918d1)
• stepfunctions: the catch field in CustomState is not rendered (#29654) (77e9fc6)

---

Alpha modules (2.138.0-alpha.0)

⚠ BREAKING CHANGES TO EXPERIMENTAL FEATURES

• cognito-identitypool-alpha: The argument of IdentityPoolProviderUrl.userPool() has been changed from url: string to userPool: UserPool, userPoolClient: UserPoolClient. If you want to specify custom identifier string, use IdentityPoolProviderUrl.custom() instead.

Bug Fixes

• cognito-identitypool-alpha: inconvenient IdentityPoolProviderUrl.userPool() (#29025) (90a7734)

v2.137.0

Features

• assertions: add stack tagging assertions (#29247) (72f189d), closes #27620
• cloudfront: adding support for inline KeyValueStore sources (#29419) (5675010), closes #29204
• ec2: NatInstanceProviderV2 improvements (#29729) (4eb02a4), closes #29720
• elasticloadbalancingv2: application load balancer attributes (#29586) (067c4a5), closes #29585

Bug Fixes

• appsync: source api association does not depend on schema (#29455) (92a160b), closes #29044
• s3-deployment: BucketDeployment fails when bootstrap stack's StagingBucket is encrypted with customer managed KMS key (#29540) (0b429fb), closes #25100 #25100 #25100
• sns: contentBasedDeduplication is always false for imported topic (#29542) (4a9e683), closes #29532

---

Alpha modules (2.137.0-alpha.0)

Bug Fixes

• integ-tests: httpApiCall.expect with resolved URL (#29705) (49b4aa1), closes #29700 #29701

v2.136.1

Reverts

• chore(ec2): update WindowsVersions enum (#29737) (0e9d5ca), closes #29736

---

Alpha modules (2.136.1-alpha.0)

v2.136.0

Features

• rds: specify PreferredMaintenanceWindow in reader or writer props (#29686) (615ee2d), closes #29687
• stepfunction: add enableExecuteCommand to sfn ECSRunTask (#29638) (d5b8594), closes #29637

Bug Fixes

• cli: diff with changeset fails if deploy role cannot be assumed (#29718) (21dba21), closes #29650
• cloudwatch-actions: LambdaAction fails if added to multiple action types (#29515) (a12887b), closes #29514
• iam: grantAssumeRole silently fails with service and account principals (#29452) (36fd79d), closes #24507
• pipelines: codeStar connection accepts nested repository (#29631) (10357c0), closes #27504
• s3-assets: throw if path property is empty (#29425) (2814011), closes #29410

---

Alpha modules (2.136.0-alpha.0)

v2.135.0

Features

• lambda: adding support for Ruby3.3 lambda runtime (#29680) (e63c777)
• update L1 CloudFormation resource definitions (#29677) (99e9589), closes /docs.aws.amazon.com/AmazonRDS/latest/AuroraUserGuide/aurora-serverless-v2.requirements.html#aurora-serverless-v2 /docs.aws.amazon.com/AmazonRDS/latest/AuroraUserGuide/aurora-serverless-v2.requirements.html#aurora-serverless-v2
• route53: allow specifying an STS region when creating a cross-account zone delegation (#29466) (fe4bc1d)
• sns: add signature version prop (#29543) (dffedca), closes #29539

Bug Fixes

• cli: cdk watch for Lambdas with Advanced Logging Controls do not stream logs to the terminal (#29451) (4dbf5c8), closes #29448 /github.com/aws/aws-cdk/blob/main/packages/aws-cdk/lib/api/logs/find-cloudwatch-logs.ts#L114
• cli: ecs hotswap deployment waits correctly for success or failure (#28448) (5c30255)
• ec2: global vpc endpoint support (#29563) (df48fd7), closes #29560 10.0.0.2#53 10.0.0.2#53
• eks: missing support for "InstanceTypes" attribute assignment for AL2023 AMIs (#29505) (e77ce26), closes #29335
• events-targets: hardcoded AWS partition in ECS task resource ARN (#29633) (69cff2e), closes #29610
• route53: allow records with a weight of 0 (#29595) (cc7e95b), closes #29556
• add validation for ALB access log bucket when KMS key is provided (#29382) (2cc2449), closes #22031

---

Alpha modules (2.135.0-alpha.0)