v2.205.0

Features

• kinesisfirehose: support custom time zone settings for S3 destination (#34738) (2bbe762), closes #34737
• update L1 CloudFormation resource definitions (#34979) (2e0e536)
• codebuild: cache sharing of CodeBuild projects (#34257) (21e2d1e), closes /docs.aws.amazon.com/codebuild/latest/userguide/caching-s3.html#caching-s3
• update L1 CloudFormation resource definitions (#34915) (748d03c)
• cloudwatch-dashboards: add support for queryLanguage property (#34547) (8a77828), closes #34482 /github.com/aws/aws-cdk/issues/34482#issuecomment-2887841701
• ec2: add c8gn instance class (#34866) (aaf442b)
• events: add arnForPolicy attribute for api destination (#34315) (e0ac9f8)
• rds: add fromLookup method for Amazon Aurora Database Cluster (#34849) (23ca6fc), closes #34848 #33258
• synthetics: add maxRetries prop to configure automatic retries on canary runs (#34541) (54d8a84), closes #34511
• synthetics: add support for tag replication for aws synthetics (#34830) (5ff59d9)
• core: report feature flag info into Cloud Assembly (#34919) (72733ea)

Bug Fixes

• codecov: update codecov-upload.yml with a git checkout step (#34929) (0a0adf7)
• lambda: handle token resolution issues in addToRolePolicy (#34904) (6cd1802), closes #34894
• pipelines: ensure assets with same hash but different destinations are published separately (#34790) (05afab3), closes #31070 #31070
• region-info: integ use standalone package (#34782) (6d1bcb3), closes #34692 /github.com/aws/aws-cdk/blob/1ae14635cbbc8ba0f2dab8cbeb72c4af0fddce7a/packages/aws-cdk-lib/package.json#L507-L511
• tags: excludeResourceTypes does not work for tags applied at stack level (under feature flag) (#31443) (4c7d9f4), closes #28017 #33945 #30055

⚠ CHANGES TO L1 RESOURCES

L1 resources are automatically generated from public CloudFormation Resource Schemas. They are build to closely reflect the real state of CloudFormation. Sometimes these updates can contain changes that are incompatible with previous types, but more accurately reflect reality. In this release we have changed:

• aws-cdk-lib.aws_ec2.CfnTrafficMirrorFilterRule: Id attribute was removed
• aws-cdk-lib.aws_kinesis.StreamConsumer: Id attribute was removed
• aws-cdk-lib.aws_neptune.DBInstance: Id attribute was removed

---

Alpha modules (2.205.0-alpha.0)

v2.204.0

Features

• apigatewayv2: add stage variables support for HTTP and WebSocket API (#34548) (965e055)
• cloudwatch: add id and visible properties for CloudWatch Metric (#34870) (879afd6), closes #19876
• report feature flags into Cloud Assembly (#34884) (f70e46c), closes #34798
• region-info: add support for region eusc-de (#34860)

Bug Fixes

• ecr-assets: incorrect handling of nested excludes in .dockerignore (#34810) (8328c79), closes #13636 #13636
• "Invalid Assembly Manifest" when used with CLI 2.1017.0 and 2.1018.0 (#34880) (741b0a7), closes aws/aws-cdk#34798

---

Alpha modules (2.204.0-alpha.0)

Features

• lambda-python-alpha: support uv (#33880) (ac6f136), closes #31238 #32413

v2.203.1

Bug Fixes

• "Invalid Assembly Manifest" when used with CLI 2.1017.0 and 2.1018.0 (#34880) (32ee050), closes aws/aws-cdk#34798

---

Alpha modules (2.203.1-alpha.0)

v2.203.0

⚠ BREAKING CHANGES TO EXPERIMENTAL FEATURES

• cloudformation: Some L1 resources experienced breaking changes due to updated CloudFormation resources. Please check the notes for each specific module for more information.

• aws-cdk-lib.aws_kendra.CfnDataSource.TemplateConfigurationProperty: template property here has changed from string to json

Features

• rds: instance engine lifecycle support (#34719) (bab7413), closes #34492
• report feature flag configuration into Cloud Assembly (#34798) (76af7dc)
• backup: add support for ScheduleExpressionTimezone (#34603) (8ceea43), closes #34532
• cloudformation: update L1 CloudFormation resource definitions (#34839) (4c75889)
• cloudwatch: add account id field for log query and metric widgets to support cross account visibility (#34793) (ac4d09d), closes #26105
• lambda: function log removal policy (#34723) (0388483), closes #34669
• pipelines: cdk-assets version is configurable (#34802) (a361c9c)
• update L1 CloudFormation resource definitions (#34792) (074cb8c)

Bug Fixes

• codecov: update codecov-upload.yml (#34845) (8055016), closes /github.com/aws/aws-cdk/blob/main/codecov.yml#L35
• codecov: update codecov-upload.yml action to upload report with correct path (#34814) (705e76b)
• stepfunctions-tasks: properly serialize CallAwsServiceCrossRegion Lambda responses (#34843) (a4b15df), closes #34768

Reverts

• "ci: add tool to sync with project board" (#34817) (1965014), closes aws/aws-cdk#34776

---

Alpha modules (2.203.0-alpha.0)

Features

• ec2: support for client route enforcement for client VPN endpoint (#34405) (063f4e7)

Bug Fixes

• ec2: don't use inferenceAccellerators in the constructors if not needed (#34618) (054c6c5), closes #33505 /github.com/aws/aws-cdk/issues/33505#issuecomment-2770818825 #34610

v2.202.0

Features

• lambda: support for schema registry for kafka (#34746) (c6ea664)
• update L1 CloudFormation resource definitions (#34730) (47a3ee3)
• cdk-pipeline: add url and sns topic for manual approval in cdk pipeline (re-create PR since original is auto-closed) (#34654) (39f1636), closes #32809 #12273 #34227
• eks: support eks with k8s 1.33 (#34602) (fc46733), closes #34520 /github.com/aws/aws-cdk/pull/33339#issuecomment-2643498256
• kms: implement .grant methods for Alias.fromAliasName (under feature flag) (#34237) (8e19dd6), closes #22697
• opensearch: add logic to only log specific field when less verbosity is needed for opensearch access policy custom resource (#34701) (856e3b1), closes #29093
• exclude lambda.Version and apigateway.Deployment from refactoring (#34710) (dd14a17)

Bug Fixes

• core: splitting tree.json produces a lot of files (#34718) (650134f), closes #34478 #34627
• pipelines: use display name for Asset actions when publishAssetsInParallel is false (#34049) (754ad50), closes #34042 #33844
• route53: warn when ttl is provided with alias target in RecordSet (#34526) (993d2fd)
• test-app: fix spelling error (#34762) (1885062)

---

Alpha modules (2.202.0-alpha.0)

Features

• amplify: add compute role support for Amplify branches (#34708) (817a21a)
• amplify-alpha: support custom response headers in monorepo structures (#31771) (aea1372), closes #31758

v2.201.0

Features

• opensearch: update default TLS security policy to TLS 1.2 for OpenSearch domains (#34660) (3cc2dc2), closes #34658
• update L1 CloudFormation resource definitions (#34659) (ef02724)
• update L1 CloudFormation resource definitions (#34687) (025c82e)
• appconfig: support customer managed key for hosted configuration (#34256) (484719e)
• codepipeline-actions: native Amazon EC2 deployment support (#33604) (9d39db7), closes #33584 /docs.aws.amazon.com/codepipeline/latest/userguide/action-reference-EC2Deploy.html#action-reference-EC2
• core: support adding additional cache key to cdk context values (#31586) (8848134), closes #26982
• core: throw typed Errors (#34587) (4e63b1a), closes #32569
• eks: added support for bootstrapSelfManagedAddons (#33597) (cedc1b0), closes #30792
• rds: DatabaseInstanceFromSnapshot support clusterSnapshotIdentifier (#33982) (48d30b6), closes #33889
• rds: support auto-pause configuration for Aurora Serverless v2 (#34173) (2c55c28), closes #32280 #32563
• stepfunctions: add support for Jsonata expressions to Map.ItemSelector (#34625) (dc30faa), closes #34538 /github.com/aws/aws-cdk/blob/ed08f3f0b8ecd79a2fa5e804acc73a9ff23eab80/packages/aws-cdk-lib/aws-stepfunctions/lib/states/map-base.ts#L60-L77
• synthetics: playwright 2.0 runtime (#34609) (1418204)
• synthetics: safe canary update (#34608) (89c5350)

Bug Fixes

• export errors to make it available in region-info/lib/fact.ts (#34691) (5c8f50c), closes #34690 #34690 #33384
• apigateway: correct JsonSchema.additionalItems property type (#33879) (464d521), closes #33878 #33878
• cloudfront: use wildcard when grant some cloudfront permission (#33802) (452a5e1), closes #33249
• lambda: disable aws-lambda:useCdkManagedLogGroup feature flag when not set (#34613) (d696688), closes #34612 #34612
• logs: exposed metric from the metric filter will now include the dimension map (#34648) (892b013), closes #34643
• opensearch: opensearchservice: existing integ test is failing (#34680) (be21625), closes 1#L59
• typo in jsdoc of noncurrentVersionTransitions property (#34620) (ed08f3f)

---

Alpha modules (2.201.0-alpha.0)

Features

• amplify: add skew protection feature for Amplify branches (#34656) (8808998)
• bedrock: adding bedrock l2 construct features (#34065) (a028927)
• ec2: add interface VPC endpoint for DSQL (#34487) (3e53c2c)
• ec2: support Firehose IDeliveryStream as flow log destination (#34596) (cdfe6e7), closes #33883 #33757
• ec2: volume initialization rate for EBS volume (#34570) (527d483)

Reverts

• ec2: support Firehose IDeliveryStream as flow log destination (#34665) (b77bd0e), closes aws/aws-cdk#34596

v2.200.2

Bug Fixes

• export errors to make it available in region-info/lib/fact.ts (#34691) (4a75032), closes #34690 #34690 #33384

---

Alpha modules (2.200.2-alpha.0)

v2.200.1

Bug Fixes

• lambda: disable aws-lambda:useCdkManagedLogGroup feature flag when not set (#34613) (b4cab7f), closes #34612 #34612

---

Alpha modules (2.200.1-alpha.0)

v2.200.0

Features

• update L1 CloudFormation resource definitions (#34594) (1e37ee7)
• custom-resources: throw ValidationError instead of untyped Errors (#33392) (1dacaa3), closes #32569
• ec2: implement IPeer to PrefixList to be usable as a connection peer (#33617) (c277419), closes #33607
• iam: introduce OidcProviderNative construct utilizing the native CloudFormation resource (#28634) (d8e6c09), closes #21197
• iam: throw ValidationErrors instead of untyped errors (#34579) (bd5caba), closes #32569
• lambda: allow propagating function tags to loggroup (#34556) (f556fd1)
• lambda: throw ValidationErrors instead of untyped errors (#34577) (6ccdd81), closes #32569
• region-info: throw ValidationError instead of untyped Errors (#33384) (303daf2), closes #32569
• s3: add grantReplicationPermission for IAM Role permissions (#34138) (bfa6490), closes #34119
• secretsmanager: throw ValidationErrors instead of untyped errors (#34580) (4d591ef), closes #32569
• servicecatalog: throw ValidationErrors instead of untyped errors (#34581) (3895d76), closes #32569
• sns-subscriptions: support Amazon Data Firehose subscription (#33811) (632179c), closes #14391
• stepfunctions: add grant API for RedriveExecution (#34554) (e03939d), closes #33578

Bug Fixes

• ec2: validate throughput property on EC2 instance block devices (#34571) (b31580a), closes #34033
• elasticloadbalancingv2: fix incorrect max for minimumCapacityUnit (#34586) (8f19b26), closes #34582

---

Alpha modules (2.200.0-alpha.0)

Features

• msk: support Kafka 4.0 (#34501) (aa40e38)

v2.199.0

⚠ BREAKING CHANGES TO EXPERIMENTAL FEATURES

• cloudformation: Some L1 resources experienced breaking changes due to updated CloudFormation resources. Please check the notes for each specific module for more information.
• vpc-lattice: the name and resourceConfigurationType property in CfnResourceConfigurationProps has changed from optional to required. Also, the name, subnetIds and vpcIdentifier properties in CfnResourceGatewayProps have changed from optional to mandatory.

Features

• appconfig: deletion protection check for configuration profile (#34418) (ce88c76)
• cloudformation: update L1 CloudFormation resource definitions (#34555) (64662b2)
• ecs-patterns: add minHealthyPercent and maxHealthyPercent props to NetworkMultipleTargetGroupsFargateService (#34516) (a434aed), closes #34368
• eks: Addon support configurationValues (#34061) (b420033), closes #34001
• events-targets: enable opt-in to use an IAM role for SnsTopic target (#34259) (a3a0cf0)
• stepfunctions-tasks: bedrock createModelCustomizationJob integration (#31913) (0c653d3), closes #29042

Bug Fixes

• elasticloadbalancingv2: add validation on application listeners for certificates on HTTP protocol (#34233) (ca065bb)
• rds: fix incorrect import/export combination check in AuroraMysqlEngineVersion.of() (#33564) (9e41154), closes #33562 #33562

---

Alpha modules (2.199.0-alpha.0)