1.55.0 (2020-07-28)

⚠ BREAKING CHANGES TO EXPERIMENTAL FEATURES

• lambda: the bundlingDockerImage prop of a Runtime now points to the AWS SAM build image (amazon/aws-sam-cli-build-image-<runtime>) instead of the LambCI build image (lambci/lambda:build-<runtime>)
• appsync: pipelineConfig is now an array of string instead of CfnResolver.PipelineConfigProperty for usability.

• appsync: pipelineConfig parameter takes in string []

Features

• appsync: grant APIs for managing permissions (#8993) (e6dca52), closes #6772 #7871 #7313
• aws-codepipeline: experimental support for ServiceCatalog deploy action (#9214) (950e51f)
• cfn-include: handle resources not in the CloudFormation schema (#9199) (d287525), closes #9197
• cfnspec: cloudformation spec v16.1.0 (#9074) (d1ca04f)
• cfnspec: cloudformation spec v16.1.0 (#9216) (d4b68d3)
• cloudfront: new aws-cloudfront-origins module, support for ALB/NLB origins (#9209) (27ee332), closes #9207
• cloudfront: support Lambda@Edge for behaviors (#9220) (d3e5533), closes #9108
• lambda: official lambda build docker images (#9211) (ae0cf2a), closes #9205
• lambda-python: introducing LambdaPython (#9182) (4cc2834)
• route53-patterns: the route53-patterns module is now stable (#9232) (add23bf)

Bug Fixes

• appsync: resolver unable to set pipelineConfig (#9093) (dac9bb3), closes #6923
• cloudfront: Set MinimumProtocolVersion and SslSupportMethod when specifying distribution certificate (#9200) (f99c327)
• cloudtrail: missing sns publish permissions (#9239) (b4339a1)
• codepipeline-actions: CodeDeployEcsDeployAction does not properly handle unnamed Artifacts (#9147) (ac612c6), closes #8971
• pipelines: Reduce template size by combining IAM roles and policies (#9243) (1ac6863), closes #9066 #9225 #9237
• rds: SQL Server instance engine uses incorrect major version (#9215) (eee8689), closes #9171
• route53-targets: Add China Partition Support for CloudFrontTarget (#9174) (52a966a)
• stepfunctions-tasks: EvaluateExpression error when key specified multiple times (#8858) (6506327), closes #8856

1.54.0 (2020-07-22)

Features

• autoscaling: enable group metrics collections (#7432) (9867555)
• cloudfront: Custom origins and more origin properties (#9137) (c807ff2), closes #9106
• cloudfront: support origin groups for failover (#8740) (345389f)

Bug Fixes

• apigatewayv2: Invalid mapping key value (#9141) (c88ad5f)
• core: bundling corrupts stdout (#9202) (fadad22), closes #9186
• kinesis: unable to use CfnParameter valueAsNumber to specify retentionPeriod (#9176) (3749c2a), closes #9038
• lambda-nodejs: permission denied on npm cache (#9167) (4327843)
• pipelines: prevent self-mutation on asset updates (#9183) (05fc934), closes #9080
• pipelines: standardYarnSynth cannot have custom install command (#9180) (fdfed40), closes #9162

1.53.0 (2020-07-20)

Features

• ec2: access a vpc's internet gateway (#7939) (cb5dad8), closes #5327
• lambda-nodejs: connection reuse with aws-sdk (#9083) (44c0400)

Bug Fixes

• cli: cli integ tests do not have a unique stack prefix (#9165) (968c460)

1.52.0 (2020-07-18)

⚠ BREAKING CHANGES TO EXPERIMENTAL FEATURES

• rds: the property 'version' has been changed from string to an engine-specific version class; use VersionClass.of() if you need to create a specific version of an engine from a string
• rds: the property ParameterGroupProps.family has been renamed to engine, and its type changed from string to IEngine
• rds: the property engineVersion in IClusterEngine changed from a string to EngineVersion
• rds: the property engineVersion in IInstanceEngine changed from a string to EngineVersion
• rds: the property parameterGroupFamily in IClusterEngine changed from required to optional
• rds: the property parameterGroupFamily in IInstanceEngine changed from required to optional
• rds: the class ClusterParameterGroup has been removed - use ParameterGroup instead
• rds: DatabaseProxyProps.secret => DatabaseProxyProps.secrets[]
• apigateway: defaultMethodOptions, defaultCorsPreflightOptions and defaultIntegration have been removed from SpecRestApiProps. These can be specifed directly in the OpenAPI spec or via addMethod() and addResource() APIs.
• glue: The default location of glue data will be the root of an s3 bucket, instead of /data
• rds: the class DatabaseClusterEngine has been replaced with the interface IClusterEngine in the type of DatabaseClusterProps.engine
• rds: the class DatabaseInstanceEngine has been replaced with the interface IInstanceEngine in the type of DatabaseInstanceSourceProps.engine
• rds: DatabaseClusterProps.engineVersion has been removed; instead, create an IClusterEngine with a specific version using the static factory methods in DatabaseClusterEngine
• rds: DatabaseInstanceSourceProps.engineVersion has been removed; instead, create an IInstanceEngine with a specific version using the static factory methods in DatabaseInstanceEngine
• rds: the property majorEngineVersion can no longer be passed when creating an OptionGroup; instead, create an IInstanceEngine with a specific version using the static factory methods in DatabaseInstanceEngine

Features

• aws-stepfunctions-tasks: allow lambda invocations to combine input and function results (#9022) (846a222), closes #8943
• certificatemanager: native CloudFormation DNS validated certificate (#8552) (337279f), closes #5831 #5835 #6081 #6516 #7150 #7941 #7995 #7996 #8282 #8659 #8783
• cfn-include: add support for nested stacks (#8980) (bf12456), closes #8978
• cloudfront: Initial CloudFront redesign (#8982) (d30fa9d)
• codepipeline: add support for a StepFunctions invoke action (#8931) (499776d)
• core: cloudformation resource metadata (#9063) (b0f8729), closes #8788
• core: Duration.plus for adding durations (a127048)
• custom-resources: custom resource provider log retention (#9024) (18c024c)
• glue: default data location for tables is the root of the bucket (#8999) (28949bd), closes #8472
• lambda: codeguru profiling groups (#8852) (8c01420)
• lambda-nodejs: support build args (#9035) (e27658e), closes #8117
• rds: Allow multiple secrets to be passed to an RDS Proxy (#9103) (2ab329f), closes #9098
• rds: introduce type-safe engine versions (#9016) (fab7e28), closes #6532
• rds: the RDS Construct Library is now in Developer Preview (#9119) (92e620c)
• rds: unify ParameterGroup and ClusterParameterGroup (#8959) (17b690b), closes #8932
• stepfunctions-tasks: assign boolean value in DynamoDB from state input (Json path) (#9088) (7b8ef5b), closes #9007

Bug Fixes

• appsync: erroneous api key created when additional authorization is not configured (#9057) (6f934e9), closes #9054
• cfn-include: fix issues in Conditions handling (#9142) (e8d0776)
• cli: diff against multiple stacks do not always fail if any have a diff (#7690) (85f4a83), closes #7492
• cli: unable to update stacks in UPDATE_ROLLBACK_COMPLETE (#8948) (72ec59b), closes #8779 /github.com/aws/aws-cdk/pull/8779#issuecomment-655258569 #8126 #5151
• core: fix Duration.toIsoString() for millseconds (#9042) (8559117)
• core: use any type for context (#9014) (375335e), closes #8865
• custom-resources: Fix typo in README (#9126) (1e16a7f), closes #9024
• ec2: Remove validation of availabilityZone from Volume (#9082) (8d470b2)
• eks: cluster creation fails due to missing ec2:DescribeVpcs permission (#9029) (4a714ee)
• lambda-event-sources: use of CfnParameter for maxBatchSize, retryAttempts & parallelizationFactor fails (#9064) (4470e89), closes #9044
• lambda-nodejs: parcel tries to install @babel/core (#9067) (8d4c635), closes #9032
• stepfunctions: Choice state does not allow state input as a condition (#8991) (db9d29b), closes #8990
• stepfunctions: Map state does not render JSON paths from state input (#9008) (767da12), closes #8992
• apigateway: remove default properties from SpecRestApi (#9099) (06842d6), closes #8347 /github.com/aws/aws-cdk/issues/8347#issuecomment-651900511 /github.com/aws/aws-cdk/issues/8347#issuecomment-652779763
• rds: change the way Engines are modeled (#8686) (63cc1b4), closes #2213 #2512 #4150 #5126 #7072

1.51.0 (2020-07-09)

Features

• cloudfront: Add connectionAttempts, connectionTimeout in origin configuration (#8573) (84b923f), closes #8572
• Developer Preview of CDK Pipelines (#8868) (d2609bd), closes aws/aws-cdk-rfcs#49

Bug Fixes

• appmesh: Update enums for appmesh (#8716) (64e3d88)
• cli: Python sample app template does not follow PEP8 (#8936) (0717919)
• codepipeline: set correct header assignment in S3 deployment cache control (#8864) (be1094b), closes #8774
• ec2: VpcEndpoint AZ lookup fails for AWS services (#8386) (54e5c36)
• iam: cannot import service role with a principal in its path (#8692) (55eb7d7), closes #8691

1.50.0 (2020-07-07)

⚠ BREAKING CHANGES TO EXPERIMENTAL FEATURES

• eks: version is now a mandatory property

Features

• apigatewayv2: http api - custom domain & stage mapping (#8027) (5e43348), closes #7847
• autoscaling: allow setting autoscaling group name (#8853) (38d8414)
• cfn-include: add support for retrieving Output objects from the template (#8821) (0b09bbb), closes #8820
• custom-resources: include handler log group in error messages (#8839) (8e055d4)
• eks: document how to add a manifest from url (#8802) (b5acfaa), closes #8340
• eks: support cluster version pinning (#8889) (a732d14), closes #7762
• lambda: efs filesystems (#8602) (8529387), closes #8595
• lambda-nodejs: allow jsx and tsx entry files (#8892) (4ba20fd)
• s3-deployment: prune - keep missing files on destination bucket (#8263) (57914c7), closes #953
• stepfunctions: stepfunctions and stepfunctions-tasks modules are now stable! (#8912) (ae2378c), closes #6489
• stepfunctions-tasks: task for invoking a Step Functions activity worker (#8840) (021533c)

Bug Fixes

• apigateway: Lambda integration for imported functions (#8870) (8420f96), closes #8869
• config: cannot scope a custom rule without configurationChanges on (#8738) (841060d)
• core: asset bundling fails with BuildKit (#8911) (c1d4e0f)
• eks: incorrect enableDockerBridge value when enabled (#8895) (ea0552a), closes #5786
• eks: kubectl resources fail before fargate profiles are created (#8859) (4fad9bc), closes #8854 #8574
• eks: missing nodegroup identity in aws-auth after awsAuth.addMasterRole (#8901) (a9c66f7), closes #7595
• lambda-nodejs: maximum call stack size exceeded with relative entry file path (#8907) (c585e18), closes #8902
• rds: proxy for db cluster fails with model validation error (#8896) (7d47cfb), closes #8885 #8476

1.49.1 (2020-07-02)

Bug Fixes

• apigateway: Lambda integration for imported functions (#8870) (c017f88), closes #8869

1.49.0 (2020-07-02)

Features

• core: improved docker bundling performance on mac os (#8766) (99c12f5), closes #8544
• eks: document how to define dependencies for resources and charts (#8780) (e38b692), closes #7592 #6806
• rds: database proxy (#8476) (e0e5e03), closes #8475

Bug Fixes

• apigateway: permission error in lambda integration when function name is modified (#8813) (f1b37ef), closes #5306
• codebuild: project didn't have permissions to retrieve secret of image with credentials (#8845) (4326f24)
• elasticloadbalancingv2: dualstack ALB missing default IPv6 ingress rule (#8798) (66f9634), closes #7043
• lambda-nodejs: parcel build cannot find target (#8838) (ce7a015), closes #8837

1.48.0 (2020-07-01)

⚠ BREAKING CHANGES TO EXPERIMENTAL FEATURES

• stepfunctions-tasks: containerName is not supported as an override anymore and has been replaced by containerDefinition
• stepfunctions-tasks: EvaluateExpression is now a construct representing a task state rather than an embedded property called task
• backup: existing vaults that use a generated name will be replaced but existing recovery points won't be lost. The default vault removal policy is RETAIN and if it was set to DESTROY the deployment will fail because vault with recovery points cannot be deleted.

Features

• autoscaling: bring your own security group (3698f47)
• aws-cloudwatch: add comparison operators (#8812) (7003a09), closes #8808
• cfn-include: add support for YAML templates (#8746) (293a937), closes #8745
• cfnspec: cloudformation spec v16.0.0 (#8807) (4ce27f4)
• cli: support multiple verbosity levels (#8749) (fa4196b)
• ec2: Volume construct (#8219) (7490dee)
• ec2: add 6xlarge InstanceSize (#8701) (4917c04)
• ec2: natGateways=0 disables private subnets (#8817) (7f432ff), closes #4814
• efs: Filesystem.addAccessPoint() (#8737) (127547a)
• lambda-nodejs: external and install modules (#8681) (401594e), closes #6323 #7912
• secretsmanager: add grantUpdate method (#8600) (4e72d1e), closes #8491
• stepfunctions: class for working with Json paths to retrieve state machine data and context (#8647) (67978a1)
• stepfunctions-tasks: evaluate expression as a task construct (#8555) (83fd2ae)
• stepfunctions-tasks: task construct to call RunJob on ECS (#8451) (13deb26), closes #8610

Bug Fixes

• apigateway: error defining lambda integration on imported RestApi (#8785) (05aaf42), closes #8679
• backup: correctly validate Vault name (#8689) (07b330c)
• backup: vault name may exceed 50 characters (#8653) (d09c121), closes #8627
• batch: Invalid spot fleet service role (#8325) (034bc35), closes #6706
• cli: post install warnings are not clearly visible when running cdk init (#8723) (2662db3), closes #8720
• cli: unable to use "legacy" bootstrap with --public-access-block-configuration=false (#8755) (88f8e1e), closes #8728
• cognito: cannot add multiple route53 targets to the same user pool domain (#8622) (32b54a5), closes #8603
• core: bundling directory access permission is too restrictive (#8767) (1842168), closes #8757
• eks: Helm chart timeout expects duration (#8773) (d1c2ef2), closes #8718
• elbv2: Add missing accounts to ELBv2 Log Delivery. (#8715) (8914899)
• rewrite: script ignores list of files (#8777) (bb514c1)
• route53-targets: A/AAAA Alias Record to ELB cannot resolve IPv6 addresses (#8747) (87e2651), closes #6271
• s3-notifications: broken permissions query in LambdaDestination (#8741) (10bd8e4), closes #8538

1.47.1 (2020-06-30)

Bug Fixes

• Don't publish cdk.out directories (#8803) (aa21858)