@aws-cdk/aws-signer - npm Package Versions

1.98.0 (2021-04-12)

Features

• codepipeline-actions: introduce the CodeStarConnectionsSourceAction (#13781) (8782e67), closes #10632
• efs: graduate to stable 🚀 (#14033) (3c03d87)
• elasticloadbalancingv2: add grpc code matcher for alb (#13948) (a37f178), closes #13570 #13947
• region-info: graduate to stable 🚀 (#14013) (0d2755b)
• route-53: add ability to create NS Records (#13895) (02c7c1d), closes #13816

Bug Fixes

• apigateway: cannot remove first api key from usage plan (#13817) (036d869), closes #11876
• cloudfront: cannot use same EdgeFunction in multiple stacks (#13790) (8e2325c)
• lambda-nodejs: esbuild define parameters are incorrectly encoded (#14065) (5378a77), closes #13842
• rds: deploy fails with "SubnetGroup not found" (#13986) (ad326da), closes #13976
• route53: cannot set TTL to 0 (#14060) (ecc9bf3), closes #14039
• s3: SSL enforcement doesn't apply on top level bucket requests (#13961) (d0e831a), closes #13760
• stepfunctions: state machine name validation fails when tokens are used. (#13970) (58de0de), closes #13946 #13912

1.97.0 (2021-04-06)

⚠ BREAKING CHANGES TO EXPERIMENTAL FEATURES

• elasticsearch: vpcOptions was removed. Use vpc, vpcSubnets and securityGroups instead.

Features

• appmesh: Implement Outlier Detection for Virtual Nodes (#13952) (965f130)
• cx-api: graduate to stable 🚀 (#13859) (d99e13d)
• eks: Support secretsEncryptionKey in FargateCluster (#13866) (56c6f98)
• eks: Support bootstrap.sh --dns-cluster-ip arg (#13890) (56cd863)
• elasticsearch: graduate to stable 🚀 (#13900) (767cd31)
• s3-deployment: graduate to stable 🚀 (#13906) (567d64d)
• ses: graduate to stable 🚀 (#13913) (4f9a715)
• ses-actions: graduate to stable 🚀 (#13864) (24f8307)

Bug Fixes

• aws-rds: ServerlessCluster.clusterArn is not correct when clusterIdentifier includes upper cases string. (#13710) (a8f5b6c), closes #12795
• cli: broken java init template (#13988) (c6ca2ab), closes #13964
• cloudfront: Cache Policy headers enforce soft limit of 10 (#13904) (8a66244), closes #13425 #13903
• codepipeline-actions: EcrSourceAction triggers on a push to every tag (#13822) (c5a2add), closes #13818

1.96.0 (2021-04-01)

⚠ BREAKING CHANGES TO EXPERIMENTAL FEATURES

• globalaccelerator: automatic naming algorithm has been changed: if you have existing Accelerators you will need to pass an explicit name to prevent them from being replaced. All endpoints are now added by calling addEndpoint() with a target-specific class that can be found in @aws-cdk/aws-globalaccelerator-endpoints. The generated Security Group is now looked up by calling endpointGroup.connectionsPeer().
• docdb: DatabaseClusterProps.instanceProps was hoisted and all its properties are now available one level up directly in DatabaseClusterProps.
• docdb: DatabaseInstanceProps.instanceClass renamed to DatabaseInstanceProps.instanceType.
• core: The type of the image property in BundlingOptions is changed from BundlingDockerImage to DockerImage.
• core: The return type of the DockerImage.fromBuild() API is changed from BundlingDockerImage to DockerImage.

Features

• autoscaling-common: graduate to stable 🚀 (#13862) (2d623d0)
• chatbot: graduate to stable 🚀 (#13863) (2384cdd)
• cli: app init template for golang (#13840) (41fd42b), closes aws/jsii#2678
• cloudformation-diff: graduate to stable 🚀 (#13857) (294f546)
• docdb: graduate to stable 🚀 (#13875) (169c2fc)
• ec2: allow disabling inline security group rules (#13613) (793230c)
• elasticloadbalancingv2: graduate to stable 🚀 (#13861) (08fa5ed)
• fsx: graduate to stable 🚀 (#13860) (b2322aa)
• globalaccelerator: graduate to stable 🚀 (#13843) (8571008)
• lambda: switch bundling images from DockerHub to ECR public gallery (#13473) (e2e008b), closes #11296
• lambda-event-sources: support for batching window to sqs event source (#13406) (6743e3b), closes #11722 #11724 #13770
• lambda-event-sources: tumbling window (#13412) (e9f2773), closes #13411
• lambda-nodejs: graduate to stable 🚀 (#13844) (37a5502)

Bug Fixes

• aws-ecs: broken splunk-logging tag-option in fargate platform version 1.4 (#13882) (e9d9299), closes #13881
• cloudfront: auto-generated cache policy name might conflict cross-region (#13737) (4f067cb), closes #13629
• cloudfront: Origin Request Policy headers enforce soft limit of 10 (#13907) (9b0a6cf), closes #13410 #13903
• codebuild: allow passing the ARN of the Secret in environment variables (#13706) (6f6e079), closes #12703
• codebuild: take the account & region of an imported Project from its ARN (#13708) (fb65123), closes #13694
• codedeploy: script installing CodeDeploy agent fails (#13758) (25e8d04), closes #13755
• cognito: imported userpool not retaining environment from arn (#13715) (aa9fd9c), closes #13691
• core: BundlingDockerImage.fromAsset() does not return a BundlingDockerImage (#13846) (7176a5d)
• dynamodb: table with replicas fails to deploy with "Unresolved resource dependencies" error (#13889) (5c99d0d)
• iam: Role import doesn't fail when forgetting the region in the ARN (#13821) (560a853), closes #13812
• rds: fail with a descriptive error if Cluster's instance count is a deploy-time value (#13765) (dd22e8f), closes #13558
• yaml-cfn: do not deserialize year-month-date as strings (#13745) (ffea818), closes #13709

1.95.2 (2021-04-01)

• Upgrade a downstream dependency(pac-resolver) of the aws-cdk (the CDK CLI), to mitigate CVE-2021-28918 (13914) (794c951)

1.95.1 (2021-03-25)

Bug Fixes

• codebuild: module fails to load with error "Cannot use import statement outside a module" (b1ffd33), closes #13699 #13699

1.95.0 (2021-03-25)

⚠ BREAKING CHANGES TO EXPERIMENTAL FEATURES

• lambda-nodejs: The type of image property in the Bundling class is changed from BundlingDockerImage to DockerImage.
• lambda-nodejs: The type of dockerImage property in BundlingOptions is changed from BundlingDockerImage to DockerImage.
• apigatewayv2: The type of allowMethods property under corsPreflight section is changed from HttpMethod to CorsHttpMethod.
• lambda-nodejs: the default runtime of a NodejsFunction is now Node.js 14.x if the environment from which it is deployed uses Node.js >= 14 and Node.js 12.x otherwise.

Features

• acmpca: make the ACM PCA module Generally Available (stable) (#13778) (7ca79ff)
• apigatewayv2: http api - default authorizer options (#13172) (53d9661)
• cfnspec: cloudformation spec v31.0.0 (#13633) (9b1c786)
• cfnspec: cloudformation spec v31.1.0 (#13763) (41a2b2e)
• codepipeline-actions: Add detectChanges option to BitBucketSourceAction (#13656) (f2436bf)
• ec2: client vpn endpoint (#12234) (4fde59a), closes #4206
• events: retry-policy support (#13660) (7966f8d), closes #13659
• init-templates: app template comes with hint comments for 'env' (#13696) (b940710), closes #12321
• lambda-event-sources: msk and self-managed kafka event sources (#12507) (73209e1), closes #12099
• rds: make rds secret name configurable (#13626) (62a91b7), closes #8984
• sns: enable passing PolicyDocument to TopicPolicy (#10559) (0d9c300), closes #7934

Bug Fixes

• apigatewayv2: error while configuring ANY as an allowed method in CORS (#13313) (34bb338), closes #13280 #13643

• aws-ecs: drain hook lambda allows tasks to stop gracefully (#13559) (3e1148e), closes #13506

• codebuild: Fixed build spec file format to return yaml (#13445) (fab93c6)

• codedeploy: Use aws-cli instead of awscli for yum (#13655) (449ce12)

• codepipeline-actions: BitBucketAction fails with S3 "Access denied" error (#13637) (77ce45d), closes #13557

• core: toJsonString() cannot handle list intrinsics (#13544) (a5be042), closes #13465

• events,applicationautoscaling: specifying a schedule rate in seconds results in an error (#13689) (5d62331), closes #13566

• lambda: incorrect values for prop UntrustedArtifactOnDeployment (#13667) (0757686), closes #13586

• neptune: create correct IAM statement in grantConnect() (#13641) (2e7f046), closes #13640

• s3: Notifications fail to deploy due to incompatible node runtime (#13624) (aa32cf6)

• lambda-nodejs: prepare code to reduce merge conflicts when deprecated APIs are stripped (#13738) (ca391b5)

• lambda-nodejs: update default runtime (#13664) (ca42461)

1.94.1 (2021-03-16)

Bug Fixes

• s3: Notifications fail to deploy due to incompatible node runtime (#13624) (26bc3d4)

1.94.0 (2021-03-16)

⚠ BREAKING CHANGES TO EXPERIMENTAL FEATURES

• appmesh: Backend, backend default and Virtual Service client policies structures are being altered
• appmesh: you must use the backend default interface to define backend defaults in VirtualGateway. The property name also changed from backendsDefaultClientPolicy to backendDefaults
• appmesh: you must use the backend default interface to define backend defaults in VirtualNode, (the property name also changed from backendsDefaultClientPolicy to backendDefaults), and the Backend class to define a backend
• appmesh: you can no longer attach a client policy to a VirtualService

Features

• appmesh: add missing route match features (#13350) (b71efd9), closes #11645
• aws-elasticloadbalancingv2: add protocol version for ALB TargetGroups (#13570) (165a3d8), closes #12869
• ecs-patterns: Add ECS deployment circuit breaker support to higher-level constructs (#12719) (e80a98a), closes #12534 #12360

Bug Fixes

• appmesh: Move Client Policy from Virtual Service to backend structure (#12943) (d3f4284), closes #11996
• autoscaling: AutoScaling on percentile metrics doesn't work (#13366) (46114bb), closes #13144
• cloudwatch: cannot create Alarms from labeled metrics that start with a digit (#13560) (278029f), closes #13434
• use NodeJS 14 for all packaged custom resources (#13488) (20a2820), closes #13534 #13484
• ec2: Security Groups support all protocols (#13593) (8c6b3eb), closes #13403
• lambda: fromDockerBuild output is located under /asset (#13539) (77449f6), closes #13439
• region-info: ap-northeast-3 data not correctly registered (#13564) (64da84b), closes #13561

1.93.0 (2021-03-11)

Features

• amplify-domain: Added config for auto subdomain creation (#13342) (4c63f09)
• appmesh: add route retry policies (#13353) (66f7053), closes #11642
• cfnspec: cloudformation spec v30.1.0 (#13519) (7711981)
• codebuild: allow setting queued timeout (#13467) (e09250b), closes #11364
• dynamodb: custom timeout for replication operation (#13354) (6a5a4f2), closes #10249
• ec2: ESP and AH IPsec protocols for Security Groups (#13471) (f5a6647), closes #13403
• ec2: multipart user data (#11843) (ed94c5e), closes #8315
• ecr: add imageTagMutability prop (#10557) (c4dc3bc), closes #4640
• ecs: ability to access tag parameter value of TagParameterContainerImage (#13340) (e567a41), closes #13202
• ecs: allow users to provide a CloudMap service to associate with an ECS service (#13192) (a7d314c), closes #10057
• events: EventBus.grantPutEventsTo method for granular grants (#13429) (122a232), closes #11228
• events: dead-letter queue support for CodeBuild (#13448) (abfc0ea), closes #13447
• events: dead-letter queue support for StepFunctions (#13450) (0ebcb41), closes #13449
• events,applicationautoscaling: schedule can be a token (#13064) (b1449a1)
• iam: SAML identity provider (#13393) (faa0c06), closes #5320
• neptune: Support IAM authentication (#13462) (6c5b1f4), closes #13461
• region-info: added AppMesh ECR account for af-south-1 region (#12814) (b3fba43)
• stepfunctions-tasks: Support calling ApiGateway REST and HTTP APIs (#13033) (cc608d0), closes #11565 #11566 #11565

Bug Fixes

• cfn-include: allow boolean values for string-typed properties (#13508) (e5dab7c)
• ec2: fix typo's in WindowsImage constants (#13446) (781aa97)
• elasticloadbalancingv2: upgrade to v1.92.0 drops certificates on ALB if more than 2 certificates exist (#13490) (01b94f8), closes #13332 #13437
• events: imported EventBus does not correctly register source account (#13481) (57e5404), closes #13469
• iam: oidc-provider can't pull from hosts requiring SNI (#13397) (90dbfb5)
• iam: policy statement tries to validate tokens (#13493) (8d592ea), closes #13479
• init: Python init template's stack ID doesn't match other languages (#13480) (3f1c02d)
• stepfunctions: no validation on state machine name (#13387) (6c3d407), closes #13289

1.92.0 (2021-03-06)

• ecs-patterns: the desiredCount property stored on the above constructs will be optional, allowing them to be undefined. This is enabled through the @aws-cdk/aws-ecs-patterns:removeDefaultDesiredCount feature flag. We would recommend all CDK users to set the @aws-cdk/aws-ecs-patterns:removeDefaultDesiredCount flag to true for all of their existing applications.

⚠ BREAKING CHANGES TO EXPERIMENTAL FEATURES

• apigatewayv2: HttpApiMapping (and related interfaces for Attributed and Props) has been renamed to ApiMapping
• apigatewayv2: CommonStageOptions has been renamed to StageOptions
• apigatewayv2: HttpStage.fromStageName has been removed in favour of HttpStage.fromHttpStageAttributes
• apigatewayv2: DefaultDomainMappingOptions has been removed in favour of DomainMappingOptions
• apigatewayv2: HttpApiProps.defaultDomainMapping has been changed from DefaultDomainMappingOptions to DomainMappingOptions
• apigatewayv2: HttpApi.defaultStage has been changed from HttpStage to IStage
• apigatewayv2: IHttpApi.defaultStage has been removed
• aws-appsync: RdsDataSource now takes a ServerlessCluster instead of a DatabaseCluster
• aws-appsync: graphqlapi.addRdsDataSource now takes databaseName as its fourth argument

Features

• apigateway: integrate with aws services in a different region (#13251) (d942699), closes #7009
• apigatewayv2: websocket api (#13031) (fe1c839), closes #2872
• aws-appsync: add databaseName to rdsDataSource (#12575) (f92b65e), closes #12572
• aws-events: Event Bus target (#12926) (ea91aa3), closes #9473
• aws-route53-targets: add global accelerator target to route53 alias targets (#13407) (2672a55), closes #12839
• aws-s3: adds s3 bucket AWS FSBP option (#12804) (b9cdd52), closes #10969
• cfnspec: cloudformation spec v28.0.0 (#13101) (13c9859)
• cfnspec: cloudformation spec v29.0.0 (#13249) (6318e26)
• cfnspec: cloudformation spec v30.0.0 (#13365) (ae0185d)
• cli: Configurable --change-set-name CLI flag (#13024) (18184df), closes #11075 #12683
• cloudwatch: EC2 actions (#13281) (319cfcd), closes #13228
• cognito: user pools - sign in with apple (#13160) (b965589)
• core: description parameter in the CustomResourceProvider (#13275) (78831cf), closes #13277 #13276
• core: customize bundling output packaging (#13152) (6eca979)
• ec2: Add VPC endpoint for RDS (#12497) (fc87574), closes #12402
• ecs: add port mappings to containers with props (#13262) (f511639), closes #13261
• ecs: allow selection of container and port for SRV service discovery records (#12798) (a452bc3), closes #12796
• ecs-patterns: Add support for assignPublicIp for QueueProcessingFargateService (#13122) (3fb4600), closes #12815
• ecs-patterns: remove default desiredCount to align with cfn behaviour (under feature flag) (#13130) (a9caa45)
• elasticloadbalancingv2: Add support for application cookies (#13142) (23385dd)
• elbv2: allow control of ingress rules on redirect listener (#12768) (b7b441f), closes #12766
• events: archive events (#12060) (465cd9c), closes #11531
• events: dead letter queue for Lambda Targets (#11617) (1bb3650), closes #11612
• lambda: code signing config (#12656) (778ea27), closes #12216
• lambda: Code.fromDockerBuild (#13318) (ad01099), closes #13273
• lambda: Code.fromDockerBuildAsset (#12258) (09afed5), closes #11914
• neptune: high level constructs for db clusters and instances (#12763) (c366837), closes aws#12762
• stepfunctions-tasks: add EKS call to SFN-tasks (#12779) (296a10d)
• synthetics: Update CloudWatch Synthetics NodeJS runtimes (#12907) (6aac3b6), closes #12906

Bug Fixes

• appsync: revert to allow resolver creation from data source (#12973) (d35f032), closes #12635 #11522
• aws-appsync: use serverlessCluster on rdsDataSource (#13206) (45cf387), closes #12567
• cfn-diff: handle Fn::If inside policies and statements (#12975) (daf4e47), closes #12887
• cfn-include: allow dynamic mappings to be used in Fn::FindInMap (#13428) (623675d)
• cloudfront: cannot add two EdgeFunctions with same aliases (#13324) (1f35351), closes #13237
• cloudwatch: MathExpression period of <5 minutes is not respected (#13078) (d9ee914), closes #9156
• cloudwatch: metric label not rendered into Alarms (#13070) (cbcc712)
• codebuild: allow FILE_PATH webhook filter for BitBucket (#13186) (cbed348), closes #13175
• core: custom resource provider NODEJS_12 now looks like Lambda's NODEJS_12_X, add Node 14 (#13301) (3413b2f)
• core: ENOTDIR invalid cwd on "cdk deploy" (#13145) (cd7a3ed), closes #12258 #13076 #13131
• custom-resources: unable to use a resource attributes as dictionary keys in AwsCustomResource (#13074) (3cb3104), closes #13063
• dynamodb: replicas not created on table replacement (#13300) (c7c424f), closes #12332
• ec2: NAT provider's default outbound rules cannot be disabled (#12674) (664133a), closes #12673
• ec2: readme grammar (#13180) (fe4f056)
• ec2: Throw error on empty InitFile content (#13009) (#13119) (81a78a3)
• ecr: Allow referencing an EcrImage by digest instead of tag (#13299) (266a621), closes #5082
• ecr: Generate valid CloudFormation for imageScanOnPush (#13420) (278fba5), closes #13418
• ecs: services essential container exceptions thrown too soon (#13240) (c174f6c), closes #13239
• eks: KubectlProvider creates un-necessary security group (#13178) (c5e8b6d)
• UserPool, Volume, ElasticSearch, FSx are now RETAIN by default (#12920) (5a54741), closes #12563
• eks: Deployment fails for the first deployment in an account (#13103) (e042879), closes #9027
• incorrect peerDependency on "constructs" (#13255) (17244af)
• elasticloadbalancingv2: should allow more than 2 certificates (#13332) (d3155e9), closes #13150
• events: cannot trigger multiple Lambdas from the same Rule (#13260) (c8c1762), closes #13231
• events: imported ECS Task Definition cannot be used as target (#13293) (6f7cebd), closes #12811
• lambda-nodejs: 'must use "outdir"' error with spaces in paths (#13268) (09723f5), closes #13210
• lambda-nodejs: invalid sample in documentation (#12404) (520c263)
• lambda-nodejs: paths with spaces break esbuild (#13312) (f983fbb), closes #13311
• lambda-python: asset hash is non-deterministic (#12984) (37debc0), closes #12770 #12684
• stepfunctions: SageMakeUpdateEndpoint adds insufficient permissions (#13170) (6126e49), closes #11594