@aws-cdk/aws-signer - npm Package Versions

1.107.0 (2021-06-02)

⚠ BREAKING CHANGES TO EXPERIMENTAL FEATURES

• appmesh: the creation property clientPolicy in VirtualNode has been renamed to tlsClientPolicy, and its type changed to TlsClientPolicy
• appmesh: to create TlsClientPolicy, validation property must be defined.
• appmesh: the creation property tlsCertificate in VirtualNode has been renamed to tls, and its type changed to TlsListener
• appmesh: the tlsMode property has been removed from the options when creating a TlsCertificate, moved to the new TlsListener interface, and renamed mode

Features

• cfnspec: cloudformation spec v37.0.0 (#14873) (8bb4357)
• cloudfront: add L2 support for CloudFront functions (#14511) (40d2ff9)
• eks: support Kubernetes 1.20 (#14758) (1956ef6), closes #14756
• pipelines: allow switching to one CodeBuild action for same-typed assets (#13803) (ed72ad3)

Bug Fixes

• appmesh: introduce the TlsClientPolicy and TlsValidation concepts (#14782) (8263c78), closes #12733
• appmesh: TLS mode is set on the Certificate class (#14856) (061fd55)
• elasticsearch: 'r6gd' not marked as supported type for instance storage (#14894) (d07a49f), closes #14773
• lambda-nodejs: cannot bundle locally when consuming a node module with a NodejsFunction (#14914) (52da59c), closes #14739
• rds: Add exception throw when az is defined for multi-az db instance (#14837) (fd8445f), closes #10949

1.106.1 (2021-05-26)

Bug Fixes

• secretsmanager: revert "Automatically grant permissions to rotation Lambda (#14471)", fixes #14868

1.106.0 (2021-05-25)

Features

• ecs-service-extensions: allow taskRole to be passed in on creation of an ECS service (3e257a0)
• appmesh: add IAM grants for StreamAggregatedResources (#13596) (f4a2938), closes #11639
• cfnspec: cloudformation spec v36.0.0 (#14791) (3a9f56d)
• dynamodb: add ability to enable contributor insights on Table (#14742) (3c7a89d)
• lambda: support Principal conditions in Permission (#14674) (b78a1bb), closes #8116
• lambda-nodejs: pnpm support (#14772) (b02311c), closes #14757

Bug Fixes

• cognito: user pool - phoneNumberVerified attribute fails deployment (#14699) (cd2589f), closes #14175
• iam: permissions boundaries not added to custom resource roles (#14754) (f36feb5), closes #13310
• lambda: changing reserved concurrency fails lambda version deployment (#14586) (f47d5cb), closes #11537
• lambda-nodejs: esbuild detection with Yarn 2 in PnP mode (#14739) (5c84696)
• pipelines: self-update build fails with named pipeline stack (#14729) (eff9c75), closes #10782

1.105.0 (2021-05-19)

⚠ BREAKING CHANGES TO EXPERIMENTAL FEATURES

• lambda-nodejs: using banner and footer now requires esbuild >= 0.9.0

Features

• apigatewayv2: http api - lambda authorizer (#13181) (4da78f6), closes #10534
• custom-resources: restrict output of AwsCustomResource to list of paths (#14041) (773ca8c), closes #2825
• stepfunctions: Add support for ResultSelector (#14648) (50d486a), closes #9904

Bug Fixes

• cli: Updated typo user to uses (#14357) (7fe329c)
• core: cannot determine packaging when bundling that produces an archive is skipped (#14372) (163e812), closes #14369
• ecr: add validations for ECR repository names (#12613) (396dca9), closes #9877
• lambda: unable to access SingletonFunction vpc connections (#14533) (49d18ab), closes #6261
• lambda-nodejs: banner and footer values not escaped (#14743) (81aa612), closes #13576
• pipelines: self-mutating builds cannot be run in privileged mode (#14655) (73b9b4a), closes #11425
• pipelines: stackOutput generates names too long to be used in useOutputs (#14680) (d81e06d), closes #13552
• pipelines: synth fails if 'aws-cdk' is not in package.json (#14745) (0b8ee97), closes #14658

1.104.0 (2021-05-14)

⚠ BREAKING CHANGES TO EXPERIMENTAL FEATURES

• apigatewayv2: setting the authorizer of an API route to HttpNoneAuthorizer will now remove any existing authorizer on the route

Features

• appsync: elasticsearch data source for graphql api (#14651) (2337b5d), closes #6063
• cfnspec: cloudformation spec v35.2.0 (#14610) (799ce1a)
• cloudwatch: GraphWidget supports period and statistic (#14679) (b240f6e)
• cloudwatch: time range support for GraphWidget (#14659) (010a6b1), closes #4649
• ecs: add support for EC2 Capacity Providers (#14386) (114f7cc)
• secretsmanager: Automatically grant permissions to rotation Lambda (#14471) (85e00fa)

Bug Fixes

• apigatewayv2: authorizer is not removed when HttpNoneAuthorizer is used (#14424) (3698a91)
• ecs: Classes FargateService and Ec2Service have no defaultChild (#14691) (348e11e), closes #14665
• events-targets: circular dependency when adding a KMS-encrypted SQS queue (#14638) (3063818), closes #11158
• lambda: custom resource fails to connect to efs filesystem (#14431) (10a633c)
• lambda-event-sources: incorrect documented defaults for stream types (#14562) (0ea24e9), closes #13908
• lambda-nodejs: handler filename missing from error message (#14564) (256fd4c)

1.103.0 (2021-05-10)

⚠ BREAKING CHANGES TO EXPERIMENTAL FEATURES

• appmesh: HealthChecks require use of static factory methods
• apigatewayv2: The metricXXX methods are no longer available in the IApi interface. The existing ones are moved into IHttpApi and new ones will be added to IWebsocketApi.
• apigatewayv2: The metricXXX methods are no longer available in the IStage interface. The existing ones are moved into IHttpStage and new ones will be added to the IWebsocketStage.
• lambda-nodejs: the default runtime version for NodejsFunction is now always NODEJS_14_X (previously the version was derived from the local NodeJS runtime and could be either 12.x or 14.x).

Features

• appmesh: change HealthChecks to use protocol-specific union-like classes (#14432) (063ddc7)
• aws-ecs: Expose logdriver "mode" property (#13965) (28fce22), closes #13845
• cloudwatch: validate parameters for a metric dimensions (closes #3116) (#14365) (4a24d61)
• docdb: Support multiple security groups to DatabaseCluster (#13290) (1a97b66)
• elbv2: preserveClientIp for NetworkTargetGroup (#14589) (d676ffc)
• kinesis: Basic stream level metrics (#12556) (5f1b576), closes #12555
• kms: allow specifying key spec and key usage (#14478) (10ae1a9), closes #5639
• lambda-go: higher level construct for golang lambdas (#11842) (0948cc7)
• msk: Cluster L2 Construct (#9908) (ce119ba)

Bug Fixes

• apigatewayv2: incorrect metric names for client and server-side errors (#14541) (551182e), closes #14503
• assert matches more than the template on multiple CDK copies (#14544) (f8abdbf), closes #14468
• apigatewayv2-integrations: fix broken lambda websocket integration uri (#13820) (f0d5c25), closes #13679
• cfn-include: correctly parse Fn::Sub expressions containing serialized JSON (#14512) (fd6d6d0), closes #14095
• cli: 'cdk deploy *' should not deploy stacks in nested assemblies (#14542) (93a3549)
• cli: synth fails if there was an error when synthesizing the stack (#14613) (71c61e8)
• lambda-nodejs: non-deterministic runtime version (#14538) (527f662), closes #13893
• ssm: dynamic SSM parameter reference breaks with lists (#14527) (3d1baac), closes #14205 #14476

1.102.0 (2021-05-04)

Features

• cfnspec: cloudformation spec v35.0.0 (#14411) (49e49e7)
• cfnspec: cloudformation spec v35.1.0 (#14518) (bcdff3d)
• cli: directly deploy stacks in nested assemblies (#14379) (5a6fa7f)
• elasticsearch: Support version 7.10 (#14320) (f3a830c)
• rds: allow turning on IAM authentication for Clusters (#13958) (0e59708), closes #13722
• synthetics: update CloudWatch Synthetics NodeJS runtime (#14157) (3283225)

Bug Fixes

• aws-cloudwatch: fix for space in alarm name in alarms for compos… (#13963) (7cdd541)
• cli: 'cdk synth' not able to fail if stacks have errors (#14475) (963d1c7)
• CodeBuild: add resource only once per secret (#14510) (affaaad)
• neptune: use correct L1 of DBParameterGroup (#14447) (057f61f), closes #14446
• rds: instance identifiers and endpoints of a Cluster are blank (#14394) (9597d97), closes #14377
• s3: urlForObject does not consider explicit bucket region (#14315) (e11d537)

1.101.0 (2021-04-28)

⚠ BREAKING CHANGES TO EXPERIMENTAL FEATURES

• neptune: InstanceType changed from enum to enum-like static factory.

Features

• autoscaling: add getter/setter for instance termination protection (#14308) (d3bdcfd), closes #14283
• aws-autoscaling: add support for NewInstancesProtectedFromScaleIn (#14283) (da9828b)
• custom-resources: AwsSdkCall can assume Role for cross-account custom resources (#13916) (a0690b9)
• ec2: create NAT Gateways with fixed IPs (#14250) (24c992a), closes #11884 #4067
• events: API Gateway target (#13823) (ce789bf), closes #12708
• iam: add imported user to a group (#13698) (bf513bc)
• neptune: change InstanceType to class that is built from string (#14273) (fc618f9), closes #13923
• route53: add support for parentHostedZoneName for CrossAccountZoneDelegationRecord (#14097) (572ee40)

Bug Fixes

• aws-ecs-patterns, aws-elasticloadbalancingv2: Pass TargetGroup ProtocolVersion as parameters to higher level constructs (#14092) (a655819), closes #14091
• codebuild: Secret env variable from another account fails on Key decryption (#14226) (8214338), closes #14043
• codepipeline-actions: CodeCommit source action fails when it's cross-account (#14260) (1508e60), closes #12391 #14156
• ec2: r5ad instance-type has incorrect value (#14179) (c80e1cf)
• iam: unable to configure name of SAML Provider (#14296) (904202a), closes #14294
• pipelines: Use LinuxBuildImage.STANDARD_5_0 for Assets and UpdatePipeline stages (#14338) (f93d940)

1.100.0 (2021-04-20)

⚠ BREAKING CHANGES TO EXPERIMENTAL FEATURES

• appmesh: HTTP2 VirtualNodeListeners must be now created with Http2VirtualNodeListenerOptions
• appmesh: HTTP2 VirtualGatewayListeners must be now created with Http2VirtualGatewayListenerOptions
• codepipeline-actions: the Action ServiceCatalogDeployAction has been renamed to ServiceCatalogDeployActionBeta1
• codepipeline-actions: the type ServiceCatalogDeployActionProps has been renamed to ServiceCatalogDeployActionBeta1Props
• events-targets: The BatchJob integration now requires the arn and the Resource for the jobQueue and the jobDefinition
• lambda-event-sources: cluster was removed from ManagedKafkaEventSourceProps and replaced with clusterArn
• route53-targets: ApiGatewayv2Domain was replaced with ApiGatewayv2DomainProperties which accepts regionalDomainName and regionalHostedZoneId
• stepfunctions-tasks: CallApiGatewayHttpApiEndpoint API now requires the apiId and it's containing Stack
• stepfunctions-tasks: BatchSubmitJob now accept jobDefinitionArn, jobQueueArn and their respective Resource
• stepfunctions-tasks: RunBatchJob now accept jobDefinitionArn, jobQueueArn and their respective Resource

Features

• apigateway: integration timeout (#14154) (d02770e), closes #14123
• appmesh: add Connection Pools for VirtualNode and VirtualGateway (#13917) (8a949dc), closes #11647
• certificatemanager: allow tagging DnsValidatedCertificate (#13990) (8360feb), closes #12382 #12382
• codebuild: allow setting concurrent build limit (#14185) (3107d03)
• codepipeline: introduce the Action abstract class (#14009) (4b6a6cc)
• ecs: add support for elastic inference accelerators in ECS task defintions (#13950) (23986d7), closes #12460
• eks: Pass bootstrap.sh args to avoid DescribeCluster call and make nodes join the cluster faster (#12659) (f5616cc)
• secretsmanager: replicate secrets to multiple regions (#14266) (b3c288d), closes #14061

Bug Fixes

• codepipeline: incorrect determination of the Action's account when using an imported resource (#14224) (d88e915), closes #14165
• core: toJsonString() does not deal correctly with list tokens (#14138) (1a6d39f), closes #14088
• pipelines: incorrect BuildSpec in synth step if synthesized with --output (#14211) (0f5c74f), closes #13303
• rds: database instances cannot be to be referenced in a different region (#13865) (74c7fff), closes #13832

1.99.0 (2021-04-13)

Features

• elasticloadbalancing: rename 'sslCertificateId' property of LB listener to 'sslCertificateArn'; deprecate sslCertificateId property (#13766) (1a30272), closes #9303 #9303

Bug Fixes

• aws-cloudfront: distribution comment length not validated (#14020) (#14094) (54fddc6)
• aws-ecs-patterns: fixes #11123 allow for https listeners to use non Route 53 DNS if a certificate is provided (#14004) (e6c85e4)
• cfn-include: allow deploy-time values in Parameter substitutions in Fn::Sub expressions (#14068) (111d26a), closes #14047
• fsx: Weekday.SUNDAY incorrectly evaluates to 0 (should be 7) (#14081) (708f23e), closes #14080