@aws-cdk/aws-signer - npm Package Versions

1.91.0 (2021-02-23)

⚠ BREAKING CHANGES TO EXPERIMENTAL FEATURES

• aws-appsync: RdsDataSource now takes a ServerlessCluster instead of a DatabaseCluster
• aws-appsync: graphqlapi.addRdsDataSource now takes databaseName as its fourth argument

Features

• aws-appsync: add databaseName to rdsDataSource (#12575) (f92b65e), closes #12572
• cfnspec: cloudformation spec v28.0.0 (#13101) (13c9859)
• ecs-patterns: Add support for assignPublicIp for QueueProcessingFargateService (#13122) (3fb4600), closes #12815
• stepfunctions-tasks: add EKS call to SFN-tasks (#12779) (296a10d)
• synthetics: Update CloudWatch Synthetics NodeJS runtimes (#12907) (6aac3b6), closes #12906

Bug Fixes

• UserPool, Volume, ElasticSearch, FSx are now RETAIN by default (#12920) (5a54741), closes #12563
• appsync: revert to allow resolver creation from data source (#12973) (d35f032), closes #12635 #11522
• aws-appsync: use serverlessCluster on rdsDataSource (#13206) (45cf387), closes #12567
• cfn-diff: handle Fn::If inside policies and statements (#12975) (daf4e47), closes #12887
• core: ENOTDIR invalid cwd on "cdk deploy" (#13145) (cd7a3ed), closes #12258 #13076 #13131
• eks: KubectlProvider creates un-necessary security group (#13178) (c5e8b6d)
• eks: Deployment fails for the first deployment in an account (#13103) (e042879), closes /github.com/aws/aws-cdk/issues/9027#issuecomment-780482124
• lambda-nodejs: invalid sample in documentation (#12404) (520c263)

1.90.1 (2021-02-19)

Bug Fixes

• core: ENOTDIR invalid cwd on "cdk deploy" (#13145) (a735b52), closes #12258 #13076 #13131

1.90.0 (2021-02-17)

Features

• apigatewayv2: http api - jwt and cognito user pool authorizers (#10972) (dd90e54), closes #10534
• aws-ecs-patterns: allow ScheduledTaskBase be created in a DISABLED state (#12837) (c625699), closes #12836
• aws-kinesisanalyticsv2: L2 construct for Flink applications (#12464) (94279f3), closes #12407
• cfnspec: cloudformation spec v27.0.0 (#12960) (7730ac8)
• cli: change set name is now a constant, and --no-execute will always produce one (even if empty) (#12683) (00cdd2a), closes #11075
• core: customize bundling output packaging (#13076) (367a055), closes #10776
• ecs: support Fargate and Fargate spot capacity providers (#12893) (843b480), closes #5850
• ecs-patterns: Add support for taskSubnets and securityGroups on QueueProcessingFagateService (#12604) (996e69d), closes #12603
• eks: support Kubernetes 1.19 (#13094) (72c22dc), closes #13093
• elasticsearch: add custom endpoint options (#12904) (f67ab86), closes #12261
• glue: Connection construct (#12444) (c64ec6b), closes #12442
• glue: SecurityConfiguration construct (#12450) (0a8e681), closes #12449
• redshift: add missing current generation RA3 NodeTypes (#12784) (f91a3f1), closes #12783
• stepfunctions: Implement IGrantable (#12830) (3b5ff05), closes #12829

Bug Fixes

• apigatewayv2: HttpApi and Route in different stacks creates cycles (#13010) (b5efb88), closes #13021
• aws-rds: correct Policy resource for Proxy::grantConnect() (#12416) (b3197db), closes #12415
• cfn-diff: correctly handle version strings like '0.0.0' (#13022) (34a921b), closes #13016
• cfn2ts: correctly choose between string and object without required properties in a union (#12954) (b7137c5), closes #12854
• cloudfront: bucket policy for Origin Access Identities is overly permissive (#13087) (cc28312), closes #3486 #13086
• cloudfront: EdgeFunction us-east-1 stack created in different account (#13055) (2f1fc95), closes #12789
• codecommit: take the region and account of an imported Repository from its ARN (#13066) (5f0ee88), closes #13025
• codedeploy: allow the install agent script's commands to exit with errors (#12782) (23d52a5), closes #12764
• codepipeline-actions: use BatchGetBuildBatches permission for batch builds (#13018) (09ba573)
• core: exportValue() does not work with resource names (#13052) (46043e0), closes #13002 #12918
• ec2: volume props validations are incorrect (#12821) (12cddff), closes #12816 #12816 #12074
• rds: proxy cannot connect to cluster/instance (#12953) (4b0abbc)
• tools: doc block links not clickable in VS Code (#12336) (4f17f92)

1.89.0 (2021-02-09)

Features

• cfnspec: cloudformation spec v26.0.0 (#12841) (f959b3a)
• cloudfront: add support for TrustedKeyGroups in Distribution and CloudFrontWebDistribution (#12847) (349a6e2), closes #11791
• core: configure bundling docker entrypoint (#12660) (6597a09), closes #11984
• ec2: can define Launch Templates (not use them yet) (#12385) (32c0de7)
• lambda: layer version removal policy (#12792) (5664480), closes #12718
• lambda: nodejs14.x runtime (#12861) (12c224a)

Bug Fixes

• core: append file extension to s3 asset key in new style synthesizer (#12765) (77b9d39), closes #12740
• core: incorrect GetParameter permissions in nonstandard partitions (#12813) (be7202f)
• ec2: MachineImage.genericLinux/Windows don't work in environment-agnostic stacks (#12546) (fbe7e89), closes #8759
• ec2: Subnet cidr missing for Vpc.from_lookup() (#12878) (9028269), closes #11821
• ec2: VpnConnection fails if ip is a Token (#12923) (953957a), closes #11633
• kms: cross-environment usage fails when trustAccountIdentities is set (#12925) (2b917ec), closes #12921 #12741
• lambda-python: cryptography >= 3.4 is not supported by older pip version (#12934) (b68acf8), closes /cryptography.io/en/3.4/changelog.html#v3-4

1.88.0 (2021-02-03)

⚠ BREAKING CHANGES TO EXPERIMENTAL FEATURES

• appmesh: the properties virtualRouter and virtualNode of VirtualServiceProps have been replaced with the union-like class VirtualServiceProvider
• appmesh: the method addVirtualService has been removed from IMesh
• cloudfront: experimental EdgeFunction stack names have changed from 'edge-lambda-stack-${region}' to 'edge-lambda-stack-${stackid}' to support multiple independent CloudFront distributions with EdgeFunctions.

Features

• apigateway: cognito user pool authorizer (#12786) (ff1e5b3), closes #5618
• apigateway: import an existing Resource (#12785) (8a1a9b8), closes #4432
• appmesh: change VirtualService provider to a union-like class (#11978) (dfc765a), closes #9490
• aws-route53: cross account DNS delegations (#12680) (126a693), closes #8776
• cloudfront: add PublicKey and KeyGroup L2 constructs (#12743) (59cb6d0)
• core: stack.exportValue() can be used to solve "deadly embrace" (#12778) (3b66088), closes #7602 #2036
• ecr: Public Gallery authorization token (#12775) (8434294)
• ecs-patterns: Add PlatformVersion option to ScheduledFargateTask props (#12676) (3cbf38b), closes #12623
• elbv2: support for 2020 SSL policy (#12710) (1dd3d05), closes #12595
• iam: Permissions Boundaries (#12777) (415eb86), closes aws/aws-cdk-rfcs#5 #3242
• lambda: inline code for Python 3.8 (#12788) (8d3aaba), closes #6503

Bug Fixes

• apigateway: stack update fails to replace api key (#12745) (ffe7e42), closes #12698
• cfn-include: AWS::CloudFormation resources fail in monocdk (#12758) (5060782), closes #11595
• cli, codepipeline: renamed bootstrap stack still not supported (#12771) (40b32bb), closes #12594 #12732
• cloudfront: use node addr for edgeStackId name (#12702) (c429bb7), closes #12323
• codedeploy: wrong syntax on Windows 'installAgent' flag (#12736) (238742e), closes #12734
• codepipeline: permission denied for Action-level environment variables (#12761) (99fd074), closes #12742
• ec2: ARM-backed bastion hosts try to run x86-based Amazon Linux AMI (#12280) (1a73d76), closes #12279
• efs: EFS fails to create when using a VPC with multiple subnets per availability zone (#12097) (889d673), closes #10170
• iam: cannot use the same Role for multiple Config Rules (#12724) (2f6521a), closes #12714
• lambda: codeguru profiler not set up for Node runtime (#12712) (59db763), closes #12624

1.87.1 (2021-01-28)

Bug Fixes

• apigateway: stack update fails to replace api key (38cbe62), closes #12698

1.87.0 (2021-01-27)

⚠ BREAKING CHANGES TO EXPERIMENTAL FEATURES

• s3-deployment: User metadata keys of bucket objects will change from x-amz-meta-x-amz-meta-x-amzn-meta-mykey to x-amz-meta-mykey.
• core: users of modern synthesis (DefaultSynthesizer, used by CDK Pipelines) must upgrade their bootstrap stacks. Run cdk bootstrap.

Features

• aws-codebuild: add enableBatchBuilds() to Project (#12531) (0568390)
• aws-codepipeline-actions: Add Full Clone support for CodeCommit (#12558) (d169688), closes #12236
• batch: Compute Resources placement group (#12203) (fe37174)
• eks: Graduate to stable (#12640) (b5ba7cd)
• stepfunctions-tasks: EcsRunTask now uses taskDefinition family instead of ARN (#12436) (abde96b), closes #12080
• stepfunctions-tasks: support databrew startJobRun task (#12532) (eacd2f7)

Bug Fixes

• apigatewayv2: multiple http integrations are created for each route (#12528) (855ce59), closes 40aws-cdk/aws-apigatewayv2/lib/http/route.ts#L128
• core: modern deployments fail if bootstrap stack is renamed (#12594) (e5c616f), closes #11952 #11420 #9053
• pipelines: assets broken in Pipelines synthesized from Windows (#12573) (5c3dce5), closes #12540
• pipelines: can't use CodePipeline variables in Synth environment variables (#12602) (736b260), closes #12061 #11178
• pipelines: unable to publish assets inside VPC (#12331) (a16f09c), closes #11815
• s3-deployment: User metadata keys have redundant triple x-amz prefix (#12414) (6716181), closes #8459
• secretsmanager: fromSecretPartialArn() has incorrect grant policies (#12665) (560915e), closes #12411

1.86.0 (2021-01-21)

Features

• cfnspec: cloudformation spec v24.0.0 (#12615) (98ebe96), closes #12474
• cognito: allow to set read and write attributes in Cognito UserPoolClient (#7607) (552e1e9), closes #7407
• ec2: Support for new EBS types (#12074) (6a2ce55), closes #12071
• elasticsearch: UltraWarm nodes (#12265) (3a9056d), closes #6462
• s3: Bucket keys (#12376) (d126fcc), closes #11828

Bug Fixes

• apigateway: cannot remove first api key from usage plan (#12505) (96cbe32), closes #11876
• aws-ecs: Invalid user data defined for windows autoscaling groups (#12585) (638b995), closes #12583
• ec2: Vpc.fromVpcAttributes cannot be used with EKS (#12569) (1cdc244), closes #12040 #12160
• iam: Groups are erroneously accepted as the Principal of a policy (#11479) (#12549) (c9b0859)
• synthetics: default execution role breaks in non aws partitions (#12096) (c01272c), closes #12094

1.85.0 (2021-01-14)

• s3-deployment: This version includes an important update, please upgrade to prevent deployment failure. This is in prepartion of Lambda deprecation of the request module in boto, more details are available in AWS blog. Note, users of versions < 1.81.0 will not be impacted by this deprecation, but are still encouraged to upgrade to the latest version.
• s3: The grantWrite() and grantReadWrite() methods no longer add the s3:PutObject* permissions that included s3:PutObjectAcl, which could be used to grant read/write object access to IAM principals in other accounts. This change is gated behind the @aws-cdk/aws-s3:grantWriteWithoutAcl feature flag, so make sure to set it to true in the context key of your cdk.json file when upgrading. If you still need the principal to have s3:PutObjectAcl permissions after upgrading, use the new grantPutAcl() method.

Features

• apigatewayv2: http api - disable execute api endpoint (#12426) (1724da7), closes #12241
• appmesh: add listener TLS certificates for VirtualNodes and VirtualGateways (#11863) (175a257), closes #10051
• cfnspec: CloudFormation resource specification update to v23.0.0 (#12490) (a7a2236)

Bug Fixes

• appsync: rds data source configured with cluster arn (#12255) (d0305f3), closes #11536
• aws-ecs: Support configuring Windows capacity for cluster ASGs (#12365) (6d9a0f1)
• eks: aws-node-termination-handler incorrectly deployed to on-demand instances as well (#12369) (05c0b5f), closes #12368
• s3: Bucket.grantWrite() no longer adds s3:PutObject* permission (#12391) (cd437cf)
• s3-deployment: stop using deprecated API's that will cause breakage post 01/31/21 (#12491) (f50f928)
• sns: require topic name for fifo topic #12386 (#12437) (37d8ccc)

1.84.0 (2021-01-12)

⚠ BREAKING CHANGES TO EXPERIMENTAL FEATURES

• apigatewayv2: subnets prop in VpcLink resource now takes SubnetSelection instead of ISubnet[]

Features

• aws-lambda-nodejs: add esbuild define bundling option (#12424) (581f6af), closes #12423
• cdk-assets: add external asset support (#12259) (05a9980)
• cli: --quiet does not print template in cdk synth (#12178) (74458a0), closes #11970
• codebuild: support Standard 5.0 (#12434) (422dc8e), closes #12433
• core: validate maximum amount of resources in a stack (#12193) (26121c8), closes #276
• eks: spot interruption handler can be disabled for self managed nodes (#12453) (6ac1f4f), closes #12451
• synthetics: Update Cloudwatch Synthetics canaries NodeJS runtimes (#11866) (4f6e377), closes #11870

Bug Fixes

• apigatewayv2: vpclink - explicit subnet specification still causes private subnets to be included (#12401) (336a58f), closes #12083
• cli: CLI doesn't read context from ~/.cdk.json (#12394) (2389a9b), closes #10823 #4802
• core: DefaultStackSynthesizer bucket prefix missing for template assets (#11855) (50a3d3a), closes #10710 #11327
• dynamodb: missing grantRead for ConditionCheckItem (#12313) (e157007)
• ec2: interface endpoint AZ lookup does not guard against broken situations (#12033) (80f0bfd)
• eks: nodegroup synthesis fails when configured with an AMI type that is not compatible to the default instance type (#12441) (5f6f0f9), closes #12389
• elasticsearch: domain fails due to log publishing keys on unsupported cluster versions (#11622) (e6bb96f)
• elbv2: can't import two application listeners into the same scope (#12373) (6534dcf), closes #12132
• logs: custom resource Lambda uses old NodeJS version (#12228) (29c4943)
• stepfunctions-tasks: EvaluateExpression does not support JSON paths with dash (#12248) (da1ed08), closes #12221