1.67.0 (2020-10-07)

⚠ BREAKING CHANGES TO EXPERIMENTAL FEATURES

• monodk-experiment: This package is now deprected in favor of monocdk. Note that monocdk is still experimental.

Features

• aws-ec2: KINESIS_FIREHOSE vpc endpoint (#10682) (08ae745), closes #10611
• cfnspec: cloudformation spec v18.6.0 (#10762) (6078cab)
• cloudfront-origins: customize origin access identity in s3origin (#10491) (dbb7e34), closes #9859
• core: pass environment variables to CustomResourceProvider (#10560) (320ec72), closes #9668
• efs: add support for backup policy (#10524) (41f6de2), closes #10414
• eks: Support cdk8s charts (#10562) (e51921d)
• rds: add clusterArn property to IServerlessCluster (#10741) (1559fe9), closes #10736
• readme: deprecate Gitter in favor of cdk.dev Slack (#10700) (c60764e)

Bug Fixes

• cli: 'stack already contains Metadata resource' warning (#10695) (e0b5508), closes #10625
• cli: deploying a transformed template without changes fails (#10689) (d345919), closes #10650
• cloudfront-origins: S3Origins with cross-stack buckets cause cyclic references (#10696) (0ec4588), closes #10399
• codepipeline-actions: correctly name the triggering Event in CodeCommitSourceAction (#10706) (ff3a692), closes #10665
• core: cannot override properties with . in the name (#10441) (063798b), closes #10109
• core: Stacks from 3rd-party libraries do not synthesize correctly (#10690) (7bb5cf4), closes #10671
• ec2: addExecuteFileCommand arguments cannot be omitted (#10692) (7178374), closes #10687
• ec2: InitCommand.shellCommand() renders an argv command instead (#10691) (de9d2f7), closes #10684
• ec2: memory optimised graviton2 instance type (#10615) (a72cfbd)
• elbv2: metric(Un)HealthyHostCount don't use TargetGroup dimension (#10697) (9444399), closes #5046
• glue: GetTableVersion permission not available for read (#10628) (b0c5699), closes #10577
• glue: incorrect s3 prefix used for grant* in Table (#10627) (4d20079), closes #10582
• pipelines: cannot use constructs in build environment (#10654) (bf2c629), closes #10535
• pipelines: pipeline doesn't restart if CLI version changes (#10727) (0297f31), closes #10659
• rds: secret for ServerlessCluster is not accessible programmatically (#10657) (028495e)
• redshift: Allow redshift cluster securityGroupName to be generated (#10742) (effed09), closes #10740
• stepfunctions: X-Ray policy does not match documentation (#10721) (8006459)

1.66.0 (2020-10-02)

Features

• cfnspec: cloudformation spec v18.4.0 (#10493) (fa50369)
• cfnspec: cloudformation spec v18.5.0 (#10636) (e99cf63)
• events-targets: option to provide an existing role to use with the StepFunctions State Machine target (#10551) (b96efd8), closes #8255

Bug Fixes

• codebuild: permissions for Project in VPC used incorrect AWS partition (#10637) (b207888), closes #10634
• codecommit: use region given in fromRepositoryArn when creating clone urls (#10639) (934553c), closes #10630
• core,cx-api: docker bundling fails during tests on macOS (#10620) (0331508), closes #10262

1.65.0 (2020-09-30)

⚠ BREAKING CHANGES TO EXPERIMENTAL FEATURES

• aws-appmesh: VirtualNode no longer has accessLog set to "/dev/stdout" by default

• cognito: refreshToken property is now removed from UserPoolClient. It will be included if any other authFlow is enabled.

• synthetics: the default runtime is now syn-nodejs-2.0

• eks: cluster.addChart renamed to cluster.addHelmChart

• eks: NodegroupOptions.launchTemplate renamed to NodegroupOptions.launchTemplateSpec

• eks: cluster.addAutoScalingGroup renamed to cluster.connectAutoScalingGroupCapacity

• eks: cluster.addNodegroup renamed to cluster.addNoedgroupCapacity

• eks: cluster.addCapacity renamed to cluster.addAutoScalingGroupCapacity

• eks: CapacityOptions renamed to AutoScalingGroupCapacityOptions. Resolves #10364

• rds: the default generated password exclude characters set for Instance, Cluster and DatabaseSecret is now " %+~`#$&*()|[]{}:;<>?!'/@\"\\"

• rds: the default generated password exclude characters for addSingleUserRotation() and addMultiUserRotation() in Cluster and Instance is now " %+~`#$&*()|[]{}:;<>?!'/@\"\\"

• rds: Instance.addSingleUserRotation() now takes options object as the first argument, instead of just Duration

• rds: Cluster.addSingleUserRotation() now takes options object as the first argument, instead of just Duration

• rds: SnapshotCredentials.fromGeneratedPassword() now takes an option object as the second argument, instead of just IKey

• rds: DatabaseInstanceProps and DatabaseInstanceFromSnapshotProps - masterUsername, masterUserPassword and masterUserPasswordEncryptionKey moved to credentials as a new Credentials class.

• rds: Login renamed to Credentials. Use Credentials.fromUsername to replace existing usage.

• rds: DatabaseClusterProps masterUser renamed to credentials.

Features

• aws-appmesh: adds access logging configuration to Virtual Nodes (#10490) (e96b5aa)
• aws-ecs-builder: RFC 219 - An extendable service class for AWS ECS (#10129) (d95af00)
• batch: Importing a JobDefinition from name using fromJobDefinitionName (#10448) (7ce91e8), closes #7172
• cognito: import existing user pool domain (#10550) (37e2c35), closes #9988
• core: add parseDomainName to Fn class (#10465) (799da48), closes #5433
• ec2: c6 graviton2 instance classes (#10558) (0d4d44f), closes #10372
• ecs-patterns: allow passthrough of security groups to service (#10501) (e349004), closes #8953
• eks: EKS is now in Developer Preview (#10518) (b2ce3aa)
• elasticsearch: L2 for ElasticsearchDomain (#8369) (33ce50f)
• lambda: kafka topic as an event source (#10445) (dac1e12)
• lambda-event-sources: dead letter queue and filter policy for sns event source (#10567) (d70808b)
• pipelines: allow disabling of KMS keys (#10396) (1f7311f), closes #10115 #10474
• pipelines: Allow specifying a VPC for pipelines.CdkPipeline, standardNpmSynth, and standardYarnSynth (#10453) (2e0824b), closes #9982
• rds: add support for update and backup properties to Cluster instances (#10324) (4a4c154), closes #9926 #10092
• rds: add the ability to exclude characters when generating passwords for Cluster, Instance, DatabaseSecret (3b88256), closes #4144
• rds: construct for Aurora Serverless Clusters (#10516) (0d7d07e), closes #929
• add configuration for GitHub CodeSpaces (#10470) (bf3cc21), closes #10447
• rds: support setting database master users from existing secrets (#10458) (c7c7851), closes #7927
• rds: the RDS Construct Library is now Generally Available (#10610) (ccfa73f)
• rds: the unversioned Cluster engine constants are no longer deprecated (#10605) (86e6455)
• s3: support replication and restore s3 notification event types (#10552) (ee0db39), closes #10498
• support the 'Description' resource attribute (#10522) (d68ce2f)
• stepfunctions-tasks: support for SageMaker APIs: CreateEndpoint, CreateEndpointConfig, CreateModel, and UpdateEndpoint (#10187) (84738ee)
• synthetics: syn-nodejs-2.0 runtime (#10574) (a3c41ae)

Bug Fixes

• appsync: multiple interface types generates invalid schema (#10481) (6f2d393), closes #10479
• cfn-include: Fn::GetAtt with a string argument fails to include (#10546) (6a24026)
• cli: listing same stack multiple times fails (#10554) (44c1f20), closes #9667
• cli: OS usernames cannot have Unicode characters (#10451) (635f0ed), closes #10401
• cloudfront: logging bucket uses regional domain name (#10570) (19dd454), closes #2554 #10512
• codebuild: encryptionKey cannot be disabled (#10474) (4aadaa7)
• codepipeline-actions: use token as CodeCommitSourceAction branch (#10463) (94bbabf), closes #10263
• cognito: authFlows require refreshToken in all scenarios (#10561) (c0a3cb4), closes #7625
• cognito: callback URLs are specified when OAuth is disabled for user pool clients (#10588) (fbd48b2), closes #10311
• core: bundling with staging disabled returns a relative path (#10507) (e9b5b8c), closes #9576 #10367
• core: properties set to false are not rendered in the template (#10539) (b42d4e9), closes #10455
• core: write Metadata resource in core framework (#10306) (fb39803)
• pipelines: stack tags (#10533) (97bfd10), closes #9260
• rds: allow creating Proxies for imported resources (#10488) (c502114), closes #9195
• rds: default username 'admin' doesn't work for PostgreSQL (#10597) (8a04014), closes #10458 #10579
• secretsmanager: cannot import secrets by ARN without suffix (#10609) (3a1d38e), closes #10604
• secretsmanager: cannot import secrets if ARN is a token (#10568) (350105a), closes #10309 #10520
• stepfunctions: JsonPath does not support path with array (#10553) (07d14ae), closes #9403
• stepfunctions: States.ALL doesn't appear last in Retry and Catch arrays (#10538) (a8d7282), closes #10530

1.64.1 (2020-09-25)

Bug Fixes

• eks: KubernetesPatch and FargateCluster creates a circular dependency and breaks deployment (#10536) (f0f8a63), closes #10528

1.64.0 (2020-09-22)

⚠ BREAKING CHANGES TO EXPERIMENTAL FEATURES

• codedeploy: the default policy for LambdaDeploymentGroup no longer contains sns:Publish on * permissions

• cfn-include: the construction property 'nestedStacks' of class 'CfnInclude' has been renamed to 'loadNestedStacks'

• rds: removed protected member subnetGroup from DatabaseCluster classes

• rds: Cluster now has deletionProtection enabled if its removal policy is RETAIN

• rds: Instance now has deletionProtection enabled by default only if its removal policy is RETAIN

• eks: Clusters previously running k8s version other than 1.15 and bottlerocket AMI(aws-k8s-1.15 variant) will trigger AMI and node replacement.

Features

• cfn-include: add 'loadNestedStack()' method (#10292) (9d6817f)
• cfn-include: the package cloudformation-include is now 'Developer Preview' (#10436) (d45a57c)
• cfnspec: cloudformation spec v18.3.0 (#10385) (dbdc7ff)
• cli: skip bundling for operations where stack is not needed (#9889) (28cee39), closes #9540
• codedeploy: change LambdaDeploymentGroup default managed policy to AWSCodeDeployRoleForLambdaLimited (#10276) (13e7bde)
• cognito: user pool client logout urls (#10301) (5111837)
• custom-resource: allow referencing resource id in updates/deletes (#10327) (a726dad), closes #10305
• ec2: generic ssm backed machine image (#10369) (1dbad6e)
• ec2: user-defined subnet selectors (#10112) (491113d)
• eks: bottlerocket versoin follows the cluster k8s versoin (#10189) (19638a6), closes #10188
• events-targets: supports to specify fargate platform version (#10223) (3dcd01e), closes #10186
• lambda-nodejs: custom bundling image (#10270) (a2174a4), closes #10194
• pipelines: support VPC property in ShellScriptAction (#10240) (08a3c55), closes #9982
• rds: add SQL Server version 15.00.4043.16.v1 (#10289) (a578ef8), closes #10273
• rds: S3 import and export for DatabaseInstances (#10370) (80a2ac9), closes #4419
• rds: support existing cluster subnet groups (#10391) (a1df511), closes #9991
• redshift: support existing cluster subnet groups (#10340) (5ad8cdb), closes #9241
• secretsmanager: import secrets by name (#10309) (a8e8ed3), closes #7444 #7949 #7994
• add support for the 'Version' resource attribute (#10376) (aac235a)
• stepfunctions: added new condition operators (#9920) (b8490f2)
• stepfunctions: support X-Ray tracing (#10371) (#10374) (ad011c0)
• stepfunctions-tasks: handle Lambda service exceptions (#10386) (edf75b6)

Bug Fixes

• bootstrap: no longer creates KMS master key by default (#10365) (bedd4c0), closes #10115
• bootstrapping: --cloudformation-execution-policies not checked (#10337) (ad9a705)
• cfn-include: allow referring to Conditions in Outputs and Rules (#10373) (4751f42)
• cfn-include: correctly handle the 'AWS::CloudFormation::CustomResource' resource type (#10415) (1a5a024)
• cli: --profile is ignored if AWS_ variables are set (#10362) (957a12e)
• cli: cdk synth fails if AWS_ credentials have expired (#10343) (406f665), closes #7849
• cli: stack outputs aren't sorted (#10328) (9f430fc)
• cloudwatch: LTE operator renders wrong symbol (#10418) (2543584), closes #8913
• codebuild: Project.addFileSystemLocation does not work without providing locations at construction (#10460) (994d3c3), closes #10442
• core: CfnParameter of Number type cannot be used as a string (#10422) (28adc88), closes #10228
• diff: deepEqual may miss difference other than DependsOn (#10394) (9bcaf75), closes #10322
• diff: allow strings to be passed for boolean properties (#10378) (673dd82)
• diff: handle YAML short-forms like '!GetAtt' in diff (#10381) (457e109), closes #6537
• dynamodb: cannot change serverSideEncryption from true to false (#8450) (7a266b5), closes #8286
• ec2: InitFile does not work on Windows (#10450) (84b9d5e), closes #10390
• eks: cannot import a cluster with cdk managed kubectlPrivateSubnets (#10459) (10d0a36)
• eks: circular dependencies when security groups from other stacks are used (#10339) (857acbb)
• lambda: unable to add permissions to imported lambda functions (#8828) (9bf8e13), closes #7588
• lambda-nodejs: local parcel not detected (#10268) (457fab8)
• pipelines: make CdkPipeline build stage optional (#10345) (e9ffa67), closes #10148
• rds: cannot use s3ImportBuckets or s3ExportBuckets with aurora postgres (#10132) (cb6fef8), closes #4419 #8201
• SSM Association 'parameters' property has incorrect type (#10316) (7b5c9d2), closes #3092
• rds: standardize removal policies and deletion protection (#10412) (75811c1)
• redshift: cluster defaultChild broken after adding subnet group (#10389) (746dfe2), closes #10340
• s3-notifications: lambda destination creates a circular dependency when bucket and lambda are in different stacks (#10426) (7222b5d)
• ecs: DockerVolumeConfiguration.labels changed from an array to a map. This was a long standing latent bug and in fact configuring labels in the old format would have resulted in the wrong behavior. (#10385)

1.63.0 (2020-09-12)

⚠ BREAKING CHANGES TO EXPERIMENTAL FEATURES

• appsync: force apiKeyConfig require a Expiration class instead of string

• appsync: Parameter apiKeyConfig takes Expiration class instead of string

• core: custom implementations of IStackSynthesizer must now implement synthesize() instead of synthesizeStackArtifacts().
• aws-batch: Changed type of ComputeResources.computeResourcesTags from Tag to map

Features

• appsync: add authorization config to the HttpDataSource (#10171) (b2cc277), closes #9971 #9934
• appsync: add support for subscriptions for code-first schema generation (#10078) (65db131), closes #9345
• appsync: implement directives for code-first approach (#9973) (088cd48), closes #9879
• appsync: support enumeration types for code-first approach (#10023) (30a5b80), closes #10023
• appsync: support union types for code-first approach (#10025) (28a9834)
• cfn-include: add support for Hooks (#10143) (4de68c0), closes #9713
• cfn-include: allow renaming the template elements logical IDs (#10169) (cf746a0), closes #9714
• chatbot: log retention support and metrics utility methods (#10137) (0f0d1e7), closes #10135
• cli: support credential_source in aws shared config file (#10272) (940a443)
• codebuild: add git submodule options of codebuild (#10283) (698e5ef), closes #10271
• eks: arm64 support (#9875) (ffb84c6), closes #9915
• eks: bump aws-node-termination-handler to 0.9.5 (#10278) (8cfc190), closes aws/aws-cdk#10277
• eks: managed nodegroup with custom AMI and launch template support (#9881) (5c294fb), closes #9873
• elasticloadbalancingv2: more health check validations to NLB target group (#3703) (#10205) (e3f3332)
• elasticloadbalancingv2: multiple security groups for ALBs (#10244) (1ebf362), closes #5138
• lambda-nodejs: improved project root detection (#10182) (cce83dc), closes #10174
• pipelines: adding IAM permissions to ShellScriptAction (#10149) (ec15485), closes #9600
• rds: database clusters from snapshots (#10130) (915eb4b), closes #4379
• rds: deprecate OracleSE and OracleSE1 engine versions (#10241) (562f891), closes #9249
• rds: metrics for clusters (#10162) (49f6034), closes #5212
• route53-patterns: support IPv6 in HttpsRedirect (#10203) (a1f6e1b)
• secrets-manager: exclude characters for password rotation applications (#10110) (1260d52), closes #4144

Bug Fixes

• appsync: strongly type expires prop in apiKeyConfig (#9122) (287f808), closes #8698
• aws-batch: computeResources tags are not configured properly (#10209) (40222ef), closes #7350
• cfn-include: correctly parse YAML strings in short-form GetAtt (#10197) (a388d70), closes #10177
• cfn-include: correctly substitute falsy parameter values (#10195) (8791f88), closes #10107
• cli: metadata not recorded for templates >50k (#10184) (dfd2baf)
• cli: simplify lib template (#10175) (fc3ec9b)
• cli: unable to set termination protection for pipeline stacks (#9938) (a00a4ee)
• cloudfront: comment for origin access identity is too long (#10266) (495aeb9), closes #10211
• codepipeline: cross-region support stack requires bootstrapping (#10217) (b5ff4d6), closes #10215
• core: DefaultSynthesizer breaks this.node.setContext() on Stack (#10246) (61865aa)
• core: Stacks render CloudFormation elements in nested Stages (#10156) (5f36f6b), closes #9792 #9669
• custom-resources: deleting custom resource fails when using two or more (#10012) (8d23f24)
• ec2: cfn-init user data hash not updated if file asset changes (#10216) (0d7ca63), closes #10206
• eks: restricted public access breaks cluster functionality (#10103) (a1b5bf6)
• kms: do not change the principal to root for imported resources in dependent Stacks (#10299) (54dfe83), closes #10166
• lambda-nodejs: permission denied, mkdir '/.parcel-cache' (#10181) (20f5535)
• pipelines: changing synth action doesn't restart pipeline (#10176) (14c8a98), closes #9458
• pipelines: check for an empty Stage object (#10153) (cec20c8), closes #9559
• rds: Make most DatabaseClusterAttributes properties optional (#10291) (0653e6b), closes #3587

1.62.0 (2020-09-03)

⚠ BREAKING CHANGES TO EXPERIMENTAL FEATURES

• eks: when importing EKS clusters using eks.Cluster.fromClusterAttributes, the clusterArn attribute is not supported anymore, and will always be derived from clusterName.
• eks: Only a single eks.Cluster is allowed per CloudFormation stack.
• eks: The securityGroups attribute of ClusterAttributes is now securityGroupIds.
• cli: --qualifier must be alphanumeric and not longer than 10 characters when bootstrapping using newStyleStackSynthesis.

Features

• appsync: support Input Types for code-first approach (#10024) (3f80ae6)
• appsync: support query & mutation generation for code-first approach (#9992) (1ed119e), closes #9308 #9310
• aws-chatbot: Support L2 construct for SlackChannelConfiguration of chatbot. (#9702) (05f5e62), closes #9679
• bootstrap: customizable bootstrap template (#9886) (2596ef7), closes #9256 #8724 #3684 #1528 #9681
• cli: control progress output style with --progress=bar|events (#9623) (56de5e1), closes #8696
• cloudfront: import existing CloudFrontWebDistributions (#10007) (ff33b54), closes #5607
• cloudfront: support includeBody for Lambda@Edge (#10008) (9ffb268), closes #7085
• ecs: bottlerocket support (#10097) (088abec), closes #10085
• eks: kubectl layer customization (#10090) (0aa7ada), closes #7992
• eks: support adding k8s resources to imported clusters (#9802) (4439481), closes #5383
• logs: specify log group's region for LogRetention (#9804) (0ccbc5d)
• pipelines: SimpleSynthAction takes array of build commands (#10152) (44fcb4e), closes #9357
• pipelines: add control over underlying CodePipeline (#10148) (41531b5), closes #9021
• rds: add support for joining instance to domain (#9943) (f2d77d1), closes #9869
• rds: custom security groups for OptionGroups (ea1072d), closes #9240
• rds: custom security groups for OptionGroups (#10011) (5738dc1), closes #9240
• rds: performance insights for DatabaseCluster instances (#10092) (9c1b0c1), closes #7957
• rds: rename DatabaseInstanceNewProps.vpcPlacement to vpcSubnets (#10093) (ec423ef), closes #9776
• elasticloadbalancingv2: convenience method for ALB redirects (#9913) (5bed08a)

Bug Fixes

• apigateway: burst and rate limits are set to unlimited when configured to 0 (#10088) (96f1772), closes #10071
• appsync: GraphQLApi.UserPoolConfig requires DefaultAction (#10031) (6114045), closes #10028
• aws-elasticloadbalancingv2: fix load balancer deletion protection to properly update when set to false (#9986) (a65dd19)
• aws-sns: enable topic encryption with cross account keys (#10056) (327b72a), closes #10055
• aws-stepfunctions-tasks: missing permission to get build status (#10081) (cbdd084), closes #8043
• aws-stepfunctions-tasks: SageMaker create training job has incorrect property name for AttributeNames (#10026) (ba51ea3), closes #10014
• cfn-include: allow Conditions to reference Mappings in their definitions (#10105) (aa2068f), closes #10099
• cfn-include: allow parameters to be replaced across nested stacks (#9842) (9ea8d5c), closes #9838
• cli: AssumeRole profiles require a [default] profile (#10032) (95c0332), closes #9937
• cli: bootstrapping qualifier length not validated (#10121) (e069263), closes #9255
• cli: Linux browser not supported for cdk docs (#9549) (663913f), closes #2847
• cli: re-bootstrapping loses previous configuration (#10120) (4e5829a), closes #10091
• cli: unable to upgrade new style bootstrap to version (#10030) (c5bb55c), closes #10016
• cloudfront: Distribution does not add edgelambda trust policy (#10006) (9098e29), closes #9998
• custom-resources: buffers returned by AwsCustomResource are unusable (#9977) (7f351ff), closes #9969 #10017
• eks: creating a ServiceAccount in a different stack than the Cluster creates circular dependency between the two stacks (#9701) (1e96ebc), closes 40aws-cdk/aws-eks/lib/service-account.ts#L81-L95 40aws-cdk/aws-eks/lib/cluster.ts#L914-L923 40aws-cdk/aws-eks/lib/cluster.ts#L907-L909
• eks: README.md grammar (#10072) (454cdc6)
• elbv2: add protocol to AddNetworkTargetsProps (#10054) (c7c00e7), closes aws/aws-cdk#10044
• elbv2: consider default protocol when validating redirectHTTP (#10100) (9e4c6d2)
• glue: tables not including classification (#9923) (61b45f3), closes #9902
• lamba: Add Java 8 Corretto Runtime support (77f9703)
• lambda: grantInvoke fails for imported IAM identities (#9957) (d748f44), closes #9883
• lambda-nodejs: cannot stat error with jsx/tsx handler (#9958) (25cfc18)
• lambda-python: allowPublicSubnet and filesystem not supported (#10022) (745922a), closes #10018 #10027
• redshift: single-node clusters fail with node count error (#9961) (2cd3ea2), closes #9856
• route53: value is too long error for TXT records (#9984) (fd4be21), closes #8244

1.61.1 (2020-08-28)

Bug Fixes

• cli: unable to upgrade new style bootstrap to version (#10030) (8d3e422), closes #10016

1.61.0 (2020-08-27)

Features

• appsync: implement resolvable fields for code-first schema (#9660) (9e3b798)
• appsync: separating schema from graphql api (#9903) (8d71fa1)
• cli: automatically determine region on EC2 instances (#9313) (1cf986d)
• core: facility to warn when deprecated APIs are used (#9585) (b1d0ac0)
• custom-resources: function name for AwsCustomResource (#9774) (6da6581), closes #9771
• eks: envelope encryption for secrets (#9438) (65fd3e6), closes #9140
• rds: deletion protection for RDS cluster (#9871) (ef98b9f), closes #6944
• rds: grantConnect for database instances (#9887) (e893828), closes #1558
• region-info: add information for af-south-1 and eu-south-1 regions (#9569) (9d76c26)
• s3: imported buckets can have an explicit region (#9936) (f0c76ac), closes #8280 #9556
• stepfunctions-tasks: add support for CodeBuild StartBuild API (#9757) (dae54ec), closes #8043

Bug Fixes

• appsync: add dependency between apikey and schema (#9737) (4448794), closes #8168 #9736 #8168
• bootstrap: add alias for the asset key (#9872) (952e686), closes #6719
• cfn-include: allow numbers to be passed to string properties (#9849) (4c8c6f1), closes #9784
• cfn-include: short form for Condition (#9865) (371e8da), closes #9785
• core: Access Denied using legacy synthesizer with new bootstrap (#9831) (960ef12)
• core: Duration incorrectly renders Days (#9935) (0ca09a7), closes #9906
• elasticloadbalancingv2: imported listener ignores conditions attribute (#9939) (1c9b733), closes #8385 #9262 #9320 #9643
• lambda: cannot use latest version in multiple cloudfront distributions (#9966) (71c60f2), closes #4459
• lambda: grantInvoke fails on second invocation (#9960) (0fc5899), closes #8553
• lambda-nodejs: incorrect working directory for local bundling (#9870) (a4185a0), closes #9632

1.60.0 (2020-08-19)

⚠ BREAKING CHANGES TO EXPERIMENTAL FEATURES

• cloudfront: Distribution: .domains must be specified if certificate is provided.
• appsync: appsync.addXxxDataSource name and description props are now optional and in an DataSourceOptions interface.

• appsync: the props name and description in addXxxDataSource have been moved into new props options of type DataSourceOptions
• appsync: DataSourceOptions.name defaults to id
• appsync: DataSourceOptions.description defaults to undefined

Features

• amplify: automatic branch deletion (#9663) (4ee37a4), closes #9650
• appsync: code-first schema allows for object type definition (#9417) (6f1782f), closes #9307
• appsync: import existing graphql api (#9254) (5732b8e), closes #6959
• aws-cloudwatch: log query widget visualisation types (#9694) (8debcf8), closes #9675
• cli: MFA support (#6510) (611c48d), closes #1248
• make imported resources account/region-aware (#8280) (d6278b3), closes #2807 #5740 #7012
• cfn-include: add support for retrieving Mapping objects from the template (#9777) (a038304), closes #9711
• cfn-include: add support for retrieving Rule objects from the template (#9783) (e4720bf), closes #9712
• cloudfront: Distribution - alternate domains (#9699) (97e44a7)
• codebuild: support images with WINDOWS_SERVER_2019_CONTAINER environment type (#9526) (d3813e7), closes #9484
• custom-resources: optional latest SDK installation for AwsCustomResource (#9515) (effdd3c), closes #9289 #9322
• ec2: CloudFormation init for files, packages, sources, users, & groups (#9664) (d6c44e8), closes #9065 #8788 #8788
• ecs: add EfsVolumeConfiguration to Volume (#8467) (85ff9fd)
• ecs: add support for automatic HTTPS redirect (#9341) (84a3ef6), closes #8488
• lambda-nodejs: local bundling (#9632) (276c322)
• pipelines: add PolicyStatements to CodeBuild project role (#9527) (c570d9c), closes aws/aws-cdk#9163
• rds: CloudWatch logs exports for DB clusters (#9772) (118e5c6), closes #7810
• rds: Validate log types for clusters (#9797) (85fdeb5), closes #9772 #9772 #9772

Bug Fixes

• apigateway: access log format does not allow tokens (#9769) (a7c5c75), closes #9687
• build: Prereq check - support paths with spaces. (9ca1d02), closes #9749
• cfn-include: handle numbers expressed as strings in templates (#9525) (e9a4102), closes #9524
• cli: "fancy" progress reporting not disabled on all CI systems (#9516) (97ef371), closes #8696 #8893
• cli: CLI does not use regional endpoints (#9835) (34450b0), closes #9223
• cli: stack monitor reads complete stack history every 5 seconds (#9795) (cace51a), closes #9470
• cli: SynthUtils is not used (#9836) (9f1007e)
• cloudformation-diff: DependsOn singleton arrays aren't equal to string values (#9814) (49cdb47)
• cloudfront: all origin access identities have identical names (#9829) (ca79188), closes #9580
• cloudfront: Distribution ignores webAclId (#9828) (366c781), closes #9635 #9824
• cloudfront: Update Suported Security Protocol enum and set TLS_V1_2_2019 as a default version (#9738) (f6c25ad), closes #9212
• codebuild: fails on using PR Events together with FILE_PATH filters in a FilterGroup (#9725) (fdaf6bc), closes #8867
• codepipeline: Service Catalog action generated incorrect file path (#9773) (286ff50), closes #9767
• eks: AMI changes in managed SSM store param causes rolling update of ASG (#9746) (44f7753), closes #7273
• elbv2: NLB Target Group does not inherit protocol (#9331) (#9651) (171ab59)
• lambda: compute platform missing for autocreated profiling group (#9716) (a8f4c9f)
• lambda-nodejs: cannot bundle when entry file is named index.ts (#9724) (bb90fbe), closes #9709
• lambda-nodejs: NodejsFunction construct incompatible with lambda@edge (#9562) (dfe2c5c), closes #9328 #9453
• lambda-python: install rsync if necessary (#9763) (6edb6e6), closes #9704 #9349 #9582