1.49.1 (2020-07-02)

Bug Fixes

• apigateway: Lambda integration for imported functions (#8870) (c017f88), closes #8869

1.49.0 (2020-07-02)

Features

• core: improved docker bundling performance on mac os (#8766) (99c12f5), closes #8544
• eks: document how to define dependencies for resources and charts (#8780) (e38b692), closes #7592 #6806
• rds: database proxy (#8476) (e0e5e03), closes #8475

Bug Fixes

• apigateway: permission error in lambda integration when function name is modified (#8813) (f1b37ef), closes #5306
• codebuild: project didn't have permissions to retrieve secret of image with credentials (#8845) (4326f24)
• elasticloadbalancingv2: dualstack ALB missing default IPv6 ingress rule (#8798) (66f9634), closes #7043
• lambda-nodejs: parcel build cannot find target (#8838) (ce7a015), closes #8837

1.48.0 (2020-07-01)

⚠ BREAKING CHANGES TO EXPERIMENTAL FEATURES

• stepfunctions-tasks: containerName is not supported as an override anymore and has been replaced by containerDefinition
• stepfunctions-tasks: EvaluateExpression is now a construct representing a task state rather than an embedded property called task
• backup: existing vaults that use a generated name will be replaced but existing recovery points won't be lost. The default vault removal policy is RETAIN and if it was set to DESTROY the deployment will fail because vault with recovery points cannot be deleted.

Features

• autoscaling: bring your own security group (3698f47)
• aws-cloudwatch: add comparison operators (#8812) (7003a09), closes #8808
• cfn-include: add support for YAML templates (#8746) (293a937), closes #8745
• cfnspec: cloudformation spec v16.0.0 (#8807) (4ce27f4)
• cli: support multiple verbosity levels (#8749) (fa4196b)
• ec2: Volume construct (#8219) (7490dee)
• ec2: add 6xlarge InstanceSize (#8701) (4917c04)
• ec2: natGateways=0 disables private subnets (#8817) (7f432ff), closes #4814
• efs: Filesystem.addAccessPoint() (#8737) (127547a)
• lambda-nodejs: external and install modules (#8681) (401594e), closes #6323 #7912
• secretsmanager: add grantUpdate method (#8600) (4e72d1e), closes #8491
• stepfunctions: class for working with Json paths to retrieve state machine data and context (#8647) (67978a1)
• stepfunctions-tasks: evaluate expression as a task construct (#8555) (83fd2ae)
• stepfunctions-tasks: task construct to call RunJob on ECS (#8451) (13deb26), closes #8610

Bug Fixes

• apigateway: error defining lambda integration on imported RestApi (#8785) (05aaf42), closes #8679
• backup: correctly validate Vault name (#8689) (07b330c)
• backup: vault name may exceed 50 characters (#8653) (d09c121), closes #8627
• batch: Invalid spot fleet service role (#8325) (034bc35), closes #6706
• cli: post install warnings are not clearly visible when running cdk init (#8723) (2662db3), closes #8720
• cli: unable to use "legacy" bootstrap with --public-access-block-configuration=false (#8755) (88f8e1e), closes #8728
• cognito: cannot add multiple route53 targets to the same user pool domain (#8622) (32b54a5), closes #8603
• core: bundling directory access permission is too restrictive (#8767) (1842168), closes #8757
• eks: Helm chart timeout expects duration (#8773) (d1c2ef2), closes #8718
• elbv2: Add missing accounts to ELBv2 Log Delivery. (#8715) (8914899)
• rewrite: script ignores list of files (#8777) (bb514c1)
• route53-targets: A/AAAA Alias Record to ELB cannot resolve IPv6 addresses (#8747) (87e2651), closes #6271
• s3-notifications: broken permissions query in LambdaDestination (#8741) (10bd8e4), closes #8538

1.47.1 (2020-06-30)

Bug Fixes

• Don't publish cdk.out directories (#8803) (aa21858)

1.47.0 (2020-06-24)

⚠ BREAKING CHANGES TO EXPERIMENTAL FEATURES

• stepfunctions-tasks: Dynamo* tasks no longer implementIStepFunctionsTask and have been replaced by constructs that can be instantiated directly. See README for examples

Features

• cfn-include: add support for retrieving parameter objects (#8658) (52dc123), closes #8657
• cfn-include: support logical id overrides (#8529) (d9c4f5e), closes #7375
• cloudwatch: CompositeAlarm (#8498) (1e6d293)
• efs: access point (#8631) (dde0ef5)
• stepfunctions: grant APIs for state machine construct (#8486) (fe71364), closes #5933
• stepfunctions-tasks: task constructs to call DynamoDB APIs (#8466) (a7cb3b7), closes #8108

Bug Fixes

• appsync: Not to throw an Error even if 'additionalAuthorizationModes' is undefined (#8673) (6b5d77b), closes #8666 #8668
• cli: cannot change policies or trust after initial bootstrap (#8677) (6e6b23e), closes #6581
• cli: crash on tiny reported terminal width (#8675) (a186c24), closes #8667
• toolkit: CLI tool fails on CloudFormation Throttling (#8711) (e512a40), closes #5637

1.46.0 (2020-06-19)

⚠ BREAKING CHANGES TO EXPERIMENTAL FEATURES

• stepfunctions-tasks: constructs for EMR* have been introduced to replace previous implementation which implemented IStepFUnctionsTask.
• stepfunctions-tasks: sizeInGB property in VolumeSpecification has been renamed to volumeSize and is of type cdk.Size as we want to enable specifying any unit
• stepfunctions-tasks: ebsRootVolumeSize property in EmrCreateCluster is now of type cdk.Size as we want to enable specifying any unit
• stepfunctions-tasks: Tags in EmrCreateCluster type has changed from cdk.CfnTag[] to a map of string to string as we do not want to leak Cfn types
• rds: the attribute securityGroupId has been removed from IDatabaseCluster, use cluster.connections.securityGroups instead
• rds: DatabaseClusterAttributes.securityGroup has been changed to securityGroups, and its type to an array
• rds: InstanceProps.securityGroup has been changed to securityGroups, and its type to an array
• rds: the property engine can no longer be passed when creating a DatabaseInstanceReadReplica
• rds: the property 'instanceClass' in DatabaseInstanceNewProps has been renamed to 'instanceType'
• appsync: Changes way of auth config even for existing supported methods viz., User Pools and API Key.

Features

• amplify: add "404 (Rewrite)" RedirectStatus (#7944) (21dda30)
• amplify: support for GitLab source code provider (#8353) (f10da03)
• apigateway: define Resources on imported RestApi (#8270) (21a1de3), closes #7391 #1477 #7391 #8347
• appsync: add Construct for AppSync HTTP DataSource (#8009) (0592b36), closes #8007
• appsync: enhances and completes auth config (#7878) (6d7ce65)
• autoscaling: add instanceMonitoring option (#8213) (6e23ae7), closes #8212
• awslint: publish as an external module (#8558) (378939c)
• cfn-include: add support for all remaining CloudFormation functions except Fn::Sub (#8591) (8d699c5), closes #8590
• cfn-include: add support for CreationPolicy and UpdatePolicy resource attributes (#8457) (2fc5372)
• cfnspec: cloudformation spec v15.1.0 (#8547) (50f4a21)
• cli: allow disabling of Public Access Block Configuration on bootstrap Bucket (#8171) (33f4746)
• cli: new deployment monitoring (#8165) (f066c52)
• cloudtrail: cloudtrail module is now stable! (#8651) (835f375)
• cloudwatch: liveData in GraphWidget (#8579) (831092e), closes #8376
• cognito: user pool - account recovery (#8531) (1112abb), closes #8502
• cognito: user pool - identity provider attribute mapping (#8445) (1bd513b)
• cognito: user pool client - disable OAuth easily (#8496) (f69cdfd), closes #8429
• logs: MetricFilter exposes extracted Metric object (#8556) (a35a53b), closes #1353
• upgrade JSII to version 1.7.0 (#8632) (1d26dbd)
• cognito: user pools are now in developer preview (#8522) (4fcad9a)
• core,s3-assets: custom bundling docker command (#8481) (2a6d90c), closes #8460
• ec2: Add Step Functions interface endpoint (#8512) (d21231f)
• efs: removal policy on FileSystem (#8593) (b17863b)
• eks: expose cluster security group and encryption configuration (#8317) (03e85eb), closes #8276 #8276 #8236
• eks: timeout option helm charts (#8338) (d1403cc), closes #8215
• globalaccelerator: support Accelerator, Listener and EndpointGroup (#8221) (e4e8270), closes #5527
• kms: import an Alias by name (#8299) (4611e69), closes #5953
• lambda: configurable retries for log retention custom resource (#8258) (e17a49a), closes #8257
• rds: multiple security groups in Cluster and Instance (#8510) (31925c1)
• sns-subscriptions: Add support for SMS subscriptions (#8582) (82d8f11), closes #7882

Bug Fixes

• apigateway: deployment fails when domain name has uppercase letters (#8456) (1e6a8e9), closes #8428
• appsync: don't mix the json result with setting variables (#8290) (7ca74e0), closes #7026
• autoscaling: can't configure notificationTypes (#8294) (01ef1ca)
• cli: bootstrapping cannot be retried (#8577) (cad6649)
• cloudtrail: Invalid arn partition for GovCloud (#8248) (5189170), closes #8247
• core: asset bundling runs as root (#8492) (6df546f), closes #8489
• core: asset staging custom hash generates invalid file names (#8521) (4521ae3), closes #8513
• core: cannot use container assets with new-style synthesis (#8575) (357d5f7), closes #8540
• core: incorrect temp directory when bundling assets (#8469) (9dc2e04), closes #8465
• core: s3-deployments don't work with new bootstrap stack (#8578) (b2006c3), closes #8541
• ec2: can't set natGateways=0 using reserved private subnets (#8407) (d7bf724), closes #8203
• eks: can't define a cluster with multiple Fargate profiles (#8374) (1e78a68), closes #6084
• eks: fargate profile deployment fails with missing iam:PassRole (#8548) (d6190f2), closes #8546
• eks: fargate profile role not added to aws-auth by the cdk (#8447) (f656ea7), closes #7981
• elbv2: allow non-TCP protocols in NLB TargetGroup (#8525) (387c1a8)
• rds: 'engine' is no longer required in DatabaseInstanceReadReplica (#8509) (86d84e6)
• rds: rename 'instanceClass' in DatabaseInstance to 'instanceType' (#8507) (e35cb1a)
• secretsmanager: rotation function name can exceed 64 chars (#7896) (24e474b), closes #7885, #8442

1.45.0 (2020-06-09)

⚠ BREAKING CHANGES TO EXPERIMENTAL FEATURES

• stepfunctions-tasks: constructs for SageMakerCreateTrainingJob and SageMakerCreateTransformJob replace previous implementation that implemented IStepFunctionsTask.
• stepfunctions-tasks: volumeSizeInGB property in ResourceConfig for SageMaker tasks are now type core.Size
• stepfunctions-tasks: maxPayload property in SagemakerTransformProps is now type core.Size
• stepfunctions-tasks: volumeKmsKeyId property in SageMakerCreateTrainingJob is now volumeEncryptionKey
• cognito: requiredAttributes on UserPool construct is now replaced with standardAttributes with a slightly modified signature.
• rds: DatabaseClusterProps.kmsKey has been renamed to storageEncryptionKey
• rds: DatabaseInstanceNewProps.performanceInsightKmsKey has been renamed to performanceInsightEncryptionKey
• rds: DatabaseInstanceSourceProps.secretKmsKey has been renamed to masterUserPasswordEncryptionKey
• rds: DatabaseInstanceProps.kmsKey has been renamed to storageEncryptionKey
• rds: DatabaseInstanceReadReplicaProps.kmsKey has been renamed to storageEncryptionKey
• rds: Login.kmsKey has been renamed to encryptionKey

Features

• assert: more powerful matchers (#8444) (ed6f763)
• cloud9: support AWS CodeCommit repository clone on launch (#8205) (4781f94), closes #8204
• codestar: support the GitHubRepository resource (#8209) (02ddab8), closes #8210
• cognito: allow mutable attributes for requiredAttributes (#7754) (1fabd98)
• core,s3-assets,lambda: custom asset bundling (#7898) (888b412)
• rds: rename 'kmsKey' properties to 'encryptionKey' (#8324) (4eefbbe)
• secretsmanager: deletionPolicy for secretsmanager (#8188) (f6fe36a), closes #6527
• secretsmanager: Secret.grantRead() also gives DescribeSecret permissions (#8409) (f44ae60), closes #6444 #7953
• stepfunctions-tasks: task constructs for creating and transforming SageMaker jobs (#8391) (480d4c0)

Bug Fixes

• apigateway: authorizerUri does not resolve to the correct partition (#8152) (f455273), closes #8098
• apigateway: methodArn not replacing path parameters with asterisks (#8206) (8fc3751), closes #8036
• aws-s3-deployment: Set proper s-maxage Cache Control header (#8434) (8d5b801), closes #6292
• cognito: error when using parameter for domainPrefix (#8399) (681b3bb), closes #8314
• dynamodb: old global table replicas cannot be deleted (#8224) (00884c7), closes #7189
• elbv2: addAction ignores conditions (#8385) (729cc0b), closes #8328
• elbv2: missing permission to write NLB access logs to S3 bucket (#8114) (d6a1265), closes #8113

1.44.0 (2020-06-04)

Features

• ecs-patterns: support min and max health percentage in queueprocessingservice (#8312) (6da564d)

1.43.0 (2020-06-03)

⚠ BREAKING CHANGES TO EXPERIMENTAL FEATURES

• rds: the default retention policy for RDS Cluster and DbInstance is now 'Snapshot'
• cognito: OAuth flows authorizationCodeGrant and implicitCodeGrant in UserPoolClient are enabled by default.
• cognito: callbackUrl property in UserPoolClient is now optional and has a default.
• cognito: All OAuth scopes in a UserPoolClient are now enabled by default.

Features

• cfn-include: add support for Conditions (#8144) (33212d2)
• cognito: addDomain() on an imported user pool (#8123) (49c9f99)
• cognito: sign in url for a UserPoolDomain (#8155) (e942936)
• cognito: user pool identity provider with support for Facebook & Amazon (#8134) (1ad919f)
• dynamodb: allow providing indexes when importing a Table (#8245) (9ee61eb), closes #6392
• events-targets: kinesis stream as event rule target (#8176) (21ebc2d), closes #2997
• lambda-nodejs: allow passing env vars to container (#8169) (1755cf2), closes #8031
• rds: change the default retention policy of Cluster and DB Instance to Snapshot (#8023) (2d83328), closes #3298
• redshift: add initial L2 Redshift construct (#5730) (703f0fa), closes #5711
• s3: supports RemovalPolicy for BucketPolicy (#8158) (cb71f34), closes #7415
• stepfunctions-tasks: start a nested state machine execution as a construct (#8178) (3000dd5)
• stepfunctions-tasks: task state construct to submit a job to AWS Batch (#8115) (bc41cd5)

Bug Fixes

• apigateway: deployment is not updated when OpenAPI definition is updated (#8207) (d28c947), closes #8159
• app-delivery: could not use PipelineDeployStackAction more than once in a Stage (#8217) (9a54447), closes #3984 #8183
• cli: termination protection not updated when change set has no changes (#8275) (29d3145)
• codepipeline: allow multiple CodeCommit source actions using events (#8018) (103c144), closes #7802
• codepipeline: correctly handle CODEBUILD_CLONE_REF in BitBucket source (#7107) (ac001b8)
• codepipeline: unhelpful artifact validation messages (#8256) (2a2406e)
• core: CFN version and description template sections were merged incorrectly (#8251) (b7e328d), closes #8151
• lambda: SingletonFunction.grantInvoke() API fails with error 'No child with id' (#8296) (a8b1815), closes #8240
• rds: cannot delete a stack with DbCluster set to 'Retain' (#8110) (c2e534e), closes #5282
• sqs: unable to use CfnParameter 'valueAsNumber' to specify queue properties (#8252) (8ec405f), closes #7126

1.42.1 (2020-06-01)

Bug Fixes

• lambda: SingletonFunction.grantInvoke() API fails with error 'No child with id' (#8296) (b4e264c), closes #8240