1.42.0 (2020-05-27)

⚠ BREAKING CHANGES TO EXPERIMENTAL FEATURES

• cloudtrail: API signatures of addS3EventSelectors and addLambdaEventSelectors have changed. Their parameters are now strongly typed to accept IBucket and IFunction respectively.
• cloudtrail: addS3EventSelectors and addLambdaEventSelectors can no longer be used to configure all S3 data events or all Lambda data events. Two new APIs logAllS3DataEvents() and logAllLambdaDataEvents() have been introduced to achieve this.
• cloudtrail: The property snsTopic is now of the type ITopic.

Features

• cfnspec: cloudformation spec v14.4.0 (#8195) (99e7330)
• cloudtrail: create cloudwatch event without needing to create a Trail (#8076) (0567a23), closes #6716
• cloudtrail: user specified log group (#8079) (0a3785b), closes #6162
• codeguruprofiler: ProfilingGroup (#7895) (995088a)
• codepipeline: use a special bootstrapless synthesizer for cross-region support Stacks (#8091) (575f1db), closes #8082
• cognito: user pool - case sensitivity for sign in (460394f), closes #7988 #7235
• core: CfnJson enables intrinsics in hash keys (#8099) (195cd40), closes #8084
• eks: improve security using IRSA conditions (#8084) (35a01a0)
• elbv2: Supports new types of listener rule conditions (#7848) (3d30ffa), closes #3888
• secretsmanager: adds grantWrite to Secret (#7858) (3fed84b)
• sns: add support for subscription DLQ in SNS (383cdb8)
• stepfunctions: new service integration classes for Lambda, SNS, and SQS (#7946) (c038848), closes #6715 #6489
• stepfunctions: support paths in Pass state (#8070) (86eac6a), closes #7181
• stepfunctions-tasks: task for starting a job run in AWS Glue (#8143) (a721e67)

Bug Fixes

• apigateway: contextAccountId in AccessLogField incorrectly resolves to requestId (7b89e80), closes #7952 #7951
• autoscaling: add noDevice as a volume type (#7253) (751958b), closes #7242
• aws-eks: kubectlEnabled: false conflicts with addNodegroup (#8119) (8610889), closes #7993
• cli: paper cuts (#8164) (af2ea60)
• dynamodb: the maximum number of nonKeyAttributes is 100, not 20 (#8186) (0393528), closes #8095
• eks: unable to add multiple service accounts (#8122) (524440c)
• events: cannot use the same target account for 2 cross-account event sources (#8068) (395c07c), closes #8010
• lambda-nodejs: build fails on Windows (#8140) (04490b1), closes #8107
• cloudtrail: better typed event selector apis (#8097) (0028778)

1.41.0 (2020-05-21)

Features

• cloudtrail: create cloudwatch event without needing to create a Trail (#8076) (0567a23), closes #6716
• cognito: user pool - case sensitivity for sign in (460394f), closes #7988 #7235
• core: CfnJson enables intrinsics in hash keys (#8099) (195cd40), closes #8084
• secretsmanager: adds grantWrite to Secret (#7858) (3fed84b)
• sns: add support for subscription DLQ in SNS (383cdb8)
• stepfunctions: new service integration classes for Lambda, SNS, and SQS (#7946) (c038848), closes #6715 #6489

Bug Fixes

• apigateway: contextAccountId in AccessLogField incorrectly resolves to requestId (7b89e80), closes #7952 #7951
• autoscaling: add noDevice as a volume type (#7253) (751958b), closes #7242

1.40.0 (2020-05-20)

Features

• add support for Gitpod workspaces (20d5511)
• autoscaling: support max instance lifetime (d126c46), closes #7758
• cfn-include: add support for the DependsOn attribute (613df1b)
• docdb: high level constrcuts for db clusters and instances (#6511) (a376dd3)
• eks: IAM roles for service accounts (3f0d2c8), closes #6062 #5388 #3949
• elbv2: full Action support (2939105), closes #2563 #6310 #6308
• region-info: add information for us-gov, us-iso, and us-isob regions (afe0b00), closes #7876 #4669
• s3-asset: add httpUrl and s3ObjectUrl (eeff393), closes #7509 #7221

1.39.0 (2020-05-15)

⚠ BREAKING CHANGES TO EXPERIMENTAL FEATURES

• cognito: An invalid template placeholder has been removed from the default verification email body in a user pool.

Features

• apigateway: create RestApi from an OpenAPI spec (31014ca), closes #4421
• apigateway: import existing VpcLink (#7811) (7b42f7f), closes #4178
• initial version of an improved CloudFormation template include experience (0132251), closes #3537
• apigateway: specify API key name and value in addApiKey() (#7714) (e93da2c), closes #3233 #7767
• apigatewayv2: HTTP API - configure CORS preflight (#7923) (9f35104), closes #7922
• cognito: user pool client - prevent user existence errors (c7f15f2), closes #7406
• dynamodb: support for Customer-managed CMK (#7425) (ff8219b), closes #7142
• ec2: lookup available AZs for Interface Endpoints (9fa3221)
• events-targets: support multiple security groups for an ECS task (#7857) (c6504e6), closes #3312
• init/java: model CDK version in property in Maven POMs (#7931) (ce5b8fb), closes #7862

Bug Fixes

• cli: cdk bootstrap cannot be used without supplying the --app argument (#7970) (540a7e6), closes #7510 #7906
• cognito: invalid default for verification email (#7790) (cb3c184), closes #7597
• core: consistent sorting of resource tags (0105efd), closes #7707
• core: hangs when used with yarn PnP (8579100), closes yarnpkg/berry#1298
• elbv2: race condition for Lambda backends (1819a6b), closes #4663 #7236
• iot1click: incorrect type for Project.deviceTemplates (#8000) (338ef92), closes #8001
• lambda: SingletonFunction ignores explicit declared dependencies (#7997) (91f913f), closes #7568
• stepfunctions-tasks: EvaluateExpression is limited to expressions that contain state paths (#7774) (97f4f01), closes #7655

1.38.0 (2020-05-08)

Features

• cloudfront: support geo restrictions for cloudfront distribution (#7345) (cf25ba0), closes #3456
• cloudwatch: legend positions in GraphWidgets (ada0de1), closes #3625
• codebuild: add support for test reports (4befefc), closes #7367
• core: custom resource provider helper (4a76973)
• ec2: EBS volume configuration for BastionHostLinux (207a8ec), closes #6945
• ecs: support multiple security groups when creating an ecs service (#7850) (456c469)
• iam: openid connect providers (20621ac), closes #5388 #3949 #6308
• add an example construct package (#7748) (2223584)
• lambda-nodejs: run parcel in a docker container (d86e500), closes #7169
• cloudformation spec v14.1.0 (#7822) (e133027)
• s3: new s3UrlForObject method on IBucket (#7508) (8fe4015), closes #7507
• stepfunctions: custom state as an escape hatch (c498f60)

Bug Fixes

• assets: invalid fingerprint when 'exclude' captures root directory name (#7719) (a5c06a3), closes #7718
• aws-batch: gpuCount was ignored in JobDefinition creation (#7587) (0f1bf23)
• cli: parameter value reuse is not configurable (44310c9), closes #7041
• core: docs refer to "createNamingScheme" which was renamed to "allocateLogicalId" (#7840) (d79595d), closes #7527
• ecs: update minHealthyPercent constrain for ec2service using daemon strategy (#7814) (19e3fd8)
• ecs: using secret JSON field with fargate task does not fail (#7317) (cb03a60), closes #7272
• eks: "vendor response doesn't contain attribute" when updating version (#7830) (8cabae0), closes #7526 #7794
• s3: grantDelete with KMS SSE (#7528) (c6d1a21), closes #4380
• secretsmanager: add kms policy to allow secret to use kms key (5460717)

1.37.0 (2020-05-05)

⚠ BREAKING CHANGES TO EXPERIMENTAL FEATURES

• amplify: mapSubDomain() called with an empty string for prefix now maps to the domain root.

Features

• amplify: add SPA redirect custom rule (#7320) (0ef9883)
• apigatewayv2: http api (#6432) (f3219c3), closes #5301
• appsync: export configured API key (#7380) (fa8c13c)
• aws-fsx: L2 construct for FSx for Lustre (#6653) (7363912)
• cfnspec: cloudformation spec v14.0.0 (#7664) (fa21274)
• cloudwatch: LogGroup Query Widget (1275952), closes #3681
• codebuild: allow taking the artifact name from the buildspec (f7d3cd6), closes #5955
• core: move all types from "assets" to "core" (#7708) (4a84c96)
• core: move all types from "aws-cloudformation" to "core" (#7736) (40fa93a), closes #4896 #7035 #7034
• core: stack termination protection (#7610) (7ed60b8), closes #1682
• ecr: support imageScanOnPush when creating the repository (9df5486), closes #7471

Bug Fixes

• amplify: cannot map branch to domain root (#7621) (da7c508), closes #7590
• cdk-assets: assets archiving corruption (#7653) (f8eddb8), closes #6925
• cli: cdk deploy cannot update stacks in REVIEW_IN_PROGRESS status (#7731) (a52b3e3), closes #6674
• cli: CLI can't be used in Lambda Function (0e96415), closes #7530
• cli: CLI ignores profile in cdk.json (#7398) (6784dc3), closes #3007
• cloudwatch: Alarm can't use MathExpression without submetrics (b59aed0), closes #7155
• ec2: new Instance fails in lookup Vpc (3161de8), closes #7580
• ec2: Vpc.fromLookup() does not work in unit tests (e869a0d), closes #6045
• ec2: can't add VPN connections to a VPC progressively (9498e05)
• ec2: default gateway endpoint fails without private subnets (c475783), closes #7619
• ec2: NAT instances don't route ICMP or UDP (a93534f), closes #7459
• eks: impossible to define multiple spot capacities (be6666b), closes #7136 #7524
• eks: missing required permission for fargate profile (723813f), closes #7614
• eks: ssm path for amazon linux 2 gpu ami is invalid (#7672) (5861d18), closes #6891
• iam: principal with implicit conditions overwrite each other (e72c353), closes #3227
• logs: grants don't work on imported LogGroups (5a1a929), closes #7096
• rds: Cluster does not work with imported VPC (#7666) (95c66a7), closes #6115

1.36.1 (2020-04-29)

Bug Fixes

• multiple breakages due to jest version upgrade (#7667) (e18312), closes #7657

1.36.0 (2020-04-28)

⚠ BREAKING CHANGES TO EXPERIMENTAL FEATURES

• stepfunctions-tasks: payload in RunLambdaTask is now of type TaskInput and has a default of the state input instead of the empty object. You can migrate your current assignment to payload by supplying it to the TaskInput.fromObject() API

Features

• apigateway: gateway responses (#7441) (b0a65c1), closes #7071
• aws-ecs: add support for IPC and PID Mode for EC2 Task Definitions (1ee629e), closes #7186

Bug Fixes

• apigateway: authorizer is not attached to RestApi across projects (#7596) (1423c53), closes #7377
• cli: can't bootstrap environment not in app (9566cca)
• cli: context keys specified in cdk.json get moved to cdk.context.json (022eb66), closes #7399
• dynamodb: grant() is not available on ITable (#7618) (3b0a397), closes #7473
• dynamodb: grantXxx() does not grant in replication regions (98429e0), closes #7362
• eks: version update completes prematurely (#7526) (307c8b0), closes #7457
• stepfunctions-tasks: cannot specify part of execution data or task context as input to the RunLambda service integration (#7428) (a1d9884), closes #7371

1.35.0 (2020-04-23)

⚠ BREAKING CHANGES TO EXPERIMENTAL FEATURES

• assets: cdk deploy now needs s3:ListBucket instead of s3:HeadObject.
• efs: Exported types no longer have the Efs prefix.
• efs: provisionedThroughputInMibps property is renamed to provisionedThroughputPerSecond and has the type Size.
• efs: The property fileSystemID is now renamed to fileSystemId in the now named FileSystemAttributes (previously, EfsFileSystemAttributes).
• efs: LifecyclePolicyProperty is now renamed to LifecyclePolicy.

Features

• backup: Vault, Plan and Selection (#7074) (c8aa92d)
• cfnspec: cloudformation spec v13.0.0 (#7504) (6903869)
• cloudtrail: Lambda Function data events (4a70138)
• cognito: user pool domain (#7224) (feadd6c), closes #6787
• stepfunctions: retrieve all reachable states from a given state in a state machine definition (#7324) (ac3b330), closes #7256

Bug Fixes

• assets: infrequent "ValidationError: S3 error: Access Denied" (#7556) (00c9deb), closes #6430 #7553
• route53: cannot add tags to HostedZone (#7531) (2729804), closes #7445
• efs: drop Efs prefix from all exported types (#7481) (ddd47cd)

1.34.1 (2020-04-22)

Bug Fixes

• cli: Javascript init-templates cannot be synthesized (ce4b8dd), closes #7356