1.158.0 (2022-05-27)

Features

• apprunner: VpcConnector construct (#20471) (5052191)
• aws-ecr-assets: support the --platform option when building docker images (#20439) (adc0368), closes #12472 #16770 #16858
• lambda: validate function description length (#20476) (de027e2), closes #20475
• s3: adds objectSizeGreaterThan property for s3 lifecycle rule (#20425) (23690e4), closes #20372
• servicecatalog: ProductStackHistory can retain old ProductStack iterations (#20244) (1037b8c)

Bug Fixes

• core: NestedStack defaultChild is undefined (#20450) (0a49927), closes #11221
• iam: Role policies cannot grow beyond 10k (#20400) (75bfce7), closes #19276 #19939 #19835
• integ-runner: always resynth on deploy (#20508) (7138057)
• integ-tests: DeployAssert should be private (#20466) (0f52813)
• lambda: Fix typo in public subnet warning (#20470) (85f4e29)
• pipelines: too many CodeBuild steps inflate policy size (#20396) (f334060), closes #20189 #19276 #19939 #19835
• s3-deployment: default role does not get PutAcl permissions on… (#20492) (3e6ec5c)

1.157.0 (2022-05-20)

Features

• cfnspec: cloudformation spec v69.0.0 (#20240) (e82b63f) and (#20331) (e9de4e9)
• cfnspec: cloudformation spec v72.0.0 (#20357) (c8fd84c)
• cli: make ecr images immutable when created from cdk bootstrap (#19937) (0ef4bb4), closes #18376
• cloud9: configure Connection Type of Ec2Environment (#20250) (01708bc), closes #17027
• cloudfront: REST API origin (#20335) (f7693e3)
• cognito: grant() for user pool (#20285) (10d13e4)
• core: allow disabling of LogicalID Metadata in case of large manifest (#20433) (88ea829), closes #20211
• ec2: more router types (#20151) (33b983c), closes #19057 /docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ec2-route.html#aws-resource-ec2
• iam: validate role path at build time (#16165) (65a5a46), closes #13747
• integ-tests: enhancements to integ-tests (#20180) (3ff3fb7)
• logs: additional log retention periods (#20347) (734faa5), closes #20346
• s3: add noncurrentVersionsToRetain property to lifecycle rule (#20348) (85604d9), closes #19784

Bug Fixes

• amplify: custom headers break with tokens (#20395) (765f441)
• apigateway: arnForExecuteApi fails on tokenized path (#20323) (f7732a1), closes #20252
• assets: parallel docker image publishing fails on macOS (#20117) (a58a803), closes #20116
• cfn-include: allow CFN Functions in Tags (#19923) (4df9a4f), closes #16889
• cli: allow SSO profiles to be used as source profiles (#20340) (a0b29e9), closes #19897
• cloudwatch-actions: stack partition is hardcoded 'aws' in action arn (#20224) (0eb6c3b), closes #19765
• eks: Cluster.FromClusterAttributes ignores KubectlLambdaRole (#20373) (7e824ab), closes #20008
• iam: AccountPrincipal accepts values which aren't account IDs (#20292) (d0163f8), closes #20288
• pipelines: specifying the Action Role for CodeBuild steps (#18293) (719edfc), closes #18291 #18291
• rds: tokens should not be lowercased (#20287) (5429e55), closes #18802
• secretsmanager: automatic rotation cannot be disabled (#18906) (c50d60c), closes #18749

1.156.1 (2022-05-12)

1.156.0 (2022-05-11)

Features

• lambda: nodejs16.x runtime (#20261) (edf7c86)

Bug Fixes

• appsync: incorrect region used for imported Cognito user pool (#20193) (3e0393e), closes #20195
• cognito: UserPoolDomain.baseUrl() does not return FIPS-compliant url for gov cloud regions (#20200) (dd10df1), closes #20182 #12500
• stepfunctions: map property maxConcurrency is not token-aware (#20279) (14be764), closes #20152

1.155.0 (2022-05-04)

Features

• cfnspec: cloudformation spec v68.0.0 (#20065) (f199fad)
• cloudwatch: Add CustomWidget (#19327) (489340e), closes #17579
• ec2: add i4i instance type (#20134) (64c5064)
• iam: add convenience method inOrganization to ArnPrincipal (#20109) (c545bfe), closes /github.com/aws/aws-cdk/pull/19975#discussion_r857385168 #19975
• lambda: function.addAlias() simplifies Alias creation (#20034) (a79bc47)
• rds: add secret rotation to DatabaseClusterFromSnapshot (#20020) (abc3502), closes #12877

Bug Fixes

• lambda: grant invoke twice with different principals (#20174) (bb4c950)
• ubergen: expose exports in core module for v2 (#20176) (fc2cd48), closes #19773

1.154.0 (2022-04-27)

Features

• aws-cognito: send emails with a verified domain (#19790) (1d2b1d3), closes #19762
• aws-eks: add annotations and labels to service accounts (#19609) (82aec9d), closes #19607
• cloudwatch: expose dashboardArn for CloudWatch dashboard L2 construct (#20059) (df9814f)
• cloudwatch: expose dashboardName property on the L2 Dashboard construct (#17721) (8cb5dff), closes #17648
• integ-tests: add IntegTest to group test cases (#20015) (b4f8d91)
• integ-tests: make assertions on deployed infrastructure (#20071) (8362efe)
• rds: allow DatabaseClusterFromSnapshot to set copyTagsToSnapshot property (#19932) (40a6ceb), closes #19884
• redshift: expose user.secret as property (#17520) (#20078) (8da006a)
• servicecatalog: graduate to stable 🚀 (#19515) (4764591)

Bug Fixes

• eks: cluster cannot be created in opt-in regions (#20009) (ec06f48), closes #13748 #15579
• eks: remove incomplete support for k8s v1.22 (#20000) (d38a9e4), closes #19756 #19919
• integ-runner: disable-update-workflow default is 'false' instead of false (#20073) (9f7aa65)
• integ-runner: only diff registered stacks (#20100) (721bd4b)
• lambda-python: handler path is incorrectly generated when using PythonFunction (#20083) (6787376)
• tooling: container user's uid does not match host's uid (#20082) (e9670c8), closes #19979
• deploy monitor count is off if there are > 100 changes (#20067) (fd306ee), closes #11805
• imagebuilder: AmiDistributionConfiguration renders empty (#20045) (7bd7139)
• lambda-python: Pipenv projects no longer work for Python 3.6 (#20019) (5024021)
• region-info: EMR service principal incorrect in China (#20014) (84649b8), closes #19867

1.153.1 (2022-04-22)

Bug Fixes

• imagebuilder: revert property field typings (b2e0eb5)