1.153.0 (2022-04-21)

Features

• apigatewayv2: set throttling on stages (#19776) (3cabd10), closes #19626
• autoscaling: Auto Scaling Group with Launch Template (#19066) (1581af0), closes #6734
• aws-ecr: make it easy to reference image tag or digest, use everywhere (#19799) (380774e), closes #13299 #15333
• cfnspec: cloudformation spec v66.0.0 (#19812) (43735fd), closes #19798
• cfnspec: cloudformation spec v66.1.0 (#19929) (8c8b6b6)
• cli: glob-style key matching to context --reset (#19840) (edb4119), closes #19797
• codebuild: add ability to customize build status reporting for third-party Git sources (#19408) (423d72f)
• codepipeline: allow to disable stage transition (#19911) (ac9901a), closes #1649
• integ-runner: add missing features from the integ manifest (#19969) (2ca5050)
• integ-runner: integ-runner enhancements (#19865) (697fdbe)
• integ-runner: test update path when running tests (#19915) (d0ace8f)
• integ-tests: Add IntegTestCase (#19829) (ad249c9)
• iotevents: support comparison operators (#19329) (95cb3f3)
• lambda: function URLs (#19817) (4fd515a), closes #19798
• logs: add QueryDefinition L2 Construct (#18655) (fcf981b)
• route53: fromPublicHostedZoneAttributes method with zoneName (#19771) (7867dc4), closes #18700
• s3-deployment: ephemeral storage size property for bucket deployment (#19958) (3ce40b4), closes #19947
• check for accidental exposure of secrets (#19543) (789e8d2)

Bug Fixes

• autoscaling: update validation on maxInstanceLifetime (#19584) (d115b47)
• aws-cloudfront: Add sslSupportMethod (#19737) (c5a9679), closes #19476
• aws-ecr-assets: correct file existence validation in tests (#19945) (d4c13c0), closes 40aws-cdk/aws-ecr-assets/test/image-asset.test.ts#L387 #19944
• cfn-diff: allow resources to change types (#19891) (4f3a340), closes #13921
• cfn-include: detect a resource cycle in the included template (#19871) (2c2bc0b), closes #16654
• cfnspec: aws-sam deployment preferences hooks (#19732) (a205734)
• cfnSpec: wrong type for SAM API properties GatewayResponses and Models (#19885) (b214ede), closes #19870
• cli: hangs on retrieving notices (#19967) (daeeafa), closes #19542
• cli: stack monitor prints over error messages (#19859) (42e5d08), closes #19742
• cloudwatch: MathExpression id contract is not clear (#19825) (5472b11), closes #13942 #17126
• core: exportValue does not work on number attributes (#19818) (12459ca), closes #19537
• docdb: make most attributes of DatabaseClusterAttributes optional (#19625) (5f6d20c), closes #14492
• ecr: scanOnPush not supported in certain regions (#19940) (2ff3143), closes #19918
• ecs: get rid of EFS casing warnings (#19681) (eafc11a), closes #15025
• eks: malformed command when installing helm chart from OCI artifact (#19778) (f8babb8), closes /github.com/aws/aws-cdk/pull/18547#issuecomment-1088737549
• iam: role/group/user's path not included in ARN (#13258) (ef2b480), closes #13156
• integ-runner: enable all feature flags by default (#19955) (ca3920d)
• lambda-event-sources: unsupported property onFailure for KafkaEventSources (#19995) (383171b), closes #19917
• rds: MySQL 8.0 uses wrong Parameter for S3 export (#19775) (5a895a3), closes #19735
• stepfunctions: incorrect default documentation for integrationPattern (#19936) (4cb3b2b), closes #19815

Reverts

• "feat(cli): glob-style key matching to context --reset (#19840)" (#19888) (89ec597)

1.152.0 (2022-04-06)

Features

• cfnspec: cloudformation spec v63.0.0 (#19679) (dba96a9)
• cfnspec: cloudformation spec v65.0.0 (#19745) (796fc64)
• cli: add --build option (#19663) (eb9b8e2), closes #19667
• cli: preview of cdk import (#17666) (4f12209)
• core: throw error when stack name exceeds max length (#19725) (1ffd45e)
• eks: add k8s v1.22 (#19756) (9a518c5)
• opensearch: Add latest Opensearch Version 1.2 (#19749) (a2ac36e)
• add new integration test runner (#19754) (1b4d010)
• eks: alb-controller v2.4.1 (#19653) (1ec08df)
• lambda: add support for ephemeral storage (#19552) (f1d9b6a), closes #19605
• s3: EventBridge bucket notifications (#18614) (d8e602b), closes #18076
• synthetics: new puppeteer 3.5 runtime (#19673) (ce2b91b), closes #19634

Bug Fixes

• aws_applicationautoscaling: Add missing members to PredefinedMetric enum (#18978) (75a6fa7), closes #18969
• cli: apps with many resources scroll resource output offscreen (#19742) (053d22c), closes #19160
• cli: support attributes of DynamoDB Tables for hotswapping (#19620) (2321ece), closes #19421
• cloudwatch: automatic metric math label cannot be suppressed (#17639) (7fa3bf2)
• codedeploy: add name validation for Application, Deployment Group and Deployment Configuration (#19473) (9185042)
• codedeploy: the Service Principal is wrong in isolated regions (#19729) (7e9a43d), closes #19399
• core: Fn.select incorrectly short-circuits complex expressions (#19680) (7f26fad)
• core: detect and resolve stringified number tokens (#19578) (7d9ab2a), closes #19546 #19550
• core: reduce CFN template indent size to save bytes (#19656) (fd63ca3)
• ecs: 'desiredCount' and 'ephemeralStorageGiB' cannot be tokens (#19453) (c852239), closes #16648
• ecs: remove unnecessary error when adding volume to external task definition (#19774) (5446ded), closes #19259
• iam: policies aren't minimized as far as possible (#19764) (876ed8a), closes #19751
• logs: Faulty Resource Policy Generated (#19640) (1fdf122), closes #17544

1.151.0 (2022-03-31)

Features

• aws-ec2: Enable/disable EC2 "Detailed Monitoring" (#19437) (94f9d27)
• cognito: configure SNS region for UserPool SMS messages (#19519) (6eb775e), closes #19434
• core: add size.isUnresolved (#19569) (ed26731)
• ecs-patterns: PlacementStrategy and PlacementConstraint for many patterns (#19612) (0096e67)
• elbv2: use addAction() on an imported application listener (#19293) (18a6b0c), closes #10902
• kinesisanalytics-flink: Add metrics to Flink applications (#19599) (dab6aca)
• lambda: warn if you use function.grantInvoke while also using currentVersion (#19464) (fd1fff9), closes #19273 #19318

Bug Fixes

• apigateway: allow using GENERATE_IF_NEEDED for the physical name in LambdaRestApi (#19638) (e817381), closes #9374
• apigateway: id in schema model maps to $id (#15113) (ac5a345), closes #14585
• aws-cognito: Lambda::Permission of lambdaTrigger should have a SourceArn (#19622) (c62eeb7), closes #19604
• docdb: DB Instance ARN uses 'docdb' as the service component instead of 'rds' (#19555) (6a63924), closes #19554
• eks: incorrect version of aws-node-termination-handler (#19510) (9c712cc)
• elbv2: unable to add multiple certificates to NLB (#19289) (e8142e9), closes #13490 #8918 #15328
• rds: SnapshotCredentials.fromSecret() takes a Secret, not ISecret (#19639) (a74d82e), closes #19409

1.150.0 (2022-03-26)

Features

• cloudformation spec v62.0.0 (#19553) (0352dee)
• appsync: support custom domain mappings (#19368) (8c7a4ac), closes #18040
• autoscaling: support warm pools (#19214) (737e611)
• cfnspec: cloudformation spec v61.0.0 (#19457) (16d7552)
• cli: support SSO (#19454) (eba6052)
• cloudwatch: Additional Properties for Cloudwatch AlarmStatusWidget (#19387) (3c9ea5f), closes #19386
• ec2: add support for x2iezn instances (#19517) (8f6e20e)
• synthetics: add support for puppeteer 3.4 runtime (#19429) (024b890), closes #19382

Bug Fixes

• apigateway: StepFunctionsIntegration does not create required role and responses (#19486) (d59bee9)
• bootstrap: rebootstrap breaks container Functions (#19446) (49ea263), closes #18473
• cli: templates don't include .gitignore (#19482) (5ce0983)
• core: Aspects from symlinked modules are not applied (#19491) (eaeaed7), closes #18921 #18778 #19390 #18914
• ecr: setting imageScanningConfiguration to false does nothing on existing repository (#18078) (78bc870), closes #18077
• events: cannot have more than one cross-account Rule (#19441) (a257846), closes #12479 #12538
• iam: IAM Policies are too large to deploy (#19114) (3a4fe33), closes #18774 #16350 #18457 #18564 #19276
• lambda: support Lambda's new Invoke with Qualifier authorization strategy (#19318) (d06b27f), closes #19273
• secretsmanager: secret rotation uses old application versions (#19490) (0c983ad), closes #19487

1.149.0 (2022-03-17)

Features

• appsync: add OpenSearch domain data source (#16529) (922a9dc), closes #16528
• assertions: Add the hasNoXXX methods. (#19330) (6bdc9eb), closes #18874
• aws-lambda-nodejs: support additional esbuild configurations (#17788) (ab313a4)
• cfnspec: cloudformation spec v60.0.0 (#19347) (20da648)
• cli: parallel asset publishing (#19367) (c8cafef), closes #19193
• ec2: add support for x2idn and x2iedn instances (#19334) (9699efc)
• elbv2: add name validation for target group and load balancer names (#19385) (97e0973), closes /docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-elasticloadbalancingv2-targetgroup.html#cfn-elasticloadbalancingv2 /docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-elasticloadbalancingv2-loadbalancer.html#cfn-elasticloadbalancingv2
• iotevents: support SetVariable action (#19305) (c222b12)
• lambda: dotnet6 runtime (#19144) (bbed27d)
• synthetics: add vpc configuration (#18447) (c991e92), closes #11865 #9954

Bug Fixes

• cli: failure to load malformed YAML is swallowed (#19338) (1875c28), closes #19335
• lambda-event-sources: increase batch size restriction (#19317) (1bc5144), closes #19285
• lambda-nodejs: cannot use esbuildArgs with older esbuild versions (#19343) (59a4d81)
• stepfunctions-tasks: migrate from deprecated batch properties (#19298) (75f5b3b), closes #18993

1.148.0 (2022-03-09)

Features

• aws-apigateway: add ability to include authorizer context in apigw sfn integration (#18892) (e7c0c75), closes #18891
• aws-s3objectlambda: add L2 construct for S3 Object Lambda (#15833) (fe9f750), closes #13675
• cfnspec: cloudformation spec v59.0.0 (#19236) (f46a14d)
• codebuild: improved support for ARM build images (#19052) (4eac4de), closes #18916 #9817
• eks: Service Account names validation (#19251) (7c3099e), closes #18189
• elasticsearch: Decouple setting access policies from domain constructor (#15876) (cefdfd3)
• iotevents: support actions (#18869) (e01654e)
• iotevents: support setting Events on input and exit for State (#19249) (ffa9e0d)
• lambda-nodejs: support esbuild inject (#19221) (3432c45), closes #19133
• s3: add s3:ObjectRestore:Delete to EventType for notification (#19250) (e0f863a), closes #19223
• servicecatalog: Service Catalog is now in Developer Preview (#19204) (6dfc254)

Bug Fixes

• apigatewayv2-integrations: in case of multiple routes, only one execute permission is created (#18716) (1e352ca)
• aws-apigateway: missing comma to make failure response payload valid json (#19253) (b1fce4f), closes #19252
• aws-route53-targets: add support for custom cname_prefix urls in elastic beanstalk environment endpoint target (#18804) (289a794)
• cli: watch logs always end with the 'truncated' message (#19241) (d3fdfe5), closes #18805
• cli: deprecated stack ids printed at the end of synth (#19216) (7d8a479), closes #18599
• cli: notices refresh doesn't respect the --no-notices flag (#19226) (b3c5fe8)
• efs: fix bug when setting both lifecyclePolicy and outOfInfrequentAccessPolicy (#19082) (d435ab6), closes #19058
• lambda-nodejs: local tsc detection with pre compilation (#19266) (5de7b86), closes #19242
• lambda-python: asset bundling fails on windows (#19270) (0da57da), closes #18861
• lambda-python: docker image gets built even when we don't need to bundle assets (#16192) (5dc61ea), closes #14747
• rds: allow cluster from snapshot to enable encrypted storage (#19175) (bd4141d), closes #17241
• rds: read replica instance cannot join domain (#19202) (cef8fec), closes #18786
• rds: subnet selection not respected for multi user secret rotation (#19237) (dc7a17c), closes #19233

1.147.0 (2022-03-01)

Features

• cfnspec: cloudformation spec v58.0.0 (#19153) (a6b0a10)
• cli: hotswap support for resources in nested stacks (#18950) (2ea9da1)
• ec2: add c6a instances (#19113) (427cdfd)

Bug Fixes

• apigateway: fix strange vtl template for cors preflight request (#19104) (59ef06a), closes /datatracker.ietf.org/doc/html/rfc6454#section-7
• aws-apigateway: api gateway usage plan (#19023) (5b764cc), closes #18994
• aws-lambda-python: skip default docker build when image passed (#19143) (7300f2e), closes #18082
• cli: cdk version displays notices (#19181) (fa16f7a)
• cli: long connection timeout slows the CLI down (#19187) (6595d04)
• custom-resources: physical resource id must be determined before isComplete (#18630) (c190367)
• dynamodb: grant*Data() methods are missing the dynamodb:DescribeTable permission (#19129) (4a44a65), closes #18773
• dynamodb: Table.grantWriteData() doesn't include enough KMS permissions (#19102) (77f1e0b), closes #10010
• ec2: invalid volume type check for iops (#19073) (3f49f02)
• eks: Helm charts fail to install when provided as an asset (#19180) (9961257)
• lambda-nodejs: logLevel property of BundlingOptions is ignored when nodeModules are defined (#18456) (5c40b90), closes #18383
• stepfunctions-tasks: RUN_JOB integration pattern not supported for CallAwsService (#19186) (4b134b7), closes #19174
• apply tags to nested stack (#19128) (3af329b), closes #17463
• triggers: not published as part of v2 (#19168) (8f727d1), closes #19164
• construct paths are not printed for nested stacks in CLI output (#18725) (b0e0155)
• rds: MySQL Cluster version 8.0 uses wrong Parameter for S3 import (#19145) (96b2034), closes #19126

1.146.0 (2022-02-24)

Features

• apigatewayv2: Import existing WebSocketApi from attributes (#18958) (f203845)
• cli: bundle dependencies (#18667) (31d135f)
• cli: support for matching notices with arbitrary module names (#19088) (a87dee7)
• cli: support for notices (#18936) (d37fbbb)
• cloudfront-origins: extend max keepaliveTimeout of HttpOrigin to 180 (#18837) (171fdcd), closes #18697
• eks: Allow helm pull from OCI repositories (#18547) (7e624d9)
• lambda: add a fromFunctionName() method (#19076) (5b92cc3), closes #18255 #19031
• pipelines: ECR source action (#16385) (fc11ae2), closes #16378
• pipelines: step outputs (#19024) (0dec2ee), closes #17189 #18893 #15943 #16407
• rds: make VPC optional for serverless Clusters (#17413) (4f7818d), closes #17401
• triggers (#19011) (11d6c69)

Bug Fixes

• cli: hotswapping is slow for many resources deployed at once (#19081) (040238e), closes #19021
• s3-notifications: notifications allowed with imported kms keys (#18989) (7441418)
• API compatibility check fails in CI pipeline (#19069) (6ec1005), closes #19070
• cloudfront: trim autogenerated cache policy name (#18953) (c7394c9), closes #18918
• elasticloadbalancingv2: validate port/protocol are not provided for lambda targets (#19043) (64d26cc), closes #12514
• route53: fix cross account delegation deployment dependency (#19047) (692a0d0), closes #19041

1.145.0 (2022-02-18)

Features

• aws-stepfunctions-tasks: add environment property for SageMakerCreateTrainingJob (#18976) (60d6e66), closes #18919
• cfnspec: cloudformation spec v56.0.0 (#18930) (24a52ae)
• cfnspec: cloudformation spec v57.0.0 (#19030) (f0acbc4)
• cli: hotswap for appsync vtl mapping template changes (#18881) (9858002)
• codepipeline: add support for CloudFormation StackSet actions (#14225) (d8bc0d0)
• config: S3_BUCKET_LEVEL_PUBLIC_ACCESS_PROHIBITED managed rule (#18890) (1a7e3e2), closes #18888
• core: stack synthesizer that uses CLI credentials (#18963) (a36b72b), closes #16888
• ec2: allow imdsv2 usage on bastion host (#18955) (8c6777c)
• ecs: support version stages and ids for Secrets (#18174) (6d091c2), closes #18123
• events: API Destinations (#13729) (2adbc14)
• iot-actions: add SNS publish action (#18839) (3a39f6b), closes #17700
• iotevents: create new module for IoT Events actions (#18956) (3533ea9), closes /github.com/aws/aws-cdk/pull/18869#discussion_r802719713
• lambda: allow Topic to be dlq for Lambda (#18546) (f8d8fe4), closes #16246
• logs: custom Role for Kinesis destination (#13553) (bb96621), closes #7661
• rds: simpler way to configure parameters for instance and cluster (#18126) (3ba9088), closes #18124
• s3-deployment: add deployedBucket attribute for sequencing (#15384) (edac101)

Bug Fixes

• assertions: 'pattern.indexOf' is not a function (#19009) (6df26e7)
• assertions: incorrect assertions when >1 messages on a resource (#18948) (072e1b9), closes #18840
• aws-cdk: include nested stacks when building changesets (#17396) (a7dbeef), closes #5722
• cli: handle attributes of AWS::Events::EventBus when hotswapping (#18834) (a30a32a), closes #18831
• core: undeployable due to invalid mapping (#18922) (db28485), closes #18789 #18789
• lambda: unlock use case for cross-account functions w/ preconfigured permissions (#18979) (023108a), closes #18228 #18781 #18967 #18781
• lambda: Validate Lambda "functionName" parameter (#17970) (a416a2d), closes #13264
• pipelines: self-mutate always adds analytics (#19010) (bc47b29), closes #18933
• stepfunctions: imported State Machine sill has region and account from its Stack, instead of its ARN (#19026) (23329b4), closes #17982
• python3 version check with Python 3.10 (#18754) (0ef6527)
• stepfunctions-tasks: EMR Create Cluster does not support dynamic allocation of step concurrency level (#18972) (d19e538)
• synthetics: generated role has incorrect permissions for cloudwatch logs (#18946) (f8bb85f), closes #18910

1.144.0 (2022-02-08)

Features

• assets: support networking mode for DockerImageAsset (#18114) (a7b39f5), closes #15516
• cfnspec: cloudformation spec v55.0.0 (#18827) (a1d94b3)
• cli: cdk diff works for Nested Stacks (#18207) (1337b24), closes #5722
• iotevents: add grant method to Input class (#18617) (e89688e)
• iotevents: support transition events (#18768) (ccc1988), closes #17711
• s3-deployment: deploy data with deploy-time values (#18659) (d40e332), closes #12903

Bug Fixes

• aws-appsync: Strip unsupported characters from Lambda DataSource (#18765) (bb8d6f6)
• tooling: update vscode devcontainer image (#18455) (28647f7)