@aws-cdk/custom-resources - npm Package Compare versions

Comparing version 1.15.0 to 1.16.0

lib/index.d.ts

 export * from './aws-custom-resource';
+export * from './provider-framework';

lib/index.js

@@ -7,2 +7,3 @@ "use strict";
 __export(require("./aws-custom-resource"));
-//# sourceMappingURL=data:application/json;base64,eyJ2ZXJzaW9uIjozLCJmaWxlIjoiaW5kZXguanMiLCJzb3VyY2VSb290IjoiIiwic291cmNlcyI6WyJpbmRleC50cyJdLCJuYW1lcyI6W10sIm1hcHBpbmdzIjoiOzs7OztBQUFBLDJDQUFzQyIsInNvdXJjZXNDb250ZW50IjpbImV4cG9ydCAqIGZyb20gJy4vYXdzLWN1c3RvbS1yZXNvdXJjZSc7XG4iXX0=
+__export(require("./provider-framework"));
+//# sourceMappingURL=data:application/json;base64,eyJ2ZXJzaW9uIjozLCJmaWxlIjoiaW5kZXguanMiLCJzb3VyY2VSb290IjoiIiwic291cmNlcyI6WyJpbmRleC50cyJdLCJuYW1lcyI6W10sIm1hcHBpbmdzIjoiOzs7OztBQUFBLDJDQUFzQztBQUN0QywwQ0FBcUMiLCJzb3VyY2VzQ29udGVudCI6WyJleHBvcnQgKiBmcm9tICcuL2F3cy1jdXN0b20tcmVzb3VyY2UnO1xuZXhwb3J0ICogZnJvbSAnLi9wcm92aWRlci1mcmFtZXdvcmsnOyJdfQ==

package.json

 {
   "name": "@aws-cdk/custom-resources",
-  "version": "1.15.0",
+  "version": "1.16.0",
   "description": "Constructs for implementing CDK custom resources",
@@ -48,7 +48,8 @@ "main": "lib/index.js",
     "build+test+package": "npm run build+test && npm run package",
-    "build+test": "npm run build && npm test"
+    "build+test": "npm run build && npm test",
+    "compat": "cdk-compat"
   },
   "cdk-build": {
     "pre": [
-      "cp -f node_modules/aws-sdk/apis/metadata.json lib/sdk-api-metadata.json"
+      "cp -f $(node -p 'require.resolve(\"aws-sdk/apis/metadata.json\")') lib/aws-custom-resource/sdk-api-metadata.json"
     ]
@@ -71,31 +72,47 @@ },
   "devDependencies": {
-    "@aws-cdk/assert": "1.15.0",
-    "@aws-cdk/aws-events": "1.15.0",
-    "@aws-cdk/aws-ssm": "1.15.0",
-    "@types/aws-lambda": "^8.10.33",
+    "@aws-cdk/assert": "1.16.0",
+    "@aws-cdk/aws-events": "1.16.0",
+    "@aws-cdk/aws-s3": "1.16.0",
+    "@aws-cdk/aws-ssm": "1.16.0",
+    "@types/aws-lambda": "^8.10.35",
     "@types/sinon": "^7.5.0",
-    "aws-sdk": "^2.556.0",
+    "aws-sdk": "^2.568.0",
     "aws-sdk-mock": "^4.5.0",
-    "cdk-build-tools": "file:../../../tools/cdk-build-tools",
-    "cdk-integ-tools": "file:../../../tools/cdk-integ-tools",
-    "cfn2ts": "file:../../../tools/cfn2ts",
-    "nock": "^11.6.0",
-    "pkglint": "file:../../../tools/pkglint",
+    "cdk-build-tools": "1.16.0",
+    "cdk-integ-tools": "1.16.0",
+    "cfn2ts": "1.16.0",
+    "nock": "^11.7.0",
+    "pkglint": "1.16.0",
     "sinon": "^7.5.0"
   },
   "dependencies": {
-    "@aws-cdk/aws-cloudformation": "1.15.0",
-    "@aws-cdk/aws-iam": "1.15.0",
-    "@aws-cdk/aws-lambda": "1.15.0",
-    "@aws-cdk/aws-sns": "1.15.0",
-    "@aws-cdk/core": "1.15.0"
+    "@aws-cdk/aws-cloudformation": "1.16.0",
+    "@aws-cdk/aws-iam": "1.16.0",
+    "@aws-cdk/aws-lambda": "1.16.0",
+    "@aws-cdk/aws-sns": "1.16.0",
+    "@aws-cdk/aws-stepfunctions": "1.16.0",
+    "@aws-cdk/aws-stepfunctions-tasks": "1.16.0",
+    "@aws-cdk/core": "1.16.0"
   },
   "homepage": "https://github.com/aws/aws-cdk",
   "peerDependencies": {
-    "@aws-cdk/aws-cloudformation": "1.15.0",
-    "@aws-cdk/aws-iam": "1.15.0",
-    "@aws-cdk/aws-lambda": "1.15.0",
-    "@aws-cdk/aws-sns": "1.15.0",
-    "@aws-cdk/core": "1.15.0"
+    "@aws-cdk/aws-cloudformation": "1.16.0",
+    "@aws-cdk/aws-iam": "1.16.0",
+    "@aws-cdk/aws-lambda": "1.16.0",
+    "@aws-cdk/aws-sns": "1.16.0",
+    "@aws-cdk/aws-stepfunctions": "1.16.0",
+    "@aws-cdk/aws-stepfunctions-tasks": "1.16.0",
+    "@aws-cdk/core": "1.16.0"
   },
+  "jest": {
+    "moduleFileExtensions": [
+      "js"
+    ],
+    "coverageThreshold": {
+      "global": {
+        "branches": 70,
+        "statements": 80
+      }
+    }
+  },
   "engines": {
@@ -107,5 +124,9 @@ "node": ">= 10.3.0"
     "exclude": [
-      "construct-ctor-props-optional:@aws-cdk/custom-resources.AwsCustomResource"
+      "construct-ctor-props-optional:@aws-cdk/custom-resources.AwsCustomResource",
+      "props-physical-name:@aws-cdk/custom-resources.AsyncCustomResourceProps",
+      "docs-public-apis:@aws-cdk/custom-resources.AwsCustomResource",
+      "docs-public-apis:@aws-cdk/custom-resources.AwsCustomResourceProps",
+      "props-default-doc:@aws-cdk/custom-resources.AwsSdkCall.parameters"
     ]
   }
-}
+}

README.md

@@ -1,2 +0,3 @@
-## CDK Custom Resources
+# AWS CDK Custom Resources
+
 <!--BEGIN STABILITY BANNER-->
@@ -17,6 +18,272 @@
 <!--END STABILITY BANNER-->
+- [Provider Framework](#provider-framework)
+  - [Handling Lifecycle Events: onEvent](#handling-lifecycle-events-onevent)
+  - [Asynchronous Providers: isComplete](#asynchronous-providers-iscomplete)
+  - [Physical Resource IDs](#physical-resource-ids)
+  - [Error Handling](#error-handling)
+  - [Execution Policy](#execution-policy)
+  - [Timeouts](#timeouts)
+  - [Examples](#examples)
+- [Custom Resources for AWS APIs](#custom-resources-for-aws-apis)
+  - [Execution Policy](#execution-policy-1)
+  - [Examples](#examples-1)
 
-This module is part of the [AWS Cloud Development Kit](https://github.com/aws/aws-cdk) project.
 
-#### AWS Custom Resource
+## Provider Framework
+
+AWS CloudFormation [custom resources] are extension points to the provisioning
+engine. When CloudFormation needs to create, update or delete a custom resource,
+it sends a lifecycle event notification to a **custom resource provider**. The provider
+handles the event (e.g. creates a resource) and sends back a response to CloudFormation.
+
+The `@aws-cdk/custom-resources.Provider` construct is a "mini-framework" for
+implementing providers for AWS CloudFormation custom resources. The framework offers a high-level API which makes it easier to implement robust
+and powerful custom resources and includes the following capabilities:
+
+* Handles responses to AWS CloudFormation and protects against blocked
+  deployments
+* Validates handler return values to help with correct handler implementation
+* Supports asynchronous handlers to enable long operations which can exceed the AWS Lambda timeout
+* Implements default behavior for physical resource IDs.
+
+The following code shows how the `Provider` construct is used in conjunction
+with `cfn.CustomResource` and a user-provided AWS Lambda function which
+implements the actual handler.
+
+```ts
+import cr = require('@aws-cdk/custom-resources');
+import cfn = require('@aws-cdk/aws-cloudformation');
+
+const onEvent = new lambda.Function(this, 'MyHandler', { /* ... */ });
+
+const myProvider = new cr.Provider(this, 'MyProvider', {
+  onEventHandler: onEvent
+});
+
+new cfn.CustomResource(this, 'Resource1', { provider: myProvider });
+new cfn.CustomResource(this, 'Resource2', { provider: myProvider });
+```
+
+Providers are implemented through AWS Lambda functions that are triggered by the
+provider framework in response to lifecycle events.
+
+At the minimum, users must define the `onEvent` handler, which is invoked by the
+framework for all resource lifecycle events (`Create`, `Update` and `Delete`)
+and returns a result which is then submitted to CloudFormation.
+
+Users may also provide an additional handler called `isComplete`, for cases
+where the lifecycle operation cannot be completed immediately. The
+`isComplete` handler will be retried asynchronously after `onEvent` until it
+returns `IsComplete: true`, or until the total provider timeout has expired.
+
+[custom resources]: (https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/template-custom-resources.html).
+
+### Handling Lifecycle Events: onEvent
+
+The user-defined `onEvent` AWS Lambda function is invoked whenever a resource
+lifecycle event occurs. The function is expected to handle the event and return
+a response to the framework that, at least, includes the physical resource ID.
+
+If `onEvent` returns successfully, the framework will submit a "SUCCESS" response
+to AWS CloudFormation for this resource operation.  If the provider is
+[asynchronous](#asynchronous-providers-iscomplete) (`isCompleteHandler` is
+defined), the framework will only submit a response based on the result of
+`isComplete`. 
+
+If `onEvent` throws an error, the framework will submit a "FAILED" response to
+AWS CloudFormation.
+
+The input event includes the following fields derived from the [Custom Resource
+Provider Request]:
+
+|Field|Type|Description
+|-----|----|----------------
+|`RequestType`|String|The type of lifecycle event: `Create`, `Update` or `Delete`.
+|`LogicalResourceId`|String|The template developer-chosen name (logical ID) of the custom resource in the AWS CloudFormation template.
+|`PhysicalResourceId`|String|This field will only be present for `Update` and `Delete` events and includes the value returned in `PhysicalResourceId` of the previous operation.
+|`ResourceProperties`|JSON|This field contains the properties defined in the template for this custom resource.
+|`OldResourceProperties`|JSON|This field will only be present for `Update` events and contains the resource properties that were declared previous to the update request.
+|`ResourceType`|String|The resource type defined for this custom resource in the template. A provider may handle any number of custom resource types.
+|`RequestId`|String|A unique ID for the request.
+|`StackId`|String|The ARN that identifies the stack that contains the custom resource.
+
+The return value from `onEvent` must be a JSON object with the following fields:
+
+|Field|Type|Required|Description
+|-----|----|--------|-----------
+|`PhysicalResourceId`|String|No|The allocated/assigned physical ID of the resource. If omitted for `Create` events, the event's `RequestId` will be used. For `Update`, the current physical ID will be used. If a different value is returned, CloudFormation will follow with a subsequent `Delete` for the previous ID (resource replacement). For `Delete`, it will always return the current physical resource ID, and if the user returns a different one, an error will occur.
+|`Data`|JSON|No|Resource attributes, which can later be retrieved through `Fn::GetAtt` on the custom resource object.
+
+[Custom Resource Provider Request]: https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/crpg-ref-requests.html#crpg-ref-request-fields
+
+### Asynchronous Providers: isComplete
+
+It is not uncommon for the provisioning of resources to be an asynchronous
+operation, which means that the operation does not immediately finish, and we
+need to "wait" until the resource stabilizes. 
+
+The provider framework makes it easy to implement "waiters" by allowing users to
+specify an additional AWS Lambda function in `isCompleteHandler`. 
+
+The framework will repeatedly invoke the handler every `queryInterval`. When
+`isComplete` returns with `IsComplete: true`, the framework will submit a
+"SUCCESS" response to AWS CloudFormation. If `totalTimeout` expires and the
+operation has not yet completed, the framework will submit a "FAILED" response
+with the message "Operation timed out".
+
+If an error is thrown, the framework will submit a "FAILED" response to AWS
+CloudFormation.
+
+The input event to `isComplete` is similar to
+[`onEvent`](#handling-lifecycle-events-onevent), with an additional guarantee
+that `PhysicalResourceId` is defines and contains the value returned from
+`onEvent` or the described default. At any case, it is guaranteed to exist.
+
+The return value must be a JSON object with the following fields:
+
+|Field|Type|Required|Description
+|-----|----|--------|-----------
+|`IsComplete`|Boolean|Yes|Indicates if the operation has finished or not.
+|`Data`|JSON|No|May only be sent if `IsComplete` is `true` and includes additional resource attributes. These attributes will be **merged** with the ones returned from `onEvent`
+
+### Physical Resource IDs
+
+Every resource in CloudFormation has a physical resource ID. When a resource is
+created, the `PhysicalResourceId` returned from the `Create` operation is stored
+by AWS CloudFormation and assigned to the logical ID defined for this resource
+in the template. If a `Create` operation returns without a `PhysicalResourceId`,
+the framework will use `RequestId` as the default. This is sufficient for
+various cases such as "pseudo-resources" which only query data.
+
+For `Update` and `Delete` operations, the resource event will always include the
+current `PhysicalResourceId` of the resource.
+
+When an `Update` operation occurs, the default behavior is to return the current
+physical resource ID. if the `onEvent` returns a `PhysicalResourceId` which is
+different from the current one, AWS CloudFormation will treat this as a
+**resource replacement**, and it will issue a subsequent `Delete` operation for
+the old resource.
+
+As a rule of thumb, if your custom resource supports configuring a physical name
+(e.g. you can specify a `BucketName` when you define an `AWS::S3::Bucket`), you
+must return this name in `PhysicalResourceId` and make sure to handle
+replacement properly. The `S3File` example demonstrates this
+through the `objectKey` property.
+
+### Error Handling
+
+As mentioned above, if any of the user handlers fail (i.e. throws an exception)
+or times out (due to their AWS Lambda timing out), the framework will trap these
+errors and submit a "FAILED" response to AWS CloudFormation, along with the error
+message.
+
+Since errors can occur in multiple places in the provider (framework, `onEvent`,
+`isComplete`), it is important to know that there could situations where a
+resource operation fails even though the operation technically succeeded (i.e.
+isComplete throws an error).
+
+When AWS CloudFormation receives a "FAILED" response, it will attempt to roll
+back the stack to it's last state. This has different meanings for different
+lifecycle events:
+
+- If a `Create` event fails, CloudFormation will issue a `Delete` event to allow
+  the provider to clean up any unfinished work related to the creation of the
+  resource. The implication of this is that it is recommended to implement
+  `Delete` in an idempotent way, in order to make sure that the rollback
+  `Delete` operation won't fail if a resource creation has failed.
+- If an `Update` event fails, CloudFormation will issue an additional `Update`
+  with the previous properties.
+- If a `Delete` event fails, CloudFormation will abandon this resource.
+
+### Execution Policy
+
+Similarly to any AWS Lambda function, if the user-defined handlers require
+access to AWS resources, you will have to define these permissions  
+by calling "grant" methods such as `myBucket.grantRead(myHandler)`), using `myHandler.addToRolePolicy`
+or specifying an `initialPolicy` when defining the function.
+
+Bear in mind that in most cases, a single provider will be used for multiple
+resource instances. This means that the execution policy of the provider must
+have the appropriate privileges.
+
+The following example grants the `onEvent` handler `s3:GetObject*` permissions
+to all buckets:
+
+```ts
+new lambda.Function(this, 'OnEventHandler', {
+  // ...
+  initialPolicy: [
+    new iam.PolicyStatement({ actions: [ 's3:GetObject*' ], resources: [ '*' ] })
+  ]
+});
+```
+
+### Timeouts
+
+Users are responsible to define the timeouts for the AWS Lambda functions for
+user-defined handlers. It is recommended not to exceed a **14 minutes** timeout,
+since all framework functions are configured to time out after 15 minutes, which
+is the maximal AWS Lambda timeout.
+
+If your operation takes over **14 minutes**, the recommended approach is to
+implement an [asynchronous provider](#asynchronous-providers-iscomplete), and
+then configure the timeouts for the asynchronous retries through the
+`queryInterval` and the `totalTimeout` options.
+
+### Examples
+
+This module includes a few examples for custom resource implementations:
+
+#### S3File
+
+Provisions an object in an S3 bucket with textual contents. See the source code
+for the
+[construct](test/provider-framework/integration-test-fixtures/s3-file.ts) and
+[handler](test/provider-framework/integration-test-fixtures/s3-file-handler/index.ts).
+
+The following example will create the file `folder/file1.txt` inside `myBucket`
+with the contents `hello!`.
+
+
+```ts
+new S3File(this, 'MyFile', {
+  bucket: myBucket,
+  objectKey: 'folder/file1.txt', // optional
+  content: 'hello!',
+  public: true // optional
+});
+```
+
+This sample demonstrates the following concepts:
+
+- Synchronous implementation (`isComplete` is not defined)
+- Automatically generates the physical name if `objectKey` is not defined
+- Handles physical name changes
+- Returns resource attributes
+- Handles deletions
+- Implemented in TypeScript
+
+#### S3Assert
+
+Checks that the textual contents of an S3 object matches a certain value. The check will be retried for 5 minutes as long as the object is not found or the value is different. See the source code for the [construct](test/provider-framework/integration-test-fixtures/s3-assert.ts) and [handler](test/provider-framework/integration-test-fixtures/s3-assert-handler/index.py).
+
+The following example defines an `S3Assert` resource which waits until
+`myfile.txt` in `myBucket` exists and includes the contents `foo bar`:
+
+```ts
+new S3Assert(this, 'AssertMyFile', {
+  bucket: myBucket,
+  objectKey: 'myfile.txt',
+  expectedContent: 'foo bar'
+});
+```
+
+This sample demonstrates the following concepts:
+
+- Asynchronous implementation
+- Non-intrinsic physical IDs
+- Implemented in Python
+
+## Custom Resources for AWS APIs
+
 Sometimes a single API call can fill the gap in the CloudFormation coverage. In
@@ -39,6 +306,41 @@ this case you can use the `AwsCustomResource` construct. This construct creates
 
-##### Examples
-Verify a domain with SES:
+### Execution Policy
 
+IAM policy statements required to make the API calls are derived from the calls
+and allow by default the actions to be made on all resources (`*`). You can
+restrict the permissions by specifying your own list of statements with the
+`policyStatements` prop. The custom resource also implements `iam.IGrantable`,
+making it possible to use the `grantXxx()` methods.
+
+As this custom resource uses a singleton Lambda function, it's important to note
+that the function's role will eventually accumulate the permissions/grants from all
+resources.
+
+Chained API calls can be achieved by creating dependencies:
 ```ts
+const awsCustom1 = new AwsCustomResource(this, 'API1', {
+  onCreate: {
+    service: '...',
+    action: '...',
+    physicalResourceId: '...'
+  }
+});
+
+const awsCustom2 = new AwsCustomResource(this, 'API2', {
+  onCreate: {
+    service: '...',
+    action: '...'
+    parameters: {
+      text: awsCustom1.getData('Items.0.text')
+    },
+    physicalResourceId: '...'
+  }
+})
+```
+
+### Examples
+
+#### Verify a domain with SES
+
+```ts
 const verifyDomainIdentity = new AwsCustomResource(this, 'VerifyDomainIdentity', {
@@ -61,3 +363,3 @@ onCreate: {
 
-Get the latest version of a secure SSM parameter:
+#### Get the latest version of a secure SSM parameter
 
@@ -81,27 +383,6 @@ ```ts
 
-IAM policy statements required to make the API calls are derived from the calls
-and allow by default the actions to be made on all resources (`*`). You can
-restrict the permissions by specifying your own list of statements with the
-`policyStatements` prop.
 
-Chained API calls can be achieved by creating dependencies:
-```ts
-const awsCustom1 = new AwsCustomResource(this, 'API1', {
-  onCreate: {
-    service: '...',
-    action: '...',
-    physicalResourceId: '...'
-  }
-});
 
-const awsCustom2 = new AwsCustomResource(this, 'API2', {
-  onCreate: {
-    service: '...',
-    action: '...'
-    parameters: {
-      text: awsCustom1.getData('Items.0.text')
-    },
-    physicalResourceId: '...'
-  }
-})
-```
+---
+
+This module is part of the [AWS Cloud Development Kit](https://github.com/aws/aws-cdk) project.

tsconfig.json

@@ -48,2 +48,8 @@ {
     {
+      "path": "../aws-stepfunctions"
+    },
+    {
+      "path": "../aws-stepfunctions-tasks"
+    },
+    {
       "path": "../core"
@@ -58,2 +64,5 @@ },
     {
+      "path": "../aws-s3"
+    },
+    {
       "path": "../aws-ssm"
@@ -65,2 +74,8 @@ },
     {
+      "path": "../../../tools/cdk-integ-tools"
+    },
+    {
+      "path": "../../../tools/cfn2ts"
+    },
+    {
       "path": "../../../tools/pkglint"
@@ -67,0 +82,0 @@ }

New alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Major refactor

Supply chain risk

Package has recently undergone a major refactor. It may be unstable or indicate significant internal changes. Use caution when updating to versions that include significant changes.

Found 1 instance in 1 package

Network access

Supply chain risk

This module accesses the network.

Found 1 instance in 1 package

Environment variable access

Supply chain risk

Package accesses environment variables, which may be a sign of credential stuffing or data theft.

Found 1 instance in 1 package

Filesystem access

Supply chain risk

Accesses the file system, and could potentially read sensitive data.

Found 1 instance in 1 package

Fixed alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Improved metrics

Total package byte prevSize

420879

increased by147.95%

Number of package files

57

increased by185%

Lines of code

4560

increased by128.92%

Number of lines in readme file

385

increased by270.19%

Worsened metrics

Dependency count

14

increased by40%

Dev dependency count

14

increased by7.69%

Number of low supply chain risk alerts

7

increased byInfinity%

Number of medium supply chain risk alerts

3

increased by200%

Dependency changes

• + Added@aws-cdk/aws-stepfunctions@1.16.0

• + Added@aws-cdk/aws-stepfunctions-tasks@1.16.0

• + Added@aws-cdk/assets@1.16.0(transitive)

• + Added@aws-cdk/aws-apigateway@1.16.0(transitive)

• + Added@aws-cdk/aws-applicationautoscaling@1.16.0(transitive)

• + Added@aws-cdk/aws-autoscaling@1.16.0(transitive)

• + Added@aws-cdk/aws-autoscaling-common@1.16.0(transitive)

• + Added@aws-cdk/aws-autoscaling-hooktargets@1.16.0(transitive)

• + Added@aws-cdk/aws-certificatemanager@1.16.0(transitive)

• + Added@aws-cdk/aws-cloudformation@1.16.0(transitive)

• + Added@aws-cdk/aws-cloudfront@1.16.0(transitive)

• + Added@aws-cdk/aws-cloudwatch@1.16.0(transitive)

• + Added@aws-cdk/aws-ec2@1.16.0(transitive)

• + Added@aws-cdk/aws-ecr@1.16.0(transitive)

• + Added@aws-cdk/aws-ecr-assets@1.16.0(transitive)

• + Added@aws-cdk/aws-ecs@1.16.0(transitive)

• + Added@aws-cdk/aws-elasticloadbalancing@1.16.0(transitive)

• + Added@aws-cdk/aws-elasticloadbalancingv2@1.16.0(transitive)

• + Added@aws-cdk/aws-events@1.16.0(transitive)

• + Added@aws-cdk/aws-iam@1.16.0(transitive)

• + Added@aws-cdk/aws-kms@1.16.0(transitive)

• + Added@aws-cdk/aws-lambda@1.16.0(transitive)

• + Added@aws-cdk/aws-logs@1.16.0(transitive)

• + Added@aws-cdk/aws-route53@1.16.0(transitive)

• + Added@aws-cdk/aws-route53-targets@1.16.0(transitive)

• + Added@aws-cdk/aws-s3@1.16.0(transitive)

• + Added@aws-cdk/aws-s3-assets@1.16.0(transitive)

• + Added@aws-cdk/aws-secretsmanager@1.16.0(transitive)

• + Added@aws-cdk/aws-servicediscovery@1.16.0(transitive)

• + Added@aws-cdk/aws-sns@1.16.0(transitive)

• + Added@aws-cdk/aws-sns-subscriptions@1.16.0(transitive)

• + Added@aws-cdk/aws-sqs@1.16.0(transitive)

• + Added@aws-cdk/aws-ssm@1.16.0(transitive)

• + Added@aws-cdk/aws-stepfunctions@1.16.0(transitive)

• + Added@aws-cdk/aws-stepfunctions-tasks@1.16.0(transitive)

• + Added@aws-cdk/core@1.16.0(transitive)

• + Added@aws-cdk/cx-api@1.16.0(transitive)

• + Added@aws-cdk/region-info@1.16.0(transitive)

• - Removed@aws-cdk/assets@1.15.0(transitive)

• - Removed@aws-cdk/aws-cloudformation@1.15.0(transitive)

• - Removed@aws-cdk/aws-cloudwatch@1.15.0(transitive)

• - Removed@aws-cdk/aws-ec2@1.15.0(transitive)

• - Removed@aws-cdk/aws-events@1.15.0(transitive)

• - Removed@aws-cdk/aws-iam@1.15.0(transitive)

• - Removed@aws-cdk/aws-kms@1.15.0(transitive)

• - Removed@aws-cdk/aws-lambda@1.15.0(transitive)

• - Removed@aws-cdk/aws-logs@1.15.0(transitive)

• - Removed@aws-cdk/aws-s3@1.15.0(transitive)

• - Removed@aws-cdk/aws-s3-assets@1.15.0(transitive)

• - Removed@aws-cdk/aws-sns@1.15.0(transitive)

• - Removed@aws-cdk/aws-sqs@1.15.0(transitive)

• - Removed@aws-cdk/aws-ssm@1.15.0(transitive)

• - Removed@aws-cdk/core@1.15.0(transitive)

• - Removed@aws-cdk/cx-api@1.15.0(transitive)

• - Removed@aws-cdk/region-info@1.15.0(transitive)

• Updated@aws-cdk/aws-cloudformation@1.16.0

• Updated@aws-cdk/aws-iam@1.16.0

• Updated@aws-cdk/aws-lambda@1.16.0

• Updated@aws-cdk/aws-sns@1.16.0

• Updated@aws-cdk/core@1.16.0