@aws-cdk/cx-api - npm Package Versions

1.86.0 (2021-01-21)

Features

• cfnspec: cloudformation spec v24.0.0 (#12615) (98ebe96), closes #12474
• cognito: allow to set read and write attributes in Cognito UserPoolClient (#7607) (552e1e9), closes #7407
• ec2: Support for new EBS types (#12074) (6a2ce55), closes #12071
• elasticsearch: UltraWarm nodes (#12265) (3a9056d), closes #6462
• s3: Bucket keys (#12376) (d126fcc), closes #11828

Bug Fixes

• apigateway: cannot remove first api key from usage plan (#12505) (96cbe32), closes #11876
• aws-ecs: Invalid user data defined for windows autoscaling groups (#12585) (638b995), closes #12583
• ec2: Vpc.fromVpcAttributes cannot be used with EKS (#12569) (1cdc244), closes #12040 #12160
• iam: Groups are erroneously accepted as the Principal of a policy (#11479) (#12549) (c9b0859)
• synthetics: default execution role breaks in non aws partitions (#12096) (c01272c), closes #12094

1.85.0 (2021-01-14)

• s3-deployment: This version includes an important update, please upgrade to prevent deployment failure. This is in prepartion of Lambda deprecation of the request module in boto, more details are available in AWS blog. Note, users of versions < 1.81.0 will not be impacted by this deprecation, but are still encouraged to upgrade to the latest version.
• s3: The grantWrite() and grantReadWrite() methods no longer add the s3:PutObject* permissions that included s3:PutObjectAcl, which could be used to grant read/write object access to IAM principals in other accounts. This change is gated behind the @aws-cdk/aws-s3:grantWriteWithoutAcl feature flag, so make sure to set it to true in the context key of your cdk.json file when upgrading. If you still need the principal to have s3:PutObjectAcl permissions after upgrading, use the new grantPutAcl() method.

Features

• apigatewayv2: http api - disable execute api endpoint (#12426) (1724da7), closes #12241
• appmesh: add listener TLS certificates for VirtualNodes and VirtualGateways (#11863) (175a257), closes #10051
• cfnspec: CloudFormation resource specification update to v23.0.0 (#12490) (a7a2236)

Bug Fixes

• appsync: rds data source configured with cluster arn (#12255) (d0305f3), closes #11536
• aws-ecs: Support configuring Windows capacity for cluster ASGs (#12365) (6d9a0f1)
• eks: aws-node-termination-handler incorrectly deployed to on-demand instances as well (#12369) (05c0b5f), closes #12368
• s3: Bucket.grantWrite() no longer adds s3:PutObject* permission (#12391) (cd437cf)
• s3-deployment: stop using deprecated API's that will cause breakage post 01/31/21 (#12491) (f50f928)
• sns: require topic name for fifo topic #12386 (#12437) (37d8ccc)

1.84.0 (2021-01-12)

⚠ BREAKING CHANGES TO EXPERIMENTAL FEATURES

• apigatewayv2: subnets prop in VpcLink resource now takes SubnetSelection instead of ISubnet[]

Features

• aws-lambda-nodejs: add esbuild define bundling option (#12424) (581f6af), closes #12423
• cdk-assets: add external asset support (#12259) (05a9980)
• cli: --quiet does not print template in cdk synth (#12178) (74458a0), closes #11970
• codebuild: support Standard 5.0 (#12434) (422dc8e), closes #12433
• core: validate maximum amount of resources in a stack (#12193) (26121c8), closes #276
• eks: spot interruption handler can be disabled for self managed nodes (#12453) (6ac1f4f), closes #12451
• synthetics: Update Cloudwatch Synthetics canaries NodeJS runtimes (#11866) (4f6e377), closes #11870

Bug Fixes

• apigatewayv2: vpclink - explicit subnet specification still causes private subnets to be included (#12401) (336a58f), closes #12083
• cli: CLI doesn't read context from ~/.cdk.json (#12394) (2389a9b), closes #10823 #4802
• core: DefaultStackSynthesizer bucket prefix missing for template assets (#11855) (50a3d3a), closes #10710 #11327
• dynamodb: missing grantRead for ConditionCheckItem (#12313) (e157007)
• ec2: interface endpoint AZ lookup does not guard against broken situations (#12033) (80f0bfd)
• eks: nodegroup synthesis fails when configured with an AMI type that is not compatible to the default instance type (#12441) (5f6f0f9), closes #12389
• elasticsearch: domain fails due to log publishing keys on unsupported cluster versions (#11622) (e6bb96f)
• elbv2: can't import two application listeners into the same scope (#12373) (6534dcf), closes #12132
• logs: custom resource Lambda uses old NodeJS version (#12228) (29c4943)
• stepfunctions-tasks: EvaluateExpression does not support JSON paths with dash (#12248) (da1ed08), closes #12221

1.83.0 (2021-01-06)

Features

• aws-cloudfront: support minimum security protocol (#12231) (40976d9), closes #12199
• aws-kms: support waiting period (#12224) (9f451bd), closes #12218
• cfnspec: cloudformation spec v22.0.0 (#12204) (a5be2e9), closes #12170 #11974 #12114 #12028
• cloudfront: allow to specify stack ID for Lambda@Edge (#12163) (049e70c), closes #12136
• cloudwatch: full precision for SingleValueWidgets (#12274) (45d78f0), closes #8940 #12066
• codecommit: HTTPS GRC clone URL (#12312) (36b081e)
• ec2: add m6gd and r6gd metadata (#12302) (ce4eb20), closes #12301
• sns: fifo topic with content-based deduplication support #11127 (#11588) (7e60d8e)

Bug Fixes

• aws-ecs: update desired count to be optional (#12223) (455540b)
• cli: cross account asset upload no longer works (#12155) (1c8cb11)
• cloudfront: cross-region EdgeFunction does not work within a Stage (#12103) (98d781c), closes #12092
• cloudfront: EdgeFunction fails with newStyleStackSynthesis (#12356) (fb02736), closes #12172
• lambda: make the Version hash calculation stable (#12364) (4da50e5)
• rds: add the dependency on proxy targets to ensure dbInstance (#12237) (8f74169), closes #11311
• cli: IAM differences table printing is broken (#12330) (062bf5f)

1.82.0 (2021-01-03)

⚠ BREAKING CHANGES TO EXPERIMENTAL FEATURES

• eks: Existing self managed nodes may loose the ability to host additional services of type LoadBalancer . See https://github.com/aws/aws-cdk/pull/12269#issuecomment-752161190 for possible mitigations.

Bug Fixes

• eks: Self managed nodes cannot be added to LoadBalancers created via the LoadBalancer service type (#12269) (470a881)
• lambda-layer-*: unable to calculate layer asset hash due to missing file (#12293) (646f098), closes #12291

1.81.0 (2020-12-30)

⚠ BREAKING CHANGES TO EXPERIMENTAL FEATURES

• eks: the @aws-cdk/eks.KubectlLayer layer class has been moved to @aws-cdk/lambda-layer-kubectl.KubectlLayer.

Features

• codebuild: add webhookTriggersBatchBuild option to third-party Git sources (#11743) (d9353b7), closes #11663
• codebuild: prevent using Secrets in plain-text environment variables (#12150) (998af8f)
• ecs: deployment circuit breaker support (#12168) (e8801a0)
• ecs-patterns: containerName for QueueProcessingEc2Service (88d4149), closes #10517
• Configre containerName for QueueProcessingFargateService (fad27f6)
• eks: aws-node-termination-handler for spot instances now pulls the image from public ECR (#12141) (c752fab), closes #12134
• eks: bundle kubectl, helm and awscli instead of SAR app (#12129) (63bc98f), closes #11874
• eks: option to disable manifest validation (#12012) (579b923), closes #11763
• eks: spot support for managed nodegroups (#11962) (6ccd00f), closes #11827
• elasticsearch: add support for version 7_8 and 7_9 (#12222) (09d1f6c), closes #12202
• elasticsearch: Support EnableVersionUpgrade update policy (#12239) (14f8b06), closes #12210
• rds: add grantConnect for RDS Proxy (#12243) (eb45ca8), closes #10133
• rds: add support for setting public accessibility (#12164) (b8f48e5), closes #12093
• s3: option to auto delete objects upon bucket removal (#12090) (32e9c23), closes #3297 #9751

Bug Fixes

• codebuild: missing permissions for SecretsManager environment variables (#12121) (1a13d8f)
• codebuild: Project lacks permissions to its log destinations (#12213) (b92ed51), closes #11444 #12179
• codepipeline-actions: use codebuild batch iam permissions when executeBatchBuild: true (#12181) (5279f37)
• elasticsearch: domain configured with access policies and a custom kms key fails to deploy (#11699) (245ee6a)

1.80.0 (2020-12-22)

⚠ BREAKING CHANGES TO EXPERIMENTAL FEATURES

• eks: LegacyCluster was removed since it existed only for a transition period to allow gradual migration to the current cluster class.
• eks: kubectlEnabled property was removed, all clusters now support kubectl.
• core: Creation stack traces for Lazy values are no longer captured by default in order to speed up tests. Run with CDK_DEBUG=true (or cdk --debug) to capture stack traces.

Features

• ec2: Add VPC endpoints for Athena and Glue (#12073) (73ef6b1), closes #12072
• ecs-patterns: add ruleName optional parameter for ScheduledTask constructs (#12190) (b1318bd)
• eks: connect all custom resources to the cluster VPC (#10200) (eaa8222)
• lambda-nodejs: Expose optional props for advanced usage of esbuild (#12123) (ecc98ac)

Bug Fixes

• core: capturing stack traces still takes a long time (#12180) (71cd38c), closes #11170
• dynamodb: allow global replicas with Provisioned billing mode (#12159) (ab5a383), closes #11346
• lambda-nodejs: local bundling fails with relative depsLockFilePath (#12125) (d5afb55), closes #12115
• eks: Remove legacy and deprecated code (#12189) (6a20e61)

1.79.0 (2020-12-17)

⚠ BREAKING CHANGES TO EXPERIMENTAL FEATURES

• apigatewayv2: HttpApi.fromApiId() has been replaced with HttpApi.fromHttpApiAttributes().
• elasticsearch: ES Domain LogGroup LogicalId will change, which will trigger new log group resources to be created

Features

• appmesh: add timeout support to Routes (#11973) (78c185d)
• core: expose custom resource provider's role (#11923) (06f26d3), closes /github.com/aws/aws-cdk/pull/9751#issuecomment-723554595
• ec2: add r5b instance type to instance class (#12027) (d276b02), closes #12025
• ecs-patterns: Add DeploymentController option to Fargate services (#10452) (2cd233a), closes aws/containers-roadmap#130 #10971
• eks: attach cluster security group to self-managed nodes (#12042) (1078bea)
• elasticsearch: support audit logs (#12106) (d10ea63), closes #12105
• ivs: add IVS L2 Constructs (#11454) (f813bff)
• lambda: encryption key for environment variables (#11893) (ccbaf83), closes #10837
• lambda-nodejs: expose more esbuild options (#12063) (bab21b3), closes #12046
• route53: Vpc endpoint service private dns (#10780) (8f6f9a8)
• s3-deployment: support vpc in BucketDeploymentProps (#12035) (6caf72f), closes #11734
• stepfunctions-tasks: add support for ModelClientConfig to SageMakerCreateTransformJob (#11892) (bf05092)

Bug Fixes

• ec2: 'encoded list token' error using Vpc imported from deploy-time lists (#12040) (0690da9)

• ec2: fromInterfaceVpcEndpointAttributes: Security Groups should not be required (#11857) (86ae5d6), closes #11050

• eks: failure to deploy cluster since aws-auth configmap exists (#12068) (dc8a98a), closes #12053

• eks: k8s resources accidentally deleted due to logical ID change (#12053) (019852e), closes #10397 #10397

• elasticsearch: Defining 2 domains with logging enabled in the same stack fails on construct id conflict (#12055) (ec3ce19), closes #12017

• elasticsearch: log policies are overwritten when creating 2 domains which also results in a failure while destroying the stack (#12056) (889d089), closes #12016

• stepfunctions-tasks: policies created for EMR tasks have ARNs that are not partition-aware (#11553) (1cf6713), closes #11503

• apigatewayv2: apiEndpoint is elevated to the IHttpApi interface (#11988) (bc5b9b6)