0.28.0 (2019-04-04)

Bug Fixes

• aws-ecs: use executionRole for event rule target (#2165) (aa6f7bc), closes #2015

• core: remove cdk.Secret (#2068) (b53d04d), closes #2064

• feat(aws-iam): refactor grants, add OrganizationPrincipal (#1623) (1bb8ca9), closes #1623 #236

Code Refactoring

• cdk: introduce SecretValue to represent secrets (#2161) (a3d9f2e)

Features

• codepipeline: move all of the Pipeline Actions to their dedicated package. (#2098) (b314ecf)
• codepipeline: re-factor the CodePipeline Action bind method to take a Role separately from the Pipeline. (#2085) (ffe0046)
• ec2: support reserving IP space in VPCs (#2090) (4819ff4)
• Add python support to cdk init (#2130) (997dbcc)
• ecs: support AWS Cloud Map (service discovery) (#2065) (4864cc8), closes #1554
• lambda: add a newVersion method. (#2099) (6fc179a)
• update CloudFormation resource spec to v2.29.0 (#2170) (ebc490d)

BREAKING CHANGES TO EXPERIMENTAL FEATURES

• The secretsmanager.SecretString class has been removed in favor of cdk.SecretValue.secretsManager(id[, options])
• The following prop types have been changed from string to cdk.SecretValue: codepipeline-actions.AlexaSkillDeployAction.clientSecret, codepipeline-actions.AlexaSkillDeployAction.refreshToken, codepipeline-actions.GitHubSourceAction.oauthToken, iam.User.password
• secretsmanager.Secret.stringValue and jsonFieldValue have been removed. Use secretsmanage.Secret.secretValue and secretJsonValue instead.
• secretsmanager.Secret.secretString have been removed. Use cdk.SecretValue.secretsManager() or secretsmanager.Secret.import(..).secretValue.
• The class cdk.Secret has been removed. Use cdk.SecretValue instead.
• The class cdk.DynamicReference is no longer a construct, and it's constructor signature was changed and was renamed cdk.CfnDynamicReference.
• grant(function.role) and grant(project.role) are now grant(function) and grant(role).
• core: Replace use of cdk.Secret with secretsmanager.SecretString (preferred) or ssm.ParameterStoreSecureString.
• codepipeline: this changes the package of all CodePipeline Actions to be aws-codepipeline-actions.
• codepipeline: this moves all classes from the aws-codepipeline-api package to the aws-codepipeline package.
• codepipeline: this changes the CodePipeline Action naming scheme from <service>.Pipeline<Category>Action (s3.PipelineSourceAction) to codepipeline_actions.<Service><Category>Action (codepipeline_actions.S3SourceAction).

0.27.0 (2019-03-28)

Highlights

• Python support (experimental)
• You can now run the CLI through npx cdk
• Make sure to go through the BREAKING CHANGES section below

Bug Fixes

• autoscaling: verify public subnets for associatePublicIpAddress (#2077) (1e3d41e)
• ec2: descriptive error message when selecting 0 subnets (#2025) (0de2206), closes #2011
• lambda: use Alias ARN directly (#2091) (bc40494)
• rds: remove Instance class (#2081) (6699fed)
• secretsmanager: allow templated string creation (#2010) (4e105a3)
• secretsmanager/ssm: verify presence of parameter name (#2066) (b93350f)
• serverless: rename aws-serverless to aws-sam (#2074) (4a82f13)
• stepfunctions: make Fail.error optional (#2042) (86e9d03)

Code Refactoring

• readonly struct properties and hide internals (#2106) (66dd228), closes awslabs/cdk-ops#321

Features

• toolkit:: new 'cdk' package to allow executing the cli through npx cdk (#2113) (32bca05)
• Python Support (#2009) (e6083fa)
• core: present reason for cyclic references (#2061) (e82e208)
• lambda: add support for log retention (#2067) (63132ec), closes #667 #667
• rds: cluster retention, reference KMS key by object (#2063) (99ab46d)
• secretsmanager/rds: support credential rotation (#2052) (bf79c82)
• toolkit: introduce the concept of auto-deployed Stacks. (#2046) (abacc66)

BREAKING CHANGES TO EXPERIMENTAL FEATURES

• lambda: cloudWatchLogsRetentionTimeDays in @aws-cdk/aws-cloudtrail now uses a logs.RetentionDays instead of a LogRetention.
• core: stack._toCloudFormation method is now unavailable and is replaced by @aws-cdk/assert.SynthUtils.toCloudFormation(stack).
• rds: replaced kmsKeyArn: string by kmsKey: kms.IEncryptionKey in DatabaseClusterProps
• autoscaling: VpcNetwork.isPublicSubnet() has been renamed to VpcNetwork.isPublicSubnetIds().
• serverless: renamed aws-serverless to aws-sam
• ec2: vpcPlacement has been renamed to vpcSubnets on all objects, subnetsToUse has been renamed to subnetType. natGatewayPlacement has been renamed to natGatewaySubnets.
• All properties of all structs (interfaces that do not begin with an "I") are now readonly since it is passed by-value and not by-ref (Python is the first language to require that). This may impact code in all languages that assumed it is possible to mutate these structs. Let us know if this blocks you in any way.

0.26.0 (2019-03-20)

Bug Fixes

• aws-cdk: fix VpcNetwork.importFromContext() (#2008) (e1a1a7b), closes #1998
• aws-cdk: update F# template to latest CDK version (#2006) (bda12f2)
• cdk: merge cloudFormation tags with aspect tags (#1762) (bfb14b6), closes #1725
• cfn2ts: properly de-Tokenize L1 string-arrays (#2033) (1e50383), closes #2030
• core: allow embedding condition expression as strings (#2007) (6afa87f), closes #1984
• ecs: make TaskDefinition accept IRoles (#2034) (f32431a), closes #1925
• lambda: expose underlying function's role on the alias (#2024) (de296de)
• stepfunctions: Actually perform rendering of NotCondition (06b59d9)
• toolkit: 'cdk deploy' support updates to Outputs (#2029) (23509ae), closes #778
• toolkit: increase number of retries (#2053) (133dc98), closes #1647
• rename core classes adding a Cfn prefix (#1960) (5886bf6), closes #1462 #288

Code Refactoring

• name "toCloudFormation" internal (renamed to _toCloudFormation) (#2047) (515868b), closes #2044 #2016

Features

• aws-cdk: support fixed repository name for DockerImageAsset (#2032) (942f938)
• aws-rds: ability to add an existing security group to RDS cluster (#2021) (1f24336)
• cfn2ts: make cfn2ts output TSDoc-compatible docblocks (#2000) (c6c66e9)
• cfnspec: update to version 2.28.0 (#2035) (6a671f2)
• cloudformation: allow specifying additional inputs for deploy Actions (#2020) (2d463be), closes #1247
• core: can use Constructs to model applications (#1940) (32c2377), closes #1479
• ecs: support private registry authentication (#1737) (11ed691), closes #1698
• glue: add L2 resources for Database and Table (#1988) (3117cd3)
• region-info: Model region-specific information (#1839) (946b444), closes #1282
• servicediscovery: AWS Cloud Map construct library (#1804) (1187366)
• ses: add constructs for email receiving (#1971) (3790858)
• add more directories excluded and treated as source in the JetBrains script. (#1961) (a1df717)

BREAKING CHANGES TO EXPERIMENTAL FEATURES

• “toCloudFormation” is now internal and should not be called directly. Instead use “app.synthesizeStack”
• ecs: ContainerImage.fromDockerHub has been renamed to ContainerImage.fromRegistry.
• rename Condition to CfnCondition.
• rename StackElement to CfnElement.
• rename Parameter to CfnParameter.
• rename Resource to CfnResource.
• rename Output to CfnOutput.
• rename Mapping to CfnMapping.
• rename Referenceable to CfnRefElement.
• rename IConditionExpression to ICfnConditionExpression.
• rename CfnReference to Reference.
• rename Rule to CfnRule.

0.25.3 (2019-03-12)

Bug Fixes

• aws-cloudtrail: correct created log policy when sendToCloudWatchLogs is true (#1966) (f06ff8e)
• aws-ec2: All SSM WindowsVersion entries (#1977) (85a1840)
• decdk: relax validation when not using constructs (#1999) (afbd591)

Features

• core: add fsharp init-template (#1912) (dfefb58)
• ec2: vpn metrics (#1979) (9319e13)