v2.134.0

Features

• update L1 CloudFormation resource definitions (#29605) (bf34b6c)
• update L1 CloudFormation resource definitions (#29606) (432f97d)
• apigatewayv2: add missing WebSocketIntegration props (#29566) (7534dcd), closes #29562
• appsync: queryDepthLimit and resolverCountLimit props on GraphqlApi (#29182) (ba6d0b3)
• cli: warn of non-existent stacks in cdk destroy (#27921) (f0d1d67), closes #27179
• codepipeline-actions: show status reason in the pipeline for failed change set executions (#29534) (6d16337)
• eks: trainium instance types (#29155) (507b709), closes #29131
• elasticloadbalancingv2: denyAllIgwTraffic and clientRoutingPolicy for NLB (#29521) (7fe8ad3), closes #29520
• elasticloadbalancingv2: client keepalive for ALB (#29504) (9b79f94), closes #29503
• elasticloadbalancingv2: enforce security group inbound rules prop (#29522) (8df2823), closes #29516
• update L1 CloudFormation resource definitions (#29530) (1fdac0c)
• update L1 CloudFormation resource definitions (#29569) (c9fb4f7)
• update L1 CloudFormation resource definitions (#29573) (53d2094)
• rds: eliminating the need for explicit secret.grantRead() invokes when using DataAPI with Aurora cluster (#29399) (bc9d0b4), closes #29362 /github.com/aws/aws-cdk/pull/29338#discussion_r1512026791

Bug Fixes

• CLI: cdk diff stack deletion causes a race condition (#29492) (067539a), closes #29265
• cloudformation-diff: move aws-sdk to dependency for cfn-diff to get CFN types resolved in exports (#28768) (28c4be3), closes #28680 #28679
• cloudwatch: cloudwatch ec2 alarm action with multiple dimension results in error (#29364) (cc37778)
• cloudwatch: unrecognized statistic warning when using percentileRank statistic in Stats helper (#29498) (f2ad980), closes #29465
• ecs-patterns: integ test unable to create ECS service (#29490) (6faa60e), closes /github.com/aws/aws-cdk/pull/29186#issuecomment-1959231406
• elasticloadbalancingv2: allow alb slow start duration of 0 seconds (#29445) (cf2351b), closes #29437
• kms: kms key grant methods misidentify region when enclosing stack is different region (#29315) (9076d6e)
• opensearch: cannot disable cluster logging (#29205) (c7fcaf7), closes #29294

Reverts

• "feat(cli): warn of non-existent stacks in cdk destroy" (#29577) (f60e6e9), closes aws/aws-cdk#27921 40aws-cdk-testing/cli-integ/tests/cli-integ-tests/cli.integtest.ts#L190 /github.com/aws/aws-cdk/blob/07ce8ecc42782475d099b89944571375341c28d3/packages/aws-cdk/lib/api/cxapp/cloud-executable.ts#L86

---

Alpha modules (2.134.0-alpha.0)

Features

• kinesisanalytics-flink: add support for Flink 1.18 (#29554) (8fd8ee8), closes /docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-kinesisanalyticsv2-application.html#aws-resource-kinesisanalyticsv2

Bug Fixes

• glue: s3 path specified in --spark-event-logs-path needs to end with slash (#29357) (4ff3565), closes #29356

v2.133.0

Features

• CLI: improved nested stack diff (#29172) (135b520)
• codepipeline: change default pipeline type to V2 (under feature flag) (#29096) (e85231c), closes /github.com/aws/aws-cdk/pull/28538#discussion_r1471761574 /github.com/aws/aws-cdk/blob/main/packages/aws-cdk-lib/aws-codepipeline/lib/pipeline.ts#L492
• ec2: add APPCONFIG and APPCONFIGDATA to InterfaceVpcEndpointAwsService (#29408) (baaa50c)
• ecs-patterns: support securityGroups in NetworkLoadBalancedFargateService (#29431) (00e8a7b), closes #29430 /github.com/aws/aws-cdk/pull/29186#issuecomment-1959231406
• opensearchservice: cold storage option (#29387) (ce52c7e), closes #29366
• rds: proxy for mariadb (#29412) (6fef789), closes #29402
• stepfunctions-tasks: start glue crawler (#29016) (5592553), closes #24188
• update L1 CloudFormation resource definitions (#29438) (5b910f0)

Bug Fixes

• cli: cdk ls returns stack id instead of stack display name (#29447) (77189be), closes #29420
• lambda-nodejs: fixing esbuildArgs to take in account re-specified keys (#29167) (919d16f), closes #25385
• stepfunctions: the retry field in CustomState is not iterable (#29403) (a1fbd51), closes #29274

Reverts

• prevent changeset diff for non-deployed stacks (#29485) (fac4a9c), closes #29394 #29172

---

Alpha modules (2.133.0-alpha.0)

v2.132.1

Bug Fixes

• cli: cdk ls returns stack id instead of stack display name (#29447) (effad1c), closes #29420

---

Alpha modules (2.132.1-alpha.0)

v2.132.0

Features

• autoscaling: add support for InstanceRefresh suspended process (#29113) (f5e7717)
• autoscaling: support custom termination policy with lambda (#29340) (2ebb409), closes #19750
• codepipeline: executionMode property for Pipeline (#29148) (3bb2944), closes #29147
• ec2: add NAT instance V2 support using AL2023 (#29013) (7fa6bbf)
• elasticloadbalancingv2: health check interval greater than timeout (#29075) (576d034), closes #29062
• rds: add ability to specify PreferredMaintenanceWindow to RDS cluster database instances (#29033) (9c82bca), closes #16954
• rds: enable data api for aurora cluster (#29338) (82690f7), closes #28574
• stepfunctions-tasks: start build batch integration (#29296) (4f2b757), closes #29119
• list stack dependencies (#28995) (a7fac9d)
• update L1 CloudFormation resource definitions (#29349) (8b01f45)

Bug Fixes

• batch: windows does not support readonlyRootFilesystem (#29145) (7205143), closes #29140
• changelog: changelog for v2.131.0 has some errors (#29352) (1b56897)
• cli: prevent changeset diff for non-deployed stacks (#29394) (d33caff), closes #29265
• cloudwatch: allow up to 30 dimensions for metric (#29341) (ebe2adf), closes #29322
• custom-resources: correctly convert values to Date type (#28398) (38bdb92), closes /github.com/aws/aws-cdk/blob/1a9c30e55e58203bd0a61de82711cf10f1e04851/packages/aws-cdk-lib/custom-resources/lib/helpers-internal/sdk-v3-metadata.json#L174 #27962
• custom-resources: log statement exposes information prohibited by security guideline (#29406) (11621e7)
• ecs-patterns: resolve not being able to create ECS service in integ.alb-ecs-service-command-entry-point (#29333) (6a69d5b), closes /github.com/aws/aws-cdk/pull/29186#issuecomment-1959231406
• events_targets: installing latest aws sdk fails in cn partition (#29374) (f0383d6)
• events-targets: ecs:TagResource permission (#28898) (4af0dfc), closes #28854
• lambda-nodejs: support bundling aws-sdk as part of the bundled code asset (#29207) (2378635), closes #25492 #25492
• rds: DatabaseCluster.instanceEndpoints doesn't include writer endpoint (#29337) (ca59616), closes #29279
• rds: incorrect error message for rds proxies (#29404) (2dbb381), closes #29402
• spec2cdk: use modern type when building tag type (#29389) (3fb0254)
• sqs: redrivePermission is set to byQueue no matter what value is specified (#29130) (aa8484a), closes #29129 #29129
• stepfunctions: maxConcurrency does not support JsonPath (#29330) (b19f822), closes #20835 #20279

---

Alpha modules (2.132.0-alpha.0)

Bug Fixes

• glue: PythonRayExecutableProps has innaccurate properties (#28625) (7994733), closes #28570

v2.131.0

Features

• apigatewayv2-integrations: stepfunctions integration (#28982) (19d75d6), closes #28904
• applicationautoscaling: add missing PredefinedMetricType enum values (#29066) (63390e1), closes #29065
• appsync: environmentVariables property for GraphqlApi (#29064) (f0af5b1)
• appsync: add the grant method to the imported GraphqlApi (#29086) (7e8239b), closes #23031
• core: add description to exportValue and exportStringListValue methods (#29150) (2e080fe), closes #29092
• docdb: support snapshot removal policy (#28798) (05b1bb0), closes #28773
• ec2: support for the credit configuration mode for burstable instances (#28728) (3cbad4a), closes #19166
• ecs-patterns: allow custom ephemeral storage for ECS Fargate services (#29275) (9156b13), closes #18105
• update L1 CloudFormation resource definitions (#29257) (f3d74bb)

Bug Fixes

• autoscaling: step scaling without adjustment type fails (#29158) (a7de7fe)
• cli: add skip-tests.txt file for v2.130.0 (#29320) (fdacbe0), closes #29313
• CLI: sam resources hidden in changeset diffs (#29223) (aa186ac), closes #29185
• cli-integ: add regression patch for cli integ fix (#29313) (f803cf6), closes #29305
• cli-integ: use Python_3_12 instead of Python_3_7 lambda runtime (#29305) (8d07b85)
• cloudtrail: isOrganizationTrail attaches insufficient permissions to bucket (#29242) (457afa9)
• core: a number of resources are not taggable with Tags.of() (#28989) (7a4c189)
• custom-resources: custom resource response may silently get dropped (#28826) (c52ff08)
• ec2: internet gateway is created even if public subnets are reserved (#28607) (985c7e4), closes #28593
• ecs: autoscalingGroup attribute does not exist on ImportedCluster (#29244) (98b9bf2), closes #29241
• ecs: stack name can result in noncompliant capacity provider name (#29235) (aca68ba), closes #29151
• stepfunctions: escaped curly braces result in error during state machine execution (#29267) (a21e429), closes #29261

---

Alpha modules (2.131.0-alpha.0)

v2.130.0

Features

• appconfig: graduate to stable 🚀 (#29188) (7feabc1)
• bedrock: stabilityai model (#29210) (6c17ca5)

Bug Fixes

• custom-resources-handlers: s3 deployment handler log injection vulnerability (#28599) (83aa395), closes #28469
• pipelines: generates warning since CDK 2.128.0 due to addition of v2 pipeline support in aws-codepipeline (#29199) (eca1bcf), closes #29190 /github.com/aws/aws-cdk/blob/main/packages/aws-cdk-lib/pipelines/lib/codepipeline/codepipeline.ts#L467-L480

---

Alpha modules (2.130.0-alpha.0)

v2.129.0

Features

• update L1 CloudFormation resource definitions (#29191) (c579e3c)
• applicationautoscaling: timezone for ScheduledAction (#29116) (8694125), closes #22645 #27754
• cloudfront-origin: adding FunctionUrlOrigin (#29101) (2b0ed53)
• ecs: credentialSpecs in ContainerDefinitionOptions (#29085) (e92dbec)
• events-targets: launchType property for ECS task (#29069) (b4daf84), closes #28990
• lambda: Add Ipv6AllowedforDualStack support for Lambda function (#28928) (90caad9)
• lambda: adding .net 8 (dotnet8) lambda runtime support (#29178) (74335f6)
• rds: support Aurora MySQL 3.05.2 (#29166) (da0b82c)
• sns: enforce ssl with topic policy (#29144) (a75f447), closes #29142
• synthetics: latest canary runtimes for NodeJS, Python (#29132) (3c122a4), closes #29135

---

Alpha modules (2.129.0-alpha.0)

Bug Fixes

• appconfig: scope generated alarm role policy to '*' for composite alarm support (#29171) (c17879d)

v2.128.0

Features

• cloudwatch: add TableWidget (#29078) (4599aa3), closes #28975
• codedeploy: ignoreAlarmConfiguration parameter to Deployment Groups (#26957) (e890e89)
• codepipeline: pipeline type v2 with pipeline-level variables and triggers (#28538) (40ffe2b), closes #28476 #28694
• ses: grant methods to IEmailIdentity (#29084) (c3c771c), closes #29083
• allow overriding the filename of the processed file after substitution (#29029) (88decc6), closes #28450

Bug Fixes

• lambda: @deprecated tag to deprecated runtimes (#29081) (2503f68)
• stepfunctions-tasks: missing permissions for running tasks on ecs (#27891) (683d595), closes #27803

---

Alpha modules (2.128.0-alpha.0)

⚠ BREAKING CHANGES TO EXPERIMENTAL FEATURES

• app-staging-synthesizer-alpha: stagingBucketEncryption property is now required. For existing apps, specify BucketEncryption.KMS to retain existing behavior. For new apps, choose the bucket encryption that makes most sense for your use case. BucketEncryption.S3_MANAGED is available and is intended to be the default when this module is stabilized.

Features

• app-staging-synthesizer-alpha: require passing stagingBucketEncryption and note that we intend to default to S3_MANAGED in the future (#28978) (fc8b955), closes #28815 #28903 /github.com/aws/aws-cdk/pull/28978#issuecomment-1930007176
• pipes-enrichments: new EventBridge Pipes enrichments alpha module (#29063) (5a54ec5)
• pipes-targets: new EventBridge Pipes targets alpha module (#29057) (9419f54)
• scheduler-targets-alpha: SageMakerStartPipelineExecution Target (#28927) (db260b0), closes #27457

Bug Fixes

• appconfig: deployment recreated on every cdk deployment (#28782) (a21731c)

v2.127.0

Features

• eks: support for Kubernetes version 1.29 (#29040) (9dfabb1), closes #27930 #28983
• update L1 CloudFormation resource definitions (#29053) (7fcd5be)
• codebuild: new CodeBuild lambda compute images (#28630) (610fce1)
• codepipeline: change default value for crossAccountKeys to false (under feature flag) (#28556) (144b1b9), closes /github.com/aws/aws-cdk/blob/f4c1d1253ee34c2837a57a93faa47c9da97ef6d8/packages/aws-cdk-lib/aws-codepipeline/lib/pipeline.ts#L380-L381 #28247
• cognito: specifying the trigger event version in UserPool.addTrigger() (#28899) (7f2d4f1), closes #28683 #28683
• ecs: idleTimeout and perRequestTimeout for service connect (#28877) (ffcae2f)
• ecs-patterns: healthCheck property for ApplicationLoadBalancedFargateService (#28797) (5996856), closes #28796
• efs: create read-only file system for use as a destination of replication (#28913) (832f70c), closes #28912
• lambda: support enums in loggingFormat (#28942) (fb2329f)
• route53: multivalue answer routing (#28938) (0e6e37e), closes #28939
• sns: message archive policy (#29008) (9782f6b), closes #29007
• stepfunctions: distributed map construct (#28821) (97e3827), closes #23216

Bug Fixes

• cloudwatch: Math:UnknownIdentifier warning for INSIGHT_RULE_METRIC (#28870) (7eedb54)
• ec2: deploying an isolated subnet fails when ipv6AssignAddressOnCreation is set to true (#28902) (9de77bb), closes /github.com/aws/aws-cdk/issues/28843#issuecomment-1909006632 #28843
• lambda: LoggingConfig default error (#28973) (8c79bdc)
• lambda-event-sources: update s3-event-source to accept IBucket (#28943) (431df3b), closes #4323 #25782
• migrate: --from-stack does not retrieved processed template (#29035) (74c4c6f)
• stepfunctions: the Retry field in the statesJson in CustomState is always overwrited (#28793) (3c33e2c), closes /github.com/aws/aws-cdk/blob/45b8398bec9ba9c03f195c14f3b92188c9058a7b/packages/aws-cdk-lib/aws-stepfunctions/lib/states/custom-state.ts#L74 #28769 #28586

---

Alpha modules (2.127.0-alpha.0)

Features

• pipes-sources: new EventBridge Pipes sources alpha module (#29048) (2e53568)

Bug Fixes

• appconfig: deprecate deploy method (#29021) (9675bcd)
• integ-tests: cannot use v3 package name in an awsApiCall (#28895) (5035080), closes /github.com/aws/aws-cdk/pull/27313/files#diff-3ab65cbf843775673ff370c9c90deceba5f0ead8a3e016e0c2f243d27bf84609 #28844

v2.126.0

Features

• migrate: Add CDK Migrate --from-scan functionality (#28962) (bbc14b3)

---

Alpha modules (2.126.0-alpha.0)