v2.99.0

Features

• s3: specify minimum TLS version (#27297) (f47d09c), closes #27279
• synthetics: graduate to stable 🚀 (#27305) (dd00d05)

Bug Fixes

• batch: make instanceType optional on multinode jobs (#27223) (6616026), closes #27185

---

Alpha modules (2.99.0-alpha.0)

Features

• apprunner: add HealthCheckConfiguration property in Service (#27029) (4e8c9c4), closes #26972

Bug Fixes

• appconfig: allow multiple environment monitor roles to be created (#27243) (9312c97)

v2.98.0

Features

• update AWS Service Spec (#27276) (3d9ca8d)
• aws-cdk-lib: reduce load time of JavaScript library (#27217) (faffce0)

Bug Fixes

• rds: prevent rendering deprecated credentials when creating a database cluster from a snapshot (under feature flag) (#27174) (1fd22a7), closes #23815

---

Alpha modules (2.98.0-alpha.0)

Features

• scheduler: disable Schedule on creation (#27236) (193cd3f)

v2.97.1

Reverts

• "feat(core): Schedule class" (#27284) (e2fc724), closes aws/aws-cdk#27105 #27259

---

Alpha modules (2.97.1-alpha.0)

v2.97.0

Features

• update AWS Service Spec (#27224) (a2a4f68)
• appsync: Standalone L2 construct for SourceApiAssociation (#27121) (7b9652e), closes #27025 #26986
• cloudwatch: add verticalAnnotations property to GraphWidget (#26819) (d41005e), closes #7622
• core: Schedule class (#27105) (a8f0a71), closes #19197 #27052 #27012
• update AWS Service Spec (#27218) (2855da6)
• cloudwatch: validate Dashboards with an end time must also have a start time (#27124) (097bd0f), closes /github.com/aws/aws-cdk/blob/main/packages/aws-cdk-lib/aws-cloudwatch/lib/graph.ts#L245-L247
• cloudwatch: Widgets can define start and end times, including relative values (#26969) (2866240), closes #26945
• core: add setter for termination protection on stack (#26992) (54083de), closes #14463 #21304
• ec2: support of m7i and m7i-flex ec2-instancetypes (#27156) (fe0955f), closes /docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-ec2-instance.html#aws-properties-ec2
• ecr: make validateRepositoryName errors human readable (#27186) (e15d0c0), closes #26715
• rds: support CA certificate for cluster instances (#27138) (f5a5a08), closes #26865
• stepfunctions: add comment ability for when condition (#27010) (70006ab), closes #27005
• update AWS Service Spec (#27163) (0634c68)

Bug Fixes

• apigateway: CORS response body has unexpected space (#27219) (abf21c9)
• cli: equals sign in a tag value is dropped (#27130) (b7eeda6), closes #5773 #21003
• custom-resources: does not accept strings where numbers are expected, skips recursive types (#27112) (8e21b2c)
• ec2: restrictDefaultSecurityGroup fails when default rules are not present (#27039) (1e67f9d), closes #26390
• eks: use Python 3.10 runtime for kubectl-provider (#27031) (55859c9), closes #26994
• rds: cluster.instanceIdentifiers does not container writer instance ID (#26929) (d3789ab), closes #25947
• rds: unable to create cluster with per-instance parameters (under feature flag) (#27040) (1be9894), closes #27035
• sample-app: exclude all pycache in cdk.json (#27191) (d9f1f09)

---

Alpha modules (2.97.0-alpha.0)

Features

• cli-lib-alpha: support hotswap deployments (#26786) (e01faff), closes #26785

Bug Fixes

• synthetics: synth-time failure for canary assets in nested stages (#27167) (7a04a5a), closes #27089 #26291

v2.96.2

Bug Fixes

• custom-resources: does not accept strings where numbers are expected, skips recursive types (#27112) (d8dcd75)

---

Alpha modules (2.96.2-alpha.0)

v2.96.1

Reverts

• "chore(ecs): clarify it's possible to use image digest on fromEcrRepository" (#27143) (049153e), closes aws/aws-cdk#27115

---

Alpha modules (2.96.1-alpha.0)

v2.96.0

Features

• update AWS Service Spec (#27095) (4942658)
• batch: Stabilize Batch (#27059) (5fc707a), closes #27054
• ecs: add Amazon Linux 2023 to EcsOptimizedImage (#26989) (0bac8a5), closes #26988

Bug Fixes

• codedeploy: CustomLambdaDeploymentConfig is broken (#27087) (c53831d)
• codepipeline-actions: update zip to noncorrupted one (#27120) (eb1d363), closes #27117
• custom-resources: AwsCustomResource fails when SDKv3 expects Uint8Array (#27065) (70d9bf7), closes #27034
• custom-resources: maxwaittime reduced to 60 seconds from 300 seconds (#27076) (c3a4b7b)
• dynamodb: update CfnGlobalTable in TableV2 constructor to use this instead of scope (#27075) (889ad8c), closes #27062
• lambda: update default runtimes and tests to node 18 (#27066) (04b30f3)
• route53: timeouts due to delete-existing-record-set-handler's wait time (#27068) (d730f7f), closes #27060
• triggers: errors are shown as list of bytes (#27119) (07c6775), closes #27113

---

Alpha modules (2.96.0-alpha.0)

Features

• glue: add ExternalTable for use with connections (#24753) (1c03cb3), closes #24741

Bug Fixes

• integ-tests: use transformToString on API call response body (#27122) (b0bbd5e), closes 1#L573-L576 #27114
• synthetics: include auto-delete-underlying-resources in package (#27096) (5046a9b)

v2.95.1

Bug Fixes

• dynamodb: update CfnGlobalTable in TableV2 constructor to use this instead of scope (#27075) (afd3890), closes #27062

⚠ BREAKING CHANGES TO EXPERIMENTAL FEATURES

• dynamodb: TableV2 scope change results in resource replacement.

---

Alpha modules (2.95.1-alpha.0)

v2.95.0

Features

• dynamodb: TableV2 supports imports, drift detection, and better control over replicas (#27023) (e52acd8)
• stepfunctions: properties for ErrorPath, CausePath, MaxDelay, Jitter (#27051) (dfe29ce)
• update AWS Service Spec (#26999) (a0458b7)

Bug Fixes

• cli: deployment stops on AccessDenied looking up bootstrap stack (#26925) (6f3e838), closes #26588 #26588
• custom-resources: empty Lambda response payload causes deployment failure (#27000) (e260d30), closes #26429
• events-targets: AwsApi fails when SDKv3 Command expects Uint8Array (#27034) (641f9e8), closes #27002
• events-targets: AwsApi is still using Node 16 (#27002) (49e5739), closes #26998
• firehose: remove unused role during DeliveryStream creation (#26930) (993ee48), closes #26927
• lambda-nodejs: incorrect SDK v2 warning generated (#27014) (856b303), closes #26966
• logs: log retention custom resource timed out during deploy (#26995) (a73f256), closes #24485
• route53: CrossAccountZoneDelegationRecord is still using Node 16 (#26980) (d69c51a), closes #26212 #26593 #26976

---

Alpha modules (2.95.0-alpha.0)

Bug Fixes

• integ-tests: Uint8Arrays are not decoded properly (#27009) (47ab5c8)

v2.94.0

Features

• apigateway: L2 construct for Sagemaker Integration (#25459) (53d61bb)
• appsync: merged APIs (#26895) (fe930a5), closes #25960
• cloudfront: Add RealtimeLogConfig to Distribution (#26808) (b1f4e27)
• ec2: add c7gn instance type (#26905) (8cc9ecb), closes #23147
• ec2: contributor insight rules for vpc endpoint service (#25965) (c6a96f0)
• lambda: L2 constructs for SnapStart (#26761) (356f302), closes #23153 /github.com/aws/aws-cdk/issues/23153#issuecomment-1407779812
• rds: add support for postgresql 11.21, 12.16, 13.12, 14.9, 15.4 and deprecate versions out-of-support (#26906) (4b0c378)
• rds: support certificate autority certificate (#26883) (4fd510e), closes #26865
• s3-deployment: specify lambda execution role in DeployTimeSubstitutedFile (#26896) (6c2143c), closes #26879
• stepfunctions-tasks: algorithmName validation for SageMakerCreateTrainingJob (#26877) (1cead3b), closes #26675
• update AWS Service Spec (#26911) (d345335)
• stepfunctions-tasks: FastFile mode for SageMaker Training Job (#26675) (5fef403), closes /github.com/aws/aws-cdk/blob/v2.90.0/packages/aws-cdk-lib/aws-stepfunctions-tasks/lib/sagemaker/base-types.ts#L458 #26653

Bug Fixes

• aws-cdk-lib: ADOT Lambda Layer constants update - v0.32.0 (#26801) (ad9d764), closes #26793
• cli: asset not uploaded with different synthesizer configs (#26910) (b06a38f), closes #25927
• cli: ecs hotswap fails on log configuration enabled (#26876) (6cffca0), closes #26871
• core: add RetainExceptOnCreate to ParseDeletionPolicy method (#26880) (702d9d5), closes /github.com/aws/aws-cdk/blob/main/packages/aws-cdk-lib/core/lib/helpers-internal/cfn-parse.ts#L468 #26863
• core: support cache-from and cache-to flags in DockerImage (#26337) (d152d61), closes #24024 #24024 #25925
• core: undeprecate addWarning (#26943) (4ce64fe), closes #26914
• custom-resources: cross-environment call fails in opt-in region (#26917) (3701aa7), closes #26562
• ec2: networkAclName property for NetworkAcl does not work (#26898) (7f31da8), closes #26371 #26897
• elasticloadbalancingv2: remove equality check for health threshold counts (#26949) (c8b8f1c), closes #26941
• lambda: GO_1_X runtime will be EOL soon, deprecate in favor of PROVIDED_AL2 runtime (#26899) (37c59a4)
• lambda: NodeJS14 runtime will be EOL soon, deprecate in favor of newer runtimes (#26903) (31ff125)
• lambda: PROVIDED runtime will be EOL soon, deprecate in favor of PROVIDED_AL2 (#26904) (fded078)
• lambda: update default runtimes and tests to node 16 everywhere (#26921) (bdce16c)
• logs: LogRetention resources fail with rate exceeded errors (#26858) (b60e6ef), closes #26837 #26837
• route53: IHostedZone cannot be used for ses.Identity.publicHostedZone anymore (#26888) (b5bd39e), closes #26872
• secrets-manager: SecretRotationApplication creates lambda on python 3.7 which is EOL (#26884) (2d9d8d6), closes #26866
• servicecatalog: only one ProductStack per Portfolio can use assets (#26885) (9cb395c), closes #25189
• sqs: encryptionType is incorrect when encryptionMasterKey is provided (#26886) (bf441fa), closes #26719

---

Alpha modules (2.94.0-alpha.0)

Features

• amplify: enables apps hosted with server side rendering (#26861) (c67da83), closes #24076 #23325
• scheduler: base target methods and lambda invoke target (#26575) (39cbd46)
• synthetics-alpha: add latest two NodeJS runtimes (#26967) (0a0b37c)