v2.144.0

Features

• appconfig: add grantReadConfig method to Environment Construct (#30180) (c8f2646), closes #28585
• dynamodb: add resource polices for table (#30251) (7dc6d27)
• ec2: support instanceInitiatedShutdownBehavior for EC2 instance (#30160) (c073617), closes #30164
• ecs-patterns: allow custom container name for Scheduled ecs and fargate tasks (#30357) (f54a945), closes #30281 #27515
• lambda: allow running a build file (#30196) (89042c4), closes #18470
• stepfunctions-tasks: add workerType and numberOfWorkers to GlueStartJobRun class (#30319) (b17dfe7), closes #12757
• update L1 CloudFormation resource definitions (#30354) (ede0917)
• stepfunctions-tasks: support for the step functions mediaconvert optimized integration for createJob api (#30300) (823cab3), closes #30299

Bug Fixes

• ecs: removed omitEmptyArray for placementConstraints (#27555) (#30382) (8b234b7), closes /github.com/aws/aws-cdk/pull/27572#issuecomment-1766287866 /github.com/aws/aws-cdk/pull/28431#issuecomment-1865233495
• eks: add tag update support for eks cluster (#30123) (8c39e81), closes #19388
• fsx: no validation error when hour property set to 24 in the LustreMaintenanceTime class. (#30342) (6301a9a), closes #30341
• lambda: use enum values for applicationLogLevel and systemLogLevel (#29904) (3f53a45)
• s3: publicReadAccess causes deployment failure due to access denied 403 (#29632) (4bf6fad)
• stepfunctions: cannot use intrinsic functions in Fail state (#30210) (81a558f), closes #30063

---

Alpha modules (2.144.0-alpha.0)

Features

• apprunner: add kmsKey property for the AppRunner Service class (#30352) (0c1aeb6), closes #30365
• ivs-alpha: support advanced channel type (#30086) (544e54a), closes #30075
• neptune: add copyTagsToSnapshot property to the DatabaseCluster Construct (#30092) (ba8edb3), closes #30087

v2.143.1

Reverts

• fix(ses-actions): permissions too wide for S3 action (#30375) (6c716c6)

---

Alpha modules (2.143.1-alpha.0)

v2.143.0

Features

• codebuild: add deleteReports property to the ReportGroup Construct (#30141) (c3003ab)
• update L1 CloudFormation resource definitions (#30182) (555d1c7)
• batch: jobStateTimeLimitActions property added (#30158) (411a58c), closes #30142
• cognito: add enablePropagateAdditionalUserContextData to UserClient Construct (#30178) (e00c0ca)
• ec2: support placementGroup for ec2.Instance (#30293) (f4b1d5a), closes #30292
• ecs-patterns: dualstack NLB (#30069) (623cedb), closes #29614

Bug Fixes

• ecs: add feature flag and remove ecs default deployment alarm settings (#30217) (1e94267)
• elbv2: unable to deploy template with IPv4 load balancer when denyAllIgwTraffic set (#29956) (42d424e), closes #30247
• events_targets: kinesisfirehosestream not accepting ideliverystream for imported deliverystream (#30189) (d7e6a10)
• rds: readers not always be created after the writer (#30277) (e8676cb), closes #30260
• s3: bucketKey does not support SSE-S3 (#30184) (c7c75f8), closes #30183
• stepfunctions-tasks: runtime language used to evaluate expressions is ignored (#30302) (dfea721)

---

Alpha modules (2.143.0-alpha.0)

v2.142.1

Reverts

• fix(diff): properties from ChangeSet diff were ignored (#30243) (3748472)

---

Alpha modules (2.142.1-alpha.0)

v2.142.0

Features

• asg: support keypair functionality for asg (#29679) (f6b649d), closes #29237
• codepipeline: GitPullRequestFilter for pipeline trigger (#29128) (5ce1b64), closes #29126
• docdb: add copyTagsToSnapshot property to the DatabaseCluster Construct (#30120) (30f0db6), closes #30090
• docdb: support CA certificate for cluster instances (#28791) (e87f25e), closes #27138 #28356
• events-targets: add support for AppSync as an EventBridge rule target (#29584) (5be88a3), closes #29884
• servicecatalog: ProductStack memoryLimit prop (#30105) (4b6dc8c), closes #29862

Bug Fixes

• apigateway: set authorization scope when authorization type is Cognito (#30035) (38a2284)
• autoscaling: cooldown cannot be set with step scaling actions (#30150) (6810762), closes #29779
• cli: cdk bootstrap --help does not show some options (#30113) (8debd20)
• cli: handle attributes of AWS::KMS::Key when hotswapping (#30112) (a1dcaa6), closes #25418
• cli: template created during import should be written to assets folder (#29830) (a96cf55), closes #22928 #22530
• diff: properties from ChangeSet diff were ignored (#30093) (9c3f3f5), closes #29731
• ecs: require task pidMode for Linux-based Fargate tasks, not host (#30020) (3e9e0a8), closes #29995
• eks: in place updates for EKS security group and Subnets (#30114) (eb39d9e), closes #28584
• iam: fromUserArn returns incorrect principalAccount (#30023) (f9f3681), closes /github.com/aws/aws-cdk/issues/29999#issuecomment-2087672380
• s3: add bucket policy dependency to notification resource (#30053) (71986ff), closes #27600 #16811
• stepfunctions-tasks: documentation fix for retryOnServiceExceptions (#30077) (205163f)

---

Alpha modules (2.142.0-alpha.0)

Features

• pipes-targets: add step function target (#29987) (b0975e4), closes #29665 #29665
• redshift: multi AZ cluster (#29976) (a53517c)

v2.141.0

Features

• rds: implement setting parameter group name (#29965) (50331a1)
• support for IAM Identity Center in security diff (#30009) (0a3cb94), closes #29835
• update L1 CloudFormation resource definitions (#30074) (8e98078)

Bug Fixes

• ecr: incorrect format for rule pattern (#29243) (fff9cf6), closes #29225
• pipelines: pipeline asset role trust policy has account root principal (#30084) (3928eae)

---

Alpha modules (2.141.0-alpha.0)

v2.140.0

Features

• update L1 CloudFormation resource definitions (#30037) (bb7e4d8)
• api-gateway: deploy RestApi to existing stage (#29486) (f0835d9), closes #25582
• cloudfront: add autoPublish property to the Function (#30030) (5dd72b8), closes #30028
• codecommit: kmsKey for repository (#29988) (5f8e52e)
• ec2: add support for environment files and variables in systemd (#29629) (90f1aa9)
• efs: allow to specify az for one-zone (#30010) (cbf130e)
• allow to register an existing record created manually as an alias ARecord target (#29565) (4f8b7db), closes #23048
• update L1 CloudFormation resource definitions (#29997) (c949076), closes /docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ec2-launchtemplate.html#aws-resource-ec2 /docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ec2-launchtemplate.html#aws-resource-ec2
• ec2: ebs optimized instance (#29962) (767ac65)
• eks: add atomic flag for aws-eks Helm Chart (#29454) (666f24f), closes #22254
• events: fromApiDestinationAttributes import method (#29943) (db155e1), closes #29942
• kms: key rotation period (#29928) (a6a5219), closes #29927

Bug Fixes

• crossRegionReference: error message missing stack information (#29961) (4f1c94b), closes #29699 #29699
• custom-resources: fails to use latest SDK version (#29958) (247aa35), closes #29891
• stepfunctions: regex in DistributedMap label is incorrectly escaping characters (#29765) (7c4eb71)
• cdk diff prints upgrade bootstrap warning even when current version exceeds the recommended version (#29938) (28b0080), closes #28888

---

Alpha modules (2.140.0-alpha.0)

v2.139.1

Reverts

• fix(lambda): version.fromVersionArn creates invalid Version object (#30003) (ced7a46)

---

Alpha modules (2.139.1-alpha.0)

v2.139.0

Features

• appconfig: constrain environments to a single deployment at a time (#29500) (3dd834d), closes #29345
• ecs: support pidMode for FargateTaskDefinition (#29670) (ed75b16), closes #29619
• ecs: support adding docker labels after container construction (#29734) (8e215b3), closes #29728
• efs: replicating file systems (#29347) (a15dc93), closes #21455
• ses-actions: WorkMail rule action (#29854) (6fdc458)
• update L1 CloudFormation resource definitions (#29924) (27b7a45)

Bug Fixes

• CLI: diff --template crashes (#29896) (466f170), closes #29890
• CLI: bootstrap shows no hotswap changes when there are no changes (#29877) (2126ee5), closes #25736
• custom-resource-handler: auto-delete-[objects|images] breaks on cloudformation rollback (#29581) (69ea52f)
• custom-resources: cannot set logging for state machine generated in CompleteHandler (#28706) (99041b2), closes #27283 #28577 #28744 #27310 #28699 #28587
• eks: incorrect nodegroupName(under feature flag) (#29794) (8bb8c55)
• elasticloadbalancingv2: crossZoneEnabled does not support false for ALB (#29907) (f6c902e)
• events-targets: ApiGateway events target should accept IRestApi (#29397) (8e1fefd), closes #16423 /github.com/aws/aws-cdk/pull/16542#discussion_r713676896 /github.com/aws/aws-cdk/pull/16542#issuecomment-925051255
• s3-notifications: cdk destroy deletes external/existing s3 notification events (#29939) (7360a88)
• ses-actions: permissions too wide for S3 action (#29833) (2da544f), closes #29811 #29823 /docs.aws.amazon.com/ses/latest/dg/receiving-email-permissions.html#receiving-email-permissions-s3

---

Alpha modules (2.139.0-alpha.0)

v2.138.0

Features

• AppSync: addRdsDataSource support for DatabaseCluster (#29544) (1894f2d), closes #29302
• cognito: support provider details for UserPoolIdentityProviderSaml (#29588) (375f1a6), closes #29494 #29598
• custom-resources: add logging property to AwsSdkCall and create Logging class (#29648) (b049064)
• ec2: well-known port aliases (#29793) (f10494c)
• elasticloadbalancingv2: add removeSuffix param for ExternalApplicationListener.addAction() (#29746) (f4af330), closes #29496
• route53: DNSSEC zone signing (#28604) (213fffc)
• sns: add TracingConfig prop (#29783) (f14b60f), closes #29714
• stepfunctions-tasks: add httpinvoke step functions task (#28673) (178e481), closes #28278
• update L1 CloudFormation resource definitions (#29798) (7103fed), closes /docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ec2-launchtemplate.html#aws-resource-ec2 /docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ec2-launchtemplate.html#aws-resource-ec2 /docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-ec2-security-group.html#cfn-ec2 /docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-ec2-security-group.html#cfn-ec2

Bug Fixes

• ecs-patterns: integ test failed with certificate error (#29623) (5347369), closes /github.com/aws/aws-cdk/pull/29186#issuecomment-1959231406 /github.com/aws/aws-cdk/pull/29186#issuecomment-1959231406
• eks: add support of Helm charts located in ECR of AWS CN region (#29778) (0da25e5), closes #28460
• globalaccelerator: changing installLatestAwsSdk breaks Security Group reference (#29620) (ece7eb6), closes #23796 /github.com/aws/aws-cdk/blob/main/packages/aws-cdk-lib/aws-globalaccelerator/lib/_accelerator-security-group.ts#L32
• lambda: version.fromVersionArn creates invalid Version object (#29820) (8198884)
• spec2cdk: get tag gives null result in Java CDK (#29870) (5a918d1)
• stepfunctions: the catch field in CustomState is not rendered (#29654) (77e9fc6)

---

Alpha modules (2.138.0-alpha.0)

⚠ BREAKING CHANGES TO EXPERIMENTAL FEATURES

• cognito-identitypool-alpha: The argument of IdentityPoolProviderUrl.userPool() has been changed from url: string to userPool: UserPool, userPoolClient: UserPoolClient. If you want to specify custom identifier string, use IdentityPoolProviderUrl.custom() instead.

Bug Fixes

• cognito-identitypool-alpha: inconvenient IdentityPoolProviderUrl.userPool() (#29025) (90a7734)