v2.179.0

⚠ BREAKING CHANGES TO EXPERIMENTAL FEATURES

• eks: kubectlLayer property is now required in EKS Cluster and FargateCluster constructs. The default value for kubectlLayer is outdated and hence being removed. You can specify your own kubectlLayer version based on your Kubernetes version.

Features

• reset L1 CloudFormation resource definitions to last known working version (#33481)
• cloudtrail: throw ValidationErrors instead of untyped Errors (#33455) (11a75b2), closes #32569
• update L1 CloudFormation resource definitions (#33445) (531280f)
• update L1 CloudFormation resource definitions (#33475) (a7cacb8)
• update L1 CloudFormation resource definitions (#33476) (3a61695)
• update L1 CloudFormation resource definitions (#33480) (67e596e)
• apigateway: resource policy configuration for private API (#32719) (628e649), closes #31660 #31692
• apigatewayv2: stage support detailedMetricsEnabled property (#33267) (0abcacf), closes #33222
• apigatewayv2-integrations: sqs integrations (#29646) (775c009), closes #24785
• appconfig: throw ValidationError instead of untyped Errors (#33386) (b4efb1e), closes #32569
• assertions: throw typed errors (#33382) (0f57bd3), closes #32569
• assets: throw ValidationError instead of untyped Errors (#33383) (19cf902), closes #32569
• autoscaling: throw ValidationError instead of untyped Errors (#33388) (d3f3309), closes #32569
• backup: throw ValidationError instead of untyped Errors (#33387) (48f2bf7), closes #32569
• batch: throw ValidationError instead of untyped Errors (#33389) (c83ca82), closes #32569
• certificatemanager: throw ValidationErrors instead of untyped Errors (#33440) (76848e4), closes #32569
• chatbot: throw ValidationError instead of untyped Error (#33439) (ede5842), closes #32569
• cloudformation-include: throw ValidationError instead of untyped Errors (#33391) (92a9a73), closes #32569
• cloudfront: throw ValidationErrors instead of untyped Errors (#33438) (c08c7f0), closes #32569
• codebuild: attribute-based compute type for Fleet (#32251) (9fd62cb)
• codepipeline-actions: support commands action (#31667) (2637d46), closes #31666
• cognito: add analyticsConfiguration to UserPoolClient (#32862) (1c98881), closes #32837
• cognito: choice-based authentication (passwordless sign-in / passkey sign-in) (#32369) (9a6e5cc), closes #32265 #32367 #32273
• cx-api: throw CloudAssemblyError instead of untyped Errors (#33390) (ae95d95), closes #32569
• eks: add L2 constructs to support EKS Hybrid Nodes (#32389) (b91965c)
• eks: make kubectlLayer property required from optional (#32930) (b11f663), closes /github.com/aws/aws-cdk/blob/main/packages/aws-cdk-lib/package.json#L123
• eks: support eks with k8s 1.32 (#33339) (3490d2e)
• elasticloadbalancingv2: minimum Loadbalancer Capacity Unit (LCU) reservation (#32382) (9b178c1)
• events-targets: allow all ECS TaskOverrides (#32344) (aebb331), closes #32217 #32217 /github.com/aws/aws-cdk/blob/1b7265bf5cc623b2e362266c96ce866df539581f/packages/aws-cdk-lib/aws-events-targets/lib/ecs-task.ts#L225-L227
• logs: support regex patterns for JSON Metrics filters (#30741) (c89afe3), closes #30451
• pipelines: throw ValidationError instead of untyped Errors (#33385) (14b1098), closes #32569
• stepfunctions-tasks: allow region override in call-rest-api task (#33252) (59470c5)
• update L1 CloudFormation resource definitions (#33363) (ba485ef), closes /docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-ec2-security-group.html#cfn-ec2
• rds: support Database Insights for Aurora databases (#32851) (f6ed4be), closes #32680

Bug Fixes

• cli: cdk diff fails when deploy role requires tags (#33340) (f1d9a7d)
• cli: do not print credentials refreshed by plugins (#33398) (...

v2.178.2

Bug Fixes

• cli: do not print credentials refreshed by plugins (#33398) (727d42f), closes #33394 #33394

---

Alpha modules (2.178.2-alpha.0)

v2.178.1

Bug Fixes

• cli: sdk logging is always present even when not turned on (#33324) (29a9a6d), closes #33320
• custom-resource: provider framework lambda missing GetFunction permission (#33315)

---

Alpha modules (2.178.1-alpha.0)

v2.178.0

Features

• apigateway: throw ValidationError instead of untyped errors (#33075) (04efe6c), closes #32569
• applicationautoscaling: throw ValidationError instead of untyped errors (#33172) (abd4a3e), closes #32569
• appmesh: throw ValidationError istead of untyped Errors (#33245) (ba2f5c8), closes #32569
• appsync: add L2 constructs for AWS AppSync Events (#32505) (9ae1d34), closes #32004
• appsync: throw ValidationError instead of untyped errors (#33206) (ab9dd0a), closes #32569
• bedrock: support Luma AI's Ray2 visual AI model (#33163) (01abd83)
• cloudfront: add origin group selection criteria to L2 Distribution and L2 OriginGroup (#32740) (1b35c4e)
• cognito: support password history size (#33164) (988043e), closes #33106
• cognito: throw ValidationError instead of untyped errors (#33170) (ecbe1bf)
• custom-resource: update default node runtime to node20 for China and Gov regions (#33112) (8c13cf2)
• dynamodb: add pointintimerecoveryspecification and deprecate old (#33059) (aec64f0), closes #32786
• ecs: ExternalService support daemon scheduling strategy (#32630) (361c7d3), closes #32538
• ecs: add tls property to a ServiceConnectService (#32605) (d32baf6), closes #32583
• ecs: support availability zone rebalancing (#32263) (a8e2622), closes #32226
• ecs: support container version consistency (#32225) (37df0d2), closes #32202
• ecs: mark TaskDefinition inferenceAccelerators as deprecated (#33248)
• ecs-patterns: add containerCpu and containerMemoryLimitMiB property to ApplicationLoadBalancedFargateService (#30920) (4dd97bc), closes #20638 #20638
• elasticloadbalancingv2: support AdvertiseTrustStoreCaNames for mTLS (#32678) (6a77e4f)
• kinesisfirehose: graduate to stable 🚀 (#33296) (7aaac12)
• enable additional metadata collection (under feature flag) (#33232) (6b9e47a), closes /github.com/aws/aws-cdk/pull/33232/files#diff-81f821b1205e7040fc3103bf7c0114060a6d5c43ebd2994aa4ed5906e42c9c5fR33
• metadata collection for construct methods (#33292) (bc96ee1)
• throw ValidationError instead of untyped errors in L1s (#33032) (1b666db), closes #32569
• update L1 CloudFormation resource definitions (#33191) (1beaf83)
• update L1 CloudFormation resource definitions (#33272) (80073c8)
• lambda: latest versions for ADOT Lambda Layers (v0.115.0) (#32783) (39e5578)
• rds: support Aurora PostgreSQL Limitless Database PostgreSQL 16.6 (#33162) (111ffc2), closes /docs.aws.amazon.com/AmazonRDS/latest/AuroraPostgreSQLReleaseNotes/limitless-updates.html#16
• sns: support high throughput mode for FIFO topics (#33056) (bfa0f15)
• stepfunctions: add support JSONata and variables (#32343) (0bb3d6f), closes #32262 #32262 /github.com/aws/aws-cdk/pull/32343#issuecomment-2524096740

Bug Fixes

• apigatewayv2: incorrect arn function causing unwanted behavior (#33100) (ffe9863), closes #33218
• batch: support cfn parameters for managed compute environment properties minvcpus, maxvcpus, and spotbidpercentage (#32954) (5fef9e0), closes #32905
• cli: array arguments in cdk.json are ignored (#33107) (2eff2bd), closes #32814
• custom-resources: incorrect IAM prefix generated for CloudWatch actions (#33078) (c76f668), closes #32968
• sns: topic policy is not created even if enforceSSL enabled (#31569) (b3975c5), closes #31558

---

Alpha modules (2.178.0-alpha.0)

⚠ BREAKING CHANGES TO EXPERIMENTAL FEATURES

• ec2-alpha: operatingRegion property under IPAM class is now renamed to operatingRegions.

⚠ BREAKING CHANGES TO STABLE MODULES

• ecs: The TaskDefinitionProps.inferenceAccelerators attribute and TaskDefinition.addInferenceAccelerator() method will be marked as deprecated.

Features

• ec2-alpha: ec2-alpha module is now in Developer Preview (#33230) (a06f91a)
• ec2-alpha: add Transit Gateway L2 (#32956) (af44791)
• eks-v2: new eks v2 alpha module (#33215) (ccc9f5e)
• msk: support ServerlessCluster...

v2.177.0

Features

• apigatewayv2: throw ValidationError instead of untyped errors (#33072) (8b472fc), closes #32569
• apigatewayv2: throw ValidationError instead of untyped errors (#33082) (5377586), closes #32569
• apigatewayv2-authorizers: throw ValidationError instead of untyped errors (#33076) (dd34d2e), closes #32569
• bedrock: deprecate Claude 2, 2.1, Instant (#33058) (c0ed449)
• cli: add --untrust option to bootstrap (#33091) (4713bdd)
• cli: show all information from waiter errors (#33035) (b512a72)
• cli: throw typed errors (#33005) (bf81b3c), closes #32548
• cloudfront-origins: list access level for 404 response (#32059) (2b2443d), closes #13983 #31689
• cognito: managed login (#33097) (188f52d)
• elbv2: throw ValidationError intsead of untyped errors (#33111) (cc1988a), closes #32569
• lambda: throw ValidationError instead of untyped errors (#33033) (a928748), closes #32569
• rds: throw ValidationError instead of untyped errors (#33042) (0b2db62), closes #32569
• route53: throw ValidationError instead of untyped errors (#33110) (5e0f16d), closes #32569
• s3: replicating objects (#30966) (9d8a7e2), closes #1680 /docs.aws.amazon.com/ja_jp/AWSCloudFormation/latest/UserGuide/aws-properties-s3-bucket-replicationrulefilter.html#cfn-s3 /docs.aws.amazon.com/ja_jp/AWSCloudFormation/latest/UserGuide/aws-properties-s3-bucket-replicationrule.html#cfn-s3 /docs.aws.amazon.com/ja_jp/AWSCloudFormation/latest/UserGuide/aws-properties-s3-bucket-replicationrule.html#cfn-s3
• s3: throw ValidationError instead of untyped errors (#33031) (61e876b), closes #32569
• s3: throw ValidationError instead of untyped errors (#33109) (aea8f3b), closes #32569
• sns: throw ValidationError instead of untyped errors (#33045) (7452462), closes #32569
• sqs: throw ValidationError instead of untyped errors (#33046) (6469412), closes #32569
• ssm: throw ValidationError instead of untyped errors (#33067) (6677b33), closes #32569
• synthetics: cleanup provisioned lambda and layers for canary (#32738) (bdb4a59)
• synthetics: node playwright 1.0 and python selenium 4.1 runtime (#32245) (d68020b), closes /docs.aws.amazon.com/AmazonCloudWatch/latest/monitoring/CloudWatch_Synthetics_Library_python_selenium.html#CloudWatch_Synthetics_runtimeversion-syn-python-selenium-4
• synthetics: throw ValidationError instead of untyped errors (#33079) (e4703c1), closes #32569
• VpcV2: add BYOIP IPv6 to VPCv2 (#32927) (93c95fc)
• update L1 CloudFormation resource definitions (#33019) (e31924a), closes /docs.aws.amazon.com/AmazonCloudWatch/latest/logs/CloudWatch-Logs-Transformation.html#CloudWatch-Logs-Transformation-parseRoute53 /docs.aws.amazon.com/AmazonCloudWatch/latest/logs/CloudWatch-Logs-Transformation-Processors.html#CloudWatch-Logs-Transformation-parseRoute53

Bug Fixes

• bundling: enclosing metafile & tsconfig paths with quotes (#32725) (5410e10)
• cli: disallow import of internal cli libraries (#33021) (e5ac918)
• cli: trace output (-vv) is useless when files are uploaded (#33104) (d95add3)
• cloudfront: add validations on ResponseHeadersCorsBehavior.accessControlAllowMethods (#32769) (4c42800)
• cx-api: cannot detect CloudAssembly across different libraries (#32998) (94ba772), closes aws/aws-cdk#31041
• rds: does not print all failed validations for DatabaseCluster props (#32841) (344d916), closes #32840 #32840 /github.com/aws/aws-cdk/pull/32151/files#diff-49b4a9e1bf0b7db3ab71f4f08580da0cb2191d84605dc82a70c324bd122d5cf7R805-R828 /github.com/aws/aws-cdk/pull/32841/files#diff-5d08d37e744e173239879212c59fd45cb9a279349f3dfb1c66923cb015ed3a3 [/github.com/aws/aws-cdk/blob/3e4f3773bfa48b75bf0adc7d53d46bbec7714a9e/packages/aws-cdk-lib/aws-ec2/lib/volume.ts#L672-L743](https://github.com/aws//github.com/aws/aws-cdk/blob/3e4f3773bfa48b75bf0a...

v2.176.0

Features

• apigatewayv2-integrations: WebSocketMockIntegration props (#30622) (a5a0168), closes #29661
• codebuild: add new BuildImages (#32525) (a734841)
• ecs: enable Enhanced Observability for Container Insights (#32622) (79ab137), closes #32618
• update L1 CloudFormation resource definitions (#32847) (9317203)
• appconfig: environment deletion protection (#32737) (393e5c0)

Bug Fixes

• cli: "no stack found in the main cloud assembly" (#32839) (3c0acce), closes aws/aws-cdk#32636 #32836 #32836
• core: use correct formatting for aggregate errors in aws-cdk (#32817) (97af31b), closes #32237
• elasticloadbalancingv2: open, dual-stack-without-public-ipv4 ALB does not allow IPv6 inbound traffic (under feature flag) (#32765) (aff160b), closes #32197
• rds: clusterScailabilityType is spelled wrong and should be clusterScalabilityType (#32825) (d39e835), closes #32415 #32415
• rds: incorrect version definition of MySQL 8.4.3 (#32934) (3fbc785), closes #32933

Reverts

• prlint: fail prlinter on codecov failures, with exemption label (#32867) (928d3bb), closes aws/aws-cdk#32674

---

Alpha modules (2.176.0-alpha.0)

Features

• scheduler-targets: add support for universal target (#32341) (021e6d6), closes #32328

Bug Fixes

• msk: clusterName validation in Cluster class is incorrect (#32792) (41ddd46), closes /github.com/aws/aws-cdk/pull/32505#discussion_r1891027876

v2.175.1

Bug Fixes

• cli: "no stack found in the main cloud assembly" (#32839) (7b68908), closes aws/aws-cdk#32636 #32836 #32836

---

Alpha modules (2.175.1-alpha.0)

v2.175.0

Features

• ecs: enable fault injection flag (#32598) (ed366ce)
• ecs: warning when creating a service with the default minHealthyPercent (#31738) (3606deb), closes #31705
• update L1 CloudFormation resource definitions (#32768) (107eed3)
• cli: warn of non-existent stacks in cdk destroy (#32636) (c199378), closes #32545 #27179 40aws-cdk-testing/cli-integ/tests/cli-integ-tests/cli.integtest.ts#L190 aws-cdk-testing/cli-integ/tests/cli-integ-tests/cli.integtest.ts#L286-L291
• eks: update nodegroup gpu check (#32715) (693afea), closes #31347
• update L1 CloudFormation resource definitions (#32755) (8f97112)
• kms: add sign and verify related grant methods (#32681) (86d2853), closes #23185

Bug Fixes

• cli: cannot set environment variable CI=false (#32749) (26b361d)
• cli: requiresRefresh function does not respect null (#32666) (2abc23c), closes #32653 /github.com/smithy-lang/smithy-typescript/blob/main/packages/property-provider/src/memoize.ts#L27
• cloudwatch: render region and accountId when directly set on metrics (#32325) (c393481), closes #28731
• ecs: outdated linux commands for canContainersAccessInstanceRole=false and also deprecate property (#32763) (bbdd42c), closes #28518

---

Alpha modules (2.175.0-alpha.0)

Features

• s3objectlambda: open s3 access point arn (#32661) (0486b9c), closes #31950

Bug Fixes

• apprunner: the Service class does not implement IService (#32771) (3d56efa), closes #32745
• integ-runner: ENOENT no such file or directory 'recommended-feature-flags.json' (#32750) (f809b94)

v2.174.1

Features

• update L1 CloudFormation resource definitions (#32755) (0bc32c9)
• update L1 CloudFormation resource definitions (#32768) (20070a4)

---

Alpha modules (2.174.1-alpha.0)

v2.174.0

Features

• codebuild: add new environment types (#32729) (a10c369), closes #32728
• custom-resource: add serviceTimeout property for custom resources (#30911) (d599900), closes #30517
• update L1 CloudFormation resource definitions (#32685) (fe3af93)
• update L1 CloudFormation resource definitions (#32712) (3170e1c)
• update L1 CloudFormation resource definitions (#32726) (de04742)
• autoscaling: add availabilityZoneDistribution property to an AutoScalingGroup (#32100) (ecfce7c)
• bedrock: additional foundation models (#32684) (fcf4ecd)
• cli: support CloudFormation simplified resource import (#32676) (ca33f0a), closes #28060
• cli-plugin-contract: introduce a public contract between CLI and plugins (#32111) (fbaab1d)
• rds: support 11.22-rds.20241121 for RDS PostgreSQL (#32508) (491475a)
• rds: supports minors 11.4.4, 10.11.10, 10.6.20, 10.5.27 for RDS for MariaDB (#32632) (b8e79b6)
• update L1 CloudFormation resource definitions (#32582) (ff57cc3)
• update L1 CloudFormation resource definitions (#32645) (a0525f5)
• appconfig: add atDeploymentTick extension action point to L2 Constructs (#32490) (225d261)
• cloudfront: distribution ARN property (#32531) (b7e6141), closes #32530
• codebuild: support auto retry limit for Project (#32507) (2c109cf), closes #32446
• ecs: machineImageType support AL2023 (#32509) (4b696bc), closes #32496 #32469
• update L1 CloudFormation resource definitions (#32540) (2e3b2ac)

Bug Fixes

• cli: notices don't work behind a proxy (#32590) (3377c3b)
• cli: outdated dependency on @aws-cdk/cloud-assembly-schema (#32704) (3b162fc)
• cli: unhandled nextToken returned by listImagesCommand in garbage collector for ECR (#32679) (d9346bc), closes #32498
• opensearch: add I4I and R7GD to list of OpenSearch nodes not requiring EBS volumes (#32592) (e364d2b), closes #32070 #32138
• bump jsii 5.5 to 5.6 (#32588) (57bba19)
• cdk: changed retry mechanism for hotswapping AppSync.function (#32179) (d14d784)
• cli: allow credential plugins to return null for expiration (#32554) (d4f6946)
• cli: cdk deploy -R does not disable rollback (#32514) (2e75924), closes #31850
• cli: doesn't support plugins that return initially empty credentials (#32552) (38116b0)
• cli: getting credentials via SSO fails when the region is set in the profile (#32520) (bf026bd)
• lambda: add @deprecated tag to python3.8 (#32162) (27619cc)
• route53-targets: deprecated method for dns name is used in userpool domain target (under feature flag) (#31403) (5e73dd0)

Reverts

• ecs: machineImageType support AL2023 (#32550) (e8d8237), closes aws/aws-cdk#32509

---

Alpha modules (2.174.0-alpha.0)

Features

• glue: support AWS Glue 5.0 (#32467) (ca01a25)
• ec2: add c8g and m8g instance classes (#32528) (a81eec6), closes #32522
• msk-alpha: new KafkaVersions 3_7_X and 3_7_X_KRAFT (#32515) (cbacf4d)

Bug Fixes

• ec2-alpha: do not use string comparison in rangesOverlap (#32269) (87e21d6), closes #32145
• redshift-alpha: extract tableName from custom resource functions (#32452) (283edd6), closes PR#24308
• redshift-alpha: use same role for database-query singleton function (#32363) (db950b3), closes #32089