v2.155.0

Features

• codebuild: macOS codebuild support (#31203) (823ff6e), closes #31170
• eks: preserveOnDelete for EKS addon (#30776) (23fba1c)
• kms: add multiRegion property to a Key (#31125) (3dc4c50)
• stepfunctions-tasks: add cpu and memory parameters to EcsRunTask (#30140) (986e378), closes #30027
• synthetics: add syn-python-selenium-4.0 runtime (#31101) (cc75ded), closes #30137 /docs.aws.amazon.com/AmazonCloudWatch/latest/monitoring/CloudWatch_Synthetics_Library_python_selenium.html#CloudWatch_Synthetics_runtimeversion-syn-python-selenium-4
• update L1 CloudFormation resource definitions (#31193) (e942b67)
• update L1 CloudFormation resource definitions (#31194) (5468983)
• update L1 CloudFormation resource definitions (#31221) (b754353)

Bug Fixes

• cloudfront: requirement of domainNames prevents moving a domain name between distributions (#31001) (acdf7d3), closes #29960 #29329
• eks: can't update authMode with the same mode (#31043) (64df08b)
• lambda-event-source: allow dynamodb filtering on boolean value (#31011) (9946ab0), closes #30734
• s3: bucket notifications in owning stack deletes bucket notifications from other stacks (#31091) (0b09e52)

---

Alpha modules (2.155.0-alpha.0)

Features

• ec2: ipv6AddressCount property for an instance (#31076) (e3e5e1c), closes #31075
• ec2: support throughput on LaunchTemplate EBS volumes (#30716) (6ed0bed), closes #24341 #22441
• location: support GeofenceCollection (#30711) (04d73ac), closes #30710

v2.154.1

Features

• update L1 CloudFormation resource definitions (#31193) (aa97525)
• update L1 CloudFormation resource definitions (#31194) (2191264)

Bug Fixes

• cloudfront: requirement of domainNames prevents moving a domain name between distributions (#31001) (1255ce3), closes #29960 #29329

---

Alpha modules (2.154.1-alpha.0)

v2.154.0

Features

• update L1 CloudFormation resource definitions (#31145) (5387605)
• batch: add ECS_AL2023 (#30928) (d45bf08)
• CLI: synth displays "AssertDescription: CDK bootstrap stack version 6 required" (#31092) (751a922), closes #17942
• core: configure SNS topics to receive stack events on the Stack construct (#30551) (0cdce20), closes #8581
• dynamodb: adding on-demand-throughput to table (#30725) (d5a19bb), closes #30091
• elasticloadbalancingv2: connection logs for ALB (#30599) (7c4f423)
• elasticloadbalancingv2: support Mutual Authentication with TLS for Application Load Balancer (#30784) (7eae4d1), closes #28206
• region-info: update Metadata regions (#31044) (ae7d181)
• region-info: update Metadata regions (#31046) (6ec69b9)
• region-info: update Metadata regions (#31047) (9025635)
• s3: add skip destination validation property (#30916) (ffc40e5), closes #30914 #30914
• ssm: support cross-account sharing (#30646) (1eb1ea6), closes #29292
• set log retention of all CDK-vended custom resources with CustomResourceConfig (#31041) (f2babd9)
• update L1 CloudFormation resource definitions (#31025) (5414932)
• update L1 CloudFormation resource definitions (#31086) (62a641c)
• update L1 CloudFormation resource definitions (#31120) (931ebba)
• vpc: support custom route and subnet (#30538) (e17fdd7), closes RFC#507

Bug Fixes

• elasticloadbalancingv2-targets: add AlbListenerTarget for NLBs, deprecate AlbTarget due to ALB listener race conditions (#17208) (#30396) (1fca1e5), closes /github.com/aws/aws-cdk/issues/17208#issuecomment-1681475590
• lambda: validate localMountPath format and length (#31019) (c159e77)
• vpc-v2: fixing default scope id (#31102) (0007a29)

Reverts

• feat(core): configure SNS topics to receive stack events on the Stack construct (#31100) (5f30aa5), closes aws/aws-cdk#30551
• feat(ec2): security group lookup via filters (#31065) (79b5cd2), closes aws/aws-cdk#30625
• feat(ecs): add validation checks to memory cpu combinations of FARGATE compatible task definitions (#31110) (ffba5b1)

---

Alpha modules (2.154.0-alpha.0)

Features

• amplify: support custom certificate (#30791) (8d76778), closes #30594
• ec2: security group lookup via filters (#30625) (abc78bf), closes #30331
• sagemaker: network isolation for a model (#30657) (f1af7fc)

Bug Fixes

• cli-lib-alpha: bootstrap fails with "bad argument name" error for trust and trustForLookup (#31159) (b11ca4a), closes #30404
• cognito-identitypool-alpha: validation error if provided id is a token (#30882) (ad1b797), closes #29780 #28184
• ec2: prevent deduplication of init command args (#30821) (1e7c690), closes #26221

v2.153.0

Features

• lambda: support Recursive Loop Protection property (572fe0a)

---

Alpha modules (2.153.0-alpha.0)

v2.152.0

Features

• lambda: support filter criteria encryption (6aa72a2)

---

Alpha modules (2.152.0-alpha.0)

v2.151.1

Reverts

• feat(ecs): add validation checks to memory cpu combinations of FARGATE compatible task definitions (#31110) (8fdf015)

---

Alpha modules (2.151.1-alpha.0)

v2.151.0

Features

• apigatewayv2: add description property for stage (#30820) (8651bbe)
• ec2: add versionDescription property for LaunchTemplate (#30837) (597228c)
• ecs: add validation checks to memory cpu combinations of FARGATE compatible task definitions (#30166) (8b4685e), closes #22216
• elasticloadbalancingv2: support Weighted Random algorithm and Automatic Target Weights for alb (#30542) (d0a609d), closes #29969
• events: add description property for eventBus (#30935) (28fbc82)
• events: support customer managed key for event bus (#30493) (8c44aa7)
• synthetics: add activeTracing, memory and timeout property to Canary class (#30556) (9295a85), closes #9300 #14086 #28152 #9300
• update L1 CloudFormation resource definitions (#30973) (63c45e4)
• sns: add validation of displayName for topic (#30770) (da2ec75)
• stepfunctions-tasks: allow BedrockInvokeModel to use JsonPath (#30298) (f5dd73b), closes #29229

Bug Fixes

• appconfig: sourcedConfiguration doesn't use retrievalRole (#30733) (9d79c51), closes #30609
• ec2: export NatGatewayProvider for consistency with NatInstanceProvider (#28810) (fbc28bc), closes #28372
• ecs: fromServiceArnWithCluster not accepting value from SSM Parameter string (#30902) (0baa573), closes #30798
• stepfunctions: allow disable x-ray (#30808) (d56d05c), closes #30796
• stepfunctions-tasks: fix the generated IAM policy for EFS operations (#30896) (31808b4), closes #30862
• stepfunctions-tasks: run task perm no longer valid (#30788) (82b163d), closes #30751

---

Alpha modules (2.151.0-alpha.0)

Features

• kinesisanalytics-flink: add support for Flink 1.19 (#30723) (c185194), closes /docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-kinesisanalyticsv2-application.html#aws-resource-kinesisanalyticsv2

v2.150.0

Features

• update L1 CloudFormation resource definitions (#30921) (153a698)
• ec2: add g6 instance (#30693) (90a41d5), closes #30683
• lambda: add SnapStart support for arm64 functions (#30898) (b4377a5), closes #30899
• logs: enabling IA log group creation in CN and GovCloud regions (#30904) (230b56b)
• update L1 CloudFormation resource definitions (#30860) (ce7a8d5)

Bug Fixes

• custom-resources: provider framework will always log all data including confidential data (#30689) (9bd92da), closes #30275
• stepfunctions-tasks: allow camelCase for parameters of CallAwsServiceCrossRegion (#30795) (5d6ace8), closes #30799

---

Alpha modules (2.150.0-alpha.0)

v2.149.0

Features

• codedeploy: zonal configuration for ServerDeploymentConfig (#30429) (da0dc57), closes #30430
• codestarnotifications: add createdBy property for notification rule (#30780) (a68b418)
• stepfunctions-tasks: add guardrailConfiguration and trace property to the BedrockInvokeModel (#30426) (772b1d1), closes #30425
• stepfunctions-tasks: enable resultReuseConfiguration in AthenaStartQueryExecution (#30447) (046bf56), closes #30446
• update L1 CloudFormation resource definitions (#30786) (6d0a09f)

Bug Fixes

• apigateway: authorization scope is not added when not explicitly defining authorization type in method or root api (#30822) (e4367a0), closes #30444
• scheduler-targetes-alpha: multiple schedules cause resolution error during synth (#30634) (727e886), closes #28713
• bootstrap: adds restrictions to the File Publishing Roles that prevents uploading assets to a bucket not owned by the target account (#30823)

---

Alpha modules (2.149.0-alpha.0)

v2.148.1

Bug Fixes

• apigateway: authorization scope is not added when not explicitly defining authorization type in method or root api (#30822) (4bee768), closes #30444

---

Alpha modules (2.148.1-alpha.0)