v2.200.0

Features

• update L1 CloudFormation resource definitions (#34594) (1e37ee7)
• custom-resources: throw ValidationError instead of untyped Errors (#33392) (1dacaa3), closes #32569
• ec2: implement IPeer to PrefixList to be usable as a connection peer (#33617) (c277419), closes #33607
• iam: introduce OidcProviderNative construct utilizing the native CloudFormation resource (#28634) (d8e6c09), closes #21197
• iam: throw ValidationErrors instead of untyped errors (#34579) (bd5caba), closes #32569
• lambda: allow propagating function tags to loggroup (#34556) (f556fd1)
• lambda: throw ValidationErrors instead of untyped errors (#34577) (6ccdd81), closes #32569
• region-info: throw ValidationError instead of untyped Errors (#33384) (303daf2), closes #32569
• s3: add grantReplicationPermission for IAM Role permissions (#34138) (bfa6490), closes #34119
• secretsmanager: throw ValidationErrors instead of untyped errors (#34580) (4d591ef), closes #32569
• servicecatalog: throw ValidationErrors instead of untyped errors (#34581) (3895d76), closes #32569
• sns-subscriptions: support Amazon Data Firehose subscription (#33811) (632179c), closes #14391
• stepfunctions: add grant API for RedriveExecution (#34554) (e03939d), closes #33578

Bug Fixes

• ec2: validate throughput property on EC2 instance block devices (#34571) (b31580a), closes #34033
• elasticloadbalancingv2: fix incorrect max for minimumCapacityUnit (#34586) (8f19b26), closes #34582

---

Alpha modules (2.200.0-alpha.0)

Features

• msk: support Kafka 4.0 (#34501) (aa40e38)

v2.199.0

⚠ BREAKING CHANGES TO EXPERIMENTAL FEATURES

• cloudformation: Some L1 resources experienced breaking changes due to updated CloudFormation resources. Please check the notes for each specific module for more information.
• vpc-lattice: the name and resourceConfigurationType property in CfnResourceConfigurationProps has changed from optional to required. Also, the name, subnetIds and vpcIdentifier properties in CfnResourceGatewayProps have changed from optional to mandatory.

Features

• appconfig: deletion protection check for configuration profile (#34418) (ce88c76)
• cloudformation: update L1 CloudFormation resource definitions (#34555) (64662b2)
• ecs-patterns: add minHealthyPercent and maxHealthyPercent props to NetworkMultipleTargetGroupsFargateService (#34516) (a434aed), closes #34368
• eks: Addon support configurationValues (#34061) (b420033), closes #34001
• events-targets: enable opt-in to use an IAM role for SnsTopic target (#34259) (a3a0cf0)
• stepfunctions-tasks: bedrock createModelCustomizationJob integration (#31913) (0c653d3), closes #29042

Bug Fixes

• elasticloadbalancingv2: add validation on application listeners for certificates on HTTP protocol (#34233) (ca065bb)
• rds: fix incorrect import/export combination check in AuroraMysqlEngineVersion.of() (#33564) (9e41154), closes #33562 #33562

---

Alpha modules (2.199.0-alpha.0)

v2.198.0

Features

• update L1 CloudFormation resource definitions (#34528) (92ad68a)

Bug Fixes

• synthesis fails if tree.json exceeds 512MB (#34478) (ff2f4af)
• aws-ecs-patterns: add missing redirectHTTP dependency on default ALB listener (7b9a07b)
• ecs-patterns: add missing redirectHTTP dependency on main listener in ApplicationLoadBalancedFargateService (#34510) (8e4ca14), closes #34235 /github.com/aws/aws-cdk/blob/2bdc07e45f836a710bc049d43a2462806af1c75d/packages/aws-cdk-lib/aws-ecs-patterns/lib/base/application-load-balanced-service-base.ts#L508
• route53: avoid setting unnecessary properties for Recovery Control type Route53 health check (#34272) (6bc01c9), closes #34262
• ses-actions: condition should use SourceAccount (#34081) (f68b947), closes #29811 #30143 #29833 #30375

---

Alpha modules (2.198.0-alpha.0)

⚠ BREAKING CHANGES TO EXPERIMENTAL FEATURES

• amplify: A compute role is created when platform is Platform.WEB_COMPUTE or Platform.WEB_DYNAMIC.

Features

• amplify: add compute role support for Amplify app (#33962) (7490b92), closes #33882
• ec2: add i7i instance class (#34453) (3fe8ab4)

v2.197.0

Features

• update L1 CloudFormation resource definitions (#34497) (6b7cdcf)
• cloudwatch: anomaly detection alarms (#31232) (e2aa338), closes #10540 #10540
• custom-resource: update default node runtime to node22 in custom resources for commercial, china and gov regions (#34319) (eb5e688)

Bug Fixes

• core: platform is ignored during asset bundling (#33865) (91bec88), closes #30239
• lambda-nodejs: instantiating NodejsFunction without the entry property fails (#34498) (36ce84d)

---

Alpha modules (2.197.0-alpha.0)

v2.196.1

Bug Fixes

• lambda-nodejs: instantiating NodejsFunction without the entry property fails (#34498) (27e0f3a)

---

Alpha modules (2.196.1-alpha.0)

v2.196.0

⚠ BREAKING CHANGES TO EXPERIMENTAL FEATURES

• cloudformation: Some L1 resources experienced breaking changes due to updated CloudFormation resources. Please check the notes for each specific module for more information.
• Logs: The type of property DeliveryDestinationPolicy of resource AWS::Logs::DeliveryDestination changed to be DestinationPolicy instead of JSON.

Features

• apigatewayv2: add dualstack support to domain name (#34111) (8aa2f81), closes #34054 /docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-apigatewayv2-domainname-domainnameconfiguration.html#cfn-apigatewayv2
• cloudformation: update L1 CloudFormation resource definitions (#34425) (6460ffe)
• ecs: throw ValidationErrors instead of untyped errors (#34427) (5cfea39), closes #32569
• eks: throw ValidationErrors instead of untyped errors (#34428) (2e7c55b), closes #32569
• elasticloadbalancingv2: add support for multi-value headers in Lambda target groups (#34298) (c8b98e7)
• elasticsearch: throw ValidationErrors instead of untyped errors (#34429) (13d9645), closes #32569
• events-targets: throw ValidationErrors instead of untyped errors (#34430) (e493cc8), closes #32569
• globalaccelerator: throw ValidationErrors instead of untyped errors (#34426) (5ee092a), closes #32569
• kms: throw ValidationErrors instead of untyped errors (#34431) (10756c1), closes #32569
• opensearchservice: throw ValidationErrors instead of untyped errors (#34432) (5509923), closes #32569
• rds: add Aurora MySQL versions 2.11.6, 2.12.5, 3.04.4 (#34443) (d03e856)
• region-info: update Metadata regions (#34414) (957d8e3)
• route53: add cidrRoutingConfig property (#34301) (5cd82f5)
• s3-tables: add KMS support for TableBucket L2 construct (#34281) (ac0e4ca)
• scheduler: throw ValidationErrors instead of untyped errors (#34434) (bc7c4e8), closes #32569
• servicediscovery: throw ValidationErrors instead of untyped errors (#34435) (28048b3), closes #32569
• ses: https policy for custom tracking domain (#34314) (60d7aea)
• sns-subscriptions: throw ValidationErrors instead of untyped errors (#34436) (98e352d), closes #32569
• stepfunctions: ResultWriter support JSONPath/JSONata bucket (#33793) (8a5aecb), closes #32687
• stepfunctions: add parameters to parallel state (#34131) (0f71ee1), closes #32791
• property injectors and make all L2 Constructors injectable (#34419) (4dc523f)
• stepfunctions: throw ValidationErrors instead of untyped errors (#34438) (e828389), closes #32569
• support healthCheckGracePeriod in QueueProcessingFargateService (#34231) (ae0c7b7), closes #34220
• synthetics: add 5.0 and 5.1 python canary runtimes (#34254) (639b883), closes #34252

Bug Fixes

• cloudwatch-actions: lambda permission use unique prefix id (#34269) (9ddc00a), closes #33958
• eks: eks cluster name exceeding the limit of 100 characters (#34449) (5197882)
• s3: updating blockPublicAccess to enable default true settings (under feature flag) (#33702) (904e3a3), closes #32811 40aws-cdk-testing/framework-integ/test/aws-s3/test/integ.bucket-block-access.ts#L1-L42

---

Alpha modules (2.196.0-alpha.0)

Features

• msk: support Kafka versions 3.9.x and 3.9.x Kraft (#34213) (a1226db)
• pipes-targets: add SNS (#34159) (2f846b3)
• s3tables: server-side encryption by customer managed KMS key (#34229) (488f0db)

Bug Fixes

• ec2: dual-stack vpc without private subnets creates EgressOnlyInternetGateway (under feature flag) (#34437) (35e818b), closes #30981
• ec2-alpha: fix resource id references and tags for migration behind feature flag (#34377) (aa73534)

v2.195.0

Features

• publish 'app-staging-synthesizer-alpha' for Go (#34364) (4e3df41)
• update L1 CloudFormation resource definitions (#34357) (24a40a9)
• apigateway: dualstack REST API (#34114) (efdcb9d)

Bug Fixes

• codepipeline: allow both pullRequestFilter and pushFilter (#34267) (1cac5a0), closes #34253
• route53-targets: beanstalk allow specifying hostedZoneId to support token endpoint with default value derived from stack region or endpointUrl (#34122) (9e52752), closes #31843
• s3-notifications: add a key policy to trust S3 for notifications to an SNS topic encrypted with a KMS key (under feature flag) (#33858) (1e87861), closes #16271

Reverts

• "chore: make all L2 Constructs property injectable during release" (#34371) (1e722ad), closes aws/aws-cdk#34328
• "feat: property injection for 122 constructs" (#34370) (2594f3c), closes aws/aws-cdk#33887

---

Alpha modules (2.195.0-alpha.0)

⚠ BREAKING CHANGES TO EXPERIMENTAL FEATURES

• iot: By default, deviceDertificateAgeCheck is automatically enabled.

Features

• iot: device certificate age check audit configuration (#33816) (9ad383d)
• location: support L2 API Key Construct (#32733) (d867878), closes #30684

Bug Fixes

• amplify-alpha: example code for adding a custom rule is wrong (#34353) (8ab2606), closes #34351

v2.194.0

Features

• update L1 CloudFormation resource definitions (#34278) (e37faed)
• events: throw ValidationErrors instead of untyped Errors (#34316) (06b463f), closes #32569

---

Alpha modules (2.194.0-alpha.0)

v2.193.0

Features

• appsync: add support for data source integrations (#34248) (2fac64e), closes #34264
• codepipeline-actions: add pipeline invoke action support. (#34039) (5488048), closes #33818
• eks: pass additional helm chart values to aws-load-balancer-controller (#34077) (6f0605b), closes #29707 /github.com/kubernetes-sigs/aws-load-balancer-controller/blob/main/helm/aws-load-balancer-controller/values.yaml#L199
• kinesis: throw ValidationErrors instead of untyped Errors (#34239) (7f378b6), closes #32569

Bug Fixes

• efs: support imported subnet (#34041) (20df8fb), closes #33876
• stepfunctions: containsTaskToken doesn't handle null values (#34295) (37a66da), closes #34293

---

Alpha modules (2.193.0-alpha.0)

Features

• pipes-targets-alpha: support Amazon Data Firehose target (#33860) (ebf1ea2)

v2.192.0

Features

• apigateway: add mode property for SpecRestApi (#34198) (feadd8c)
• events: Rule support role (#33779) (9e4c9a9), closes #33722
• iam: support Role.fromLookup() method (#33603) (9e3cbf6), closes #33602
• rds: add support for SQL Server engine versions 15.00.4430.1.v1 and 16.00.4185.3.v1 (#34175) (63f09f1)
• ses: add fromEmailIdentityArn (#33984) (72ee4a7), closes #33981

Bug Fixes

• eks: update aws-node-termination-handler chart version (#34218) (3380742), closes /github.com/aws/aws-cdk/blob/58c2631de585b300cf8573ab423dcc75791cc3d2/packages/aws-cdk-lib/aws-eks/lib/cluster.ts#L1184-L1188

---

Alpha modules (2.192.0-alpha.0)

Features

• applicationsignals-alpha: introduce Application Signals L2 constructs (#32931) (e7a6e14)