v2.191.0

⚠ BREAKING CHANGES TO EXPERIMENTAL FEATURES

• neptune-alpha: Id attribute is being removed from the
  AWS::Neptune::DBClusterParameterGroup and AWS::Neptune::DBParameterGroup
  resources

⚠ BREAKING CHANGES TO L1 constructs

• cloudformation: Some L1 resources experienced breaking changes due to
  updated CloudFormation resources. Please check the notes for each
  specific module for more information.
• aws-launchwizard: specifications prop moved from required to
  optional in CfnDeployment
• aws-ses: attribute attribute moved from required to optional in
  RuleBooleanToEvaluateProperty

Features

• cloudformation: update L1 CloudFormation resource definitions (#34207) (adfa416)
• update L1 CloudFormation resource definitions (e3483c2)
• codebuild: add additional build images for lambda (#34197) (5a265d1)
• rds: add Aurora MySQL versions 2.12.4, 3.08.2 (#34045) (1dd993e)

---

Alpha modules (2.191.0-alpha.0)

Features

• location: throw ValidationError instead of untyped errors (#34174) (2ecf14a)
• msk: throw ValidationError instead of untyped errors (#34214) (02cb5a4)

v2.190.0

⚠ BREAKING CHANGES TO EXPERIMENTAL FEATURES

• cloudformation: Some L1 resources experienced breaking changes due to updated CloudFormation resources. Please check the notes for each specific module for more information.
• backup: The ScheduleStatus property has been removed from AWS::Backup::RestoreTestingPlan.
• eks: The DisableSessionTags and TargetRoleArn properties and ExternalId attribute have been removed from AWS::EKS::PodIdentityAssociation.
• neptune: The Id attribute has been removed from AWS::Neptune::DBSubnetGroup.
• rds: The CertificateDetails and Endpoint properties have been removed from AWS::RDS::DBInstance.
• redshiftserverless: The Workgroup.BaseCapacity attribute has been removed from AWS::RedshiftServerless::Workgroup.
• s3-deployment: The automatic JSON escaping behavior introduced in PR #33698 is now opt-in via the new escape parameter in Source.jsonData(). Users who were relying on the automatic JSON escaping for handling special characters in JSON files will need to explicitly enable this behavior by passing { escape: true } as the third parameter.

Features

• apigatewayv2: HttpStage access logging (#33977) (d04e40f), closes #11100
• bedrock: support Amazon Nova Sonic 1.0 (#34134) (9ffa244)
• cloudformation: update L1 CloudFormation resource definitions (#34164) (4c3ed77)
• cloudfront: backfill enum values in cloudfront module (#34075) (d43e829)
• cognito-identitypool: throw ValidationErrors instead of untyped Errors (#34109) (faee209)
• elasticloadbalancingv2: subnet mappings for network load balancer (#33736) (c6905c6), closes #9696
• fsx: throw ValidationErrors instead of untyped Errors (#34120) (271e439), closes #32569
• rds: new DatabaseInstance.fromLookup (#33258) (eb97d2d)
• s3: allow specifying a custom IAM Role for bucket replication (#33978) (615f626), closes #33974
• ses: throw ValidationErrors instead of untyped Errors (#34098) (7147e75)
• stepfunctions: add support for custom WriterConfig fields for ResultWriter in Distributed Map (#33772) and (#33601) (#33831) (78af355)

Bug Fixes

• cloudfront: fix validation for unresolved webAclId tokens (#34102) (f2c5f26), closes #34099
• core: implicit Aspect applications do not override custom Aspect applications (#34132) (9a76fdc)
• core: typo (#34123) (753ed62)
• custom-resources: custom resource config addLogRetentionLifetime parameter typo (#34090) (78be158), closes #34083
• ecs: FluentdLogDriver add async replacing deprecated asyncConnect (#34059) (c993d34), closes #34055
• eks: integ test faild with InvalidParameterException (#33767) (b19eb69), closes /github.com/aws/aws-cdk/pull/33673#issuecomment-2721663660
• s3-deployment: optimize memory usage for large files (#34020) (7d82072), closes #34002 #22661 #33698 #33698 #33698

Reverts

• ecs: add validation checks to memory cpu combinations of FARGATE compatible task definitions (#34155) (c4fd9fd), closes aws/aws-cdk#33608

---

Alpha modules (2.190.0-alpha.0)

⚠ BREAKING CHANGES TO EXPERIMENTAL FEATURES

• ec2-alpha: The logical ID for the NAT Gateway, defined using the addNatGateways method, will be changed, resulting in the NAT Gateway being recreated. Additionally, the domain for the Elastic IP (EIP) will be set to vpc, which will also trigger its recreation in the account.

Features

• ec2: enabling features for ipv6 and dualstack support with corresponding unit tests (#33898) (47a65db), closes #3873 #33493 #33493
• ec2: throw ValidationErrors instead of untyped Errors (#34127) (93313dd)
• neptune-alpha: add engine versions up to v1.4.5.0 (#33989) (07f1d0a), closes #33807

Bug Fixes

• ec2-alpha: add multiple NATGW to the VPC using addNatGateway method (#34094) (ccd8de7)
• ec2-alpha: update default config for Subnet's assignIpv6AddressOnCreation (#34116) (dff2798)

v2.189.1

Bug Fixes

• core: implicit Aspect applications do not override custom Aspect applications (#34132) (b7f4bc7)

---

Alpha modules (2.189.1-alpha.0)

v2.189.0

Features

• apigatewayv2: dualstack HTTP and WebSocket API (#34054) (eec900e)
• update L1 CloudFormation resource definitions (#34064) (9cb2602)
• bedrock: support Amazon Nova Reel 1.1 (#34070) (3da0c4d)
• support L2 constructs for Amazon S3 Tables (#33599) (2e95252)
• pipelines: add V2 pipeline type support in L3 construct (#34005) (994e952), closes #33995

Bug Fixes

• codepipeline: replace account root principal with pipeline role in trust policy for cross-account actions (under feature flag) (#34074) (2d901f4)
• custom-resources: AwsCustomResource assumed role session name may contain invalid characters (#34016) (32b6b4d), closes #23260 #34011

---

Alpha modules (2.189.0-alpha.0)

Features

• ec2-alpha: implement mapPublicIpOnLaunch prop in SubnetV2 (#34057) (836c5cf), closes #32159

Bug Fixes

• amplify: unable to re-run integ test due to missing status field in customRule (#33973) (6638c08), closes #33962

v2.188.0

Features

• update L1 CloudFormation resource definitions (#33980) (0923b5e)
• update L1 CloudFormation resource definitions (#34029) (be6210f)
• codepipeline: add usePipelineRoleForActions field support in L2 (#33961) (d8bbc1c)
• codepipeline-actions: support ECRBuildAndPublish action (#33375) (c5cd679), closes #33376
• codepipeline-actions: support InspectorEcrImageScanAction and InspectorSourceCodeScanAction actions (#33378) (2dc8cc7), closes #33377
• cognito: v3.0 pre token generation trigger event (#33778) (ea1436f), closes #33733
• events-targets: support ApiGatewayV2 HttpApi (#33864) (91a3076), closes #26649
• kinesisfirehose: support S3 file extension format (#33776) (e314a9a), closes #32154
• logs-destinations: support Amazon Data Firehose logs destination (#33683) (a8edf69), closes #32038 #24766
• pipelines: actions can default to the pipeline service role instead of a newly created role (#33991) (2ebc51e)
• rds: engine lifecycle support (#33902) (c0f8d29), closes #33859

Bug Fixes

• cloudformation-include: parse MinActiveInstancesPercent in AutoScalingRollingUpdate policy (#33852) (89d2d5c), closes #33810 #33810
• cx-api: adding missing readme (#34003) (1c5cbfa), closes #34006 1#L698-L714
• ecr-assets: handle Docker 27.4+ output format in TarballImageAsset (#33967) (009680d), closes #33428
• eks: Only one type of update can be allowed with updateVersion (#33975) (95c06e2), closes #33452
• iam: add validation for OrganizationPrincipal IDs (#33968) (217d75f), closes #32756 #33555 #33773
• lambda: allow retryAttempts = -1 for infinite retries in EventSourceMapping (#34009) (88e04f0), closes #34007
• lambda: deprecate default feature flag @aws-cdk/aws-lambda:createNewPoliciesWithAddToRolePolicy (#34010) (242091a), closes #33688
• pipelines: can't have the same asset display name 3 times (#34017) (1418277), closes #33844 #34004
• stepfunctions-tasks: associateWithParent when using JSONata (#33972) (e839d45), closes #33850
• customer aspect cannot add Tags if a BucketNotifications construct is present (#33979) (2cff67e), closes #33943

---

Alpha modules (2.188.0-alpha.0)

Features

• ec2: add mailmanager vpc endpoints (#33996) (7ee77d7)
• eks-v2-alpha: add new nodegroup ami type (#34025) (864a7c6)

Bug Fixes

• ec2-alpha: addInternetGW handles shared route table for subnets (#33824) (3154d01), closes #33672

v2.187.0

Features

• cx-api: declare support for CDK_TOOLKIT_VERSION env var (#33963) (22dc717)
• update L1 CloudFormation resource definitions (#33954) (7c15988)
• ecr: lookup existing repository (#33662) (5fff3d6), closes #8461
• eks: Nodegroup support nodeRepairConfig (#32626) (b9cb47c), closes #32562
• kinesisfirehose: throw ValidationErrors instead of untyped Errors (#33912) (8b23b5d), closes #32569
• lambda-event-sources: starting position timestamp for kafka (#31439) (5077d8a), closes #31808
• show friendly display names for assets (#33844) (4e958d4)

Bug Fixes

• cognito: fix logging behaviour for user pool client custom resource (#33983) (d02e64a), closes GHSA-qq4x-c6h6-rfxh
• core: asset names for nested stacks contain Tokens (#33966) (85fc87f)
• dynamodb: table v1 retain replica table if table is retain (#33953) (21d0a5c), closes #33952
• eks: looked up vpc causing premature validation errors for private subnets (#33786) (73744b4), closes #22025 /github.com/aws/aws-cdk/blob/main/packages/aws-cdk-lib/aws-ec2/lib/vpc.ts#L2705

---

Alpha modules (2.187.0-alpha.0)

Features

• apprunner: throw ValidationError instead of untyped errors (#33914) (38f89af)
• ec2: adding placementGroup to LaunchTemplateProps and LaunchTemplate (#33726) (e5f71db), closes #33721
• ec2: support the new SupportedRegions property for AWS::EC2::VPCEndpointService (#33959) (0c77cb6)
• iot: backfill enum values in iot module (#33969) (2a8a8a3)

v2.186.0

⚠ BREAKING CHANGES TO EXPERIMENTAL FEATURES

• redshiftserverless: The CfnWorkgroup.attrWorkgroupMaxCapacity attribute has been removed.
• quicksight: The CfnAnalysis.SheetTextBoxProperty.interactions, CfnDashboard.SheetTextBoxProperty.interactions, and CfnTemplate.SheetTextBoxProperty.interactions properties have been removed.
• imagebuilder: The CfnDistributionConfiguration.DistributionProperty.ssmParameterConfigurations property has been removed.

Features

• codecommit: throw ValidationErrors instead of untyped Errors (#33854) (f28eae2), closes #32569
• codedeploy: throw ValidationErrors instead of untyped Errors (#33853) (b6b91dd), closes #32569
• codepipeline: branches and files support in git push filter L2 construct (#33872) (45623d6)
• codepipeline: stage level condition feature L2 construct (#33809) (8e4374f)
• codepipeline: throw ValidationErrors instead of untyped Errors (#33855) (3ff5501), closes #32569
• cognito-identitypool: graduate to stable 🚀 (#33905) (ba52ac7), closes #27483
• config: throw ValidationErrors instead of untyped Errors (#33869) (5bc9292), closes #32569
• docdb: throw ValidationErrors instead of untyped Errors (#33870) (2dc5d70), closes #32569
• dynamodb: throw ValidationErrors instead of untyped Errors (#33871) (a9bae27), closes #32569
• ecr-assets: throw ValidationErrors instead of untyped Errors (#33899) (0787840)
• efs: throw ValidationErrors instead of untyped Errors (#33885) (6bf8095)
• imagebuilder: update L1 CloudFormation resource definitions (#33909) (8cac7bc), closes #33906
• lambda: add Ruby3.4 Lambda runtime support (#33832) (3154615)
• quicksight: update L1 CloudFormation resource definitions (#33910) (21e21cb), closes #33906
• redshiftserverless: update L1 CloudFormation resource definitions (#33911) (fb9fa74), closes #33906
• update L1 CloudFormation resource definitions (#33906) (b855978)
• scheduler-and-scheduler-targets: graduate to stable 🚀 (#33903) (1740f87), closes #31785
• scheduler-targets: EcsRunTask scheduler target (#33697) (3fe58b5), closes #27456

Bug Fixes

• context provider's ignoreErrorOnMissingContext parameter is misleading (#33875) (b3187b9)
• core: does not generate a valid artifact id from some construct IDs (#33863) (6a5638a), closes #32808
• cx-api: adding missing readme (#33867) (6761f56), closes #33866 1#L662-L681
• events: now EventBus.grantPutEventsTo correctly handles service principals (under feature flag) (#33729) (38d82c4), closes #22080 #22080

---

Alpha modules (2.186.0-alpha.0)

Features

• ec2: backfill missing enums for ec2 (#33821) (ae3fd67), closes /docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ec2-vpc.html#cfn-ec2 /docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ec2-vpcendpoint.html#cfn-ec2
• ec2: support PrefixList.fromLookup() (#33619) (b6a15f3), closes aws/aws-cdk#33606 aws/aws-cdk#15115
• ec2: support AWS::EC2::VPCEndpointService SupportedIpAddressTypes property (#33877) (ed5df9c)

Bug Fixes

• eks-v2-alpha: prevent IAM role creation when node pools are empty (#33894) (55bf451), closes #33771

v2.185.0

Features

• s3-deployment: backfill missing enums for s3-deployment (#33819) (2623e00), closes /docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-s3-bucket-serversideencryptionbydefault.html#aws-properties-s3
• update L1 CloudFormation resource definitions (#33800) (fada917)
• ecs: add validation checks to memory cpu combinations of FARGATE compatible task definitions (#33608) (734ca66), closes #22216 /github.com/aws/aws-cdk/issues/31106#issuecomment-2289166090
• ecs: backfill missing enums for ecs (#33644) (28c6a22)
• eks: backfill missing enums for eks (#33646) (f67a88b)
• logs: throw ValidationError instead of untyped Errors (#33753) (1fea9f1)

Bug Fixes

• core: remove whitespaces in tree.json (#33784) (73b9138), closes #27261 #27261
• s3: add validation for lifecycle rule transitions (#33731) (4128ff4), closes #22103 #22103
• s3-deployment: handle properly quoted strings in JSON files (#33698) (bff85e8), closes #22661 #22661
• stepfunctions-tasks: jobQueueArn support JsonPath or JSONata (#33670) (1c09c8b), closes #33580

---

Alpha modules (2.185.0-alpha.0)

⚠ BREAKING CHANGES TO EXPERIMENTAL FEATURES

• scheduler-targets-alpha: The class KinesisDataFirehosePutRecord has been renamed to FirehosePutRecord.

Bug Fixes

• scheduler-targets-alpha: rename KinesisDataFirehosePutRecord to FirehosePutRecord (#33758) (e6f5bc8), closes #33757 #33798

v2.184.1

Reverts

• iam: fix(iam): adding organization id pattern verification (#33773) (f7ed316), closes aws/aws-cdk#33768

---

Alpha modules (2.184.1-alpha.0)

v2.184.0

Features

• ecr: throw ValidationError instead of untyped Errors (#33750) (242690f)
• lambda: support s3 OFD for Kinesis/DynamoDB (#33739) (3f1fecf)
• rds: allow to specify availability zone for Aurora instances (#33515) (583d5f2), closes #33503 #30618

Bug Fixes

• codepipeline: replace account root principal with current pipeline role in the trust policy under ff: @aws-cdk/pipelines:reduceStageRoleTrustScope (#33742) (a64b01c), closes #33709
• core: message including tokens from annotations cannot output correctly (#33706) (55a3c4c), closes #33707
• events-targets: add LogGroupTargetInput.fromObjectV2() method (#33720) (584a58c)

---

Alpha modules (2.184.0-alpha.0)

⚠ BREAKING CHANGES TO EXPERIMENTAL FEATURES

• glue-alpha: Updated casing of workflow.addconditionalTrigger to workflow.addConditionalTrigger.

Bug Fixes

• glue-alpha: inconsistent workflow addconditionalTrigger casing (#33752) (4886a3e), closes #33751 #33751