v2.148.0

Features

• lambda: add grantInvokeLatestVersion to grant invoke only to latest function version (#29856) (61c28dd), closes #20177
• update L1 CloudFormation resource definitions (#30722) (4ceeced), closes /docs.aws.amazon.com/service-terms/#87
• codebuild: adding project.visibility (#30103) (1bacb69)
• codedeploy: termination hook (#30644) (8f652a7)
• cognito: add defaultRedirectUri to UserPoolClient (#30481) (f2c5f68)
• eks: eks pod identities (#30576) (9437b4d), closes /github.com/aws/aws-cdk/blob/b196b13b0b8a54dcacadf87fdbe744772a6e6c4d/packages/aws-cdk-lib/aws-eks/lib/oidc-provider.ts#L36 /github.com/aws/aws-cdk/blob/b196b13b0b8a54dcacadf87fdbe744772a6e6c4d/packages/aws-cdk-lib/aws-eks/lib/oidc-provider.ts#L36 /github.com/aws/aws-cdk/blob/b196b13b0b8a54dcacadf87fdbe744772a6e6c4d/packages/aws-cdk-lib/aws-iam/lib/role.ts#L373 #30519
• stepfunctions-tasks: step functions task for cross-region AWS API call (#30061) (1397737), closes #29918
• update L1 CloudFormation resource definitions (#30642) (2a659f0)
• fsx: add properties to enable automatic backups for Lustre file system (#30343) (3b95777), closes #30340

Bug Fixes

• ecs: let AsgCapacityProvider use IAutoScalingGroup only when Managed Termination Protection is disable (#30335) (efee07d), closes #29174
• lambda-nodejs: breaking change in esbuild causes import module error (#30726) (7f5ce4b), closes #30717
• s3: allow import S3 bucket with a legacy name (#30679) (e09126f), closes #22640
• s3-notifications: unable to delete the existing S3 event notifications (#30610) (b880067), closes #28915s too broad (under feature flag) (#30389) (8ebfade), closes #30368

Reverts

• fix(core): overrideLogicalId validation (#30695) (0aa2be7), closes aws/aws-cdk#29708
• route53 CrossAccountZoneDelegationRecord fails at deployment time with imported delegatedZone (#30440)" (#30606) (95280a0), closes #30600

---

Alpha modules (2.148.0-alpha.0)

Features

• apprunner: add AutoScalingConfiguration for AppRunner Service (#30358) (a598508), closes #30353
• apprunner: add ObservabilityConfiguration for AppRunner Service (#30359) (9e9cc27), closes #22985
• pipes-enrichments: add Step Functions enrichment eventbridge pipes (#30495) (8b495f9), closes #29385
• pipes-targets: add lambda function (#30271) (f594fae), closes #30270

Bug Fixes

• apprunner: auto deployment fails after new container image pushed due to lack of a permission (#30630) (cce10b1), closes #26640 /github.com/aws/aws-cdk/blob/main/packages/aws-cdk-lib/aws-ecr/lib/repository.ts#L385 40aws-cdk/aws-apprunner-alpha/lib/service.ts#L1303 40aws-cdk/aws-apprunner-alpha/lib/service.ts#L1368