v2.154.0

Features

• update L1 CloudFormation resource definitions (#31145) (5387605)
• batch: add ECS_AL2023 (#30928) (d45bf08)
• CLI: synth displays "AssertDescription: CDK bootstrap stack version 6 required" (#31092) (751a922), closes #17942
• core: configure SNS topics to receive stack events on the Stack construct (#30551) (0cdce20), closes #8581
• dynamodb: adding on-demand-throughput to table (#30725) (d5a19bb), closes #30091
• elasticloadbalancingv2: connection logs for ALB (#30599) (7c4f423)
• elasticloadbalancingv2: support Mutual Authentication with TLS for Application Load Balancer (#30784) (7eae4d1), closes #28206
• region-info: update Metadata regions (#31044) (ae7d181)
• region-info: update Metadata regions (#31046) (6ec69b9)
• region-info: update Metadata regions (#31047) (9025635)
• s3: add skip destination validation property (#30916) (ffc40e5), closes #30914 #30914
• ssm: support cross-account sharing (#30646) (1eb1ea6), closes #29292
• set log retention of all CDK-vended custom resources with CustomResourceConfig (#31041) (f2babd9)
• update L1 CloudFormation resource definitions (#31025) (5414932)
• update L1 CloudFormation resource definitions (#31086) (62a641c)
• update L1 CloudFormation resource definitions (#31120) (931ebba)
• vpc: support custom route and subnet (#30538) (e17fdd7), closes RFC#507

Bug Fixes

• elasticloadbalancingv2-targets: add AlbListenerTarget for NLBs, deprecate AlbTarget due to ALB listener race conditions (#17208) (#30396) (1fca1e5), closes /github.com/aws/aws-cdk/issues/17208#issuecomment-1681475590
• lambda: validate localMountPath format and length (#31019) (c159e77)
• vpc-v2: fixing default scope id (#31102) (0007a29)

Reverts

• feat(core): configure SNS topics to receive stack events on the Stack construct (#31100) (5f30aa5), closes aws/aws-cdk#30551
• feat(ec2): security group lookup via filters (#31065) (79b5cd2), closes aws/aws-cdk#30625
• feat(ecs): add validation checks to memory cpu combinations of FARGATE compatible task definitions (#31110) (ffba5b1)

---

Alpha modules (2.154.0-alpha.0)

Features

• amplify: support custom certificate (#30791) (8d76778), closes #30594
• ec2: security group lookup via filters (#30625) (abc78bf), closes #30331
• sagemaker: network isolation for a model (#30657) (f1af7fc)

Bug Fixes

• cli-lib-alpha: bootstrap fails with "bad argument name" error for trust and trustForLookup (#31159) (b11ca4a), closes #30404
• cognito-identitypool-alpha: validation error if provided id is a token (#30882) (ad1b797), closes #29780 #28184
• ec2: prevent deduplication of init command args (#30821) (1e7c690), closes #26221

v2.153.0

Features

• lambda: support Recursive Loop Protection property (572fe0a)

---

Alpha modules (2.153.0-alpha.0)

v2.152.0

Features

• lambda: support filter criteria encryption (6aa72a2)

---

Alpha modules (2.152.0-alpha.0)

v2.151.1

Reverts

• feat(ecs): add validation checks to memory cpu combinations of FARGATE compatible task definitions (#31110) (8fdf015)

---

Alpha modules (2.151.1-alpha.0)

v2.151.0

Features

• apigatewayv2: add description property for stage (#30820) (8651bbe)
• ec2: add versionDescription property for LaunchTemplate (#30837) (597228c)
• ecs: add validation checks to memory cpu combinations of FARGATE compatible task definitions (#30166) (8b4685e), closes #22216
• elasticloadbalancingv2: support Weighted Random algorithm and Automatic Target Weights for alb (#30542) (d0a609d), closes #29969
• events: add description property for eventBus (#30935) (28fbc82)
• events: support customer managed key for event bus (#30493) (8c44aa7)
• synthetics: add activeTracing, memory and timeout property to Canary class (#30556) (9295a85), closes #9300 #14086 #28152 #9300
• update L1 CloudFormation resource definitions (#30973) (63c45e4)
• sns: add validation of displayName for topic (#30770) (da2ec75)
• stepfunctions-tasks: allow BedrockInvokeModel to use JsonPath (#30298) (f5dd73b), closes #29229

Bug Fixes

• appconfig: sourcedConfiguration doesn't use retrievalRole (#30733) (9d79c51), closes #30609
• ec2: export NatGatewayProvider for consistency with NatInstanceProvider (#28810) (fbc28bc), closes #28372
• ecs: fromServiceArnWithCluster not accepting value from SSM Parameter string (#30902) (0baa573), closes #30798
• stepfunctions: allow disable x-ray (#30808) (d56d05c), closes #30796
• stepfunctions-tasks: fix the generated IAM policy for EFS operations (#30896) (31808b4), closes #30862
• stepfunctions-tasks: run task perm no longer valid (#30788) (82b163d), closes #30751

---

Alpha modules (2.151.0-alpha.0)

Features

• kinesisanalytics-flink: add support for Flink 1.19 (#30723) (c185194), closes /docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-kinesisanalyticsv2-application.html#aws-resource-kinesisanalyticsv2

v2.150.0

Features

• update L1 CloudFormation resource definitions (#30921) (153a698)
• ec2: add g6 instance (#30693) (90a41d5), closes #30683
• lambda: add SnapStart support for arm64 functions (#30898) (b4377a5), closes #30899
• logs: enabling IA log group creation in CN and GovCloud regions (#30904) (230b56b)
• update L1 CloudFormation resource definitions (#30860) (ce7a8d5)

Bug Fixes

• custom-resources: provider framework will always log all data including confidential data (#30689) (9bd92da), closes #30275
• stepfunctions-tasks: allow camelCase for parameters of CallAwsServiceCrossRegion (#30795) (5d6ace8), closes #30799

---

Alpha modules (2.150.0-alpha.0)

v2.149.0

Features

• codedeploy: zonal configuration for ServerDeploymentConfig (#30429) (da0dc57), closes #30430
• codestarnotifications: add createdBy property for notification rule (#30780) (a68b418)
• stepfunctions-tasks: add guardrailConfiguration and trace property to the BedrockInvokeModel (#30426) (772b1d1), closes #30425
• stepfunctions-tasks: enable resultReuseConfiguration in AthenaStartQueryExecution (#30447) (046bf56), closes #30446
• update L1 CloudFormation resource definitions (#30786) (6d0a09f)

Bug Fixes

• apigateway: authorization scope is not added when not explicitly defining authorization type in method or root api (#30822) (e4367a0), closes #30444
• scheduler-targetes-alpha: multiple schedules cause resolution error during synth (#30634) (727e886), closes #28713
• bootstrap: adds restrictions to the File Publishing Roles that prevents uploading assets to a bucket not owned by the target account (#30823)

---

Alpha modules (2.149.0-alpha.0)

v2.148.1

Bug Fixes

• apigateway: authorization scope is not added when not explicitly defining authorization type in method or root api (#30822) (4bee768), closes #30444

---

Alpha modules (2.148.1-alpha.0)

v2.148.0

Features

• lambda: add grantInvokeLatestVersion to grant invoke only to latest function version (#29856) (61c28dd), closes #20177
• update L1 CloudFormation resource definitions (#30722) (4ceeced), closes /docs.aws.amazon.com/service-terms/#87
• codebuild: adding project.visibility (#30103) (1bacb69)
• codedeploy: termination hook (#30644) (8f652a7)
• cognito: add defaultRedirectUri to UserPoolClient (#30481) (f2c5f68)
• eks: eks pod identities (#30576) (9437b4d), closes /github.com/aws/aws-cdk/blob/b196b13b0b8a54dcacadf87fdbe744772a6e6c4d/packages/aws-cdk-lib/aws-eks/lib/oidc-provider.ts#L36 /github.com/aws/aws-cdk/blob/b196b13b0b8a54dcacadf87fdbe744772a6e6c4d/packages/aws-cdk-lib/aws-eks/lib/oidc-provider.ts#L36 /github.com/aws/aws-cdk/blob/b196b13b0b8a54dcacadf87fdbe744772a6e6c4d/packages/aws-cdk-lib/aws-iam/lib/role.ts#L373 #30519
• stepfunctions-tasks: step functions task for cross-region AWS API call (#30061) (1397737), closes #29918
• update L1 CloudFormation resource definitions (#30642) (2a659f0)
• fsx: add properties to enable automatic backups for Lustre file system (#30343) (3b95777), closes #30340

Bug Fixes

• ecs: let AsgCapacityProvider use IAutoScalingGroup only when Managed Termination Protection is disable (#30335) (efee07d), closes #29174
• lambda-nodejs: breaking change in esbuild causes import module error (#30726) (7f5ce4b), closes #30717
• s3: allow import S3 bucket with a legacy name (#30679) (e09126f), closes #22640
• s3-notifications: unable to delete the existing S3 event notifications (#30610) (b880067), closes #28915s too broad (under feature flag) (#30389) (8ebfade), closes #30368

Reverts

• fix(core): overrideLogicalId validation (#30695) (0aa2be7), closes aws/aws-cdk#29708
• route53 CrossAccountZoneDelegationRecord fails at deployment time with imported delegatedZone (#30440)" (#30606) (95280a0), closes #30600

---

Alpha modules (2.148.0-alpha.0)

Features

• apprunner: add AutoScalingConfiguration for AppRunner Service (#30358) (a598508), closes #30353
• apprunner: add ObservabilityConfiguration for AppRunner Service (#30359) (9e9cc27), closes #22985
• pipes-enrichments: add Step Functions enrichment eventbridge pipes (#30495) (8b495f9), closes #29385
• pipes-targets: add lambda function (#30271) (f594fae), closes #30270

Bug Fixes

• apprunner: auto deployment fails after new container image pushed due to lack of a permission (#30630) (cce10b1), closes #26640 /github.com/aws/aws-cdk/blob/main/packages/aws-cdk-lib/aws-ecr/lib/repository.ts#L385 40aws-cdk/aws-apprunner-alpha/lib/service.ts#L1303 40aws-cdk/aws-apprunner-alpha/lib/service.ts#L1368

v2.147.3

Bug Fixes

• lambda-nodejs: breaking change in esbuild causes import module error (#30726) (06c14b1), closes #30717

---

Alpha modules (2.147.3-alpha.0)