v1.12.0

Bug Fixes

• apigateway: defaultChild on RestApi returns the underlying L1 (#4318) (53db8bc), closes #3234
• cloudmap: fix CloudMap Service import, expose ECS CloudMap Service (#4313) (c968c96), closes #4286
• codebuild: validate if a CodePipeline action that is cross-account does not have outputs (#4171) (1744f8a), closes #4032
• custom-resources: support region for AwsCustomResource (#4298) (934d36f), closes #4292
• ecr-assets: exclude option (#4354) (f96b2fb), closes #4353 #4353
• ecs: nat network mode for windows tasks (#4317) (9ceb995), closes #4272
• lambda-event-sources: add missing export of streams.ts (#4362) (032b70c), closes #4352

Features

• cloudformation: nested stacks (#2821) (5225306), closes #239 #395 #3437 #1439 #3463
• ecs: add a new API for registering ECS targets (#4212) (de84c4a)
• ecs: add support for ProxyConfiguration in ECS TaskDefinition (#4007) (68e1e85)
• ecs: Add warning message when pulling ECR image (#4334) (bd36c6c)
• ecs-patterns: add CloudMapOptions to load balanced services (#4369) (de0a028)
• rds: add support for monitoring to database cluster (#2828) (910c8bf), closes #2826
• stepfunctions: add support for Map state (#4145) (c8f0bcf)

BREAKING CHANGES

• cloudmap: cloudmap.Service.fromServiceAttributes takes a newly
  required argument namespace.

v1.11.0

Bug Fixes

• cli: make new CLI work with old assembly versions (#4307) (2f979b7), closes #4294
• iam: validate actions (#4278) (3917c4b)
• stepfunctions: allow condition on array (#4340) (47203f4)

Features

• codepipeline: validate that source actions are in the same region as the pipeline (#4303) (c35091f)
• update CloudFormation resource specification to v6.2.0 (#4309) (92b05a6)
• cli: Add Jest tests to JavaScript init templates (#4282) (22a5ada), closes #4027
• ecs-patterns: Allow overriding loadBalancer and taskDefinition (#4213) (f2a6d46)
• lambda: event-source maxBatchingWindow property (#4260) (4040032)

v1.10.1

Bug Fixes

• cli: make new CLI work with old assembly versions (#4307) (9222447), closes #4294

v1.10.0

Bug Fixes

• acm: on delete, wait for certificate to become unused (#4191) (db77bfe), closes #4179
• acm: support Tokens for domainName in Certificate (#4251) (ee1283d), closes #4232
• apigateway: honour requestParameters passed via defaultMethodOptions (#4249) (b347c35)
• apigateway: proxy method options are not duplicated to root (#4192) (0d235fe)
• appmesh: actually set listener healthCheck.path (#4218) (602bac2)
• cloudtrail: fix use of imported bucket with CloudTrail (#4270) (7adb5ea), closes #4256
• cloudwatch: can use percentile override in Alarm (#4253) (859e4d1), closes #3845
• ecr-assets: docker build targets (#4185) (91cda9d), closes #4184
• ecr-assets: give accurate error when Tokens are being used (#4255) (1381b2d), closes #3795
• ecs: FargateTaskDefinition supports Tokens for cpu and memory (#4224) (c9529f9)
• glue: expose CfnTable as defaultChild (#4197) (467d855)
• lambda: asset metadata invalid for layers (#4205) (d998e46), closes #4076 awslabs/aws-sam-cli#1411
• route53: use static s3 website endpoint (#4250) (3c252c4)
• rule: make ruleName accessible on Rule object (#4252) (be06fd5), closes #3809
• s3: missing http on website url (#4189) (960d71f)
• ssm: AWS::EC2::Image::Id parameter type (#4161) (48c26c2)

Features

• appmesh: eagerly validate healthCheck settings (#4221) (84a1b45)
• core: context lookup errors are reported to CX app (#3772) (b0267e4), closes #3654
• ec2: add custom userdata factory (#4193) (3a9f4c8)
• ec2: add sourceDestCheck to instance (#4186) (6e75168)
• ec2: let Instance be IGrantable (#4190) (87f096e)
• ecr-assets: Support .dockerignore (faster Docker builds) (#4104) (8389eeb)
• ecs: add protocol option and default certificate for HTTPS services (#4120) (e02c6cc)
• ecs: add URL output for LB services (#4238) (38d78ed)
• ecs-patterns: support propagateTags and ecsManagedTags (#4100) (caa0077), closes #3979
• eks: retrieve ami with ssm (#4156) (622a4e1)
• eks: upgrade latest kubertenes version to 1.14 (#4157) (c7def91)
• elasticloadbalancingv2: add Instance target (#4187) (f11bece)
• s3-deployment: allow specifying memory limit (#4204) (84e1d4b), closes #4058
• ses-actions: move SES rule actions to separate package (#4163) (a9fef66), closes #3726
• publish construct tree into the cloud assembly (#4194) (3cca03d)

BREAKING CHANGES

• ses-actions: adding an action to a receipt rule now requires an integration
  object from the @aws-cdk/aws-ses-actions package.

v1.9.0

Bug Fixes

• apigateway: cross-stack lambda integration causes a cyclic reference (#4010) (17fc967), closes #3705 #3000
• apigateway: json schema additionalProperties should be boolean (#3997) (73a1de1)
• cloudfront: actually default 'compress' to true (#3359) (364fd56)
• core: stack.urlSuffix is no longer scoped (#4011) (82e08bc), closes #3970
• ec2: fix subnet selection on looked-up VPCs (#4090) (4a113e6), closes #3650
• ec2: improve errors around subnet selection (#4089) (2392108), closes #3859
• elbv2: allow multiple certificates on ALB listener (#4116) (d1f8e5c), closes #3757
• elbv2: fix cross-stack use of ALB (#4111) (7dfd6be)
• elbv2: unhealthyHostCount metric case fix (#4133) (899656c)
• events: remove custom resource for fargate event target (#3952) (920f12f), closes #3930
• events: remove policy statement from CF template when using AwsApi (#4037) (2e67c2d)
• route53: remove http:// from bucket target (#4070) (621441d)

Features

• codebuild: add support of Amazon Linux 2 image (#4052) (#4055) (f63bf6f)
• codepipeline: cross-environment (account+region) actions (#3694) (69bff3d), closes #52 #1584 #2517 #2569 #3275 #3138 #3388
• codepipeline: handle non-CFN cross-region actions (#3777) (b8b4c4d), closes #3387
• cognito: add PreTokenGeneration lambda trigger support (#3910) (e9f46da), closes #2497
• ecs: add additional log drivers (#3762) (f308f1d), closes #3761
• ecs: allow load balancing to any container and port of service (#4107) (c3b3c93)
• iam: support NotPrincipal in policy statements (#4077) (9945d9e)
• route53: Domain redirect pattern (#3946) (3ac4671), closes #3893
• s3-deployment: allow multiple Sources for single Deployment (#4105) (2ce4a87)
• update baseline requirement for node engine to 10.3.0 (#4135) (d5ab865)
• sns: add support for attribute key matching in message filtering (#3709) (dbf0134)
• upgrade CloudFormation resource specification to v6.1.0 (#4112) (3d693e6)
• toolkit: conditionally emit AWS::CDK::Metadata resource (#3692) (5901d6e), closes #3648

BREAKING CHANGES

• s3-deployment: Property source is now sources and is a Source array

v1.8.0

Bug Fixes

• app-delivery: action template filename incorrect (#3986) (f6ef79d), closes #3595
• certificatemanager: increase minimum validation total timeout (#3914) (4973a8c)
• custom-resources: correctly handle booleans conversion (#4000) (77105ab), closes #3933
• dynamodb: prevent "StreamARN not found for resource" errors (#3935) (617ef82)
• ecs: separate application and network load balanced services (#3719) (21eb835)
• events: fromObject handles regular and field tokens together (#3916) (b01f62d), closes #3915
• iam: only attach policies to imported roles if the accounts match (#3716) (87db7aa), closes #2985 #3025

Code Refactoring

• assets: remove content hash attribute (#4003) (181b58b)

Features

• cli: #3971 changed cdk synth to rebuild app (#3972) (198f45f)
• ec2: support configuring network ACLs (#3699) (3f10543), closes #3621
• ecr-assets: fail if tokens are used in buildArgs (#3989) (56ce9ff), closes #3981
• eks: add EKS AMis for 1.14 (#3950) (741ef43)
• eks: spot capacity and bootstrap options (#3937) (5da6b36), closes #3523 #3857 #3929 #3938 #3939
• events: allow passing a role to the CodePipeline target (#4006) (c4054ce), closes #3999

BREAKING CHANGES

• assets: assets no longer expose a property contentHash. Use sourceHash
  as a good approximation. if you have a strong use case for content hashes, please
  raise a github issue and we will figure out a solution.
• dynamodb: fix
• ecs: The LoadBalancedServiceBase, LoadBalancedEc2Service and LoadBalancedFargateService constructs have been separated out into Application and Network LoadBalancedService constructs for both Ec2 and Fargate Services.

v1.7.0

Bug Fixes

• codepipeline: insufficient deploy cross-account CFN role S3 permissions (#3855) (09304f7), closes #3765
• ecs: default ecsmanagedtags and propagatetags to be undefined (#3887) (1f589a3)
• init-templates: add typesRoot compiler option for TypeScript templates (#3865) (2c9bafa), closes #3830
• init-templates: fix to include environments and CDK files to .gitignore for Python templates (#3863) (e4f9677), closes #2842
• lambda: environment var values are strings (#3858) (f892312), closes #3337
• s3-deployment: CallerReference has to be unique (#3880) (16eb658)

Features

• ecs,lambda,rds: specify allowAllOutbound when importing security groups (#3833) (5ef34a1)
• events: validate MessageGroupId is specified only for FIFO queues (#3811) (cc88f1a)
• upgrade to CloudFormation specification 6.0.0 (#3942) (27de0a0)

BREAKING CHANGES

• ecs,lambda,rds: securityGroupId: string replaced by securityGroup: ISecurityGroup when
  importing a cluster/instance in @aws-cdk/aws-rds

v1.6.1

Bug Fixes

• cloudwatch: don't ignore 'stacked' property in GraphWidget class (#2103) (#3796) (527b362)
• init-templates: remove dependency on @types/node (#3840) (f46ce18), closes #3839
• toolkit: do not deploy empty stacks (#3144) (64ace90)
• vpc: recognize Public subnets by Internet Gateway (#3784) (54599e5), closes #3706

v1.6.0

Bug Fixes

• aws-stepfunctions: refactor sagemaker tasks and fix default role issue (#3014) (d8fcb50)
• cli: update bit.ly link to use GitHub link directly (#3782) (042fb53)
• ec2: also add egress rules for allowInternally() (#3741) (051aacb), closes #3254
• ec2: fix error when using Tokens in Vpc.fromLookup() (#3740) (004077f), closes #3600
• ec2: throw useful error when using lazy CIDR in VPC (#3739) (c92e9a9), closes #3617
• ecs: IAM role ARN must not specific region. (#3755) (210ed8f), closes #3733
• events: fix ECS target in Isolated subnet (#3786) (8bbc7e6)
• iam: make User implement IUser (#3738) (05e13f3), closes #3490
• lambda: generate correct metrics for aliases (#3728) (ce08853), closes #3724
• lambda/rds: allow to specify a role for log retention lambda (#3730) (013cab6), closes #3685
• scaling: don't fail when using Tokens (#3758) (0a2ed3d)

Features

• acm: validated certificate can use existing Role (#3785) (b51723c), closes #3519 #3753
• appmesh: add support for AWS AppMesh (#2299) (98863f9), closes #2297
• cloudfront: define lambda@edge as resolvable resource (#2861) (c39d659), closes #1575
• cloudtrail: accept existing S3 bucket (#3680) (c2d6847), closes #3651
• core: stack.templateFile (#3808) (ac54e14), closes #3807
• ec2: add Instance and Bastion Host (#3697) (ef09aba), closes #3174 #1713
• ec2: imported SecurityGroups don't create egress rules (#3386) (04710d0), closes #3355
• ec2: Validate IP addresses passed to CidrIPvX (#3642) (b67b0f3), closes #3639
• ecs: add GPU support in container definition (#3044) (2590327)
• ecs: support ecs tag propagation and ecs managed tags (#3420) (1e81053)
• eks: updated AMI and EC2 instance sizes (#3805) (2d165ad), closes #3751
• elbv2: add support for Lambda targets (#3348) (f003dcc), closes #1921
• events: add target to make AWS API calls (#3720) (b6f055a), closes #2538
• region-info: report availability of metadata service in Bahrein & Hong-Kong (#3799) (95d8ac3)
• updated CloudFormation Resource specification 5.3.0 (#3789) (39ee810)

v1.5.0

Bug Fixes

• aws-cdk: update Java template to new builder style (#3723) (ab07af1)
• ecr: set correct resource policy for ecr repository (#3590) (30f3968)
• events-targets: allow adding same fargate task to multiple rules (#3576) (5b109f9), closes #3574
• iam: support NotActions/NotResources (#964) (#3677) (a8ee987)
• kms: append aliasName only after first (#3659) (77671ad)
• region-info: IAM service principal for China regions (#3491) (013c181)
• s3-deployment: custom resource fails to run aws-cli (#3668) (6eabe6d), closes #3656

Features

• bootstrap: force toolkit bucket private (#3695) (d1ee4ba)
• cloudformation: Update CloudFormation spec to 5.2.0 (#3710) (ab86df7)
• cloudformation: update cloudformation spec to v5.1.0 (#3670) (15f01d0)
• eks: output update-kubeconfig command (04d88fb), closes #3664
• eks: output update-kubeconfig command (#3669) (9e46532), closes #3664
• events-targets: allow specifying event for codebuild project target (#3637) (c240e1e)

BREAKING CHANGES

• aws-cdk: Java builders no longer use the "with" prefix.
• eks: cluster name output will not be synthesized by default. instead we synthesize an output that includes the full aws eks update-kubeconfig command. You can enable synthesis of the cluster name output using the outputClusterName: true options.