v1.4.0

Bug Fixes

• acm: validated certificate survives eventual consistency in service (#3528) (e7eabca), closes #3527
• ec2: allow adding gateway endpoints to imported VPC (#3509) (b5db88d), closes #3171 #3472
• typo in restapi.ts (#3530) (8381683)
• apigateway: allow reusing lambda integration for multiple apis (#3532) (6e6440a)
• apigateway: invalid schema generated due to un-mapped ref (#3258) (254f62c)
• asg/ec2: fix value of defaultChild (#3572) (c95eab6), closes #3478
• aws-ecs: ensure cluster attributes are accessible from constructor’s props (#3020) (24ebec8)
• cdk-dasm: update README and fix small typo (#3565) (92b5c2d)
• ci: add "do-not-merge" label auto-merge block (#3553) (0c806a6)
• cli: support aws:// prefix for bootstrap command (#3599) (8ac7389)
• core: correct return type of Fn.getAtt (#3559) (02ef2dc)
• core: fix detection of references in Fn.join (#3569) (0a2540b), closes #3554
• core: fix use of references in toJsonString() (#3568) (0fc2c3b)
• ecs: update driverOpts type definition from array to map (#3358) (65e4a5d)
• events: simplify the cache key for cross-account targets (#3526) (db7dc2e)
• java: surpress maven output in cdk.json (#3624) (02e097b), closes #3571
• kms: allow multiple addAlias calls on single key (#3596) (54f8ea9)
• lambda: allow ArnPrincipal in grantInvoke (#3501) (e222e87), closes #3264
• sqs: do not emit grants to the AWS-managed encryption key (#3169) (07f017b), closes #2794
• ssm: add GetParameters action to grantRead() (#3546) (ebaa1b5)

Code Refactoring

• stepfunctions-tasks: make integrationPattern an enum (#3115) (fa48e89), closes #3114

Features

• apigateway: support imported roles for integrations (#3369) (15df3c7), closes #2860
• autoscaling: blockDevices property (#3622) (6953e03)
• autoscaling: health check configuration (#3390) (#3436) (76e5173), closes #3381
• aws-codebuild: support pull_request_merged eventaction type (#3575) (5d4a275), closes #3557
• aws-stepfunctions-tasks: support step functions state machine execution from a task state (#3522) (ac77990), closes #3521
• bootstrap: add kms option to cdk bootstrap (#3634) (d915aac)
• cloudformation: update Resource Specification to v5.0.0 (#3605) (1509399)
• codepipeline: allow cross-account CloudFormation actions (#3208) (8df4b7e)
• ec2: add GenericWindowsImage (#3454) (f4ca41c), closes #3400
• ecs: container dependencies (#3032) (56656e0), closes #2490
• ecs-patterns: allow customizing logdriver (#3550) (8ffba4b)
• eks: add HKG (ap-east-1) EKS AMIs (#3533) (e9f9907)
• eks: default capacity (#3633) (91af473), closes #3541
• eks: default vpc (#3632) (3a96c27), closes #3541
• eks: programmatic definition of kubernetes resources (#3510) (4e11d86)
• elasticloadbalancing: add subnet selection (#2833) (#3415) (14e4bc9)
• iam: add Role.externalIds property (#3598) (ba2a4df)
• iam: customer managed policies (#3578) (4681d01)
• png and svg of official aws-cdk logo (#3567) (7158e45), closes #3561
• iam: support permissions boundary policy for User and Role (#3584) (661a95e)
• .net: templatized csharp sample app and moved from init to sample-app. Changed hook code to allow templating. (#3525) (dd52cec)
• route53: add classic elb target support (#3380) (b0720dd)
• route53-targets: s3 bucket website target support (#3618) (bccc11f)
• s3: website routing rules (#3411) (33f3554)
• s3-deployment: CloudFront invalidation (#3213) (e84bdd6), closes #3106

BREAKING CHANGES

• eks: clusters will be created with a default capacity of x2 m5.large instances.
  You can specify defaultCapacity: 0 if you wish to disable.
• stepfunctions-tasks: To define a callback task, users should specify "serviceIntegrationPattern: sfn.ServiceIntegrationPattern.WAIT_FOR_TASK_TOKEN" instead of "waitForTaskToken: true".
  For a sync task, users should use "serviceIntegrationPattern: sfn.ServiceIntegrationPattern.SYNC" in the place of "synchronous: true".

v1.3.0

Bug Fixes

• aws-ecs-patterns: update ecs-patterns to be consistent across constructs (#3404) (f7fbbe0)
• aws-kms: Incomplete KMS Resource Policy Permissions (#3459) (1280071), closes #3458 #3458
• cli: conversion of "tags" filter for EC2 DescribeVpcs call (#3393) (cf2e3f6), closes #3372
• cli: correctly handle tags when deploying multiple stacks (#3455) (4cb9755), closes #3471
• core: stop relying on === to find PhysicalName.GENERATE_IF_NEEDED (#3506) (c7e9dfb)
• iam: correctly limit the default PolicyName to 128 characters (#3487) (8259756), closes #3402
• toolkit: avoid EMFILE and preserve mode when zipping (#3428) (750708b), closes #3145 #3344 #3413

Features

• codepipeline: make Pipeline importable by ARN (#3469) (8a100e5), closes #3467
• core: improved API for tags (#3465) (e15d391)
• ecs: ECS optimized Windows images (#3376) (6c0bf4a), closes #3398 #2574
• ecs: make cluster and vpc optional for higher level constructs (#2773) (979f6fd)
• ecs: support secret environment variables (#2994) (bc233fa), closes #1478
• events: ability to add cross-account targets (#3323) (3b794ea)

v1.2.0

Bug Fixes

• assert: CfnParameter MatchStyle diff support (#3408) (2747a76), closes #3399
• ecs: make registry URL domain-suffix dependent (#3394) (c989fa4), closes #3377
• events: allow adding the same target to rule multiple times (#3353) (5879178), closes #3173
• s3: fail early with bad notification filters (#3397) (cd0e9bd), closes #3347 #3398

Features

• cli: VPC context provider looks up RouteTable IDs (#3171) (6d762f9)
• cloudformation: update to Resource Specification v4.2.0 (#3351) (9ec57af)
• cloudwatch: dashboardName validation (#3382) (f53f845), closes #2976
• core: allow multiple transforms on ITemplateOptions (#3395) (9565b9b), closes #3366
• s3: bucket access control (#3391) (820575b), closes /docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-s3-bucket.html#cfn-s3 #3383
• s3: bucket websiteRedirect (#3392) (dd574cc), closes /docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-s3-websiteconfiguration.html#cfn-s3 #1083

v1.1.0

Bug Fixes

• codepipeline: invoked Lambda doesn't have permissions to the pipeline bucket (#3303) (50c7319), closes #3274
• logs: fix infinite retention for jsii users (#3250) (0b1ea76)

Features

• acm: add support for validationMethod (#3252) (ceb857d)
• codebuild: make artifact encryption configurable (#3230) (792a260)
• ec2: add new EC2 instance types #3308 (#3309) (184b93f)
• eks: update Kubernetes AMIs and latest version (#3331) (3fcdb45)

v1.0.0

General Availability of the AWS Cloud Development Kit!! 🎉🎉🥂🥂🍾🍾

We are excited to announce the 1.0.0 release of the AWS CDK – including GA support for TypeScript, JavaScript, and Python!

We want to thank all of our early customers, and the hundreds of contributors, for all the help and support in making this release a reality.

Thank you for the patience to deal with the many, many breaking changes that happened along the way.

This product would not be what it is today if it weren't for all the feedback, diligent issue reporting (bugs, missing features, unclear documentation, etc.), and code contributions from the community.

Special thanks go out to a few of our most prolific contributors who went above and beyond to help improve the CDK:

• Mike Cowgill
• Jonathan Goldwasser
• Breland Miley
• Piradeep Kandasamy
• Hsing-Hui Hsu
• Simon-Pierre Gingras
• Jungseok Lee
• Clare Liguori
• Yenlin Chen
• Lee Packham

1.0.0 is a huge milestone for us, but it's still only the beginning! We are excited to continue evolving the CDK, to introduce support for new languages and capabilities,
and to continue working closely with the open-source community.

Bug Fixes

• cli: output message when successfully synthesizing multiple stacks (#3259) (0c30f12)
• python: Make sure stack name in the init template does not contain illegal characters (#3261) (7d22b2c)

v0.39.0

Bug Fixes

• codepipeline: mark crossRegionReplicationBuckets and crossRegionSupport as experimental. (#3226) (f8256e7)
• assets: packages assets, aws-ecr-assets and aws-s3-assets are now experimental instead of stable

BREAKING CHANGES

• codepipeline: Pipeline.crossRegionReplicationBuckets is now experimental
• codepipeline: Pipeline.crossRegionSupport is now experimental
• codepipeline: CrossRegionSupport is now experimental
• assets: package assetsis now experimental instead of stable
• aws-ecr-assets: package aws-ecr-assetsis now experimental instead of stable
• aws-s3-assets: package aws-s3-assetsis now experimental instead of stable

v0.38.0

Bug Fixes

• cli: exclusively is also '-e' for destroy (#3216) (d6f5207), closes #2367
• cloudwatch: AlarmWidget takes IAlarm (#3219) (9948bfd), closes #3068
• core: fix build errors in fsharp init-template (#3229) (7d020f1)
• core: UpdateReplacePolicy mirrors DeletionPolicy (#3217) (d61bd2c), closes #2901
• ecr: repository grant uses correct resource ARN (#3220) (cc2275c), closes #2473
• iam: fix managed policies for User (#3221) (ec1c5b7), closes #2557
• make capitalization of Ip/Az consistent (#3202) (d60d673)

Features

• use classes for structs in Python (#3232) (161a459)
• codebuild: allow specifying principals and credentials for pulling build images. (#3049) (3319fe5), closes #2175

BREAKING CHANGES

• codebuild: LinuxBuildImage.fromDockerHub() has been renamed to fromDockerRegistry() and WindowsBuildImage.fromDockerHub() has been renamed to fromDockerRegistry()
• iam: aws-iam.User and Group: managedPolicyArns =>
  managedPolicies.
• in all identifiers, renamed IPv4 => Ipv4, IPv6 =>
  Ipv6, AZs => Azs.

v0.37.0

Bug Fixes

• core: fix some return types (#3192) (b5997c3)
• ecs: grant drain-hook policy container-instance permissions (#3199) (7796cd7), closes #3190
• sns: allow tokens to be used in UrlSubscription (#2938) (5ce4141)
• ssm: correctly deduplicate parameter names (#3183) (47bf435), closes #3076
• stepfunctions: Downscope SageMaker permissions (#2991) (69c82c8)

BREAKING CHANGES

• core: construct.findChild() now only looks up direct children
• ec2: Port.toRuleJSON was renamed to toRuleJson
• codebuild: PipelineProject.addSecondaryArtifact now returns void (formerly any)
• codebuild: Project.addSecondaryArtifact now returns void (formerly any)

v0.36.2

Bug Fixes

• cli: generate metadata resource for region-independent stacks (#3149) (0fb7ea3), closes #3142
• cli: stop processing on metadata errors (#3168) (0936bde)
• codepipeline: correctly pass the replication buckets to Action.bind() (#3131) (99ae5e7)
• codepipeline: grant missing permisisons to the CloudFormationExecuteChangeSetAction. (#3178) (958acc2), closes #3160
• codepipeline: grant the CodeCommit source Action read-write permissions to the Pipeline's Bucket. (#3175) (bd46e49), closes #3170
• core: prevent volatile physical name generation (#2984) (af2680c)
• ecs: remove temporary workaround for long arn support (#3072) (9fdb63f), closes #2176

Features

• codedeploy: allow setting a Deployment Configuration for an imported Lambda Deployment Group. (#3158) (05a49f0)
• iam: can configure 'deny' for policy statements (#3165) (6679e86)

v0.36.1

Bug Fixes

• aws-codepipeline-actions: use SecretValue (#3097) (b84caab)
• cli: fix broken sample-app templates for TypeScript and JavaScript (#3101) (800ecf2)
• cli: fix broken test in Java init template (#3108) (f696efc), closes #3065
• cli: fix Python sample-app template (#3071) (796d6bb), closes #3058 #3069
• cli: improve description of --json to reflect behavior (#3086) (68cfa54), closes #2965
• cli: Python blank app should call app.synth(), not app.run() (16345dc), closes #3123
• cli: update TypeScript lib init template (#3134) (629e963)
• code: make CfnResource#_toCloudFormation null-safe (#3121) (71cb421), closes #3093
• codepipeline-actions: set service as backing resource for EcsDeployAction (#3085) (f2293e0)
• core: improve context providers error message for env-agnostic stacks (#3137) (5b80146), closes #2922 #3078 #3120 #3130
• documentation: auto-labeling fixed (#3089) (7fb82ad)
• documentation: removed duplicate generated template (#3090) (590b05c)
• elasticloadbalancingv2: fix to be able to set deregistrationDelay (#3075) (22ab4b4)
• events: correct token resolution in RuleTargetInput (#3127) (a20c841), closes #3119
• sns: create subscriptions in consumer scope (#3065) (64a203f), closes #3064

Features

• apigateway: support custom domain names (#3135) (52b136b), closes #3103
• aws-apigateway: expand RestApi support to models, parameters and validators (#2960) (12e6380), closes #905 #1695 #727 #723 #2957
• codepipeline: generate a Role for every AWS-owned Action used in a Pipeline. (#3105) (921dcc9)
• core: add Tokenization.isResolvable for aspects (#3122) (d3a417e), closes #3026
• dynamodb: support RemovalPolicy (#3028) (a6175be), closes #2710