v1.18.0

1.18.0 (2026-08-20)

Added

• approximate AWS managed rule groups in WAF (#818) (cc95f52), closes #810
• authorize a REST API method with a REQUEST authorizer (#799) (e53c627), closes #790
• authorize a REST API method with IAM (#800) (4ff0bc4), closes #793
• block requests at a distribution web ACL (#816) (ac0c302), closes #809
• cache a REST API authorizer's decision (#805) (7bf4d69), closes #791
• create simulated API Gateway REST APIs (#785) (a916d53), closes #779
• deploy REST APIs from CloudFormation (#789) (94f37a6), closes #781
• deploy SAM REST APIs and Api events (#795) (31f1a09), closes #784
• deploy WAFv2 resources in CloudFormation (#820) (122dcc0), closes #813
• evaluate rules on simulated WAFv2 web ACLs (#814) (9284e33), closes #807
• gate a REST API method with a user pool (#801) (78c4ed1), closes #792
• gate a REST API method with an authorizer (#798) (3b45267), closes #782
• import a REST API from an OpenAPI document (#796) (451c03c), closes #783
• import an authorizer from a security scheme (#806) (fa80503), closes #797
• put a web ACL in front of a REST API stage (#817) (816cb1d)
• put a web ACL in front of a user pool (#819) (52b6f80)
• route a REST API request to its Lambda integration (#787) (f83f57f), closes #780
• sign a returning browser in from a session (#808) (fea68c4)
• style the sim Cognito managed login pages (#788) (40683cf)

Fixed

• notice a save a watch never reported (#794) (f952ca6)
• tighten simulated WAFv2 rule validation (#815) (e3befd5)

Packaging and dependencies

• deps-dev: bump the npm-patch-and-minor group across 1 directory with 22 updates (#803) (4f11a49)
• deps: bump aws-actions/setup-sam in the github-actions group (#802) (e3f0e8f)