v1.143.0

Features

• amplify: support performance mode in Branch (#18598) (bdeb8eb), closes #18557
• cfnspec: cloudformation spec v54.0.0 (#18764) (71601c1)
• cloudwatch-actions: add ssm opsitem action for cloudwatch alarm (#16923) (9380885), closes #16861
• dynamodb: allow setting TableClass for a Table (#18719) (73a889e), closes #18718
• ec2: support KMS keys for block device mappings for both instances and launch templates (#18326) (17dbe5f), closes #18309
• ecr: add server-side encryption configuration (#16966) (c46acd5), closes #15400 #15571
• ecs: expose image name in container definition (#17793) (1947d7c)
• fsx: add support for FSx Lustre Persistent_2 deployment type (#18626) (6036d99)
• iot: add Action to republish MQTT messages to another MQTT topic (#18661) (7ac1215)

Bug Fixes

• core: correctly reference versionless secure parameters (#18730) (9f6e10e), closes #18729
• ec2: UserData.addSignalOnExitCommand does not work in combination with userDataCausesReplacement (#18726) (afdc550), closes #12749
• vpc: Vpc.fromLookup should throw if subnet group name tag is explicitly given and does not exist (#18714) (13e1c7f), closes #13962

Reverts

• "chore(cloudfront): encryption and enforceSSL on distribution s3 loggingBucket (#18264)" (#18772) (121e4a1), closes #18271 /docs.aws.amazon.com/AmazonCloudWatch/latest/logs/AWS-logs-and-resource-policy.html#AWS-logs-infrastructure-S3 #18676
• "chore(ec2): enforceSSL on flowLog s3 bucket (#18271)" (#18770) (a2eb092), closes /docs.aws.amazon.com/AmazonCloudWatch/latest/logs/AWS-logs-and-resource-policy.html#AWS-logs-infrastructure-S3 #18676