v1.21.0

Known Regressions

• docker assets: cannot build docker images outside the source tree (i.e. against a cdk.out directory) #5807
• cli: cdk init fails if run under a directory where cdk.json exists #5826

Features

• assert: cdk assert: implement 'haveOutput' assertion (#5366) (ee6decb), closes #1906
• cli: run cdk from inner directories (#5772) (a54630d)
• codepipeline: add CannedACL and CacheControl to S3 deploy action (#5698) (b3e7978)
• codepipeline: add support for externalEntityLink in the manual approval action (#5558) (be2e3e3)
• codepipeline: Pipeline Variables (#5604) (34d3e7d), closes #5219
• ec2: VpcEndpointService construct (#5498) (a2713f3)
• recommend matching commands (#5668) (6108b91)
• elbv2: default config for internal load balancer will fall back to Isolated subnets (#5696) (8b9c1fc)
• iam: Role.withoutPolicyUpdates() (#5569) (ea4ca3e), closes #2985 #4465 #4501
• iam: support importing service roles (#5701) (0f02dad), closes #2651
• s3: server access logs (#5072) (c9b074b)

Bug Fixes

• acm: DnsValidatedCertificate in non-aws partitions (#5771) (e3305d8)
• apigateway: authorizer name is not optional (#5731) (21c425e), closes #5678
• apigateway: unable to associate RestApi as a route53 target for late bound domains (#5555) (c02741e)
• cli: Fix various init templates & their tests (#5693) (a85da79)
• cli: proxy support is broken (#5803) (3a63f57), closes #5743 #5791
• cloudformation: nested stack example in readme is broken (#5729) (c53356a), closes #5686
• cloudwatch: cross-account metrics in env-agnostic stack (#5775) (5292bd5), closes aws/aws-cdk#5628
• codepipeline: Action.onStateChange() has wrong detail type (#5721) (8686dd5), closes #3614
• custom-resources: missing physical resource id for delete calls (#5805) (9b7236a), closes #5796
• ecr-assets: unable to use one Dockerfile to build multiple images (#5705) (ff3f27f), closes #5683
• ecs: cannot separate Cluster and Ec2Service behind ALB (#5813) (eb3c517)
• glue: empty string in Table.s3prefix is not undefined (#5783) (18e15de), closes #5763
• iam: can't use OrganizationPrincipal for assuming Role (#5746) (6c3d4c4), closes #5732
• rds: pass the ARN of master instead of its ID in DatabaseInstanceReadReplica (#5702) (d323c0c), closes #5530