v1.27.0

⚠ BREAKING CHANGES

• cognito: UserPool.fromUserPoolAttributes() has been replaced
  by fromUserPoolId() and fromUserPoolArn().
• cognito: IUserPool no longer contains userPoolProviderName
  and userPoolProviderUrl.
• cognito: The property signInType of UserPool has been
  renamed to signInAliases and given a new type SignInAliases. The
  list of sign in types are now specified via boolean properties.
• cognito: The property usernameAliasAttributes of UserPool has
  been dropped and its functionality merged with the signInAliases
  property.
• cognito: The property autoVerifiedAttributes for UserPool is
  now renamed to autoVerify and its default has now changed. The new
  default is now determined by the value of signInAliases.
• appsync: Configuration the user pool authorization is now done through the
  authorizationConfig property. This allows us to specify a default
  authorization mode out of the supported ones, currently limited to
  Cognito user pools and API keys.
• custom-resources: physicalResourceId and physicalResourceIdPath
  were unified to a concrete type under the physicalResourceId property.
  Use PhysicalResourceId.fromResponse and PhysicalResourceId.of factory
  functions to specify it.

Features

• appsync: extend authorization configuration (#6260) (948881a), closes #6246 #6247
• aws-ec2: signal, download and execute helpers for UserData (#6029) (ee8f169), closes #623
• cognito: refresh modeling of import APIs, sign in & autoverified attrs (#6422) (c02e852)
• contributors: use 0.0.0 as a version marker (#6463) (d5f88c7), closes /github.com/aws/aws-cdk/pull/6463/files#diff-6a3371457528722a734f3c51d9238c13
• custom-resources: physical resource id union type (#6518) (d5000bc)
• lambda-event-sources: expose eventSourceMappingId (#5689) (5ea2679), closes #5430
• rds: master secret in DatabaseSecret (#6415) (a9e5b60), closes #6358
• stepfunctions-tasks: add step functions task to run glue job (#6258) (15d9bd7), closes #5266

Bug Fixes

• assert: haveResourceLike and countResourcesLike compatibility (#6202) (86c04f3)
• cli: fast "no-op" deploys do not consider tags (#6472) (5de87c1), closes #6463
• codepipeline: an action's role imported in a different stack adds a dependency to the CodePipeline stack (#6458) (86ea564)
• codepipeline: automatically named artifacts could contain illegal characters from stage/action names (#6460) (34aaca4)
• core: adds enableVersionUpgrade property to CfnUpdatePolicy (#6434) (f8cacb9), closes #6158
• custom-resources: AwsCustomResource with delete only action fails (#6363) (61a99e7), closes #6061
• docker: cannot use cdk docker assets as base image (#6471) (983dd40), closes #6466
• rds: setting timezone on DatabaseInstance causes internal failure (#6534) (9e2ac91), closes #6439
• stepfunctions: valid reference path '$' fails with an error (#6483) (221c83b), closes #6388