v1.88.0

⚠ BREAKING CHANGES TO EXPERIMENTAL FEATURES

• appmesh: the properties virtualRouter and virtualNode of VirtualServiceProps have been replaced with the union-like class VirtualServiceProvider
• appmesh: the method addVirtualService has been removed from IMesh
• cloudfront: experimental EdgeFunction stack names have changed from 'edge-lambda-stack-${region}' to 'edge-lambda-stack-${stackid}' to support multiple independent CloudFront distributions with EdgeFunctions.

Features

• apigateway: cognito user pool authorizer (#12786) (ff1e5b3), closes #5618
• apigateway: import an existing Resource (#12785) (8a1a9b8), closes #4432
• appmesh: change VirtualService provider to a union-like class (#11978) (dfc765a), closes #9490
• aws-route53: cross account DNS delegations (#12680) (126a693), closes #8776
• cloudfront: add PublicKey and KeyGroup L2 constructs (#12743) (59cb6d0)
• core: stack.exportValue() can be used to solve "deadly embrace" (#12778) (3b66088), closes #7602 #2036
• ecr: Public Gallery authorization token (#12775) (8434294)
• ecs-patterns: Add PlatformVersion option to ScheduledFargateTask props (#12676) (3cbf38b), closes #12623
• elbv2: support for 2020 SSL policy (#12710) (1dd3d05), closes #12595
• iam: Permissions Boundaries (#12777) (415eb86), closes aws/aws-cdk-rfcs#5 #3242
• lambda: inline code for Python 3.8 (#12788) (8d3aaba), closes #6503

Bug Fixes

• apigateway: stack update fails to replace api key (#12745) (ffe7e42), closes #12698
• cfn-include: AWS::CloudFormation resources fail in monocdk (#12758) (5060782), closes #11595
• cli, codepipeline: renamed bootstrap stack still not supported (#12771) (40b32bb), closes #12594 #12732
• cloudfront: use node addr for edgeStackId name (#12702) (c429bb7), closes #12323
• codedeploy: wrong syntax on Windows 'installAgent' flag (#12736) (238742e), closes #12734
• codepipeline: permission denied for Action-level environment variables (#12761) (99fd074), closes #12742
• ec2: ARM-backed bastion hosts try to run x86-based Amazon Linux AMI (#12280) (1a73d76), closes #12279
• efs: EFS fails to create when using a VPC with multiple subnets per availability zone (#12097) (889d673), closes #10170
• iam: cannot use the same Role for multiple Config Rules (#12724) (2f6521a), closes #12714
• lambda: codeguru profiler not set up for Node runtime (#12712) (59db763), closes #12624