Release v2.264.0 · aws/aws-cdk

bedrockagentcore: Gateway metric helpers now emit corrected CloudWatch dimensions per-gateway
metrics use { Operation, Protocol, Resource } (was { Resource }). Alarms/dashboards built on the
old dimensions must be updated.
bedrockagentcore: RuntimeBase metric helpers now emit corrected CloudWatch dimensions per-resource metrics use { Operation, Name, Resource } (was { Resource }) and aggregated metrics use { AggregateOperation } (was { Resource: 'All' }). Alarms/dashboards built on the old dimensions must be updated.

bedrockagentcore: gateway metrics emit correct CloudWatch dimension (#38487) (5a7d360)
bedrockagentcore: runtime metrics emit correct CloudWatch dimensions (#38486) (4e44f24)
cloudfront: warn when minimumProtocolVersion is set without a certificate (#37250) (52ec5f7), closes #35404
ec2: allow EBS gp3 and io2 volumes up to 64 TiB (#37049) (10711ba), closes #37045
stepfunctions-tasks: call-rest-api CallApiGatewayRestApiEndpoint does not support JsonATA for api_path (#37738) (9f0afdc), closes #37728 /github.com/aws/aws-cdk/blob/e207b76cc2503701b3c4e2c87023617b485b2fde/packages/aws-cdk-lib/aws-stepfunctions/lib/private/jsonata.ts#L1

Alpha modules (2.264.0-alpha.0)

glue-alpha: IDatabase.catalogArn and IDatabase.catalogId were removed in factor of a type
safe ICatalog, which has catalogArn and catalogId. Consumers and implementations were updated
accordingly.

glue-alpha: new Catalog L2 (#38443) (6a8ba8e)
glue-alpha: strengthen data encryption for S3Table (#38501) (eb81d5e), closes /docs.aws.amazon.com/securityhub/latest/userguide/s3-controls.html#s3-5

glue-alpha: enable key rotation for security configuration encryption (#38512) (18560e0)
mediaconnect-alpha: addOutput options and simplified VPC interface referencing (#38515) (3c71466), closes #38517