v2.93.0

Features

• apigateway: set RestApi CloudWatchRole and Account retention policy (#26836) (7af20ba), closes #26827
• aws-cdk-lib: ADOT Lambda Layer v0.32.0 (#26793) (89393a2)
• core: acknowledge warnings (#26144) (dd912da)
• core: support bundling for single non-archive file (#26106) (0aee083)
• ecs: container port ranges in port mappings (#26692) (4997bca), closes #23509
• efs: add grantRead and grantReadWrite, grantRootAccess to FileSystem (#25486) (9c12199)
• opensearchservice: configuring gp3 throughput (#26172) (47df704), closes #26137
• update AWS Service Spec (#26825) (4133729)
• route53: add support for grantDelegation on imported PublicHostedZone (#26333) (a93af2f), closes #26240

Bug Fixes

• apigateway: deployOptions.description is not used for deployment's description (#26149) (6f9fcd6), closes /github.com/aws/aws-cdk/blob/72eb1e957afb9d1573445999eddd38b5c345fa7a/packages/aws-cdk-lib/aws-apigateway/lib/restapi.ts#L592C25-L592C25
• apigateway: duplicate methodResponses if the same array is reused between addMethod calls (#26636) (8dc5190), closes #26586
• assertions: stack overflow while parsing template (#26767) (01a7b5b), closes #26766
• backup: validation for vault name fails when parameters are referred in the name (#25943) (00a7f03), closes #21735
• cdk-assets: propagate buildSsh flag to docker build (#26846) (87869c8)
• cli: cannot hotswap ECS task definitions containing certain intrinsics (#26404) (6d315b8), closes /github.com/aws/aws-cdk/blob/5ccc56975c323ea19fd0917def51184e13f440d9/packages/aws-cdk/lib/api/evaluate-cloudformation-template.ts#L352 #25563
• CLI: diff reports wrong count of changed stacks (#26796) (26dcc1e), closes #26818
• cloudformation-diff: fails on CloudFormation intrinsics in unexpected places (#26791) (70c374f), closes #7413
• core: logical IDs are not allowed to start with digits (#26821) (97d21a9), closes #26075
• custom-resources: bad payload deserialization (#26797) (4d3ec71), closes #26730
• ecr: AutoDeleteImages custom resource description contains "undefined" (#26800) (a7a6428)
• ecr: autoDeleteImages fails when repository is renamed (#26742) (e264a2f), closes #26711
• efs: FileSystem deployment fails if vpcSubnets is changed (#26155) (d54b67d), closes #25099
• eks: helm private ecr in govcloud (#26794) (ed00f24)
• eks: undefined constructor in custom resource (#26782) (0b8f31d), closes /github.com/TooTallNate/node-proxy-agent/blob/5.0.0/index.js#L25 406.1.0/packages/proxy-agent/src/index.ts#L71 #26771
• lambda: use of currentVersion fails deployment after upgrade (#26777) (0446e4a), closes #26739
• pipelines: default image Ubuntu6 using EOL Node 16, switch to Ubuntu7 (#26817) (7851c0c), closes #26810
• secretsmanager: fix cross-region policy arn for imported secrets (#26813) (d5050ce), closes #26811
• secretsmanager: rotation resource creation can fail due to race condition (#26512) (94e48c6), closes #26481
• aws-sdk still used in EKS custom resources (#26756) (e78e355)
• lambda-nodejs default runtime regression (#26763) (2aa4733), closes #26732

---

Alpha modules (2.93.0-alpha.0)

Features

• app-staging-synthesizer: enable tag immutability (#26656) (0bcc4b4)
• synthetics: enable auto delete lambdas via custom resource (#26580) (6d1dc5b), closes #18448

Bug Fixes

• lambda-python: poetry bundling is broken after Aug 20 (#26823) (95f8cef)
• redshift: adding distKey to an existing table fails deployment (#26789) (8c9f0e2), closes #26733