chore(deps): update aws-cdk monorepo to v1.98.0

[renovate]

This PR contains the following updates:

Package	Change	Age	Adoption	Passing	Confidence
@aws-cdk/assert	1.66.0 -> 1.98.0
@aws-cdk/aws-iam	1.66.0 -> 1.98.0
@aws-cdk/aws-lambda	1.66.0 -> 1.98.0
@aws-cdk/core	1.66.0 -> 1.98.0
@aws-cdk/custom-resources	1.66.0 -> 1.98.0

---

Release Notes

aws/aws-cdk

v1.98.0

Compare Source

Features

• codepipeline-actions: introduce the CodeStarConnectionsSourceAction (#​13781) (8782e67), closes #​10632
• efs: graduate to stable 🚀 (#​14033) (3c03d87)
• elasticloadbalancingv2: add grpc code matcher for alb (#​13948) (a37f178), closes #​13570 #​13947
• region-info: graduate to stable 🚀 (#​14013) (0d2755b)
• route-53: add ability to create NS Records (#​13895) (02c7c1d), closes #​13816

Bug Fixes

• apigateway: cannot remove first api key from usage plan (#​13817) (036d869), closes #​11876
• cloudfront: cannot use same EdgeFunction in multiple stacks (#​13790) (8e2325c)
• lambda-nodejs: esbuild define parameters are incorrectly encoded (#​14065) (5378a77), closes #​13842
• rds: deploy fails with "SubnetGroup not found" (#​13986) (ad326da), closes #​13976
• route53: cannot set TTL to 0 (#​14060) (ecc9bf3), closes #​14039
• s3: SSL enforcement doesn't apply on top level bucket requests (#​13961) (d0e831a), closes #​13760
• stepfunctions: state machine name validation fails when tokens are used. (#​13970) (58de0de), closes #​13946 #​13912

v1.97.0

Compare Source

⚠️ BREAKING CHANGES TO EXPERIMENTAL FEATURES

• elasticsearch: vpcOptions was removed. Use vpc, vpcSubnets and securityGroups instead.

Features

• appmesh: Implement Outlier Detection for Virtual Nodes (#​13952) (965f130)
• cx-api: graduate to stable 🚀 (#​13859) (d99e13d)
• eks: Support secretsEncryptionKey in FargateCluster (#​13866) (56c6f98)
• eks: Support bootstrap.sh --dns-cluster-ip arg (#​13890) (56cd863)
• elasticsearch: graduate to stable 🚀 (#​13900) (767cd31)
• s3-deployment: graduate to stable 🚀 (#​13906) (567d64d)
• ses: graduate to stable 🚀 (#​13913) (4f9a715)
• ses-actions: graduate to stable 🚀 (#​13864) (24f8307)

Bug Fixes

• aws-rds: ServerlessCluster.clusterArn is not correct when clusterIdentifier includes upper cases string. (#​13710) (a8f5b6c), closes #​12795
• cli: broken java init template (#​13988) (c6ca2ab), closes #​13964
• cloudfront: Cache Policy headers enforce soft limit of 10 (#​13904) (8a66244), closes #​13425 #​13903
• codepipeline-actions: EcrSourceAction triggers on a push to every tag (#​13822) (c5a2add), closes #​13818

v1.96.0

Compare Source

⚠️ BREAKING CHANGES TO EXPERIMENTAL FEATURES

• globalaccelerator: automatic naming algorithm has been changed: if you have existing Accelerators you will need to pass an
  explicit name to prevent them from being replaced. All endpoints are now added by calling addEndpoint() with a
  target-specific class that can be found in @aws-cdk/aws-globalaccelerator-endpoints. The generated Security Group
  is now looked up by calling endpointGroup.connectionsPeer().
• docdb: DatabaseClusterProps.instanceProps was hoisted and all its properties are now available one level up directly in DatabaseClusterProps.
• docdb: DatabaseInstanceProps.instanceClass renamed to DatabaseInstanceProps.instanceType.
• core: The type of the image property in BundlingOptions
  is changed from BundlingDockerImage to DockerImage.
• core: The return type of the DockerImage.fromBuild() API is
  changed from BundlingDockerImage to DockerImage.

Features

• autoscaling-common: graduate to stable 🚀 (#​13862) (2d623d0)
• chatbot: graduate to stable 🚀 (#​13863) (2384cdd)
• cli: app init template for golang (#​13840) (41fd42b), closes aws/jsii#​2678
• cloudformation-diff: graduate to stable 🚀 (#​13857) (294f546)
• docdb: graduate to stable 🚀 (#​13875) (169c2fc)
• ec2: allow disabling inline security group rules (#​13613) (793230c)
• elasticloadbalancingv2: graduate to stable 🚀 (#​13861) (08fa5ed)
• fsx: graduate to stable 🚀 (#​13860) (b2322aa)
• globalaccelerator: graduate to stable 🚀 (#​13843) (8571008)
• lambda: switch bundling images from DockerHub to ECR public gallery (#​13473) (e2e008b), closes #​11296
• lambda-event-sources: support for batching window to sqs event source (#​13406) (6743e3b), closes #​11722 #​11724 #​13770
• lambda-event-sources: tumbling window (#​13412) (e9f2773), closes #​13411
• lambda-nodejs: graduate to stable 🚀 (#​13844) (37a5502)

Bug Fixes

• aws-ecs: broken splunk-logging tag-option in fargate platform version 1.4 (#​13882) (e9d9299), closes #​13881
• cloudfront: auto-generated cache policy name might conflict cross-region (#​13737) (4f067cb), closes #​13629
• cloudfront: Origin Request Policy headers enforce soft limit of 10 (#​13907) (9b0a6cf), closes #​13410 #​13903
• codebuild: allow passing the ARN of the Secret in environment variables (#​13706) (6f6e079), closes #​12703
• codebuild: take the account & region of an imported Project from its ARN (#​13708) (fb65123), closes #​13694
• codedeploy: script installing CodeDeploy agent fails (#​13758) (25e8d04), closes #​13755
• cognito: imported userpool not retaining environment from arn (#​13715) (aa9fd9c), closes #​13691
• core: BundlingDockerImage.fromAsset() does not return a BundlingDockerImage (#​13846) (7176a5d)
• dynamodb: table with replicas fails to deploy with "Unresolved resource dependencies" error (#​13889) (5c99d0d)
• iam: Role import doesn't fail when forgetting the region in the ARN (#​13821) (560a853), closes #​13812
• rds: fail with a descriptive error if Cluster's instance count is a deploy-time value (#​13765) (dd22e8f), closes #​13558
• yaml-cfn: do not deserialize year-month-date as strings (#​13745) (ffea818), closes #​13709

v1.95.2

Compare Source

• Upgrade a downstream dependency(pac-resolver) of the aws-cdk (the CDK CLI), to mitigate CVE-2021-28918 (13914) (794c951)

v1.95.1

Compare Source

Bug Fixes

• codebuild: module fails to load with error "Cannot use import statement outside a module" (b1ffd33), closes #​13699 #​13699

v1.95.0

Compare Source

⚠️ BREAKING CHANGES TO EXPERIMENTAL FEATURES

• lambda-nodejs: The type of image property in the
  Bundling class is changed from BundlingDockerImage to
  DockerImage.
• lambda-nodejs: The type of dockerImage property in
  BundlingOptions is changed from BundlingDockerImage to
  DockerImage.
• apigatewayv2: The type of allowMethods property under corsPreflight
  section is changed from HttpMethod to CorsHttpMethod.
• lambda-nodejs: the default runtime of a NodejsFunction is now Node.js 14.x if the environment from which it is deployed uses Node.js >= 14 and Node.js 12.x otherwise.

Features

• acmpca: make the ACM PCA module Generally Available (stable) (#​13778) (7ca79ff)
• apigatewayv2: http api - default authorizer options (#​13172) (53d9661)
• cfnspec: cloudformation spec v31.0.0 (#​13633) (9b1c786)
• cfnspec: cloudformation spec v31.1.0 (#​13763) (41a2b2e)
• codepipeline-actions: Add detectChanges option to BitBucketSourceAction (#​13656) (f2436bf)
• ec2: client vpn endpoint (#​12234) (4fde59a), closes #​4206
• events: retry-policy support (#​13660) (7966f8d), closes #​13659
• init-templates: app template comes with hint comments for 'env' (#​13696) (b940710), closes #​12321
• lambda-event-sources: msk and self-managed kafka event sources (#​12507) (73209e1), closes #​12099
• rds: make rds secret name configurable (#​13626) (62a91b7), closes #​8984
• sns: enable passing PolicyDocument to TopicPolicy (#​10559) (0d9c300), closes #​7934

Bug Fixes

• apigatewayv2: error while configuring ANY as an allowed method in CORS (#​13313) (34bb338), closes #​13280 #​13643

• aws-ecs: drain hook lambda allows tasks to stop gracefully (#​13559) (3e1148e), closes #​13506

• codebuild: Fixed build spec file format to return yaml (#​13445) (fab93c6)

• codedeploy: Use aws-cli instead of awscli for yum (#​13655) (449ce12)

• codepipeline-actions: BitBucketAction fails with S3 "Access denied" error (#​13637) (77ce45d), closes #​13557

• core: toJsonString() cannot handle list intrinsics (#​13544) (a5be042), closes #​13465

• events,applicationautoscaling: specifying a schedule rate in seconds results in an error (#​13689) (5d62331), closes #​13566

• lambda: incorrect values for prop UntrustedArtifactOnDeployment (#​13667) (0757686), closes #​13586

• neptune: create correct IAM statement in grantConnect() (#​13641) (2e7f046), closes #​13640

• s3: Notifications fail to deploy due to incompatible node runtime (#​13624) (aa32cf6)

• lambda-nodejs: prepare code to reduce merge conflicts when deprecated APIs are stripped (#​13738) (ca391b5)

• lambda-nodejs: update default runtime (#​13664) (ca42461)

v1.94.1

Compare Source

Bug Fixes

• s3: Notifications fail to deploy due to incompatible node runtime (#​13624) (26bc3d4)

v1.94.0

Compare Source

⚠️ BREAKING CHANGES TO EXPERIMENTAL FEATURES

• appmesh: Backend, backend default and Virtual Service client policies structures are being altered
• appmesh: you must use the backend default interface to define backend defaults in VirtualGateway.
  The property name also changed from backendsDefaultClientPolicy to backendDefaults
• appmesh: you must use the backend default interface to define backend defaults in VirtualNode,
  (the property name also changed from backendsDefaultClientPolicy to backendDefaults),
  and the Backend class to define a backend
• appmesh: you can no longer attach a client policy to a VirtualService

Features

• appmesh: add missing route match features (#​13350) (b71efd9), closes #​11645
• aws-elasticloadbalancingv2: add protocol version for ALB TargetGroups (#​13570) (165a3d8), closes #​12869
• ecs-patterns: Add ECS deployment circuit breaker support to higher-level constructs (#​12719) (e80a98a), closes #​12534 #​12360

Bug Fixes

• appmesh: Move Client Policy from Virtual Service to backend structure (#​12943) (d3f4284), closes #​11996
• autoscaling: AutoScaling on percentile metrics doesn't work (#​13366) (46114bb), closes #​13144
• cloudwatch: cannot create Alarms from labeled metrics that start with a digit (#​13560) (278029f), closes #​13434
• use NodeJS 14 for all packaged custom resources (#​13488) (20a2820), closes #​13534 #​13484
• ec2: Security Groups support all protocols (#​13593) (8c6b3eb), closes #​13403
• lambda: fromDockerBuild output is located under /asset (#​13539) (77449f6), closes #​13439
• region-info: ap-northeast-3 data not correctly registered (#​13564) (64da84b), closes #​13561

v1.93.0

Compare Source

Features

• amplify-domain: Added config for auto subdomain creation (#​13342) (4c63f09)
• appmesh: add route retry policies (#​13353) (66f7053), closes #​11642
• cfnspec: cloudformation spec v30.1.0 (#​13519) (7711981)
• codebuild: allow setting queued timeout (#​13467) (e09250b), closes #​11364
• dynamodb: custom timeout for replication operation (#​13354) (6a5a4f2), closes #​10249
• ec2: ESP and AH IPsec protocols for Security Groups (#​13471) (f5a6647), closes #​13403
• ec2: multipart user data (#​11843) (ed94c5e), closes #​8315
• ecr: add imageTagMutability prop (#​10557) (c4dc3bc), closes #​4640
• ecs: ability to access tag parameter value of TagParameterContainerImage (#​13340) (e567a41), closes #​13202
• ecs: allow users to provide a CloudMap service to associate with an ECS service (#​13192) (a7d314c), closes #​10057
• events: EventBus.grantPutEventsTo method for granular grants (#​13429) (122a232), closes #​11228
• events: dead-letter queue support for CodeBuild (#​13448) (abfc0ea), closes #​13447
• events: dead-letter queue support for StepFunctions (#​13450) (0ebcb41), closes #​13449
• events,applicationautoscaling: schedule can be a token (#​13064) (b1449a1)
• iam: SAML identity provider (#​13393) (faa0c06), closes #​5320
• neptune: Support IAM authentication (#​13462) (6c5b1f4), closes #​13461
• region-info: added AppMesh ECR account for af-south-1 region (#​12814) (b3fba43)
• stepfunctions-tasks: Support calling ApiGateway REST and HTTP APIs (#​13033) (cc608d0), closes #​11565 #​11566 #​11565

Bug Fixes

• cfn-include: allow boolean values for string-typed properties (#​13508) (e5dab7c)
• ec2: fix typo's in WindowsImage constants (#​13446) (781aa97)
• elasticloadbalancingv2: upgrade to v1.92.0 drops certificates on ALB if more than 2 certificates exist (#​13490) (01b94f8), closes #​13332 #​13437
• events: imported EventBus does not correctly register source account (#​13481) (57e5404), closes #​13469
• iam: oidc-provider can't pull from hosts requiring SNI (#​13397) (90dbfb5)
• iam: policy statement tries to validate tokens (#​13493) (8d592ea), closes #​13479
• init: Python init template's stack ID doesn't match other languages (#​13480) (3f1c02d)
• stepfunctions: no validation on state machine name (#​13387) (6c3d407), closes #​13289

v1.92.0

Compare Source

• ecs-patterns: the desiredCount property stored on the above constructs will be optional, allowing them to be undefined. This is enabled through the @aws-cdk/aws-ecs-patterns:removeDefaultDesiredCount feature flag. We would recommend all CDK users to set the @aws-cdk/aws-ecs-patterns:removeDefaultDesiredCount flag to true for all of their existing applications.

⚠️ BREAKING CHANGES TO EXPERIMENTAL FEATURES

• apigatewayv2: HttpApiMapping (and related interfaces for Attributed and Props) has been renamed to ApiMapping
• apigatewayv2: CommonStageOptions has been renamed to StageOptions
• apigatewayv2: HttpStage.fromStageName has been removed in favour of HttpStage.fromHttpStageAttributes
• apigatewayv2: DefaultDomainMappingOptions has been removed in favour of DomainMappingOptions
• apigatewayv2: HttpApiProps.defaultDomainMapping has been changed from DefaultDomainMappingOptions to DomainMappingOptions
• apigatewayv2: HttpApi.defaultStage has been changed from HttpStage to IStage
• apigatewayv2: IHttpApi.defaultStage has been removed
• aws-appsync: RdsDataSource now takes a ServerlessCluster instead of a DatabaseCluster
• aws-appsync: graphqlapi.addRdsDataSource now takes databaseName as its fourth argument

Features

• apigateway: integrate with aws services in a different region (#​13251) (d942699), closes #​7009
• apigatewayv2: websocket api (#​13031) (fe1c839), closes #​2872
• aws-appsync: add databaseName to rdsDataSource (#​12575) (f92b65e), closes #​12572
• aws-events: Event Bus target (#​12926) (ea91aa3), closes #​9473
• aws-route53-targets: add global accelerator target to route53 alias targets (#​13407) (2672a55), closes #​12839
• aws-s3: adds s3 bucket AWS FSBP option (#​12804) (b9cdd52), closes #​10969
• cfnspec: cloudformation spec v28.0.0 (#​13101) (13c9859)
• cfnspec: cloudformation spec v29.0.0 (#​13249) (6318e26)
• cfnspec: cloudformation spec v30.0.0 (#​13365) (ae0185d)
• cli: Configurable --change-set-name CLI flag (#​13024) (18184df), closes #​11075 #​12683
• cloudwatch: EC2 actions (#​13281) (319cfcd), closes #​13228
• cognito: user pools - sign in with apple (#​13160) (b965589)
• core: description parameter in the CustomResourceProvider (#​13275) (78831cf), closes #​13277 #​13276
• core: customize bundling output packaging (#​13152) (6eca979)
• ec2: Add VPC endpoint for RDS (#​12497) (fc87574), closes #​12402
• ecs: add port mappings to containers with props (#​13262) (f511639), closes #​13261
• ecs: allow selection of container and port for SRV service discovery records (#​12798) (a452bc3), closes #​12796
• ecs-patterns: Add support for assignPublicIp for QueueProcessingFargateService (#​13122) (3fb4600), closes #​12815
• ecs-patterns: remove default desiredCount to align with cfn behaviour (under feature flag) (#​13130) (a9caa45)
• elasticloadbalancingv2: Add support for application cookies (#​13142) (23385dd)
• elbv2: allow control of ingress rules on redirect listener (#​12768) (b7b441f), closes #​12766
• events: archive events (#​12060) (465cd9c), closes #​11531
• events: dead letter queue for Lambda Targets (#​11617) (1bb3650), closes #​11612
• lambda: code signing config (#​12656) (778ea27), closes #​12216
• lambda: Code.fromDockerBuild (#​13318) (ad01099), closes #​13273
• lambda: Code.fromDockerBuildAsset (#​12258) (09afed5), closes #​11914
• neptune: high level constructs for db clusters and instances (#​12763) (c366837), closes aws#​12762
• stepfunctions-tasks: add EKS call to SFN-tasks (#​12779) (296a10d)
• synthetics: Update CloudWatch Synthetics NodeJS runtimes (#​12907) (6aac3b6), closes #​12906

Bug Fixes

• appsync: revert to allow resolver creation from data source (#​12973) (d35f032), closes #​12635 #​11522
• aws-appsync: use serverlessCluster on rdsDataSource (#​13206) (45cf387), closes #​12567
• cfn-diff: handle Fn::If inside policies and statements (#​12975) (daf4e47), closes #​12887
• cfn-include: allow dynamic mappings to be used in Fn::FindInMap (#​13428) (623675d)
• cloudfront: cannot add two EdgeFunctions with same aliases (#​13324) (1f35351), closes #​13237
• cloudwatch: MathExpression period of <5 minutes is not respected (#​13078) (d9ee914), closes #​9156
• cloudwatch: metric label not rendered into Alarms (#​13070) (cbcc712)
• codebuild: allow FILE_PATH webhook filter for BitBucket (#​13186) (cbed348), closes #​13175
• core: custom resource provider NODEJS_12 now looks like Lambda's NODEJS_12_X, add Node 14 (#​13301) (3413b2f)
• core: ENOTDIR invalid cwd on "cdk deploy" (#​13145) (cd7a3ed), closes #​12258 #​13076 #​13131
• custom-resources: unable to use a resource attributes as dictionary keys in AwsCustomResource (#​13074) (3cb3104), closes #​13063
• dynamodb: replicas not created on table replacement (#​13300) (c7c424f), closes #​12332
• ec2: NAT provider's default outbound rules cannot be disabled (#​12674) (664133a), closes #​12673
• ec2: readme grammar (#​13180) (fe4f056)
• ec2: Throw error on empty InitFile content (#​13009) (#​13119) (81a78a3)
• ecr: Allow referencing an EcrImage by digest instead of tag (#​13299) (266a621), closes #​5082
• ecr: Generate valid CloudFormation for imageScanOnPush (#​13420) (278fba5), closes #​13418
• ecs: services essential container exceptions thrown too soon (#​13240) (c174f6c), closes #​13239
• eks: KubectlProvider creates un-necessary security group (#​13178) (c5e8b6d)
• UserPool, Volume, ElasticSearch, FSx are now RETAIN by default (#​12920) (5a54741), closes #​12563
• eks: Deployment fails for the first deployment in an account (#​13103) (e042879), closes #​9027
• incorrect peerDependency on "constructs" (#​13255) (17244af)
• elasticloadbalancingv2: should allow more than 2 certificates (#​13332) (d3155e9), closes #​13150
• events: cannot trigger multiple Lambdas from the same Rule (#​13260) (c8c1762), closes #​13231
• events: imported ECS Task Definition cannot be used as target (#​13293) (6f7cebd), closes #​12811
• lambda-nodejs: 'must use "outdir"' error with spaces in paths (#​13268) (09723f5), closes #​13210
• lambda-nodejs: invalid sample in documentation (#​12404) (520c263)
• lambda-nodejs: paths with spaces break esbuild (#​13312) (f983fbb), closes #​13311
• lambda-python: asset hash is non-deterministic (#​12984) (37debc0), closes #​12770 #​12684
• stepfunctions: SageMakeUpdateEndpoint adds insufficient permissions (#​13170) (6126e49), closes #​11594

v1.91.0

Compare Source

⚠️ BREAKING CHANGES TO EXPERIMENTAL FEATURES

• aws-appsync: RdsDataSource now takes a ServerlessCluster instead of a DatabaseCluster
• aws-appsync: graphqlapi.addRdsDataSource now takes databaseName as its fourth argument

Features

• aws-appsync: add databaseName to rdsDataSource (#​12575) (f92b65e), closes #​12572
• cfnspec: cloudformation spec v28.0.0 (#​13101) (13c9859)
• ecs-patterns: Add support for assignPublicIp for QueueProcessingFargateService (#​13122) (3fb4600), closes #​12815
• stepfunctions-tasks: add EKS call to SFN-tasks (#​12779) (296a10d)
• synthetics: Update CloudWatch Synthetics NodeJS runtimes (#​12907) (6aac3b6), closes #​12906

Bug Fixes

• UserPool, Volume, ElasticSearch, FSx are now RETAIN by default (#​12920) ([5a54741](https://to

---

Configuration

📅 Schedule: "before 6am,every weekend" in timezone Europe/Oslo.

🚦 Automerge: Disabled due to failing status checks.

♻️ Rebasing: Renovate will not automatically rebase this PR, because other commits have been found.

🔕 Ignore: Close this PR and you won't be reminded about these updates again.

---

• If you want to rebase/retry this PR, check this box.

---

This PR has been generated by WhiteSource Renovate. View repository job log here.

[renovate]

Branch automerge failure

This PR was configured for branch automerge, however this is not possible so it has been raised as a PR instead.

---

• Branch has one or more failed status checks

[github-actions]

🎉 This PR is included in version 1.0.28 🎉

The release is available on:

• npm package (@latest dist-tag)
• GitHub release

Your semantic-release bot 📦🚀