1 Release published by 1 person

• v2.200.2

  published Jun 12, 2025

29 Pull requests merged by 15 people

• chore(release): 2.201.0

  #34706 merged Jun 13, 2025

• chore(merge-back): 2.200.2

  #34700 merged Jun 12, 2025

• feat(amplify): add skew protection feature for Amplify branches

  #34656 merged Jun 12, 2025

• chore: history

  #34697 merged Jun 12, 2025

• Alvazjor/backup main

  #34696 merged Jun 12, 2025

• feat(opensearch): update default TLS security policy to TLS 1.2 for OpenSearch domains

  #34660 merged Jun 12, 2025

• chore(release): 2.200.2

  #34693 merged Jun 11, 2025

• fix: export errors to make it available in region-info/lib/fact.ts

  #34691 merged Jun 11, 2025

• feat: update L1 CloudFormation resource definitions

  #34687 merged Jun 11, 2025

• chore: update dev dependency - aws-sdk-js-codemod

  #34542 merged Jun 11, 2025

• docs(ecs): add note for windows tasks CPU/Memory requirement

  #34683 merged Jun 11, 2025

• chore: npm-check-updates && yarn upgrade

  #34684 merged Jun 11, 2025

• fix(apigateway): correct JsonSchema.additionalItems property type

  #33879 merged Jun 11, 2025

• fix(opensearch): opensearchservice: existing integ test is failing

  #34680 merged Jun 11, 2025

• docs(cloudfront): specify that cloudront does not support updating the key

  #34676 merged Jun 11, 2025

• feat(ec2): add interface VPC endpoint for DSQL

  #34487 merged Jun 11, 2025

• chore: update documentation for .NET requirement and scripts

  #34489 merged Jun 11, 2025

• feat: update L1 CloudFormation resource definitions

  #34659 merged Jun 10, 2025

• chore(rds): mariadb add versions 10.5.29 and 10.6.22, postgres add versions 11.22-rds.20250508 and 12.22-rds.20250508

  #34598 merged Jun 10, 2025

• revert(ec2): support Firehose IDeliveryStream as flow log destination

  #34665 merged Jun 10, 2025

• fix(logs): exposed metric from the metric filter will now include the dimension map

  #34648 merged Jun 10, 2025

• feat(synthetics): safe canary update

  #34608 merged Jun 10, 2025

• chore(synthetics): selenium 6.0 runtime

  #34663 merged Jun 10, 2025

• feat(rds): support auto-pause configuration for Aurora Serverless v2

  #34173 merged Jun 10, 2025

• fix(cloudfront): use wildcard when grant some cloudfront permission

  #33802 merged Jun 6, 2025

• feat(stepfunctions): add support for Jsonata expressions to Map.ItemSelector

  #34625 merged Jun 6, 2025

• feat(eks): added support for bootstrapSelfManagedAddons

  #33597 merged Jun 6, 2025

• feat(rds): DatabaseInstanceFromSnapshot support clusterSnapshotIdentifier

  #33982 merged Jun 6, 2025

• chore: updated onEvent example implementation to follow better coding practices

  #34638 merged Jun 6, 2025

13 Pull requests opened by 11 people

• fix(eks): Improve HelmChart error logging for better troubleshoot…

  #34647 opened Jun 6, 2025

• chore(enum-updater): update enum static mapping

  #34653 opened Jun 9, 2025

• feat(cdk-pipeline): add url and sns topic for manual approval in cdk pipeline (re-create PR since original is auto-closed)

  #34654 opened Jun 9, 2025

• chore(kinesisfirehose): ap-east-2

  #34657 opened Jun 9, 2025

• chore(deps): bump the pip group across 7 directories with 2 updates

  #34661 opened Jun 10, 2025

• feat(codepipeline): support environment variables for actions

  #34667 opened Jun 10, 2025

• feat(elasticloadbalancingv2): default security group settings for NLB (under feature flag)

  #34675 opened Jun 10, 2025

• feat(stepfunctions-tasks): `EmrCreateClusterOptions` support ebsRootVolumeIops, ebsRootVolumeThroughput and managedScalingPolicy

  #34677 opened Jun 10, 2025

• fix(kinesisfirehose): can't call grantPrincipal multiple times

  #34682 opened Jun 11, 2025

• feat(ecs): add support ECS-optimized Amazon Linux 2023 (Neuron) AMI

  #34689 opened Jun 11, 2025

• feat(opensearch): add logic to only log specific field when less verbosity is needed for opensearch access policy custom resource

  #34701 opened Jun 12, 2025

• feat(amplify): add compute role support for Amplify branches

  #34708 opened Jun 13, 2025

• feat: exclude `lambda.Version` and `apigateway.Deployment` from refactoring

  #34710 opened Jun 13, 2025

24 Issues closed by 9 people

• aws-opensearchservice: Remove default TLS policy

  #34658 closed Jun 12, 2025

• Cloudfront: Unable to update a tag on a VpcOrigin

  #34629 closed Jun 12, 2025

• (node: @aws-cdk/region-info): using latest version of @aws-cdk/region-info throws an "Cannot find module 'aws-cdk-lib/core/lib/errors'" error

  #34690 closed Jun 11, 2025

• (custom-resources): Package @aws-sdk/client-memory-db does not exist

  #31755 closed Jun 11, 2025

• ecs: Unclear requirement for Fargate Windows task-level CPU/Memory properties

  #34645 closed Jun 11, 2025

• aws-apigateway: JsonSchema additionalItems is undeployable

  #33878 closed Jun 11, 2025

• aws-securityhub: Note updatedBy is expecting an object when it should be a string

  #26749 closed Jun 11, 2025

• opensearchservice: existing integ tests failing

  #34678 closed Jun 11, 2025

• aws-codebuild: valid Windows codebuild project fails validation

  #34668 closed Jun 10, 2025

• Removed Issue

  #34674 closed Jun 10, 2025

• Removed Issue

  #34672 closed Jun 10, 2025

• Removed issue

  #34671 closed Jun 10, 2025

• Removed Issue

  #34670 closed Jun 10, 2025

• cloudwatch: `MetricFilter.metric()` does not use dimensions

  #34643 closed Jun 10, 2025

• rds.DatabaseCluster: Support SecondsUntilAutoPause setting in Aurora Serverless V2

  #32280 closed Jun 10, 2025

• (rds): `DatabaseCluster` is missing the ability to specify `SecondsUntilAutoPause` on `ServerlessV2ScalingConfiguration`

  #32563 closed Jun 10, 2025

• aws-fsx: expose storageCapacityGiB

  #34651 closed Jun 9, 2025

• aws-cloudfront: cloudfront:ListDistributions does not support resource-level

  #33249 closed Jun 6, 2025

• stepfunctions: Map.ItemSelector doesn't accept JSONata

  #34538 closed Jun 6, 2025

• (aws-eks): Support for `BootstrapSelfManagedAddons` while creating the cluster

  #30792 closed Jun 6, 2025

• ❗NOTICE (aws-lambda): Lambda cdk managed log group duplicates

  #34612 closed Jun 6, 2025

• rds: `DatabaseInstanceFromSnapshot `doesn't expose `DBClusterSnapshotIdentifier`

  #33889 closed Jun 6, 2025

• example-construct-library: example-resource not following best coding practices

  #34637 closed Jun 6, 2025

• aws_lambda: Python 3.11 is added to aws_lambda module with aws-cdk-lib 2.88.0, but it is not supported yet, causing cdk-nag error

  #26451 closed Jun 6, 2025

16 Issues opened by 16 people

• aws-cdk-lib/aws-s3: Removing object lock from s3 bucket leads to InternalFailure due to getObjectLockEnabled() is null

  #34709 opened Jun 13, 2025

• aws-sns-subscriptions: add support for not exists filter in a subscription filter

  #34707 opened Jun 12, 2025

• (aws-grafana): Add "unifiedAlertingEnabled" property to CfnWorkspaceProps

  #34705 opened Jun 12, 2025

• test(region-info): integ test to ensure region info works as expected

  #34692 opened Jun 11, 2025

• (aws-redshift-alpha): (Unable to grant table access to user via aws-redshift-alpha constructs)

  #34688 opened Jun 11, 2025

• (aws-lambda-python-alpha): Failed to install numpy 2.3.0 with Python 3.11 or lower

  #34685 opened Jun 11, 2025

• SubscriptionFilter: Rate exceeded when large number of functions present in stack for `DescribeSubscriptionFilters ` API

  #34679 opened Jun 10, 2025

• route53: Add Support for HTTPSRecord

  #34673 opened Jun 10, 2025

• aws-lambda: Cannot set removal policy on auto-created log group

  #34669 opened Jun 10, 2025

• region-info: add hosted zone ids for load balancer instances

  #34664 opened Jun 10, 2025

• (aws-cloudwatch): AlarmRule static methods can synth into an invalid template

  #34662 opened Jun 10, 2025

• aws-glue: Logical operator cannot be null or empty ( `CfnTrigger` )

  #34652 opened Jun 8, 2025

• awsstepfunctionstasks: Start a Child Step Function using its ARN

  #34650 opened Jun 8, 2025

• aws-fsx: L2 Constructs for DataRepositoryAssociation

  #34649 opened Jun 8, 2025

• aws-kinesisfirehose: support SchemaEvolutionConfiguration on CfnDeliveryStream

  #34646 opened Jun 6, 2025

• [aws-eks]: HelmChart - Provide more helpful logs when helm upgrade fails

  #34644 opened Jun 6, 2025

111 Unresolved conversations

Sometimes conversations happen on old items that aren’t yet closed. Here is a list of all the Issues and Pull Requests with unresolved conversations.

• feat(sns): add sns data protection policy

  #34640 commented on Jun 12, 2025 • 7 new comments

• chore(cdk): Update ADOT Lambda Layer ARNS - v0.117.0

  #34630 commented on Jun 13, 2025 • 6 new comments

• feat(cognito): add ManagedLoginBranding L2 construct

  #34574 commented on Jun 12, 2025 • 6 new comments

• feat(codebuild): add custom instance type and VPC to Fleets

  #34572 commented on Jun 12, 2025 • 3 new comments

• feat(cognito): support refresh token rotation

  #34360 commented on Jun 12, 2025 • 3 new comments

• feat(apigatewayv2): add stage variables support for HTTP and WebSocket API

  #34548 commented on Jun 12, 2025 • 2 new comments

• feat(ec2): support for client route enforcement for client VPN endpoint

  #34405 commented on Jun 12, 2025 • 1 new comment

• feat(cloudwatch-dashboards): add support for queryLanguage property

  #34547 commented on Jun 12, 2025 • 1 new comment

• feat(ec2): network interface definitions for launch templates

  #34327 commented on Jun 12, 2025 • 0 new comments

• fix(cloudfront): add region to autogenerated name for cloudfront origin request policy

  #34348 commented on Jun 12, 2025 • 0 new comments

• feat(ec2): add support for IPAM allocation in Subnet configuration

  #34349 commented on Jun 12, 2025 • 0 new comments

• feat(codebuild): add ec2 image types

  #34365 commented on Jun 12, 2025 • 0 new comments

• feat(lambda): add LATEST to ParamsAndSecretsVersions

  #34367 commented on Jun 12, 2025 • 0 new comments

• feat(aws-appsync): add new handlerConfig properties

  #34387 commented on Jun 12, 2025 • 0 new comments

• fix(stepfunctions): lambda invoke grant all versions

  #34398 commented on Jun 12, 2025 • 0 new comments

• feat(lambda): enforcing SSL when creating Lambda DLQs

  #34404 commented on Jun 12, 2025 • 0 new comments

• feat(applicationsignals-alpha): introduce Application Signals SLO L2 constructs

  #34413 commented on Jun 12, 2025 • 0 new comments

• feat(s3-deployment): add security groups

  #34416 commented on Jun 12, 2025 • 0 new comments

• feat(events): add `arnForPolicy` attribute for api destination

  #34315 commented on Jun 12, 2025 • 0 new comments

• feat(route53-patterns): `HttpsRedirect` use `Distribution` as the default CloudFront distribution (under feature flag)

  #34312 commented on Jun 12, 2025 • 0 new comments

• feat(aws-ecs): add windows core and kernel optimized ecs amis

  #34274 commented on Jun 12, 2025 • 0 new comments

• feat(codebuild): cache sharing of CodeBuild projects

  #34257 commented on Jun 12, 2025 • 0 new comments

• feat(synthetics): syn-nodejs-puppeteer-10.0 as supported runtime

  #34241 commented on Jun 12, 2025 • 0 new comments

• feat(kms): implement .grant methods for Alias.fromAliasName (under feature flag)

  #34237 commented on Jun 12, 2025 • 0 new comments

• feat(ecs-patterns): enable Backlog per instance scaling in QueueProcessingFargateService

  #34202 commented on Jun 12, 2025 • 0 new comments

• feat(backup): add indexActions prop to BackupPlanRule

  #34051 commented on Jun 12, 2025 • 0 new comments

• fix(pipelines): use display name for `Asset` actions when `publishAssetsInParallel` is false

  #34049 commented on Jun 12, 2025 • 0 new comments

• feat(lambda-python-alpha): support uv

  #33880 commented on Jun 12, 2025 • 0 new comments

• fix(glue): restore notifyDelayAfter across different job types

  #33842 commented on Jun 12, 2025 • 0 new comments

• feat(kinesisfirehose): support dynamic partitioning

  #33828 commented on Jun 12, 2025 • 0 new comments

• feat(aws-cloudwatch): support labels on pie charts

  #28929 commented on Jun 12, 2025 • 0 new comments

• fix(route53-targets): only use dualstack prefix for dual-stack NLBs

  #34641 commented on Jun 12, 2025 • 0 new comments

• chore(ecs): update instance-drain-hook lambda runtime to python 3.13 (closes #34634)

  #34639 commented on Jun 12, 2025 • 0 new comments

• fix: check if inferenceAccellerators has any elements

  #34618 commented on Jun 12, 2025 • 0 new comments

• feat(eks-v2-alpha): adding `takeOwnership` option to `HelmChart` construct

  #34617 commented on Jun 12, 2025 • 0 new comments

• fix(core): context value for feature flag should be parsed for boolean

  #34616 commented on Jun 12, 2025 • 0 new comments

• feat(ecs): add support for creating task definitions without task role

  #34611 commented on Jun 12, 2025 • 0 new comments

• feat(backup): add support for ScheduleExpressionTimezone

  #34603 commented on Jun 12, 2025 • 0 new comments

• feat(eks): support eks with k8s 1.33

  #34602 commented on Jun 12, 2025 • 0 new comments

• feat(dsql-alpha): initial L2 construct

  #34599 commented on Jun 12, 2025 • 0 new comments

• test(stepfunction): improve test coverage for `json-path.ts`

  #34595 commented on Jun 12, 2025 • 0 new comments

• fix(logs): query strings can have multiple stats commands

  #34590 commented on Jun 12, 2025 • 0 new comments

• fix(dynamodb): some grant methods generate incorrect policies.

  #34575 commented on Jun 12, 2025 • 0 new comments

• chore: yarn upgrade dependencies requiring intervention

  #34567 commented on Jun 12, 2025 • 0 new comments

• feat: add initial support for HTTP endpoint destination

  #34564 commented on Jun 12, 2025 • 0 new comments

• fix(opensearchservice): create `AWS::Logs::ResourcePolicy` instead of `Custom::CloudwatchLogResourcePolicy`

  #34558 commented on Jun 12, 2025 • 0 new comments

• fix(eks): make `objectName` optional in `KubernetesObjectValue`

  #34549 commented on Jun 12, 2025 • 0 new comments

• feat(synthetics): add `maxRetries` prop to configure automatic retries on canary runs

  #34541 commented on Jun 12, 2025 • 0 new comments

• chore(lambda-nodejs): bump pnpm version in Dockerfile for AWS Lambda Node.js

  #34537 commented on Jun 12, 2025 • 0 new comments

• feat(ecs-patterns): add support for AZ rebalancing

  #34529 commented on Jun 13, 2025 • 0 new comments

• fix(route53): warn when ttl is provided with alias target in RecordSet

  #34526 commented on Jun 12, 2025 • 0 new comments

• docs(cloudfront): update Distribution example to use S3BucketOrigin instead of deprecated S3Origin

  #34525 commented on Jun 12, 2025 • 0 new comments

• feat(aws-codedeploy): add trigger configuration support for deployment groups (#34282)

  #34504 commented on Jun 12, 2025 • 0 new comments

• feat(ecs-patterns): allow passing a listener to ApplicationLoadBalancedFargateService pattern

  #34493 commented on Jun 12, 2025 • 0 new comments

• fix: large amounts of stacks slows down synthesis

  #34480 commented on Jun 12, 2025 • 0 new comments

• feat(eks): add AL2023 ARM64 NVIDIA nodegroup types

  #34456 commented on Jun 12, 2025 • 0 new comments

• aws_lambda_nodejs: exclude node_modules option from sourcemaps

  #28088 commented on Jun 12, 2025 • 0 new comments

• aws_route53: delete_existing is creating and deleting 2x

  #34230 commented on Jun 12, 2025 • 0 new comments

• Personalize Support?

  #5487 commented on Jun 12, 2025 • 0 new comments

• [apigateway] SpecRestAPI `x-amazon-apigateway-endpoint-configuration` not usable for private API initial deployment

  #9684 commented on Jun 12, 2025 • 0 new comments

• (CloudFront): Initial Create Succeeds, Subsequent Updates Fail with Invalid request provided: AWS::CloudFront::PublicKey

  #15301 commented on Jun 12, 2025 • 0 new comments

• Hosted Zone NameServers & Nested Stack Output Not a String

  #33208 commented on Jun 12, 2025 • 0 new comments

• (opensearch): Response object is too long from cloudformation when adding enough access policies despite the update succeeding.

  #29093 commented on Jun 12, 2025 • 0 new comments

• aws-dynamodb: Cannot add multiple dynamodb GSI.

  #12246 commented on Jun 12, 2025 • 0 new comments

• (@aws-cdk/aws-s3-deployment): guess mime type - webp support

  #11890 commented on Jun 12, 2025 • 0 new comments

• aws-iam: spillover customer managed policy tag support

  #31343 commented on Jun 12, 2025 • 0 new comments

• aws_cloudfront_origins: OriginGroup support custom originId

  #31468 commented on Jun 11, 2025 • 0 new comments

• aws-codebuild: missing support for Windows on-demand environment

  #34121 commented on Jun 11, 2025 • 0 new comments

• X-account S3 grantRead() does not respect objectKeysPattern

  #34545 commented on Jun 11, 2025 • 0 new comments

• (aws-ecr-assets): Custom ECR repository, custom name and/or tag

  #33228 commented on Jun 11, 2025 • 0 new comments

• (servicediscovery): CloudMapOptions support for both A and SRV records

  #18894 commented on Jun 10, 2025 • 0 new comments

• (api-gateway): Ability to set Per-key cache invalidation attributes

  #18794 commented on Jun 10, 2025 • 0 new comments

• core: "Could not find parent of" error in FragmentedTreeWriter for tree.json

  #34627 commented on Jun 10, 2025 • 0 new comments

• ❗ End of support for Node.js 14.x and 16.x on May 30th, 2025

  #33623 commented on Jun 10, 2025 • 0 new comments

• (aws-eks): Tag Update in EKS-based Stack triggers "Version and ReleaseVersion updates cannot be combined with other updates"

  #16644 commented on Jun 9, 2025 • 0 new comments

• (core): `crossRegionReferences` generates unnecessarily long SSM parameter names leading to deployment failures

  #30119 commented on Jun 9, 2025 • 0 new comments

• (aws-ecs): Deleting a stack with a Cluster and an ASG capacity provider fails

  #19275 commented on Jun 9, 2025 • 0 new comments

• CfnPolicyAssociation: Add a Property to Allow Excluding Accounts

  #34642 commented on Jun 8, 2025 • 0 new comments

• aws-ecs: Empty array for capacityPoviderStrategies no longer works

  #34631 commented on Jun 6, 2025 • 0 new comments

• Unable to update a stack that has exports

  #5304 commented on Jun 6, 2025 • 0 new comments

• (rds): Encrypt DatabaseCluster (aurora) or DatabaseInstance (rds) storage with AWS-managed key by default (behind feature flag)

  #32398 commented on Jun 6, 2025 • 0 new comments

• (aws_apigateway): Add support for ipAddressType in EndpointConfiguration

  #33998 commented on Jun 6, 2025 • 0 new comments

• ECS: Memory reservation is not optional

  #20785 commented on Jun 6, 2025 • 0 new comments

• feat(events-targets): support Amazon Data Firehose target using Firehose's `IDeliveryStream`

  #33798 commented on Jun 12, 2025 • 0 new comments

• feat(route53resolver): improve FirewallRuleGroup import by name

  #33788 commented on Jun 13, 2025 • 0 new comments

• feat(kinesisfirehose): add built-in data processors to decompress CloudWatch logs and extract messages

  #33749 commented on Jun 12, 2025 • 0 new comments

• feat(event-targets): add role property to sqs event target

  #33701 commented on Jun 12, 2025 • 0 new comments

• feat(kinesisfirehose): add HTTP Endpoint and Datadog destination

  #33657 commented on Jun 12, 2025 • 0 new comments

• fix(core): respect host-stack permissions boundary for ref-time custom resource roles

  #33467 commented on Jun 12, 2025 • 0 new comments

• feat(elasticloadbalancingv2): support target group health attributes

  #33351 commented on Jun 12, 2025 • 0 new comments

• feat(core): set (default) stack termination protection on (parent) stage level

  #33239 commented on Jun 12, 2025 • 0 new comments

• feat(s3-deployment): support securityGroups in BucketDeploymentProps

  #33233 commented on Jun 12, 2025 • 0 new comments

• feat(core): add `include` property specifying particular files for assets

  #33132 commented on Jun 12, 2025 • 0 new comments

• fix(lambda-layer-awscli): s3-deployment constructs create multiple identical AwsCliLayers (#32907)

  #33085 commented on Jun 12, 2025 • 0 new comments

• POC for IAM tracking in Integ test snapshots

  #33066 commented on Jun 12, 2025 • 0 new comments

• fix(iam): cannot grant lambda:InvokeFunction on ManagedPolicy or Policy via `grantInvoke()` method

  #32984 commented on Jun 12, 2025 • 0 new comments

• feat(core): allow mounting existing or volume copy volumes

  #32832 commented on Jun 12, 2025 • 0 new comments

• feat(cli): add --mode options to diff command. deprecates --change-set/--no-changeset

  #32830 commented on Jun 12, 2025 • 0 new comments

• chore(aws-cdk-lib): catch another proptest failure

  #32751 commented on Jun 12, 2025 • 0 new comments

• feat(events-targets): add toggle to opt out of resource policy creation for targeted log group

  #32242 commented on Jun 12, 2025 • 0 new comments

• fix(stepfunctions-tasks): allow passing apiEndpoint as intrinsic function (under feature flag)

  #32139 commented on Jun 12, 2025 • 0 new comments

• fix(amplify-alpha): removing `customResponseHeaders` property does not remove the headers from the app

  #31844 commented on Jun 12, 2025 • 0 new comments

• feat(amplify-alpha): support custom response headers in monorepo structures

  #31771 commented on Jun 12, 2025 • 0 new comments

• feat(cloudfront-origins): `OriginGroup` supports custom `originId`

  #31514 commented on Jun 12, 2025 • 0 new comments

• feat(ecs): allow adding security group(s) after construction via connections.addSecurityGroup()

  #31447 commented on Jun 12, 2025 • 0 new comments

• fix(stack): stack tags are separate from other tags (under feature flag)

  #31443 commented on Jun 12, 2025 • 0 new comments

• fix(core): fix asset bundling for nested stack with exclusive flag

  #30983 commented on Jun 12, 2025 • 0 new comments

• feat(apigatewayv2-authorizers): add payloadFormatVersion field to HttpLambdaAuthorizer

  #30843 commented on Jun 12, 2025 • 0 new comments

• fix(cloudtrail): do not attach s3 bucket permission when orgId is not set for organization trail

  #30778 commented on Jun 12, 2025 • 0 new comments

• feat(ecs): enable Kernel 5.10 support on Amazon Linux 2

  #29809 commented on Jun 12, 2025 • 0 new comments

• feat(ec2): instance type properties

  #29507 commented on Jun 12, 2025 • 0 new comments