6 Releases published by 1 person

• v2.203.0

  published Jul 1, 2025

• v2.203.1

  published Jul 2, 2025

• v2.204.0

  published Jul 4, 2025

• v2.205.0

  published Jul 15, 2025

• v2.206.0

  published Jul 16, 2025

• v2.207.0

  published Jul 24, 2025

86 Pull requests merged by 37 people

• chore(bedrock): add TwelveLabs Marengo 2.7 and Pegasus 1.2

  #35011 merged Jul 25, 2025

• fix(s3-deployment): remove .js,.d.ts file from git

  #35069 merged Jul 25, 2025

• fix(logs): query strings can have multiple stats commands

  #34590 merged Jul 24, 2025

• ci(project-sync): add project-sync to lerna package list

  #35059 merged Jul 24, 2025

• chore(merge-back): 2.207.0

  #35057 merged Jul 24, 2025

• chore(deps): bump the npm_and_yarn group across 4 directories with 3 updates

  #35056 merged Jul 24, 2025

• chore(deps): upgrade axios version to 1.11.0

  #35037 merged Jul 24, 2025

• ci: re-add tool to sync with project board with build fixes

  #34823 merged Jul 24, 2025

• chore(release): 2.207.0

  #35053 merged Jul 24, 2025

• chore: run the Codebuild build on every PR, no matter the target branch

  #35042 merged Jul 23, 2025

• chore(enum-updater): fix pr close command

  #35038 merged Jul 23, 2025

• feat(core): allow validation report multi-write based on context keys

  #34927 merged Jul 23, 2025

• feat: update L1 CloudFormation resource definitions

  #35020 merged Jul 23, 2025

• chore(kinesisfirehose): ap-east-2

  #34657 merged Jul 21, 2025

• feat(logs): support ADC regions for infrequent access log class

  #34999 merged Jul 18, 2025

• fix(core): fix asset bundling for nested stack with exclusive flag

  #30983 merged Jul 18, 2025

• chore(ecs): add Windows2025 AMI

  #34901 merged Jul 18, 2025

• chore(ci): add codebuild github actions runner managed pr build

  #35005 merged Jul 18, 2025

• feat(core): addInfoV2 method for suppressible info Annotations

  #34872 merged Jul 18, 2025

• chore(ecs): add new enum values for ecs

  #34981 merged Jul 18, 2025

• docs(ecs): make correction to documentation for windows containers network mode support

  #35007 merged Jul 18, 2025

• feat(cloudwatch): add search expression to graph widget in cloudwatch dashboard

  #34933 merged Jul 17, 2025

• chore: handle quotes properly in metadata updater

  #34990 merged Jul 17, 2025

• feat(bedrockprompt): add prompt management to bedrock agents

  #34754 merged Jul 17, 2025

• feat(rds): support Database Insights for RDS instances

  #34854 merged Jul 17, 2025

• fix(autoscaling): add an option to run validation when migrating to launch template

  #34832 merged Jul 17, 2025

• feat: cloudwatch logs transformer support

  #34996 merged Jul 16, 2025

• chore(merge-back): 2.206.0

  #34998 merged Jul 16, 2025

• chore(release): 2.206.0

  #34997 merged Jul 16, 2025

• fix(s3-deployment): broken cross stack reference when using Source.data

  #34916 merged Jul 16, 2025

• chore(merge-back): 2.205.0

  #34994 merged Jul 15, 2025

• chore(release): 2.205.0

  #34993 merged Jul 15, 2025

• fix(kinesisfirehose): can't call grantPrincipal multiple times

  #34682 merged Jul 15, 2025

• revert: "feat: cloudwatch logs transformer support"

  #34984 merged Jul 15, 2025

• feat(kinesisfirehose): support custom time zone settings for S3 destination

  #34738 merged Jul 15, 2025

• feat: update L1 CloudFormation resource definitions

  #34979 merged Jul 14, 2025

• feat(codebuild): cache sharing of CodeBuild projects

  #34257 merged Jul 14, 2025

• feat: cloudwatch logs transformer support

  #34863 merged Jul 11, 2025

• chore(release): 2.204.1

  #34969 merged Jul 11, 2025

• fix(tags): excludeResourceTypes does not work for tags applied at stack level (under feature flag)

  #31443 merged Jul 11, 2025

• feat: update L1 CloudFormation resource definitions

  #34915 merged Jul 11, 2025

• feat(synthetics): add support for tag replication for aws synthetics

  #34830 merged Jul 11, 2025

• fix(lambda): handle token resolution issues in addToRolePolicy

  #34904 merged Jul 11, 2025

• chore: stop Mergify from making new PRs to validate existing PRs it's about to merge

  #34946 merged Jul 11, 2025

• docs(core): fix incorrect default RemovalPolicy documentation

  #34934 merged Jul 11, 2025

• feat(events): add arnForPolicy attribute for api destination

  #34315 merged Jul 10, 2025

• fix(pipelines): ensure assets with same hash but different destinations are published separately

  #34790 merged Jul 10, 2025

• revert(ci): require the GitHub Actions PR build for mergify

  #34938 merged Jul 10, 2025

• ci(prbuild): update pr-build workflow to not run on aws-cdk repo

  #34932 merged Jul 9, 2025

• fix(codecov): update codecov-upload.yml with a git checkout step

  #34929 merged Jul 9, 2025

• docs(cloudfront): update Distribution example to use S3BucketOrigin instead of deprecated S3Origin

  #34525 merged Jul 9, 2025

• chore(secretsmanager): grantWrite add secretsmanager:UpdateSecretVersionStage

  #34722 merged Jul 9, 2025

• docs: adding documentation for basic SaaS manager cases

  #34846 merged Jul 9, 2025

• chore: update issue-label-assign.yaml to add new alpha modules labels

  #34926 merged Jul 8, 2025

• fix(region-info): integ use standalone package

  #34782 merged Jul 8, 2025

• chore(enum-updater): update enum static mapping

  #34913 merged Jul 8, 2025

• docs(autoscaling): fix lower bound description in step scaling policy

  #34807 merged Jul 8, 2025

• feat: report feature flag info into Cloud Assembly

  #34919 merged Jul 8, 2025

• chore(rds): add aurora postgres engine version v17.5.

  #34900 merged Jul 8, 2025

• feat(synthetics): add maxRetries prop to configure automatic retries on canary runs

  #34541 merged Jul 7, 2025

• docs(core): remove doc on non-existing parameter of copyDirectory

  #34914 merged Jul 7, 2025

• feat(cloudwatch-dashboards): add support for queryLanguage property

  #34547 merged Jul 4, 2025

• feat(ec2): add c8gn instance class

  #34866 merged Jul 4, 2025

• chore(merge-back): 2.204.0

  #34908 merged Jul 4, 2025

• chore: add retrospective integration test for Permissions Boundaries

  #34899 merged Jul 4, 2025

• feat(rds): add fromLookup method for Amazon Aurora Database Cluster

  #34849 merged Jul 4, 2025

• chore(release): 2.204.0

  #34905 merged Jul 4, 2025

• feat(apigatewayv2): add stage variables support for HTTP and WebSocket API

  #34548 merged Jul 4, 2025

• chore(region-info): eusc-de-east-1

  #34860 merged Jul 3, 2025

• feat(cloudwatch): add id and visible properties for CloudWatch Metric

  #34870 merged Jul 3, 2025

• fix(ecr-assets): incorrect handling of nested excludes in .dockerignore

  #34810 merged Jul 3, 2025

• chore(merge-back): 2.203.1

  #34891 merged Jul 2, 2025

• feat: report feature flags into Cloud Assembly

  #34884 merged Jul 2, 2025

• chore(route53): support new partition in route53 cross-account delegator

  #34879 merged Jul 2, 2025

• chore: update feature flag documentation

  #34838 merged Jul 2, 2025

• chore(release): v2.203.1

  #34881 merged Jul 2, 2025

• feat(lambda-python-alpha): support uv

  #33880 merged Jul 2, 2025

• fix: "Invalid Assembly Manifest" when used with CLI 2.1017.0 and 2.1018.0

  #34880 merged Jul 2, 2025

• chore(merge-back): 2.203.0

  #34869 merged Jul 1, 2025

• chore(release): 2.203.0

  #34867 merged Jul 1, 2025

• fix(stepfunctions-tasks): properly serialize CallAwsServiceCrossRegion Lambda responses

  #34843 merged Jul 1, 2025

• feat(rds): instance engine lifecycle support

  #34719 merged Jul 1, 2025

• feat: report feature flag configuration into Cloud Assembly

  #34798 merged Jul 1, 2025

• chore: update Contributors File

  #34862 merged Jul 1, 2025

• feat(cloudwatch): add account id field for log query and metric widgets to support cross account visibility

  #34793 merged Jun 30, 2025

• fix(codecov): update codecov-upload.yml

  #34845 merged Jun 30, 2025

57 Pull requests opened by 40 people

• fix(ec2): strict alignment for CidrBlock (no silent rounding)

  #34851 opened Jun 29, 2025

• fix(lambda): grant KMS-key usage on DLQ for Lamba

  #34856 opened Jun 30, 2025

• fix(s3-deployment): intermittent CreateInvalidation and/or wait errors

  #34859 opened Jun 30, 2025

• feat(33270): support new bun lock file

  #34873 opened Jul 1, 2025

• fix(eks-v2-alpha): ensure kubectl provider and handler functions use the same vpc configuration

  #34878 opened Jul 2, 2025

• chore(deps): bump the pip group across 7 directories with 2 updates

  #34882 opened Jul 2, 2025

• chore: yarn upgrade dependencies requiring intervention

  #34887 opened Jul 2, 2025

• chore: npm-check-updates && yarn upgrade

  #34888 opened Jul 2, 2025

• fix(pipes-alpha): properly infer if given deadLetterTarget is IQueue or ITopic instead of using instanceof tests...

  #34893 opened Jul 2, 2025

• fix(eks-v2-alpha): ensure kubectl provider access entry is depended upon by downstream resources

  #34898 opened Jul 3, 2025

• fix(rds): can not lookup VPC Security Groups with fromLookup method

  #34906 opened Jul 4, 2025

• feat(dynamodb): tableV2 MRSC feature addition

  #34909 opened Jul 4, 2025

• chore(eks-v2-alpha): support `KubernetesVersion.V1_33`

  #34923 opened Jul 8, 2025

• feat: drop support for Node.js <= 18.0.0

  #34925 opened Jul 8, 2025

• fix(aws-events-targets) Converve LogGroupResourcePolicies in CloudWatchLogGroup

  #34935 opened Jul 9, 2025

• chore(dependencies): build with upgraded dependencies fails

  #34957 opened Jul 10, 2025

• feat(ecs): volume initialization rate

  #34962 opened Jul 11, 2025

• feat(kinesis): shard-level metrics for stream

  #34963 opened Jul 11, 2025

• chore(ecs): `InstanceDrainHook` update runtime python3.13

  #34970 opened Jul 11, 2025

• feat(`aws-stepfunctions-tasks/evaluate-expression`): Allow configure `EvaluateExpression` Lambda architecture

  #34975 opened Jul 11, 2025

• feat(codebuild): support remote Docker server

  #34976 opened Jul 12, 2025

• feat(core): ssm parameters for cross stack references

  #34985 opened Jul 14, 2025

• feat: Add support for hierarchical ARNs in Arn utility

  #34988 opened Jul 14, 2025

• docs(lambda): fix incorrect import in autoscaling example

  #34989 opened Jul 14, 2025

• feat(ec2): support for Cloud Wan Core Network routes

  #35008 opened Jul 17, 2025

• chore(rds): deprecate PostgreSQL versions 13.17, 13.19, 14.14, 14.16, 15.9, 15.11, 16.5, 16.7, 17.1, and 17.3

  #35009 opened Jul 18, 2025

• ci(cdk-release): fix bug marking stable changes as alpha

  #35012 opened Jul 18, 2025

• chore(rds): aurora postgres 16.9, 15.13, 14.18 and 13.21, sqlserver 16.00.4195.2.v1

  #35013 opened Jul 18, 2025

• chore(custom-resources): use loggingFormat instead of deprecated logFormat

  #35015 opened Jul 19, 2025

• chore(enum-updater): update enum static mapping

  #35017 opened Jul 21, 2025

• feat(pipelines): add `executionMode` support in CodePipeline L3 construct

  #35022 opened Jul 21, 2025

• feat(s3-tables): add L2 construct support for Table and Namespace resources

  #35023 opened Jul 21, 2025

• feat(ec2): support the new `ServiceRegion` property for `AWS::EC2::VPCEndpoint`

  #35025 opened Jul 21, 2025

• feat: add Redshift Query Scheduler construct

  #35027 opened Jul 22, 2025

• feat: new resource reference interfaces

  #35032 opened Jul 22, 2025

• fix(signer): not correctly passing signingProfileName to CfnSigningProfile

  #35033 opened Jul 22, 2025

• chore(region-info): ap-southeast-6

  #35036 opened Jul 23, 2025

• feat: deprecating delete existing field in ARecord

  #35039 opened Jul 23, 2025

• fix(cloudwatch): dashboard widgets don't properly support composite alarms

  #35041 opened Jul 23, 2025

• chore(ecs): add new enum values for ecs

  #35043 opened Jul 23, 2025

• chore(kms): add new enum values for kms

  #35044 opened Jul 23, 2025

• chore(lambda): add new enum values for lambda

  #35045 opened Jul 23, 2025

• chore(design): update DESIGN_GUIDELINES.md

  #35046 opened Jul 23, 2025

• feat(inferenceprofiles): add inference and cross-region inference pro…

  #35048 opened Jul 23, 2025

• feat: update L1 CloudFormation resource definitions

  #35054 opened Jul 24, 2025

• feat(vpc-lattice-alpha): initial ServiceNetwork and Service L2 constructs

  #35055 opened Jul 24, 2025

• feat(rds): support instance and iam-db-auth-error CloudWatch log exports

  #35058 opened Jul 24, 2025

• feat: implement UsagePlan and ApiKey support in L2 constructs for aws-apigatewayv2 (WebSocketApi)

  #35060 opened Jul 24, 2025

• feat(ecs): enable ECS native B/G in L2 constructs

  #35061 opened Jul 24, 2025

• feat(rds): add DatabaseProxyEndpoint L2 construct

  #35064 opened Jul 25, 2025

• fix(s3-deployment): preserve file integrity when no markers are present

  #35068 opened Jul 25, 2025

• docs(cognito): clarify standard attribute name mappings

  #35072 opened Jul 25, 2025

• chore(lambda): insights add version 1.0.404.0, 1.0.391.0

  #35073 opened Jul 26, 2025

• chore(rds): add MySQL 5.7.12 version

  #35074 opened Jul 26, 2025

• fix(ecs): prevent unnecessary updates when setting availabilityZoneRe…

  #35077 opened Jul 27, 2025

• feat(acm): add support for ACM exportable public certificates

  #35079 opened Jul 27, 2025

• fix: remove lazy loading for deprecated inferenceAccelerators property

  #35080 opened Jul 27, 2025

50 Issues closed by 14 people

• (s3-deployment): integ js file `integ.bucket-deployment-signcontent.js` commited, blocking all PR from merging

  #35066 closed Jul 25, 2025

• (logs): Query strings may multiple stats commands in a single query

  #34578 closed Jul 24, 2025

• (aws-cloudwatch): create alarm issue at ver: 1.17.1 and 1.17.2

  #34991 closed Jul 23, 2025

• core: Asset bundling ignored when deploy with --exclusive flag with nested stack

  #30967 closed Jul 18, 2025

• (core): add suppresable info-level annotation message

  #34871 closed Jul 18, 2025

• (aws-ecs): make correction to documentation for Windows containers network mode support

  #35006 closed Jul 18, 2025

• Metric SEARCH Expression support for GraphWidget CDK Construct

  #7237 closed Jul 17, 2025

• rds: support Database Insights for RDS (postgres) Instance

  #34743 closed Jul 17, 2025

• (aws-autoscaling): Build guardrail to prevent availability risk by instance profile deletion/recreation during migration to LT

  #34283 closed Jul 17, 2025

• (CfnLocationS3): (Parameter mandatory)

  #34821 closed Jul 16, 2025

• (core): soft dependencies between stacks using SSM

  #34949 closed Jul 16, 2025

• (aws-logs): Transformer support

  #34861 closed Jul 16, 2025

• (Property Injection): (Track when it is used)

  #34806 closed Jul 16, 2025

• @aws-cdk/aws-s3-deployment: broken cross stack reference when used in Source.jsonData

  #22843 closed Jul 16, 2025

• (kinesisfirehose): support CustomTimeZone setting for S3 bucket destiation

  #34737 closed Jul 15, 2025

• datasync: agentArns property required

  #34808 closed Jul 14, 2025

• (Github Automation): Merge failing from merge queue

  #34961 closed Jul 11, 2025

• Stack: Tag propagation

  #33945 closed Jul 11, 2025

• (core/stack): stack.tags does not do anything

  #30055 closed Jul 11, 2025

• (aws-synthetics): (Support ResourcesToReplicateTags)

  #34811 closed Jul 11, 2025

• (aws-lambda): addRoleToPolicy() breaks when feature flag createNewPoliciesWithAddToRolePolicy set to true

  #34894 closed Jul 11, 2025

• aws_cdk.RemovalPolicy: Default is stated incorrectly as Destroy

  #23897 closed Jul 11, 2025

• (pipelines): Assets are missing to be packaged since StackSynthesizer being ignored

  #31070 closed Jul 10, 2025

• (ec2.Vpc.fromAttributes): Creating VPC from Attributes returns odd validation.

  #34920 closed Jul 10, 2025

• aws cdk cli: Maximum schema version supported is 43.x.x, but found 44.0.0

  #34912 closed Jul 9, 2025

• (aws-cdk-lib/aws-cloudfront): (Distribution example code uses deprecated origins.S3Origin class)

  #34469 closed Jul 9, 2025

• (aws-secretsmanager): add UpdateSecretVersionStage to the policy generated by Secret::grantWrite

  #34521 closed Jul 9, 2025

• Register new region: ap-southeast-4

  #25890 closed Jul 8, 2025

• Register new region: ap-southeast-6

  #34396 closed Jul 8, 2025

• [cdk-pipelines] Every asset update mutates the pipeline

  #9080 closed Jul 8, 2025

• (aws_sagemaker): CfnDomain - possible concurrency issue when deploying EFS

  #34818 closed Jul 8, 2025

• test(region-info): integ test to ensure region info works as expected

  #34692 closed Jul 8, 2025

• aws_rds: missing AuroraPostgresEngineVersion.VER_17_5

  #34896 closed Jul 8, 2025

• (aws-synthetics): Add support for configuring automatic retries of Canary runs

  #34511 closed Jul 7, 2025

• ❗ CDK CLI versions and CDK library versions will soon diverge

  #32775 closed Jul 7, 2025

• (cloudwatch-dashboards): Add support for queryLanguage property

  #34482 closed Jul 4, 2025

• (aws-rds): support lookup method for Aurora `DatabaseCluster`

  #34848 closed Jul 4, 2025

• (api-gateway-v2): Add stage variables to HttpApi Stage

  #11818 closed Jul 4, 2025

• (aws-cloudwatch): Allow setting id and visible properties for cloudwatch Metric

  #19876 closed Jul 3, 2025

• (docker assets): .dockerignore is processed incorrectly before 1.73.0 and broken after 1.73.0

  #13636 closed Jul 3, 2025

• aws-logs: Support LogGroups Transformers

  #32236 closed Jul 2, 2025

• aws-lambda-python-alpha: Support `uv` lockfile for `PythonFunction` bundling

  #32413 closed Jul 2, 2025

• aws-lambda-python-alpha: Support uv

  #31238 closed Jul 2, 2025

• cli: support `--import-existing-resources` flag in cdk diff

  #32790 closed Jul 2, 2025

• aws_stepfunction_tasks: CallAwsServiceCrossRegion's Lambda doesn't return service response correctly

  #34768 closed Jul 1, 2025

• aws-rds: Add support for engineLifecycleSupport configuration in L2/L3 constructs for RDS Instances

  #34492 closed Jul 1, 2025

• AWS event rule: handles jobs stopped status twice.

  #34855 closed Jul 1, 2025

• (Cloudwatch LogQueryWidgetProps): (Lack of accountId filed)

  #26105 closed Jun 30, 2025

• Not needed issue

  #34857 closed Jun 30, 2025

• bedrock: construct to enable model access

  #34850 closed Jun 30, 2025

50 Issues opened by 44 people

• (aws-certificatemanager): Support CertificateExport for acm.Certificate

  #35078 opened Jul 27, 2025

• (ec2): Support for ipv6 in ec2.IVpc, ec2.ISubnet

  #35076 opened Jul 27, 2025

• cli: unreadable text due to forced bright colors on light terminals

  #35075 opened Jul 26, 2025

• Support for new AWS Glue Worker Types (R.1X, R.2X, R.4X, R.8X) in CfnJobProps

  #35071 opened Jul 25, 2025

• aws_rds: missing AuroraPostgresEngineVersion.VER_16_9

  #35065 opened Jul 25, 2025

• (aws-ses): CloudFormation cannot update ConfigurationSet - fails with 403 error

  #35063 opened Jul 24, 2025

• (aws-dynamodb): `addToResourcePolicy` has no effect

  #35062 opened Jul 24, 2025

• (aws-ecr): missing ecr supports for ipv6

  #35052 opened Jul 24, 2025

• (aws-ecs): setting AvailabilityZoneRebalancing explicitly causing task replacement

  #35051 opened Jul 24, 2025

• aws-s3-deployment: unexpected file tampering where a multiline JSON file gets manipulated to a single line after being uploaded to S3

  #35050 opened Jul 24, 2025

• custom-resources: Incorrect documentation/comment for deprecated ProviderProps.role property

  #35049 opened Jul 23, 2025

• Register new region: ap-southeast-6

  #35031 opened Jul 22, 2025

• (signer): signing profile name in L2 is not present in generated L1 template

  #35030 opened Jul 22, 2025

• IAM/FederatedPrincipal: @param sessionTags documented but not implemented

  #35029 opened Jul 22, 2025

• Fix YAML linting errors in .mergify.yml and .yamllintignore files

  #35024 opened Jul 21, 2025

• (aws-glue): Add `create-catalog` API call

  #35019 opened Jul 21, 2025

• aws-rds: support iam-db-auth-error in DatabaseCluster cloudwatchLogsExports prop

  #35018 opened Jul 21, 2025

• (region-info): add GuardDuty agent repository info

  #35016 opened Jul 19, 2025

• aws-pipelines: add `executionMode` property to `CodePipeline` construct

  #35014 opened Jul 18, 2025

• aws-ecs: support built-in blue/green deployments for L2 Construct

  #35010 opened Jul 18, 2025

• (APIGatewayV2): API Gateway V2 ALB Integration - Multiple Route Creation Failure

  #35004 opened Jul 17, 2025

• (lambda: (migrate from logRetention to logGroup)

  #35003 opened Jul 17, 2025

• (custom-resource): Custom Resource provider is using deprecated LogFormat parameter

  #35002 opened Jul 16, 2025

• (aws-cloudwatch): Metric widget can't display composite alarm

  #35001 opened Jul 16, 2025

• (aws-events): add enhanced logging support to `EventBus`

  #35000 opened Jul 16, 2025

• (amplify): Amplify SSR compute role is never set during deploy

  #34992 opened Jul 15, 2025

• aws-cloudwatch: CDK synth "Warning 'TIME_SERIES(${Token[TOKEN.81]})' references unknown identifiers: oken"

  #34977 opened Jul 12, 2025

• (`aws-stepfunctions-tasks/evaluate-expression`): Support configuring the lambda architecture

  #34974 opened Jul 11, 2025

• ec2.CfnTransitGateway: The request must modify any of the Transit Gateway parameters

  #34971 opened Jul 11, 2025

• (aws-lambda-python-alpha): Poetry 2+ unsupported in public.ecr.aws/lambda/python:3.10

  #34953 opened Jul 10, 2025

• aws-fms:CfnPolicy: Missing example for AntiDDos rule

  #34931 opened Jul 9, 2025

• aws-ecs: update the runtime used by InstanceDrainHook to 3.10 or later

  #34928 opened Jul 9, 2025

• aws-ec2: CapacityReservationSpecification parameter missing in LaunchTemplate construct

  #34921 opened Jul 8, 2025

• aws-route53: Can't update existing CNAME without recreating resource

  #34918 opened Jul 7, 2025

• aws-appsync: when specifying logs for eventapi the construct always try to configure the log retention

  #34917 opened Jul 7, 2025

• aws-eks-v2-alpha: support for `KubernetesVersion.V1_33`

  #34911 opened Jul 5, 2025

• ec2: change marked as alpha in release notes

  #34907 opened Jul 4, 2025

• aws-eks-v2-alpha: eks.Addon missing support for {PodIdentityAssociations, ResolveConflicts, ServiceAccountRoleArn} passing

  #34903 opened Jul 4, 2025

• (aws-eks-v2-alpha): kubectl-based resources may not be successfully created/deleted

  #34897 opened Jul 3, 2025

• aws-ecs: aws-cdk-lib.aws_ecs.CfnTaskDefinitionProps#inferenceAccelerators deprecation warning

  #34895 opened Jul 2, 2025

• ❗ NOTICE: CDK CLI will begin to collect anonymous telemetry data on or after Sep 1st, 2025

  #34892 opened Jul 2, 2025

• (GitHub automation): Auto-lock-script should also auto-unlock

  #34890 opened Jul 2, 2025

• (GitHub automation): Stale PR bot closing PR after merge from main

  #34889 opened Jul 2, 2025

• ❗️NOTICE "Invalid Assembly Manifest" when using lib 2.203.0 with CLI 2.1017.0/2.1018.0

  #34885 opened Jul 2, 2025

• (aws-dynamodb): add MRSC global table compatiablity for TableV2

  #34883 opened Jul 2, 2025

• (aws-eks-v2-alpha): kubectl provider function cannot be placed outside of VPC

  #34877 opened Jul 2, 2025

• glue: ability to specify a custom bucket to store glue scripts & extra "py" filess/zips

  #34868 opened Jul 1, 2025

• Monthly PR metrics report

  #34865 opened Jul 1, 2025

• Monthly issue metrics report

  #34864 opened Jul 1, 2025

• (aws-s3-deployment): support for corss-region BucketDeployment similar to S3 Sync

  #34858 opened Jun 30, 2025

124 Unresolved conversations

Sometimes conversations happen on old items that aren’t yet closed. Here is a list of all the Issues and Pull Requests with unresolved conversations.

• feat(bedrock-alpha): add guardrails l2 construct

  #34765 commented on Jul 25, 2025 • 13 new comments

• feat(opensearchservice): create `AWS::Logs::ResourcePolicy` instead of `Custom::CloudwatchLogResourcePolicy`

  #34558 commented on Jul 11, 2025 • 4 new comments

• fix(core): context value for feature flag should be parsed for boolean

  #34616 commented on Jul 24, 2025 • 2 new comments

• chore(ecs): update instance-drain-hook lambda runtime to python 3.13 (closes #34634)

  #34639 commented on Jul 4, 2025 • 1 new comment

• fix(iam): throw error when statement id is invalid (#34819)

  #34828 commented on Jul 26, 2025 • 1 new comment

• (aws_rds): Native support for Blue Green deployments of RDS via CDK

  #23872 commented on Jul 27, 2025 • 0 new comments

• Missing classification-parameter when creating table in Glue

  #7826 commented on Jul 25, 2025 • 0 new comments

• (aws-secretsmanager): Provide method to obtain a literal (unresolved by CloudFormation) dynamic reference string for a secret's JSON key

  #34397 commented on Jul 25, 2025 • 0 new comments

• feat(apigatewayv2-authorizers): add payloadFormatVersion field to HttpLambdaAuthorizer

  #30843 commented on Jul 18, 2025 • 0 new comments

• (applicationsignals-alpha): deployment fails on windows hosts with user/password error

  #34560 commented on Jul 25, 2025 • 0 new comments

• (aws_ses: EmailIdentity): (EmailIdentity grantSendEmail missing permission in case there is a configuration set defined)

  #34402 commented on Jul 24, 2025 • 0 new comments

• IApplicationListener: Bad implicit modifications on security groups

  #25490 commented on Jul 24, 2025 • 0 new comments

• bedrock: KnowledgeBaseConfigurationProperty is missing sqlKnowledgeBaseConfiguration property in latest CDK version 2.176.0

  #32972 commented on Jul 24, 2025 • 0 new comments

• awswafv2: SingleHeaderProperty in GO generates bad CF template (capitalized "Name" property)

  #28074 commented on Jul 23, 2025 • 0 new comments

• cdk.lambda.DockerImageFunction: add ability to set image tag as parameter

  #26987 commented on Jul 23, 2025 • 0 new comments

• CDK custom resource CustomCDKBucketDeployment (Python urllib3) vulnerability

  #34805 commented on Jul 23, 2025 • 0 new comments

• feat(ecs): allow adding security group(s) after construction via connections.addSecurityGroup()

  #31447 commented on Jul 14, 2025 • 0 new comments

• feat(codedeploy): add trigger configuration support for deployment groups (#34282)

  #34789 commented on Jul 15, 2025 • 0 new comments

• [Community Meeting] 06/24/25 8am PDT / 5pm PDT

  #34716 commented on Jul 23, 2025 • 0 new comments

• aws-eks: allow passing secret to cluster.addHelmChart and cluster.addManifest

  #16476 commented on Jul 22, 2025 • 0 new comments

• iam: cannot pass iam.ManagedPolicy or iam.Policy to lambda.Function.grantInvoke

  #32980 commented on Jul 21, 2025 • 0 new comments

• aws-sns-subscriptions: Adding SqsSubscription on SNS topic does not create correct queue policy for SQS when SNS topic is present in opt-in AWS regions

  #32526 commented on Jul 21, 2025 • 0 new comments

• Circular dependency on s3 notification to a destination when both destination and s3 are encrypted by same CMK

  #3067 commented on Jul 20, 2025 • 0 new comments

• batch: Support multi-container job definitions

  #29326 commented on Jul 20, 2025 • 0 new comments

• [CLI]package/tools: Force deploy flag does not work

  #15065 commented on Jul 20, 2025 • 0 new comments

• dsql: L2 constructs for Aurora DSQL

  #34593 commented on Jul 20, 2025 • 0 new comments

• (ec2): vpc flow logs bucket destroy

  #21551 commented on Jul 18, 2025 • 0 new comments

• Least Privilege Permissions to run cdk bootstrap

  #21937 commented on Jul 18, 2025 • 0 new comments

• aws-cdk-lib/pipelines: CodePipelineSource.github documentation evokes questions

  #23237 commented on Jul 17, 2025 • 0 new comments

• RDS: Database Cluster Writer/Reader's DeleteAutomatedBackups

  #25948 commented on Jul 17, 2025 • 0 new comments

• (stepfunctions): CDK generated stepfunction roles breaking inflight stepfunction executions with versioned lambdas

  #17515 commented on Jul 16, 2025 • 0 new comments

• ecs-patterns/ApplicationLoadBalancedFargateService fails to deploy in VPC with multiple subnets in same AZ

  #5892 commented on Jul 16, 2025 • 0 new comments

• [aws_cdk.aws_apigatewayv2]: [Add Usage Plan support via the L2 constructs for the aws_apigatewayv2 resources (eg. WebSocketApi)]

  #28756 commented on Jul 16, 2025 • 0 new comments

• S3 deployment: set objects metadata per suffix

  #4687 commented on Jul 16, 2025 • 0 new comments

• fix(apigateway): invalid JSON structure in StepFunctions error responses causes 500s

  #34787 commented on Jul 7, 2025 • 0 new comments

• docs(eks): fix heading levels for Auto Mode

  #34783 commented on Jun 30, 2025 • 0 new comments

• docs(eks): clarify TaintEffect enum usage for AWS vs Kubernetes contexts

  #34781 commented on Jul 15, 2025 • 0 new comments

• docs(lambda-event-sources): add schema registry integration docs

  #34779 commented on Jul 10, 2025 • 0 new comments

• feat(apigatewayv2): `WebSocketStage` support accessLogSettings

  #34766 commented on Jul 19, 2025 • 0 new comments

• feat(eks): support AWS Load Balancer Controller 2.8.3 - 2.13.3

  #34761 commented on Jul 18, 2025 • 0 new comments

• fix(cloudwatch): `AlarmRule.concat` cover empty operands

  #34757 commented on Jul 26, 2025 • 0 new comments

• fix: set the correct port for the SES SMTP servie endpoint

  #34750 commented on Jul 14, 2025 • 0 new comments

• chore(glue-alpha): remove documentation referring to .of() access to the constructors of WorkerType and JobType

  #34734 commented on Jul 24, 2025 • 0 new comments

• feat(core): `DockerBuildOptions` support network param

  #34725 commented on Jul 26, 2025 • 0 new comments

• feat(eks-v2-alpha): support eks with k8s 1.33

  #34713 commented on Jul 27, 2025 • 0 new comments

• feat(sns): add notExistsCondition method

  #34712 commented on Jul 15, 2025 • 0 new comments

• feat(stepfunctions-tasks): `EmrCreateClusterOptions` support ebsRootVolumeIops, ebsRootVolumeThroughput and managedScalingPolicy

  #34677 commented on Jun 30, 2025 • 0 new comments

• feat(elasticloadbalancingv2): default security group settings for NLB (under feature flag)

  #34675 commented on Jul 11, 2025 • 0 new comments

• fix(route53-targets): only use dualstack prefix for dual-stack NLBs

  #34641 commented on Jun 30, 2025 • 0 new comments

• feat(eks-v2-alpha): make `objectName` optional in `KubernetesObjectValue`

  #34549 commented on Jul 6, 2025 • 0 new comments

• feat(codebuild): add ec2 image types

  #34365 commented on Jul 14, 2025 • 0 new comments

• feat(cognito): support refresh token rotation

  #34360 commented on Jul 17, 2025 • 0 new comments

• feat(route53-patterns): `HttpsRedirect` use `Distribution` as the default CloudFront distribution (under feature flag)

  #34312 commented on Jul 27, 2025 • 0 new comments

• feat(synthetics): syn-nodejs-puppeteer-10.0 as supported runtime

  #34241 commented on Jul 25, 2025 • 0 new comments

• feat(ecs-patterns): enable Backlog per instance scaling in QueueProcessingFargateService

  #34202 commented on Jul 22, 2025 • 0 new comments

• feat(backup): add indexActions prop to BackupPlanRule

  #34051 commented on Jul 16, 2025 • 0 new comments

• fix(glue): restore notifyDelayAfter across different job types

  #33842 commented on Jul 15, 2025 • 0 new comments

• feat(event-targets): add role property to sqs event target

  #33701 commented on Jul 2, 2025 • 0 new comments

• feat(elasticloadbalancingv2): support target group health attributes

  #33351 commented on Jul 27, 2025 • 0 new comments

• feat(s3-deployment): support securityGroups in BucketDeploymentProps

  #33233 commented on Jul 21, 2025 • 0 new comments

• fix(stepfunctions-tasks): allow passing apiEndpoint as intrinsic function (under feature flag)

  #32139 commented on Jul 8, 2025 • 0 new comments

• feat(cloudfront-origins): `OriginGroup` supports custom `originId`

  #31514 commented on Jul 18, 2025 • 0 new comments

• aws-efs: EFS does not contain the mount access policy by default

  #33669 commented on Jul 7, 2025 • 0 new comments

• nteg-tests-alpha: assert response from invokeFunction call

  #34797 commented on Jul 6, 2025 • 0 new comments

• (ec2): import an existing AutoScalingGroup with a Role

  #13756 commented on Jul 4, 2025 • 0 new comments

• stepfunctions: invalid vtl in 500 response template

  #34777 commented on Jul 4, 2025 • 0 new comments

• (iam): a composite principal is not efficiently synthesized for trust relationship

  #23765 commented on Jul 4, 2025 • 0 new comments

• aws_codebuild/Source: Allow Gitlab source (potentially using codestar connector)

  #31138 commented on Jul 3, 2025 • 0 new comments

• AWS ECS: UDP-only service not allowed to attach to NetworkTargetGroup

  #23026 commented on Jul 3, 2025 • 0 new comments

• (aws-cdk/aws-cloudtrail): Support DynamoDB as a DataResourceType in CloudTrail

  #14886 commented on Jul 3, 2025 • 0 new comments

• (stack): (header tag breaking jsii-doc)

  #28897 commented on Jul 2, 2025 • 0 new comments

• (aws-iam): Invalid Policy Statement Id strings should fail at build time

  #34819 commented on Jul 2, 2025 • 0 new comments

• codepipeline-actions: CloudFormationCreateUpdateStackAction fails when lambda requires assets

  #29776 commented on Jul 2, 2025 • 0 new comments

• s3: possible race condition, adding new object to bucket between deletion of bucket objects and bucket deletion prevents deletion

  #21776 commented on Jul 2, 2025 • 0 new comments

• (pipeline): no matching base directory path found for cdk/cdk.out

  #28519 commented on Jul 2, 2025 • 0 new comments

• route53: Add Support for HTTPSRecord

  #34673 commented on Jul 2, 2025 • 0 new comments

• (aws-lambda-nodejs): Support Bun 1.2 text lockfile

  #33270 commented on Jul 2, 2025 • 0 new comments

• (aws-s3): Suppress info log for cross-account replication configuration in S3

  #34773 commented on Jul 1, 2025 • 0 new comments

• addSecurityGroup didn't work for ECS_pattern ALB Fargate

  #5635 commented on Jul 1, 2025 • 0 new comments

• (@aws-cdk/aws-lambda-nodejs): NodejsFunction - Enable parallel building

  #28717 commented on Jul 1, 2025 • 0 new comments

• (@aws-cdk/aws-ecr-assets): DockerImageAsset - support `--build-context` flag

  #31598 commented on Jun 30, 2025 • 0 new comments

• (aws-cloudfront-origins): VpcOrigin ID collision in separate region of same AWS account

  #34799 commented on Jun 30, 2025 • 0 new comments

• aws_route53: delete_existing is creating and deleting 2x

  #34230 commented on Jun 30, 2025 • 0 new comments

• CDK construct validation error when trying use SSM Secure string reference - related to userpool identity provider

  #6819 commented on Jun 30, 2025 • 0 new comments

• aws-lambda: Adding an encrypted SQS queue as a Lambda DLQ does not grant Lambda role necessary KMS permissions

  #33153 commented on Jun 30, 2025 • 0 new comments

• aws-glue: Logical operator cannot be null or empty ( `CfnTrigger` )

  #34652 commented on Jun 29, 2025 • 0 new comments

• aws-ecs: Resource handler returned message: "Invalid request provided: The target group with targetGroupArn <redacted> does not have an associated load balancer."

  #34290 commented on Jun 29, 2025 • 0 new comments

• codedeploy: cannot configure blue/green deployment for ServerDeploymentGroup

  #30555 commented on Jun 29, 2025 • 0 new comments

• (aws-cloudfront): Lambda at Edge Cloudwatch log groups retention

  #12690 commented on Jun 29, 2025 • 0 new comments

• (aws-lambda-python-alpha): The command "export" does not exist - Poetry

  #32762 commented on Jun 29, 2025 • 0 new comments

• (aws-lambda-python-alpha): Failed to install numpy 2.3.0 with Python 3.11 or lower

  #34685 commented on Jun 29, 2025 • 0 new comments

• (custom-resource-handlers): Add hashes to generated lambdas

  #34307 commented on Jun 28, 2025 • 0 new comments

• Codepipeline cdk v2: Self mutate before synth step

  #32627 commented on Jun 28, 2025 • 0 new comments

• (lambda-python): add local bundling to PythonFunction

  #18290 commented on Jul 16, 2025 • 0 new comments

• (aws_ecs_patterns): QueueProcessingFargateService should be able to provide Backlog per instance based autoscaling for ECS tasks

  #34072 commented on Jul 15, 2025 • 0 new comments

• aws-ec2: Using IPV6 CIDR as input to Security Group IPeer results in parsing error

  #28213 commented on Jul 15, 2025 • 0 new comments

• software.amazon.awscdk.services.iam.ManagedPolicy: Tags not generated

  #29428 commented on Jul 15, 2025 • 0 new comments

• NodeJsFunction: Esbuild PNPM command executed in wrong directory

  #24021 commented on Jul 15, 2025 • 0 new comments

• NetworkLoadBalancedFargateService: (Passed subnets are not getting picked while creating the LoadBalancer)

  #29812 commented on Jul 14, 2025 • 0 new comments

• kinesisfirehose: support Iceberg Destination

  #33666 commented on Jul 14, 2025 • 0 new comments

• Unable to update a stack that has exports

  #5304 commented on Jul 14, 2025 • 0 new comments

• pipelines: can't add additional policies for the CodePipelineActionRole with provided artifactBucket and kms key

  #30360 commented on Jul 10, 2025 • 0 new comments

• (aws-cdk-lib.aws_lambda): Lambda alias/version not updated with tokenized env var

  #25997 commented on Jul 10, 2025 • 0 new comments

• aws-ses: EmailIdentity dkimRecords compatibility with Route53

  #26738 commented on Jul 10, 2025 • 0 new comments

• (aws-events-targets): Converve LogGroupResourcePolicies in CloudWatchLogGroup

  #21155 commented on Jul 9, 2025 • 0 new comments

• (aws-ec2): Add support for ENI tagging in VPC Interface Endpoints

  #34820 commented on Jul 9, 2025 • 0 new comments

• CodeBuild: Allow DockerImageAssets to be built using buildx

  #28517 commented on Jul 9, 2025 • 0 new comments

• stepfunctions: using `itemProcessor` with `mode = DISTRIBUTED` doesn't work out of the box due to permission error

  #28820 commented on Jul 8, 2025 • 0 new comments

• Register new region: me-central-1

  #24478 commented on Jul 8, 2025 • 0 new comments

• Register new region: eu-central-2

  #24477 commented on Jul 8, 2025 • 0 new comments

• ecs_patterns: ApplicationLoadBalancedFargateService does not allow target group port to be set

  #24280 commented on Jul 8, 2025 • 0 new comments

• S3: Table Buckets support

  #33054 commented on Jul 8, 2025 • 0 new comments

• `@aws-cdk/aws-pipes-sources-alpha`: adding `deadLetterTarget` results in a failed update

  #31664 commented on Jul 8, 2025 • 0 new comments

• (pipes-sources): Add MQ broker source for EventBridge pipes

  #29379 commented on Jul 8, 2025 • 0 new comments

• (pipes-sources): Add MSK stream source for EventBridge pipes

  #29380 commented on Jul 8, 2025 • 0 new comments

• (pipes-sources): Add Self managed Apache Kafka stream source for EventBridge pipes

  #29381 commented on Jul 8, 2025 • 0 new comments

• (aws-pipes-alpha): Incorrect usage of interfaces causes deadLetterTarget prop to be ignored

  #34812 commented on Jul 8, 2025 • 0 new comments

• cross-region cross-stack references: No longer accessing another stack's resource causes deadly embrace (different region)

  #34813 commented on Jul 8, 2025 • 0 new comments

• aws-dynamodb: addToResourcePolicy has no effect

  #30793 commented on Jul 8, 2025 • 0 new comments

• S3BucketOrigin.withOriginAccessControl: support for cross-stack (bucket and distribution in separate stacks)

  #31462 commented on Jul 8, 2025 • 0 new comments

• app-staging-synthesizer-alpha: Uses default bootstrap exec role when bootstrapQualifier is supplied

  #28195 commented on Jul 7, 2025 • 0 new comments

• (aws-s3-deployment): Make the 'prune' property of bucket deployment required, not optional.

  #34835 commented on Jul 7, 2025 • 0 new comments

• [AutoScalingGroup]: Add flag to remove automatic `cfn-signal` addition to userdata when using `init` property

  #34847 commented on Jul 7, 2025 • 0 new comments

• (integ-tests-alpha,custom-resources): snapshots are always outdated

  #30583 commented on Jul 7, 2025 • 0 new comments