Features
- cfnspec: cloudformation spec v69.0.0 (#20240) (e82b63f) and (#20331) (e9de4e9)
- cfnspec: cloudformation spec v72.0.0 (#20357) (c8fd84c)
- cli: make ecr images immutable when created from cdk bootstrap (#19937) (0ef4bb4), closes #18376
- cloud9: configure Connection Type of Ec2Environment (#20250) (01708bc), closes #17027
- cloudfront: REST API origin (#20335) (f7693e3)
- cognito:
grant()for user pool (#20285) (10d13e4) - core: allow disabling of LogicalID Metadata in case of large manifest (#20433) (88ea829), closes #20211
- ec2: more router types (#20151) (33b983c), closes #19057 /docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ec2-route.html#aws-resource-ec2
- iam: validate role path at build time (#16165) (65a5a46), closes #13747
- integ-tests: enhancements to integ-tests (#20180) (3ff3fb7)
- logs: additional log retention periods (#20347) (734faa5), closes #20346
- s3: add
noncurrentVersionsToRetainproperty to lifecycle rule (#20348) (85604d9), closes #19784
Bug Fixes
- amplify: custom headers break with tokens (#20395) (765f441)
- apigateway: arnForExecuteApi fails on tokenized path (#20323) (f7732a1), closes #20252
- assets: parallel docker image publishing fails on macOS (#20117) (a58a803), closes #20116
- cfn-include: allow CFN Functions in Tags (#19923) (4df9a4f), closes #16889
- cli: allow SSO profiles to be used as source profiles (#20340) (a0b29e9), closes #19897
- cloudwatch-actions: stack partition is hardcoded 'aws' in action arn (#20224) (0eb6c3b), closes #19765
- eks: Cluster.FromClusterAttributes ignores KubectlLambdaRole (#20373) (7e824ab), closes #20008
- iam: AccountPrincipal accepts values which aren't account IDs (#20292) (d0163f8), closes #20288
- pipelines: specifying the Action Role for CodeBuild steps (#18293) (719edfc), closes #18291 #18291
- rds: tokens should not be lowercased (#20287) (5429e55), closes #18802
- secretsmanager: automatic rotation cannot be disabled (#18906) (c50d60c), closes #18749