Features
- cloudwatch: alarm status widget (#9456) (41940d3)
- cognito: better control sms role creation (#9513) (a772fe8), closes #6943
- core: local bundling provider (#9564) (3da0aa9)
- core: new annotations api (#9563) (ae9ed62), closes /github.com/aws/aws-cdk-rfcs/blob/master/text/0192-remove-constructs-compat.md#09
- core: new APIs for Aspects and Tags (#9558) (a311428), closes /github.com/aws/aws-cdk-rfcs/blob/master/text/0192-remove-constructs-compat.md#02
- ecs: Option to encrypt lifecycle hook SNS Topic (#9343) (38aad67)
- events: use existing Role when running ECS Task (#8145) (aad951a), closes #7859
- global-accelerator: referencing Global Accelerator security group (#9358) (1fe9684)
- iam: validate policies for missing resources/principals (#9269) (60d01b1), closes #7615
- lambda: autoscaling for lambda aliases (#8883) (d9d9b90)
- readme: include partitions.io cdk board in "getting help" (#9541) (f098014)
- "stack relative exports" flag (#9604) (398f872)
- secretsmanager: Specify secret value at creation (#9594) (07fedff), closes #5810
Bug Fixes
- cfn-include: allowedValues aren't included when specified by a parameter (#9532) (e7dc82f)
- codedeploy: ServerDeploymentGroup takes AutoScalingGroup instead of IAutoScalingGroup (#9252) (9ff55ae), closes #9175
- docdb:
autoMinorVersionUpgradeproperty was not set totrueby default as stated in the docstring (#9505) (e878f9c) - ec2: Volume grants have an overly complicated API (#9115) (74e8391), closes #9114
- efs: LifecyclePolicy of AFTER_7_DAYS is not applied (#9475) (f78c346), closes #9474
- eks: clusters in a FAILED state are not detected (#9553) (d651948)
- eks: private endpoint access doesn't work with
Vpc.fromLookup(#9544) (dd0f4cb), closes #9542 #5383 - lambda: cannot create lambda in public subnets (#9468) (b46fdc9)
- pipelines: CodeBuild images have (too) old Node version (#9446) (bd45f34), closes #9070
- pipelines: manual approval of changeset uses wrong ordering (#9508) (5c01da8), closes #9101 #9101