aws/aws-cdk v1.77.0

on GitHub

⚠ BREAKING CHANGES TO EXPERIMENTAL FEATURES

• apigatewayv2: The VpcLink.fromVpcLinkId() API has been
  replaced with VpcLink.fromVpcLinkAttributes().
• secretsmanager: (feature flag) Secret.secretName for owned secrets will now return
  only the secret name (without suffix) and not the full resource name. This is
  enabled through the @aws-cdk/secretsmanager:parseOwnedSecretName flag.
• lambda-nodejs: bundling customization options like minify or sourceMap are now gathered under a new bundling prop.
• lambda-nodejs: bundlingEnvironment is now bundling.environment
• lambda-nodejs: bundlingDockerImage is now bundling.dockerImage

Features

• apigatewayv2: private integration with imported services (#11661) (6bf0da0), closes #11603
• cfn-include: preserve properties of resources that are not in the current CFN schema (#11822) (45677ca), closes #9717
• cfn-include: the cloudformation-include module is now Generally Available (stable) (#11882) (11df56b)
• cfnspec: cloudformation spec v21.0.0 (#11694) (d1d9fc4)
• cli: support WebIdentityCredentials (as used by EKS) (#11559) (5cfbe6c), closes #11543
• cloudfront: Lambda@Edge construct (#10500) (3b30123), closes #9833 #1575 #9862
• codepipeline-actions: support executeBatchBuild on CodeBuildAction (#11741) (3dcd1a8), closes #11662
• cognito: user pool client - token validity (#11752) (78b3c39), closes #11689
• ecr: authorization token retrieval grants (#11783) (c072981)
• ecs-patterns: allow to select vpc subnets for LB fargate service (#11823) (869c884), closes #8621
• lambda-nodejs: command hooks (#11583) (0608670), closes #11468
• lambda-python: support poetry packaging for PythonFunction (#11850) (c5c258a), closes #11753

Bug Fixes

• codebuild: Project lacks permissions for SSM ParameterStore environment variables (#11770) (3c5c2f4), closes #11769
• codepipeline-actions: incorrect IAM statement in StepFunctionInvokeAction (#11728) (ece9b23), closes #11397 #11688
• core: custom resource providers cannot be used in CDK Pipelines (#11807) (48b3fa9), closes #11760
• core: floating list tokens synthesize to template (#11899) (60875a5), closes #11750
• core: init templates not initialized when running the CLI from source (#11731) (2e067d7), closes #11665
• core: regression: source directory is fingerprinted even if bundling is skipped (#11440) (3cbc7fa), closes #11008 /github.com/aws/aws-cdk/pull/11008/files#diff-62eef996be8abeb157518522c3cbf84a33dd4751c103304df87b04eb6d7bbab6L160 #11008 40aws-cdk/core/lib/asset-staging.ts#L159-L160 #11459 #11460
• ec2: instance not replaced when changing asset in UserData (#11780) (17bde5a), closes #11704
• eks: addManifest can accept any but only works if a map is passed (#11768) (f85c08c), closes #11483
• events: match values in event pattern array are not deduplicated (#11744) (a07b987)
• iam: OIDC provider cannot be imported from parameter (#11789) (cacb1d7), closes #11705
• kinesis: Unable to use retention periods longer than 7 days (#11798) (80e5d90)
• lambda-nodejs: automatic entry finding with compilerOptions.outDir (#11729) (1000cf9)
• lambda-nodejs: maximum call stack size exceeded or converting circular structure to JSON (#11698) (4401725), closes #11693 #11726 #11762
• lambda-nodejs: yarn cannot find a writable cache (#11656) (b16a8d3)
• redshift: multi-node redshift cluster not allowing parameter (#11677) (13c05be), closes #11610
• secretsmanager: secretName for owned secrets includes suffix (under feature flag) (#11736) (f6b4334), closes #11202 #11727
• sqs: queueUrl property has incorrect region and account for imported queue (#11651) (7b8b665)
• stepfunctions-tasks: instance type cannot be provided to SageMakerCreateEndpointConfig as input path (#11749) (5fb0ea6), closes #11605