Features
- aws-cloudfront: add enabled to web distribution (#15433) (7ad9348)
- aws-ec2: Add SubnetFilter for Id and CIDR netmask (#15373) (407b02d), closes #15228
- cfnspec: cloudformation spec v39.7.0 (#15719) (2c4ef01)
- cfnspec: cloudformation spec v39.7.0 (#15796) (dbe4641)
- cfnspec: cloudformation spec v39.8.0 (#15885) (60e6b41)
- cloudfront: Origin Shield support (#15453) (08ebbae), closes #12872 /github.com/aws/aws-cdk/issues/12872#issuecomment-775873384
- cloudfront: use TLS_V1_2_2021 SecurityPolicy as default version (under feature flag) (#15477) (7b64abf)
- codebuild: add support for setting a BuildEnvironment Certificate (#15738) (76fb481), closes #15701
- core: lazy mappings will only synthesize if keys are unresolved (#15617) (32ed229)
- ec2: Add Transcribe interface endpoint (#15465) (929d6ae)
- eks: support Kubernetes 1.21 (#15774) (83dd318), closes #15758
- lambda: cloudwatch lambda insights (#15439) (9efd800)
- pipelines: CDK Pipelines is now Generally Available (#15667) (2e4cfae)
- Route53: add support for RemovalPolicy in CrossAccountZoneDelegationRecord (#15782) (9eea4b8), closes #15211
- s3-deployment: control object access (#15730) (f58cf3c)
- stepfunctions: allow intrinsic functions for json path (#15320) (d9285cb)
- stepfunctions-tasks: add sns publish with message attributes (#14817) (bc99e82), closes #4702
Bug Fixes
- aws-cloudwatch: unable to use generic extended statistics for cloudwatch alarms (#15720) (f593311)
- aws-eks: Allow desiredsize minsize and maxsize to accept CfnParameters. (#15487) (fb43769)
- chatbot: ARN validation in fromSlackChannelConfigurationArn fails for tokenized values (#15849) (440ca35), closes #15842
- cli: move fail option into the diff command (#15829) (473c1d8)
- ec2: volumename doesn't set name of volume (#15832) (b842702), closes #15831
- elasticsearch: advancedOptions in domain has no effect (#15330) (81cbfec), closes #14067
- elasticsearch: slow logs incorrectly disabled for Elasticsearch versions lower than 5.1 (#15714) (91cf79b), closes #15532 #15532
- elbv2: unresolved listener priority throws error (#15804) (fce9ac7)
- pipelines: new pipeline stages aren't validated (#15665) (309b9b4)
- pipelines: permissions check in legacy API does not work (#15660) (5e3cf2b)
- pipelines: Prepare stage doesn't have AUTO_EXPAND capability (#15819) (a6fac49), closes #15711
- pipelines: Secrets Manager permissions not added to asset projects (#15718) (7668400), closes #15628
- s3: notifications are broken in some regions (#15884) (ee19196)
- stepfunctions: non-object arguments to recurseObject are incorrectly treated as objects (#14631) (e133bca), closes #12935 aws-cdk/aws-stepfunctions/lib/input.ts#L65
- stepfunctions-tasks: instance type cannot be provided to SageMakerCreateTransformJob as input path (#15726) (6f2384d)
- stepfunctions-tasks: Stage field not included in CallApiGatewayHttpApiEndpoint task definition (#15755) (4f38fe1), closes #14242