⚠ BREAKING CHANGES
L1 resources are automatically generated from public CloudFormation Resource Schemas. They are built to closely reflect the real state of CloudFormation. Sometimes these updates can contain changes that are incompatible with previous types, but more accurately reflect reality. In this release we have changed:
- aws-athena:
AWS::Athena::Sessionremoved. - aws-bcmdataexports:
AWS::BCMDataExports::Tableremoved. - aws-bedrock:
AWS::Bedrock::DefaultPromptRouterandAWS::Bedrock::ModelInvocationJobremoved. - aws-bedrockagentcore:
AWS::BedrockAgentCore::Browser,AWS::BedrockAgentCore::CodeInterpreter, andAWS::BedrockAgentCore::TokenVaultremoved;AWS::BedrockAgentCore::PaymentConnectorConnectorTypeandAWS::BedrockAgentCore::PaymentCredentialProviderCredentialProviderVendorare now immutable;AWS::BedrockAgentCore::CapacityProviderOperatingSystemallowed values in theLaunchParameterstype reduced from [LINUX_X86_64,LINUX_ARM64,MAC_ARM64,WINDOWS_X86_64] to [LINUX_X86_64,LINUX_ARM64]. - aws-certificatemanager:
AWS::CertificateManager::CertificateIdattribute removed. - aws-chime: on both
AWS::Chime::AppInstanceandAWS::Chime::AppInstanceBot, theCreatedTimestampandLastUpdatedTimestampattribute types changed fromnumbertostring. - aws-cloudformation:
AWS::CloudFormation::ResourceScanremoved. - aws-codeartifact:
AWS::CodeArtifact::Packageremoved. - aws-codebuild:
AWS::CodeBuild::Sandboxremoved;AWS::CodeBuild::SourceCredentialIdattribute removed. - aws-dax:
AWS::DAX::ParameterGroupIdattribute removed;Descriptionproperty is now immutable. - aws-dms:
Idattribute removed fromAWS::DMS::Endpoint,AWS::DMS::EventSubscription, andAWS::DMS::ReplicationSubnetGroup;AWS::DMS::ReplicationTaskMigrationTypeproperty is now immutable. - aws-docdb:
Idattribute removed fromAWS::DocDB::DBClusterParameterGroupandAWS::DocDB::DBSubnetGroup. - aws-dynamodb:
AWS::DynamoDB::Exportremoved. - aws-elasticache:
AWS::ElastiCache::ReservedCacheNoderemoved. - aws-emr:
AWS::EMR::NotebookExecutionremoved. - aws-events:
AWS::Events::Replayremoved. - aws-fis:
AWS::FIS::SafetyLeverremoved. - aws-glue:
Idattribute removed fromAWS::Glue::Classifier,AWS::Glue::Connection,AWS::Glue::CustomEntityType,AWS::Glue::DataQualityRuleset,AWS::Glue::MLTransform,AWS::Glue::SecurityConfiguration,AWS::Glue::TableOptimizer, andAWS::Glue::Workflow.AWS::Glue::Connection: complex-property typesAuthenticationConfigurationInputandOAuth2PropertiesInputrenamed toAuthenticationConfigurationandOAuth2Propertiesrespectively.AWS::Glue::DataQualityRuleset:Name,TargetTable.DatabaseName, andTargetTable.TableNameproperties are now required;Nameproperty is now immutable;Tagsproperty type changed fromjsontomap<string>.AWS::Glue::CustomEntityType:Nameproperty is now immutable;Tagsproperty is no longer recognised as resource tags.AWS::Glue::MLTransform:TransformEncryptionproperty is now immutable.
- aws-greengrassv2:
AWS::GreengrassV2::ComponentandAWS::GreengrassV2::CoreDeviceremoved. - aws-identitystore:
AWS::IdentityStore::AllGroupMembershipsremoved. - aws-imagebuilder:
AWS::ImageBuilder::AllImageBuildVersions,AWS::ImageBuilder::AllWorkflowBuildVersions,AWS::ImageBuilder::WorkflowExecution, andAWS::ImageBuilder::WorkflowStepExecutionremoved. - aws-medialive:
AWS::MediaLive::Offeringremoved. - aws-mediaconvert:
AWS::MediaConvert::PresetIdattribute removed. - aws-mediapackage:
AWS::MediaPackage::HarvestJobremoved. - aws-memorydb:
AWS::MemoryDB::MultiRegionParameterGroupandAWS::MemoryDB::ReservedNoderemoved. - aws-omics:
AWS::Omics::Referenceremoved. - aws-osis:
AWS::OSIS::PipelineBlueprintremoved. - aws-personalize:
AWS::Personalize::DataDeletionJobandAWS::Personalize::Reciperemoved. - aws-redshiftserverless:
AWS::RedshiftServerless::RecoveryPointremoved. - aws-route53:
AWS::Route53::RecordSetGeoProximityLocationproperty removed, along with its supportingGeoProximityLocationandCoordinatescomplex-property types;Idattribute removed. - aws-sagemaker:
AWS::SageMaker::ModelCardExportJob,AWS::SageMaker::MonitoringScheduleAlert, andAWS::SageMaker::TransformJobremoved. - aws-ses:
AWS::SES::ReceiptRuleSetIdattribute removed. - aws-signer:
AWS::Signer::SigningJobremoved. - aws-ssm:
AWS::SSM::Sessionremoved;AWS::SSM::AssociationInstanceIdproperty is now immutable. - aws-sso:
AWS::SSO::ApplicationProviderremoved. - aws-stepfunctions:
AWS::StepFunctions::MapRunremoved. - aws-transcribe:
AWS::Transcribe::MedicalTranscriptionJobremoved. - aws-vpclattice:
AWS::VpcLattice::ServiceNetworkSharingConfigproperty is now immutable.
Features
- update L1 CloudFormation resource definitions (#38732) (53fdc99)
- codebuild: add Node.js 24 Lambda build image constants (#38471) (41ca888), closes #38172 #34197
- ec2: support CpuOptions on LaunchTemplate (#38193) (b0f7d9c), closes #38187
- medialive: new AWS Elemental MediaLive L2 Construct with integration on MediaConnect L2 alpha (#38563) (730b2ee)
- update L1 CloudFormation resource definitions (#38645) (e238f54)
- update L1 CloudFormation resource definitions (#38693) (51234fd)
- s3-deployment: run the deployment handler on arm64 (Graviton) (#37174) (c2df7a3), closes #29996
Bug Fixes
- core: ignored external symlinks throw validation error (#38679) (8fd1ef6)
- core: templates are not checked for circular dependencies (#38712) (688b0c1)
- core: upgrade CloudFormation validation to latest version (#38668) (d5df2ee)
- eks-v2: generate and export L1 constructs from aws-eks-v2 (#37640) (ecdafa9), closes #37563 #37350 #37350
- s3-deployment: replace deprecated addDependency in integ test (#38684) (43c4921)
Alpha modules (2.268.0-alpha.0)
⚠ BREAKING CHANGES
- glue-alpha:
DataQualityTargetTable's constructor is removed — useDataQualityTargetTable.fromTable(database, table)orfromTableName(database, tableName);IDatabasenow extendsIDatabaseRef. - glue-alpha:
DataQualityRulesetProps.clientTokenis removed; use theCfnDataQualityRulesetL1 for request-level idempotency. - glue-alpha: S3Table.clientSideEncryptionKey is now kms.IKeyRef instead of kms.IKey.
- glue-alpha:
DataQualityRulesetProps.rulesetNameis now required.AWS::Glue::DataQualityRulesetmadeNamea required property, so the name can no longer be left for CloudFormation to generate.