What's Changed
- Feat/acm ses v2 waf lambda layers v1.1.11 by @Nahuel990 in https://github.com/Nahuel990/ministack/pull/46
[1.1.11] — 2026-03-31
Added
- ACM (Certificate Manager) — full control plane:
RequestCertificate,DescribeCertificate,ListCertificates,DeleteCertificate,GetCertificate,ImportCertificate,AddTagsToCertificate,RemoveTagsFromCertificate,ListTagsForCertificate,UpdateCertificateOptions,RenewCertificate,ResendValidationEmail; certificates issued immediately with statusISSUEDand DNS validation records; compatible with Terraformaws_acm_certificateand CDKCertificate - SES v2 — REST API at
/v2/email/:SendEmail,CreateEmailIdentity,GetEmailIdentity,DeleteEmailIdentity,ListEmailIdentities,CreateConfigurationSet,GetConfigurationSet,DeleteConfigurationSet,ListConfigurationSets,GetAccount,ListSuppressedDestinations,TagResource,UntagResource,ListTagsForResource; identities auto-verified; compatible with Terraformaws_sesv2_email_identityand CDKEmailIdentity - WAF v2 — full control plane: WebACL CRUD, IPSet CRUD, RuleGroup CRUD (including
UpdateRuleGroup),AssociateWebACL/DisassociateWebACL,GetWebACLForResource,ListResourcesForWebACL,TagResource/UntagResource/ListTagsForResource,CheckCapacity,DescribeManagedRuleGroup; LockToken enforced on Update/Delete; rules stored but not enforced; compatible with Terraformaws_wafv2_web_acland CDKCfnWebACL - Lambda Layers —
PublishLayerVersion,GetLayerVersion,ListLayerVersions,ListLayers,DeleteLayerVersion; layer zip content stored in-memory and injected into function execution environment
Fixed
- WAF v2
GetWebACL/GetIPSet/GetRuleGroup—LockTokenwas incorrectly included inside the resource body; now only returned at the top level, matching real AWS and fixing CDK/Terraform Update flows - WAF v2
GetWebACLForResource— now returnsWAFNonexistentItemExceptionwhen no association exists, matching real AWS behaviour - SES v2
TagResource/UntagResource/ListTagsForResource— added; Terraform calls these afterCreateEmailIdentity
Tests
- 763 tests total, all passing