Features
- assertions: 'arrayWith' and 'objectLike' matchers (#15195) (20e2b79)
- cdk-assets: externally-configured Docker credentials (#15290) (e530195), closes #10999 #11774
- cfnspec: cloudformation spec v39.3.0 (#15311) (94eb3a8)
- cfnspec: cloudformation spec v39.3.0 (#15362) (5d0954a)
- cli: add option --security-only to diff (#15374) (6b639be)
- cloudwatch: revert trimmed mean stat in graph widgets (#15368) (d630d7f)
- cloudwatch: trimmed mean stat in graph widgets (#15316) (60f6d82)
- codebuild: improve merging of BuildSpecs (#15332) (e68087d), closes #15169
- ecs: Adding support for secretOptions in Firelens log driver (#15351) (c3096ea), closes #8174
- secretsmanager: Allow cross account grant (#14834) (ea40cfe)
- servicecatalog: initial implementation of the Product construct (#15185) (fe3e0f2)
- servicecatalogappregistry: allow Applications to associate with AttributeGroups and Stacks (#15371) (06619fe)
- sns: add sns service trust to keys for encrypted queue subscriptions (#14960) (ccc2e30), closes #2504
- sqs: add support for high throughput fifo (#15202) (d0c9602), closes #15063
- stepfunctions-tasks: add EventBridgePutEvents task integration (#15165) (1799f4c), closes #15033
Bug Fixes
- aws-elasticloadbalancingv2: cannot clear access logging bucket prefix (#15149) (2e93fb9), closes #14044
- cloudfront: cannot set header including 'authorization' in OriginRequestPolicy (#15327) (3a2f642), closes #15286
- codepipeline-actions: reduce S3SourceAction role permissions to just the key (#15304) (d2c76aa), closes #15112
- core: unresolved tokens in generated nested stack outputs (#15380) (62e552c), closes #15155
- eks: kubectl version 1.21.0 breaks object pruning (#15314) (74da5c1), closes #15072
- pipelines: artifact bucket permissions missing for in-account deployments (#15348) (2a5e288), closes #15307
- stepfunctions-tasks: EcsRunTask containerOverrides throws if container name doesn't match construct ID (#15190) (5f59787), closes #15171