Features
- cloudfront: support geo restrictions for cloudfront distribution (#7345) (cf25ba0), closes #3456
- cloudwatch: legend positions in GraphWidgets (ada0de1), closes #3625
- codebuild: add support for test reports (4befefc), closes #7367
- core: custom resource provider helper (4a76973)
- ec2: EBS volume configuration for BastionHostLinux (207a8ec), closes #6945
- ecs: support multiple security groups when creating an ecs service (#7850) (456c469)
- iam: openid connect providers (20621ac), closes #5388 #3949 #6308
- add an example construct package (#7748) (2223584)
- lambda-nodejs: run parcel in a docker container (d86e500), closes #7169
- cloudformation spec v14.1.0 (#7822) (e133027)
- s3: new
s3UrlForObjectmethod onIBucket(#7508) (8fe4015), closes #7507 - stepfunctions: custom state as an escape hatch (c498f60)
Bug Fixes
- assets invalid fingerprint when 'exclude' captures root directory name (#7719) (a5c06a3), closes #7718
- aws-batch: gpuCount was ignored in JobDefinition creation (#7587) (0f1bf23)
- cli: parameter value reuse is not configurable (44310c9), closes #7041
- core: docs refer to "createNamingScheme" which was renamed to "allocateLogicalId" (#7840) (d79595d), closes #7527
- ecs: update minHealthyPercent constrain for ec2service using daemon strategy (#7814) (19e3fd8)
- ecs: using secret JSON field with fargate task does not fail (#7317) (cb03a60), closes #7272
- eks: "vendor response doesn't contain attribute" when updating version (#7830) (8cabae0), closes #7526 #7794
- s3: grantDelete with KMS SSE (#7528) (c6d1a21), closes #4380
- secretsmanager: add kms policy to allow secret to use kms key (5460717)