⚠ BREAKING CHANGES TO EXPERIMENTAL FEATURES
- apigatewayv2: The
VpcLink.fromVpcLinkId()
API has been
replaced withVpcLink.fromVpcLinkAttributes()
. - secretsmanager: (feature flag) Secret.secretName for owned secrets will now return
only the secret name (without suffix) and not the full resource name. This is
enabled through the@aws-cdk/secretsmanager:parseOwnedSecretName
flag. - lambda-nodejs: bundling customization options like
minify
orsourceMap
are now gathered under a newbundling
prop. - lambda-nodejs:
bundlingEnvironment
is nowbundling.environment
- lambda-nodejs:
bundlingDockerImage
is nowbundling.dockerImage
Features
- apigatewayv2: private integration with imported services (#11661) (6bf0da0), closes #11603
- cfn-include: preserve properties of resources that are not in the current CFN schema (#11822) (45677ca), closes #9717
- cfn-include: the cloudformation-include module is now Generally Available (stable) (#11882) (11df56b)
- cfnspec: cloudformation spec v21.0.0 (#11694) (d1d9fc4)
- cli: support WebIdentityCredentials (as used by EKS) (#11559) (5cfbe6c), closes #11543
- cloudfront: Lambda@Edge construct (#10500) (3b30123), closes #9833 #1575 #9862
- codepipeline-actions: support
executeBatchBuild
onCodeBuildAction
(#11741) (3dcd1a8), closes #11662 - cognito: user pool client - token validity (#11752) (78b3c39), closes #11689
- ecr: authorization token retrieval grants (#11783) (c072981)
- ecs-patterns: allow to select vpc subnets for LB fargate service (#11823) (869c884), closes #8621
- lambda-nodejs: command hooks (#11583) (0608670), closes #11468
- lambda-python: support poetry packaging for PythonFunction (#11850) (c5c258a), closes #11753
Bug Fixes
- codebuild: Project lacks permissions for SSM ParameterStore environment variables (#11770) (3c5c2f4), closes #11769
- codepipeline-actions: incorrect IAM statement in StepFunctionInvokeAction (#11728) (ece9b23), closes #11397 #11688
- core: custom resource providers cannot be used in CDK Pipelines (#11807) (48b3fa9), closes #11760
- core: floating list tokens synthesize to template (#11899) (60875a5), closes #11750
- core: init templates not initialized when running the CLI from source (#11731) (2e067d7), closes #11665
- core: regression: source directory is fingerprinted even if bundling is skipped (#11440) (3cbc7fa), closes #11008 /github.com/aws/aws-cdk/pull/11008/files#diff-62eef996be8abeb157518522c3cbf84a33dd4751c103304df87b04eb6d7bbab6L160 #11008 40aws-cdk/core/lib/asset-staging.ts#L159-L160 #11459 #11460
- ec2: instance not replaced when changing asset in UserData (#11780) (17bde5a), closes #11704
- eks: addManifest can accept
any
but only works if a map is passed (#11768) (f85c08c), closes #11483 - events: match values in event pattern array are not deduplicated (#11744) (a07b987)
- iam: OIDC provider cannot be imported from parameter (#11789) (cacb1d7), closes #11705
- kinesis: Unable to use retention periods longer than 7 days (#11798) (80e5d90)
- lambda-nodejs: automatic entry finding with compilerOptions.outDir (#11729) (1000cf9)
- lambda-nodejs: maximum call stack size exceeded or converting circular structure to JSON (#11698) (4401725), closes #11693 #11726 #11762
- lambda-nodejs: yarn cannot find a writable cache (#11656) (b16a8d3)
- redshift: multi-node redshift cluster not allowing parameter (#11677) (13c05be), closes #11610
- secretsmanager: secretName for owned secrets includes suffix (under feature flag) (#11736) (f6b4334), closes #11202 #11727
- sqs: queueUrl property has incorrect region and account for imported queue (#11651) (7b8b665)
- stepfunctions-tasks: instance type cannot be provided to SageMakerCreateEndpointConfig as input path (#11749) (5fb0ea6), closes #11605