Skip to content

Conversation

aws-cdk-automation
Copy link
Collaborator

@aws-cdk-automation aws-cdk-automation commented Mar 26, 2025

See CHANGELOG

paulhcsun and others added 30 commits March 19, 2025 18:19
### Description of changes

This tool currently takes in the CDK enums and SDK enums as inputs, creates a static mapping between CDK enums to SDK enums, and then identifies missing values to make code changes to add in the missing values. 

#### Features

- Downloads and processes CDK enum definitions and SDK models
- Creates static mappings between CDK and SDK enums
- Identifies missing enum values in CDK compared to SDK
- Updates both regular enums and enum-like classes with missing values

#### Implementation Details

The tool consists of two main components:
1. `static-enum-mapping-updater.ts`: Handles the downloading and processing of enum definitions, creating mappings between CDK and SDK enums
2. `missing-enums-updater.ts`: Identifies missing enum values by referencing the static-enum-mapping and the CDK and SDK enum datasources and updates the source files. 

#### Usage

This tool will be run automatically by a weekly GitHub workflow to keep CDK enums up to date.

### Description of how you validated changes
Manual + unit tests.

### Checklist
- [x] My code adheres to the [CONTRIBUTING GUIDE](https://github.com/aws/aws-cdk/blob/main/CONTRIBUTING.md) and [DESIGN GUIDELINES](https://github.com/aws/aws-cdk/blob/main/docs/DESIGN_GUIDELINES.md)

----

*By submitting this pull request, I confirm that my contribution is made under the terms of the Apache-2.0 license*
…pdater (#33833)

Bumps [axios](https://github.com/axios/axios) from 1.8.1 to 1.8.3.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a href="https://github.com/axios/axios/releases">axios's releases</a>.</em></p>
<blockquote>
<h2>Release v1.8.3</h2>
<h2>Release notes:</h2>
<h3>Bug Fixes</h3>
<ul>
<li>add missing type for allowAbsoluteUrls (<a href="https://github.com/axios/axios/issues/6818">#6818</a>) (<a href="https://github.com/axios/axios/commit/10fa70ef14fe39558b15a179f0e82f5f5e5d11b2">10fa70e</a>)</li>
<li><strong>xhr/fetch:</strong> pass <code>allowAbsoluteUrls</code> to <code>buildFullPath</code> in <code>xhr</code> and <code>fetch</code> adapters (<a href="https://github.com/axios/axios/issues/6814">#6814</a>) (<a href="https://github.com/axios/axios/commit/ec159e507bdf08c04ba1a10fe7710094e9e50ec9">ec159e5</a>)</li>
</ul>
<h3>Contributors to this release</h3>
<ul>
<li> <a href="https://github.com/Electroid" title="+6/-0 ([#6811](axios/axios#6811) )">Ashcon Partovi</a></li>
<li> <a href="https://github.com/StefanBRas" title="+4/-0 ([#6818](axios/axios#6818) )">StefanBRas</a></li>
<li> <a href="https://github.com/mhassan1" title="+2/-2 ([#6814](axios/axios#6814) )">Marc Hassan</a></li>
</ul>
<h2>Release v1.8.2</h2>
<h2>Release notes:</h2>
<h3>Bug Fixes</h3>
<ul>
<li><strong>http-adapter:</strong> add allowAbsoluteUrls to path building (<a href="https://github.com/axios/axios/issues/6810">#6810</a>) (<a href="https://github.com/axios/axios/commit/fb8eec214ce7744b5ca787f2c3b8339b2f54b00f">fb8eec2</a>)</li>
</ul>
<h3>Contributors to this release</h3>
<ul>
<li> <a href="https://github.com/lexcorp16" title="+1/-1 ([#6810](axios/axios#6810) )">Fasoro-Joseph Alexander</a></li>
</ul>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a href="https://github.com/axios/axios/blob/v1.x/CHANGELOG.md">axios's changelog</a>.</em></p>
<blockquote>
<h2><a href="https://github.com/axios/axios/compare/v1.8.2...v1.8.3">1.8.3</a> (2025-03-10)</h2>
<h3>Bug Fixes</h3>
<ul>
<li>add missing type for allowAbsoluteUrls (<a href="https://github.com/axios/axios/issues/6818">#6818</a>) (<a href="https://github.com/axios/axios/commit/10fa70ef14fe39558b15a179f0e82f5f5e5d11b2">10fa70e</a>)</li>
<li><strong>xhr/fetch:</strong> pass <code>allowAbsoluteUrls</code> to <code>buildFullPath</code> in <code>xhr</code> and <code>fetch</code> adapters (<a href="https://github.com/axios/axios/issues/6814">#6814</a>) (<a href="https://github.com/axios/axios/commit/ec159e507bdf08c04ba1a10fe7710094e9e50ec9">ec159e5</a>)</li>
</ul>
<h3>Contributors to this release</h3>
<ul>
<li> <a href="https://github.com/Electroid" title="+6/-0 ([#6811](axios/axios#6811) )">Ashcon Partovi</a></li>
<li> <a href="https://github.com/StefanBRas" title="+4/-0 ([#6818](axios/axios#6818) )">StefanBRas</a></li>
<li> <a href="https://github.com/mhassan1" title="+2/-2 ([#6814](axios/axios#6814) )">Marc Hassan</a></li>
</ul>
<h2><a href="https://github.com/axios/axios/compare/v1.8.1...v1.8.2">1.8.2</a> (2025-03-07)</h2>
<h3>Bug Fixes</h3>
<ul>
<li><strong>http-adapter:</strong> add allowAbsoluteUrls to path building (<a href="https://github.com/axios/axios/issues/6810">#6810</a>) (<a href="https://github.com/axios/axios/commit/fb8eec214ce7744b5ca787f2c3b8339b2f54b00f">fb8eec2</a>)</li>
</ul>
<h3>Contributors to this release</h3>
<ul>
<li> <a href="https://github.com/lexcorp16" title="+1/-1 ([#6810](axios/axios#6810) )">Fasoro-Joseph Alexander</a></li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a href="https://github.com/axios/axios/commit/39ec206483a89921732bdc8a5be67e350bfc23f0"><code>39ec206</code></a> chore(release): v1.8.3 (<a href="https://github.com/axios/axios/issues/6819">#6819</a>)</li>
<li><a href="https://github.com/axios/axios/commit/10fa70ef14fe39558b15a179f0e82f5f5e5d11b2"><code>10fa70e</code></a> fix: add missing type for allowAbsoluteUrls (<a href="https://github.com/axios/axios/issues/6818">#6818</a>)</li>
<li><a href="https://github.com/axios/axios/commit/7821ef9f5be2d62fbc3f01040d9df6f2225eb9d8"><code>7821ef9</code></a> docs: update readme to include bun install (<a href="https://github.com/axios/axios/issues/6811">#6811</a>)</li>
<li><a href="https://github.com/axios/axios/commit/ec159e507bdf08c04ba1a10fe7710094e9e50ec9"><code>ec159e5</code></a> fix(xhr/fetch): pass <code>allowAbsoluteUrls</code> to <code>buildFullPath</code> in <code>xhr</code> and `fet...</li>
<li><a href="https://github.com/axios/axios/commit/a9f7689b0c4b6d68c7f587c3aa376860da509d94"><code>a9f7689</code></a> chore(release): v1.8.2 (<a href="https://github.com/axios/axios/issues/6812">#6812</a>)</li>
<li><a href="https://github.com/axios/axios/commit/fb8eec214ce7744b5ca787f2c3b8339b2f54b00f"><code>fb8eec2</code></a> fix(http-adapter): add allowAbsoluteUrls to path building (<a href="https://github.com/axios/axios/issues/6810">#6810</a>)</li>
<li><a href="https://github.com/axios/axios/commit/98120457559e573024862e2925d56295a965ad7e"><code>9812045</code></a> chore(sponsor): update sponsor block (<a href="https://github.com/axios/axios/issues/6804">#6804</a>)</li>
<li><a href="https://github.com/axios/axios/commit/72acf759373ef4e211d5299818d19e50e08c02f8"><code>72acf75</code></a> chore(sponsor): update sponsor block (<a href="https://github.com/axios/axios/issues/6794">#6794</a>)</li>
<li>See full diff in <a href="https://github.com/axios/axios/compare/v1.8.1...v1.8.3">compare view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=axios&package-manager=npm_and_yarn&previous-version=1.8.1&new-version=1.8.3)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
You can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/aws/aws-cdk/network/alerts).

</details>
)

### Description of changes
Missing a checkout action so `yarn install` fails. 

### Checklist
- [x] My code adheres to the [CONTRIBUTING GUIDE](https://github.com/aws/aws-cdk/blob/main/CONTRIBUTING.md) and [DESIGN GUIDELINES](https://github.com/aws/aws-cdk/blob/main/docs/DESIGN_GUIDELINES.md)

----

*By submitting this pull request, I confirm that my contribution is made under the terms of the Apache-2.0 license*
### Reason for this change

Resolve inconsistency in instructions on how to appropriately connect with AWS security on security issues.

### Description of changes

Changed the bugfix GitHub template to reference https://github.com/aws/aws-cdk/security/policy instead of opening a security issue in GitHub.

### Checklist
- [ x] My code adheres to the [CONTRIBUTING GUIDE](https://github.com/aws/aws-cdk/blob/main/CONTRIBUTING.md) and [DESIGN GUIDELINES](https://github.com/aws/aws-cdk/blob/main/docs/DESIGN_GUIDELINES.md)

----

*By submitting this pull request, I confirm that my contribution is made under the terms of the Apache-2.0 license*
This removes `@aws-cdk/integ-runner` and `@aws-cdk/cdk-cli-wrapper` from this repository into the CLI repository. The other PR adding the new package is here: aws/aws-cdk-cli#263.

This code belongs more with the CLI than it does with the construct library.

----

*By submitting this pull request, I confirm that my contribution is made under the terms of the Apache-2.0 license*
### Description of changes
Update dependency versions and add `extract-zip` and `ts-morph`. 

### Checklist
- [x] My code adheres to the [CONTRIBUTING GUIDE](https://github.com/aws/aws-cdk/blob/main/CONTRIBUTING.md) and [DESIGN GUIDELINES](https://github.com/aws/aws-cdk/blob/main/docs/DESIGN_GUIDELINES.md)

----

*By submitting this pull request, I confirm that my contribution is made under the terms of the Apache-2.0 license*
### Issue # (if applicable)

Closes #<issue number here>.

### Reason for this change

64 codeql security alarms:
- https://github.com/aws/aws-cdk/security/code-scanning?page=2&query=is%3Aopen+branch%3Amain+%22Incomplete+string+escaping+or+encoding%22



### Description of changes

The security issues mentioned above originate from the dependency package `aws-sdk-js-v3`. The team has confirmed that these are false positive alarms triggered by CodeQL. As a result, we have added a path ignore for the integration test bundled Lambda code to suppress the alarms.

- context: aws/aws-sdk-js-v3#6623 (comment)



### Describe any new or updated permissions being added




### Description of how you validated changes



### Checklist
- [X] My code adheres to the [CONTRIBUTING GUIDE](https://github.com/aws/aws-cdk/blob/main/CONTRIBUTING.md) and [DESIGN GUIDELINES](https://github.com/aws/aws-cdk/blob/main/docs/DESIGN_GUIDELINES.md)

----

*By submitting this pull request, I confirm that my contribution is made under the terms of the Apache-2.0 license*
### Issue # (if applicable)

Closes #<issue number here>.

### Reason for this change



`/packages/@aws-cdk/lambda-layer-awscli` has been moved to https://github.com/cdklabs/awscdk-asset-awscli/blob/awscli-v1/main/.github/dependabot.yml

`init-templates` have been moved to https://github.com/aws/aws-cdk-cli/blob/main/.github/dependabot.yml

### Description of changes


remove unused dependabot scan path
### Describe any new or updated permissions being added




### Description of how you validated changes



### Checklist
- [x] My code adheres to the [CONTRIBUTING GUIDE](https://github.com/aws/aws-cdk/blob/main/CONTRIBUTING.md) and [DESIGN GUIDELINES](https://github.com/aws/aws-cdk/blob/main/docs/DESIGN_GUIDELINES.md)

----

*By submitting this pull request, I confirm that my contribution is made under the terms of the Apache-2.0 license*
### Description of changes
bump axios version to `1.8.3`

### Checklist
- [x] My code adheres to the [CONTRIBUTING GUIDE](https://github.com/aws/aws-cdk/blob/main/CONTRIBUTING.md) and [DESIGN GUIDELINES](https://github.com/aws/aws-cdk/blob/main/docs/DESIGN_GUIDELINES.md)

----

*By submitting this pull request, I confirm that my contribution is made under the terms of the Apache-2.0 license*
…e principals (under feature flag) (#33729)

### Issue #22080

Closes #22080.

### Reason for this change

When trying to grant PutEvents permissions to an AWS Service Principal using `grantPutEventsTo`, the method performed a no-op without any warnings or errors. This prevented users from properly granting permissions to service principals, even though this is a valid use case that can be done through the AWS Console. The change implements the correct behavior by creating an EventBusPolicy when dealing with service principals.

### Description of changes

- Added special handling for service principals in `EventBus.grantPutEventsTo` method
- When granting permissions to a service principal, creates an EventBusPolicy instead of attempting to modify IAM policies
- Returns `iam.Grant.drop()` for service principals to indicate permissions are handled via EventBusPolicy
- Added test cases to verify both service principal and IAM principal scenarios

### Describe any new or updated permissions being added

The change introduces the creation of EventBusPolicy resources with `events:PutEvents` permission when granting access to service principals. This is not a new permission, but rather a different way of granting the same permission through resource-based policies instead of identity-based policies.


### Description of how you validated changes

Added new test cases that verify:
- EventBusPolicy is correctly created when granting permissions to service principals
- IAM policies are correctly created when granting permissions to IAM roles/users

### Checklist
- [X] My code adheres to the [CONTRIBUTING GUIDE](https://github.com/aws/aws-cdk/blob/main/CONTRIBUTING.md) and [DESIGN GUIDELINES](https://github.com/aws/aws-cdk/blob/main/docs/DESIGN_GUIDELINES.md)

----

*By submitting this pull request, I confirm that my contribution is made under the terms of the Apache-2.0 license*
…33853)

### Issue # (if applicable)

Relates to #32569

### Reason for this change

untyped Errors are not recommended

### Description of changes

ValidationErrors everywhere

### Describe any new or updated permissions being added

None

### Description of how you validated changes

Existing tests. Exemptions granted as this is a refactor of existing code.

### Checklist
- [x] My code adheres to the [CONTRIBUTING GUIDE](https://github.com/aws/aws-cdk/blob/main/CONTRIBUTING.md) and [DESIGN GUIDELINES](https://github.com/aws/aws-cdk/blob/main/docs/DESIGN_GUIDELINES.md)

----

*By submitting this pull request, I confirm that my contribution is made under the terms of the Apache-2.0 license*
…33854)

### Issue # (if applicable)

Relates to #32569

### Reason for this change

untyped Errors are not recommended

### Description of changes

ValidationErrors everywhere

### Describe any new or updated permissions being added

None

### Description of how you validated changes

Existing tests. Exemptions granted as this is a refactor of existing code.

### Checklist
- [x] My code adheres to the [CONTRIBUTING GUIDE](https://github.com/aws/aws-cdk/blob/main/CONTRIBUTING.md) and [DESIGN GUIDELINES](https://github.com/aws/aws-cdk/blob/main/docs/DESIGN_GUIDELINES.md)

----

*By submitting this pull request, I confirm that my contribution is made under the terms of the Apache-2.0 license*
#33855)

### Issue # (if applicable)

Relates to #32569

### Reason for this change

untyped Errors are not recommended

### Description of changes

ValidationErrors everywhere

### Describe any new or updated permissions being added

None

### Description of how you validated changes

Existing tests. Exemptions granted as this is a refactor of existing code.

### Checklist
- [x] My code adheres to the [CONTRIBUTING GUIDE](https://github.com/aws/aws-cdk/blob/main/CONTRIBUTING.md) and [DESIGN GUIDELINES](https://github.com/aws/aws-cdk/blob/main/docs/DESIGN_GUIDELINES.md)

----

*By submitting this pull request, I confirm that my contribution is made under the terms of the Apache-2.0 license*
…IDs (#33863)

### Issue

Closes #32808

Minimal reproduction:

```ts
const app = new cdk.App();
const stack = new cdk.Stack(app, 'Stack:Test', { stackName: "valid" });
assert(!stack.artifactId.match(/[^A-Za-z0-9_\-\.]/g))
```

### Reason for this change

When users create a `Stack` with an id containing certain special characters, the produced artifact file name would contain invalid characters.

### Description of changes

Ensure only valid artifact files names are produces, no matter the input.

### Describe any new or updated permissions being added

n/a

### Description of how you validated changes

New unit tests, existing test suite

I have updated the integ test using `--dry-run` as per instructions in the test file.
I have deployed the integ test using the instructions in the test file.

### Checklist
- [x] My code adheres to the [CONTRIBUTING GUIDE](https://github.com/aws/aws-cdk/blob/main/CONTRIBUTING.md) and [DESIGN GUIDELINES](https://github.com/aws/aws-cdk/blob/main/docs/DESIGN_GUIDELINES.md)

----

*By submitting this pull request, I confirm that my contribution is made under the terms of the Apache-2.0 license*
### Issue # (if applicable)
#33511

### Reason for this change
Codepipeline launched this feature last years and still missed the update in cdk library.

### Description of changes

Support this feature in L2 Construct:https://docs.aws.amazon.com/codepipeline/latest/userguide/concepts-how-it-works-conditions.html

### Describe any new or updated permissions being added

No


### Description of how you validated changes

Unit test, integ test, and local cdk library deployment(linked to local cdkApp and successfully deploy it)

### Checklist
- [Y ] My code adheres to the [CONTRIBUTING GUIDE](https://github.com/aws/aws-cdk/blob/main/CONTRIBUTING.md) and [DESIGN GUIDELINES](https://github.com/aws/aws-cdk/blob/main/docs/DESIGN_GUIDELINES.md)

----

*By submitting this pull request, I confirm that my contribution is made under the terms of the Apache-2.0 license*
### Issue # 

Closes #33866


### Reason for this change

#33729 missing readme update for cx-api


### Description of changes

added readme

https://github.com/aws/aws-cdk/blob/eae1d4fcc500ed39973a2d796c161171894eeb41/packages/aws-cdk-lib/cx-api/README.md?plain=1#L662-L681


### Checklist
- [X] My code adheres to the [CONTRIBUTING GUIDE](https://github.com/aws/aws-cdk/blob/main/CONTRIBUTING.md) and [DESIGN GUIDELINES](https://github.com/aws/aws-cdk/blob/main/docs/DESIGN_GUIDELINES.md)

----

*By submitting this pull request, I confirm that my contribution is made under the terms of the Apache-2.0 license*
### Issue # (if applicable)

Relates to #32569

### Reason for this change

untyped Errors are not recommended

### Description of changes

ValidationErrors everywhere

### Describe any new or updated permissions being added

None

### Description of how you validated changes

Existing tests. Exemptions granted as this is a refactor of existing code.

### Checklist
- [x] My code adheres to the [CONTRIBUTING GUIDE](https://github.com/aws/aws-cdk/blob/main/CONTRIBUTING.md) and [DESIGN GUIDELINES](https://github.com/aws/aws-cdk/blob/main/docs/DESIGN_GUIDELINES.md)

----

*By submitting this pull request, I confirm that my contribution is made under the terms of the Apache-2.0 license*
### Issue # (if applicable)

Relates to #32569

### Reason for this change
Untyped Errors are not recommended.


### Description of changes
Change `Error` to `ValidationError`.


### Describe any new or updated permissions being added
None



### Description of how you validated changes
Existing tests. Exemptions granted as this is a refactor of existing code.


### Checklist
- [x] My code adheres to the [CONTRIBUTING GUIDE](https://github.com/aws/aws-cdk/blob/main/CONTRIBUTING.md) and [DESIGN GUIDELINES](https://github.com/aws/aws-cdk/blob/main/docs/DESIGN_GUIDELINES.md)

----

*By submitting this pull request, I confirm that my contribution is made under the terms of the Apache-2.0 license*
### Issue # (if applicable)

N/A

### Reason for this change

Due to incorrect spelling of `choice`.


### Description of changes



### Describe any new or updated permissions being added




### Description of how you validated changes



### Checklist
- [ ] My code adheres to the [CONTRIBUTING GUIDE](https://github.com/aws/aws-cdk/blob/main/CONTRIBUTING.md) and [DESIGN GUIDELINES](https://github.com/aws/aws-cdk/blob/main/docs/DESIGN_GUIDELINES.md)

----

*By submitting this pull request, I confirm that my contribution is made under the terms of the Apache-2.0 license*
)

### Issue # (if applicable)

Relates to #32569

### Reason for this change

untyped Errors are not recommended

### Description of changes

ValidationErrors everywhere

### Describe any new or updated permissions being added

None

### Description of how you validated changes

Existing tests. Exemptions granted as this is a refactor of existing code.

### Checklist
- [x] My code adheres to the [CONTRIBUTING GUIDE](https://github.com/aws/aws-cdk/blob/main/CONTRIBUTING.md) and [DESIGN GUIDELINES](https://github.com/aws/aws-cdk/blob/main/docs/DESIGN_GUIDELINES.md)

----

*By submitting this pull request, I confirm that my contribution is made under the terms of the Apache-2.0 license*
…33871)

### Issue # (if applicable)

Relates to #32569

### Reason for this change

untyped Errors are not recommended

### Description of changes

ValidationErrors everywhere

### Describe any new or updated permissions being added

None

### Description of how you validated changes

Existing tests. Exemptions granted as this is a refactor of existing code.

### Checklist
- [x] My code adheres to the [CONTRIBUTING GUIDE](https://github.com/aws/aws-cdk/blob/main/CONTRIBUTING.md) and [DESIGN GUIDELINES](https://github.com/aws/aws-cdk/blob/main/docs/DESIGN_GUIDELINES.md)

----

*By submitting this pull request, I confirm that my contribution is made under the terms of the Apache-2.0 license*
### Issue # (if applicable)

Closes #33606.
Closes #15115.

### Reason for this change

AWS-managed prefix lists are useful to control traffic VPC and AWS managed services.
The name of the AWS-managed prefix list is documented but the id should be copy&paste by hand.

### Description of changes

This PR implements `PrefixList.fromLookup()` to look up an existing managed prefix list by name.
``` ts
ec2.PrefixList.fromLookup(this, 'CloudFrontOriginFacing', {
  prefixListName: 'com.amazonaws.global.cloudfront.origin-facing',
});
```

Uses the new CloudControl context provider: aws/aws-cdk-cli#138 and cdklabs/cloud-assembly-schema#124.

### Describe any new or updated permissions being added

Nothing.

### Description of how you validated changes

Added unit tests and an integ test.

### Checklist
- [x] My code adheres to the [CONTRIBUTING GUIDE](https://github.com/aws/aws-cdk/blob/main/CONTRIBUTING.md) and [DESIGN GUIDELINES](https://github.com/aws/aws-cdk/blob/main/docs/DESIGN_GUIDELINES.md)

----

*By submitting this pull request, I confirm that my contribution is made under the terms of the Apache-2.0 license*
…n the doc (#33886)

### Issue # (if applicable)

Closes #33884

### Reason for this change

The reason for this change is to correct the default value of the defaultCapacityType property in the AWS CDK's EKS V2 Alpha package. The current documentation incorrectly states that the default value is NODEGROUP, while the actual default value used in the code is AUTOMODE. This can cause confusion and errors for users.


### Description of changes

Update the JSDoc comment in the cluster.ts file to correctly reflect that the default value of the `defaultCapacityType` property is `AUTOMODE`.


### Describe any new or updated permissions being added




### Description of how you validated changes



### Checklist
- [x] My code adheres to the [CONTRIBUTING GUIDE](https://github.com/aws/aws-cdk/blob/main/CONTRIBUTING.md) and [DESIGN GUIDELINES](https://github.com/aws/aws-cdk/blob/main/docs/DESIGN_GUIDELINES.md)

----

*By submitting this pull request, I confirm that my contribution is made under the terms of the Apache-2.0 license*
…es property (#33877)

### Issue # (if applicable)

N/A

### Reason for this change

Supporting a new L1 property `AWS::EC2::VPCEndpointService`

### Description of changes

Added a new property - `supportedIpAddressTypes` - to the `VpcEndpointService` construct. It takes a list of `IpAddressType` enums.

### Describe any new or updated permissions being added

None

### Description of how you validated changes

Updated integ test to use the new property and deployed successfully.

### Checklist
- [x] My code adheres to the [CONTRIBUTING GUIDE](https://github.com/aws/aws-cdk/blob/main/CONTRIBUTING.md) and [DESIGN GUIDELINES](https://github.com/aws/aws-cdk/blob/main/docs/DESIGN_GUIDELINES.md)

----

*By submitting this pull request, I confirm that my contribution is made under the terms of the Apache-2.0 license*
### Issue # (if applicable)

Closes #27456 

### Reason for this change

Currently the module supports all templated targets for EventBridge scheduler except for `EcsRunTask`.

### Description of changes

- Added new base class `EcsRunTask` with subclasses `EcsRunFargateTask` and `EcsRunEc2Task` depending on where user wants to schedule their ECS task. Decided on this design since some of the parameters in `EcsParameters` only apply one of Fargate or EC2. 

### Describe any new or updated permissions being added

- Grant `ecs:RunTask` to the schedule execution role for the task definition and `iam:passRole` using existing `grantRun()` method ([docs](https://docs.aws.amazon.com/AmazonECS/latest/developerguide/CWE_IAM_role.html))
```ts
  this.props.taskDefinition.grantRun(role);

// TaskDefinition grant method 
  public grantRun(grantee: iam.IGrantable) {
    grantee.grantPrincipal.addToPrincipalPolicy(this.passRoleStatement);
    return iam.Grant.addToPrincipal({
      grantee,
      actions: ['ecs:RunTask'],
      resourceArns: [this.taskDefinitionArn],
    });
  }

//   passRoleStatement 
private get passRoleStatement() {
    if (!this._passRoleStatement) {
      this._passRoleStatement = new iam.PolicyStatement({
        effect: iam.Effect.ALLOW,
        actions: ['iam:PassRole'],
        resources: this.executionRole ? [this.taskRole.roleArn, this.executionRole.roleArn] : [this.taskRole.roleArn],
        conditions: {
          StringLike: { 'iam:PassedToService': 'ecs-tasks.amazonaws.com' },
        },
      });
    }

    return this._passRoleStatement;
  }

```
- If tags are defined, grant `ecs:TagResource`to the schedule execution tole for tasks in the cluster
```ts
    if (this.props.propagateTags === true || this.props.tags) {
      role.addToPrincipalPolicy(new PolicyStatement({
        actions: ['ecs:TagResource'],
        resources: [`arn:${this.cluster.stack.partition}:ecs:${this.cluster.env.region}:${this.props.taskDefinition.env.account}:task/${this.cluster.clusterName}/*`],
      }));
    }
```

### Description of how you validated changes

Added unit tests and integration tests with assertions.

### Checklist
- [x] My code adheres to the [CONTRIBUTING GUIDE](https://github.com/aws/aws-cdk/blob/main/CONTRIBUTING.md) and [DESIGN GUIDELINES](https://github.com/aws/aws-cdk/blob/main/docs/DESIGN_GUIDELINES.md)

----

*By submitting this pull request, I confirm that my contribution is made under the terms of the Apache-2.0 license*
### Issue # (if applicable)

Closes #33738.

### Reason for this change

Bootstrap template location moved from `aws-cdk` to `aws-cdk-cli`.

### Description of changes

Updated the link to the bootstrap template.

### Describe any new or updated permissions being added

None


### Description of how you validated changes

Verified link is valid.

### Checklist
- [X] My code adheres to the [CONTRIBUTING GUIDE](https://github.com/aws/aws-cdk/blob/main/CONTRIBUTING.md) and [DESIGN GUIDELINES](https://github.com/aws/aws-cdk/blob/main/docs/DESIGN_GUIDELINES.md)

----

*By submitting this pull request, I confirm that my contribution is made under the terms of the Apache-2.0 license*
### Issue # (if applicable)

Typo

### Checklist
- [x] My code adheres to the [CONTRIBUTING GUIDE](https://github.com/aws/aws-cdk/blob/main/CONTRIBUTING.md) and [DESIGN GUIDELINES](https://github.com/aws/aws-cdk/blob/main/docs/DESIGN_GUIDELINES.md)

----

*By submitting this pull request, I confirm that my contribution is made under the terms of the Apache-2.0 license*
rix0rrr and others added 16 commits March 25, 2025 11:33
…sleading (#33875)

In `ContextProvider.getValue()`, `ignoreErrorOnMissingContext` is a request to the CLI's context provider to not fail the lookup, but return the dummy value instead.

The operation doesn't have anything to do with missing context, and missing context isn't an error. Deprecate that parameter and add `mustExist` instead (with reversed semantics).

Also explain the `dummyValue` field and this one a bit better.

----

*By submitting this pull request, I confirm that my contribution is made under the terms of the Apache-2.0 license*
…33899)

### Issue # (if applicable)

Relates to #32569

### Reason for this change

untyped Errors are not recommended

### Description of changes

ValidationErrors everywhere

### Describe any new or updated permissions being added

None

### Description of how you validated changes

Existing tests. Exemptions granted as this is a refactor of existing code.

### Checklist
- [x] My code adheres to the [CONTRIBUTING GUIDE](https://github.com/aws/aws-cdk/blob/main/CONTRIBUTING.md) and [DESIGN GUIDELINES](https://github.com/aws/aws-cdk/blob/main/docs/DESIGN_GUIDELINES.md)

----

*By submitting this pull request, I confirm that my contribution is made under the terms of the Apache-2.0 license*
#33894)

When node pools are disabled (by setting an empty array in nodePools), the IAM role will not be created, preventing deployment failures with the error 'When Compute Config nodeRoleArn is not null or empty, nodePool value(s) must be provided.

### Issue # (if applicable)

Fixes #33771

### Reason for this change

When using EKS Auto Mode with empty node pools (by setting `nodePools: []`), the IAM role was still being created by the L2 construct, causing stack deployment failures. The AWS service returns an error stating that when `nodeRoleArn` is provided, node pool values must also be provided.

### Description of changes

Modified the `computeConfig` section in the `CfnCluster` resource to check if `nodePools` is empty before assigning `nodeRoleArn`. If `nodePools` is empty, `nodeRoleArn` will be set to `undefined` to prevent the unnecessary creation of the IAM role.

The change ensures that when users explicitly disable node pools by providing an empty array, the IAM role won't be created, allowing the cluster to be provisioned successfully.

Added a test case to verify that when node pools are empty:
1. The nodeRoleArn is not included in the CloudFormation template
2. No IAM role resource is created for node pools

### Describe any new or updated permissions being added

No new or updated IAM permissions are being added. This change actually prevents the creation of an IAM role when it's not needed.

### Description of how you validated changes

Added a new test case in `automode.test.ts` that verifies:
- The `nodeRoleArn` property is not included in the CloudFormation template when node pools are empty
- No IAM role resource is created for node pools when they are disabled

The test passes, confirming that our fix works as expected.

### Checklist
- [x] My code adheres to the [CONTRIBUTING GUIDE](https://github.com/aws/aws-cdk/blob/main/CONTRIBUTING.md) and [DESIGN GUIDELINES](https://github.com/aws/aws-cdk/blob/main/docs/DESIGN_GUIDELINES.md)

----

*By submitting this pull request, I confirm that my contribution is made under the terms of the Apache-2.0 license*
### Issue # (if applicable)

N/A

### Reason for this change

Only allow the workflow to run by aws-cdk-automation.

### Description of changes

Limit the github author to be aws-cdk-automation.

### Describe any new or updated permissions being added

N/A

### Description of how you validated changes

N/A

### Checklist
- [ ] My code adheres to the [CONTRIBUTING GUIDE](https://github.com/aws/aws-cdk/blob/main/CONTRIBUTING.md) and [DESIGN GUIDELINES](https://github.com/aws/aws-cdk/blob/main/docs/DESIGN_GUIDELINES.md)

----

*By submitting this pull request, I confirm that my contribution is made under the terms of the Apache-2.0 license*
### Issue # (if applicable)

Closes #31785 .

### Description of changes

We are excited to graduate the `@aws-cdk/aws-scheduler-alpha` and `@aws-cdk/aws-scheduler-targets-alpha` modules to STABLE.
They now live on as `aws-cdk-lib/aws-scheduler` and `aws-cdk-lib/aws-scheduler-targets`.

The `Group` construct (deprecated) has now been removed and `ScheduleGroup` should be used instead.

### Checklist
- [x] My code adheres to the [CONTRIBUTING GUIDE](https://github.com/aws/aws-cdk/blob/main/CONTRIBUTING.md) and [DESIGN GUIDELINES](https://github.com/aws/aws-cdk/blob/main/docs/DESIGN_GUIDELINES.md)

----

*By submitting this pull request, I confirm that my contribution is made under the terms of the Apache-2.0 license*
### Issue # (if applicable)

Closes #27483 

### Description

We are excited to graduate the `@aws-cdk/aws-cognito-identitypool-alpha` module to **STABLE**.
It now lives on as `aws-cdk-lib/aws-cognito-identitypool`.

### Checklist
- [x] My code adheres to the [CONTRIBUTING GUIDE](https://github.com/aws/aws-cdk/blob/main/CONTRIBUTING.md) and [DESIGN GUIDELINES](https://github.com/aws/aws-cdk/blob/main/docs/DESIGN_GUIDELINES.md)

----

*By submitting this pull request, I confirm that my contribution is made under the terms of the Apache-2.0 license*
Updates the L1 CloudFormation resource definitions with the latest changes from `@aws-cdk/aws-service-spec`

**L1 CloudFormation resource definition changes:**
```
├[~] service aws-amazonmq
│ └ resources
│    └[~]  resource AWS::AmazonMQ::Broker
│       └ types
│          └[~] type User
│            └ properties
│               └ JolokiaApiAccess: (documentation changed)
├[~] service aws-apigatewayv2
│ └ resources
│    └[~]  resource AWS::ApiGatewayV2::DomainName
│       └ attributes
│          └[+] DomainNameArn: string
├[~] service aws-appconfig
│ └ resources
│    └[~]  resource AWS::AppConfig::ConfigurationProfile
│       └ properties
│          └ RetrievalRoleArn: (documentation changed)
├[~] service aws-applicationsignals
│ └ resources
│    ├[~]  resource AWS::ApplicationSignals::Discovery
│    │  ├      - documentation: Resource Type definition for AWS::ApplicationSignals::Discovery
│    │  │      + documentation: Enables this AWS account to be able to use CloudWatch Application Signals by creating the `AWSServiceRoleForCloudWatchApplicationSignals` service-linked role. This service-linked role has the following permissions:
│    │  │      - `xray:GetServiceGraph`
│    │  │      - `logs:StartQuery`
│    │  │      - `logs:GetQueryResults`
│    │  │      - `cloudwatch:GetMetricData`
│    │  │      - `cloudwatch:ListMetrics`
│    │  │      - `tag:GetResources`
│    │  │      - `autoscaling:DescribeAutoScalingGroups`
│    │  │      After completing this step, you still need to instrument your Java and Python applications to send data to Application Signals. For more information, see [Enabling Application Signals](https://docs.aws.amazon.com/AmazonCloudWatch/latest/monitoring/CloudWatch-Application-Signals-Enable.html) .
│    │  └ attributes
│    │     └ AccountId: (documentation changed)
│    └[~]  resource AWS::ApplicationSignals::ServiceLevelObjective
│       ├ properties
│       │  └[+] ExclusionWindows: Array<ExclusionWindow>
│       └ types
│          ├[+]  type ExclusionWindow
│          │  ├      documentation: The core SLO time window exclusion object that includes Window, StartTime, RecurrenceRule, and Reason.
│          │  │      name: ExclusionWindow
│          │  └ properties
│          │     ├ Window: Window (required)
│          │     ├ StartTime: string
│          │     ├ RecurrenceRule: RecurrenceRule
│          │     └ Reason: string (default="No reason")
│          ├[+]  type RecurrenceRule
│          │  ├      documentation: The recurrence rule for the SLO time window exclusion .
│          │  │      name: RecurrenceRule
│          │  └ properties
│          │     └ Expression: string (required)
│          ├[~] type RequestBasedSliMetric
│          │ └ properties
│          │    └ KeyAttributes: (documentation changed)
│          └[+]  type Window
│             ├      documentation: The object that defines the time length of an exclusion window.
│             │      name: Window
│             └ properties
│                ├ DurationUnit: string (required)
│                └ Duration: integer (required)
├[~] service aws-appsync
│ └ resources
│    └[~]  resource AWS::AppSync::DomainName
│       ├      - tagInformation: undefined
│       │      + tagInformation: {"tagPropertyName":"Tags","variant":"standard"}
│       ├ properties
│       │  └[+] Tags: Array<tag>
│       └ attributes
│          └[+] DomainNameArn: string
├[~] service aws-bedrock
│ └ resources
│    ├[~]  resource AWS::Bedrock::DataSource
│    │  ├      - documentation: Specifies a data source as a resource in a top-level template. Minimally, you must specify the following properties:
│    │  │      - Name – Specify a name for the data source.
│    │  │      - KnowledgeBaseId – Specify the ID of the knowledge base for the data source to belong to.
│    │  │      - DataSourceConfiguration – Specify information about the Amazon S3 bucket containing the data source. The following sub-properties are required:
│    │  │      - Type – Specify the value `S3` .
│    │  │      For more information about setting up data sources in Amazon Bedrock , see [Set up a data source for your knowledge base](https://docs.aws.amazon.com/bedrock/latest/userguide/knowledge-base-ds.html) .
│    │  │      See the *Properties* section below for descriptions of both the required and optional properties.
│    │  │      + documentation: > Properties with `__Update requires: Replacement__` can result in the creation of a new data source and deletion of the old one. This can happen if you also change the Name of the data source. 
│    │  │      Specifies a data source as a resource in a top-level template. Minimally, you must specify the following properties:
│    │  │      - Name – Specify a name for the data source.
│    │  │      - KnowledgeBaseId – Specify the ID of the knowledge base for the data source to belong to.
│    │  │      - DataSourceConfiguration – Specify information about the Amazon S3 bucket containing the data source. The following sub-properties are required:
│    │  │      - Type – Specify the value `S3` .
│    │  │      For more information about setting up data sources in Amazon Bedrock , see [Set up a data source for your knowledge base](https://docs.aws.amazon.com/bedrock/latest/userguide/knowledge-base-ds.html) .
│    │  │      See the *Properties* section below for descriptions of both the required and optional properties.
│    │  ├ attributes
│    │  │  └[+] DataSourceConfiguration.WebConfiguration.CrawlerConfiguration.UserAgentHeader: string
│    │  └ types
│    │     ├[+]  type BedrockFoundationModelContextEnrichmentConfiguration
│    │     │  ├      documentation: Bedrock Foundation Model configuration to be used for Context Enrichment.
│    │     │  │      name: BedrockFoundationModelContextEnrichmentConfiguration
│    │     │  └ properties
│    │     │     ├ EnrichmentStrategyConfiguration: EnrichmentStrategyConfiguration (required)
│    │     │     └ ModelArn: string (required)
│    │     ├[+]  type ContextEnrichmentConfiguration
│    │     │  ├      documentation: Additional Enrichment Configuration for example when using GraphRag.
│    │     │  │      name: ContextEnrichmentConfiguration
│    │     │  └ properties
│    │     │     ├ Type: string (required)
│    │     │     └ BedrockFoundationModelConfiguration: BedrockFoundationModelContextEnrichmentConfiguration
│    │     ├[+]  type EnrichmentStrategyConfiguration
│    │     │  ├      documentation: Strategy to be used when using Bedrock Foundation Model for Context Enrichment.
│    │     │  │      name: EnrichmentStrategyConfiguration
│    │     │  └ properties
│    │     │     └ Method: string (required)
│    │     ├[~] type VectorIngestionConfiguration
│    │     │ └ properties
│    │     │    └[+] ContextEnrichmentConfiguration: ContextEnrichmentConfiguration
│    │     ├[~] type WebCrawlerConfiguration
│    │     │ └ properties
│    │     │    ├[+] UserAgent: string
│    │     │    └[+] UserAgentHeader: string
│    │     └[~] type WebCrawlerLimits
│    │       └ properties
│    │          └[+] MaxPages: integer
│    ├[~]  resource AWS::Bedrock::Prompt
│    │  └ types
│    │     ├[~] type SpecificToolChoice
│    │     │ └      - documentation: The model must request a specific tool. For example, `{"tool" : {"name" : "Your tool name"}}` . For more information, see [Call a tool with the Converse API](https://docs.aws.amazon.com/bedrock/latest/userguide/tool-use.html) in the Amazon Bedrock User Guide
│    │     │        > This field is only supported by Anthropic Claude 3 models.
│    │     │        + documentation: The model must request a specific tool. For example, `{"tool" : {"name" : "Your tool name"}}` . For more information, see [Call a tool with the Converse API](https://docs.aws.amazon.com/bedrock/latest/userguide/tool-use.html) in the Amazon Bedrock User Guide
│    │     │        > This field is only supported by Amazon Nova models and Anthropic Claude 3 models.
│    │     └[~] type ToolChoice
│    │       └ properties
│    │          └ Tool: (documentation changed)
│    └[~]  resource AWS::Bedrock::PromptVersion
│       └ types
│          ├[~] type SpecificToolChoice
│          │ └      - documentation: The model must request a specific tool. For example, `{"tool" : {"name" : "Your tool name"}}` . For more information, see [Call a tool with the Converse API](https://docs.aws.amazon.com/bedrock/latest/userguide/tool-use.html) in the Amazon Bedrock User Guide
│          │        > This field is only supported by Anthropic Claude 3 models.
│          │        + documentation: The model must request a specific tool. For example, `{"tool" : {"name" : "Your tool name"}}` . For more information, see [Call a tool with the Converse API](https://docs.aws.amazon.com/bedrock/latest/userguide/tool-use.html) in the Amazon Bedrock User Guide
│          │        > This field is only supported by Amazon Nova models and Anthropic Claude 3 models.
│          └[~] type ToolChoice
│            └ properties
│               └ Tool: (documentation changed)
├[~] service aws-cleanrooms
│ └ resources
│    ├[~]  resource AWS::CleanRooms::Collaboration
│    │  └ properties
│    │     └ QueryLogStatus: (documentation changed)
│    ├[~]  resource AWS::CleanRooms::ConfiguredTable
│    │  ├ properties
│    │  │  └ AnalysisMethod: (documentation changed)
│    │  └ types
│    │     └[~] type DifferentialPrivacy
│    │       └      - documentation: The analysis method for the configured tables. The only valid value is currently `DIRECT_QUERY`.
│    │              + documentation: The analysis method allowed for the configured tables.
│    │              `DIRECT_QUERY` allows SQL queries to be run directly on this table.
│    │              `DIRECT_JOB` allows PySpark jobs to be run directly on this table.
│    │              `MULTIPLE` allows both SQL queries and PySpark jobs to be run directly on this table.
│    └[~]  resource AWS::CleanRooms::Membership
│       └ properties
│          └ QueryLogStatus: (documentation changed)
├[~] service aws-cloudformation
│ └ resources
│    └[~]  resource AWS::CloudFormation::StackSet
│       └ types
│          └[~] type OperationPreferences
│            └ properties
│               └ RegionOrder: (documentation changed)
├[~] service aws-cloudfront
│ └ resources
│    ├[~]  resource AWS::CloudFront::AnycastIpList
│    │  └ attributes
│    │     └ AnycastIpList: (documentation changed)
│    └[~]  resource AWS::CloudFront::VpcOrigin
│       └ types
│          └[~] type VpcOriginEndpointConfig
│            └ properties
│               └ OriginSSLProtocols: (documentation changed)
├[~] service aws-codeartifact
│ └ resources
│    └[~]  resource AWS::CodeArtifact::PackageGroup
│       ├ properties
│       │  └ Tags: (documentation changed)
│       ├ attributes
│       │  └ Arn: (documentation changed)
│       └ types
│          ├[~] type OriginConfiguration
│          │ ├      - documentation: The package group origin configuration that determines how package versions can enter repositories.
│          │ │      + documentation: undefined
│          │ └ properties
│          │    └ Restrictions: (documentation changed)
│          ├[~] type Restrictions
│          │ ├      - documentation: Contains information about the configured restrictions of the origin controls of a package group.
│          │ │      + documentation: undefined
│          │ └ properties
│          │    ├ ExternalUpstream: (documentation changed)
│          │    ├ InternalUpstream: (documentation changed)
│          │    └ Publish: (documentation changed)
│          └[~] type RestrictionType
│            ├      - documentation: The `RestrictionType` property type specifies the package group origin configuration restriction mode, and the repositories when the `RestrictionMode` is set to `ALLOW_SPECIFIC_REPOSITORIES` .
│            │      + documentation: undefined
│            └ properties
│               ├ Repositories: (documentation changed)
│               └ RestrictionMode: (documentation changed)
├[~] service aws-connect
│ └ resources
│    ├[~]  resource AWS::Connect::ContactFlow
│    │  └ attributes
│    │     └ ContactFlowArn: (documentation changed)
│    ├[~]  resource AWS::Connect::ContactFlowModule
│    │  └ attributes
│    │     └ ContactFlowModuleArn: (documentation changed)
│    └[~]  resource AWS::Connect::ContactFlowVersion
│       └ attributes
│          └ ContactFlowVersionARN: (documentation changed)
├[~] service aws-controltower
│ └ resources
│    ├[~]  resource AWS::ControlTower::EnabledBaseline
│    │  ├      - documentation: This resource represents a `Baseline` that has been applied to a target.
│    │  │      + documentation: Definition of AWS::ControlTower::EnabledBaseline Resource Type
│    │  ├ properties
│    │  │  ├ Parameters: (documentation changed)
│    │  │  └ Tags: (documentation changed)
│    │  ├ attributes
│    │  │  └ EnabledBaselineIdentifier: (documentation changed)
│    │  └ types
│    │     └[~] type Parameter
│    │       ├      - documentation: A key-value parameter to an `EnabledBaseline` resource.
│    │       │      + documentation: undefined
│    │       └ properties
│    │          ├ Key: (documentation changed)
│    │          └ Value: (documentation changed)
│    └[~]  resource AWS::ControlTower::EnabledControl
│       └ properties
│          └ Tags: (documentation changed)
├[~] service aws-datazone
│ └ resources
│    ├[+]  resource AWS::DataZone::Connection
│    │  ├      name: Connection
│    │  │      cloudFormationType: AWS::DataZone::Connection
│    │  │      documentation: Connections enables users to connect their DataZone resources (domains, projects, and environments) to external resources/services (data, compute, etc)
│    │  ├ properties
│    │  │  ├ AwsLocation: AwsLocation
│    │  │  ├ Description: string
│    │  │  ├ DomainIdentifier: string (required, immutable)
│    │  │  ├ EnvironmentIdentifier: string (required, immutable)
│    │  │  ├ Name: string (required, immutable)
│    │  │  └ Props: ConnectionPropertiesInput
│    │  ├ attributes
│    │  │  ├ ConnectionId: string
│    │  │  ├ DomainId: string
│    │  │  ├ DomainUnitId: string
│    │  │  ├ EnvironmentId: string
│    │  │  ├ EnvironmentUserRole: string
│    │  │  ├ ProjectId: string
│    │  │  └ Type: string
│    │  └ types
│    │     ├ type AthenaPropertiesInput
│    │     │ ├      documentation: Athena Properties Input
│    │     │ │      name: AthenaPropertiesInput
│    │     │ └ properties
│    │     │    └ WorkgroupName: string (required)
│    │     ├ type AuthenticationConfigurationInput
│    │     │ ├      documentation: Authentication Configuration Input
│    │     │ │      name: AuthenticationConfigurationInput
│    │     │ └ properties
│    │     │    ├ AuthenticationType: string
│    │     │    ├ OAuth2Properties: OAuth2Properties
│    │     │    ├ SecretArn: string
│    │     │    ├ KmsKeyArn: string
│    │     │    ├ BasicAuthenticationCredentials: BasicAuthenticationCredentials
│    │     │    └ CustomAuthenticationCredentials: Map<string, string>
│    │     ├ type AuthorizationCodeProperties
│    │     │ ├      documentation: Authorization Code Properties
│    │     │ │      name: AuthorizationCodeProperties
│    │     │ └ properties
│    │     │    ├ AuthorizationCode: string
│    │     │    └ RedirectUri: string
│    │     ├ type AwsLocation
│    │     │ ├      documentation: AWS Location of project
│    │     │ │      name: AwsLocation
│    │     │ └ properties
│    │     │    ├ AccessRole: string
│    │     │    ├ AwsAccountId: string
│    │     │    ├ AwsRegion: string
│    │     │    └ IamConnectionId: string
│    │     ├ type BasicAuthenticationCredentials
│    │     │ ├      documentation: Basic Authentication Credentials
│    │     │ │      name: BasicAuthenticationCredentials
│    │     │ └ properties
│    │     │    ├ UserName: string
│    │     │    └ Password: string
│    │     ├ type ConnectionPropertiesInput
│    │     │ ├      name: ConnectionPropertiesInput
│    │     │ └ properties
│    │     │    ├ AthenaProperties: AthenaPropertiesInput
│    │     │    ├ GlueProperties: GluePropertiesInput
│    │     │    ├ HyperPodProperties: HyperPodPropertiesInput
│    │     │    ├ IamProperties: IamPropertiesInput
│    │     │    ├ RedshiftProperties: RedshiftPropertiesInput
│    │     │    ├ SparkEmrProperties: SparkEmrPropertiesInput
│    │     │    └ SparkGlueProperties: SparkGluePropertiesInput
│    │     ├ type GlueConnectionInput
│    │     │ ├      documentation: Glue Connection Input
│    │     │ │      name: GlueConnectionInput
│    │     │ └ properties
│    │     │    ├ ConnectionProperties: Map<string, string>
│    │     │    ├ PhysicalConnectionRequirements: PhysicalConnectionRequirements
│    │     │    ├ Name: string
│    │     │    ├ Description: string
│    │     │    ├ ConnectionType: string
│    │     │    ├ MatchCriteria: string
│    │     │    ├ ValidateCredentials: boolean
│    │     │    ├ ValidateForComputeEnvironments: Array<string>
│    │     │    ├ SparkProperties: Map<string, string>
│    │     │    ├ AthenaProperties: Map<string, string>
│    │     │    ├ PythonProperties: Map<string, string>
│    │     │    └ AuthenticationConfiguration: AuthenticationConfigurationInput
│    │     ├ type GlueOAuth2Credentials
│    │     │ ├      documentation: Glue OAuth2 Credentials
│    │     │ │      name: GlueOAuth2Credentials
│    │     │ └ properties
│    │     │    ├ UserManagedClientApplicationClientSecret: string
│    │     │    ├ AccessToken: string
│    │     │    ├ RefreshToken: string
│    │     │    └ JwtToken: string
│    │     ├ type GluePropertiesInput
│    │     │ ├      documentation: Glue Properties Input
│    │     │ │      name: GluePropertiesInput
│    │     │ └ properties
│    │     │    └ GlueConnectionInput: GlueConnectionInput
│    │     ├ type HyperPodPropertiesInput
│    │     │ ├      documentation: HyperPod Properties Input
│    │     │ │      name: HyperPodPropertiesInput
│    │     │ └ properties
│    │     │    └ ClusterName: string (required)
│    │     ├ type IamPropertiesInput
│    │     │ ├      documentation: IAM Properties Input
│    │     │ │      name: IamPropertiesInput
│    │     │ └ properties
│    │     │    └ GlueLineageSyncEnabled: boolean
│    │     ├ type LineageSyncSchedule
│    │     │ ├      documentation: Lineage Sync Schedule
│    │     │ │      name: LineageSyncSchedule
│    │     │ └ properties
│    │     │    └ Schedule: string
│    │     ├ type OAuth2ClientApplication
│    │     │ ├      documentation: OAuth2 Client Application
│    │     │ │      name: OAuth2ClientApplication
│    │     │ └ properties
│    │     │    ├ UserManagedClientApplicationClientId: string
│    │     │    └ AWSManagedClientApplicationReference: string
│    │     ├ type OAuth2Properties
│    │     │ ├      documentation: OAuth2 Properties
│    │     │ │      name: OAuth2Properties
│    │     │ └ properties
│    │     │    ├ OAuth2GrantType: string
│    │     │    ├ OAuth2ClientApplication: OAuth2ClientApplication
│    │     │    ├ TokenUrl: string
│    │     │    ├ TokenUrlParametersMap: Map<string, string>
│    │     │    ├ AuthorizationCodeProperties: AuthorizationCodeProperties
│    │     │    └ OAuth2Credentials: GlueOAuth2Credentials
│    │     ├ type PhysicalConnectionRequirements
│    │     │ ├      documentation: Physical Connection Requirements
│    │     │ │      name: PhysicalConnectionRequirements
│    │     │ └ properties
│    │     │    ├ SubnetId: string
│    │     │    ├ SubnetIdList: Array<string>
│    │     │    ├ SecurityGroupIdList: Array<string>
│    │     │    └ AvailabilityZone: string
│    │     ├ type RedshiftCredentials
│    │     │ ├      name: RedshiftCredentials
│    │     │ └ properties
│    │     │    ├ SecretArn: string
│    │     │    └ UsernamePassword: UsernamePassword
│    │     ├ type RedshiftLineageSyncConfigurationInput
│    │     │ ├      documentation: Redshift Lineage Sync Configuration Input
│    │     │ │      name: RedshiftLineageSyncConfigurationInput
│    │     │ └ properties
│    │     │    ├ Enabled: boolean
│    │     │    └ Schedule: LineageSyncSchedule
│    │     ├ type RedshiftPropertiesInput
│    │     │ ├      documentation: Redshift Properties Input
│    │     │ │      name: RedshiftPropertiesInput
│    │     │ └ properties
│    │     │    ├ Storage: RedshiftStorageProperties
│    │     │    ├ DatabaseName: string
│    │     │    ├ Host: string
│    │     │    ├ Port: number
│    │     │    ├ Credentials: RedshiftCredentials
│    │     │    └ LineageSync: RedshiftLineageSyncConfigurationInput
│    │     ├ type RedshiftStorageProperties
│    │     │ ├      name: RedshiftStorageProperties
│    │     │ └ properties
│    │     │    ├ ClusterName: string
│    │     │    └ WorkgroupName: string
│    │     ├ type SparkEmrPropertiesInput
│    │     │ ├      documentation: Spark EMR Properties Input.
│    │     │ │      name: SparkEmrPropertiesInput
│    │     │ └ properties
│    │     │    ├ ComputeArn: string
│    │     │    ├ InstanceProfileArn: string
│    │     │    ├ JavaVirtualEnv: string
│    │     │    ├ LogUri: string
│    │     │    ├ PythonVirtualEnv: string
│    │     │    ├ RuntimeRole: string
│    │     │    └ TrustedCertificatesS3Uri: string
│    │     ├ type SparkGlueArgs
│    │     │ ├      documentation: Spark Glue Args.
│    │     │ │      name: SparkGlueArgs
│    │     │ └ properties
│    │     │    └ Connection: string
│    │     ├ type SparkGluePropertiesInput
│    │     │ ├      documentation: Spark Glue Properties Input.
│    │     │ │      name: SparkGluePropertiesInput
│    │     │ └ properties
│    │     │    ├ AdditionalArgs: SparkGlueArgs
│    │     │    ├ GlueConnectionName: string
│    │     │    ├ GlueVersion: string
│    │     │    ├ IdleTimeout: number
│    │     │    ├ JavaVirtualEnv: string
│    │     │    ├ NumberOfWorkers: number
│    │     │    ├ PythonVirtualEnv: string
│    │     │    └ WorkerType: string
│    │     └ type UsernamePassword
│    │       ├      documentation: The username and password to be used for authentication.
│    │       │      name: UsernamePassword
│    │       └ properties
│    │          ├ Password: string (required)
│    │          └ Username: string (required)
│    ├[~]  resource AWS::DataZone::DataSource
│    │  └ properties
│    │     └ Type: (documentation changed)
│    └[~]  resource AWS::DataZone::Domain
│       └ attributes
│          └[+] RootDomainUnitId: string
├[~] service aws-ec2
│ └ resources
│    ├[~]  resource AWS::EC2::CapacityReservation
│    │  ├ attributes
│    │  │  ├[+] CapacityAllocationSet: Array<CapacityAllocation>
│    │  │  ├[+] CapacityReservationArn: string
│    │  │  ├[+] CapacityReservationFleetId: string
│    │  │  ├[+] CommitmentInfo: CommitmentInfo
│    │  │  ├[+] CreateDate: string
│    │  │  ├[+] DeliveryPreference: string
│    │  │  ├[+] OwnerId: string
│    │  │  ├[+] ReservationType: string
│    │  │  ├[+] StartDate: string
│    │  │  └[+] State: string
│    │  └ types
│    │     ├[+]  type CapacityAllocation
│    │     │  ├      documentation: Information about instance capacity usage for a Capacity Reservation.
│    │     │  │      name: CapacityAllocation
│    │     │  └ properties
│    │     │     ├ AllocationType: string
│    │     │     └ Count: integer
│    │     └[+]  type CommitmentInfo
│    │        ├      documentation: Information about your commitment for a future-dated Capacity Reservation.
│    │        │      name: CommitmentInfo
│    │        └ properties
│    │           ├ CommitmentEndDate: string
│    │           └ CommittedInstanceCount: integer
│    ├[~]  resource AWS::EC2::EC2Fleet
│    │  └ types
│    │     └[~] type InstanceRequirementsRequest
│    │       └ properties
│    │          └ AcceleratorTypes: (documentation changed)
│    ├[~]  resource AWS::EC2::LaunchTemplate
│    │  └ types
│    │     ├[~] type InstanceRequirements
│    │     │ └ properties
│    │     │    └ AcceleratorTypes: (documentation changed)
│    │     └[~] type NetworkPerformanceOptions
│    │       ├      - documentation: undefined
│    │       │      + documentation: Contains settings for the network performance options for the instance.
│    │       └ properties
│    │          └ BandwidthWeighting: (documentation changed)
│    ├[~]  resource AWS::EC2::SpotFleet
│    │  └ types
│    │     └[~] type InstanceRequirementsRequest
│    │       └ properties
│    │          └ AcceleratorTypes: (documentation changed)
│    └[~]  resource AWS::EC2::VPCEndpointService
│       └ properties
│          ├ SupportedIpAddressTypes: (documentation changed)
│          └[+] SupportedRegions: Array<string>
├[~] service aws-gamelift
│ └ resources
│    └[~]  resource AWS::GameLift::GameSessionQueue
│       ├ properties
│       │  └ TimeoutInSeconds: (documentation changed)
│       └ types
│          └[~] type PriorityConfiguration
│            └ properties
│               └ PriorityOrder: (documentation changed)
├[~] service aws-imagebuilder
│ └ resources
│    └[~]  resource AWS::ImageBuilder::DistributionConfiguration
│       └ types
│          └[~] type Distribution
│            └ properties
│               └[-] SsmParameterConfigurations: Array<json>
├[~] service aws-kinesisfirehose
│ └ resources
│    └[~]  resource AWS::KinesisFirehose::DeliveryStream
│       └ types
│          └[~] type SnowflakeDestinationConfiguration
│            └ properties
│               └ ProcessingConfiguration: (documentation changed)
├[~] service aws-location
│ └ resources
│    └[~]  resource AWS::Location::APIKey
│       └ types
│          └[~] type ApiKeyRestrictions
│            └ properties
│               └ AllowActions: (documentation changed)
├[~] service aws-msk
│ └ resources
│    └[~]  resource AWS::MSK::Configuration
│       └ properties
│          └ KafkaVersionsList: (documentation changed)
├[~] service aws-networkfirewall
│ └ resources
│    ├[~]  resource AWS::NetworkFirewall::RuleGroup
│    │  └ types
│    │     └[~] type MatchAttributes
│    │       └ properties
│    │          ├ DestinationPorts: (documentation changed)
│    │          ├ Protocols: (documentation changed)
│    │          └ SourcePorts: (documentation changed)
│    └[~]  resource AWS::NetworkFirewall::TLSInspectionConfiguration
│       └ types
│          └[~] type ServerCertificateScope
│            └ properties
│               └ Protocols: (documentation changed)
├[~] service aws-oam
│ └ resources
│    └[~]  resource AWS::Oam::Link
│       ├ properties
│       │  └ ResourceTypes: (documentation changed)
│       └ types
│          ├[~] type LinkConfiguration
│          │ └ properties
│          │    └ LogGroupConfiguration: (documentation changed)
│          └[~] type LinkFilter
│            ├      - documentation: When used in `MetricConfiguration` this field specifies which metric namespaces are to be shared with the monitoring account
│            │      When used in `LogGroupConfiguration` this field specifies which log groups are to share their log events with the monitoring account. Use the term `LogGroupName` and one or more of the following operands.
│            │      + documentation: undefined
│            └ properties
│               └ Filter: (documentation changed)
├[~] service aws-quicksight
│ └ resources
│    ├[~]  resource AWS::QuickSight::Analysis
│    │  └ types
│    │     └[~] type SheetTextBox
│    │       └ properties
│    │          └[-] Interactions: json
│    ├[~]  resource AWS::QuickSight::Dashboard
│    │  └ types
│    │     └[~] type SheetTextBox
│    │       └ properties
│    │          └[-] Interactions: json
│    └[~]  resource AWS::QuickSight::Template
│       └ types
│          └[~] type SheetTextBox
│            └ properties
│               └[-] Interactions: json
├[~] service aws-redshiftserverless
│ └ resources
│    └[~]  resource AWS::RedshiftServerless::Workgroup
│       ├ properties
│       │  ├[+] TrackName: string
│       │  └[+] Workgroup: Workgroup
│       ├ attributes
│       │  ├ Workgroup.BaseCapacity: (documentation changed)
│       │  ├[-] Workgroup.MaxCapacity: integer
│       │  └[+] Workgroup.TrackName: string
│       └ types
│          └[~] type Workgroup
│            └ properties
│               └[+] TrackName: string
├[~] service aws-rum
│ └ resources
│    └[~]  resource AWS::RUM::AppMonitor
│       ├ properties
│       │  ├[+] DeobfuscationConfiguration: DeobfuscationConfiguration
│       │  ├ Domain: - string (required)
│       │  │         + string
│       │  ├[+] DomainList: Array<string>
│       │  └ ResourcePolicy: (documentation changed)
│       └ types
│          ├[+]  type DeobfuscationConfiguration
│          │  ├      documentation: A structure that contains the configuration for how an app monitor can deobfuscate stack traces.
│          │  │      name: DeobfuscationConfiguration
│          │  └ properties
│          │     └ JavaScriptSourceMaps: JavaScriptSourceMaps
│          ├[+]  type JavaScriptSourceMaps
│          │  ├      documentation: A structure that contains the configuration for how an app monitor can unminify JavaScript error stack traces using source maps.
│          │  │      name: JavaScriptSourceMaps
│          │  └ properties
│          │     ├ Status: string (required)
│          │     └ S3Uri: string
│          └[~] type ResourcePolicy
│            ├      - documentation: A structure that defines resource policy attached to your app monitor.
│            │      + documentation: Use this structure to assign a resource-based policy to a CloudWatch RUM app monitor to control access to it. Each app monitor can have one resource-based policy. The maximum size of the policy is 4 KB. To learn more about using resource policies with RUM, see [Using resource-based policies with CloudWatch RUM](https://docs.aws.amazon.com/AmazonCloudWatch/latest/monitoring/CloudWatch-RUM-resource-policies.html) .
│            └ properties
│               ├ PolicyDocument: (documentation changed)
│               └ PolicyRevisionId: (documentation changed)
├[~] service aws-ssmquicksetup
│ └ resources
│    └[~]  resource AWS::SSMQuickSetup::ConfigurationManager
│       └ types
│          └[~] type ConfigurationDefinition
│            └ properties
│               └ Parameters: (documentation changed)
├[~] service aws-timestream
│ └ resources
│    └[~]  resource AWS::Timestream::Table
│       └ properties
│          └ MagneticStoreWriteProperties: (documentation changed)
├[~] service aws-wafv2
│ └ resources
│    └[~]  resource AWS::WAFv2::WebACL
│       ├ properties
│       │  └[+] DataProtectionConfig: DataProtectionConfig
│       └ types
│          ├[+]  type DataProtect
│          │  ├      name: DataProtect
│          │  └ properties
│          │     ├ Field: FieldToProtect (required)
│          │     ├ Action: string (required)
│          │     ├ ExcludeRateBasedDetails: boolean
│          │     └ ExcludeRuleMatchDetails: boolean
│          ├[+]  type DataProtectionConfig
│          │  ├      documentation: Specifies data protection to apply to the web request data for the web ACL. This is a web ACL level data protection option.
│          │  │      The data protection that you configure for the web ACL alters the data that's available for any other data collection activity, including your AWS WAF logging destinations, web ACL request sampling, and Amazon Security Lake data collection and management. Your other option for data protection is in the logging configuration, which only affects logging.
│          │  │      This is part of the data protection configuration for a web ACL.
│          │  │      name: DataProtectionConfig
│          │  └ properties
│          │     └ DataProtections: Array<DataProtect> (required)
│          └[+]  type FieldToProtect
│             ├      documentation: Specifies a field type and keys to protect in stored web request data. This is part of the data protection configuration for a web ACL.
│             │      name: FieldToProtect
│             └ properties
│                ├ FieldKeys: Array<string>
│                └ FieldType: string (required)
└[~] service aws-workspacesthinclient
  └ resources
     └[~]  resource AWS::WorkSpacesThinClient::Environment
        └ properties
           └ DeviceCreationTags: (documentation changed)
```
…construct (#33872)

branches and files in git push filter in codepipeline L2 construct 

Refer to the README content of reverted pr:(https://github.com/aws/aws-cdk/pull/30462/files). Credit to @go-to-k 

### Issue # 31009(#31009)


### Reason for this change

Branches and files in git push filter under codepipeline trigger has been supported last year, and cdk library didn't support this feature yet.

### Description of changes

Support ranches and files in git push filter under codepipeline trigger.

### Describe any new or updated permissions being added

No


### Description of how you validated changes

Unit test/Integ test/ local deployment

### Checklist
- [x] My code adheres to the [CONTRIBUTING GUIDE](https://github.com/aws/aws-cdk/blob/main/CONTRIBUTING.md) and [DESIGN GUIDELINES](https://github.com/aws/aws-cdk/blob/main/docs/DESIGN_GUIDELINES.md)

----

*By submitting this pull request, I confirm that my contribution is made under the terms of the Apache-2.0 license*
…3909)

### Description of changes

No-op PR to automatically include breaking change in the CHANGELOG. See #33906 for details.

### Checklist
- [x] My code adheres to the [CONTRIBUTING GUIDE](https://github.com/aws/aws-cdk/blob/main/CONTRIBUTING.md) and [DESIGN GUIDELINES](https://github.com/aws/aws-cdk/blob/main/docs/DESIGN_GUIDELINES.md)

BREAKING CHANGE: The `CfnDistributionConfiguration.DistributionProperty.ssmParameterConfigurations` property has been removed.

----

*By submitting this pull request, I confirm that my contribution is made under the terms of the Apache-2.0 license*
### Description of changes

No-op PR to automatically include breaking change in the CHANGELOG. See #33906 for details.

### Checklist
- [x] My code adheres to the [CONTRIBUTING GUIDE](https://github.com/aws/aws-cdk/blob/main/CONTRIBUTING.md) and [DESIGN GUIDELINES](https://github.com/aws/aws-cdk/blob/main/docs/DESIGN_GUIDELINES.md)

BREAKING CHANGE: The `CfnAnalysis.SheetTextBoxProperty.interactions`, `CfnDashboard.SheetTextBoxProperty.interactions`, and `CfnTemplate.SheetTextBoxProperty.interactions` properties have been removed.

----

*By submitting this pull request, I confirm that my contribution is made under the terms of the Apache-2.0 license*
…ns (#33911)

### Description of changes

No-op PR to automatically include breaking change in the CHANGELOG. See #33906 for details.

### Checklist
- [x] My code adheres to the [CONTRIBUTING GUIDE](https://github.com/aws/aws-cdk/blob/main/CONTRIBUTING.md) and [DESIGN GUIDELINES](https://github.com/aws/aws-cdk/blob/main/docs/DESIGN_GUIDELINES.md)

BREAKING CHANGE: The `CfnWorkgroup.attrWorkgroupMaxCapacity` attribute has been removed.

----

*By submitting this pull request, I confirm that my contribution is made under the terms of the Apache-2.0 license*
### Issue # (if applicable)

NA

### Reason for this change

Currently in the Prioritization dasboard, we don't have a way to filter the PRs and Issues by date when it is added.

### Description of changes

This PR enables automation for adding current date to the `AddedOn` column field in the Github Prioritization dasboard whenever new PR/Issues are being added to the dashboard.

### Describe any new or updated permissions being added

NA


### Description of how you validated changes

Tested in test dashboard.

### Checklist
- [x] My code adheres to the [CONTRIBUTING GUIDE](https://github.com/aws/aws-cdk/blob/main/CONTRIBUTING.md) and [DESIGN GUIDELINES](https://github.com/aws/aws-cdk/blob/main/docs/DESIGN_GUIDELINES.md)

----

*By submitting this pull request, I confirm that my contribution is made under the terms of the Apache-2.0 license*
### Issue # (if applicable)

Closes #<issue number here>.

### Reason for this change

Ruby 3.4 support in Lambda is coming soon: https://docs.aws.amazon.com/lambda/latest/dg/lambda-runtimes.html#runtimes-future

### Description of changes

Add `ruby3.4` to the list of Lambda runtimes (`RUBY_3_4`) and add integration tests with their corresponding assets.

### Describe any new or updated permissions being added




### Description of how you validated changes

Added integ tests for Ruby 3.4. 



### Checklist
- [x] My code adheres to the [CONTRIBUTING GUIDE](https://github.com/aws/aws-cdk/blob/main/CONTRIBUTING.md) and [DESIGN GUIDELINES](https://github.com/aws/aws-cdk/blob/main/docs/DESIGN_GUIDELINES.md)

----

*By submitting this pull request, I confirm that my contribution is made under the terms of the Apache-2.0 license*
### Issue # (if applicable)

Closes NA

### Reason for this change

`@aws-cdk/integ-runner` is removed from this repository with the [PR](#33835) and moved to `aws-cdk-cli` repository. Hence yarn upgrade workflow fails at the integ-runner build step as the package is no longer available in the repo.

### Description of changes

Remove the integ-runner build step as no longer applicable in the yarn upgrade workflow.

### Describe any new or updated permissions being added

NA

### Description of how you validated changes

* Ran `yarn install` and verified the integ-runner installed version using `npx integ-runner --version`

### Checklist
- [x] My code adheres to the [CONTRIBUTING GUIDE](https://github.com/aws/aws-cdk/blob/main/CONTRIBUTING.md) and [DESIGN GUIDELINES](https://github.com/aws/aws-cdk/blob/main/docs/DESIGN_GUIDELINES.md)

----

*By submitting this pull request, I confirm that my contribution is made under the terms of the Apache-2.0 license*
…kflow (#33920)

### Issue # (if applicable)

Closes NA

### Reason for this change

This followup PR to remove integ-runner package related steps from the yarn upgrade workflow. Previous PR #33917 

Currently the workflow is failing at this step with error

```
Run cd packages/@aws-cdk/integ-runner && yarn pkglint
/home/runner/work/_temp/**-[4](https://github.com/aws/aws-cdk/actions/runs/****.sh: line 1: cd: packages/@aws-cdk/integ-runner: No such file or directory
Error: Process completed with exit code 1.
```

### Description of changes

Since integ-runner package is no longer available, this step can be removed from the workflow.

### Describe any new or updated permissions being added

NA

### Description of how you validated changes

Ran yarn install and verified the integ-runner installed version using npx integ-runner --version

### Checklist
- [x] My code adheres to the [CONTRIBUTING GUIDE](https://github.com/aws/aws-cdk/blob/main/CONTRIBUTING.md) and [DESIGN GUIDELINES](https://github.com/aws/aws-cdk/blob/main/docs/DESIGN_GUIDELINES.md)

----

*By submitting this pull request, I confirm that my contribution is made under the terms of the Apache-2.0 license*
@aws-cdk-automation aws-cdk-automation requested a review from a team as a code owner March 26, 2025 21:27
@aws-cdk-automation aws-cdk-automation added auto-approve pr/no-squash This PR should be merged instead of squash-merging it labels Mar 26, 2025
@aws-cdk-automation aws-cdk-automation requested a review from a team March 26, 2025 21:27
@github-actions github-actions bot added the p2 label Mar 26, 2025
@aws-cdk-automation
Copy link
Collaborator Author

AWS CodeBuild CI Report

  • CodeBuild project: AutoBuildv2Project1C6BFA3F-wQm2hXv2jqQv
  • Commit ID: 0e06457
  • Result: SUCCEEDED
  • Build Logs (available for 30 days)

Powered by github-codebuild-logs, available on the AWS Serverless Application Repository

@aws-cdk-automation aws-cdk-automation added the pr/needs-community-review This PR needs a review from a Trusted Community Member or Core Team Member. label Mar 26, 2025
Copy link
Contributor

mergify bot commented Mar 26, 2025

Thank you for contributing! Your pull request will be automatically updated and merged without squashing (do not update manually, and be sure to allow changes to be pushed to your fork).

@mergify mergify bot merged commit 3bb9bc9 into v2-release Mar 26, 2025
8 checks passed
@mergify mergify bot deleted the bump/2.186.0 branch March 26, 2025 22:03
Copy link
Contributor

Comments on closed issues and PRs are hard for our team to see.
If you need help, please open a new issue that references this one.

@github-actions github-actions bot locked as resolved and limited conversation to collaborators Mar 26, 2025
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.

Labels

auto-approve p2 pr/needs-community-review This PR needs a review from a Trusted Community Member or Core Team Member. pr/no-squash This PR should be merged instead of squash-merging it

Projects

None yet

Development

Successfully merging this pull request may close these issues.