v2.148.0

Features

• lambda: add grantInvokeLatestVersion to grant invoke only to latest function version (#29856) (61c28dd), closes #20177
• update L1 CloudFormation resource definitions (#30722) (4ceeced), closes /docs.aws.amazon.com/service-terms/#87
• codebuild: adding project.visibility (#30103) (1bacb69)
• codedeploy: termination hook (#30644) (8f652a7)
• cognito: add defaultRedirectUri to UserPoolClient (#30481) (f2c5f68)
• eks: eks pod identities (#30576) (9437b4d), closes /github.com/aws/aws-cdk/blob/b196b13b0b8a54dcacadf87fdbe744772a6e6c4d/packages/aws-cdk-lib/aws-eks/lib/oidc-provider.ts#L36 /github.com/aws/aws-cdk/blob/b196b13b0b8a54dcacadf87fdbe744772a6e6c4d/packages/aws-cdk-lib/aws-eks/lib/oidc-provider.ts#L36 /github.com/aws/aws-cdk/blob/b196b13b0b8a54dcacadf87fdbe744772a6e6c4d/packages/aws-cdk-lib/aws-iam/lib/role.ts#L373 #30519
• stepfunctions-tasks: step functions task for cross-region AWS API call (#30061) (1397737), closes #29918
• update L1 CloudFormation resource definitions (#30642) (2a659f0)
• fsx: add properties to enable automatic backups for Lustre file system (#30343) (3b95777), closes #30340

Bug Fixes

• ecs: let AsgCapacityProvider use IAutoScalingGroup only when Managed Termination Protection is disable (#30335) (efee07d), closes #29174
• lambda-nodejs: breaking change in esbuild causes import module error (#30726) (7f5ce4b), closes #30717
• s3: allow import S3 bucket with a legacy name (#30679) (e09126f), closes #22640
• s3-notifications: unable to delete the existing S3 event notifications (#30610) (b880067), closes #28915s too broad (under feature flag) (#30389) (8ebfade), closes #30368

Reverts

• fix(core): overrideLogicalId validation (#30695) (0aa2be7), closes aws/aws-cdk#29708
• route53 CrossAccountZoneDelegationRecord fails at deployment time with imported delegatedZone (#30440)" (#30606) (95280a0), closes #30600

---

Alpha modules (2.148.0-alpha.0)

Features

• apprunner: add AutoScalingConfiguration for AppRunner Service (#30358) (a598508), closes #30353
• apprunner: add ObservabilityConfiguration for AppRunner Service (#30359) (9e9cc27), closes #22985
• pipes-enrichments: add Step Functions enrichment eventbridge pipes (#30495) (8b495f9), closes #29385
• pipes-targets: add lambda function (#30271) (f594fae), closes #30270

Bug Fixes

• apprunner: auto deployment fails after new container image pushed due to lack of a permission (#30630) (cce10b1), closes #26640 /github.com/aws/aws-cdk/blob/main/packages/aws-cdk-lib/aws-ecr/lib/repository.ts#L385 40aws-cdk/aws-apprunner-alpha/lib/service.ts#L1303 40aws-cdk/aws-apprunner-alpha/lib/service.ts#L1368

v2.147.3

Bug Fixes

• lambda-nodejs: breaking change in esbuild causes import module error (#30726) (06c14b1), closes #30717

---

Alpha modules (2.147.3-alpha.0)

v2.147.2

Reverts

• fix(core): overrideLogicalId validation (#29708) (b196b13)

---

Alpha modules (2.147.2-alpha.0)

v2.147.1

Reverts

• route53 CrossAccountZoneDelegationRecord fails at deployment time with imported delegatedZone (#30440)" (#30606) (69eb617), closes #30600

---

Alpha modules (2.147.1-alpha.0)

v2.147.0

Features

• ec2: add nitro enclave and hibernation settings to the Instance Construct (#30228) (4e9ef15)
• ses: allow VDM settings at the configuration set level (#30051) (49a98ac), closes #30041
• stepfunctions-tasks: support FLEX execution class for GlueStartJobRun (#30534) (c826d8f), closes #30533
• update L1 CloudFormation resource definitions (#30569) (a5c6d21), closes /docs.aws.amazon.com/AmazonRDS/latest/AuroraUserGuide/aurora-serverless-v2.requirements.html#aurora-serverless-v2 /docs.aws.amazon.com/AmazonRDS/latest/AuroraUserGuide/aurora-serverless-v2.requirements.html#aurora-serverless-v2

Bug Fixes

• apigateway: remove timeout upper bound max (#30547) (3c36fe9), closes #30539
• core: overrideLogicalId validation (#29708) (b196b13), closes #29701
• globalaccelerator-endpoints: add preserveClientIp option for net… (#30346) (c1e1b4d)
• stepfunctions: add docs and warning DistributedMap Class ignores executionType in the ProcessorConfig (#30301) (0499adf), closes #30194 #27913 #28821

---

Alpha modules (2.147.0-alpha.0)

Bug Fixes

• custom-resource-handlers: don't recursively process s3 bucket objects (#30209) (25835e4), closes #30573 /github.com/aws/aws-cdk/pull/30209#issuecomment-2118991218

v2.146.0

Features

• appsync: add maxBatchSize property to the AppSyncFunction Construct (#30266) (f1dc142)
• eks: support AccessConfig for the Cluster construct (#30016) (f45f2ca), closes #28588
• opensearch: add OpenSearch 2.13 engine version (#30399) (db3e77d)
• implement node runtime region awareness for cdk vended custom resources (#30108) (69c5dde)
• codebuild: add missing types for webhook filters (#30064) (1d93094), closes #30062
• sns: add grantSubscribe method (#30486) (36a48ad), closes #29049
• update L1 CloudFormation resource definitions (#30508) (06d0a1b)

Bug Fixes

• cloudfront: make long function name deterministic (#30392) (e19d18b), closes #20017 #15523 #28629
• route53: delegation fails with public and private hosted zones with same name (#30439) (1f866c9), closes #30262

---

Alpha modules (2.146.0-alpha.0)

Features

• apprunner: add ipAddressType property to the Service class (#30351) (665396f)

v2.145.0

Features

• config: proactive evaluation mode (#30174) (516ecef), closes #30172
• eks: support for Kubernetes version 1.30 (#30454) (d2ea280)
• update L1 CloudFormation resource definitions (#30438) (3ee5ce0)
• chatbot: configure userRoleRequired for the SlackChannelConfiguration (#30420) (5b84ca6), closes #30403
• codebuild: Fleet L2 (#29754) (940e799), closes #29617 #29616
• logs: add distribution property to the Subscription class (#30423) (0e95bf0), closes #30422

Bug Fixes

• custom-resources: logApiResponseData is added to custom resource event properties by default (#30418) (a899ac6), closes #30121 #29949 #29648
• route53 CrossAccountZoneDelegationRecord fails at deployment time with imported delegatedZone (#30440) (a3d9b10), closes #28581
• apigateway: allow overriding authorizer on methods (#30415) (1b8d73c), closes #8827

---

Alpha modules (2.145.0-alpha.0)

v2.144.0

Features

• appconfig: add grantReadConfig method to Environment Construct (#30180) (c8f2646), closes #28585
• dynamodb: add resource polices for table (#30251) (7dc6d27)
• ec2: support instanceInitiatedShutdownBehavior for EC2 instance (#30160) (c073617), closes #30164
• ecs-patterns: allow custom container name for Scheduled ecs and fargate tasks (#30357) (f54a945), closes #30281 #27515
• lambda: allow running a build file (#30196) (89042c4), closes #18470
• stepfunctions-tasks: add workerType and numberOfWorkers to GlueStartJobRun class (#30319) (b17dfe7), closes #12757
• update L1 CloudFormation resource definitions (#30354) (ede0917)
• stepfunctions-tasks: support for the step functions mediaconvert optimized integration for createJob api (#30300) (823cab3), closes #30299

Bug Fixes

• ecs: removed omitEmptyArray for placementConstraints (#27555) (#30382) (8b234b7), closes /github.com/aws/aws-cdk/pull/27572#issuecomment-1766287866 /github.com/aws/aws-cdk/pull/28431#issuecomment-1865233495
• eks: add tag update support for eks cluster (#30123) (8c39e81), closes #19388
• fsx: no validation error when hour property set to 24 in the LustreMaintenanceTime class. (#30342) (6301a9a), closes #30341
• lambda: use enum values for applicationLogLevel and systemLogLevel (#29904) (3f53a45)
• s3: publicReadAccess causes deployment failure due to access denied 403 (#29632) (4bf6fad)
• stepfunctions: cannot use intrinsic functions in Fail state (#30210) (81a558f), closes #30063

---

Alpha modules (2.144.0-alpha.0)

Features

• apprunner: add kmsKey property for the AppRunner Service class (#30352) (0c1aeb6), closes #30365
• ivs-alpha: support advanced channel type (#30086) (544e54a), closes #30075
• neptune: add copyTagsToSnapshot property to the DatabaseCluster Construct (#30092) (ba8edb3), closes #30087

v2.143.1

Reverts

• fix(ses-actions): permissions too wide for S3 action (#30375) (6c716c6)

---

Alpha modules (2.143.1-alpha.0)

v2.143.0

Features

• codebuild: add deleteReports property to the ReportGroup Construct (#30141) (c3003ab)
• update L1 CloudFormation resource definitions (#30182) (555d1c7)
• batch: jobStateTimeLimitActions property added (#30158) (411a58c), closes #30142
• cognito: add enablePropagateAdditionalUserContextData to UserClient Construct (#30178) (e00c0ca)
• ec2: support placementGroup for ec2.Instance (#30293) (f4b1d5a), closes #30292
• ecs-patterns: dualstack NLB (#30069) (623cedb), closes #29614

Bug Fixes

• ecs: add feature flag and remove ecs default deployment alarm settings (#30217) (1e94267)
• elbv2: unable to deploy template with IPv4 load balancer when denyAllIgwTraffic set (#29956) (42d424e), closes #30247
• events_targets: kinesisfirehosestream not accepting ideliverystream for imported deliverystream (#30189) (d7e6a10)
• rds: readers not always be created after the writer (#30277) (e8676cb), closes #30260
• s3: bucketKey does not support SSE-S3 (#30184) (c7c75f8), closes #30183
• stepfunctions-tasks: runtime language used to evaluate expressions is ignored (#30302) (dfea721)

---

Alpha modules (2.143.0-alpha.0)