chore(merge-back): 2.214.0 (#35397)

See [CHANGELOG](https://github.com/aws/aws-cdk/blob/merge-back/2.214.0/CHANGELOG.md)

Author: mergify[bot]

CHANGELOG.v2.alpha.md

@@ -2,6 +2,15 @@
 
 All notable changes to this project will be documented in this file. See [standard-version](https://github.com/conventional-changelog/standard-version) for commit guidelines.
 
+## [2.214.0-alpha.0](https://github.com/aws/aws-cdk/compare/v2.213.0-alpha.0...v2.214.0-alpha.0) (2025-09-02)
+
+
+### Features
+
+* **bedrock-alpha:** add guardrails l2 construct ([#34765](https://github.com/aws/aws-cdk/issues/34765)) ([b4fdb2b](https://github.com/aws/aws-cdk/commit/b4fdb2b494abf41eccab90cca0d0f64d38009fbe))
+* **eks-v2-alpha:** support eks with k8s 1.33 ([#34713](https://github.com/aws/aws-cdk/issues/34713)) ([c24565e](https://github.com/aws/aws-cdk/commit/c24565e015d692e9a9c5dc9703372ec51b04be6b)), closes [#34520](https://github.com/aws/aws-cdk/issues/34520) [#34911](https://github.com/aws/aws-cdk/issues/34911)
+* **s3tables-alpha:** add TablePolicy support to L2 construct library ([#35223](https://github.com/aws/aws-cdk/issues/35223)) ([2741dfb](https://github.com/aws/aws-cdk/commit/2741dfbf69bbfa3e4353b4b3cbb4423fddc53226)), closes [#33054](https://github.com/aws/aws-cdk/issues/33054)
+
 ## [2.213.0-alpha.0](https://github.com/aws/aws-cdk/compare/v2.212.0-alpha.0...v2.213.0-alpha.0) (2025-08-27)
 
 

CHANGELOG.v2.md

@@ -2,6 +2,40 @@
 
 All notable changes to this project will be documented in this file. See [standard-version](https://github.com/conventional-changelog/standard-version) for commit guidelines.
 
+## [2.214.0](https://github.com/aws/aws-cdk/compare/v2.213.0...v2.214.0) (2025-09-02)
+
+
+### CHANGES TO L1 RESOURCES
+
+* L1 resources are automatically generated from public CloudFormation Resource Schemas. They are build to closely reflect the real state of CloudFormation. Sometimes these updates can contain changes that are incompatible with previous types, but more accurately reflect reality. In this release we have changed:
+
+  - **aws-ecs**: AWS::ECS::Service: AvailabilityZoneRebalancing property default value changed from "ENABLED" to "DISABLED".
+
+### Features
+
+* **acm:** add support for ACM exportable public certificates ([#35079](https://github.com/aws/aws-cdk/issues/35079)) ([c158e80](https://github.com/aws/aws-cdk/commit/c158e806f6bf8a5a5c8464f44c8a9f9f2b3586bf)), closes [#35078](https://github.com/aws/aws-cdk/issues/35078)
+* **cloudwatch:** add option to show labels on pie chart ([#34745](https://github.com/aws/aws-cdk/issues/34745)) ([83f0a61](https://github.com/aws/aws-cdk/commit/83f0a61b838777ab6239bede77472f6667a0e441)), closes [#28929](https://github.com/aws/aws-cdk/issues/28929)
+* **cognito:** support refresh token rotation ([#34360](https://github.com/aws/aws-cdk/issues/34360)) ([74f8ad9](https://github.com/aws/aws-cdk/commit/74f8ad98c122f1c4c8f3ee10bd582feec80b55bf)), closes [#34344](https://github.com/aws/aws-cdk/issues/34344)
+* **core:** `DockerBuildOptions` support network param ([#34725](https://github.com/aws/aws-cdk/issues/34725)) ([bc333e2](https://github.com/aws/aws-cdk/commit/bc333e267620fa2e3b7add39c565548e778cd01f)), closes [#34514](https://github.com/aws/aws-cdk/issues/34514)
+* **dynamodb:** adding ContributorInsightsMode feature ([#35332](https://github.com/aws/aws-cdk/issues/35332)) ([f12ead2](https://github.com/aws/aws-cdk/commit/f12ead206b659941ef05464a708b6d23eada4ba0))
+* **rds:** retain automated backups for database cluster ([#35372](https://github.com/aws/aws-cdk/issues/35372)) ([2ffc666](https://github.com/aws/aws-cdk/commit/2ffc666a0e7fdcbbaa072bb9b91f19e4a80e9e46))
+* update L1 CloudFormation resource definitions ([#35320](https://github.com/aws/aws-cdk/issues/35320)) ([0d674e4](https://github.com/aws/aws-cdk/commit/0d674e4ac4b2f3544e917367af891bba03cf39b0))
+* update L1 CloudFormation resource definitions ([#35382](https://github.com/aws/aws-cdk/issues/35382)) ([8f708df](https://github.com/aws/aws-cdk/commit/8f708df13344ea4a8fd3a1b50ab2bf9dce4b556a))
+* **ecs:** volume initialization rate ([#34962](https://github.com/aws/aws-cdk/issues/34962)) ([b8dfbc4](https://github.com/aws/aws-cdk/commit/b8dfbc466cf8fac4641d9e8c111525e2dc7a1848))
+* **events:** enable customer managed keys to be used with Archive ([#35253](https://github.com/aws/aws-cdk/issues/35253)) ([9f5e507](https://github.com/aws/aws-cdk/commit/9f5e507a12fbf430307bc6aa688446ec62414abd))
+* **sns:** add notExistsCondition method ([#34712](https://github.com/aws/aws-cdk/issues/34712)) ([fd8677b](https://github.com/aws/aws-cdk/commit/fd8677bb93fb8776abb4510631d750bc88ff920d)), closes [#34707](https://github.com/aws/aws-cdk/issues/34707)
+
+
+### Bug Fixes
+
+* lazy loading to improve startup time slows down large programs ([#35335](https://github.com/aws/aws-cdk/issues/35335)) ([6755a4e](https://github.com/aws/aws-cdk/commit/6755a4ea48f2963a4c3274e6fed938b4dc0f9f42))
+* **cloudwatch:** `AlarmRule.concat` cover empty operands ([#34757](https://github.com/aws/aws-cdk/issues/34757)) ([a01aa38](https://github.com/aws/aws-cdk/commit/a01aa38f044a5d3314831e0c912533917bdb8020)), closes [#34662](https://github.com/aws/aws-cdk/issues/34662)
+* **ecs_patterns:** openListener should be false when custom sg is provided ([#35297](https://github.com/aws/aws-cdk/issues/35297)) ([ccb1955](https://github.com/aws/aws-cdk/commit/ccb1955978e9e7851299d46f3bb4647bf4fd1a13)), closes [#35292](https://github.com/aws/aws-cdk/issues/35292) [#ffcdd2](https://github.com/aws/aws-cdk/issues/ffcdd2) [#e8f5e8](https://github.com/aws/aws-cdk/issues/e8f5e8) [#fff3e0](https://github.com/aws/aws-cdk/issues/fff3e0) [#f5f5f5](https://github.com/aws/aws-cdk/issues/f5f5f5)
+* **eks:** kubectlProvider should use the AmazonEC2ContainerRegistryPullOnly managed policy ([#35248](https://github.com/aws/aws-cdk/issues/35248)) ([1b6e962](https://github.com/aws/aws-cdk/commit/1b6e9628b18fe686c25f60e690193a7f0b331318)), closes [#35244](https://github.com/aws/aws-cdk/issues/35244)
+* **stepfunctions-tasks:** map bedrockagent service to bedrock IAM prefix ([#35147](https://github.com/aws/aws-cdk/issues/35147)) ([86638f6](https://github.com/aws/aws-cdk/commit/86638f6daca6ead382d0b9c1cf65bb04f70d4b3d)), closes [#35146](https://github.com/aws/aws-cdk/issues/35146)
+* stop passing the deprecated property to Cfn construct ([#35080](https://github.com/aws/aws-cdk/issues/35080)) ([a20afcd](https://github.com/aws/aws-cdk/commit/a20afcd4aaf275b01df4fc1eff930aa9dcb66d1d)), closes [#34895](https://github.com/aws/aws-cdk/issues/34895)
+* **s3-deployment:** intermittent CreateInvalidation and/or wait errors ([#34859](https://github.com/aws/aws-cdk/issues/34859)) ([628425c](https://github.com/aws/aws-cdk/commit/628425c9649a5ae7ca60b7ec7f9ac6237a4c1d11)), closes [#15891](https://github.com/aws/aws-cdk/issues/15891) [#15891](https://github.com/aws/aws-cdk/issues/15891)
+
 ## [2.213.0](https://github.com/aws/aws-cdk/compare/v2.212.0...v2.213.0) (2025-08-27)
 
 

packages/@aws-cdk/aws-bedrock-alpha/bedrock/guardrails/guardrail-version.ts

@@ -1,6 +1,8 @@
 import { IResource, Resource } from 'aws-cdk-lib';
 import { CfnGuardrailVersion } from 'aws-cdk-lib/aws-bedrock';
 import { md5hash } from 'aws-cdk-lib/core/lib/helpers-internal';
+import { addConstructMetadata } from 'aws-cdk-lib/core/lib/metadata-resource';
+import { propertyInjectable } from 'aws-cdk-lib/core/lib/prop-injectable';
 import { Construct } from 'constructs';
 // Internal Libs
 import { Guardrail, IGuardrail } from './guardrails';
@@ -89,7 +91,11 @@ export interface GuardrailVersionAttributes {
  * Class to create a Guardrail Version with CDK.
  * @cloudformationResource AWS::Bedrock::GuardrailVersion
  */
+@propertyInjectable
 export class GuardrailVersion extends GuardrailVersionBase {
+  /** Uniquely identifies this class. */
+  public static readonly PROPERTY_INJECTION_ID: string = '@aws-cdk.aws-bedrock-alpha.GuardrailVersion';
+
   /**
    * Import a Guardrail Version from its attributes.
    */
@@ -120,6 +126,8 @@ export class GuardrailVersion extends GuardrailVersionBase {
    */
   constructor(scope: Construct, id: string, props: GuardrailVersionProps) {
     super(scope, id);
+    // Enhanced CDK Analytics Telemetry
+    addConstructMetadata(this, props);
     this.guardrail = props.guardrail;
 
     // Compute hash from guardrail, to recreate the resource when guardrail has changed

packages/@aws-cdk/aws-bedrock-alpha/bedrock/guardrails/guardrails.ts

@@ -5,6 +5,8 @@ import { Metric, MetricOptions, MetricProps } from 'aws-cdk-lib/aws-cloudwatch';
 import * as iam from 'aws-cdk-lib/aws-iam';
 import { IKey, Key } from 'aws-cdk-lib/aws-kms';
 import { md5hash } from 'aws-cdk-lib/core/lib/helpers-internal';
+import { addConstructMetadata, MethodMetadata } from 'aws-cdk-lib/core/lib/metadata-resource';
+import { propertyInjectable } from 'aws-cdk-lib/core/lib/prop-injectable';
 import { Construct } from 'constructs';
 // Internal Libs
 import * as filters from './guardrail-filters';
@@ -408,7 +410,11 @@ export interface GuardrailAttributes {
  * Class to create a Guardrail with CDK.
  * @cloudformationResource AWS::Bedrock::Guardrail
  */
+@propertyInjectable
 export class Guardrail extends GuardrailBase {
+  /** Uniquely identifies this class. */
+  public static readonly PROPERTY_INJECTION_ID: string = '@aws-cdk.aws-bedrock-alpha.Guardrail';
+
   /**
    * Import a guardrail given its attributes
    */
@@ -541,6 +547,8 @@ export class Guardrail extends GuardrailBase {
     super(scope, id, {
       physicalName: props.guardrailName,
     });
+    // Enhanced CDK Analytics Telemetry
+    addConstructMetadata(this, props);
 
     // ------------------------------------------------------
     // Set properties or defaults
@@ -620,6 +628,7 @@ export class Guardrail extends GuardrailBase {
    * Adds a content filter to the guardrail.
    * @param filter The content filter to add.
    */
+  @MethodMetadata()
   public addContentFilter(filter: filters.ContentFilter): void {
     this.validateSingleContentFilter(filter);
     this.contentFilters.push(filter);
@@ -629,6 +638,7 @@ export class Guardrail extends GuardrailBase {
    * Adds a PII filter to the guardrail.
    * @param filter The PII filter to add.
    */
+  @MethodMetadata()
   public addPIIFilter(filter: filters.PIIFilter): void {
     this.validateSinglePiiFilter(filter);
     this.piiFilters.push(filter);
@@ -638,6 +648,7 @@ export class Guardrail extends GuardrailBase {
    * Adds a regex filter to the guardrail.
    * @param filter The regex filter to add.
    */
+  @MethodMetadata()
   public addRegexFilter(filter: filters.RegexFilter): void {
     this.validateSingleRegexFilter(filter);
     this.regexFilters.push(filter);
@@ -647,6 +658,7 @@ export class Guardrail extends GuardrailBase {
    * Adds a denied topic filter to the guardrail.
    * @param filter The denied topic filter to add.
    */
+  @MethodMetadata()
   public addDeniedTopicFilter(filter: filters.Topic): void {
     this.validateSingleDeniedTopic(filter);
     this.deniedTopics.push(filter);
@@ -656,6 +668,7 @@ export class Guardrail extends GuardrailBase {
    * Adds a contextual grounding filter to the guardrail.
    * @param filter The contextual grounding filter to add.
    */
+  @MethodMetadata()
   public addContextualGroundingFilter(filter: filters.ContextualGroundingFilter): void {
     this.validateSingleContextualGroundingFilter(filter);
     this.contextualGroundingFilters.push(filter);
@@ -665,6 +678,7 @@ export class Guardrail extends GuardrailBase {
    * Adds a word filter to the guardrail.
    * @param filter The word filter to add.
    */
+  @MethodMetadata()
   public addWordFilter(filter: filters.WordFilter): void {
     this.validateSingleWordFilter(filter);
     this.wordFilters.push(filter);
@@ -674,6 +688,7 @@ export class Guardrail extends GuardrailBase {
    * Adds a word filter to the guardrail.
    * @param filePath The location of the word filter file.
    */
+  @MethodMetadata()
   public addWordFilterFromFile(filePath: string,
     inputAction?: filters.GuardrailAction,
     outputAction?: filters.GuardrailAction,
@@ -688,6 +703,7 @@ export class Guardrail extends GuardrailBase {
    * Adds a managed word list filter to the guardrail.
    * @param filter The managed word list filter to add.
    */
+  @MethodMetadata()
   public addManagedWordListFilter(filter: filters.ManagedWordFilter): void {
     this.validateSingleManagedWordListFilter(filter);
     this.managedWordListFilters.push(filter);
@@ -698,6 +714,7 @@ export class Guardrail extends GuardrailBase {
    * @param description The description of the version.
    * @returns The guardrail version.
    */
+  @MethodMetadata()
   public createVersion(description?: string): string {
     const cfnVersion = new GuardrailVersion(this, `GuardrailVersion-${this.hash.slice(0, 16)}`, {
       description: description,