v1.124.0

⚠ BREAKING CHANGES TO EXPERIMENTAL FEATURES

• assertions: the findResources() API previously returned a list of resources, but now returns a map of logical id to resource.
• assertions: the findOutputs() API previously returned a list of outputs, but now returns a map of logical id to output.
• assertions: the findMappings() API previously returned a list of mappings, but now returns a map of logical id to mapping.

Features

• assertions: capture matching value (#16426) (cc74f92)
• assertions: findXxx() APIs now includes the logical id as part of its result (#16454) (532a72b)
• assertions: match into serialized json (#16456) (fed30fc)
• batch: fargate support for jobs (#15848) (066bcb1), closes #13591 #13590 #13591
• cfnspec: cloudformation spec v41.1.0 (#16472) (28875f9)
• cfnspec: cloudformation spec v41.1.0 (#16524) (124a7a1)
• cfnspec: cloudformation spec v41.2.0 (#16550) (e047bd8)
• ec2/ecs: cacheInContext properties for machine images (#16021) (430f50a), closes #12484
• ecs-service-extensions: Publish Extension (#16326) (c6c5941)
• glue: Job construct (#12506) (fc74110), closes #12443
• lambda: configure workdir for docker image based functions (#16111) (b3eafc2)
• lambda: use bundling docker image from ECR public for dotnet and go runtimes (#16281) (9bbfd18)
• neptune: add engine version 1.0.5.0 (#16394) (deaac4a), closes #16388
• pipeline: allow enabling KMS key rotation for cross-region Stacks (#16468) (2a629dd), closes #14381
• rds: region replication for generated secrets (#16497) (1e9d8be), closes #16480
• redshift: manage database users and tables via cdk (#15931) (a9d5118), closes #9815
• s3-deployment: enable efs support for handling large files in lambda (#15220) (2737119)
• sns: adding support for firehose subscription protocol (#15764) (18aff6b)
• stepfunctions-tasks: support Associate Workflow Executions on StepFunctionsStartExecution via associateWithParent property (#16475) (7d3b90b), closes #14778

Bug Fixes

• apigatewayv2: ApiMapping does not depend on DomainName (#16201) (1e247d8), closes #15464
• cloudformation-diff: cdk diff not picking up differences if old/new value is in format n.n.n (#16050) (38426c9), closes #15935
• config: the IGW mapping to correct resource type (#16464) (23d9b6a), closes #16463
• core: asset hash of symlinked dir is wrong (#16429) (36ff738)
• ec2: set proper role for --role argument of cfn-init (#16503) (cdbd65d), closes #16501
• logs: log retention fails with OperationAbortedException (#16083) (3e9f04d), closes aws#15709
• route53resolver: FirewallDomainList throws with wildcard domains (#16538) (643e5ee), closes #16527
• SSM API docs: Typo SecretString -> SecureString and note how SecureStrings cannot be created via CDK (#16228) (950e875)