v1.141.0

⚠ BREAKING CHANGES TO EXPERIMENTAL FEATURES

• servicecatalog: TagOptions now have scope and props argument in constructor, and data is now passed via a allowedValueForTags field in props

Features

• assertions: support assertions on stack messages (#18521) (cb86e30), closes #18347
• assertions: support for conditions (#18577) (55ff1b2), closes #18560
• aws-ecs-patterns: adding support for custom HealthCheck while creating QueueProcessingFargateService (#18219) (0ca81a1), closes #15636
• certificatemanager: DnsValidatedCertificate DNS record cleanup (#18311) (36d356d), closes #3333 #7063
• cfnspec: cloudformation spec v53.1.0 (#18588) (a283a48)
• cfnspec: cloudformation spec v53.1.0 (#18658) (2eda19e)
• ec2: session timeout and login banner for client vpn endpoint (#18590) (7294118)
• ecs: add BaseService.fromServiceArnWithCluster() for use in CodePipeline (#18530) (3d192a9)
• iotevents: add DetectorModel L2 Construct (#18049) (d0960f1), closes #17711 #17711
• lambda-nodejs: Allow setting mainFields for esbuild (#18569) (0e78aeb)
• s3: custom role for the bucket notifications handler (#17794) (43f232d), closes #9918 #13241
• servicecatalog: Create TagOptions Construct (#18314) (903c4b6), closes #17753

Bug Fixes

• apigatewayv2: websocket api: allow all methods in grant manage connections (#18544) (41c8a3f), closes #18410
• aws-apigateway: cross region authorizer ref (#18444) (0e0a092)
• cli: hotswap should wait for lambda's updateFunctionCode to complete (#18536) (0e08eeb), closes #18386 #18386
• ecs: only works in 'aws' partition (#18496) (525ac07), closes #18429
• ecs-patterns: Fix Network Load Balancer Port assignments in ECS Patterns (#18157) (1393729), closes #18073
• elasticloadbalancingv2: ApplicationLoadBalancer.logAccessLogs does not grant all necessary permissions (#18558) (bde1795), closes #18367
• pipelines: CodeBuild projects are hard to tell apart (#18492) (f6dab8d)
• region-info: incorrect codedeploy service principals (#18505) (16db963)
• route53: add RoutingControlArn to HealthCheck patch (#18645) (c58e8bb), closes #18570
• s3: add missing safe actions to grantWrite, grantReadWrite and grantPut methods (#18494) (940d043), closes #13616
• secretsmanager: SecretRotation for secret imported by name has incorrect permissions (#18567) (9ed263c), closes #18424
• stepfunctions: task token integration cannot be used with API Gateway (#18595) (678eede), closes #14184 #14181
• stepfunctions-tasks: cluster creation fails with unresolved release labels (#18288) (9940952)
• synthetics: correct getbucketlocation policy (#13573) (e743525), closes #13572