v1.157.0

Features

• cfnspec: cloudformation spec v69.0.0 (#20240) (e82b63f) and (#20331) (e9de4e9)
• cfnspec: cloudformation spec v72.0.0 (#20357) (c8fd84c)
• cli: make ecr images immutable when created from cdk bootstrap (#19937) (0ef4bb4), closes #18376
• cloud9: configure Connection Type of Ec2Environment (#20250) (01708bc), closes #17027
• cloudfront: REST API origin (#20335) (f7693e3)
• cognito: grant() for user pool (#20285) (10d13e4)
• core: allow disabling of LogicalID Metadata in case of large manifest (#20433) (88ea829), closes #20211
• ec2: more router types (#20151) (33b983c), closes #19057 /docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ec2-route.html#aws-resource-ec2
• iam: validate role path at build time (#16165) (65a5a46), closes #13747
• integ-tests: enhancements to integ-tests (#20180) (3ff3fb7)
• logs: additional log retention periods (#20347) (734faa5), closes #20346
• s3: add noncurrentVersionsToRetain property to lifecycle rule (#20348) (85604d9), closes #19784

Bug Fixes

• amplify: custom headers break with tokens (#20395) (765f441)
• apigateway: arnForExecuteApi fails on tokenized path (#20323) (f7732a1), closes #20252
• assets: parallel docker image publishing fails on macOS (#20117) (a58a803), closes #20116
• cfn-include: allow CFN Functions in Tags (#19923) (4df9a4f), closes #16889
• cli: allow SSO profiles to be used as source profiles (#20340) (a0b29e9), closes #19897
• cloudwatch-actions: stack partition is hardcoded 'aws' in action arn (#20224) (0eb6c3b), closes #19765
• eks: Cluster.FromClusterAttributes ignores KubectlLambdaRole (#20373) (7e824ab), closes #20008
• iam: AccountPrincipal accepts values which aren't account IDs (#20292) (d0163f8), closes #20288
• pipelines: specifying the Action Role for CodeBuild steps (#18293) (719edfc), closes #18291 #18291
• rds: tokens should not be lowercased (#20287) (5429e55), closes #18802
• secretsmanager: automatic rotation cannot be disabled (#18906) (c50d60c), closes #18749