v1.58.0

Features

• cloudwatch: alarm status widget (#9456) (41940d3)
• cognito: better control sms role creation (#9513) (a772fe8), closes #6943
• core: local bundling provider (#9564) (3da0aa9)
• core: new annotations api (#9563) (ae9ed62), closes /github.com/aws/aws-cdk-rfcs/blob/master/text/0192-remove-constructs-compat.md#09
• core: new APIs for Aspects and Tags (#9558) (a311428), closes /github.com/aws/aws-cdk-rfcs/blob/master/text/0192-remove-constructs-compat.md#02
• ecs: Option to encrypt lifecycle hook SNS Topic (#9343) (38aad67)
• events: use existing Role when running ECS Task (#8145) (aad951a), closes #7859
• global-accelerator: referencing Global Accelerator security group (#9358) (1fe9684)
• iam: validate policies for missing resources/principals (#9269) (60d01b1), closes #7615
• lambda: autoscaling for lambda aliases (#8883) (d9d9b90)
• readme: include partitions.io cdk board in "getting help" (#9541) (f098014)
• "stack relative exports" flag (#9604) (398f872)
• secretsmanager: Specify secret value at creation (#9594) (07fedff), closes #5810

Bug Fixes

• cfn-include: allowedValues aren't included when specified by a parameter (#9532) (e7dc82f)
• codedeploy: ServerDeploymentGroup takes AutoScalingGroup instead of IAutoScalingGroup (#9252) (9ff55ae), closes #9175
• docdb: autoMinorVersionUpgrade property was not set to true by default as stated in the docstring (#9505) (e878f9c)
• ec2: Volume grants have an overly complicated API (#9115) (74e8391), closes #9114
• efs: LifecyclePolicy of AFTER_7_DAYS is not applied (#9475) (f78c346), closes #9474
• eks: clusters in a FAILED state are not detected (#9553) (d651948)
• eks: private endpoint access doesn't work with Vpc.fromLookup (#9544) (dd0f4cb), closes #9542 #5383
• lambda: cannot create lambda in public subnets (#9468) (b46fdc9)
• pipelines: CodeBuild images have (too) old Node version (#9446) (bd45f34), closes #9070
• pipelines: manual approval of changeset uses wrong ordering (#9508) (5c01da8), closes #9101 #9101