v2.11.0

Features

• assets: support networking mode for DockerImageAsset (#18114) (a7b39f5), closes #15516
• cfnspec: cloudformation spec v54.0.0 (#18764) (71601c1)
• cfnspec: cloudformation spec v55.0.0 (#18827) (a1d94b3)
• cli: cdk diff works for Nested Stacks (#18207) (1337b24), closes #5722
• cloudwatch-actions: add ssm opsitem action for cloudwatch alarm (#16923) (9380885), closes #16861
• dynamodb: allow setting TableClass for a Table (#18719) (73a889e), closes #18718
• ec2: support KMS keys for block device mappings for both instances and launch templates (#18326) (17dbe5f), closes #18309
• ecr: add server-side encryption configuration (#16966) (c46acd5), closes #15400 #15571
• ecs: expose image name in container definition (#17793) (1947d7c)
• fsx: add support for FSx Lustre Persistent_2 deployment type (#18626) (6036d99)
• s3-deployment: deploy data with deploy-time values (#18659) (d40e332), closes #12903

Bug Fixes

• core: correctly reference versionless secure parameters (#18730) (9f6e10e), closes #18729
• ec2: UserData.addSignalOnExitCommand does not work in combination with userDataCausesReplacement (#18726) (afdc550), closes #12749
• tooling: update vscode devcontainer image (#18455) (28647f7)
• vpc: Vpc.fromLookup should throw if subnet group name tag is explicitly given and does not exist (#18714) (13e1c7f), closes #13962

Reverts

• "chore(cloudfront): encryption and enforceSSL on distribution s3 loggingBucket (#18264)" (#18772) (121e4a1), closes #18271 /docs.aws.amazon.com/AmazonCloudWatch/latest/logs/AWS-logs-and-resource-policy.html#AWS-logs-infrastructure-S3 #18676
• "chore(ec2): enforceSSL on flowLog s3 bucket (#18271)" (#18770) (a2eb092), closes /docs.aws.amazon.com/AmazonCloudWatch/latest/logs/AWS-logs-and-resource-policy.html#AWS-logs-infrastructure-S3 #18676

---

Alpha modules (2.11.0-alpha.0)

Features

• amplify: support performance mode in Branch (#18598) (bdeb8eb), closes #18557
• iot: add Action to republish MQTT messages to another MQTT topic (#18661) (7ac1215)
• iotevents: add grant method to Input class (#18617) (e89688e)

Bug Fixes

• aws-appsync: Strip unsupported characters from Lambda DataSource (#18765) (bb8d6f6)