Release v2.25.0 · aws/aws-cdk

cfnspec: cloudformation spec v69.0.0 (#20240) (e82b63f) and (#20331) (e9de4e9)
cfnspec: cloudformation spec v72.0.0 (#20357) (c8fd84c)
cli: make ecr images immutable when created from cdk bootstrap (#19937) (0ef4bb4), closes #18376
cloudfront: REST API origin (#20335) (f7693e3)
cognito: grant() for user pool (#20285) (10d13e4)
core: allow disabling of LogicalID Metadata in case of large manifest (#20433) (88ea829), closes #20211
ec2: more router types (#20151) (33b983c), closes #19057 /docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ec2-route.html#aws-resource-ec2
iam: validate role path at build time (#16165) (65a5a46), closes #13747
logs: additional log retention periods (#20347) (734faa5), closes #20346
s3: add noncurrentVersionsToRetain property to lifecycle rule (#20348) (85604d9), closes #19784

apigateway: arnForExecuteApi fails on tokenized path (#20323) (f7732a1), closes #20252
assets: parallel docker image publishing fails on macOS (#20117) (a58a803), closes #20116
cfn-include: allow CFN Functions in Tags (#19923) (4df9a4f), closes #16889
cli: allow SSO profiles to be used as source profiles (#20340) (a0b29e9), closes #19897
cloudwatch-actions: stack partition is hardcoded 'aws' in action arn (#20224) (0eb6c3b), closes #19765
eks: Cluster.FromClusterAttributes ignores KubectlLambdaRole (#20373) (7e824ab), closes #20008
iam: AccountPrincipal accepts values which aren't account IDs (#20292) (d0163f8), closes #20288
pipelines: specifying the Action Role for CodeBuild steps (#18293) (719edfc), closes #18291 #18291
rds: tokens should not be lowercased (#20287) (5429e55), closes #18802
secretsmanager: automatic rotation cannot be disabled (#18906) (c50d60c), closes #18749

Alpha modules (2.25.0-alpha.0)

cloud9: configure Connection Type of Ec2Environment (#20250) (01708bc), closes #17027
integ-tests: enhancements to integ-tests (#20180) (3ff3fb7)