Skip to content

Releases: aws/aws-cdk

v1.82.0

03 Jan 10:54
c445b89
Compare
Choose a tag to compare

⚠ BREAKING CHANGES TO EXPERIMENTAL FEATURES

  • eks: Existing self managed nodes may loose the ability to host additional services of type LoadBalancer . See #12269 (comment) for possible mitigations.

Bug Fixes

  • eks: Self managed nodes cannot be added to LoadBalancers created via the LoadBalancer service type (#12269) (470a881)
  • lambda-layer-*: unable to calculate layer asset hash due to missing file (#12293) (646f098), closes #12291

v1.81.0

31 Dec 00:14
6ef67c7
Compare
Choose a tag to compare

⚠ BREAKING CHANGES TO EXPERIMENTAL FEATURES

  • eks: the @aws-cdk/eks.KubectlLayer layer class has been moved to @aws-cdk/lambda-layer-kubectl.KubectlLayer.

Features

Bug Fixes

  • codebuild: missing permissions for SecretsManager environment variables (#12121) (1a13d8f)
  • codebuild: Project lacks permissions to its log destinations (#12213) (b92ed51), closes #11444 #12179
  • codepipeline-actions: use codebuild batch iam permissions when executeBatchBuild: true (#12181) (5279f37)
  • elasticsearch: domain configured with access policies and a custom kms key fails to deploy (#11699) (245ee6a)

v1.80.0

22 Dec 13:20
31132ca
Compare
Choose a tag to compare

⚠ BREAKING CHANGES TO EXPERIMENTAL FEATURES

  • eks: LegacyCluster was removed since it existed only for a transition period to allow gradual migration to the current cluster class.
  • eks: kubectlEnabled property was removed, all clusters now support kubectl.
  • core: Creation stack traces for Lazy values are no longer
    captured by default in order to speed up tests. Run with
    CDK_DEBUG=true (or cdk --debug) to capture stack traces.

Features

  • ec2: Add VPC endpoints for Athena and Glue (#12073) (73ef6b1), closes #12072
  • ecs-patterns: add ruleName optional parameter for ScheduledTask constructs (#12190) (b1318bd)
  • eks: connect all custom resources to the cluster VPC (#10200) (eaa8222)
  • lambda-nodejs: Expose optional props for advanced usage of esbuild (#12123) (ecc98ac)

Bug Fixes

v1.79.0

17 Dec 12:11
8b3bf9c
Compare
Choose a tag to compare

⚠ BREAKING CHANGES TO EXPERIMENTAL FEATURES

  • apigatewayv2: HttpApi.fromApiId() has been replaced with
    HttpApi.fromHttpApiAttributes().
  • elasticsearch: ES Domain LogGroup LogicalId will change, which will trigger new log group resources to be created

Features

Bug Fixes

  • ec2: 'encoded list token' error using Vpc imported from deploy-time lists (#12040) (0690da9)

  • ec2: fromInterfaceVpcEndpointAttributes: Security Groups should not be required (#11857) (86ae5d6), closes #11050

  • eks: failure to deploy cluster since aws-auth configmap exists (#12068) (dc8a98a), closes #12053

  • eks: k8s resources accidentally deleted due to logical ID change (#12053) (019852e), closes #10397 #10397

  • elasticsearch: Defining 2 domains with logging enabled in the same stack fails on construct id conflict (#12055) (ec3ce19), closes #12017

  • elasticsearch: log policies are overwritten when creating 2 domains which also results in a failure while destroying the stack (#12056) (889d089), closes #12016

  • stepfunctions-tasks: policies created for EMR tasks have ARNs that are not partition-aware (#11553) (1cf6713), closes #11503

  • apigatewayv2: apiEndpoint is elevated to the IHttpApi interface (#11988) (bc5b9b6)

v1.78.0

12 Dec 03:04
2c74f4c
Compare
Choose a tag to compare

⚠ BREAKING CHANGES TO EXPERIMENTAL FEATURES

  • cloudfront-origins: Default minimum origin SSL protocol for HttpOrigin and LoadBalancerOrigin changed from SSLv3 to TLSv1.2.
  • apigatewayv2: domainName property under DomainName has been
    renamed to name.
  • appmesh: the properties dnsHostName and awsCloudMap of VirtualNodeProps have been replaced with the property serviceDiscovery
  • kms: change the default value of trustAccountIdentities to true,
    which will result in the key getting the KMS-recommended default key
    policy. This is enabled through the '@aws-cdk/aws-kms:defaultKeyPolicies'
    feature flag.

Features

  • appmesh: add ClientPolicy to VirtualNode, VirtualGateway and VirtualService (#11563) (bfee58c)
  • appmesh: change Virtual Node service discovery to a union-like class (#11926) (f75c264)
  • appsync: support appsync functions for pipelineConfig (#10111) (cb703c7), closes #9092
  • batch: Log configuration for job definitions (#11771) (84c959c), closes #11218
  • cloudfront: responseHttpStatus defaults to httpStatus in errorResponses (#11879) (c6052ae)
  • cloudfront: the Distribution construct is now Generally Available (stable) (#11919) (442bf7e)
  • cloudfront-origins: ability to specify minimum origin SSL protocol (#11997) (a0aa61d), closes #11994
  • cloudfront-origins: CloudFront Origins is now Generally Available (#12011) (daace16), closes #11919
  • codeguruprofiler: the CodeGuru Profiler Construct Library is now Generally Available (stable) (#11924) (cbe7a10)
  • ecs: introduce a new Image type, TagParameterContainerImage, to be used in CodePipeline (#11795) (4182c40), closes #1237 #7746
  • eks: kubernetes resource pruning (#11932) (1fdd549), closes #10495
  • kms: change default key policy to align with KMS best practices (under feature flag) (#11918) (ff695da), closes #5575 #8977 #10575 #11309
  • s3: add support to set bucket OwnershipControls (#11834) (0d289cc), closes #11591

Bug Fixes

  • apigateway: base path url cannot contain upper case characters (#11799) (8069a7e)
  • cfn-include: cfn-include fails in monocdk (#11595) (45e43f2), closes #11342
  • cli: cross-account deployment no longer works (#11966) (6fb3448), closes #11350 #11792 #11792
  • codebuild: incorrect SSM Parameter ARN in Project's IAM permissions (#11917) (7a09c18), closes #9980
  • core: autogenerated exports do not account for stack name length (#11909) (0df79a2), closes #9733
  • ecs: cannot disable container insights of an ECS cluster (#9151) (e328f22), closes #9149
  • eks: kubectl provider out-of-memory for large manifests/charts (now 1GiB) (#11957) (2ec2948), closes #11787
  • synthetics: metricFailed uses Average instead of Sum by default (#11941) (3530e8c)
  • apigatewayv2: rename 'domainName' to 'name' in the DomainName construct (#11989) (1be831a)

v2.0.0-alpha.0

11 Dec 14:33
beadc66
Compare
Choose a tag to compare
chore: add CHANGELOG entry for 2.0.0-alpha.0 (#12013)

Keep the text simple. Calling out the list of changes is not important
for the first release. Subsequent releases will carry the standard
format of features and bug fixes.


----

*By submitting this pull request, I confirm that my contribution is made under the terms of the Apache-2.0 license*

v1.77.0

07 Dec 13:26
a941c53
Compare
Choose a tag to compare

⚠ BREAKING CHANGES TO EXPERIMENTAL FEATURES

  • apigatewayv2: The VpcLink.fromVpcLinkId() API has been
    replaced with VpcLink.fromVpcLinkAttributes().
  • secretsmanager: (feature flag) Secret.secretName for owned secrets will now return
    only the secret name (without suffix) and not the full resource name. This is
    enabled through the @aws-cdk/secretsmanager:parseOwnedSecretName flag.
  • lambda-nodejs: bundling customization options like minify or sourceMap are now gathered under a new bundling prop.
  • lambda-nodejs: bundlingEnvironment is now bundling.environment
  • lambda-nodejs: bundlingDockerImage is now bundling.dockerImage

Features

Bug Fixes

v1.76.0

01 Dec 19:38
c207717
Compare
Choose a tag to compare

Features

v1.75.0

24 Nov 23:31
7708242
Compare
Choose a tag to compare

⚠ BREAKING CHANGES TO EXPERIMENTAL FEATURES

  • appmesh: renames gateway listener static methods to use shorter names
  • appmesh: renames gateway route static methods to use shorter names
  • appmesh: changes Route's spec to a union-like class. RouteSpec is now defined using protocol variant static methods
  • efs: keyId property uses the ARN instead of the keyId to support cross-account encryption key usage. The filesystem will be replaced.
  • lambda-nodejs: local bundling now requires esbuild to be installed.
  • lambda-nodejs: projectRoot has been replaced by depsLockFilePath. It should point to your dependency lock file (package-lock.json or yarn.lock)
  • lambda-nodejs: parcelEnvironment has been renamed to bundlingEnvironment
  • lambda-nodejs: sourceMaps has been renamed to sourceMap
  • appmesh: IVirtualNode no longer has the addBackends() method. A backend can be added to VirtualNode using the addBackend() method which accepts a single IVirtualService
  • appmesh: IVirtualNode no longer has the addListeners() method. A listener can be added to VirtualNode using the addListener() method which accepts a single VirtualNodeListener
  • appmesh: VirtualNode no longer has a default listener. It is valid to have a VirtualNode without any listeners
  • appmesh: the construction property listener of VirtualNode has been renamed to listeners, and its type changed to an array of listeners
  • appmesh: the struct VirtualNodeListener has been removed. To create Virtual Node listeners, use the static factory methods of the VirtualNodeListener class

Features

Bug Fixes

  • autoscaling: targetRequestsPerSecond is actually requests per minute (#11457) (39e277f), closes #11446
  • aws-custom-resource: module fails loading when bundled with parcel (#11487) (421d4e4)
  • cli: credential provider plugins cannot be used with modern synthesis (#11350) (9e91306)
  • cloudfront: origin ID exceeds undocumented 128 character limit (#11523) (90f0b9d), closes #11504
  • core: DefaultStackSynthesizer supports object prefix for s3 assets (#11327) (1b5f218)
  • core: missing context in Stages is not filled by CLI (#11461) (a4a555a), closes #9226
  • core: reusing StackSynthesizer leads to unsynthesized Stacks (#11635) (f03c889), closes #11528
  • efs: cannot use encryption key imported from another account (#11524) (3578d84), closes #7641
  • eks: cluster creation fails when configured with an imported public subnet and private endpoint (#11620) (2c045ce)
  • iam: attach policy to imported User (#11493) (0a8971c), closes #10913 #11046 #10527
  • init: TypeScript code is not being recompiled automatically (#11470) (9843e71)
  • lambda: failed to add permission to an imported lambda from another account (#11369) ([715a030](715a0300ea44c7cfcb6ae9973b...
Read more

v1.74.0

17 Nov 11:53
e86602f
Compare
Choose a tag to compare

⚠ BREAKING CHANGES TO EXPERIMENTAL FEATURES

  • appmesh: IVirtualNode no longer has the addBackends() method. A backend can be added to VirtualNode using the addBackend() method which accepts a single IVirtualService
  • appmesh: IVirtualNode no longer has the addListeners() method. A listener can be added to VirtualNode using the addListener() method which accepts a single VirtualNodeListener
  • appmesh: VirtualNode no longer has a default listener. It is valid to have a VirtualNode without any listeners
  • appmesh: the construction property listener of VirtualNode has been renamed to listeners, and its type changed to an array of listeners
  • appmesh: the struct VirtualNodeListener has been removed. To create Virtual Node listeners, use the static factory methods of the VirtualNodeListener class

Features

Bug Fixes