v2.173.2

Bug Fixes

• cli: allow credential plugins to return null for expiration (#32554) (e59b1db)
• cli: doesn't support plugins that return initially empty credentials (#32552) (7ee9b90)

---

Alpha modules (2.173.2-alpha.0)

v2.173.1

Bug Fixes

• cli: getting credentials via SSO fails when the region is set in the profile (#32520) (01fec04)

---

Alpha modules (2.173.1-alpha.0)

v2.173.0

Features

• cognito: user pool feature plans (#32367) (39c22de), closes #32369
• dynamodb: add precision timestamp for kinesis stream (#31863) (625c431), closes #31761
• dynamodb: add warm-throughput to L2 constructs (#32390) (496bc78), closes #32127
• route53: added EvaluateTargetHealth to Route53 Alias targets (#9481) (#30664) (c23be8c), closes #30739
• route53: added L2 construct for Route53's health checks (#30739) (7fdd974), closes #9481 #30664
• stepfunctions-tasks: support dynamic values for Glue Job Worker Type (#32453) (7df954c)
• update L1 CloudFormation resource definitions (#32446) (093c540)

Bug Fixes

• autoscaling: AutoScalingGroup requireImdsv2 with launchTemplate or mixedInstancesPolicy throws unclear error (#32220) (06cdaac), closes #27586 #27586
• cli: assuming a role from the INI file fails in non-commercial regions (#32456) (7028242)
• cloudformation-include: string arrays inside unknown properties cannot be parsed (#32461) (0c2f98b)
• cloudwatch: period of each metric in usingMetrics for MathExpression is ignored (#30986) (59e96a3), closes /github.com/aws/aws-cdk/blob/main/packages/aws-cdk-lib/aws-cloudwatch/lib/metric.ts#L606-L608 /github.com/aws/aws-cdk/blob/main/packages/aws-cdk-lib/aws-cloudwatch/lib/metric.ts#L566
• elasticloadbalancingv2: cannot create UDP listener for dual-stack NLB (#32184) (e9c6e23), closes /github.com/aws/aws-cdk/pull/32184#issuecomment-2510536270
• lambda: improve validation errors for lambda functions (#32323) (2607eb3), closes #32324
• rds: serverlessV2MaxCapacity can be set to 0.5, which is invalid (#32232) (3fe229d), closes /docs.aws.amazon.com/ja_jp/AWSCloudFormation/latest/UserGuide/aws-properties-rds-dbcluster-serverlessv2scalingconfiguration.html#cfn-rds-dbcluster-serverlessv2
• stepfunctions-task: elasticloadbalancingv2 service policy (#32419) (2677fce), closes #32417 /github.com/aws/aws-cdk/blame/2607eb3a905f735b96713dda4f32d28d10d686fd/packages/aws-cdk-lib/aws-stepfunctions-tasks/lib/aws-sdk/call-aws-service.ts#L93-L97
• synthetics: canary name can be up to 255 characters (#32385) (231e1bf), closes #32376

---

Alpha modules (2.173.0-alpha.0)

Features

• redshift-alpha: add support for RA3.large node type (#31637) (ce0e09f), closes #31634

v2.172.0

⚠ BREAKING CHANGES TO EXPERIMENTAL FEATURES

• apigateway: We will be removing deprecated APIGatewayV2 constructs from aws-apigateway module.

Features

• aspects: priority-ordered aspect invocation (#32097) (8ccdff4), closes #21341
• cognito: new cloudFrontEndpoint method for user pool domain without custom resource (#31402) (deeb2ad), closes #31342
• cognito: support for ALLOW_USER_AUTH explicit auth flow (#32273) (c5bcfdc)
• elasticloadbalancingv2: ip address type for both network and application target group (#32189) (7cc5f30)
• events: add filter rules for prefixEqualsIgnoreCase, suffixEqualsIgnoreCase, wildcard, and anythingBut* matches (#32063) (0ce71fc), closes #28462
• lambda-nodejs: add bun support (#31770) (aed8ad1), closes #31753 #31753
• rds: limitless database cluster (#32151) (f4c19c7)
• ses: add support to disable account-level suppression list (#32168) (bb50c1a), closes #32149
• update L1 CloudFormation resource definitions (#32272) (421d327)
• update L1 CloudFormation resource definitions (#32356) (9e6bb24)
• route53-targets: add AppSync route53 target (#31976) (dc7574a), closes #26109

Bug Fixes

• apigateway: remove deprecated apigatewayv2 from aws-apigateway module (#32297) (4db9565)
• appsync: appsync.HttpDataSourceProps erroneously extends BaseDataSourceProps (#32065) (4e7f5c4), closes #29689
• cli: assume role calls are skipping the proxy (#32291) (6c0f74e)
• cli: lambda hotswap fails if lambda:GetFunctionConfiguration action is not allowed (#32301) (be000a2), closes #32219
• cli: mfa code is not requested when $AWS_PROFILE is used (#32313) (6458439), closes #32312
• cli: remove source maps (#32317) (512cf95), closes #19930 #19930
• cli: short-lived credentials are not refreshed (#32354) (058a0bf)
• cli: warns about missing --no-rollback flag that is present (#32309) (559d676), closes #32295
• cloudformation-include: drops unknown policy attributes (#32321) (20edc7f)
• cloudfront: propagate originAccessControlId CloudFront Origin property to CloudFormation templates (#32020) (f9708a6), closes #32018
• iam: Role.addManagedPolicy() does not work for imported roles IRole (#31212) (c78ef1b), closes #8307

---

Alpha modules (2.172.0-alpha.0)

Features

• ec2: default BastionHostLinux to use Amazon Linux 2023 (under feature flag) (#31996) (bf77e51), closes #29493 #29493
• ec2: instance support passing IAM instance profile (#32073) (cf89d0f), closes #8348
• neptune: auto minor version upgrade for an instance (#31988) (d95db49)
• pipes: add LogDestination implementation (#31672) (af5345e), closes #31671
• pipes-targets: add API Gateway (#31954) (c77536f)
• redshift: execute resource action (#31995) (40835a0)

Bug Fixes

• scheduler-targets-alpha: incorrect validation of maximumEventAge (#32284) (2eebc59)

v2.171.1

Bug Fixes

• cli: lambda hotswap fails if lambda:GetFunctionConfiguration action is not allowed (#32301) (a073e93), closes /github.com/aws/aws-sdk-js-v3/blob/main/clients/client-lambda/src/waiters/waitForFunctionUpdatedV2.ts#L10 /github.com/aws/aws-sdk-js-v3/blob/main/clients/client-lambda/src/waiters/waitForFunctionUpdated.ts#L13

---

Alpha modules (2.171.1-alpha.0)

v2.171.0

Features

• rds: enhanced monitoring configuration at the cluster level (#32157) (01f2dcd), closes #32151
• rds: support zero ACU for Aurora Serverless V2 (#32231) (d1b07d9)

Bug Fixes

• cli: sso with proxy fails (#32261) (bedcf16)

---

Alpha modules (2.171.0-alpha.0)

v2.170.0

Features

• lambda: support for Provisioned Pollers (#32205) (68b969e)
• vpcv2: vpc peering connection construct (#31645) (e1195f9), closes RFC#507 1#L252

Bug Fixes

• cli: sts retry options are ignored (#32227) (193ab8c)

Reverts

• "fix(ecr): allow creating repository uri to use tokens like cfn params" (#32241) (b3e39a9), closes #32238

---

Alpha modules (2.170.0-alpha.0)

v2.169.0

Features

• cloudfront: add attachWebAclId method for Distribution (#30567) (cbe2bec)
• update L1 CloudFormation resource definitions (#32223) (5d61a1b)
• sns: add delivery policy to sns subscriptions (#30830) (27babe6), closes #17576

Bug Fixes

• cli: cannot assume a doubly-chained role (#32216) (8746e44)
• cli: proxy is not configured correctly (#32213) (ec58c77)
• s3: key rotation is not enabled while creating KMS encrypted S3 buckets (#32064) (e3024fc), closes #31982

---

Alpha modules (2.169.0-alpha.0)

Features

• location: support Map (#30648) (98b801c), closes #30647
• scheduler: scheduler and scheduler-targets modules are now in Developer Preview (#32207) (8776832), closes #31785

Bug Fixes

• location: underscores are not allowed in the name (#32046) (f6ad9c9)

v2.168.0

Features

• cloudfront: function URL origin access control L2 construct (#31339) (b8f47c8), closes #31629
• elasticloadbalancingv2: support target group level cross-zone settings for ALB and NLB (#31814) (6b0b1e1), closes #31790
• lambda: add NodeJS 22.x support (#32104) (baa8561)
• lambda: support observability for ESM ( DDB, Kinesis, SQS) (#32204) (6317a2a)
• lambda-destinations: support Lambda async S3 destination (#31709) (e1a2f68)
• ses: maximum delivery time for emails (#32102) (771eeff)
• update L1 CloudFormation resource definitions (#32175) (6820c62)
• rds: support 8.0.40 engine version for RDS for MySQL (#32117) (dcb5cf1)
• stepfunctions-tasks: create scheduler (#29458) (d14a01c), closes #29351

Bug Fixes

• cdk: remove source-map-support from typescript init templates (#32113) (d5c0aa2), closes #20754 #30231
• cdk: use built-in source map support (#32115) (5d499dc)
• cli: cdk diff always falls back to template only diff (#32165) (089e9d8)
• cli: excessive stack event polling during deployment (#32196) (a8bc46d), closes /github.com/aws/aws-cdk/blob/7bb9203eb95fe894c0d40942ff49c782a9fec251/packages/aws-cdk/lib/api/util/cloudformation/stack-event-poller.ts#L73-L74
• cli: externally managed stack notification arns are deleted on deploy (#32163) (9966f57)
• cli: failure to get credentials when session token is not set (#32134) (9ef4e72)
• cli: region specified in ~/.aws/credentials is ignored (#32133) (d1b3c81), closes #32130
• cli: the LoadBalancerProvider doesn't match LBs when querying by a subset of tags (#32164) (f75dc72)
• eks: eks.AccessEntryType.STANDARD maps to a wrong value (#31147) (1bbb456)

---

Alpha modules (2.168.0-alpha.0)

Bug Fixes

• scheduler-targets-alpha: imported target resources as schedule target throws synth error (#32105) (1a8306f), closes #31785 /github.com/aws/aws-cdk/pull/29615#issuecomment-2417858246
• scheduler-targets-alpha: kinesis data firehose target uses l1 instead of l2 (#32150) (11384f0), closes #31785
• scheduler-targets-alpha: scope down permissions for sqs and kinesis stream targets (#32122) (6bb142e), closes #31785

v2.167.2

Bug Fixes

• cli: cdk diff always falls back to template only diff (#32165) (3fd9699)
• cli: externally managed stack notification arns are deleted on deploy (#32163) (465da31)
• cli: the LoadBalancerProvider doesn't match LBs when querying by a subset of tags (#32164) (a0b47c5)

---

Alpha modules (2.167.2-alpha.0)