AWS Cloud Development Kit (AWS CDK) Files

Features

• opensearch: update default TLS security policy to TLS 1.2 for OpenSearch domains (#34660) (3cc2dc2), closes #34658
• update L1 CloudFormation resource definitions (#34659) (ef02724)
• update L1 CloudFormation resource definitions (#34687) (025c82e)
• appconfig: support customer managed key for hosted configuration (#34256) (484719e)
• codepipeline-actions: native Amazon EC2 deployment support (#33604) (9d39db7), closes #33584 /docs.aws.amazon.com/codepipeline/latest/userguide/action-reference-EC2Deploy.html#action-reference-EC2
• core: support adding additional cache key to cdk context values (#31586) (8848134), closes #26982
• core: throw typed Errors (#34587) (4e63b1a), closes #32569
• eks: added support for bootstrapSelfManagedAddons (#33597) (cedc1b0), closes #30792
• rds: DatabaseInstanceFromSnapshot support clusterSnapshotIdentifier (#33982) (48d30b6), closes #33889
• rds: support auto-pause configuration for Aurora Serverless v2 (#34173) (2c55c28), closes #32280 #32563
• stepfunctions: add support for Jsonata expressions to Map.ItemSelector (#34625) (dc30faa), closes #34538 /github.com/aws/aws-cdk/blob/ed08f3f0b8ecd79a2fa5e804acc73a9ff23eab80/packages/aws-cdk-lib/aws-stepfunctions/lib/states/map-base.ts#L60-L77
• synthetics: playwright 2.0 runtime (#34609) (1418204)
• synthetics: safe canary update (#34608) (89c5350)

Bug Fixes

• export errors to make it available in region-info/lib/fact.ts (#34691) (5c8f50c), closes #34690 #34690 #33384
• apigateway: correct JsonSchema.additionalItems property type (#33879) (464d521), closes #33878 #33878
• cloudfront: use wildcard when grant some cloudfront permission (#33802) (452a5e1), closes #33249
• lambda: disable aws-lambda:useCdkManagedLogGroup feature flag when not set (#34613) (d696688), closes #34612 #34612
• logs: exposed metric from the metric filter will now include the dimension map (#34648) (892b013), closes #34643
• opensearch: opensearchservice: existing integ test is failing (#34680) (be21625), closes 1#L59
• typo in jsdoc of noncurrentVersionTransitions property (#34620) (ed08f3f)

Alpha modules (2.201.0-alpha.0)

Features

• amplify: add skew protection feature for Amplify branches (#34656) (8808998)
• bedrock: adding bedrock l2 construct features (#34065) (a028927)
• ec2: add interface VPC endpoint for DSQL (#34487) (3e53c2c)
• ec2: support Firehose IDeliveryStream as flow log destination (#34596) (cdfe6e7), closes #33883 #33757
• ec2: volume initialization rate for EBS volume (#34570) (527d483)

Reverts

• ec2: support Firehose IDeliveryStream as flow log destination (#34665) (b77bd0e), closes [#34596]