v1.48.0

⚠ BREAKING CHANGES

• stepfunctions-tasks: containerName is not supported as an override anymore and has been replaced by containerDefinition
• stepfunctions-tasks: EvaluateExpression is now a construct representing a task state rather than an embedded property called task
• backup: existing vaults that use a generated name will be replaced but
  existing recovery points won't be lost. The default vault removal policy is
  RETAIN and if it was set to DESTROY the deployment will fail because
  vault with recovery points cannot be deleted.

Features

• autoscaling: bring your own security group (3698f47)
• aws-cloudwatch: add comparison operators (#8812) (7003a09), closes #8808
• cfn-include: add support for YAML templates (#8746) (293a937), closes #8745
• cfnspec: cloudformation spec v16.0.0 (#8807) (4ce27f4)
• cli: support multiple verbosity levels (#8749) (fa4196b)
• ec2: Volume construct (#8219) (7490dee)
• ec2: add 6xlarge InstanceSize (#8701) (4917c04)
• ec2: natGateways=0 disables private subnets (#8817) (7f432ff), closes #4814
• efs: Filesystem.addAccessPoint() (#8737) (127547a)
• lambda-nodejs: external and install modules (#8681) (401594e), closes #6323 #7912
• secretsmanager: add grantUpdate method (#8600) (4e72d1e), closes #8491
• stepfunctions: class for working with Json paths to retrieve state machine data and context (#8647) (67978a1)
• stepfunctions-tasks: evaluate expression as a task construct (#8555) (83fd2ae)
• stepfunctions-tasks: task construct to call RunJob on ECS (#8451) (13deb26), closes #8610

Bug Fixes

• apigateway: error defining lambda integration on imported RestApi (#8785) (05aaf42), closes #8679
• backup: correctly validate Vault name (#8689) (07b330c)
• backup: vault name may exceed 50 characters (#8653) (d09c121), closes #8627
• batch: Invalid spot fleet service role (#8325) (034bc35), closes #6706
• cli: post install warnings are not clearly visible when running cdk init (#8723) (2662db3), closes #8720
• cli: unable to use "legacy" bootstrap with --public-access-block-configuration=false (#8755) (88f8e1e), closes #8728
• cognito: cannot add multiple route53 targets to the same user pool domain (#8622) (32b54a5), closes #8603
• core: bundling directory access permission is too restrictive (#8767) (1842168), closes #8757
• eks: Helm chart timeout expects duration (#8773) (d1c2ef2), closes #8718
• elbv2: Add missing accounts to ELBv2 Log Delivery. (#8715) (8914899)
• rewrite: script ignores list of files (#8777) (bb514c1)
• route53-targets: A/AAAA Alias Record to ELB cannot resolve IPv6 addresses (#8747) (87e2651), closes #6271
• s3-notifications: broken permissions query in LambdaDestination (#8741) (10bd8e4), closes #8538