v2.179.0

⚠ BREAKING CHANGES TO EXPERIMENTAL FEATURES

• eks: kubectlLayer property is now required in EKS Cluster and FargateCluster constructs. The default value for kubectlLayer is outdated and hence being removed. You can specify your own kubectlLayer version based on your Kubernetes version.

Features

• reset L1 CloudFormation resource definitions to last known working version (#33481)
• cloudtrail: throw ValidationErrors instead of untyped Errors (#33455) (11a75b2), closes #32569
• update L1 CloudFormation resource definitions (#33445) (531280f)
• update L1 CloudFormation resource definitions (#33475) (a7cacb8)
• update L1 CloudFormation resource definitions (#33476) (3a61695)
• update L1 CloudFormation resource definitions (#33480) (67e596e)
• apigateway: resource policy configuration for private API (#32719) (628e649), closes #31660 #31692
• apigatewayv2: stage support detailedMetricsEnabled property (#33267) (0abcacf), closes #33222
• apigatewayv2-integrations: sqs integrations (#29646) (775c009), closes #24785
• appconfig: throw ValidationError instead of untyped Errors (#33386) (b4efb1e), closes #32569
• assertions: throw typed errors (#33382) (0f57bd3), closes #32569
• assets: throw ValidationError instead of untyped Errors (#33383) (19cf902), closes #32569
• autoscaling: throw ValidationError instead of untyped Errors (#33388) (d3f3309), closes #32569
• backup: throw ValidationError instead of untyped Errors (#33387) (48f2bf7), closes #32569
• batch: throw ValidationError instead of untyped Errors (#33389) (c83ca82), closes #32569
• certificatemanager: throw ValidationErrors instead of untyped Errors (#33440) (76848e4), closes #32569
• chatbot: throw ValidationError instead of untyped Error (#33439) (ede5842), closes #32569
• cloudformation-include: throw ValidationError instead of untyped Errors (#33391) (92a9a73), closes #32569
• cloudfront: throw ValidationErrors instead of untyped Errors (#33438) (c08c7f0), closes #32569
• codebuild: attribute-based compute type for Fleet (#32251) (9fd62cb)
• codepipeline-actions: support commands action (#31667) (2637d46), closes #31666
• cognito: add analyticsConfiguration to UserPoolClient (#32862) (1c98881), closes #32837
• cognito: choice-based authentication (passwordless sign-in / passkey sign-in) (#32369) (9a6e5cc), closes #32265 #32367 #32273
• cx-api: throw CloudAssemblyError instead of untyped Errors (#33390) (ae95d95), closes #32569
• eks: add L2 constructs to support EKS Hybrid Nodes (#32389) (b91965c)
• eks: make kubectlLayer property required from optional (#32930) (b11f663), closes /github.com/aws/aws-cdk/blob/main/packages/aws-cdk-lib/package.json#L123
• eks: support eks with k8s 1.32 (#33339) (3490d2e)
• elasticloadbalancingv2: minimum Loadbalancer Capacity Unit (LCU) reservation (#32382) (9b178c1)
• events-targets: allow all ECS TaskOverrides (#32344) (aebb331), closes #32217 #32217 /github.com/aws/aws-cdk/blob/1b7265bf5cc623b2e362266c96ce866df539581f/packages/aws-cdk-lib/aws-events-targets/lib/ecs-task.ts#L225-L227
• logs: support regex patterns for JSON Metrics filters (#30741) (c89afe3), closes #30451
• pipelines: throw ValidationError instead of untyped Errors (#33385) (14b1098), closes #32569
• stepfunctions-tasks: allow region override in call-rest-api task (#33252) (59470c5)
• update L1 CloudFormation resource definitions (#33363) (ba485ef), closes /docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-ec2-security-group.html#cfn-ec2
• rds: support Database Insights for Aurora databases (#32851) (f6ed4be), closes #32680

Bug Fixes

• cli: cdk diff fails when deploy role requires tags (#33340) (f1d9a7d)
• cli: do not print credentials refreshed by plugins (#33398) (a7d7373), closes #33394 #33394
• cli: init templates still assume the same versions (#33449) (523e0f0)
• cli: old setInterval remains and is not cleared in garbage collection (#32985) (a2166e2), closes #32742 /github.com/aws/aws-cdk/blob/899965d6147829b8f8ac52ac8c1350de50d7b6d0/packages/aws-cdk/lib/api/garbage-collection/progress-printer.ts#L44
• eks: cluster.addHelmChart ignores skipCrds (#31832) (ee63467), closes #31831
• opensearchservice: wrong iops limit checks (#33401) (1d15d49), closes #29711
• do not skip bundling for stacks during CDK Import, otherwise fails (#33322) (5160796), closes #31999 #31677 #31999 #31677 #9540 #17666
• lambda-event-sources: SelfManagedKafkaEventSource cannot be used in NPM symlinked workspaces (#32937) (fe656af)
• stepfunctions-tasks: CallAwsServiceCrossRegion doesn't work with WAIT_FOR_TASK_TOKEN (#32807) (800b775), closes #32746 /github.com/aws/aws-cdk/blob/bbdd42c8f45916d5c6945f3429916f6199d2ec66/packages/aws-cdk-lib/aws-stepfunctions-tasks/lib/lambda/invoke.ts#L146-L165
• stepfunctions-tasks: CallAwsServiceCrossRegion doesn't work with WAIT_FOR_TASK_TOKEN (cbd8ecf)
• vpc: typo VPC Endpoint Payment Cryptography (#33018) (51e671f), closes #33017

---

Alpha modules (2.179.0-alpha.0)

⚠ BREAKING CHANGES TO EXPERIMENTAL FEATURES

• cognito-identitypool-alpha: The IdentityPoolRoleAttachment construct and IdentityPool.addRoleMappings() function will no longer exist. This is to disambiguate that only one role attachment can exist per Identity Pool. If you are using the IdentityPool construct, this change will trigger a redeployment. If you need to add role mappings, please do so when the IdentityPool is created.

Features

• eks-v2-alpha: support eks with k8s 1.32 (#33344) (7175a04)
• ivs: support Multitrack Video (#33370) (29d1945)

Bug Fixes

• cognito-identitypool-alpha: remove RoleAttachment construct (#33305) (9449f9c), closes #23449
• integ-tests: http flattenResponse (#30361) (4744ee5), closes #30327
• msk: allow both sasl/scram and iam auth (#31743) (fbcb732), closes /github.com/aws/aws-cdk/pull/14647#issuecomment-2129517358 #32779