Sourced from software.amazon.awscdk:aws-cdk-lib's releases.

v2.220.0

⚠ BREAKING CHANGES

---

L1 resources are automatically generated from public CloudFormation Resource Schemas. They are built to closely reflect the real state of CloudFormation. Sometimes these updates can contain changes that are incompatible with previous types, but more accurately reflect reality. In this release we have changed:

• aws-neptune: AWS::Neptune::EventSubscription: SnsTopicArn property is now required.
• aws-neptune: AWS::Neptune::EventSubscription: Id attribute removed.
• aws-servicecatalog: AWS::ServiceCatalog::PortfolioShare: Id attribute removed.
• aws-lex: AWS::Lex::ResourcePolicy: ResourceArn property is now immutable.

Co-authored-by: aws-cdk-automation aws-cdk-automation@users.noreply.github.com

---

Features

• batch: ec2 Managed Compute Environment support default instance classes, deprecate useOptimalInstanceClasses (#35537) (9d59dd8), closes #35515
• kinesis: shard-level metrics for stream (#34963) (ce9b3a8)
• lambda: refactor Function URL permissions (#35725) (d38d015)
• update L1 CloudFormation resource definitions (#35679) (dec6e6a)
• update L1 CloudFormation resource definitions (#35695) (8a6cf46)
• update L1 CloudFormation resource definitions (#35712) (27a8760)
• amplify: support build compute type (#34796) (a02c656)
• cloudfront-origins: add ipAddressType property to Lambda Function URL origins (#35458) (6cf6dc8), closes #35450
• ec2: add BEDROCK_AGENTCORE and BEDROCK_AGENTCORE_GATEWAY to InterfaceVpcEndpointAwsService (#35667) (6966c03)
• ec2: support for automatic VPN session reconnect on client VPN endpoint (#35538) (9536472)
• eks: add removal policy support for EKS cluster construct (#35560) (4b4e322), closes #25544
• logs: add parameter to allow metric filter on transformed logs (#35359) (effa46d)
• opensearch: add OpenSearch 3.1 engine version (#35477) (3bd7cf9), closes #35471
• route53: add fromPrivateHostedZoneAttributes function to PrivateHostedZone (#35552) (c8d7a79), closes #23268
• synthetics: allow root level canary scripts files for Puppeteer versions 11 and greater (#35426) (46fb2dc)

Bug Fixes

• cloudwatch: metric period in AnomalyDetectionAlarm is not being respected (#35319) (c7d8004), closes #34614 /github.com/aws/aws-cdk/blob/6966c03b1a7aece0846f5a91bbeb825cd7491689/packages/aws-cdk-lib/aws-cloudwatch/lib/private/alarm-options.ts#L16-L18 /github.com/aws/aws-cdk/blob/86638f6daca6ead382d0b9c1cf65bb04f70d4b3d/packages/aws-cdk-lib/package.json#L32 aws/aws-cdk#35319
• ecs: update task definition validations for managed instances (#35684) (8638a78), closes #35644
• lambda-nodejs: bump bun to 1.2.23 for ARM64 support (#35702) (3aa186c), closes #35534
• s3: resolve synthesis error in BucketPolicy.fromCfnBucketPolicy() (#35633) (d9085cc), closes #34322
• s3tables: s3 table bucket read access role uses incorrect permission for s3tables:ListNamespaces (#35420) (eb949bb)

---

Alpha modules (2.220.0-alpha.0)

Bug Fixes

• amplify-alpha: handle empty customResponseHeaders array (#35700) (57f9068), closes #35693

v2.219.0

⚠ BREAKING CHANGES

• ** L1 resources are automatically generated from public CloudFormation Resource Schemas. They are built to closely reflect the real state of CloudFormation. Sometimes these updates can contain changes that are incompatible with previous types, but more accurately reflect reality. In this release we have changed:

... (truncated)

Sourced from software.amazon.awscdk:aws-cdk-lib's changelog.

Changelog

All notable changes to this project will be documented in this file. See standard-version for commit guidelines.

2.220.0-alpha.0 (2025-10-14)

Bug Fixes

• amplify-alpha: handle empty customResponseHeaders array (#35700) (57f9068), closes #35693

2.219.0-alpha.0 (2025-10-01)

2.218.0-alpha.0 (2025-09-29)

• elasticache-alpha: implement Serverless ElastiCache L2 Construct (#35424) (0e08c8c)

2.217.0-alpha.0 (2025-09-25)

2.216.0-alpha.0 (2025-09-22)

2.215.0-alpha.0 (2025-09-15)

Bug Fixes

• bedrock-alpha: added missing validation when prompt uses default variant (#35366) (cbd271e)

2.214.0-alpha.0 (2025-09-02)

Features

• bedrock-alpha: add guardrails l2 construct (#34765) (b4fdb2b)
• eks-v2-alpha: support eks with k8s 1.33 (#34713) (c24565e), closes #34520 #34911
• s3tables-alpha: add TablePolicy support to L2 construct library (#35223) (2741dfb), closes #33054

2.213.0-alpha.0 (2025-08-27)

Features

• s3tables-alpha: add TablePolicy support to L2 construct library (#35223) (a4aad78), closes #33054

2.212.0-alpha.0 (2025-08-20)

2.211.0-alpha.0 (2025-08-12)

2.210.0-alpha.0 (2025-08-06)

Features

... (truncated)

• b7660ef chore(release): 2.220.0 (#35735)
• fe24cd6 chore: Update CHANGELOG.v2.md
• 7d83121 chore: update CHANGELOG.v2.alpha.md
• 9359e07 chore: update analytics metadata blueprints
• d95e630 chore(release): 2.220.0
• e07b341 chore(ec2): add m8a,c8i,c8i-flex instance class (#35719)
• d38d015 feat(lambda): refactor Function URL permissions (#35725)
• 3ec6d06 ci(mergify): configuration update (#35727)
• 8996c1a ci: add mergify rule for deployment integ tests (#35694)
• 8757a4d chore(deps): bump actions/setup-node from 4 to 5 (#35724)
• Additional commits viewable in compare view

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)