Sourced from aws-cdk-lib's releases.

v2.200.0

Features

• update L1 CloudFormation resource definitions (#34594) (1e37ee7)
• custom-resources: throw ValidationError instead of untyped Errors (#33392) (1dacaa3), closes #32569
• ec2: implement IPeer to PrefixList to be usable as a connection peer (#33617) (c277419), closes #33607
• iam: introduce OidcProviderNative construct utilizing the native CloudFormation resource (#28634) (d8e6c09), closes #21197
• iam: throw ValidationErrors instead of untyped errors (#34579) (bd5caba), closes #32569
• lambda: allow propagating function tags to loggroup (#34556) (f556fd1)
• lambda: throw ValidationErrors instead of untyped errors (#34577) (6ccdd81), closes #32569
• region-info: throw ValidationError instead of untyped Errors (#33384) (303daf2), closes #32569
• s3: add grantReplicationPermission for IAM Role permissions (#34138) (bfa6490), closes #34119
• secretsmanager: throw ValidationErrors instead of untyped errors (#34580) (4d591ef), closes #32569
• servicecatalog: throw ValidationErrors instead of untyped errors (#34581) (3895d76), closes #32569
• sns-subscriptions: support Amazon Data Firehose subscription (#33811) (632179c), closes #14391
• stepfunctions: add grant API for RedriveExecution (#34554) (e03939d), closes #33578

Bug Fixes

• ec2: validate throughput property on EC2 instance block devices (#34571) (b31580a), closes #34033
• elasticloadbalancingv2: fix incorrect max for minimumCapacityUnit (#34586) (8f19b26), closes #34582

---

Alpha modules (2.200.0-alpha.0)

Features

• msk: support Kafka 4.0 (#34501) (aa40e38)

Sourced from aws-cdk-lib's changelog.

Changelog

All notable changes to this project will be documented in this file. See standard-version for commit guidelines.

2.200.0-alpha.0 (2025-06-02)

Features

• msk: support Kafka 4.0 (#34501) (aa40e38)

2.199.0-alpha.0 (2025-05-27)

2.198.0-alpha.0 (2025-05-22)

⚠ BREAKING CHANGES TO EXPERIMENTAL FEATURES

• amplify: A compute role is created when platform is Platform.WEB_COMPUTE or Platform.WEB_DYNAMIC.

Features

• amplify: add compute role support for Amplify app (#33962) (7490b92), closes #33882
• ec2: add i7i instance class (#34453) (3fe8ab4)

2.197.0-alpha.0 (2025-05-20)

2.196.1-alpha.0 (2025-05-19)

2.196.0-alpha.0 (2025-05-15)

Features

• msk: support Kafka versions 3.9.x and 3.9.x Kraft (#34213) (a1226db)
• pipes-targets: add SNS (#34159) (2f846b3)
• s3tables: server-side encryption by customer managed KMS key (#34229) (488f0db)

Bug Fixes

• ec2: dual-stack vpc without private subnets creates EgressOnlyInternetGateway (under feature flag) (#34437) (35e818b), closes #30981
• ec2-alpha: fix resource id references and tags for migration behind feature flag (#34377) (aa73534)

2.195.0-alpha.0 (2025-05-07)

⚠ BREAKING CHANGES TO EXPERIMENTAL FEATURES

• iot: By default, deviceDertificateAgeCheck is automatically enabled.

... (truncated)

• 3b0ccb1 chore(release): 2.200.0 (#34607)
• 485ca62 chore: update CHANGELOG.v2.md
• b708239 chore: update CHANGELOG.v2.alpha.md
• 83c2e82 chore: update analytics metadata blueprints
• 905840a chore(release): 2.200.0
• 1e37ee7 feat: update L1 CloudFormation resource definitions (#34594)
• aa40e38 feat(msk): support Kafka 4.0 (#34501)
• 3f35c70 chore(deps): bump dawidd6/action-download-artifact from 9 to 10 (#34604)
• e03939d feat(stepfunctions): add grant API for RedriveExecution (#34554)
• 632179c feat(sns-subscriptions): support Amazon Data Firehose subscription (#33811)
• Additional commits viewable in compare view

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)