Sourced from aws-cdk-lib's releases.

v2.217.0

Features

• update L1 CloudFormation resource definitions (#35491) (d095f68)
• update L1 CloudFormation resource definitions (#35567) (b0ccf81)

Bug Fixes

• cloudfront: Function ARN reference changed from GetAtt to Ref (#35547) (8a26869), closes #35531
• core: negated gitignore patterns inside subdirectories are not including matched files (#35511) (44781ef), closes #9146 #22002
• kms: Alias reference incorrectly resolves to underlying Key (#35545) (43ffcff), closes #35543
• lambda: function.latestVersion points to wrong ARN (#35546) (761dde2), closes #35545
• rds: cannot use connections in rds.DatabaseInstance.fromLookup (#35193) (973d234), closes #35192

Reverts

• dynamodb: use keyId instead of keyArn for TableV2 replica encryption (#35568) (b1f7f78), closes aws/aws-cdk#35144 #35144 #35551

---

Alpha modules (2.217.0-alpha.0)

v2.216.0

Features

• apigatewayv2: add disableSchemaValidation for Websocket api (#35290) (bc391ce)
• cloudfront-origins: response completion timeout (#35485) (7d70bf4)
• elasticloadbalancingv2: support target group health attributes (#33351) (2de6e39), closes #31821
• events: add support for Event Bus Logging Configuration (#35201) (7ceaefb), closes #35000
• route53: add SVCB and HTTPS resource record classes (#34744) (8be219a), closes #34673
• stepfunctions-tasks: EmrCreateClusterOptions support ebsRootVolumeIops, ebsRootVolumeThroughput and managedScalingPolicy (#34677) (b3ad6f9), closes #33431

Bug Fixes

• cloudformation-include: aws::novalue type validation error for non-string properties (#35425) (ce76a56), closes #18420
• kinesisanalytics: deprecate using KinesisAnalyticsV2 from aws-kinesisanalytics, use aws-kinesisanalyticsv2 instead (#35519) (4255b23)
• kms: cannot access aliasTargetKey on an Alias imported by Alias.fromAliasName (#35521) (c0c9933), closes #35520
• secretsmanager: SecretRotationApplication creates lambda on python 3.9 which is EOL (#35528) (756b683), closes #34168
• secretsmanager: secret transformation (#35202) (f4b26af), closes #34168

---

Alpha modules (2.216.0-alpha.0)

Sourced from aws-cdk-lib's changelog.

Changelog

All notable changes to this project will be documented in this file. See standard-version for commit guidelines.

2.217.0-alpha.0 (2025-09-25)

2.216.0-alpha.0 (2025-09-22)

2.215.0-alpha.0 (2025-09-15)

Bug Fixes

• bedrock-alpha: added missing validation when prompt uses default variant (#35366) (cbd271e)

2.214.0-alpha.0 (2025-09-02)

Features

• bedrock-alpha: add guardrails l2 construct (#34765) (b4fdb2b)
• eks-v2-alpha: support eks with k8s 1.33 (#34713) (c24565e), closes #34520 #34911
• s3tables-alpha: add TablePolicy support to L2 construct library (#35223) (2741dfb), closes #33054

2.213.0-alpha.0 (2025-08-27)

Features

• s3tables-alpha: add TablePolicy support to L2 construct library (#35223) (a4aad78), closes #33054

2.212.0-alpha.0 (2025-08-20)

2.211.0-alpha.0 (2025-08-12)

2.210.0-alpha.0 (2025-08-06)

Features

• glue-alpha: add optional metrics control for cost optimization (#35154) (6e24133), closes #35149

2.209.1-alpha.0 (2025-08-06)

Bug Fixes

• eks-v2-alpha: fix helm commands not running ecr public login (#35162) (6c2a8b8)

... (truncated)

• 789bb11 chore(release): 2.217.0 (#35572)
• 6ebe130 chore: update analytics metadata blueprints
• 9c356c9 chore(release): 2.217.0
• b1f7f78 revert(dynamodb): use keyId instead of keyArn for TableV2 replica encryption ...
• b0ccf81 feat: update L1 CloudFormation resource definitions (#35567)
• d095f68 feat: update L1 CloudFormation resource definitions (#35491)
• 2a92664 chore(ec2): add r8gn instance classes (#35536)
• 973d234 fix(rds): cannot use connections in rds.DatabaseInstance.fromLookup (#35193)
• 8a26869 fix(cloudfront): Function ARN reference changed from GetAtt to Ref (#35547)
• 761dde2 fix(lambda): function.latestVersion points to wrong ARN (#35546)
• Additional commits viewable in compare view

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)