Sourced from software.amazon.awscdk:aws-cdk-lib's releases.

v2.215.0

Features

• 33270: support new bun lock file (#34873) (0a55ed1), closes #33270
• codebuild: support remote Docker server (#34976) (eb8e74b), closes #34494
• update L1 CloudFormation resource definitions (#35435) (d7f211f)
• batch: ecs execute command (#35341) (30722f2)
• custom-resource: upgrade to python runtime 3.13 for custom resources (#35342) (3db140e)
• rds: add DatabaseProxyEndpoint L2 construct (#35064) (04d8a95), closes #14186
• stepfunctions-tasks: add Node.js 22 support to EvaluateExpression (#35370) (640821d), closes #35353
• synthetics: browser type for canary (#35423) (fe0708b)
• new resource interfaces shared by both L1s and L2s (#35032) (5e8c0d5)

Bug Fixes

• correct typo 'notfication' to 'notification' in Stack docstring (#35455) (bfb54b0), closes #35433
• ecr-assets: TarballImageAsset respects CDK_DOCKER environment variable (#35344) (8bf6b00), closes #35336
• s3: scope BucketNotificationsHandler IAM permissions to specific bucket ARNs (#35334) (c0300d2), closes #35331
• stepfunctions: incorrect/missing permissions to run/redrive DistributedMap in state machine (#34760) (bbebb79), closes #35390 aws/aws-cdk#28820 /github.com/aws/aws-cdk/blob/aea1372ab7bc68c489cea5ee5e499233755910e8/packages/aws-cdk-lib/aws-stepfunctions/lib/state-graph.ts#L178-L180
• stepfunctions: unable to run distributed map when only defined in nested StateGraphs (#35417) (036b413), closes #35391 aws/aws-cdk#34760

---

Alpha modules (2.215.0-alpha.0)

Bug Fixes

• bedrock-alpha: added missing validation when prompt uses default variant (#35366) (cbd271e)

v2.214.0

CHANGES TO L1 RESOURCES

• L1 resources are automatically generated from public CloudFormation Resource Schemas. They are build to closely reflect the real state of CloudFormation. Sometimes these updates can contain changes that are incompatible with previous types, but more accurately reflect reality. In this release we have changed:

  • aws-ecs: AWS::ECS::Service: AvailabilityZoneRebalancing property default value changed from "ENABLED" to "DISABLED".

Features

• acm: add support for ACM exportable public certificates (#35079) (c158e80), closes #35078
• cloudwatch: add option to show labels on pie chart (#34745) (83f0a61), closes #28929
• cognito: support refresh token rotation (#34360) (74f8ad9), closes #34344
• core: DockerBuildOptions support network param (#34725) (bc333e2), closes #34514
• dynamodb: adding ContributorInsightsMode feature (#35332) (f12ead2)
• rds: retain automated backups for database cluster (#35372) (2ffc666)
• update L1 CloudFormation resource definitions (#35320) (0d674e4)
• update L1 CloudFormation resource definitions (#35382) (8f708df)
• ecs: volume initialization rate (#34962) (b8dfbc4)
• events: enable customer managed keys to be used with Archive (#35253) (9f5e507)
• sns: add notExistsCondition method (#34712) (fd8677b), closes #34707

Bug Fixes

... (truncated)

Sourced from software.amazon.awscdk:aws-cdk-lib's changelog.

Changelog

All notable changes to this project will be documented in this file. See standard-version for commit guidelines.

2.215.0-alpha.0 (2025-09-15)

Bug Fixes

• bedrock-alpha: added missing validation when prompt uses default variant (#35366) (cbd271e)

2.214.0-alpha.0 (2025-09-02)

Features

• bedrock-alpha: add guardrails l2 construct (#34765) (b4fdb2b)
• eks-v2-alpha: support eks with k8s 1.33 (#34713) (c24565e), closes #34520 #34911
• s3tables-alpha: add TablePolicy support to L2 construct library (#35223) (2741dfb), closes #33054

2.213.0-alpha.0 (2025-08-27)

Features

• s3tables-alpha: add TablePolicy support to L2 construct library (#35223) (a4aad78), closes #33054

2.212.0-alpha.0 (2025-08-20)

2.211.0-alpha.0 (2025-08-12)

2.210.0-alpha.0 (2025-08-06)

Features

• glue-alpha: add optional metrics control for cost optimization (#35154) (6e24133), closes #35149

2.209.1-alpha.0 (2025-08-06)

Bug Fixes

• eks-v2-alpha: fix helm commands not running ecr public login (#35162) (6c2a8b8)

2.209.0-alpha.0 (2025-08-05)

2.208.0-alpha.0 (2025-07-29)

... (truncated)

• 8224997 chore(release): 2.215.0 (#35490)
• 89c05f8 chore: update analytics metadata blueprints
• 90ce057 chore(release): 2.215.0
• 3384724 docs: correct spelling of "separate" in comments (#35484)
• 0a55ed1 feat(33270): support new bun lock file (#34873)
• c5c6b8b chore(ec2): add i8ge instance class (#35431)
• 01da2c9 chore(lambda): handle Runtime.ALL correctly in LayerVersion compatibleRuntime...
• cecbabf chore: change PYTHON_LATEST from static versioning to a function (#35461)
• 0565b4f docs: do not disclaim custom synthesis (#35457)
• eb8e74b feat(codebuild): support remote Docker server (#34976)
• Additional commits viewable in compare view

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)