Sourced from aws-cdk-lib's releases.

v2.217.0

Features

• update L1 CloudFormation resource definitions (#35491) (d095f68)
• update L1 CloudFormation resource definitions (#35567) (b0ccf81)

Bug Fixes

• cloudfront: Function ARN reference changed from GetAtt to Ref (#35547) (8a26869), closes #35531
• core: negated gitignore patterns inside subdirectories are not including matched files (#35511) (44781ef), closes #9146 #22002
• kms: Alias reference incorrectly resolves to underlying Key (#35545) (43ffcff), closes #35543
• lambda: function.latestVersion points to wrong ARN (#35546) (761dde2), closes #35545
• rds: cannot use connections in rds.DatabaseInstance.fromLookup (#35193) (973d234), closes #35192

Reverts

• dynamodb: use keyId instead of keyArn for TableV2 replica encryption (#35568) (b1f7f78), closes aws/aws-cdk#35144 #35144 #35551

---

Alpha modules (2.217.0-alpha.0)

Sourced from aws-cdk-lib's changelog.

Changelog

All notable changes to this project will be documented in this file. See standard-version for commit guidelines.

2.217.0-alpha.0 (2025-09-25)

2.216.0-alpha.0 (2025-09-22)

2.215.0-alpha.0 (2025-09-15)

Bug Fixes

• bedrock-alpha: added missing validation when prompt uses default variant (#35366) (cbd271e)

2.214.0-alpha.0 (2025-09-02)

Features

• bedrock-alpha: add guardrails l2 construct (#34765) (b4fdb2b)
• eks-v2-alpha: support eks with k8s 1.33 (#34713) (c24565e), closes #34520 #34911
• s3tables-alpha: add TablePolicy support to L2 construct library (#35223) (2741dfb), closes #33054

2.213.0-alpha.0 (2025-08-27)

Features

• s3tables-alpha: add TablePolicy support to L2 construct library (#35223) (a4aad78), closes #33054

2.212.0-alpha.0 (2025-08-20)

2.211.0-alpha.0 (2025-08-12)

2.210.0-alpha.0 (2025-08-06)

Features

• glue-alpha: add optional metrics control for cost optimization (#35154) (6e24133), closes #35149

2.209.1-alpha.0 (2025-08-06)

Bug Fixes

• eks-v2-alpha: fix helm commands not running ecr public login (#35162) (6c2a8b8)

... (truncated)

• 6ebe130 chore: update analytics metadata blueprints
• b1f7f78 revert(dynamodb): use keyId instead of keyArn for TableV2 replica encryption ...
• b0ccf81 feat: update L1 CloudFormation resource definitions (#35567)
• d095f68 feat: update L1 CloudFormation resource definitions (#35491)
• 2a92664 chore(ec2): add r8gn instance classes (#35536)
• 973d234 fix(rds): cannot use connections in rds.DatabaseInstance.fromLookup (#35193)
• 8a26869 fix(cloudfront): Function ARN reference changed from GetAtt to Ref (#35547)
• 761dde2 fix(lambda): function.latestVersion points to wrong ARN (#35546)
• 43ffcff fix(kms): Alias reference incorrectly resolves to underlying Key (#35545)
• 44781ef fix(core): negated gitignore patterns inside subdirectories are not including...
• See full diff in compare view

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions