Sourced from aws-cdk-lib's releases.

v2.201.0

Features

• opensearch: update default TLS security policy to TLS 1.2 for OpenSearch domains (#34660) (3cc2dc2), closes #34658
• update L1 CloudFormation resource definitions (#34659) (ef02724)
• update L1 CloudFormation resource definitions (#34687) (025c82e)
• appconfig: support customer managed key for hosted configuration (#34256) (484719e)
• codepipeline-actions: native Amazon EC2 deployment support (#33604) (9d39db7), closes #33584 /docs.aws.amazon.com/codepipeline/latest/userguide/action-reference-EC2Deploy.html#action-reference-EC2
• core: support adding additional cache key to cdk context values (#31586) (8848134), closes #26982
• core: throw typed Errors (#34587) (4e63b1a), closes #32569
• eks: added support for bootstrapSelfManagedAddons (#33597) (cedc1b0), closes #30792
• rds: DatabaseInstanceFromSnapshot support clusterSnapshotIdentifier (#33982) (48d30b6), closes #33889
• rds: support auto-pause configuration for Aurora Serverless v2 (#34173) (2c55c28), closes #32280 #32563
• stepfunctions: add support for Jsonata expressions to Map.ItemSelector (#34625) (dc30faa), closes #34538 /github.com/aws/aws-cdk/blob/ed08f3f0b8ecd79a2fa5e804acc73a9ff23eab80/packages/aws-cdk-lib/aws-stepfunctions/lib/states/map-base.ts#L60-L77
• synthetics: playwright 2.0 runtime (#34609) (1418204)
• synthetics: safe canary update (#34608) (89c5350)

Bug Fixes

• export errors to make it available in region-info/lib/fact.ts (#34691) (5c8f50c), closes #34690 #34690 #33384
• apigateway: correct JsonSchema.additionalItems property type (#33879) (464d521), closes #33878 #33878
• cloudfront: use wildcard when grant some cloudfront permission (#33802) (452a5e1), closes #33249
• lambda: disable aws-lambda:useCdkManagedLogGroup feature flag when not set (#34613) (d696688), closes #34612 #34612
• logs: exposed metric from the metric filter will now include the dimension map (#34648) (892b013), closes #34643
• opensearch: opensearchservice: existing integ test is failing (#34680) (be21625), closes 1#L59
• typo in jsdoc of noncurrentVersionTransitions property (#34620) (ed08f3f)

---

Alpha modules (2.201.0-alpha.0)

Features

• amplify: add skew protection feature for Amplify branches (#34656) (8808998)
• bedrock: adding bedrock l2 construct features (#34065) (a028927)
• ec2: add interface VPC endpoint for DSQL (#34487) (3e53c2c)
• ec2: support Firehose IDeliveryStream as flow log destination (#34596) (cdfe6e7), closes #33883 #33757
• ec2: volume initialization rate for EBS volume (#34570) (527d483)

Reverts

• ec2: support Firehose IDeliveryStream as flow log destination (#34665) (b77bd0e), closes aws/aws-cdk#34596

Sourced from aws-cdk-lib's changelog.

Changelog

All notable changes to this project will be documented in this file. See standard-version for commit guidelines.

2.201.0-alpha.0 (2025-06-12)

Features

• amplify: add skew protection feature for Amplify branches (#34656) (8808998)
• bedrock: adding bedrock l2 construct features (#34065) (a028927)
• ec2: add interface VPC endpoint for DSQL (#34487) (3e53c2c)
• ec2: support Firehose IDeliveryStream as flow log destination (#34596) (cdfe6e7), closes #33883 #33757
• ec2: volume initialization rate for EBS volume (#34570) (527d483)

Reverts

• ec2: support Firehose IDeliveryStream as flow log destination (#34665) (b77bd0e), closes aws/aws-cdk#34596

2.200.2-alpha.0 (2025-06-11)

2.200.1-alpha.0 (2025-06-03)

2.200.0-alpha.0 (2025-06-02)

Features

• msk: support Kafka 4.0 (#34501) (aa40e38)

2.199.0-alpha.0 (2025-05-27)

2.198.0-alpha.0 (2025-05-22)

⚠ BREAKING CHANGES TO EXPERIMENTAL FEATURES

• amplify: A compute role is created when platform is Platform.WEB_COMPUTE or Platform.WEB_DYNAMIC.

Features

• amplify: add compute role support for Amplify app (#33962) (7490b92), closes #33882
• ec2: add i7i instance class (#34453) (3fe8ab4)

2.197.0-alpha.0 (2025-05-20)

2.196.1-alpha.0 (2025-05-19)

2.196.0-alpha.0 (2025-05-15)

... (truncated)

• 77c6517 feat(opensearch): update default TLS security policy to TLS 1.2 for OpenSearc...
• 9f8eef9 feat: update L1 CloudFormation resource definitions (#34687)
• 0e268f9 docs(ecs): add note for windows tasks CPU/Memory requirement (#34683)
• b5ef88b chore: update dev dependency - aws-sdk-js-codemod (#34542)
• 2e2b34d chore: npm-check-updates && yarn upgrade (#34684)
• 040af1b fix(apigateway): correct JsonSchema.additionalItems property type (#33879)
• 974f710 docs(cloudfront): specify that cloudront does not support updating the key (#...
• b41794d feat(ec2): add interface VPC endpoint for DSQL (#34487)
• ce52a96 feat: update L1 CloudFormation resource definitions (#34659)
• 19436e8 chore(rds): mariadb add versions 10.5.29 and 10.6.22, postgres add versions 1...
• Additional commits viewable in compare view

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions