Description
# Cloud Assembly Schema This module is part of the [AWS Cloud Development Kit](https://github.com/aws/aws-cdk) project. ## Cloud Assembly The *Cloud Assembly* is the output of the synthesis operation. It is produced as part of the [`cdk synth`](https://github.com/aws/aws-cdk-cli/tree/main/packages/aws-cdk#cdk-synthesize) command, or the [`app.synth()`](https://github.com/aws/aws-cdk/blob/main/packages/aws-cdk-lib/core/lib/stage.ts#L219) method invocation. Its essentially a set of files and directories, one of which is the `manifest.json` file. It defines the set of instructions that are needed in order to deploy the assembly directory. > For example, when `cdk deploy` is executed, the CLI reads this file and performs its instructions: > > * Build container images. > * Upload assets. > * Deploy CloudFormation templates. Therefore, the assembly is how the CDK class library and CDK CLI (or any other consumer) communicate. To ensure compatibility between the assembly and its consumers, we treat the manifest file as a well defined, versioned schema. ## Schema This module contains the typescript structs that comprise the `manifest.json` file, as well as the generated [*json-schema*](./schema/cloud-assembly.schema.json). ## Versioning The schema version is specified my the major version of the package release. It follows semantic versioning, but with a small twist. When we add instructions to the assembly, they are reflected in the manifest file and the *json-schema* accordingly. Every such instruction, is crucial for ensuring the correct deployment behavior. This means that to properly deploy a cloud assembly, consumers must be aware of every such instruction modification. For this reason, every change to the schema, even though it might not strictly break validation of the *json-schema* format, is considered `major` version bump. All changes that do not impact the schema are considered a `minor` version bump. ## How to consume If you'd like to consume the [schema file](./schema/cloud-assembly.schema.json) in order to do validations on `manifest.json` files, simply download it from this repo and run it against standard *json-schema* validators, such as [jsonschema](https://www.npmjs.com/package/jsonschema). Consumers must take into account the `major` version of the schema they are consuming. They should reject cloud assemblies with a `major` version that is higher than what they expect. While schema validation might pass on such assemblies, the deployment integrity cannot be guaranteed because some instructions will be ignored. > For example, if your consumer was built when the schema version was 2.0.0, you should reject deploying cloud assemblies with a > manifest version of 3.0.0. ## Contributing See [Contribution Guide](./CONTRIBUTING.md)
Release History
| Version | Changes | Urgency | Date |
|---|---|---|---|
| 53.17.0 | Imported from PyPI (53.17.0) | Low | 4/21/2026 |
| v2.250.0 | ### ⚠ BREAKING CHANGES * ** L1 resources are automatically generated from public CloudFormation Resource Schemas. They are built to closely reflect the real state of CloudFormation. Sometimes these updates can contain changes that are incompatible with previous types, but more accurately reflect reality. In this release we have changed: aws-emr: AWS::EMR::Cluster: MonitoringConfiguration property removed. aws-emr: AWS::EMR::Cluster: CloudWatchLogConfiguration type removed. aws-emr: AWS::EMR::C | High | 4/14/2026 |
| v2.249.0 | ### ⚠ BREAKING CHANGES * L1 resources are automatically generated from public CloudFormation Resource Schemas. They are built to closely reflect the real state of CloudFormation. Sometimes these updates can contain changes that are incompatible with previous types, but more accurately reflect reality. In this release we have changed: aws-appstream: AWS::AppStream::Stack: Id attribute removed. aws-appsync: AWS::AppSync::GraphQLApi: LogConfig.CloudWatchLogsRoleArn property is now required. aws-a | Medium | 4/13/2026 |
| v2.248.0 | ### Bug Fixes * **eks:** downgrade isolated subnet validation from error to warning ([#37500](https://github.com/aws/aws-cdk/issues/37500)) ([470856c](https://github.com/aws/aws-cdk/commit/470856cadcee34b2ec5e0620fab63838c223fd97)), closes [#37491](https://github.com/aws/aws-cdk/issues/37491) --- ## Alpha modules (2.248.0-alpha.0) | Medium | 4/3/2026 |
| v2.247.0 | ### ⚠ BREAKING CHANGES * ** L1 resources are automatically generated from public CloudFormation Resource Schemas. They are built to closely reflect the real state of CloudFormation. Sometimes these updates can contain changes that are incompatible with previous types, but more accurately reflect reality. In this release we have changed: aws-bedrockagentcore: AWS::BedrockAgentCore::OnlineEvaluationConfig: ExecutionStatus attribute removed. aws-appstream: AWS::AppStream::ImageBuilder: Name prope | Medium | 4/2/2026 |
| v2.246.0 | ### Features * **bedrock:** add MiniMax and GLM foundation model identifiers ([#37348](https://github.com/aws/aws-cdk/issues/37348)) ([2015344](https://github.com/aws/aws-cdk/commit/201534444ac183959119c1849f34931fa8f3d18d)), closes [#37347](https://github.com/aws/aws-cdk/issues/37347) ### Bug Fixes * **dynamodb:** throw error when grantee is an unsupported ServicePrincipal ([#37335](https://github.com/aws/aws-cdk/issues/37335)) ([d12754f](https://github.com/aws/aws-cdk/commit/d12754fdeda481 | Medium | 3/31/2026 |
| v2.245.0 | ### Features * update L1 CloudFormation resource definitions ([#37332](https://github.com/aws/aws-cdk/issues/37332)) ([6cdf84a](https://github.com/aws/aws-cdk/commit/6cdf84aa9a50ef41dae54f14c2bcf4f48d46dbd1)) * **autoscaling:** add instanceLifecyclePolicy support to AutoScalingGroup Property ([#36434](https://github.com/aws/aws-cdk/issues/36434)) ([b72ffcc](https://github.com/aws/aws-cdk/commit/b72ffcc343a7bff1745dfea4d1e8de4a0d6b998e)) * **cloudfront:** use JavaScript runtime 2.0 as the defaul | Medium | 3/27/2026 |
| v2.244.0 | ### Features * **codebuild:** add support for macOS 26 runners ([#37240](https://github.com/aws/aws-cdk/issues/37240)) ([1b7b292](https://github.com/aws/aws-cdk/commit/1b7b2929fccd786c0bd38ea735b90aef9e470106)), closes [#37241](https://github.com/aws/aws-cdk/issues/37241) [#35836](https://github.com/aws/aws-cdk/issues/35836) * update L1 CloudFormation resource definitions ([#37260](https://github.com/aws/aws-cdk/issues/37260)) ([40a5142](https://github.com/aws/aws-cdk/commit/40a5142771b1ea450a2 | Low | 3/19/2026 |
| v2.243.0 | ### Features * update L1 CloudFormation resource definitions ([#37201](https://github.com/aws/aws-cdk/issues/37201)) ([85daaf5](https://github.com/aws/aws-cdk/commit/85daaf5b58ca6c4184f215e48a4e953e228fd42e)) * **cfn-property-mixins:** graduate to stable @aws-cdk/cfn-property-mixins package ([#37215](https://github.com/aws/aws-cdk/issues/37215)) ([f071e67](https://github.com/aws/aws-cdk/commit/f071e67878cf27aefd07c8820b2de8bdf5431d56)) ### Bug Fixes * **dynamodb:** resource policies don't ha | Low | 3/11/2026 |
| v2.242.0 | ### ⚠ BREAKING CHANGES * ** L1 resources are automatically generated from public CloudFormation Resource Schemas. They are built to closely reflect the real state of CloudFormation. Sometimes these updates can contain changes that are incompatible with previous types, but more accurately reflect reality. In this release we have changed: - **aws-ssm**: AWS::SSM::MaintenanceWindow: Id attribute removed. ### Features * **core:** support `PropertyMergeStrategy` to merge arbitrary CFN property | Low | 3/10/2026 |
| v2.241.0 | ### ⚠ BREAKING CHANGES * ** L1 resources are automatically generated from public CloudFormation Resource Schemas. They are built to closely reflect the real state of CloudFormation. Sometimes these updates can contain changes that are incompatible with previous types, but more accurately reflect reality. In this release we have changed: aws-codedeploy: AWS::CodeDeploy::DeploymentGroup: Id attribute removed. ### Features * update L1 CloudFormation resource definitions ([#37103](https://github | Low | 3/2/2026 |
| v2.240.0 | ### Features * update L1 CloudFormation resource definitions ([#37039](https://github.com/aws/aws-cdk/issues/37039)) ([17b2d93](https://github.com/aws/aws-cdk/commit/17b2d93f1f1aa422729e344649d43eb92e3999de)) * **eks-v2:** graduate to stable 🚀 ([#36950](https://github.com/aws/aws-cdk/issues/36950)) ([a7de51c](https://github.com/aws/aws-cdk/commit/a7de51c33497b0c4db26c344da19e72eeb9327a7)) * update L1 CloudFormation resource definitions ([#37034](https://github.com/aws/aws-cdk/issues/37034)) ([ | Low | 2/23/2026 |
| v2.239.0 | ### ⚠ BREAKING CHANGES * ** L1 resources are automatically generated from public CloudFormation Resource Schemas. They are built to closely reflect the real state of CloudFormation. Sometimes these updates can contain changes that are incompatible with previous types, but more accurately reflect reality. In this release we have changed: aws-licensemanager: AWS::LicenseManager::License: Beneficiary property is now required aws-licensemanager: AWS::LicenseManager::License: ProductSKU property is | Low | 2/19/2026 |
| v2.238.0 | ### ⚠ BREAKING CHANGES * **bedrock-agentcore:** Interface extensions require new property implementations * **aws-bedrock-agentcore-alpha:** * - IGateway now requires gatewayRef getter * - IGatewayTarget now requires gatewayTargetRef getter * - IMemory now requires memoryRef getter * - IBedrockAgentRuntime now requires runtimeRef getter * - IRuntimeEndpoint now requires runtimeEndpointRef getter * - IBrowserCustom now requires browserCustomRef getter * - ICodeInterpreterCustom now requi | Low | 2/9/2026 |
| v2.237.1 | ### Bug Fixes * **core:** intrinsic cfn function tokens are not detected as such in java ([#36843](https://github.com/aws/aws-cdk/issues/36843)) ([89cd54f](https://github.com/aws/aws-cdk/commit/89cd54f6097025bc3e98f2c4bc3caea7c22a61ab)) --- ## Alpha modules (2.237.1-alpha.0) | Low | 2/3/2026 |
| v2.237.0 | ### ⚠ BREAKING CHANGES * **iam:** Receivers of `IEncryptedResource` objects now have fewer guarantees about the shape of the object. If you still require an `IResource`, change the type to `IEncryptedResource & IResource` and/or add a type guard check using `Resource.isResource()`. Implementations of `IEncryptedResource` no longer need to implement `IResource` but must continue to implement `IEnvironmentAware`. Since `IResource` extends `IEnvironmentAware`, there is no change for implementors. | Low | 2/2/2026 |
| v2.236.0 | ### Features * update L1 CloudFormation resource definitions ([#36721](https://github.com/aws/aws-cdk/issues/36721)) ([7a4a443](https://github.com/aws/aws-cdk/commit/7a4a44329d7b71a12ba566885aa5fd730c0c2475)) * **ecs:** add capacityOptionType (Spot support) to ManagedInstancesCapacityProvider L2 construct ([#36497](https://github.com/aws/aws-cdk/issues/36497)) ([e8ad85b](https://github.com/aws/aws-cdk/commit/e8ad85b3122e8c84e19adf0ffdfd71d79ba090f9)), closes [#35648](https://github.com/aws/aws- | Low | 1/23/2026 |
| v2.235.1 | ### Bug Fixes * **apigatewayv2:** use custom domain name instead of regional domain name when importing domain name via fromDomainNameAttributes ([#36710](https://github.com/aws/aws-cdk/issues/36710)) ([29e5642](https://github.com/aws/aws-cdk/commit/29e5642266190ef7d8cf3cccdb50ea2caa6919db)) --- ## Alpha modules (2.235.1-alpha.0) | Low | 1/19/2026 |
| v2.235.0 | ### ⚠ BREAKING CHANGES * ** L1 resources are automatically generated from public CloudFormation Resource Schemas. They are built to closely reflect the real state of CloudFormation. Sometimes these updates can contain changes that are incompatible with previous types, but more accurately reflect reality. In this release we have changed: - aws-ecs: AWS::ECS::CapacityProvider: ManagedInstancesNetworkConfiguration.SecurityGroups property is now required. * **ecs:** `securityGroups` is now requir | Low | 1/15/2026 |
| v2.234.1 | ### Bug Fixes * `RuntimeError: apiEndpoint is not configured on the imported HttpApi` (revert of "chore(apigatewayv2): reference interfaces") ([#36623](https://github.com/aws/aws-cdk/issues/36623)) ([1c10d49](https://github.com/aws/aws-cdk/commit/1c10d495ffd81a90a91cc6779c75e59f27bbc1e0)), closes [aws/aws-cdk#36378](https://github.com/aws/aws-cdk/issues/36378) --- ## Alpha modules (2.234.1-alpha.0) | Low | 1/9/2026 |
| v2.234.0 | ### ⚠ BREAKING CHANGES * **batch:** unfortunately `JobQueue` exposes `public readonly computeEnvironments: OrderedComputeEnvironment[]`. The `computeEnvironment` member of that structure now fewer guarantees, and needs casting. This should not have been exposed, and we assume the use of the exposed property here is rare. * **backup:** unfortunately `BackupPlanRule` exposes `public readonly props: BackupPlanRuleProps`. The `backupVault` member of that structure now guarantees less, and needs cas | Low | 1/8/2026 |
| v2.233.0 | ### ⚠ BREAKING CHANGES **CHANGES TO L1 RESOURCES:** L1 resources are automatically generated from public CloudFormation Resource Schemas. They are built to closely reflect the real state of CloudFormation. Sometimes these updates can contain changes that are incompatible with previous types, but more accurately reflect reality. In this release we have changed: aws-ec2: AWS::EC2::EC2Fleet: DefaultTargetCapacityType property is now immutable. aws-ec2: AWS::EC2::EC2Fleet: TargetCapacityUnitType | Low | 12/18/2025 |
| v2.232.2 | ### Bug Fixes * re-export of `ResourceEnvironment` is not an alias ([#36370](https://github.com/aws/aws-cdk/issues/36370)) ([6178d32](https://github.com/aws/aws-cdk/commit/6178d3222e17e77ea67eef060a3faec276595ae8)) --- ## Alpha modules (2.232.2-alpha.0) | Low | 12/12/2025 |
| v2.232.1 | ### Bug Fixes * **core:** TypeScript properties missing for types which extend internal interfaces ([#36313](https://github.com/aws/aws-cdk/issues/36313)) ([3e7e17c](https://github.com/aws/aws-cdk/commit/3e7e17c0def24567610a541e39195596f5d83387)), closes [#36310](https://github.com/aws/aws-cdk/issues/36310) --- ## Alpha modules (2.232.1-alpha.0) | Low | 12/6/2025 |
| v2.232.0 | ### Features * update L1 CloudFormation resource definitions ([#36299](https://github.com/aws/aws-cdk/issues/36299)) ([0945692](https://github.com/aws/aws-cdk/commit/0945692b91b01b6a8c69e844cffe7629cc52695a)) * **bedrock-agentcore:** add fromImageUri method to AgentRuntimeArtifact ([#36263](https://github.com/aws/aws-cdk/issues/36263)) ([ad25aba](https://github.com/aws/aws-cdk/commit/ad25aba9785c6801085525da4d6adcc8c3204a70)) * **lambda:** add support for durable functions ([#36282](https://git | Low | 12/5/2025 |
| v2.231.0 | ### Features * **lambda:** support for capacity providers ([#36255](https://github.com/aws/aws-cdk/issues/36255)) ([2e4c1cf](https://github.com/aws/aws-cdk/commit/2e4c1cfd461de82e837238ab80eb0be22e9ec4b6)) * update L1 CloudFormation resource definitions ([#36253](https://github.com/aws/aws-cdk/issues/36253)) ([8410b13](https://github.com/aws/aws-cdk/commit/8410b1392b9e634282dd56e47b4778304c1afa32)) * **aws-cdk-lib:** add `arnFor<ResourceName>` for 47 more resources ([#36231](https://github.com/ | Low | 12/1/2025 |
| v2.230.0 | ### Features * **apigateway:** support response streaming with response transfer mode ([#36155](https://github.com/aws/aws-cdk/issues/36155)) ([f431021](https://github.com/aws/aws-cdk/commit/f4310219ae134a03693330cb55da5fa1cb789c48)), closes [#36156](https://github.com/aws/aws-cdk/issues/36156) * update L1 CloudFormation resource definitions ([f203b8e](https://github.com/aws/aws-cdk/commit/f203b8e2d1af592b70bfe8d1cafc496c5a28b0df)) * update L1 CloudFormation resource definitions ([#36193](https | Low | 11/26/2025 |
| v2.229.1 | ### Bug Fixes * **scheduler:** wrong ARN generated in `ScheduleGroup.grant*` methods ([#36175](https://github.com/aws/aws-cdk/issues/36175)) ([ca9fbdd](https://github.com/aws/aws-cdk/commit/ca9fbdd4c7d9551e18abe4967f0b8649302aaa56)) --- ## Alpha modules (2.229.1-alpha.0) | Low | 11/25/2025 |
| v2.229.0 | ### Features * **agentcore:** add new properties for runtime, browser ([#36003](https://github.com/aws/aws-cdk/issues/36003)) ([439495f](https://github.com/aws/aws-cdk/commit/439495fd2c60b5a9b1e413c089e6e5cb822cba90)) * **route53:** add `HostedZoneGrants` ([#36109](https://github.com/aws/aws-cdk/issues/36109)) ([d24305c](https://github.com/aws/aws-cdk/commit/d24305c29d1e2968fbdbccbcd087ad7ac8d67332)) ### Bug Fixes * **stepfunctions:** allow multiline jsonata strings ([#35985](https://github. | Low | 11/24/2025 |
| v2.228.0 | ### Features * **lambda:** add new lambda/kafka esm properties and on failure desitination ([65f9c35](https://github.com/aws/aws-cdk/commit/65f9c357e9a463ead608fa1d0118312b3c2cd09c)) ### Bug Fixes * **cloudformation-include:** `TypeError` when including template with intrinsic functions ([#36157](https://github.com/aws/aws-cdk/issues/36157)) ([f2a384b](https://github.com/aws/aws-cdk/commit/f2a384ba0092ccd76ff06b9a2e2e0a7eef7e0bfd)), closes [#36140](https://github.com/aws/aws-cdk/issues/36140 | Low | 11/24/2025 |
| v2.227.0 | **CHANGES TO L1 RESOURCES:** L1 resources are automatically generated from public CloudFormation Resource Schemas. They are built to closely reflect the real state of CloudFormation. Sometimes these updates can contain changes that are incompatible with previous types, but more accurately reflect reality. In this release we have changed: - **aws-backup**: AWS::Backup::LogicallyAirGappedBackupVault: EncryptionKeyArn attribute removed. ### Features * **stepfunctions:** add `StateMachineGrants` | Low | 11/21/2025 |
| v2.226.0 | ### Features * **dynamodb:** compound keys for global secondary indexes ([046b06d](https://github.com/aws/aws-cdk/commit/046b06d049641f7dd6b0f3fb20b7f8efcde750bf)) * **lambda:** add multi-tenancy support with TenancyConfig ([5f384db](https://github.com/aws/aws-cdk/commit/5f384dbf9ee5e81c644ade62837d80be98492794)) --- ## Alpha modules (2.226.0-alpha.0) | Low | 11/20/2025 |
| v2.225.0 | ### ⚠ BREAKING CHANGES * ** L1 resources are automatically generated from public CloudFormation Resource Schemas. They are built to closely reflect the real state of CloudFormation. Sometimes these updates can contain changes that are incompatible with previous types, but more accurately reflect reality. In this release we have changed: - **aws-dynamodb**: AWS::DynamoDB::GlobalTable: ResourcePolicy property is now required. ### Features * update L1 CloudFormation resource definitions ([#36 | Low | 11/17/2025 |
| v2.224.0 | ### ⚠ BREAKING CHANGES * **aws-cdk-lib:** Reference interfaces (such as `IBucketRef,` `IRoleRef,` etc.) were moved to a new `aws-cdk-lib.interfaces` submodule to prevent cyclic dependencies between service modules. If you are importing reference interfaces, you have to update import statements accordingly. See [#36060](https://github.com/aws/aws-cdk/issues/36060) for full details. * **Amazon.CDK.Lib (.NET):** The .NET namespace for multiple submodules has changed. If you are using any of the | Low | 11/13/2025 |
| v2.223.0 | ### ⚠ BREAKING CHANGES L1 resources are automatically generated from public CloudFormation Resource Schemas. They are built to closely reflect the real state of CloudFormation. Sometimes these updates can contain changes that are incompatible with previous types, but more accurately reflect reality. In this release we have changed: * **aws-dynamodb**: AWS::DynamoDB::GlobalTable: GlobalTableSettingsReplicationMode property removed. * **aws-dynamodb**: AWS::DynamoDB::GlobalTable: GlobalTableSou | Low | 11/10/2025 |
| v2.222.0 | ### ⚠ BREAKING CHANGES * **bedrock-agentcore:** The signature of `RuntimeAuthorizerConfiguration.usingCognito()` has changed to accept IUserPool and IUserPoolClient constructs instead of string parameters, and now supports multiple clients. ### Features * **apigateway:** add `binaryMediaTypes` property to SpecRestApi ([#35502](https://github.com/aws/aws-cdk/issues/35502)) ([bf10d94](https://github.com/aws/aws-cdk/commit/bf10d94484c5a78a86a5a38db093b48eec0b42d7)), closes [#35498](https://githu | Low | 11/4/2025 |
| v2.221.1 | ### Bug Fixes * compilation failure in Go ([#35871](https://github.com/aws/aws-cdk/issues/35871)) ([4379f66](https://github.com/aws/aws-cdk/commit/4379f66f42ee9adaffbc2836399c75f86d6bf784)), closes [aws/aws-cdk#35770](https://github.com/aws/aws-cdk/issues/35770) [#35862](https://github.com/aws/aws-cdk/issues/35862) --- ## Alpha modules (2.221.1-alpha.0) | Low | 10/29/2025 |
| v2.221.0 | ### ⚠ BREAKING CHANGES * ** L1 resources are automatically generated from public CloudFormation Resource Schemas. They are built to closely reflect the real state of CloudFormation. Sometimes these updates can contain changes that are incompatible with previous types, but more accurately reflect reality. In this release we have changed: - **aws-datazone**: AWS::DataZone::ProjectProfile: Id property removed. - **aws-logs**: AWS::Logs::DeliveryDestination: DeliveryDestinationType attribute remove | Low | 10/24/2025 |
| v2.220.0 | ### ⚠ BREAKING CHANGES * ** L1 resources are automatically generated from public CloudFormation Resource Schemas. They are built to closely reflect the real state of CloudFormation. Sometimes these updates can contain changes that are incompatible with previous types, but more accurately reflect reality. In this release we have changed: - **aws-neptune**: AWS::Neptune::EventSubscription: SnsTopicArn property is now required. - **aws-neptune**: AWS::Neptune::EventSubscription: Id attribute r | Low | 10/14/2025 |
| v2.214.1 | ### Features * introduce reference interfaces, but don't require them yet ([09fc592](https://github.com/aws/aws-cdk/commit/09fc592f8debaf0b66ad5bec57d677ab776c0d6f)) --- ## Alpha modules (2.214.1-alpha.0) | Low | 10/3/2025 |
| v2.219.0 | ### ⚠ BREAKING CHANGES * ** L1 resources are automatically generated from public CloudFormation Resource Schemas. They are built to closely reflect the real state of CloudFormation. Sometimes these updates can contain changes that are incompatible with previous types, but more accurately reflect reality. In this release we have changed: aws-servicecatalog: AWS::ServiceCatalog::PortfolioPrincipalAssociation: PortfolioId property is now required. aws-servicecatalog: AWS::ServiceCatalog::Por | Low | 10/1/2025 |
| v2.218.0 | ### Features * **cloudfront-origins:** ip address type for http origin ([#35445](https://github.com/aws/aws-cdk/issues/35445)) ([196c7ae](https://github.com/aws/aws-cdk/commit/196c7ae65b0066d2eea8440a0dc58adf22667a00)), closes [#35427](https://github.com/aws/aws-cdk/issues/35427) * **docdb:** support for serverless clusters ([#35574](https://github.com/aws/aws-cdk/issues/35574)) ([89bfef7](https://github.com/aws/aws-cdk/commit/89bfef76557d2fd693e248191c3f436c9daf90b1)), closes [#35199](https:// | Low | 9/29/2025 |
| v2.217.0 | ### Features * update L1 CloudFormation resource definitions ([#35491](https://github.com/aws/aws-cdk/issues/35491)) ([d095f68](https://github.com/aws/aws-cdk/commit/d095f687e77bed7d064dc30938a69f51d8b2c6a8)) * update L1 CloudFormation resource definitions ([#35567](https://github.com/aws/aws-cdk/issues/35567)) ([b0ccf81](https://github.com/aws/aws-cdk/commit/b0ccf819277bd65057de87de8a43fbc8f09a03f7)) ### Bug Fixes * **cloudfront:** `Function` ARN reference changed from GetAtt to Ref ([#3554 | Low | 9/25/2025 |
| v2.216.0 | ### Features * **apigatewayv2:** add disableSchemaValidation for Websocket api ([#35290](https://github.com/aws/aws-cdk/issues/35290)) ([bc391ce](https://github.com/aws/aws-cdk/commit/bc391ce0e2acc7714c204953cc5ca318624f721c)) * **cloudfront-origins:** response completion timeout ([#35485](https://github.com/aws/aws-cdk/issues/35485)) ([7d70bf4](https://github.com/aws/aws-cdk/commit/7d70bf488f6cef512dd680ecb2bf6e0d979eccb2)) * **elasticloadbalancingv2:** support target group health attributes ( | Low | 9/22/2025 |
| v2.215.0 | ### Features * **33270:** support new bun lock file ([#34873](https://github.com/aws/aws-cdk/issues/34873)) ([0a55ed1](https://github.com/aws/aws-cdk/commit/0a55ed1a01009d28739e8f081b1ce0ad78eac73d)), closes [#33270](https://github.com/aws/aws-cdk/issues/33270) * **codebuild:** support remote Docker server ([#34976](https://github.com/aws/aws-cdk/issues/34976)) ([eb8e74b](https://github.com/aws/aws-cdk/commit/eb8e74b8146d57a6f85484a2db053e1bfc27864e)), closes [#34494](https://github.com/aws/aws | Low | 9/15/2025 |
| v2.214.0 | ### CHANGES TO L1 RESOURCES * L1 resources are automatically generated from public CloudFormation Resource Schemas. They are build to closely reflect the real state of CloudFormation. Sometimes these updates can contain changes that are incompatible with previous types, but more accurately reflect reality. In this release we have changed: - **aws-ecs**: AWS::ECS::Service: AvailabilityZoneRebalancing property default value changed from "ENABLED" to "DISABLED". ### Features * **acm:** add su | Low | 9/2/2025 |
| v2.213.0 | ### Features * **dynamodb:** adding ContributorInsightsMode feature ([#35332](https://github.com/aws/aws-cdk/issues/35332)) ([d2c93e4](https://github.com/aws/aws-cdk/commit/d2c93e4b75391aad38b0f472e78d2a7d8879e2b8)) --- ## Alpha modules (2.213.0-alpha.0) ### Features * **s3tables-alpha:** add TablePolicy support to L2 construct library ([#35223](https://github.com/aws/aws-cdk/issues/35223)) ([a4aad78](https://github.com/aws/aws-cdk/commit/a4aad78a45fb776f2c2c71cb7818b4f8cbeaadd0)), closes [#33 | Low | 8/28/2025 |
| v2.212.0 | ### CHANGES TO L1 RESOURCES * L1 resources are automatically generated from public CloudFormation Resource Schemas. They are build to closely reflect the real state of CloudFormation. Sometimes these updates can contain changes that are incompatible with previous types, but more accurately reflect reality. In this release we have changed: * **aws-rds**: AWS::RDS::DBInstance:`StatusInfos` property is removed. * **aws-sagemaker**: AWS::SageMaker::Domain: `SingleSignOnApplicationArn` property is r | Low | 8/20/2025 |
| v2.211.0 | ### ⚠ BREAKING CHANGES **cloudformation:** L1 resources are automatically generated from public CloudFormation Resource Schemas. They are build to closely reflect the real state of CloudFormation. Sometimes these updates can contain changes that are incompatible with previous types, but more accurately reflect reality. In this release we have changed: * **aws-opsworkscm**: CfnServer resource is no longer provisionable (AWS::OpsWorksCM::Server). Service is on deprecation path * **aws-iotfleetwis | Low | 8/13/2025 |
| v2.210.0 | ### Reverts * **ecs:** add support for native blue/green deployments in ECS L2 ([#35061](https://github.com/aws/aws-cdk/issues/35061)) ([#35170](https://github.com/aws/aws-cdk/issues/35170)) ([88696e9](https://github.com/aws/aws-cdk/commit/88696e9cba3c65f1a21708bd736f36f257914537)), closes [#35167](https://github.com/aws/aws-cdk/issues/35167) --- ## Alpha modules (2.210.0-alpha.0) ### Features * **glue-alpha:** add optional metrics control for cost optimization ([#35154](https://github.com/aws | Low | 8/6/2025 |
| v2.209.1 | ### Bug Fixes * **eks:** fix helm commands not running ecr public login ([#35161](https://github.com/aws/aws-cdk/issues/35161)) ([d860ee8](https://github.com/aws/aws-cdk/commit/d860ee8835e112b675f26fda78a601b066e09f5f)) --- ## Alpha modules (2.209.1-alpha.0) ### Bug Fixes * **eks-v2-alpha:** fix helm commands not running ecr public login ([#35162](https://github.com/aws/aws-cdk/issues/35162)) ([6c2a8b8](https://github.com/aws/aws-cdk/commit/6c2a8b8fd54991ce2c8557578eeb8199b8af38ac)) | Low | 8/6/2025 |
