v2.0.0-rc.28

Features

• stepfunctions-tasks: add AutoTerminationPolicy to EmrCreateCluster (#16976) (27ad7d8)
• the assertions module is now stable! (#17395) (ede5e22)
• aws-route53-targets: Support for Elastic Beanstalk environment URLs (#16305) (bc07cb0)
• certificatemanager: requesting private certificates issued by Private Certificate Authority (#16315) (e26f5be), closes #10076
• cfnspec: cloudformation spec v46.0.0 (#17223) (d9f7b58)
• cfnspec: cloudformation spec v46.0.0 (#17334) (e0f1180)
• cfnspec: cloudformation spec v47.0.0 (#17350) (ea71b4e), closes #17290 #17223
• cfnspec: cloudformation spec v47.0.0 (#17353) (7886607)
• cfnspec: cloudformation spec v47.0.0 (#17392) (7100d43)
• cli: added build field to cdk.json (#17176) (57ad1e0)
• cli: deployment progress shows stack name (#16604) (322cf10)
• cli: introduce the 'watch' command (#17240) (0adc8b7)
• codebuild: add fromEcrRepository to LinuxGpuBuildImage (#17170) (7585680), closes #16500
• codepipeline: add construct for registering custom Actions (#17041) (c66ac89), closes #17039
• core: Docker tags can be prefixed (#17028) (d298696)
• core: subtract Durations (#16734) (7a333b0), closes #16535
• docdb: add the ability to exclude characters when generating passwords (#17262) (135f7d3), closes #15732
• ec2: add c5ad instances (#16428) (0318253)
• ec2: add c6i instances (#17237) (25cea18), closes /docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-ec2-instance.html#cfn-ec2
• ec2: include p4d instance class (#17147) (6e13adc)
• ec2: VPC endpoint for AWS Xray (#16788) (c24af54), closes #16306
• ecs-service-extensions: Target tracking policies for Service Extensions (#17101) (6420b18)
• eks: expose FargateCluster's defaultProfile (#17130) (e461601), closes #16149
• events: DLQ support for EventBus target (#16383) (dbb3f25), closes #15954
• lambda-nodejs: add sourcesContent in BundlingOptions (#17280) (ea56e69), closes #17256
• lambda-nodejs: custom asset hash (#16412) (90da730), closes #16157
• lambda-nodejs: esbuild charset option (#16726) (56033a2), closes #16668
• lambda-nodejs: typescript emitDecoratorMetadata support (#16543) (55d3c50), closes #13767
• logs: add support for cloudwatch logs resource policy (#17015) (e9a461d), closes #5343 aws-cdk/aws-elasticsearch/lib/log-group-resource-policy.ts#L25 aws-cdk/aws-events-targets/lib/log-group-resource-policy.ts#L26 aws-cdk/aws-events-targets/lib/log-group-resource-policy.ts#L26 #5343
• rds: support backtrackWindow in DatabaseCluster (#17160) (fcd17e9), closes #9369 #9369
• sns: addSubscription returns the created Subscription (#16785) (62f389e)

Bug Fixes

• cli: wmic not found on modern Windows systems (#17070) (332ce4d), closes #16419
• cli: cdk ls --long outputs less-friendly stack IDs for nested assemblies (#17263) (864c50e), closes #14379
• cli: downgrade bootstrap stack error message needs a hint for new-style synthesis (#16237) (e55301b)
• codecommit: notifyOnPullRequestMerged method has a typo in its name (#17348) (cac5726)
• opensearch: domain doesn't handle tokens in capacity configuration (#17131) (2627939), closes #15014
• java and python templates are broken (#17357) (5f6d550)
• aws-eks: proxy support and allow assigning a security group to all cluster handler functions (#17200) (7bbd10d), closes 40aws-cdk/aws-eks/lib/cluster-resource-provider.ts#L69-L96 /github.com/aws/aws-cdk/issues/12469#issuecomment-758674418 40aws-cdk/aws-eks/lib/cluster-resource-handler/index.ts#L48 40aws-cdk/aws-eks/lib/cluster-resource-handler/common.ts#L59 40aws-cdk/aws-eks/lib/cluster-resource-handler/cluster.ts#L56 40aws-cdk/aws-eks/lib/cluster-resource-handler/cluster.ts#L196 40aws-cdk/aws-eks/lib/cluster-resource-handler/cluster.ts#L198 40aws-cdk/aws-eks/lib/kubectl-provider.ts#L83
• cli: no longer disable rollback by default for hotswap deployments (#17317) (e32b616), closes #17267
• cognito: ambiguous error message when same trigger is added twice (#16917) (4ae78b0)
• core: SecretValue.secretsManager fails for tokenized secret-id (#16230) (5831456), closes #16166
• custom-resources: invalid service name leads to unhelpful error message (#16718) (354686b), closes #7312
• ec2: functions addIngressRule and addEgressRule detect unresolved tokens as duplicates (#17221) (d4952c3), closes #17201
• elasticloadbalancingv2: always set stickiness (#17111) (0a23953), closes #16620
• lambda-event-sources: dynamo batch size cannot be a CfnParameter (#16540) (56974ac), closes #16221
• lambda-nodejs: yarn berry goes into immutable mode in CI (#17086) (cc8dd69), closes #17082
• logs: Apply tags to log retention Lambda (#17029) (a6aaa64), closes #15032
• pipelines: additionalInputs not working (#17279) (9e81dc7), closes #17224
• s3: enforce that fromBucketAttributes supplies a valid bucket name (#16915) (30ac0cc)

Reverts

• "chore: activate 'rosetta infuse' feature (#17191)" (#17329) (c8cd515)

---

Alpha modules (2.0.0-alpha.5)

⚠ BREAKING CHANGES TO EXPERIMENTAL FEATURES

• apigatewayv2-authorizers: userPoolClient property in UserPoolAuthorizerProps
  is now renamed to userPoolClients.

Features

• apigatewayv2-authorizers: http api - allow multiple user pool clients per HttpUserPoolAuthorizer (#16903) (747eb7c), closes #15431
• iot: allow setting description and enabled of TopicRule (#17225) (a9aae09), closes /github.com/aws/aws-cdk/pull/16681#issuecomment-942233029
• iot: allow setting errorAction of TopicRule (#17287) (e412308), closes /github.com/aws/aws-cdk/pull/16681#issuecomment-942233029
• iot: allow setting Actions of TopicRule (#17110) (0cabb9f), closes #16681 /github.com/aws/aws-cdk/pull/16681#discussion_r733912215
• iot-actions: Add the action to put CloudWatch Logs (#17228) (a7c869e), closes /github.com/aws/aws-cdk/pull/16681#issuecomment-942233029
• servicecatalog: allow creating a CFN Product Version with CDK code (#17144) (f8d0ef5)
• synthetics: add static cron method to schedule class (#17250) (1ab9b26), closes #16402