Update aws-cdk monorepo to v2.93.0

[renovate]

This PR contains the following updates:

Package	Change	Age	Adoption	Passing	Confidence
@aws-cdk/cloudformation-diff	2.70.0 -> 2.93.0
aws-cdk-lib	2.70.0 -> 2.93.0

---

Release Notes

aws/aws-cdk (@​aws-cdk/cloudformation-diff)

v2.93.0

Compare Source

Features

• apigateway: set RestApi CloudWatchRole and Account retention policy (#​26836) (7af20ba), closes #​26827
• aws-cdk-lib: ADOT Lambda Layer v0.32.0 (#​26793) (89393a2)
• core: acknowledge warnings (#​26144) (dd912da)
• core: support bundling for single non-archive file (#​26106) (0aee083)
• ecs: container port ranges in port mappings (#​26692) (4997bca), closes #​23509
• efs: add grantRead and grantReadWrite, grantRootAccess to FileSystem (#​25486) (9c12199)
• opensearchservice: configuring gp3 throughput (#​26172) (47df704), closes #​26137
• update AWS Service Spec (#​26825) (4133729)
• route53: add support for grantDelegation on imported PublicHostedZone (#​26333) (a93af2f), closes #​26240

Bug Fixes

• apigateway: deployOptions.description is not used for deployment's description (#​26149) (6f9fcd6), closes /github.com/aws/aws-cdk/blob/72eb1e957afb9d1573445999eddd38b5c345fa7a/packages/aws-cdk-lib/aws-apigateway/lib/restapi.ts#L592C25-L592C25
• apigateway: duplicate methodResponses if the same array is reused between addMethod calls (#​26636) (8dc5190), closes #​26586
• assertions: stack overflow while parsing template (#​26767) (01a7b5b), closes #​26766
• backup: validation for vault name fails when parameters are referred in the name (#​25943) (00a7f03), closes #​21735
• cdk-assets: propagate buildSsh flag to docker build (#​26846) (87869c8)
• cli: cannot hotswap ECS task definitions containing certain intrinsics (#​26404) (6d315b8), closes /github.com/aws/aws-cdk/blob/5ccc56975c323ea19fd0917def51184e13f440d9/packages/aws-cdk/lib/api/evaluate-cloudformation-template.ts#L352 #​25563
• CLI: diff reports wrong count of changed stacks (#​26796) (26dcc1e), closes #​26818
• cloudformation-diff: fails on CloudFormation intrinsics in unexpected places (#​26791) (70c374f), closes #​7413
• core: logical IDs are not allowed to start with digits (#​26821) (97d21a9), closes #​26075
• custom-resources: bad payload deserialization (#​26797) (4d3ec71), closes #​26730
• ecr: AutoDeleteImages custom resource description contains "undefined" (#​26800) (a7a6428)
• ecr: autoDeleteImages fails when repository is renamed (#​26742) (e264a2f), closes #​26711
• efs: FileSystem deployment fails if vpcSubnets is changed (#​26155) (d54b67d), closes #​25099
• eks: helm private ecr in govcloud (#​26794) (ed00f24)
• eks: undefined constructor in custom resource (#​26782) (0b8f31d), closes /github.com/TooTallNate/node-proxy-agent/blob/5.0.0/index.js#L25 406.1.0/packages/proxy-agent/src/index.ts#L71 #​26771
• lambda: use of currentVersion fails deployment after upgrade (#​26777) (0446e4a), closes #​26739
• pipelines: default image Ubuntu6 using EOL Node 16, switch to Ubuntu7 (#​26817) (7851c0c), closes #​26810
• secretsmanager: fix cross-region policy arn for imported secrets (#​26813) (d5050ce), closes #​26811
• secretsmanager: rotation resource creation can fail due to race condition (#​26512) (94e48c6), closes #​26481
• aws-sdk still used in EKS custom resources (#​26756) (e78e355)
• lambda-nodejs default runtime regression (#​26763) (2aa4733), closes #​26732

---

Alpha modules (2.93.0-alpha.0)

Features

• app-staging-synthesizer: enable tag immutability (#​26656) (0bcc4b4)
• synthetics: enable auto delete lambdas via custom resource (#​26580) (6d1dc5b), closes #​18448

Bug Fixes

• lambda-python: poetry bundling is broken after Aug 20 (#​26823) (95f8cef)
• redshift: adding distKey to an existing table fails deployment (#​26789) (8c9f0e2), closes #​26733

v2.92.0

Compare Source

Features

• update AWS Service Spec (#​26751) (e4e0832)
• opensearchservice: SAML authorization properties for Domain construct (#​26673) (6e20cbf), closes #​26600

Bug Fixes

• aws-cdk-lib: custom resources using Node16 and SDKv2 (#​26710) (259a469), closes #​26708
• custom-resources: incorrect sdkv3 fallback (#​26693) (0fc33d9)

---

Alpha modules (2.92.0-alpha.0)

⚠ BREAKING CHANGES TO EXPERIMENTAL FEATURES

• batch: if using spot instances on your Compute Environments, they will default to SPOT_PRICE_CAPACITY_OPTIMIZED instead of SPOT_CAPACITY_OPTIMIZED now.

Features

• batch: grantSubmitJob method (#​26729) (716871f), closes #​25574
• batch: set default spot allocation strategy to SPOT_PRICE_CAPACITY_OPTIMIZED (#​26731) (e0ca252)

v2.91.0

Compare Source

Features

• cdk: cdk diff --quiet suppresses progress messages (#​26652) (5777c88), closes #​26526 #​26526
• core: Fn.findInMap supports default value (#​26543) (8526feb), closes #​26125
• rds: support aurora mysql 3.04.0 (#​26651) (6de3344)
• update AWS Service Spec (#​26658) (d865d6c)

Bug Fixes

• apigateway: allowedOrigins are incorrectly interpreted as regexes (#​26648) (cc52e2d), closes #​26623
• lambda: Lambda Insights Layer ARN 1.0.229 in us-west-1 on ARM64 incorrect (#​26626) (dabf868), closes /docs.aws.amazon.com/AmazonCloudWatch/latest/monitoring/Lambda-Insights-extension-versionsARM.html#Lambda-Insights-extension-ARM-1 #​26615
• rds: grantConnect fails to deploy when no user is specified for instances with secret credentials (#​26647) (112b861), closes #​26603
• sam: CfnFunction events are not rendered (#​26679) (305a9cc), closes #​26637
• triggers: executed on update even when executeOnHandlerChange is false (#​26676) (ed3aaf7), closes #​25939
• broken cross-region reference in aws-route53 (#​26666) (ec61b09)

---

Alpha modules (2.91.0-alpha.0)

Features

• appconfig: L2 constructs (#​26639) (e479bd4)
• glue: Job construct does not honor SparkUIProps S3 prefix when granting S3 access (#​26696) (42250f1), closes #​19862

Bug Fixes

• glue: synth time validation does not work in Python/Java/C#/Go (#​26650) (dba8cf3), closes #​26620

v2.90.0

Compare Source

Features

• aws-cdk-lib: ADOT Lambda Layer v0.31.0 (#​26505) (03c6f6f)
• core: new RemovalPolicy.RETAIN_EXCEPT_ON_CREATE to only retain resources that have been successfully created (#​26602) (c84666c), closes #​26595
• core: support ssh build arg in DockerImageAsset (#​26356) (7b3d381)
• stepfunctions: allow setting comment on state machine (#​25858) (6a70b4f)
• update AWS Service Spec (#​26579) (6c588da)

Bug Fixes

• cli: specifying --quiet does not suppress asset building and publishing logs (#​26493) (b12bc67), closes #​26265
• ec2: flowLogName property for FlowLog construct does not work (#​26371) (f910f78), closes #​26370
• ecr: error handling compatible with aws sdk v3 (#​26608) (300989a), closes #​26433
• ecs: unclear docs on valid ec2 task definition placement constraints and no validation of input #​25933 (#​26384) (4c57f45)
• logs: LogRetention Custom Resource does not use Node18 (#​26609) (54e64c7), closes #​26461

---

Alpha modules (2.90.0-alpha.0)

Features

• glue: glue tables can include storage parameters (#​24498) (f1df9ab), closes #​23132

Bug Fixes

• app-staging-synthesizer: misleading error message about environment-agnostic/aware stacks (#​26607) (7e2f335)
• synthetics: updated handler validation (#​26569) (1eaec92), closes #​26540

v2.89.0

Compare Source

Features

• support max-buffer-size for AWSLogs driver (#​26396) (a74536b)
• update AWS Service Spec (#​26541) (b1ca3c0)
• cli: add diff message on the number of stacks with differences (#​26297) (a9e2789), closes #​10417
• logs: configure custom subscription filter name (#​26498) (7ddb305), closes #​26485
• opensearchservice: L2 properties for offPeakWindowOptions and softwareUpdateOptions (#​26403) (02e8d58), closes #​26388
• rds: isFromLegacyInstanceProps migration flag with ClusterInstance.serverlessV2 (#​26472) (6ec9829), closes /github.com/aws/aws-cdk/issues/20197#issuecomment-1284485844 #​25942
• rds: support aurora mysql 3.03.1 (#​26507) (7fa74c4)
• route53: support geolocation routing (#​26383) (6bd9a2d), closes #​9478
• stepfunctions: add stateMachineRevisionId property to StateMachine (#​26443) (3e47d1b), closes #​26440

Bug Fixes

• autoscaling: StepScalingPolicy intervals not checked for going over allowable maximum (#​26490) (58b004e), closes /github.com/aws/aws-cdk/blob/bc029fe5ac69a8b7fd2dfdbcd8834e9a2cf8e000/packages/aws-cdk-lib/aws-autoscaling/lib/step-scaling-policy.ts#L136-L166 /github.com/aws/aws-cdk/blob/bc029fe5ac69a8b7fd2dfdbcd8834e9a2cf8e000/packages/aws-cdk-lib/aws-autoscaling/lib/step-scaling-policy.ts#L105-L134 #​26215
• cdk: allow bootstrap with policy names with a path (#​26378) (1820fc9), closes #​26320
• core: policy validation trace incorrect for larger constructs (#​26466) (fd181c7)
• ecs: deployment alarm configurations are being added in isolated partitions (#​26458) (eea223b), closes #​26456
• ecs-patterns: minHealthyPercent and maxHealthyPercent props validation (#​26193) (bdfdc91), closes #​26158
• lambda: bundling fails with pnpm >= 8.4.0 (#​26478) (#​26479) (1df243a)
• rds: Add missing Aurora engine 8.0.mysql_aurora.3.02.3 (#​26462) (ac9bb1a)
• secretsmanager: arnForPolicies evaluates to the partial ARN if accessed from a cross-env stack (#​26308) (0e808d8)
• sns-subscriptions: SQS queue encrypted by AWS managed KMS key is allowed to be specified as subscription and dead-letter queue (#​26110) (0531492), closes #​19796
• stepfunctions-tasks: Default Retry policy for LambdaInvoke does not include Lambda.ClientExecutionTimeoutException default Retry settings (#​26474) (f22bd4e), closes #​26470
• stepfunctions-tasks: specify tags in BatchSubmitJob properties (#​26349) (f24ece1), closes #​26336

---

Alpha modules (2.89.0-alpha.0)

Features

• app-staging-synthesizer: option to specify staging stack name prefix (#​26324) (1b36124)
• apprunner: make Service implement IGrantable (#​26130) (6033c9a), closes #​26089
• neptune-alpha: support for Neptune serverless (#​26445) (b42dbc8), closes #​26428
• scheduler: ScheduleGroup (#​26196) (27dc8ff)

Bug Fixes

• cli-lib: set skipLibCheck on generateSchema to prevent intermittent test failures (#​26551) (1807f57)

v2.88.0

Compare Source

Features

• app-mesh: support port property on weighted targets (#​26114) (54f91c8), closes #​26083
• autoscaling: deprecate launch configurations (under feature flag) (#​25910) (ff21c69), closes #​23165
• aws-cdk-lib: use new L1 codegen (#​26318) (f15ed23)
• cfnspec: cloudformation spec v130.0.0 (#​26278) (d316af7)
• cfnspec: cloudformation spec v130.1.0 (#​26362) (52e20c9)
• cloudfront: add denyList to OriginRequestPolicy behaviors (#​25767) (7926560), closes /github.com/awsdocs/aws-cloudformation-user-guide/commit/a38f2735de1b0b34a4feac1c7bde47524e0966b5#diff-630d84276f15d7dbe9836107b0c289d8692c9279ae10adacf34344273f28fcecR33 /github.com/awsdocs/aws-cloudformation-user-guide/commit/a38f2735de1b0b34a4feac1c7bde47524e0966b5#diff-83c67e21c489d688c4da6943452187182e96e8974f447bd3479044da752fe43bR34 /github.com/awsdocs/aws-cloudformation-user-guide/commit/a38f2735de1b0b34a4feac1c7bde47524e0966b5#diff-96b632ead034b3554fb62969ffa46e799f53a1edfb3cfed5deba5df4d769aab1R34
• cloudwatch: allow configuring period on SingleValueWidget (#​26260) (c8edc87), closes #​26259
• cloudwatch: dashboard variables (#​26285) (73f2741), closes #​26200
• codebuild: support for Docker Registry Image for Linux Arm (#​26121) (f522796), closes #​24367 #​24342
• core: allow user to specify --platform (#​26368) (2f8df43), closes #​25759
• custom-resources: add custom environmentEncryption for Provider lambda functions (#​26236) (546456a), closes #​26197
• ec2: make VPC internet gateway creation controllable (#​26314) (cc4ce12), closes #​26270
• ec2: support using ssm parameter to resolve AMI ID at instance launch time (#​26273) (2462b0b)
• eks: support eks with k8s 1.27 (#​25897) (fdd3309)
• lambda-event-sources: added filters support to kafka sources (#​26366) (c575dde), closes #​26348
• opensearch: opensearch 2.7 engine version (#​26313) (fb580b5)
• opensearchservice: support for MultiAZWithStandBy (under feature flag) (#​26082) (6c75581), closes #​26026
• rds: support Aurora MySQL engine v. 2.11.3 (#​26419) (c646644), closes #​26407
• rds: support aurora postgresql 14.8 (#​26427) (e8fc7a8)
• rds: support aurora postgresql 15.3 (#​26377) (669dd7f), closes #​26363
• rds: support configuring secret rotation behavior via rotateImmediatelyOnUpdate prop (#​26329) (979cbff), closes #​26099

Bug Fixes

• apigateway: method response from rest api default options are not passed to Method (#​26275) (9bcc6d5), closes #​26252
• aws_ecs: Do not output NetworkConfiguraiton to ECS Service when using EXTERNAL deployment controller (#​26338) (170edda), closes #​26335
• cli: credential plugin exceptions stop the entire CLI (#​26244) (1a8f5ad)
• cli: hotswap doesn't update SSM parameter environment variables properly (#​26382) (32654f5), closes #​25387 #​25483
• core: cross region exports fail when parameter doesn't exist (#​26434) (d130bd7)
• custom-resource: ignoreErrorCodesMatching broken on sdk v3 (#​26430) (e21dd4e)
• ecs: DeploymentAlarms property is specified for ECS service with CODE_DEPLOY and EXTERNAL deployment controller (#​26317) (b799c82), closes #​25840 #​26307
• ecs: Windows ECS Optimized AMI SSM parameter format is incorrect (#​26326) (43013d0), closes #​26327
• lambda: add instrument handler option to adotInstrumentation to support python lambda functions (#​26040) (bd06669), closes #​24666
• lambda: bundling fails with pnpm >= 8.4.0 (#​25612) (#​26386) (928cbc8), closes #​25617
• lambda: Update Python Lambda Adot Lambda layer versions (#​26411) (47f15a6), closes #​26168
• s3: auto-delete-objects fails when bucket doesn't exist (#​26433) (228901a), closes #​16756
• bad error checks in custom resources (#​26392) (267e42c)
• pkglint: library creation generates incorrect package names (#​26330) (05d875b), closes #​26331
• s3: allow empty string as keyPrefixEquals (#​26243) (9381880), closes #​26242
• servicecatalog: product stack asset bucket with forced encryption (#​26303) (cb5bef5), closes #​26302
• servicecatalog: support nested stacks in product stacks (#​26311) (cad0635), closes #​24317

---

Alpha modules (2.88.0-alpha.0)

⚠ BREAKING CHANGES TO EXPERIMENTAL FEATURES

• apprunner-alpha: This change will be destructive if the serviceName is set on an existing resources.

Features

• glue: support Data Quality ruleset (#​26272) (af3a188)
• glue: validate maxCapacity, workerCount, and workerType (#​26241) (349e4d4)
• iot-actions: iot rule https action l2 construct (#​25535) (3aee826), closes #​25491
• synthetics: lifecycle rules for auto-generated artifact buckets (#​26290) (ad0d40c), closes #​22863 #​22634

Bug Fixes

• apprunner-alpha: respect serviceName property (#​26238) (6da9a4c), closes #​26237
• batch: grant execution role logs:CreateLogStream by default (#​26288) (c755f50), closes #​25675
• batch: SSM parameters can't be used as ECS Container secrets (#​26373) (bc3d6a7), closes #​26339
• integ-tests-alpha: assertions handler is broken (#​26400) (111a1cf), closes #​26271 #​26359 #​26360
• integ-tests-alpha: incorrect sdk client resolution (#​26271) (17e343a)
• redshift-alpha: incorrect CR runtime version (#​26406) (c8d8421), closes #​26397
• synthetics: asset code validation failed on bundled assets (#​26291) (02a5482), closes #​19342 #​11630

v2.87.0

Compare Source

Features

• cfnspec: cloudformation spec v129.0.0 (#​26179) (fa3caf3)
• codebuild: Support for CodeBuild Image aws/codebuild/amazonlinux2-x86_64-standard:5.0 (#​26058) (bc029fe)
• ecs: enable alarm-based rollbacks (#​25840) (1a44f69), closes #​25346
• update alpha modules to sdk v3 (#​25895) (0a4140e)

Bug Fixes

• all aws-cdk-lib custom resources now use Node18 (#​26212) (399b6bb)
• aws-cdk-lib: specifying EC2 private IP with associate public IP enabled generates invalid CFn (#​26208) (1520d77), closes /docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-ec2-instance.html#cfn-ec2 #​26187
• core: tags disappear if CDK app is bundled+minified (#​26181) (1f81718), closes #​26169
• rds: monitoring role is not created by default when using readers and writers (#​26006) (9065b25), closes /github.com/aws/aws-cdk/blob/4c9016a264c2fec9c0e0e3fae1d7c4216c964b31/packages/aws-cdk-lib/aws-rds/lib/cluster.ts#L635 /github.com/aws/aws-cdk/blob/4c9016a264c2fec9c0e0e3fae1d7c4216c964b31/packages/aws-cdk-lib/aws-rds/lib/cluster.ts#L1228 #​25941
• sns-subscriptions: cannot add Lambda Subscription when using a Lambda Construct from a different Construct Library (#​26206) (06b33d5), closes #​24788
• ssm: cannot import a ssm parameter with a name containing unresolved token (#​25749) (1f1b642), closes #​17094

---

Alpha modules (2.87.0-alpha.0)

Features

• cli-lib: support bootstrap command (#​26205) (9364e94)
• glue: add ExecutionClass for FLEX (#​26203) (db923dd), closes #​22224
• iot: add action to start Step Functions State Machine (#​26059) (bd86993), closes #​17698
• scheduler: ScheduleTargetInput (#​25663) (bc9f3de)

Bug Fixes

• batch: Allow ECS JobDefinition Containers to pass Secrets as Environment Variables & Enable Kubernetes Secret Volumes (#​26126) (dc6f120), closes #​25559
• cli-lib: bundle bootstrap template (#​26229) (41cb288), closes #​26224
• glue: support Ray jobs with Runtime parameter (#​25867) (8153237), closes #​25787

v2.86.0

Compare Source

Features

• cfnspec: cloudformation spec v128.1.0 (#​26096) (d71c040)

Bug Fixes

• cdk-lib: Pass lookupRoleArn to NestedStackSynthesizer (#​26116) (3c29223)
• core: network option is not being propagated to Docker (#​26014) (341de48)
• core: prevent the error when the condition is split into groups of 10 and 1 in Fn.conditionAnd() (#​25999) (ee3d41e), closes /github.com/aws/aws-cdk/issues/25696#issuecomment-1561064092
• ecs: potential race condition on TaskRole default policy update with CfnService (#​26070) (2d9078c), closes #​24880
• ecs: validation for task definition fails when task-level memory is defined but container-level memory and memoryReservation are not defined with EC2 compatibility (#​26027) (0e251e6), closes #​25275
• elbv2: correct wrong timeout validation (#​26031) (636841c), closes #​26023
• stepfunctions: nested arrays are not serialized correctly (#​26055) (f9d4573), closes #​26045

---

Alpha modules (2.86.0-alpha.0)

Features

• app-staging-synthesizer: select different bootstrap region (#​26129) (2fec6a4)
• integ-runner: integ-runner --watch (#​26087) (1fe2f09)
• integ-tests: new HttpApiCall method to easily make http calls (#​26102) (00b9c84)

Bug Fixes

• batch-alpha: cannot import FargateComputeEnvironment with fromFargateComputeEnvironmentArn (#​25985) (05810f4), closes 40aws-cdk/aws-batch-alpha/lib/managed-compute-environment.ts#L1071 40aws-cdk/aws-batch-alpha/lib/managed-compute-environment.ts#L1077-L1079 #​25979

v2.85.0

Compare Source

Features

• cfnspec: cloudformation spec v126.0.0 (#​25918) (757fba9)
• cfnspec: cloudformation spec v127.0.0 (#​26009) (4e57a8c)
• core: add option to suppress indentation in templates (#​25892) (b705956), closes #​18694 #​8712 #​19656
• ec2: add addSecurityGroup method to launth template (#​25697) (28df618), closes /github.com/aws/aws-cdk/issues/18712#issuecomment-1026975615 #​18712
• s3-deployment: create DeployTimeSubstitutedFile to allow substitutions in file (#​25876) (ca2e6a2), closes #​1461
• stepfunctions: support string and file definitions (#​25932) (1cb9351)

Bug Fixes

• cli: deployment continues if ECR asset fails to build or publish (#​26060) (37caaab), closes #​26048 #​25827
• remaining usage of node 14 (#​25995) (67975ed), closes #​25940
• app-mesh: Missing port property in gRPC routers matchers (#​25868) (8ab920b), closes #​25810
• cloudfront: avoid to sort TTLs when using Tokens in CachePolicy (#​25920) (bc80331), closes #​25795
• core: prevent the error when the condition is split into groups of 10 and 1 in Fn.conditionOr() (#​25708) (c135656), closes #​25696 /github.com/aws/aws-cdk/issues/25696#issuecomment-1560136915 /github.com/aws/aws-cdk/issues/25696#issuecomment-1559887661
• ec2: securityGroups is mandatory in fromClusterAttributes ([#​25976](https://togithub.com/aws/aws-cdk/issues/2

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about these updates again.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Mend Renovate. View repository job log here.