chore(release): 2.103.0 #27683

aws-cdk-automation · 2023-10-25T22:10:30Z

…uct in the AppSync utils package (#27588) - This change just adds a link to the awscdk-appsync-utils for the custom resource to perform a manual merge during a source api stack update. ---- *By submitting this pull request, I confirm that my contribution is made under the terms of the Apache-2.0 license*

… RotationSchedule (#27592) I added a validation for whether `automaticallyAfter` in `RotationSchedule` is not greater than 1000 days. We discussed in the following threads. #27570 (review) #27570 (review) ---- *By submitting this pull request, I confirm that my contribution is made under the terms of the Apache-2.0 license*

See [CHANGELOG](https://github.com/aws/aws-cdk/blob/merge-back/2.102.0/CHANGELOG.md)

Add ability to grant function access to `CompositePrincipal`. Closes #27503. ---- *By submitting this pull request, I confirm that my contribution is made under the terms of the Apache-2.0 license*

…eployments (#27292) ## Purpose 🎯 Extend the `EvaluateCloudFormationTemplate` class to support the `Fn::ImportValue` intrinsic function. This allows for more diverse templates to be evaluated for the purposes of determining eligibility for `--hotswap` deployments Closes #21320 ## Approach 🧠 Implement `LazyLookupExport` in similar fashion to `LazyListStackResources` to cache required CloudFormation API calls _(preference was to implement using a generator function instead so style is not entirely consistent, is this an issue?)_ Add some basic unit tests for `EvaluateCloudFormationTemplate.evaluateCfnExpression()` is they were absent, then add some tests for `Fn::ImportValue` ## Todo 📝 - [x] Update doco where appropriate - [x] Add to hotswap deployment tests - [x] Look for appropriate integration tests to update ---- *By submitting this pull request, I confirm that my contribution is made under the terms of the Apache-2.0 license*

[Amazon OpenSearch Service now supports OpenSearch version 2.9](https://aws.amazon.com/about-aws/whats-new/2023/10/amazon-opensearch-service-opensearch-version-2-9/). This PR adds the new engine version. Closes #27574 ---- *By submitting this pull request, I confirm that my contribution is made under the terms of the Apache-2.0 license*

Support of C7i and R7iz EC2-Instance types in aws-ec2. The [C7i](https://aws.amazon.com/ec2/instance-types/c7i/) and the [R7iz](https://aws.amazon.com/ec2/instance-types/r7iz/) instance types were introduced in September 2023. Both instance types are confirmed to be supported in [AWS-Cloudformation](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-ec2-instance.html#cfn-ec2-instance-instancetype). ---- *By submitting this pull request, I confirm that my contribution is made under the terms of the Apache-2.0 license*

…27617) This PR will add a rule to our `prlint` to reject PRs opened from an author's `main` branch on their fork.

…7621) In #26498, I injected specific account id and region in integration test snapshot by mistake. This PR replaces them with variables by taking snapshot correctly. ---- *By submitting this pull request, I confirm that my contribution is made under the terms of the Apache-2.0 license*

Allows to specify a customer-managed KMS key for encryption. Example: ```ts declare const key: kms.Key; declare const fn: lambda.Function; const target = new targets.LambdaInvoke(fn, { input: ScheduleTargetInput.fromObject({ "payload": "useful", }), }); const schedule = new Schedule(this, 'Schedule', { schedule: ScheduleExpression.rate(Duration.minutes(10)), target, key, }); ``` Closes #27543. ---- *By submitting this pull request, I confirm that my contribution is made under the terms of the Apache-2.0 license*

---- *By submitting this pull request, I confirm that my contribution is made under the terms of the Apache-2.0 license*

… in a pipeline causes duplicate id error (#27602) Differentiates between sources of the same repository by appending the branch name onto the node id and input/output artifacts. This avoids the duplicate id errors for different branches of the same repository, as well as validating that each source is a unique repository & branch combination. The only change to the CFN template is the input & output artifacts, but since these are not stateful resources, they can be modified without breaking changes. The artifacts are also updates in tandem, so the pipeline source behavior will stay the same. This change impacts these `CodePipelineSource`s: - `s3()` - `objectKey` appended - `connection()` - `codeCommit()` Does not change `ecr()` behavior as there is no notion of folders or branches. Does not change `github()` behavior as doing so would cause destructive changes of webhooks. Closes #23916 and #19875. ---- *By submitting this pull request, I confirm that my contribution is made under the terms of the Apache-2.0 license*

This PR would enable closing a pull request automatically if it is opened from `main` branch of their fork. ---- *By submitting this pull request, I confirm that my contribution is made under the terms of the Apache-2.0 license*

adding missing selenium runtime for synthetics package Closes #27566. ---- *By submitting this pull request, I confirm that my contribution is made under the terms of the Apache-2.0 license*

This updates our docs surrounding integ tests: - gives the correct location of stable module integ tests - standardizes code examples - adds example for using `assertAtPath()` - warns against using `outputPaths` in `awsApiCall()` - other small updates ---- *By submitting this pull request, I confirm that my contribution is made under the terms of the Apache-2.0 license*

Uses new `dynamo.TableV2` construct in examples. Uses `aws-cdk-lib/` instead of `@aws-cdk/` paths where applicable. ---- *By submitting this pull request, I confirm that my contribution is made under the terms of the Apache-2.0 license*

…multiple instances in the same stack (#27468) Closes #16891 If a user creates more than one EC2 instance in the same stack and defines an InitConfig for each instance using `ec2.InitFile.fromAsset()`, the user will get an error if they pass in the same `targetFilePath` or `targetDirectory`. This bug is due to [how the asset is uploaded to S3](https://github.com/aws/aws-cdk/blob/main/packages/aws-cdk-lib/aws-ec2/lib/cfn-init-elements.ts#L427). This PR fixes this issue by adding a hash to the `targetFileName` before being uploaded as an s3 asset. ---- *By submitting this pull request, I confirm that my contribution is made under the terms of the Apache-2.0 license*

`fs-extra` is sometimes not included in the `npm pack` tarball, depending on the version of NPM. The reason is that it occurs in both `dependencies` and `devDependencies`, which is not a useful dependency specification. This is breaking jsii builds, depending on the NPM version used. ---- *By submitting this pull request, I confirm that my contribution is made under the terms of the Apache-2.0 license*

Facts are only being returned from the regions in a constant list. This PR returns facts for all Regions in `AWS_REGIONS` + `this.database`. Closes #27260. ---- *By submitting this pull request, I confirm that my contribution is made under the terms of the Apache-2.0 license*

…Sync.function (#27559) Add AppSync:Api_Key as hots wappable and fix the bug where AppSync.function doesn't allow setting version and runtime 1. Allow `expires` property of resource `AWS::AppSync::Api_Key` to be hot-swappable 2. Read the Api_Key_id from the physical ARN if not available from resource properties. (It's optional in CFN but mandatory in SDK) 3. UpdateFunction doesn't [allow](https://docs.aws.amazon.com/appsync/latest/APIReference/API_UpdateFunction.html) setting both `functionVersion` and `runtime` in the SDK (allowed in CFN). Update to remove one based on if `code` is provided or `mappingTemplates` 4. Fix a bug where the file returned from S3 was not being decoded from buffer. 5. Increase the timeout and number of retries for concurrent modification of AppSync.Functions. ---- *By submitting this pull request, I confirm that my contribution is made under the terms of the Apache-2.0 license*

The I4g instance types were [introduced](https://aws.amazon.com/about-aws/whats-new/2023/05/amazon-ec2-i4g-storage-optimized-instances/?nc1=h_ls) in May 2023. The instance types are supported in [CloudFormation](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ec2-instance.html#cfn-ec2-instance-instancetype). Closes #27631 ---- *By submitting this pull request, I confirm that my contribution is made under the terms of the Apache-2.0 license*

…n CallAwsService (#27635) This PR adds the following validations in CallAwsService. - `action` must be camelCase. - parameter names in `parameters` must be PascalCase. See the doc: https://docs.aws.amazon.com/step-functions/latest/dg/supported-services-awssdk.html > The API action will always be camel case, and parameter names will be Pascal case. For example, you could use Step Functions API action startSyncExecution and specify its parameter as StateMachineArn. CloudFormation fails with a following error if there are not these validations. ``` Deployment failed: Error: The stack named aws-stepfunctions-tasks-call-aws-service-logs-integ failed to deploy: UPDATE_ROLLBACK_COMPLETE: Resource handler returned message: "Invalid State Machine Definition: 'SCHEMA_VALIDATION_FAILED: The resource provided arn:aws:states:::aws-sdk:cloudwatchlogs:CreateLogStream is not recognized. The value is not a valid resource ARN, or the resource is not available in this region. at /States/SendTaskSuccess/Resource' (Service: AWSStepFunctions; Status Code: 400; Error Code: InvalidDefinition; Request ID: xxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxx; Proxy: null)" (RequestToken: xxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxx, HandlerErrorCode: InvalidRequest) ``` I think it is a good thing to make these errors in the synth phase, since there were actually cases of confusion as follows. #27623 (comment) I also thought to not validate but translate to camel (or pascal) cases. However I thought it would allow input that violates the explanation defined in the API documentation, so I decided not to. On the other hands, the `action` is also used for IAM actions so the IAM actions will be to camel cases (like `logs:createLogStream`). But I allowed it because IAM actions are case insensitive. If a translation is a better way to do it rather than the validation, I will consider that as well. https://github.com/aws/aws-cdk/blob/09c809b52fd2eeb27ac5bbc91d425ecf54e31bf9/packages/aws-cdk-lib/aws-stepfunctions-tasks/lib/aws-sdk/call-aws-service.ts#L92-L94 ---- *By submitting this pull request, I confirm that my contribution is made under the terms of the Apache-2.0 license*

…on in role policy (#27623) This PR fixes the bug that a wrong action in role policy is generated when `cloudwatchlogs` service is specified. A correct action is `logs:xxx`, but current behavior is to `cloudwatchlogs:xxx` by using the `service` property. Closes #27573. ---- *By submitting this pull request, I confirm that my contribution is made under the terms of the Apache-2.0 license*

Closes #27656 ---- *By submitting this pull request, I confirm that my contribution is made under the terms of the Apache-2.0 license*

AWS Service Spec packages to latest versions.

To work with new features that are not released on CFN yet, we need the ability to provide local schema overrides. This changes adds support for this, by importing additional schema files into the model database before codegen. ---- *By submitting this pull request, I confirm that my contribution is made under the terms of the Apache-2.0 license*

* This change just updates the README to remove an unnecessary use of lazy and show the second api being associated with AUTO_MERGE mode which had been removed by mistake. ---- *By submitting this pull request, I confirm that my contribution is made under the terms of the Apache-2.0 license*

aws-cdk-automation · 2023-10-25T22:38:38Z

AWS CodeBuild CI Report

CodeBuild project: AutoBuildv2Project1C6BFA3F-wQm2hXv2jqQv
Commit ID: 1bb89eb
Result: SUCCEEDED
Build Logs (available for 30 days)

Powered by github-codebuild-logs, available on the AWS Serverless Application Repository

ndejaco2 and others added 30 commits October 18, 2023 21:58

Merge branch 'main' into merge-back/2.102.0

300d648

chore(merge-back): 2.102.0 (#27601)

7caab7d

See [CHANGELOG](https://github.com/aws/aws-cdk/blob/merge-back/2.102.0/CHANGELOG.md)

feat(lambda): add grantInvokeCompositePrincipal method (#27529)

447b63c

Add ability to grant function access to `CompositePrincipal`. Closes #27503. ---- *By submitting this pull request, I confirm that my contribution is made under the terms of the Apache-2.0 license*

chore(prlint): add rule to reject pr contribution from main branch (#…

0e81c19

…27617) This PR will add a rule to our `prlint` to reject PRs opened from an author's `main` branch on their fork.

docs: clarify pull request source branch a little more (#27625)

d85f9a7

---- *By submitting this pull request, I confirm that my contribution is made under the terms of the Apache-2.0 license*

feat(synthetics): syn-python-selenium-2.0 runtime (#27565)

1a89ef9

adding missing selenium runtime for synthetics package Closes #27566. ---- *By submitting this pull request, I confirm that my contribution is made under the terms of the Apache-2.0 license*

docs(pipelines): update README (#27630)

9c0de51

Uses new `dynamo.TableV2` construct in examples. Uses `aws-cdk-lib/` instead of `@aws-cdk/` paths where applicable. ---- *By submitting this pull request, I confirm that my contribution is made under the terms of the Apache-2.0 license*

chore(region-info): Adding missing regions for kinesisfirehose (#27672)

46372e0

Closes #27656 ---- *By submitting this pull request, I confirm that my contribution is made under the terms of the Apache-2.0 license*

feat: update AWS Service Spec (#27650)

d1c36c6

AWS Service Spec packages to latest versions.

chore(release): 2.103.0

1bb89eb

aws-cdk-automation added auto-approve pr/no-squash This PR should be merged instead of squash-merging it labels Oct 25, 2023

github-actions bot added the p2 label Oct 25, 2023

aws-cdk-automation requested a review from a team October 25, 2023 22:10

github-actions bot approved these changes Oct 25, 2023

View reviewed changes

aws-cdk-automation had a problem deploying to test-pipeline October 25, 2023 22:11 — with GitHub Actions Failure

vinayak-kukreja added the pr/do-not-merge This PR should not be merged at this time. label Oct 25, 2023

vinayak-kukreja closed this Oct 25, 2023

vinayak-kukreja deleted the bump/2.103.0 branch October 25, 2023 23:20

github-actions bot mentioned this pull request Nov 1, 2023

Monthly PR metrics report - October 2023 #27786

Closed

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

chore(release): 2.103.0 #27683

chore(release): 2.103.0 #27683

aws-cdk-automation commented Oct 25, 2023 •

edited

Loading

aws-cdk-automation commented Oct 25, 2023

chore(release): 2.103.0 #27683

chore(release): 2.103.0 #27683

Conversation

aws-cdk-automation commented Oct 25, 2023 • edited Loading

aws-cdk-automation commented Oct 25, 2023

AWS CodeBuild CI Report

aws-cdk-automation commented Oct 25, 2023 •

edited

Loading