v2.161.0

Features

• update L1 CloudFormation resource definitions (#31640) (79d9c4d), closes /docs.aws.amazon.com/datasync/latest/userguide/create-locations-cli.html#create-location-s3
• bedrock: support meta llama3-2 (#31568) (4ddc702)
• cli: cdk rollback (#31407) (0755561), closes #30546
• cli: notices on bootstrap version (#31555) (b0e4a54)
• ecs: support restart policy for container (#31228) (a22e8cc), closes #31127 #31425
• logs: add metric methods for log group IncomingLogEvents and IncomingBytes (#31535) (2813eb2), closes #30034
• rds: support for local write forwarding in an Aurora Mysql cluster (#31524) (48c4192), closes #31523
• s3-deployment: added property outputObjectKeys for BucketDeployment (#31452) (54c01cb), closes #28579

Bug Fixes

• appsync: lambda authorizer permission is not scoped to appsync api arn (#31567) (c7cee15), closes #31550 /docs.aws.amazon.com/controltower/latest/controlreference/lambda-rules.html#ct-lambda-pr-2
• batch: remove default optimal for arm based instance types and add error checks (#31510) (7e80cc9), closes #31148
• cdk: cdk diff --quiet to print stack name when there is diffs (#30186) (bcf9209), closes #27128
• cli: deployment errors are printed 3 times (#31389) (4b00ffe)
• core: isTaggable function can return undefined instead of false (#31600) (be70c82), closes #26495
• core: apps that use token-aware-stringify are construct-instantiation-order-dependent (#31470) (4128bf1), closes #31345 #31345
• core: file asset publishing role not used in cdk diff to upload large templates (#31597) (be1207b), closes #29936 /github.com/aws/aws-cdk/blob/main/packages/aws-cdk/lib/api/bootstrap/bootstrap-template.yaml#L275 /github.com/aws/aws-cdk/blob/4b00ffeb86b3ebb9a0190c2842bd36ebb4043f52/packages/aws-cdk/lib/api/deployments.ts#L605
• core: throw on intrinsics in CFN update and create policies (#31578) (9410361), closes #27578 #30740
• lambda: configuring log retention fails on 70+ Lambdas (#31340) (a2d42d2), closes #31338
• lambda-nodejs: remove smithy models from bundling for AWS SDK v3 runtimes (under feature flag) (#31639) (19ee46d)
• pipelines: "Node with duplicate id" on duplicate stack names (#31328) (16b74f3), closes #30960
• rds: fixed the IAM policy that grantConnect() generates for DatabaseInstanceReadReplica (#31579) (52f676c), closes #31061
• stack: check stack tags for deploy-time values (#31457) (abd1768), closes #28017
• update L1 CloudFormation resource definitions by removing outdated schema overrides (#31539) (218331b)

---

Alpha modules (2.161.0-alpha.0)

⚠ BREAKING CHANGES TO EXPERIMENTAL FEATURES

• kinesisfirehose-destinations: the logging and logGroup properties in DestinationLoggingProps have been removed and replaced with a single optional property loggingConfig which accepts a class of type LoggingConfig.

Details

Combine the logging and logGroup properties into a single new optional property called loggingConfig which accepts a class of type LoggingConfig.

LoggingConfig is an abstract class which can be instantiated through either an instance of EnableLogging or DisableLogging which can be used in the following 3 ways:

import * as logs from 'aws-cdk-lib/aws-logs';

const logGroup = new logs.LogGroup(this, 'Log Group');
declare const bucket: s3.Bucket;

// 1. Enable logging with no parameters - a log group will be created for you
const destinationWithLogging = new destinations.S3Bucket(bucket, {
  loggingConfig: new destinations.EnableLogging(),
});

// 2. Enable a logging and pass in a logGroup to be used
const destinationWithLoggingAndMyLogGroup = new destinations.S3Bucket(bucket, {
  loggingConfig: new destinations.EnableLogging(logGroup),
});

// 3. Disable logging (does not accept any parameters so it is now impossible to provide a logGroup in this case)
const destinationWithoutLogging = new destinations.S3Bucket(bucket, {
  loggingConfig: new destinations.DisableLogging(),
});

Description of how you validated changes

unit + integ test

Checklist

• My code adheres to the CONTRIBUTING GUIDE and DESIGN GUIDELINES

Features

• ec2: add interface endpoint dynamodb (#30162) (182804a), closes #29547
• pipes-sources: add Kinesis and DynamoDB (#29476) (00c2efb), closes #29378 #29377
• pipes-targets: add API destination (#30756) (5e08c98), closes /github.com/aws/aws-cdk/blob/main/packages/aws-cdk-lib/aws-events-targets/lib/api-gateway.ts#L11-L32
• pipes-targets: add Kinesis (#30656) (d0c99d8)
• redshift: supports excludeCharacters settings for DatabaseSecret (#30563) (a1c46cf), closes #26847

Bug Fixes

• custom-resource-handlers: better fallback for require failures (#31571) (00cdbcb), closes #30067

Miscellaneous Chores

• kinesisfirehose-destinations: refactor logging to combine logGroup and logging properties into loggingConfig (#31488) (c4bda64)