diff --git a/CHANGELOG.md b/CHANGELOG.md
index 588f04ba9..21c51da4f 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -2,6 +2,38 @@
 
 All notable changes to this project will be documented in this file. See [standard-version](https://github.com/conventional-changelog/standard-version) for commit guidelines.
 
+## [0.27.0](https://github.com/aws/aws-rfdk/compare/v0.26.0...v0.27.0) (2021-03-12)
+
+
+### Supported CDK Version
+
+* [1.91.0](https://github.com/aws/aws-cdk/releases/tag/v1.91.0)
+
+
+### Officially Supported Deadline Versions
+
+* [10.1.9.2 to 10.1.14.4](https://docs.thinkboxsoftware.com/products/deadline/10.1/1_User%20Manual/manual/release-notes.html)
+
+
+### Security Notice
+
+RFDK version 0.27.x and later include security enhancements.  We recommend you upgrade RFDK and Deadline to further restrict the permissions required for RFDK & Deadline to function. Please upgrade the version of RFDK used in your CDK application to 0.27.x, and configure your application to deploy Deadline 10.1.14.x or later to resolve the issue. 
+
+If you have an existing deployment that was built with RFDK versions 0.26.x or earlier, you will need to upgrade to RFDK 0.27.x and Deadline 10.1.14.x or later before June 10, 2021 @ 1:00PM PST/ 3:00PM CST/ 4:00PM EST. Failure to upgrade by the above date may result in disruptions to your render farm. If you have any questions, please contact AWS Thinkbox Customer Support at https://support.thinkboxsoftware.com/.
+
+### ⚠ BREAKING CHANGES
+
+- If your application provides an EFS file-system to a Repository construct, it must now also pass an
+  [EFS Access Point](https://docs.aws.amazon.com/efs/latest/ug/efs-access-points.html). See the [RFDK 0.27.x upgrade documentation](https://github.com/aws/aws-rfdk/blob/v0.27.0/packages/aws-rfdk/docs/upgrade/upgrading-0.27.md)
+  for details.
+
+### Features
+
+* **core:** make cloudwatch agent install optional ([#338](https://github.com/aws/aws-rfdk/issues/338)) ([ac052ea](https://github.com/aws/aws-rfdk/commit/ac052ea67ab90e8c6ac18af71a950b20c68a24f1))
+* **core:** add ability to use EFS access points ([#339](https://github.com/aws/aws-rfdk/issues/339)) ([544496c](https://github.com/aws/aws-rfdk/commit/544496cb67b3880fc187716a33ebeca595c108d7))
+* **deadline:** add ability to use EFS access points ([#339](https://github.com/aws/aws-rfdk/issues/339)) ([544496c](https://github.com/aws/aws-rfdk/commit/544496cb67b3880fc187716a33ebeca595c108d7))
+
+
 ## [0.26.0](https://github.com/aws/aws-rfdk/compare/v0.25.0...v0.26.0) (2021-03-01)
 
 
diff --git a/examples/deadline/All-In-AWS-Infrastructure-Basic/python/setup.py b/examples/deadline/All-In-AWS-Infrastructure-Basic/python/setup.py
index e11554bf4..0673e5382 100644
--- a/examples/deadline/All-In-AWS-Infrastructure-Basic/python/setup.py
+++ b/examples/deadline/All-In-AWS-Infrastructure-Basic/python/setup.py
@@ -18,7 +18,7 @@
 
     install_requires=[
         "aws-cdk.core==1.91.0",
-        "aws-rfdk==0.26.0"
+        "aws-rfdk==0.27.0"
     ],
 
     python_requires=">=3.7",
diff --git a/examples/deadline/All-In-AWS-Infrastructure-Basic/ts/package.json b/examples/deadline/All-In-AWS-Infrastructure-Basic/ts/package.json
index 32e598a77..6c02ca6f7 100644
--- a/examples/deadline/All-In-AWS-Infrastructure-Basic/ts/package.json
+++ b/examples/deadline/All-In-AWS-Infrastructure-Basic/ts/package.json
@@ -1,6 +1,6 @@
 {
   "name": "all-in-farm-basic",
-  "version": "0.26.0",
+  "version": "0.27.0",
   "bin": {
     "app": "bin/app.js"
   },
@@ -21,7 +21,7 @@
   },
   "dependencies": {
     "@aws-cdk/core": "1.91.0",
-    "aws-rfdk": "0.26.0",
+    "aws-rfdk": "0.27.0",
     "source-map-support": "^0.5.19"
   }
 }
diff --git a/examples/deadline/All-In-AWS-Infrastructure-SEP/python/setup.py b/examples/deadline/All-In-AWS-Infrastructure-SEP/python/setup.py
index 9e63969b1..fa1f3ca95 100644
--- a/examples/deadline/All-In-AWS-Infrastructure-SEP/python/setup.py
+++ b/examples/deadline/All-In-AWS-Infrastructure-SEP/python/setup.py
@@ -18,7 +18,7 @@
 
     install_requires=[
         "aws-cdk.core==1.91.0",
-        "aws-rfdk==0.26.0"
+        "aws-rfdk==0.27.0"
     ],
 
     python_requires=">=3.7",
diff --git a/examples/deadline/All-In-AWS-Infrastructure-SEP/ts/package.json b/examples/deadline/All-In-AWS-Infrastructure-SEP/ts/package.json
index 6a8e302a5..2dd6136ae 100644
--- a/examples/deadline/All-In-AWS-Infrastructure-SEP/ts/package.json
+++ b/examples/deadline/All-In-AWS-Infrastructure-SEP/ts/package.json
@@ -1,6 +1,6 @@
 {
   "name": "all-in-farm-sep",
-  "version": "0.26.0",
+  "version": "0.27.0",
   "bin": {
     "app": "bin/app.js"
   },
@@ -25,7 +25,7 @@
   },
   "dependencies": {
     "@aws-cdk/core": "1.91.0",
-    "aws-rfdk": "0.26.0",
+    "aws-rfdk": "0.27.0",
     "source-map-support": "^0.5.19"
   }
 }
diff --git a/integ/package.json b/integ/package.json
index c14161af6..cd057b4fe 100644
--- a/integ/package.json
+++ b/integ/package.json
@@ -1,6 +1,6 @@
 {
   "name": "integ",
-  "version": "0.26.0",
+  "version": "0.27.0",
   "private": false,
   "description": "Integration tests for RFDK constructs",
   "bin": {
@@ -67,7 +67,7 @@
     "eslint-plugin-import": "^2.22.1",
     "eslint-plugin-license-header": "^0.2.0",
     "jest": "^26.6.3",
-    "pkglint": "0.26.0",
+    "pkglint": "0.27.0",
     "ts-jest": "^26.5.2"
   },
   "dependencies": {
@@ -84,7 +84,7 @@
     "@aws-cdk/aws-s3-assets": "1.91.0",
     "@aws-cdk/aws-secretsmanager": "1.91.0",
     "@aws-cdk/core": "1.91.0",
-    "aws-rfdk": "0.26.0",
+    "aws-rfdk": "0.27.0",
     "aws-sdk": "^2.853.0"
   },
   "peerDependencies": {
@@ -101,7 +101,7 @@
     "@aws-cdk/aws-s3-assets": "1.91.0",
     "@aws-cdk/aws-secretsmanager": "1.91.0",
     "@aws-cdk/core": "1.91.0",
-    "aws-rfdk": "0.26.0",
+    "aws-rfdk": "0.27.0",
     "aws-sdk": "^2.853.0"
   },
   "engines": {
diff --git a/lambda-layers/package.json b/lambda-layers/package.json
index 41a6cae55..5bf92578a 100644
--- a/lambda-layers/package.json
+++ b/lambda-layers/package.json
@@ -1,6 +1,6 @@
 {
   "name": "lambda-layers",
-  "version": "0.26.0",
+  "version": "0.27.0",
   "private": false,
   "description": "Package containing scripts for building and publishing Lambda Layers",
   "main": "lib/index.js",
diff --git a/lerna.json b/lerna.json
index b4061ced1..deea8ca8b 100644
--- a/lerna.json
+++ b/lerna.json
@@ -3,5 +3,5 @@
   "npmClient": "yarn",
   "useWorkspaces": true,
   "rejectCycles": "true",
-  "version": "0.26.0"
+  "version": "0.27.0"
 }
diff --git a/package.json b/package.json
index 9e345d682..adac18a0d 100644
--- a/package.json
+++ b/package.json
@@ -1,6 +1,6 @@
 {
   "name": "aws-rfdk-project",
-  "version": "0.26.0",
+  "version": "0.27.0",
   "license": "Apache-2.0",
   "author": {
     "name": "Amazon Web Services",
diff --git a/packages/aws-rfdk/package.json b/packages/aws-rfdk/package.json
index cca33afee..fa8acc524 100644
--- a/packages/aws-rfdk/package.json
+++ b/packages/aws-rfdk/package.json
@@ -1,6 +1,6 @@
 {
   "name": "aws-rfdk",
-  "version": "0.26.0",
+  "version": "0.27.0",
   "private": false,
   "description": "Package for core render farm constructs",
   "main": "lib/index.js",
@@ -70,9 +70,9 @@
     "@types/sinon": "^9.0.10",
     "aws-sdk": "^2.853.0",
     "aws-sdk-mock": "^5.1.0",
-    "cdk-build-tools": "0.26.0",
+    "cdk-build-tools": "0.27.0",
     "dynalite": "^3.2.1",
-    "pkglint": "0.26.0",
+    "pkglint": "0.27.0",
     "sinon": "^9.2.4"
   },
   "dependencies": {
diff --git a/tools/cdk-build-tools/package.json b/tools/cdk-build-tools/package.json
index 04f860bde..45fee1b83 100644
--- a/tools/cdk-build-tools/package.json
+++ b/tools/cdk-build-tools/package.json
@@ -1,7 +1,7 @@
 {
   "name": "cdk-build-tools",
   "private": true,
-  "version": "0.26.0",
+  "version": "0.27.0",
   "description": "Tools package with shared build scripts for CDK packages",
   "main": "lib/index.js",
   "repository": {
@@ -38,7 +38,7 @@
     "@types/jest": "^26.0.20",
     "@types/yargs": "^16.0.0",
     "eslint-plugin-license-header": "^0.2.0",
-    "pkglint": "0.26.0"
+    "pkglint": "0.27.0"
   },
   "dependencies": {
     "@typescript-eslint/eslint-plugin": "^4.15.1",
diff --git a/tools/pkglint/package.json b/tools/pkglint/package.json
index 031185704..1494ea165 100644
--- a/tools/pkglint/package.json
+++ b/tools/pkglint/package.json
@@ -1,6 +1,6 @@
 {
   "name": "pkglint",
-  "version": "0.26.0",
+  "version": "0.27.0",
   "private": true,
   "description": "Validate and fix package.json files",
   "main": "lib/index.js",