v2.250.0

⚠ BREAKING CHANGES

• ** L1 resources are automatically generated from public CloudFormation Resource Schemas. They are built to closely reflect the real state of CloudFormation. Sometimes these updates can contain changes that are incompatible with previous types, but more accurately reflect reality. In this release we have changed:

aws-emr: AWS::EMR::Cluster: MonitoringConfiguration property removed.
aws-emr: AWS::EMR::Cluster: CloudWatchLogConfiguration type removed.
aws-emr: AWS::EMR::Cluster: EMRConfiguration type removed.
aws-emr: AWS::EMR::Cluster: MonitoringConfiguration type removed.

Features

• s3files: s3Files Lambda L1 integration (#37547) (af41262)
• update L1 CloudFormation resource definitions (#37582) (c99ce64)
• mediapackagev2: add region attribute on mediapackagev2 resources and extra naming validation (#37526) (112ed67)

Bug Fixes

• eks-v2: respect securityGroup(s) in KubectlProviderOptions (#37247) (4c530fa), closes #36653
• lambda-nodejs: if entry path is not under project root, bundling in Docker fails in an unclear way (#37572) (73662df)

---

Alpha modules (2.250.0-alpha.0)

v2.249.0

⚠ BREAKING CHANGES

• L1 resources are automatically generated from
  public CloudFormation Resource Schemas. They are built to closely
  reflect the real state of CloudFormation. Sometimes these updates can
  contain changes that are incompatible with previous types, but more
  accurately reflect reality. In this release we have changed:

aws-appstream: AWS::AppStream::Stack: Id attribute removed.
aws-appsync: AWS::AppSync::GraphQLApi: LogConfig.CloudWatchLogsRoleArn
property is now required.
aws-appsync: AWS::AppSync::GraphQLApi: LogConfig.FieldLogLevel property
is now required.
aws-kafkaconnect: AWS::KafkaConnect::Connector:
ProvisionedCapacity.McuCount property is now required.

Features

• batch: add AL2023 image types and default to AL2023 (under feature flag) (#37539) (6c1251c), closes #35839 #37205
• update L1 CloudFormation resource definitions (f28bb0e)
• update L1 CloudFormation resource definitions (#37530) (117562c)
• core: add source tracing for L1 construct property mutations (#37543) (8f38378)

Bug Fixes

• ensure issues created outside templates receive needs-triage label (#37505) (58cb92a), closes #37454 Abogical/aws-cdk#24
• include cfn-property-mixins in spec-update workflow gen step (e847c52), closes #36300

---

Alpha modules (2.249.0-alpha.0)

v2.248.0

Bug Fixes

• eks: downgrade isolated subnet validation from error to warning (#37500) (470856c), closes #37491

---

Alpha modules (2.248.0-alpha.0)

v2.247.0

⚠ BREAKING CHANGES

• ** L1 resources are automatically generated from public CloudFormation Resource Schemas. They are built to closely reflect the real state of CloudFormation. Sometimes these updates can contain changes that are incompatible with previous types, but more accurately reflect reality. In this release we have changed:

aws-bedrockagentcore: AWS::BedrockAgentCore::OnlineEvaluationConfig: ExecutionStatus attribute removed.
aws-appstream: AWS::AppStream::ImageBuilder: Name property is now immutable.
aws-eks: AWS::EKS::Capability: EKS_CAPABILITY_ACK_S3_LOGS vended log type removed.

Features

• update L1 CloudFormation resource definitions (#37410) (bd2c318)
• apigatewayv2: add role support for lambda authorizers (#35706) (2fb2f16), closes #35696
• batch: skip unregister job definition on update (#36011) (2fb2240)
• elasticloadbalancingv2: jwt verification for application load balancer (#36099) (aacd28a), closes #36096

Bug Fixes

• bump brace-expansion from 5.0.3 to 5.0.5 to address CVE-2026-33750 (#37379) (69cf4c9)
• prevent prototype pollution in 2 APIs (#37453) (1016537)
• aws-cdk-lib: condensed stack trace hides namespaced package name (#37413) (cb8e7fb)

---

Alpha modules (2.247.0-alpha.0)

Features

• mediapackagev2-alpha: new L2 construct (#37279) (7debfb9)

v2.246.0

Features

• bedrock: add MiniMax and GLM foundation model identifiers (#37348) (2015344), closes #37347

Bug Fixes

• dynamodb: throw error when grantee is an unsupported ServicePrincipal (#37335) (d12754f), closes #35817 /github.com/aws/aws-cdk/issues/37273#issuecomment-4099645443
• lambda-nodejs: use powershell for spawn steps on Windows (#37412) (a92105c), closes #37387
• core: noisy property deprecation warnings (#37415) (4fd0002), closes #37407

Reverts

• core: add source tracing for L1 construct property mutations (#37415) (4fd0002), closes aws/aws-cdk#37285

---

Alpha modules (2.246.0-alpha.0)

v2.245.0

Features

• update L1 CloudFormation resource definitions (#37332) (6cdf84a)
• autoscaling: add instanceLifecyclePolicy support to AutoScalingGroup Property (#36434) (b72ffcc)
• cloudfront: use JavaScript runtime 2.0 as the default for CloudFront Functions (under feature flag) (#35941) (cd0df14)
• core: add source tracing for L1 construct property mutations (#37285) (f0b6da8)
• ecr-assets: add support for docker build context (#36930) (c0849ea), closes #31598
• s3: add blockedEncryptionTypes field to s3.Bucket (#37047) (262e8a7), closes #36988
• synthetics: add enum value for Synthetics Canary NodeJS 3.1 runtime (#37282) (af1e89c), closes /docs.aws.amazon.com/AmazonCloudWatch/latest/monitoring/CloudWatch_Synthetics_Library_Nodejs.html#CloudWatch_Synthetics_runtimeversion-syn-nodejs-3

Bug Fixes

• aws-cdk-lib: toolkit is unaware of CDK app errors (#37294) (093de92)
• eks: throw error when kubectl subnets are isolated (#37217) (73e5006), closes #26613
• lambda: fix typo in addPermission() warning message (#37365) (fa21e62)
• lambda-nodejs: use direct spawn for local bundling (#37292) (9bf4263)
• mixin: use withMixin in Stack to set mixin metadata in its constructs (#37269) (293ce90), closes /github.com/aws/aws-cdk/blob/main/packages/aws-cdk-lib/core/lib/mixins/private/mixin-metadata.ts#L30
• rds: enablePerformanceInsights false is ignored when other performance insight properties are set (#37287) (b4bca75), closes #37051
• construct errors are rendered in a messy way (#37290) (5104256)
• spec2cdk: throw on unrecognized uppercase prefix in event pattern (#37283) (c68f2f5)

---

Alpha modules (2.245.0-alpha.0)

Features

• s3tables-alpha: add support for partition spec, sort order, and table properties (#36811) (2696cd1)
• s3tables-alpha: add metrics configuration support for TableBucket (#37275) (e8786f5)
• s3tables-alpha: implement ITaggableV2 on TableBucket and Table L2 constructs (#37277) (69c8944), closes #33054

v2.244.0

Features

• codebuild: add support for macOS 26 runners (#37240) (1b7b292), closes #37241 #35836
• update L1 CloudFormation resource definitions (#37260) (40a5142)
• rds: add standalone resource creation for ParameterGroup (#37165) (5441a51), closes #9741
• ecs: add forceNewDeployment feature for ecs service (#35726) (d16dc7e), closes #27762
• mixins: helpers to convert between Aspects and Mixins (#37235) (4537f69)
• spec2cdk: add actions() method to Grants classes (#36987) (bbeaf5d)

Bug Fixes

• aws-cdk-lib: error annotations now have error codes (#37270) (0b9629e)
• eks: clear OCI repo/version after local pull for Helm v4 compatibility (#37142) (e6a8804), closes /github.com/helm/helm/blob/v3.19.0/pkg/action/install.go#L753-L769 /github.com/helm/helm/blob/main/pkg/action/install.go#L893-L909
• all errors now have error codes (#36934) (408c12f)

---

Alpha modules (2.244.0-alpha.0)

Bug Fixes

• kinesisanalytics-flink-alpha: mark deprecated flink runtimes as deprecated (#37155) (0a89447)

v2.243.0

Features

• update L1 CloudFormation resource definitions (#37201) (85daaf5)
• cfn-property-mixins: graduate to stable @aws-cdk/cfn-property-mixins package (#37215) (f071e67)

Bug Fixes

• dynamodb: resource policies don't have the index ARNs when indexes are added after granting permissions (#37213) (eb37071)

---

Alpha modules (2.243.0-alpha.0)

v2.242.0

⚠ BREAKING CHANGES

• ** L1 resources are automatically generated from public CloudFormation Resource Schemas. They are built to closely reflect the real state of CloudFormation. Sometimes these updates can contain changes that are incompatible with previous types, but more accurately reflect reality. In this release we have changed:

  • aws-ssm: AWS::SSM::MaintenanceWindow: Id attribute removed.

Features

• core: support PropertyMergeStrategy to merge arbitrary CFN property objects (#37206) (793ad97)
• ecr: add RepositoryAutoDeleteImages mixin (#37176) (3189116)
• s3 and ecs service mixins are now available in aws-cdk-lib (#37151) (52c99da)
• update L1 CloudFormation resource definitions (#37173) (1dfaf5f), closes #37BFF5 #37BFF5
• apigateway: add TLS 1.3 security policies for domain names (#36303) (9d0300b), closes #36280
• appsync: add EnhancedMetricsConfigProperty for GraphQL api (#35328) (ebfaf89), closes #29933
• opensearchservice: s3 vectors engine (#36382) (c0b1d4e)
• s3: graduate BucketAutoDeleteObjects mixin into aws-cdk-lib (#37161) (e5ddd79)

Bug Fixes

• aws-cdk-lib: Asset uses a lot of memory (#37186) (70cae75)
• large amounts of metadata can break 512MB string limit (#34480) (20c3154)
• opensearchservice: enableAutoSoftwareUpdate: false is not reflected in the CloudFormation template (#37152) (dec8e6f), closes #36382
• s3: discover existing bucket policies in default trait factory (#37166) (f090816)

---

Alpha modules (2.242.0-alpha.0)

Features

• mixins-preview: allow passing resource objects into properties in CFN Property mixins (#37148) (f238629)
• mixins-preview: generate EventBridge pattern for all events (#37081) (f30e836)
• mixins-preview: support custom merge strategies via IMergeStrategy (#37170) (0dec011)

v2.241.0

⚠ BREAKING CHANGES

• ** L1 resources are automatically generated from public CloudFormation Resource Schemas. They are built to closely reflect the real state of CloudFormation. Sometimes these updates can contain changes that are incompatible with previous types, but more accurately reflect reality. In this release we have changed:

aws-codedeploy: AWS::CodeDeploy::DeploymentGroup: Id attribute removed.

Features

• update L1 CloudFormation resource definitions (#37103) (f1ee45c)
• autoscaling: add deletionProtection property to AutoScalingGroup (#36924) (467f2b4)
• core: introducing CDK Mixins (#37055) (cda96cb)
• eks: add support for Kubernetes version 1.35 (#37065) (909fca3), closes #36920 #36016 cdklabs/awscdk-asset-kubectl#2669 #37070 #36950 #36016
• s3: attribute-based access control (#36229) (9ec4db3)

Bug Fixes

• bump minimatch to ^10.2.3 to resolve ReDoS vulnerabilities (#37127) (c359329), closes #37100
• dynamodb: fix SID for grants on multi-account global tables (#37057) (98d5e82)
• rds: correct engine version deprecation tags and add missing versions (#37080) (127b359), closes #37079 #36937

---

Alpha modules (2.241.0-alpha.0)

Features

• mixins-preview: add recordFields and outputFormat to Vended Logs Mixin (#37042) (dd94c31)
• mixins-preview: cross account delivery destinations (#36827) (a759eb6)