Release v2.258.0 · aws/aws-cdk

** L1 resources are automatically generated from public CloudFormation Resource Schemas. They are built to closely reflect the real state of CloudFormation. Sometimes these updates can contain changes that are incompatible with previous types, but more accurately reflect reality. In this release we have changed:

aws-pcaconnectorad: AWS::PCAConnectorAD::ServicePrincipalName: ConnectorArn property is now required.
aws-pcaconnectorad: AWS::PCAConnectorAD::ServicePrincipalName: DirectoryRegistrationArn property is now required.
aws-pcaconnectorad: AWS::PCAConnectorAD::TemplateGroupAccessControlEntry: GroupSecurityIdentifier property is now required.
aws-pcaconnectorad: AWS::PCAConnectorAD::TemplateGroupAccessControlEntry: TemplateArn property is now required.

core: trace property assignments in CfnResource.addPropertyOverride (#38072) (a226372)
update L1 CloudFormation resource definitions (#37993) (664a878)
aws-cdk-lib: emits performance counters if synthesis is slow (#38004) (cb03794), closes #37919 #37843
bedrockagentcore: expose default endpoint application log group on Runtime (#37812) (8e25d78), closes #37796
core: add scope to IPolicyValidationContext (#38006) (cae7456)
core: allow validation plugins to create new files in cloud assembly (#38007) (d9f38a9)
core: fine-grained control over cross-stack reference strength (#37840) (bddcd44)
core: include suppressed violations in validation-report.json (#38009) (f396892)
core: new validation report schema (#37970) (4e09b52), closes aws/aws-cdk-cli#1515
eks: add AlbControllerVersion support for v2.8.3 through v3.2.2 (#37752) (20abc6a), closes #37414
eks: add deletionProtection property to Cluster construct (#36474) (5b19ac5), closes #36460
elasticache: replace CacheEngine/UserEngine enums with enum-like classes (#37816) (6ad84b3), closes #37813

autoscaling: use of ScheduledAction.endTime is dangerous (#38014) (109fae7)
aws-cdk-lib: make token resolution ~25% faster (#37920) (87483dc)
bedrockagentcore: relax allowlistedHeaders pattern to match CFN schema (#37969) (e0d6c8a), closes #37964
cloudwatch: metric math validation reports quoted strings as unknown identifiers (#37977) (59bae38)
core: cross-region SSM writer orphans parameters when resource is replaced during stack update (#38059) (f130388)
core: handle string "false" for boolean context values in validation (#37989) (a26ed73)
integ-tests: responseURL logged in onTimeout (#37972) (b9259dd)
lambda-nodejs: bundling rejects entry paths containing ".." (#38022) (a7cc53c), closes #38017 #37572 #37572
lambda-nodejs: perf counters e2e test uses incorrect filename (#38033) (d88637f)

Alpha modules (2.258.0-alpha.0)

integ-tests-alpha: add option to set the provider log level (#38005) (c634a79)

custom-resource-handlers: deterministic asset hashes for generated lambdas (#37634) (6c3d5bc), closes #34307
glue-alpha: deprecate Ray Jobs (#38055) (3fa428b)
glue-alpha: restore notifyDelayAfter to PySpark and Scala Spark ETL jobs (#37815) (05be88a), closes #33839
integ-tests-alpha: assertion failures print too much unnecessary information (#37974) (bc0de1d)
mediapackagev2-alpha: cdnAuth on OriginEndpoint now generates the required policy (#38013) (1d56b46)