Update aws-cdk monorepo to v1.100.0

[renovate]

This PR contains the following updates:

Package	Change	Age	Adoption	Passing	Confidence
@aws-cdk/assert	1.8.0 -> 1.100.0
@aws-cdk/aws-autoscaling	1.8.0 -> 1.100.0
@aws-cdk/aws-ec2	1.8.0 -> 1.100.0
@aws-cdk/aws-elasticloadbalancingv2	1.8.0 -> 1.100.0
@aws-cdk/aws-rds	1.8.0 -> 1.100.0
@aws-cdk/core	1.8.0 -> 1.100.0
aws-cdk	1.8.0 -> 1.100.0

---

Release Notes

aws/aws-cdk

v1.100.0

Compare Source

⚠️ BREAKING CHANGES TO EXPERIMENTAL FEATURES

• appmesh: HTTP2 VirtualNodeListeners must be now created with Http2VirtualNodeListenerOptions
• appmesh: HTTP2 VirtualGatewayListeners must be now created with Http2VirtualGatewayListenerOptions
• codepipeline-actions: the Action ServiceCatalogDeployAction has been renamed to ServiceCatalogDeployActionBeta1
• codepipeline-actions: the type ServiceCatalogDeployActionProps has been renamed to ServiceCatalogDeployActionBeta1Props
• events-targets: The BatchJob integration now requires the arn and the Resource for the jobQueue and the jobDefinition
• lambda-event-sources: cluster was removed from ManagedKafkaEventSourceProps and replaced with clusterArn
• route53-targets: ApiGatewayv2Domain was replaced with ApiGatewayv2DomainProperties which accepts regionalDomainName and regionalHostedZoneId
• stepfunctions-tasks: CallApiGatewayHttpApiEndpoint API now requires the apiId and it's containing Stack
• stepfunctions-tasks: BatchSubmitJob now accept jobDefinitionArn, jobQueueArn and their respective Resource
• stepfunctions-tasks: RunBatchJob now accept jobDefinitionArn, jobQueueArn and their respective Resource

Features

• apigateway: integration timeout (#​14154) (d02770e), closes #​14123
• appmesh: add Connection Pools for VirtualNode and VirtualGateway (#​13917) (8a949dc), closes #​11647
• certificatemanager: allow tagging DnsValidatedCertificate (#​13990) (8360feb), closes #​12382 #​12382
• codebuild: allow setting concurrent build limit (#​14185) (3107d03)
• codepipeline: introduce the Action abstract class (#​14009) (4b6a6cc)
• ecs: add support for elastic inference accelerators in ECS task defintions (#​13950) (23986d7), closes #​12460
• eks: Pass bootstrap.sh args to avoid DescribeCluster call and make nodes join the cluster faster (#​12659) (f5616cc)
• secretsmanager: replicate secrets to multiple regions (#​14266) (b3c288d), closes #​14061

Bug Fixes

• codepipeline: incorrect determination of the Action's account when using an imported resource (#​14224) (d88e915), closes #​14165
• core: toJsonString() does not deal correctly with list tokens (#​14138) (1a6d39f), closes #​14088
• pipelines: incorrect BuildSpec in synth step if synthesized with --output (#​14211) (0f5c74f), closes #​13303
• rds: database instances cannot be to be referenced in a different region (#​13865) (74c7fff), closes #​13832

v1.99.0

Compare Source

Features

• elasticloadbalancing: rename 'sslCertificateId' property of LB listener to 'sslCertificateArn'; deprecate sslCertificateId property (#​13766) (1a30272), closes #​9303 #​9303

Bug Fixes

• aws-cloudfront: distribution comment length not validated (#​14020) (#​14094) (54fddc6)
• aws-ecs-patterns: fixes #​11123 allow for https listeners to use non Route 53 DNS if a certificate is provided (#​14004) (e6c85e4)
• cfn-include: allow deploy-time values in Parameter substitutions in Fn::Sub expressions (#​14068) (111d26a), closes #​14047
• fsx: Weekday.SUNDAY incorrectly evaluates to 0 (should be 7) (#​14081) (708f23e), closes #​14080

v1.98.0

Compare Source

Features

• codepipeline-actions: introduce the CodeStarConnectionsSourceAction (#​13781) (8782e67), closes #​10632
• efs: graduate to stable 🚀 (#​14033) (3c03d87)
• elasticloadbalancingv2: add grpc code matcher for alb (#​13948) (a37f178), closes #​13570 #​13947
• region-info: graduate to stable 🚀 (#​14013) (0d2755b)
• route-53: add ability to create NS Records (#​13895) (02c7c1d), closes #​13816

Bug Fixes

• apigateway: cannot remove first api key from usage plan (#​13817) (036d869), closes #​11876
• cloudfront: cannot use same EdgeFunction in multiple stacks (#​13790) (8e2325c)
• lambda-nodejs: esbuild define parameters are incorrectly encoded (#​14065) (5378a77), closes #​13842
• rds: deploy fails with "SubnetGroup not found" (#​13986) (ad326da), closes #​13976
• route53: cannot set TTL to 0 (#​14060) (ecc9bf3), closes #​14039
• s3: SSL enforcement doesn't apply on top level bucket requests (#​13961) (d0e831a), closes #​13760
• stepfunctions: state machine name validation fails when tokens are used. (#​13970) (58de0de), closes #​13946 #​13912

v1.97.0

Compare Source

⚠️ BREAKING CHANGES TO EXPERIMENTAL FEATURES

• elasticsearch: vpcOptions was removed. Use vpc, vpcSubnets and securityGroups instead.

Features

• appmesh: Implement Outlier Detection for Virtual Nodes (#​13952) (965f130)
• cx-api: graduate to stable 🚀 (#​13859) (d99e13d)
• eks: Support secretsEncryptionKey in FargateCluster (#​13866) (56c6f98)
• eks: Support bootstrap.sh --dns-cluster-ip arg (#​13890) (56cd863)
• elasticsearch: graduate to stable 🚀 (#​13900) (767cd31)
• s3-deployment: graduate to stable 🚀 (#​13906) (567d64d)
• ses: graduate to stable 🚀 (#​13913) (4f9a715)
• ses-actions: graduate to stable 🚀 (#​13864) (24f8307)

Bug Fixes

• aws-rds: ServerlessCluster.clusterArn is not correct when clusterIdentifier includes upper cases string. (#​13710) (a8f5b6c), closes #​12795
• cli: broken java init template (#​13988) (c6ca2ab), closes #​13964
• cloudfront: Cache Policy headers enforce soft limit of 10 (#​13904) (8a66244), closes #​13425 #​13903
• codepipeline-actions: EcrSourceAction triggers on a push to every tag (#​13822) (c5a2add), closes #​13818

v1.96.0

Compare Source

⚠️ BREAKING CHANGES TO EXPERIMENTAL FEATURES

• globalaccelerator: automatic naming algorithm has been changed: if you have existing Accelerators you will need to pass an
  explicit name to prevent them from being replaced. All endpoints are now added by calling addEndpoint() with a
  target-specific class that can be found in @aws-cdk/aws-globalaccelerator-endpoints. The generated Security Group
  is now looked up by calling endpointGroup.connectionsPeer().
• docdb: DatabaseClusterProps.instanceProps was hoisted and all its properties are now available one level up directly in DatabaseClusterProps.
• docdb: DatabaseInstanceProps.instanceClass renamed to DatabaseInstanceProps.instanceType.
• core: The type of the image property in BundlingOptions
  is changed from BundlingDockerImage to DockerImage.
• core: The return type of the DockerImage.fromBuild() API is
  changed from BundlingDockerImage to DockerImage.

Features

• autoscaling-common: graduate to stable 🚀 (#​13862) (2d623d0)
• chatbot: graduate to stable 🚀 (#​13863) (2384cdd)
• cli: app init template for golang (#​13840) (41fd42b), closes aws/jsii#​2678
• cloudformation-diff: graduate to stable 🚀 (#​13857) (294f546)
• docdb: graduate to stable 🚀 (#​13875) (169c2fc)
• ec2: allow disabling inline security group rules (#​13613) (793230c)
• elasticloadbalancingv2: graduate to stable 🚀 (#​13861) (08fa5ed)
• fsx: graduate to stable 🚀 (#​13860) (b2322aa)
• globalaccelerator: graduate to stable 🚀 (#​13843) (8571008)
• lambda: switch bundling images from DockerHub to ECR public gallery (#​13473) (e2e008b), closes #​11296
• lambda-event-sources: support for batching window to sqs event source (#​13406) (6743e3b), closes #​11722 #​11724 #​13770
• lambda-event-sources: tumbling window (#​13412) (e9f2773), closes #​13411
• lambda-nodejs: graduate to stable 🚀 (#​13844) (37a5502)

Bug Fixes

• aws-ecs: broken splunk-logging tag-option in fargate platform version 1.4 (#​13882) (e9d9299), closes #​13881
• cloudfront: auto-generated cache policy name might conflict cross-region (#​13737) (4f067cb), closes #​13629
• cloudfront: Origin Request Policy headers enforce soft limit of 10 (#​13907) (9b0a6cf), closes #​13410 #​13903
• codebuild: allow passing the ARN of the Secret in environment variables (#​13706) (6f6e079), closes #​12703
• codebuild: take the account & region of an imported Project from its ARN (#​13708) (fb65123), closes #​13694
• codedeploy: script installing CodeDeploy agent fails (#​13758) (25e8d04), closes #​13755
• cognito: imported userpool not retaining environment from arn (#​13715) (aa9fd9c), closes #​13691
• core: BundlingDockerImage.fromAsset() does not return a BundlingDockerImage (#​13846) (7176a5d)
• dynamodb: table with replicas fails to deploy with "Unresolved resource dependencies" error (#​13889) (5c99d0d)
• iam: Role import doesn't fail when forgetting the region in the ARN (#​13821) (560a853), closes #​13812
• rds: fail with a descriptive error if Cluster's instance count is a deploy-time value (#​13765) (dd22e8f), closes #​13558
• yaml-cfn: do not deserialize year-month-date as strings (#​13745) (ffea818), closes #​13709

v1.95.2

Compare Source

• Upgrade a downstream dependency(pac-resolver) of the aws-cdk (the CDK CLI), to mitigate CVE-2021-28918 (13914) (794c951)

v1.95.1

Compare Source

Bug Fixes

• codebuild: module fails to load with error "Cannot use import statement outside a module" (b1ffd33), closes #​13699 #​13699

v1.95.0

Compare Source

⚠️ BREAKING CHANGES TO EXPERIMENTAL FEATURES

• lambda-nodejs: The type of image property in the
  Bundling class is changed from BundlingDockerImage to
  DockerImage.
• lambda-nodejs: The type of dockerImage property in
  BundlingOptions is changed from BundlingDockerImage to
  DockerImage.
• apigatewayv2: The type of allowMethods property under corsPreflight
  section is changed from HttpMethod to CorsHttpMethod.
• lambda-nodejs: the default runtime of a NodejsFunction is now Node.js 14.x if the environment from which it is deployed uses Node.js >= 14 and Node.js 12.x otherwise.

Features

• acmpca: make the ACM PCA module Generally Available (stable) (#​13778) (7ca79ff)
• apigatewayv2: http api - default authorizer options (#​13172) (53d9661)
• cfnspec: cloudformation spec v31.0.0 (#​13633) (9b1c786)
• cfnspec: cloudformation spec v31.1.0 (#​13763) (41a2b2e)
• codepipeline-actions: Add detectChanges option to BitBucketSourceAction (#​13656) (f2436bf)
• ec2: client vpn endpoint (#​12234) (4fde59a), closes #​4206
• events: retry-policy support (#​13660) (7966f8d), closes #​13659
• init-templates: app template comes with hint comments for 'env' (#​13696) (b940710), closes #​12321
• lambda-event-sources: msk and self-managed kafka event sources (#​12507) (73209e1), closes #​12099
• rds: make rds secret name configurable (#​13626) (62a91b7), closes #​8984
• sns: enable passing PolicyDocument to TopicPolicy (#​10559) (0d9c300), closes #​7934

Bug Fixes

• apigatewayv2: error while configuring ANY as an allowed method in CORS (#​13313) (34bb338), closes #​13280 #​13643

• aws-ecs: drain hook lambda allows tasks to stop gracefully (#​13559) (3e1148e), closes #​13506

• codebuild: Fixed build spec file format to return yaml (#​13445) (fab93c6)

• codedeploy: Use aws-cli instead of awscli for yum (#​13655) (449ce12)

• codepipeline-actions: BitBucketAction fails with S3 "Access denied" error (#​13637) (77ce45d), closes #​13557

• core: toJsonString() cannot handle list intrinsics (#​13544) (a5be042), closes #​13465

• events,applicationautoscaling: specifying a schedule rate in seconds results in an error (#​13689) (5d62331), closes #​13566

• lambda: incorrect values for prop UntrustedArtifactOnDeployment (#​13667) (0757686), closes #​13586

• neptune: create correct IAM statement in grantConnect() (#​13641) (2e7f046), closes #​13640

• s3: Notifications fail to deploy due to incompatible node runtime (#​13624) (aa32cf6)

• lambda-nodejs: prepare code to reduce merge conflicts when deprecated APIs are stripped (#​13738) (ca391b5)

• lambda-nodejs: update default runtime (#​13664) (ca42461)

v1.94.1

Compare Source

Bug Fixes

• s3: Notifications fail to deploy due to incompatible node runtime (#​13624) (26bc3d4)

v1.94.0

Compare Source

⚠️ BREAKING CHANGES TO EXPERIMENTAL FEATURES

• appmesh: Backend, backend default and Virtual Service client policies structures are being altered
• appmesh: you must use the backend default interface to define backend defaults in VirtualGateway.
  The property name also changed from backendsDefaultClientPolicy to backendDefaults
• appmesh: you must use the backend default interface to define backend defaults in VirtualNode,
  (the property name also changed from backendsDefaultClientPolicy to backendDefaults),
  and the Backend class to define a backend
• appmesh: you can no longer attach a client policy to a VirtualService

Features

• appmesh: add missing route match features (#​13350) (b71efd9), closes #​11645
• aws-elasticloadbalancingv2: add protocol version for ALB TargetGroups (#​13570) (165a3d8), closes #​12869
• ecs-patterns: Add ECS deployment circuit breaker support to higher-level constructs (#​12719) (e80a98a), closes #​12534 #​12360

Bug Fixes

• appmesh: Move Client Policy from Virtual Service to backend structure (#​12943) (d3f4284), closes #​11996
• autoscaling: AutoScaling on percentile metrics doesn't work (#​13366) (46114bb), closes #​13144
• cloudwatch: cannot create Alarms from labeled metrics that start with a digit (#​13560) (278029f), closes #​13434
• use NodeJS 14 for all packaged custom resources (#​13488) (20a2820), closes #​13534 #​13484
• ec2: Security Groups support all protocols (#​13593) (8c6b3eb), closes #​13403
• lambda: fromDockerBuild output is located under /asset (#​13539) (77449f6), closes #​13439
• region-info: ap-northeast-3 data not correctly registered (#​13564) (64da84b), closes #​13561

v1.93.0

Compare Source

Features

• amplify-domain: Added config for auto subdomain creation (#​13342) (4c63f09)
• appmesh: add route retry policies (#​13353) (66f7053), closes #​11642
• cfnspec: cloudformation spec v30.1.0 (#​13519) (7711981)
• codebuild: allow setting queued timeout (#​13467) (e09250b), closes #​11364
• dynamodb: custom timeout for replication operation (#​13354) (6a5a4f2), closes #​10249
• ec2: ESP and AH IPsec protocols for Security Groups (#​13471) (f5a6647), closes #​13403
• ec2: multipart user data (#​11843) (ed94c5e), closes #​8315
• ecr: add imageTagMutability prop (#​10557) (c4dc3bc), closes #​4640
• ecs: ability to access tag parameter value of TagParameterContainerImage (#​13340) (e567a41), closes #​13202
• ecs: allow users to provide a CloudMap service to associate with an ECS service (#​13192) (a7d314c), closes #​10057
• events: EventBus.grantPutEventsTo method for granular grants (#​13429) (122a232), closes #​11228
• events: dead-letter queue support for CodeBuild (#​13448) (abfc0ea), closes #​13447
• events: dead-letter queue support for StepFunctions (#​13450) (0ebcb41), closes #​13449
• events,applicationautoscaling: schedule can be a token (#​13064) (b1449a1)
• iam: SAML identity provider (#​13393) (faa0c06), closes #​5320
• neptune: Support IAM authentication (#​13462) (6c5b1f4), closes #​13461
• region-info: added AppMesh ECR account for af-south-1 region (#​12814) (b3fba43)
• stepfunctions-tasks: Support calling ApiGateway REST and HTTP APIs (#​13033) (cc608d0), closes #​11565 #​11566 #​11565

Bug Fixes

• cfn-include: allow boolean values for string-typed properties (#​13508) (e5dab7c)
• ec2: fix typo's in WindowsImage constants (#​13446) (781aa97)
• elasticloadbalancingv2: upgrade to v1.92.0 drops certificates on ALB if more than 2 certificates exist (#​13490) (01b94f8), closes #​13332 #​13437
• events: imported EventBus does not correctly register source account (#​13481) (57e5404), closes #​13469
• iam: oidc-provider can't pull from hosts requiring SNI (#​13397) (90dbfb5)
• iam: policy statement tries to validate tokens (#​13493) (8d592ea), closes #​13479
• init: Python init template's stack ID doesn't match other languages (#​13480) (3f1c02d)
• stepfunctions: no validation on state machine name (#​13387) (6c3d407), closes #​13289

v1.92.0

Compare Source

• ecs-patterns: the desiredCount property stored on the above constructs will be optional, allowing them to be undefined. This is enabled through the @aws-cdk/aws-ecs-patterns:removeDefaultDesiredCount feature flag. We would recommend all CDK users to set the @aws-cdk/aws-ecs-patterns:removeDefaultDesiredCount flag to true for all of their existing applications.

⚠️ BREAKING CHANGES TO EXPERIMENTAL FEATURES

• apigatewayv2: HttpApiMapping (and related interfaces for Attributed and Props) has been renamed to ApiMapping
• apigatewayv2: CommonStageOptions has been renamed to StageOptions
• apigatewayv2: HttpStage.fromStageName has been removed in favour of HttpStage.fromHttpStageAttributes
• apigatewayv2: DefaultDomainMappingOptions has been removed in favour of DomainMappingOptions
• apigatewayv2: HttpApiProps.defaultDomainMapping has been changed from DefaultDomainMappingOptions to DomainMappingOptions
• apigatewayv2: HttpApi.defaultStage has been changed from HttpStage to IStage
• apigatewayv2: IHttpApi.defaultStage has been removed
• aws-appsync: RdsDataSource now takes a ServerlessCluster instead of a DatabaseCluster
• aws-appsync: graphqlapi.addRdsDataSource now takes databaseName as its fourth argument

Features

• apigateway: integrate with aws services in a different region (#​13251) (d942699), closes #​7009
• apigatewayv2: websocket api (#​13031) (fe1c839), closes #​2872
• aws-appsync: add databaseName to rdsDataSource (#​12575) (f92b65e), closes #​12572
• aws-events: Event Bus target (#​12926) (ea91aa3), closes #​9473
• aws-route53-targets: add global accelerator target to route53 alias targets (#​13407) (2672a55), closes #​12839
• aws-s3: adds s3 bucket AWS FSBP option (#​12804) (b9cdd52), closes #​10969
• cfnspec: cloudformation spec v28.0.0 (#​13101) (13c9859)
• cfnspec: cloudformation spec v29.0.0 (#​13249) (6318e26)
• cfnspec: cloudformation spec v30.0.0 (#​13365) (ae0185d)
• cli: Configurable --change-set-name CLI flag (#​13024) (18184df), closes #​11075 #​12683
• cloudwatch: EC2 actions (#​13281) (319cfcd), closes #​13228
• cognito: user pools - sign in with apple (#​13160) (b965589)
• core: description parameter in the CustomResourceProvider (#​13275) (78831cf), closes #​13277 #​13276
• core: customize bundling output packaging (#​13152) (6eca979)
• ec2: Add VPC endpoint for RDS (#​12497) (fc87574), closes #​12402
• ecs: add port mappings to containers with props (#​13262) (f511639), closes #​13261
• ecs: allow selection of container and port for SRV service discovery records (#​12798) (a452bc3), closes #​12796
• ecs-patterns: Add support for assignPublicIp for QueueProcessingFargateService (#​13122) (3fb4600), closes #​12815
• ecs-patterns: remove default desiredCount to align with cfn behaviour (under feature flag) (#​13130) (a9caa45)
• elasticloadbalancingv2: Add support for application cookies (#​13142) (23385dd)
• elbv2: allow control of ingress rules on redirect listener (#​12768) (b7b441f), closes #​12766
• events: archive events (#​12060) (465cd9c), closes #​11531
• events: dead letter queue for Lambda Targets (#​11617) (1bb3650), closes #​11612
• lambda: code signing config (#​12656) (778ea27), closes #​12216
• lambda: Code.fromDockerBuild (#​13318) (ad01099), closes #​13273
• lambda: Code.fromDockerBuildAsset (#​12258) (09afed5), closes #​11914
• neptune: high level constructs for db clusters and instances (#​12763) (c366837), closes aws#​12762
• stepfunctions-tasks: add EKS call to SFN-tasks (#​12779) (296a10d)
• synthetics: Update CloudWatch Synthetics NodeJS runtimes (#​12907) (6aac3b6), closes #​12906

Bug Fixes

• appsync: revert to allow resolver creation from data source (#​12973) (d35f032), closes #​12635 #​11522
• aws-appsync: use serverlessCluster on rdsDataSource (#​13206) (45cf387), closes #​12567
• cfn-diff: handle Fn::If inside policies and statements (#​12975) (daf4e47), closes #​12887
• cfn-include: allow dynamic mappings to be used in Fn::FindInMap (#​13428) (623675d)
• cloudfront: cannot add two EdgeFunctions with same aliases (#​13324) (1f35351), closes #​13237
• cloudwatch: MathExpression period of <5 minutes is not respected (#​13078) (d9ee914), closes #​9156
• cloudwatch: metric label not rendered into Alarms (#​13070) (cbcc712)
• codebuild: allow FILE_PATH webhook filter for BitBucket ([#​1318

---

Configuration

📅 Schedule: At any time (no schedule defined).

🚦 Automerge: Enabled.

♻️ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about these updates again.

---

• If you want to rebase/retry this PR, check this box.

---

This PR has been generated by WhiteSource Renovate. View repository job log here.