Update dependency aws-cdk to v2.159.1

[renovate]

This PR contains the following updates:

Package	Change	Age	Adoption	Passing	Confidence
aws-cdk (source)	2.28.1 -> 2.159.1

---

Release Notes

aws/aws-cdk (aws-cdk)

v2.159.1

Compare Source

Reverts

• fix(ec2): fixing vpc endpoint pattern for ecr and ecr docker (#​31496) (f7e8452)

---

Alpha modules (2.159.1-alpha.0)

v2.159.0

Compare Source

Features

• update L1 CloudFormation resource definitions (#​31484) (60ce351), closes /docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-ec2-launchtemplate-launchtemplatedata.html#cfn-ec2 /docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-ec2-launchtemplate-launchtemplatedata.html#cfn-ec2 /docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-ec2-launchtemplate-launchtemplatedata.html#cfn-ec2 /docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-ec2-launchtemplate-launchtemplatedata.html#cfn-ec2
• opensearch: support OpenSearch version 2.15 (#​31398) (33eea3f)
• update L1 CloudFormation resource definitions (#​31460) (e220e90)
• apigatewayv2: support for setting routeSelectionExpression for an HTTP API (#​31373) (36baf51), closes #​31104
• elasticloadbalancingv2: alb dualstack without public ipv4 (#​30248) (4068af3), closes #​30256
• events-target: support Dead Letter Queue for Kinesis Stream Event Target (#​31435) (358f231), closes #​31428 #​13600
• stepfunctions-tasks: support idle timeout for EmrCreateCluster (#​31142) (432ffaf), closes #​29926
• vpcv2: implementation of add gateway method (#​31224) (4b90bfc)

Bug Fixes

• cli: bootstrap respects qualifier from cdk.json (#​31410) (44134ad), closes #​28249
• cli: hotswapping appsync functions fails when API does not return function on the first page (#​31406) (0da4f43), closes /github.com/aws/aws-cdk/blob/1e203753519e10e19ef0db87e1382377b609bcaa/packages/aws-cdk/lib/api/evaluate-cloudformation-template.ts#L23-L36
• cli: release outdir lock when synth fails (#​30874) (b6ad97f), closes #​27864
• cognito: deprecate privateKey and add privateKeyValue as typed SecureValue (#​31409) (7ee183d), closes /github.com/aws/aws-cdk/blob/1e203753519e10e19ef0db87e1382377b609bcaa/packages/aws-cdk-lib/aws-cognito/lib/user-pool-idps/google.ts#L28
• ecs: reduce ecs service task role cloudwatch permissions when no log configured (under feature flag) (#​31475) (de7ab7c)
• eks: fargateCluster compatibility with AuthenticationMode.API (#​31267) (4d12833)
• eks: update private ecr repo url regex (#​31394) (386fca3)
• lambda: invalid Version object created from Version.fromVersionArn (#​31433) (1726abd)
• ssm: update ssm-context to prevent raising an error on missing parameter (#​31415) (ff02cca), closes #​7051 #​22064 #​7259
• pipelines ties cli version with cdk-assets version (#​31261) (4392ab4), closes #​31253

---

Alpha modules (2.159.0-alpha.0)

⚠ BREAKING CHANGES TO EXPERIMENTAL FEATURES

• kinesisfirehose-alpha: encryptionKey property is removed and encryption property type has changed from the StreamEncryption enum to the StreamEncryption class.

To pass in a KMS key for the customer managed key case, use StreamEncryption.customerManagedKey(key)

Details

Replaced encryption and encryptionKey properties with a single property encryption of type StreamEncryption and is used by calling one of the 3 methods:

SreamEncryption.unencrypted()
StreamEncryption.awsOwnedKey()
StreamEncryption.customerManagedKey(key?: IKey)

This makes it so it's not longer possible to pass in a key when the encryption type is AWS owned or unencrypted. The key is an optional parameter in StreamEncryption.customerManagedKey(key?: IKey) so following the previous behaviour, if a key is provided it will be used, otherwise a key will be created for the user.

Description of how you validated changes

Generated templates do not change so behaviour remains the same.

Updated integ/unit tests.

Checklist

• My code adheres to the CONTRIBUTING GUIDE and DESIGN GUIDELINES

Features

• ivs: support RTMP ingest for IVS channel (#​31380) (a907a7e)

Bug Fixes

• ec2: fixing vpc endpoint pattern for ecr and ecr docker (#​31434) (95c49ab)

Miscellaneous Chores

• kinesisfirehose-alpha: refactor encryption property to combine encryptionKey (#​31430) (8e92185)

v2.158.0

Compare Source

Bug Fixes

• cloudformation-include: can't use CFN intrinsics in Tags (#​30515) (af9e6ba), closes #​27594

---

Alpha modules (2.158.0-alpha.0)

Features

• amplify: support cache configuration for app (#​31381) (b7bd041)
• iot: configure IoT Logging (#​31352) (6348717), closes #​31357

v2.157.0

Compare Source

Features

• update L1 CloudFormation resource definitions (#​31361) (bc4dbfd)
• appsync: support DEBUG and INFO logging levels for AppSync GraphQL APIs (#​31326) (4b9643f)
• lambda: added new property allowAllIpv6Outbound to FunctionOptions (#​31013) (fa55194), closes #​30994

Bug Fixes

• rds: proxy target group does not depend on database instances when using writer property for database cluster (#​31354) (6542207), closes #​31304 /github.com/aws/aws-cdk/blob/main/packages/aws-cdk-lib/aws-rds/lib/proxy.ts#L535-L539

---

Alpha modules (2.157.0-alpha.0)

v2.156.0

Compare Source

Features

• bedrock: add Stable Image Ultra, Stable Diffusion 3 Large, and Stable Image Core model identifiers (#​31327) (586cb04)
• cloudfront: s3 origin access control L2 construct (#​31254) (30675f0), closes #​21771
• codebuild: support three arm-based compute types, Medium, X-Large and 2X-Large (#​31214) (39492e9), closes #​30869
• docdb: i/o optimized storage type (#​30163) (7ed221c), closes #​30165
• ecs-patterns: dualstack ALB (#​30089) (98ea3db), closes #​29039
• eks: support alb controller versions 2.7.0-2.8.2 (#​31264) (a3863a6)
• events-targets: support for RedshiftDataParameters (#​29462) (84c6442), closes #​15712 #​31017
• synthetics: syn-nodejs-puppeteer-9.0 as supported runtime (#​31272) (c1d7782), closes #​31271

Bug Fixes

• custom-resources: remove presigned url from cloudwatch logs (#​31322) (b5e4496)
• eks: albController incompatibility with AuthenticationMode.API mode (#​31258) (427cd61)
• prlint: a review label doesn't appear when a PR is approved if there are too many comments (#​31290) (1c63070), closes #​31294 /github.com/aws/aws-cdk/pull/30920#issuecomment-2324932936 aws-cdk/prlint/lint.ts#L377 40aws-cdk/prlint/lint.ts#L376
• stepfunctions-tasks: add back BedrockInvokeModel to use JsonPath (#​31325) (5b059b9), closes aws/aws-cdk#31308
• stepfunctions-tasks: fix bedrock input/output path in step-funct… (#​31305) (a190935), closes #​31302 PR#30298 #​29229
• stepfunctions-tasks: sageMakerCreateTrainingJob does not correctly support empty inputDataConfig (#​31210) (6d43146), closes #​31132

---

Alpha modules (2.156.0-alpha.0)

Features

• location: support RouteCalculator (#​30682) (574d383), closes #​30681
• neptune-alpha: specify port for the cluster (#​31137) (130b62b), closes #​31074
• scheduler: validate schedule name length (#​31200) (d0f9688)

Bug Fixes

• scheduler: the value of the description property is not reflected to the resource. (#​31276) (a3332b6), closes #​31269

v2.155.0

Compare Source

Features

• codebuild: macOS codebuild support (#​31203) (823ff6e), closes #​31170
• eks: preserveOnDelete for EKS addon (#​30776) (23fba1c)
• kms: add multiRegion property to a Key (#​31125) (3dc4c50)
• stepfunctions-tasks: add cpu and memory parameters to EcsRunTask (#​30140) (986e378), closes #​30027
• synthetics: add syn-python-selenium-4.0 runtime (#​31101) (cc75ded), closes #​30137 /docs.aws.amazon.com/AmazonCloudWatch/latest/monitoring/CloudWatch_Synthetics_Library_python_selenium.html#CloudWatch_Synthetics_runtimeversion-syn-python-selenium-4
• update L1 CloudFormation resource definitions (#​31193) (e942b67)
• update L1 CloudFormation resource definitions (#​31194) (5468983)
• update L1 CloudFormation resource definitions (#​31221) (b754353)

Bug Fixes

• cloudfront: requirement of domainNames prevents moving a domain name between distributions (#​31001) (acdf7d3), closes #​29960 #​29329
• eks: can't update authMode with the same mode (#​31043) (64df08b)
• lambda-event-source: allow dynamodb filtering on boolean value (#​31011) (9946ab0), closes #​30734
• s3: bucket notifications in owning stack deletes bucket notifications from other stacks (#​31091) (0b09e52)

---

Alpha modules (2.155.0-alpha.0)

Features

• ec2: ipv6AddressCount property for an instance (#​31076) (e3e5e1c), closes #​31075
• ec2: support throughput on LaunchTemplate EBS volumes (#​30716) (6ed0bed), closes #​24341 #​22441
• location: support GeofenceCollection (#​30711) (04d73ac), closes #​30710

v2.154.1

Compare Source

Features

• update L1 CloudFormation resource definitions (#​31193) (aa97525)
• update L1 CloudFormation resource definitions (#​31194) (2191264)

Bug Fixes

• cloudfront: requirement of domainNames prevents moving a domain name between distributions (#​31001) (1255ce3), closes #​29960 #​29329

---

Alpha modules (2.154.1-alpha.0)

v2.154.0

Compare Source

v2.153.0

Compare Source

Features

• lambda: support Recursive Loop Protection property (572fe0a)

---

Alpha modules (2.153.0-alpha.0)

v2.152.0

Compare Source

Features

• lambda: support filter criteria encryption (6aa72a2)

---

Alpha modules (2.152.0-alpha.0)

v2.151.1

Compare Source

Reverts

• feat(ecs): add validation checks to memory cpu combinations of FARGATE compatible task definitions (#​31110) (8fdf015)

---

Alpha modules (2.151.1-alpha.0)

v2.151.0

Compare Source

Features

• apigatewayv2: add description property for stage (#​30820) (8651bbe)
• ec2: add versionDescription property for LaunchTemplate (#​30837) (597228c)
• ecs: add validation checks to memory cpu combinations of FARGATE compatible task definitions (#​30166) (8b4685e), closes #​22216
• elasticloadbalancingv2: support Weighted Random algorithm and Automatic Target Weights for alb (#​30542) (d0a609d), closes #​29969
• events: add description property for eventBus (#​30935) (28fbc82)
• events: support customer managed key for event bus (#​30493) (8c44aa7)
• synthetics: add activeTracing, memory and timeout property to Canary class (#​30556) (9295a85), closes #​9300 #​14086 #​28152 #​9300
• update L1 CloudFormation resource definitions (#​30973) (63c45e4)
• sns: add validation of displayName for topic (#​30770) (da2ec75)
• stepfunctions-tasks: allow BedrockInvokeModel to use JsonPath (#​30298) (f5dd73b), closes #​29229

Bug Fixes

• appconfig: sourcedConfiguration doesn't use retrievalRole (#​30733) (9d79c51), closes #​30609
• ec2: export NatGatewayProvider for consistency with NatInstanceProvider (#​28810) (fbc28bc), closes #​28372
• ecs: fromServiceArnWithCluster not accepting value from SSM Parameter string (#​30902) (0baa573), closes #​30798
• stepfunctions: allow disable x-ray (#​30808) (d56d05c), closes #​30796
• stepfunctions-tasks: fix the generated IAM policy for EFS operations (#​30896) (31808b4), closes #​30862
• stepfunctions-tasks: run task perm no longer valid (#​30788) (82b163d), closes #​30751

---

Alpha modules (2.151.0-alpha.0)

Features

• kinesisanalytics-flink: add support for Flink 1.19 (#​30723) (c185194), closes /docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-kinesisanalyticsv2-application.html#aws-resource-kinesisanalyticsv2

v2.150.0

Compare Source

Features

• update L1 CloudFormation resource definitions (#​30921) (153a698)
• ec2: add g6 instance (#​30693) (90a41d5), closes #​30683
• lambda: add SnapStart support for arm64 functions (#​30898) (b4377a5), closes #​30899
• logs: enabling IA log group creation in CN and GovCloud regions (#​30904) (230b56b)
• update L1 CloudFormation resource definitions (#​30860) (ce7a8d5)

Bug Fixes

• custom-resources: provider framework will always log all data including confidential data (#​30689) (9bd92da), closes #​30275
• stepfunctions-tasks: allow camelCase for parameters of CallAwsServiceCrossRegion (#​30795) (5d6ace8), closes #​30799

---

Alpha modules (2.150.0-alpha.0)

v2.149.0

Compare Source

Features

• codedeploy: zonal configuration for ServerDeploymentConfig (#​30429) (da0dc57), closes #​30430
• codestarnotifications: add createdBy property for notification rule (#​30780) (a68b418)
• stepfunctions-tasks: add guardrailConfiguration and trace property to the BedrockInvokeModel (#​30426) (772b1d1), closes #​30425
• stepfunctions-tasks: enable resultReuseConfiguration in AthenaStartQueryExecution (#​30447) (046bf56), closes #​30446
• update L1 CloudFormation resource definitions (#​30786) (6d0a09f)

Bug Fixes

• apigateway: authorization scope is not added when not explicitly defining authorization type in method or root api (#​30822) (e4367a0), closes #​30444
• scheduler-targetes-alpha: multiple schedules cause resolution error during synth (#​30634) (727e886), closes #​28713

---

Alpha modules (2.149.0-alpha.0)

v2.148.1

Compare Source

Bug Fixes

• apigateway: authorization scope is not added when not explicitly defining authorization type in method or root api (#​30822) (4bee768), closes #​30444

---

Alpha modules (2.148.1-alpha.0)

v2.148.0

Compare Source

Features

• lambda: add grantInvokeLatestVersion to grant invoke only to latest function version (#​29856) (61c28dd), closes #​20177
• update L1 CloudFormation resource definitions (#​30722) (4ceeced), closes /docs.aws.amazon.com/service-terms/#​87
• codebuild: adding project.visibility (#​30103) (1bacb69)
• codedeploy: termination hook (#​30644) (8f652a7)
• cognito: add defaultRedirectUri to UserPoolClient (#​30481) (f2c5f68)
• eks: eks pod identities (#​30576) (9437b4d), closes /github.com/aws/aws-cdk/blob/b196b13b0b8a54dcacadf87fdbe744772a6e6c4d/packages/aws-cdk-lib/aws-eks/lib/oidc-provider.ts#L36 /github.com/aws/aws-cdk/blob/b196b13b0b8a54dcacadf87fdbe744772a6e6c4d/packages/aws-cdk-lib/aws-eks/lib/oidc-provider.ts#L36 /github.com/aws/aws-cdk/blob/b196b13b0b8a54dcacadf87fdbe744772a6e6c4d/packages/aws-cdk-lib/aws-iam/lib/role.ts#L373 #​30519
• stepfunctions-tasks: step functions task for cross-region AWS API call (#​30061) (1397737), closes #​29918
• update L1 CloudFormation resource definitions (#​30642) (2a659f0)
• fsx: add properties to enable automatic backups for Lustre file system (#​30343) (3b95777), closes #​30340

Bug Fixes

• ecs: let AsgCapacityProvider use IAutoScalingGroup only when Managed Termination Protection is disable (#​30335) (efee07d), closes #​29174
• lambda-nodejs: breaking change in esbuild causes import module error (#​30726) (7f5ce4b), closes #​30717
• s3: allow import S3 bucket with a legacy name (#​30679) (e09126f), closes #​22640
• s3-notifications: unable to delete the existing S3 event notifications (#​30610) (b880067), closes #​28915s too broad (under feature flag) (#​30389) (8ebfade), closes #​30368

Reverts

• fix(core): overrideLogicalId validation (#​30695) (0aa2be7), closes aws/aws-cdk#29708
• route53 CrossAccountZoneDelegationRecord fails at deployment time with imported delegatedZone (#​30440)" (#​30606) (95280a0), closes #​30600

---

Alpha modules (2.148.0-alpha.0)

Features

• apprunner: add AutoScalingConfiguration for AppRunner Service (#​30358) (a598508), closes #​30353
• apprunner: add ObservabilityConfiguration for AppRunner Service (#​30359) (9e9cc27), closes #​22985
• pipes-enrichments: add Step Functions enrichment eventbridge pipes (#​30495) (8b495f9), closes #​29385
• pipes-targets: add lambda function (#​30271) (f594fae), closes #​30270

Bug Fixes

• apprunner: auto deployment fails after new container image pushed due to lack of a permission (#​30630) (cce10b1), closes #​26640 /github.com/aws/aws-cdk/blob/main/packages/aws-cdk-lib/aws-ecr/lib/repository.ts#L385 40aws-cdk/aws-apprunner-alpha/lib/service.ts#L1303 40aws-cdk/aws-apprunner-alpha/lib/service.ts#L1368

v2.147.3

Compare Source

Bug Fixes

• lambda-nodejs: breaking change in esbuild causes import module error (#​30726) (06c14b1), closes #​30717

---

Alpha modules (2.147.3-alpha.0)

v2.147.2

Compare Source

Reverts

• fix(core): overrideLogicalId validation (#​29708) (b196b13)

---

Alpha modules (2.147.2-alpha.0)

v2.147.1

Compare Source

Reverts

• route53 CrossAccountZoneDelegationRecord fails at deployment time with imported delegatedZone (#​30440)" (#​30606) (69eb617), closes #​30600

---

Alpha modules (2.147.1-alpha.0)

v2.147.0

Compare Source

Features

• ec2: add nitro enclave and hibernation settings to the Instance Construct (#​30228) (4e9ef15)
• ses: allow VDM settings at the configuration set level (#​30051) (49a98ac), closes #​30041
• stepfunctions-tasks: support FLEX execution class for GlueStartJobRun (#​30534) (c826d8f), closes #​30533
• update L1 CloudFormation resource definitions (#​30569) (a5c6d21), closes /docs.aws.amazon.com/AmazonRDS/latest/AuroraUserGuide/aurora-serverless-v2.requirements.html#aurora-serverless-v2 /docs.aws.amazon.com/AmazonRDS/latest/AuroraUserGuide/aurora-serverless-v2.requirements.html#aurora-serverless-v2

Bug Fixes

• apigateway: remove timeout upper bound max (#​30547) (3c36fe9), closes #​30539
• core: overrideLogicalId validation (#​29708) (b196b13), closes #​29701
• globalaccelerator-endpoints: add preserveClientIp option for net… (#​30346) (c1e1b4d)
• stepfunctions: add docs and warning DistributedMap Class ignores executionType in the ProcessorConfig (#​30301) (0499adf), closes #​30194 #​27913 #​28821

---

Alpha modules (2.147.0-alpha.0)

Bug Fixes

• custom-resource-handlers: don't recursively process s3 bucket objects (#​30209) (25835e4), closes #​30573 /github.com/aws/aws-cdk/pull/30209#issuecomment-2118991218

v2.146.0

Compare Source

Features

• appsync: add maxBatchSize property to the AppSyncFunction Construct (#​30266) (f1dc142)
• eks: support AccessConfig for the Cluster construct (#​30016) (f45f2ca), closes #​28588
• opensearch: add OpenSearch 2.13 engine version (#​30399) (db3e77d)
• implement node runtime region awareness for cdk vended custom resources (#​30108) (69c5dde)
• codebuild: add missing types for webhook filters (#​30064) (1d93094), closes #​30062
• sns: add grantSubscribe method (#​30486) (36a48ad), closes #​29049
• update L1 CloudFormation resource definitions (#​30508) (06d0a1b)

Bug Fixes

• cloudfront: make long function name deterministic (#​30392) (e19d18b), closes #​20017 #​15523 #​28629
• route53: delegation fails with public and private hosted zones with same name (#​30439) (1f866c9), closes #​30262

---

Alpha modules (2.146.0-alpha.0)

Features

• apprunner: add ipAddressType property to the Service class (#​30351) (665396f)

v2.145.0

Compare Source

Features

• config: proactive evaluation mode (#​30174) (516ecef), closes #​30172
• eks: support for Kubernetes version 1.30 (#​30454) (d2ea280)
• update L1 CloudFormation resource definitions (#​30438) (3ee5ce0)
• chatbot: configure userRoleRequired for the SlackChannelConfiguration (#​30420) (5b84ca6), closes #​30403
• codebuild: Fleet L2 (#​29754) (940e799), closes #​29617 #​29616
• logs: add distribution property to the Subscription class (#​30423) (0e95bf0), closes #​30422

Bug Fixes

• custom-resources: logApiResponseData is added to custom resource event properties by default (#​30418) (a899ac6), closes #​30121 #​29949 #​29648
• route53 CrossAccountZoneDelegationRecord fails at deployment time with imported delegatedZone (#​30440) (a3d9b10), closes #​28581
• apigateway: allow overriding authorizer on methods (#​30415) (1b8d73c), closes #​8827

---

Alpha modules (2.145.0-alpha.0)

v2.144.0

Compare Source

Features

• appconfig: add grantReadConfig method to Environment Construct (#​30180) (c8f2646), closes #​28585
• dynamodb: add resource polices for table (#​30251) (7dc6d27)
• ec2: support instanceInitiatedShutdownBehavior for EC2 instance (#​30160) (c073617), closes #​30164
• ecs-patterns: allow custom container name for Scheduled ecs and fargate tasks (#​30357) ([f5

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.