| #36049 |
chore(appconfig): add typeAsString escape hatch for custom configuration types |
@dzchen22 |
2026-06-17 (29d) |
| #38143 |
fix(s3): cannot create ACCOUNT_REGIONAL bucket with specified bucketName in L2 Bucket |
@NaveenKumar-Marupalli |
2026-06-17 (29d) |
| #38173 |
feat(codebuild): add Node.js 24 Lambda build images |
@andredcoliveira |
2026-06-18 (28d) |
| #37984 |
fix(bedrock-agentcore-alpha): add tracing resource policy opt-out |
@gingeekrishna |
2026-06-19 (28d) |
| #38195 |
fix(logs): emit account root ARN in resource policies to avoid drift false positive |
@UTKARSH698 |
2026-06-24 (23d) |
| #38193 |
feat(ec2): support CpuOptions on LaunchTemplate |
@emi111y |
2026-06-25 (22d) |
| #38122 |
fix(iam): ensure attachToRole honors role mutability |
@joerino96 |
2026-06-25 (22d) |
| #38085 |
fix(eks-v2): emit empty PublicAccessCidrs when endpoint access is PRIVATE |
@sam-intigriti |
2026-06-26 (21d) |
| #37982 |
fix(cdk): resolve aws#37783 by fixing missing top-level sseSpecification… |
@gingeekrishna |
2026-06-27 (20d) |
| #38140 |
fix(ecs): suppress shouldUseCircuitBreaker warning for DAEMON scheduling strategy services |
@gingeekrishna |
2026-06-27 (20d) |
| #38141 |
feat(fsx): add L2 construct for DataRepositoryAssociation |
@gingeekrishna |
2026-06-27 (20d) |
| #38210 |
fix(rds): add manageMasterUserPassword support to DatabaseInstanceFromSnapshot |
@gingeekrishna |
2026-06-27 (20d) |
| #38028 |
fix(iam): grantAssumeRole/grantPassRole param name mismatch breaks Python type checkers |
@dcsid |
2026-06-28 (19d) |
| #38212 |
ci: pin all GitHub Actions to full commit SHAs to prevent supply-chain attacks |
@XananasX7 |
2026-06-28 (19d) |
| #38213 |
fix(aws-events): fromObject preserves user-specified key names in InputPathsMap |
@gingeekrishna |
2026-06-28 (19d) |
| #38170 |
fix(logs): emit canonical root ARN in resource policy to prevent drif… |
@Ris345 |
2026-06-28 (18d) |
| #38215 |
feat(ec2): reference the Amazon-provided IPv6 CIDR block of a dual stack VPC |
@RamazanKara |
2026-06-29 (18d) |
| #38024 |
docs(stepfunctions-tasks): fix duplicated "to" in EMR task descriptions |
@dcsid |
2026-06-29 (18d) |
| #38211 |
fix(core): Validations.acknowledge() does not suppress warnings from Annotations.addWarningV2() |
@gingeekrishna |
2026-06-29 (18d) |
| #38232 |
fix(fsx): validate fileSystemTypeVersion V_2_12 and V_2_15 require PE… |
@SihanZhan |
2026-07-01 (15d) |
| #38023 |
feat(servicecatalogappregistry-alpha): retrieve attributes from an attribute group |
@dcsid |
2026-07-01 (15d) |
| #38018 |
feat(ssm): support region option for valueFromLookup |
@dcsid |
2026-07-01 (15d) |
| #35501 |
chore(s3-deployment): increase default memory limit from 128MB to 512MB |
@ychjamie |
2026-07-02 (15d) |
| #38231 |
fix(elasticloadbalancingv2): allow logging in env-agnostic stacks |
@Dricmoy |
2026-07-03 (14d) |
| #38249 |
docs(ec2): clarify RouterType.GATEWAY supports Virtual Private Gateway |
@Adam-Horse |
2026-07-04 (13d) |
| #38250 |
fix(aws-ecs): suppress shouldUseCircuitBreaker warning for DAEMON scheduling services |
@gingeekrishna |
2026-07-04 (12d) |
| #38251 |
fix(aws-eks,aws-eks-v2): allow access policies on AccessEntryType.EC2 entries |
@gingeekrishna |
2026-07-04 (12d) |
| #38252 |
fix(bedrockagentcore): preserve empty-string credentialPrefix/credentialParameterName in ApiKeyCredentialLocation |
@gingeekrishna |
2026-07-05 (12d) |
| #36643 |
feat(apigateway): update domain name security policy |
@Jojo134 |
2026-07-07 (10d) |
| #37817 |
feat(rds): add IAM master user authentication support to DatabaseCluster |
@abhishektang |
2026-07-07 (10d) |
| #35022 |
feat(pipelines): add executionMode support in CodePipeline L3 construct |
@gustaferiksson |
2026-07-07 (10d) |
| #38219 |
feat(applicationautoscaling): add high-resolution ECS predefined metrics |
@sanyamk23 |
2026-07-07 (9d) |
| #37001 |
feat(pipelines): add RetryMode option to CDK Pipeline |
@dil-bagoston |
2026-07-08 (9d) |
| #38228 |
fix(ecs): validate environment variable limit in container definitions |
@sanyamk23 |
2026-07-09 (8d) |
| #38285 |
feat(pipelines): add assumeRole parameter to CodeBuildStep |
@umbertocicciaa |
2026-07-11 (5d) |
| #38288 |
fix(lambda-nodejs): fails to find esbuild in npm workspace-local node_modules |
@kennethhli |
2026-07-12 (5d) |
| #38200 |
feat(s3-deployment): add destinationBucketRegion prop for cross-region deployments |
@bentorb |
2026-07-12 (5d) |
| #38290 |
feat(cognito): add issuerType property to UserPool |
@emi111y |
2026-07-13 (4d) |
| #38300 |
fix(events): EventBus.archive() does not forward kmsKey to the underlying Archive construct |
@markbecker7 |
2026-07-13 (3d) |
| #38240 |
fix(ec2): fix CIDR range overlap check |
@jheidbrink |
2026-07-13 (3d) |
| #38160 |
chore(rds): add postgres engine 18.3 |
@merlinorg |
2026-07-15 (2d) |
| #38319 |
chore: remove dead codeowners rules for packages moved to aws-cdk-cli |
@kobihikri |
2026-07-15 (1d) |
| #38320 |
chore: pin external github actions to full commit shas |
@kobihikri |
2026-07-15 (1d) |
| #38184 |
fix(dynamodb): remove deprecated tablegrants props from tablev2 |
@josemfche |
2026-07-16 (1d) |
| #37985 |
feat(pipelines): support removalPolicy and autoDeleteObjects for artifact bucket |
@masamaru0513 |
2026-07-16 (1d) |
| #37900 |
feat(ec2): add ipAddressType and dnsRecordIpType to GatewayVpcEndpoint |
@Zelys-DFKH |
2026-07-16 (0d) |
| #37899 |
fix(lambda-nodejs): run beforeInstall hook after workspace files are written |
@Zelys-DFKH |
2026-07-16 (0d) |
| #37896 |
fix(ec2): wrap L1 CfnSubnet in selectSubnetObjects so SubnetIds resolve in templates |
@Zelys-DFKH |
2026-07-16 (0d) |
| #37893 |
fix(ec2): add DependsOn VPCGatewayAttachment to IPv6 default route |
@Zelys-DFKH |
2026-07-16 (0d) |
| #37878 |
fix(custom-resource-handlers): retry on AccessDeniedException to handle IAM propagation delay |
@Zelys-DFKH |
2026-07-16 (0d) |
| #37877 |
fix(cognito): skip domainPrefix validation when value contains embedded token markers |
@Zelys-DFKH |
2026-07-16 (0d) |
| #37874 |
fix(stepfunctions): Choice.afterwards() excludes the otherwise branch from end states by default |
@Zelys-DFKH |
2026-07-16 (0d) |
| #37868 |
fix(ecs): support digest references in TagParameterContainerImage via imageDigest option |
@Zelys-DFKH |
2026-07-16 (0d) |
| #37865 |
fix(events): omit KmsKeyIdentifier from Archive when no KMS key is configured |
@Zelys-DFKH |
2026-07-16 (0d) |
| #37838 |
fix(dynamodb): TableV2MultiAccountReplica omits top-level SSESpecification for KMS encryption |
@Zelys-DFKH |
2026-07-16 (0d) |
| #37837 |
fix(logs): emit account root ARN in resource policy to prevent CloudFormation drift |
@Zelys-DFKH |
2026-07-16 (0d) |
| #37836 |
fix(autoscaling): StepScalingPolicy emits spurious cooldown deprecation warning |
@Zelys-DFKH |
2026-07-16 (0d) |
| #38221 |
feat(neptune): add Neptune global database cluster support |
@masterhugo |
2026-07-16 (0d) |
| #37997 |
feat(bedrock-agentcore-alpha): allow tagging service-created runtime application log group |
@gingeekrishna |
2026-07-16 (0d) |
| #38330 |
fix(aws-logs): emit canonical root ARN for ResourcePolicy principals |
@wasim-builds |
2026-07-16 (0d) |
| #38331 |
fix(rds): properly handle RETAIN_ON_UPDATE_OR_DELETE in subresources |
@wasim-builds |
2026-07-16 (0d) |
| #38328 |
fix(bedrockagentcore): set default child on Runtime L2 so applyRemovalPolicy works |
@sanyamk23 |
2026-07-16 (0d) |
| #38329 |
fix(bedrockagentcore): set default child on Gateway L2 so applyRemovalPolicy works |
@sanyamk23 |
2026-07-16 (0d) |
| #38332 |
fix(bedrockagentcore): set default child on BrowserCustom L2 so applyRemovalPolicy works |
@sanyamk23 |
2026-07-16 (0d) |
| #36309 |
fix(ecs): enableDeploymentAlarms should mutate the alarmNames property |
@vito-laurenza-zocdoc |
2026-07-16 (0d) |
| #38282 |
fix(bedrockagentcore): Memory does not set defaultChild, breaking applyRemovalPolicy |
@ATKasem |
2026-07-16 (0d) |
| #38335 |
docs(eks-v2): fix Architecture diagram code block in README |
@omarqureshi |
2026-07-17 (0d) |
| #38259 |
feat(ecs): support configurable deployment circuit breaker settings |
@SIDDHESH1564 |
2026-07-17 (0d) |
| #38279 |
fix(rds): dbProxyName can mismatch deployed resource due to RDS lowercasing |
@ATKasem |
2026-07-17 (0d) |
Note
Preview: generated from live
aws/aws-cdkdata but posted to this fork to demonstrate the production output.Beginning-contributor PRs pending maintainer CI action for week 2026-July13-W29.
Last updated: 2026-07-17T16:13:53.018Z (refreshed daily by the Pending Maintainer Action Check workflow)
69 PR(s) — 🔒 Pending CI approval: 69
🔒 Pending CI approval (69)
bucketNamein L2BucketexecutionModesupport in CodePipeline L3 constructEventBus.archive()does not forward kmsKey to the underlying Archive constructChoice.afterwards()excludes the otherwise branch from end states by defaultTableV2MultiAccountReplicaomits top-level SSESpecification for KMS encryptionStepScalingPolicyemits spurious cooldown deprecation warningMemorydoes not set defaultChild, breaking applyRemovalPolicyClose this issue once all listed PRs have been handled.