…6204)


fix(apigatewayv2): fix api mapping key too strict issue.

This PR fix the issue that Validation of apiMappingKey in ApiMappingProps is too strict.

Closes: #15948 

----
# Considerations:

The validation rule of the apiMappingKey was added in [PR #9141](#9141) to fix [issue #8983](#8983). 

However, as time changed, it looks like the validation rules have changed as well.
But the validation rules are not clearly written out in AWS documentation, so I did [various validations](#15948 (comment)) in the AWS console based on the unit test, and found the rules to be very complex.

Thanks to @pahud and @nija-at 's suggestions, there is no need to stand in the way between CDK users and API Gateway supporting more possibilities in the future, I just removed the validation logic and the relative unit tests.

*By submitting this pull request, I confirm that my contribution is made under the terms of the Apache-2.0 license*

…#16115)

Added every change as a separate commit, feel free to rebase as you see fit.

----

*By submitting this pull request, I confirm that my contribution is made under the terms of the Apache-2.0 license*

…ing service pattern (#15684)

closes #14781

----

*By submitting this pull request, I confirm that my contribution is made under the terms of the Apache-2.0 license*

…y example (#16159)

Removes an unnecessary log group definition from the code example for enabling X-Ray in the State Machine.

fixes #16158

----

*By submitting this pull request, I confirm that my contribution is made under the terms of the Apache-2.0 license*

https://aws.amazon.com/about-aws/whats-new/2021/08/amazon-ec2-m6i-instances/

----

*By submitting this pull request, I confirm that my contribution is made under the terms of the Apache-2.0 license*

…reated by ECS patterns (#15210)

This pr adds the ability to specify the SSL policy of the listener created by an ECS L3 pattern.

The Listener's SSL Policy is immutable once it is created so I felt like this is best way to add this feature.   I plan to follow this PR up with another that implements #11841 and allows further configuration of the listener after it has been created.

closes #8816
----

*By submitting this pull request, I confirm that my contribution is made under the terms of the Apache-2.0 license*

Closes #16160.

@njlynch Can you please review this when time permits and see if it needs any further polishing.

cc @nwitte-rocketloans

----

*By submitting this pull request, I confirm that my contribution is made under the terms of the Apache-2.0 license*

Co-authored-by: AWS CDK Team <aws-cdk@amazon.com>
Co-authored-by: mergify[bot] <37929162+mergify[bot]@users.noreply.github.com>

Supply a 'not' matcher that can be used to invert the matching pattern

relates #15868

----

*By submitting this pull request, I confirm that my contribution is made under the terms of the Apache-2.0 license*

This PR addresses the fact that the current synthetics module was built to support nodejs runtimes only by opening support for python runtimes. Closes #15138 and #16177. 

**Breaking Changes**

-  `Runtime('customRuntimeHere')` becomes `Runtime('customRuntime', 'runtimeFamily')`
-  `Code.fromAnything('path').bind(this, 'handler')` becomes `Code.fromAnything('path').bind(this, 'handler', 'runtimeFamily')`

**Whats in this PR?**

- Adds latest Nodejs runtime (`syn-nodejs-puppeteer-3.2`) and updates integ test to it.
- Adds generic python script to the folder `test/canaries/python` in order to run unit & integration tests on it.
- Adds new `RuntimeFamily` enum that is required by the `Runtime` object to differentiate between Python and Node.
- Verifies the correct folder structure for Python runtimes (`python/<filename>.py`).
- Updates readme.

----

*By submitting this pull request, I confirm that my contribution is made under the terms of the Apache-2.0 license*

…ate interval versus timeout (#16107)

fix: Add validation to target group health check creation. Fixes issue #3703.

----

*By submitting this pull request, I confirm that my contribution is made under the terms of the Apache-2.0 license*

Add support for ephemeral storage on Fargate PV 1.4.0 or later.

Closes #14570

----

*By submitting this pull request, I confirm that my contribution is made under the terms of the Apache-2.0 license*

Part of the the effort to homogenize our testing environment in
the AWS CDK repo involves removing the nodeunit-shim and
using standard jest.

This change applies this to a few modules.

----

*By submitting this pull request, I confirm that my contribution is made under the terms of the Apache-2.0 license*

Replace CRLF with LF so asset hashes are identical across platforms.

The hash still includes the size but it is now the size after converting
line endings.

Addresses #14555 (closes it?)

----

*By submitting this pull request, I confirm that my contribution is made under the terms of the Apache-2.0 license*

Ran npm-check-updates and yarn upgrade to keep the `yarn.lock` file up-to-date.


----

*By submitting this pull request, I confirm that my contribution is made under the terms of the Apache-2.0 license*

Following #16184 - there are more places to upgrade jsii in.

This addresses https://github.com/aws/aws-cdk/security/dependabot/yarn.lock/xmldom/open

----

*By submitting this pull request, I confirm that my contribution is made under the terms of the Apache-2.0 license*

…ports with tokens (#16286)

Closes #11813. Fixes `port` with tokens being incorrectly stringified in `fromDatabaseInstanceAttributes()`.

----


*By submitting this pull request, I confirm that my contribution is made under the terms of the Apache-2.0 license*

Add L2s for `FirewallDomainList`, `FirewallRuleGroup` and
`FirewallRuleGroupAssociation`.


----

*By submitting this pull request, I confirm that my contribution is made under the terms of the Apache-2.0 license*

CloudFormation recently released a feature that makes it easier
to iterate quickly on development stacks, where the rollback step
of a deployment is skipped if a deployment fails.

https://aws.amazon.com/de/blogs/aws/new-for-aws-cloudformation-quickly-retry-stack-operations-from-the-point-of-failure/

This allows a developer to fix their code and retry quickly without
losing time waiting for rollbacks.

Fixes #16289.


----

*By submitting this pull request, I confirm that my contribution is made under the terms of the Apache-2.0 license*

No changes have been made to the tests, pure migration.

----

*By submitting this pull request, I confirm that my contribution is made under the terms of the Apache-2.0 license*

This is part of the continued work to release the experimental modules as
independent alpha modules. This change introduces a new mode for handling
changes in the changelog: in this new mode, all changes from alpha modules are still
stripped from the main changelog (as they are currently for v2); those alpha module
changes are now also written to a dedicated changelog (e.g., `CHANGELOG.v2.alpha.md`).

related #15591

----

*By submitting this pull request, I confirm that my contribution is made under the terms of the Apache-2.0 license*

…6300)

The gzip header includes an “OS” byte that indicates which operating system was used to perform the operation. This means that the CDK Metadata analytics string would be different for the same CDK app in two different operating systems.

To address this, we explicitly set the [gzip OS flag] to 255 (unknown).

Fixes #15322

[gzip OS flag]: https://datatracker.ietf.org/doc/html/rfc1952


----

*By submitting this pull request, I confirm that my contribution is made under the terms of the Apache-2.0 license*

…eCluster (#16296)

fixes #16252

----

*By submitting this pull request, I confirm that my contribution is made under the terms of the Apache-2.0 license*