Features

• apigatewayv2: websocket api: grant manage connections (#16872) (10dfa60), closes #14828
• assertions: support assertions over nested stacks (#16972) (bde44e7)
• aws-eks: support bottlerocket managed nodegroup (#17323) (2e6a1a9)
• cfnspec: cloudformation spec v48.0.0 (#17484) (6e8de96)
• cfnspec: cloudformation spec v49.0.0 (#17585) (d44d0e7)
• cognito: user pool: send emails using Amazon SES (#17117) (503720f), closes #6768
• ec2: add G5 instances (#17499) (eed70a0), closes /docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-ec2-instance.html#cfn-ec2
• ec2: add m5n and m5dn instance types (#17488) (df30d4f)
• ec2: lookup security group by name (#17246) (5bf0d07), closes #4241
• ec2: vpc endpoints for codeguru (#17498) (21c2d2b), closes #16788
• ecs: Add SystemControls to ContainerDefinition (#16970) (b12a2c6), closes #16025
• eks: Allow passing of custom IAM role to Kube Ctl Lambda (#17196) (8fa293a)
• iot: add Action to put objects in S3 Buckets (#17307) (49b87db), closes /github.com/aws/aws-cdk/pull/16681#issuecomment-942233029
• iot: add Action to put records to a Firehose stream (#17466) (7cb5f2c), closes /github.com/aws/aws-cdk/pull/16681#issuecomment-942233029
• lambda: singleton function: access runtime, log group and configure layers and environment (#17372) (ec5b102)
• rds: validate backup retention for read replica instances (#17569) (9b2158b), closes #17356
• warn users when deprecated elements are used (#17328) (3721358)
• redshift: Add support for distStyle, distKey, sortStyle and sortKey to Table (#17135) (a137cd1), closes #17125
• servicecatalog: support local launch role name in launch role constraint (#17371) (b307b69)
• stepfunctions-tasks: Support DynamoAttributeValue.listFromJsonPath (#17376) (bc10e6f), closes #17375

Bug Fixes

• apigateway: SAM CLI asset metadata missing from SpecRestApi (#17293) (841cf99), closes #14593
• assets: SAM asset metadata missing from log retention and custom resource provider functions (#17551) (a90e959)
• autoscaling: add timezone property to Scheduled Action (#17330) (3154a58)
• aws-codebuild: add @aws-cdk/asserts to package deps (#17435) (9c77e94)
• aws-lambda-event-sources: Function.addEventSource fails for ManagedKafkaEventSource typed parameters (#17490) (a474ee8)
• aws-logs: include new policy.ts exports in index.ts exports (#17403) (a391468)
• cli: improve asset publishing times by up to 30% (#17409) (40d6a48), closes #17266
• cli: skip bundling for the 'watch' command (#17455) (af61b7f), closes #17391
• cloudwatch: render agnostic alarms in legacy style (#17538) (7c50ef8)
• ec2: Duplicate EIP when NatGatewayProps.eipAllocationIds is provided (#17235) (050f6fa)
• eks: Allow specifying subnets in Pinger (#17429) (6acee52)
• iot: unable to add the same lambda function to two TopicRule Actions (#17521) (eda1640), closes #17508
• kinesis: add required rights to trigger Lambda from Kinesis. Fixes issue #17312. (#17358) (0bfc15c)
• lambda: SAM CLI asset metadata missing from image Functions (#17368) (f52d9bf)
• NestedStack: add asset metadata to NestedStack resources for local tooling (#17343) (4ba40dc)
• redshift: tableNameSuffix evaluation (#17213) (f7c3217), closes #17064
• sns-subscriptions: enable cross region subscriptions to sqs and lambda (#17273) (3cd8d48), closes #7044 #13707
• ssm: fix service principals for all regions since ap-east-1 (#17047) (5900548), closes #16188