Merge branch 'master' into mock_integration_type

.github/dependabot.yml

@@ -9,5 +9,5 @@ updates:
  schedule:
  interval: "weekly"
  labels:
- - "pr/auto-approve"
+ - "auto-approve"
  open-pull-requests-limit: 5

.github/workflows/README.md

@@ -6,7 +6,7 @@ These workflows and actions are configured in the AWS CDK GitHub repository.
 
 ### Auto Approve
 [auto-approve.yml](auto-approve.yml): Approves merging PRs with the
-`pr/auto-approve` label.
+`auto-approve` label.
 Owner: Core CDK team
 
 ### PR Linter

.github/workflows/auto-approve.yml

@@ -1,4 +1,4 @@
-# Approve PRs with "pr/auto-approve". mergify takes care of the actual merge.
+# Approve PRs with "auto-approve". mergify takes care of the actual merge.
 
 name: auto-approve
 on:
@@ -7,7 +7,7 @@ on:
 
 jobs:
  auto-approve:
- if: contains(github.event.pull_request.labels.*.name, 'pr/auto-approve')
+ if: contains(github.event.pull_request.labels.*.name, 'auto-approve')
  runs-on: ubuntu-latest
  permissions:
  pull-requests: write

.github/workflows/issue-label-assign.yml

@@ -18,13 +18,14 @@ jobs:
  with:
  github-token: "${{ secrets.GITHUB_TOKEN }}"
  excluded-expressions: "[CDK CLI Version|TypeScript|Java|Python]"
+ area-is-keyword: true
  parameters: >
  [
  {"area":"package/tools","keywords":["cli","command line","init","synth","diff","bootstrap"],"labels":["package/tools"],"assignees":["rix0rrr"]},
  {"area":"@aws-cdk/alexa-ask","keywords":["alexa-ask","alexa", "cfnskill"],"labels":["@aws-cdk/alexa-ask"],"assignees":["madeline-k"]},
  {"area":"@aws-cdk/app-delivery","keywords":["app-delivery","PipelineDeployStackAction"],"labels":["@aws-cdk/app-delivery"],"assignees":["skinny85"]},
- {"area":"@aws-cdk/assert","keywords":["assert", "@aws-cdk/assert"],"labels":["@aws-cdk/assert"],"assignees":["kaizen3031593"]},
- {"area":"@aws-cdk/assertions","keywords":["assertions", "@aws-cdk/assertions"],"labels":["@aws-cdk/assertions"],"assignees":["kaizen3031593"]},
+ {"area":"@aws-cdk/assert","keywords":["assert"],"labels":["@aws-cdk/assert"],"assignees":["kaizen3031593"]},
+ {"area":"@aws-cdk/assertions","keywords":["assertions"],"labels":["@aws-cdk/assertions"],"assignees":["kaizen3031593"]},
  {"area":"@aws-cdk/assets","keywords":["assets","staging"],"labels":["@aws-cdk/assets"],"assignees":["eladb"]},
  {"area":"@aws-cdk/aws-accessanalyzer","keywords":["aws-accessanalyzer","accessanalyzer","cfnanalyzer"],"labels":["@aws-cdk/aws-accessanalyzer"],"assignees":["skinny85"]},
  {"area":"@aws-cdk/aws-acmpca","keywords":["aws-acmpca","acmpca","certificateauthority"],"labels":["@aws-cdk/aws-acmpca"],"assignees":["skinny85"]},

.github/workflows/pr-labeler.yml

@@ -13,6 +13,6 @@ jobs:
  pull-requests: write
  issues: write
  steps:
- - run: gh pr edit ${{ github.event.pull_request.number }} --add-label "pr/auto-approve" -R ${{ github.repository }}
+ - run: gh pr edit ${{ github.event.pull_request.number }} --add-label "auto-approve" -R ${{ github.repository }}
  env:
  GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}

.github/workflows/yarn-upgrade.yml

@@ -18,7 +18,7 @@ jobs:
  uses: actions/checkout@v2
 
  - name: Set up Node
- uses: actions/[email protected].0
+ uses: actions/[email protected].1
  with:
  node-version: 12
 
@@ -110,7 +110,7 @@ jobs:
  title: 'chore: npm-check-updates && yarn upgrade'
  body: |-
  Ran npm-check-updates and yarn upgrade to keep the `yarn.lock` file up-to-date.
- labels: contribution/core,dependencies,pr/auto-approve
+ labels: contribution/core,dependencies,auto-approve
  team-reviewers: aws-cdk-team
  # Github prevents further Github actions to be run if the default Github token is used.
  # Instead use a privileged token here, so further GH actions can be triggered on this PR.

.gitignore

@@ -23,6 +23,7 @@ coverage/
 *.sw[a-z]
 *~
 .idea
+*.iml
 junit.xml
 
 # We don't want tsconfig at the root

CHANGELOG.md

@@ -2,6 +2,111 @@
 
 All notable changes to this project will be documented in this file. See [standard-version](https:/conventional-changelog/standard-version) for commit guidelines.
 
+## [1.139.0](https:/aws/aws-cdk/compare/v1.138.2...v1.139.0) (2022-01-11)
+
+
+### ⚠ BREAKING CHANGES TO EXPERIMENTAL FEATURES
+
+* **apigatewayv2-authorizers:** `WebSocketLambdaAuthorizerProps.identitySource` default changes from `['$request.header.Authorization']` to `['route.request.header.Authorization']`.
+* **cfn2ts:** some "complex" property types within the generated
+CloudFormation interfaces (i.e: properties of `Cfn*` constructs) with
+names starting with a capital letter `I` followed by another capital
+letter are no longer incorrectly treated as behavioral interfaces, and
+might hence have different usage patterns in non-TypeScript languages.
+Such interfaces were previously very difficult to use in non-TypeScript
+languages, and required convoluted workarounds, which can now be removed.
+
+### Features
+
+* **aws-ecs:** support runtime platform property for create fargate windows runtime. ([#17622](https:/aws/aws-cdk/issues/17622)) ([fa8f2e2](https:/aws/aws-cdk/commit/fa8f2e2180d60e5621d2ae9606a3d1b2dcb681d9)), closes [#17242](https:/aws/aws-cdk/issues/17242)
+* **bootstrap:** ECR `ScanOnPush` is now enabled by default ([#17994](https:/aws/aws-cdk/issues/17994)) ([7588b51](https:/aws/aws-cdk/commit/7588b517eb17bb5198f91056113eb79a34830867))
+* **cfnspec:** cloudformation spec v51.0.0 ([#18274](https:/aws/aws-cdk/issues/18274)) ([c208e60](https:/aws/aws-cdk/commit/c208e6043e4a184b4d3ac2508ebef1cb31bace43))
+* **cli:** diff now uses the lookup Role for new-style synthesis ([#18277](https:/aws/aws-cdk/issues/18277)) ([2256680](https:/aws/aws-cdk/commit/225668050caef9bfdaa25b8ae984d3886108397f))
+* **eks:** cluster tagging ([#4995](https:/aws/aws-cdk/issues/4995)) ([#18109](https:/aws/aws-cdk/issues/18109)) ([304f5b6](https:/aws/aws-cdk/commit/304f5b6974f1121a8a5ff802076dffe2eff9f407))
+* **iam:** generate AccessKeys ([#18180](https:/aws/aws-cdk/issues/18180)) ([beb5706](https:/aws/aws-cdk/commit/beb5706e0c80300c8adba2b75b573f6c6def3de6)), closes [#8432](https:/aws/aws-cdk/issues/8432)
+* **lambda-event-sources:** adds `AuthenticationMethod.CLIENT_CERTIFICATE_TLS_AUTH` to kafka ([#17920](https:/aws/aws-cdk/issues/17920)) ([93cd776](https:/aws/aws-cdk/commit/93cd7769b7b68ab6985c357c4d2f2137bb631553))
+* **pipelines:** step dependencies ([#18256](https:/aws/aws-cdk/issues/18256)) ([e3359e0](https:/aws/aws-cdk/commit/e3359e0b79a8b999ed32c93fdbd19625bbbefaf8)), closes [#17945](https:/aws/aws-cdk/issues/17945)
+* **pipelines:** support timeout in CodeBuildStep ([#17351](https:/aws/aws-cdk/issues/17351)) ([2aa3b8e](https:/aws/aws-cdk/commit/2aa3b8e6e3ce75aaa7d4158f55e162eb26050ba1))
+* **s3:** add EventBridge bucket notifications ([#18150](https:/aws/aws-cdk/issues/18150)) ([912aeda](https:/aws/aws-cdk/commit/912aeda295820920ed880b9c85a98c56421647b8)), closes [#18076](https:/aws/aws-cdk/issues/18076)
+* **sqs:** add DLQ readonly property to Queue ([#18232](https:/aws/aws-cdk/issues/18232)) ([caa6788](https:/aws/aws-cdk/commit/caa6788781690c629226a54bb1f9529722d67887)), closes [#18083](https:/aws/aws-cdk/issues/18083)
+
+
+### Bug Fixes
+
+* **apigatewayv2-authorizers:** incorrect `identitySource` default for `WebSocketLambdaAuthorizer` ([#18315](https:/aws/aws-cdk/issues/18315)) ([74eee1e](https:/aws/aws-cdk/commit/74eee1e5b8fa404dde129f001b986d615f435c73)), closes [#18307](https:/aws/aws-cdk/issues/18307)
+* **appmesh:** allow a Virtual Node have as a backend a Virtual Service whose provider is that Node ([#18265](https:/aws/aws-cdk/issues/18265)) ([272b6b1](https:/aws/aws-cdk/commit/272b6b1abe22b7415eed5cdba82056d154fc31d7)), closes [#17322](https:/aws/aws-cdk/issues/17322)
+* **aws-kinesis:** remove default shard count when stream mode is on-demand and set default mode to provisioned ([#18221](https:/aws/aws-cdk/issues/18221)) ([cac11bb](https:/aws/aws-cdk/commit/cac11bba2ea0714dec8e23b069496d1b9d940685)), closes [#18139](https:/aws/aws-cdk/issues/18139)
+* **aws-lambda-event-sources:** unsupported properties for SelfManagedKafkaEventSource and ManagedKafkaEventSource ([#17965](https:/aws/aws-cdk/issues/17965)) ([5ddaef4](https:/aws/aws-cdk/commit/5ddaef491d7962616f75f170cf7547cd9229338f)), closes [#17934](https:/aws/aws-cdk/issues/17934)
+* **cfn2ts:** some property times have behavioral-interface names ([#18275](https:/aws/aws-cdk/issues/18275)) ([6359c12](https:/aws/aws-cdk/commit/6359c12e3242e23d9b3bf0a42cac7c361c8d4d8a))
+* **cli:** assets are KMS-encrypted using wrong key ([#18340](https:/aws/aws-cdk/issues/18340)) ([64ae9f3](https:/aws/aws-cdk/commit/64ae9f3dc8a169ad0a7a2d02cb04f857debd3653)), closes [#17668](https:/aws/aws-cdk/issues/17668) [#18262](https:/aws/aws-cdk/issues/18262)
+* **cli:** breaks due to faulty version of `colors` ([#18324](https:/aws/aws-cdk/issues/18324)) ([ddc2bc6](https:/aws/aws-cdk/commit/ddc2bc6ae64fe14ddb4a03122c90dfcf954f149f))
+* **codebuild:** setting Cache.none() renders nothing in the template ([#18194](https:/aws/aws-cdk/issues/18194)) ([cd51a5d](https:/aws/aws-cdk/commit/cd51a5dae1780e34aecd90d85783fb6d3c239903)), closes [#18165](https:/aws/aws-cdk/issues/18165)
+* **lambda:** imported Function still has region and account from its Stack, instead of its ARN ([#18255](https:/aws/aws-cdk/issues/18255)) ([01bbe4c](https:/aws/aws-cdk/commit/01bbe4ca6c38ca7fe2239f8885bbec5ab537c9ad)), closes [#18228](https:/aws/aws-cdk/issues/18228)
+* **lambda-python:** asset files are generated inside the 'asset-input' folder ([#18306](https:/aws/aws-cdk/issues/18306)) ([aff607a](https:/aws/aws-cdk/commit/aff607a65e061ade5c3ec9e29f82fdaa8b57f638))
+* **lambda-python:** bundle asset files correctly ([#18335](https:/aws/aws-cdk/issues/18335)) ([3822c85](https:/aws/aws-cdk/commit/3822c855cf92ee0cd4539dee33e55f57d995bf89)), closes [#18301](https:/aws/aws-cdk/issues/18301)
+* **logs:** respect region when importing log group ([#18215](https:/aws/aws-cdk/issues/18215)) ([be909bc](https:/aws/aws-cdk/commit/be909bc90822db947ec0a932621709d0cb07e50e)), closes [#18214](https:/aws/aws-cdk/issues/18214)
+* **pipelines:** `DockerCredential.dockerHub()` silently fails auth ([#18313](https:/aws/aws-cdk/issues/18313)) ([c2c87d9](https:/aws/aws-cdk/commit/c2c87d9dd861a25dcbd9aa830e81ecb4d76ba509)), closes [#15737](https:/aws/aws-cdk/issues/15737)
+* **route53:** support multiple cross account DNS delegations ([#17837](https:/aws/aws-cdk/issues/17837)) ([76b5c0d](https:/aws/aws-cdk/commit/76b5c0d12e1e692efcf6a557ee4ddb6df3709e4d)), closes [#17836](https:/aws/aws-cdk/issues/17836)
+
+## [1.138.2](https:/aws/aws-cdk/compare/v1.138.1...v1.138.2) (2022-01-09)
+
+
+### Bug Fixes
+
+* **cli:** breaks due to faulty version of `colors` ([#18324](https:/aws/aws-cdk/issues/18324)) ([43bf9ae](https:/aws/aws-cdk/commit/43bf9aec0b3c5e06d5382b29f4e8e0c91cd796ca))
+
+## [1.138.1](https:/aws/aws-cdk/compare/v1.138.0...v1.138.1) (2022-01-07)
+
+
+### Bug Fixes
+
+* **lambda-python:** asset files are generated inside the 'asset-input' folder ([#18306](https:/aws/aws-cdk/issues/18306)) ([b00b44e](https:/aws/aws-cdk/commit/b00b44efd6e402744725e711906b456a28cebc5b))
+
+## [1.138.0](https:/aws/aws-cdk/compare/v1.137.0...v1.138.0) (2022-01-04)
+
+
+### ⚠ BREAKING CHANGES TO EXPERIMENTAL FEATURES
+
+* **lambda-python:** `assetHashType` and `assetHash` properties moved to new `bundling` property.
+* **lambda-python:** Runtime is now required for `LambdaPython`
+
+### Features
+
+* **apigateway:** Add stage ARN attribute ([#18170](https:/aws/aws-cdk/issues/18170)) ([be7acfd](https:/aws/aws-cdk/commit/be7acfd54fbfe41a608fb8469657701de2b2a383))
+* **aws-autoscaling:** Add support for termination policies ([#17936](https:/aws/aws-cdk/issues/17936)) ([9e6f977](https:/aws/aws-cdk/commit/9e6f977d8ac4ad7ab2852536cc20c4469fe74f03)), closes [#15654](https:/aws/aws-cdk/issues/15654)
+* **aws-ec2:** add g4ad instance types ([#17927](https:/aws/aws-cdk/issues/17927)) ([8cb6a76](https:/aws/aws-cdk/commit/8cb6a768cd4310628925fa117b674ae456aa8474)), closes [#17565](https:/aws/aws-cdk/issues/17565)
+* **cfnspec:** add CloudFormation documentation to L1 classes ([#18101](https:/aws/aws-cdk/issues/18101)) ([0ed661d](https:/aws/aws-cdk/commit/0ed661df0b060d0ec4c502b92511b3e777144854))
+* **cli:** hotswap deployments for CodeBuild projects ([#18161](https:/aws/aws-cdk/issues/18161)) ([4ae4df8](https:/aws/aws-cdk/commit/4ae4df8388e6346d4bcb8700059e8268d7e1daac))
+* **cli:** show how long `cdk deploy` steps take ([#18230](https:/aws/aws-cdk/issues/18230)) ([82fa742](https:/aws/aws-cdk/commit/82fa7428d1a66e3a95692551bd4dae30a5fee771)), closes [#18213](https:/aws/aws-cdk/issues/18213)
+* **cli:** support for hotswapping Lambda Versions and Aliases ([#18145](https:/aws/aws-cdk/issues/18145)) ([13d77b7](https:/aws/aws-cdk/commit/13d77b75327eede6bce63a57f6c319c86aead6ec)), closes [#18058](https:/aws/aws-cdk/issues/18058) [#17043](https:/aws/aws-cdk/issues/17043)
+* **codepipeline:** variables for CodeStar Connections source Action ([#18086](https:/aws/aws-cdk/issues/18086)) ([c99da16](https:/aws/aws-cdk/commit/c99da16aae68437d1546c8ad431d7050f954ffac)), closes [#17807](https:/aws/aws-cdk/issues/17807)
+* **custom-resources:** NoEcho for sensitive data in provider framework ([#18097](https:/aws/aws-cdk/issues/18097)) ([621a410](https:/aws/aws-cdk/commit/621a410471fcda0e388a7a53bb0e3cdb77be759c))
+* **docdb:** allow setting log retention ([#18120](https:/aws/aws-cdk/issues/18120)) ([002202f](https:/aws/aws-cdk/commit/002202fd7e32192214017772a99f9e17072bd0d8)), closes [#13191](https:/aws/aws-cdk/issues/13191)
+* **ec2:** add Windows Server 2022 WindowsVersions ([#18203](https:/aws/aws-cdk/issues/18203)) ([dee732d](https:/aws/aws-cdk/commit/dee732d063c0658b768bf7b9f24087b8baed2ed6)), closes [#18199](https:/aws/aws-cdk/issues/18199)
+* **glue:** support partition index on tables ([#17998](https:/aws/aws-cdk/issues/17998)) ([c071367](https:/aws/aws-cdk/commit/c071367def4382c630057546c74fa56f00d9294c)), closes [#17589](https:/aws/aws-cdk/issues/17589)
+* **iot:** Action to send messages to SQS queues ([#18087](https:/aws/aws-cdk/issues/18087)) ([37537fe](https:/aws/aws-cdk/commit/37537fe1c1b016ae226bf7bc4ceeb128d6124872)), closes [#17699](https:/aws/aws-cdk/issues/17699)
+* **iot:** add Action to set a CloudWatch alarm ([#18021](https:/aws/aws-cdk/issues/18021)) ([de2369c](https:/aws/aws-cdk/commit/de2369c1d64260ed47cccfc2619320123af64a0f)), closes [#17705](https:/aws/aws-cdk/issues/17705)
+* **lambda-python:** support for providing a custom bundling docker image ([#18082](https:/aws/aws-cdk/issues/18082)) ([c3c4a97](https:/aws/aws-cdk/commit/c3c4a97e65071fcab35212be82dea7b29454786f)), closes [#10298](https:/aws/aws-cdk/issues/10298) [#12949](https:/aws/aws-cdk/issues/12949) [#15391](https:/aws/aws-cdk/issues/15391) [#16234](https:/aws/aws-cdk/issues/16234) [#15306](https:/aws/aws-cdk/issues/15306)
+* **msk:** add Kafka versions 2.6.3, 2.7.1 and 2.7.2 ([#18191](https:/aws/aws-cdk/issues/18191)) ([8832df1](https:/aws/aws-cdk/commit/8832df1d7497ef67b9ec62110d2f371ffe4781aa))
+* **secretsmanager:** create secrets with specified values ([#18098](https:/aws/aws-cdk/issues/18098)) ([dd90b8e](https:/aws/aws-cdk/commit/dd90b8e9b3fe46ccc18a2472623ff27ef7989fbb)), closes [#5810](https:/aws/aws-cdk/issues/5810)
+* **ssm:** reference latest version of secure string parameters ([#18187](https:/aws/aws-cdk/issues/18187)) ([7d0680a](https:/aws/aws-cdk/commit/7d0680a5a858633f92aeb78353cac22b9a391fa7)), closes [#17091](https:/aws/aws-cdk/issues/17091)
+
+
+### Bug Fixes
+
+* **amplify:** deploy asset Custom Resource points to TS file ([#18166](https:/aws/aws-cdk/issues/18166)) ([a1508af](https:/aws/aws-cdk/commit/a1508afab55c3ba0aa88b6aa85ca947badacb4a9))
+* **cloudfront-origins:** policy not added for custom OAI ([#18192](https:/aws/aws-cdk/issues/18192)) ([c894ba1](https:/aws/aws-cdk/commit/c894ba1d628acdd88be5dfbc57117a273547b32c)), closes [#18185](https:/aws/aws-cdk/issues/18185)
+* **core:** `Duration.toString()` throws an error ([#18243](https:/aws/aws-cdk/issues/18243)) ([df03df8](https:/aws/aws-cdk/commit/df03df8b5c97fae6c349822ae97245512571a1dc)), closes [#18176](https:/aws/aws-cdk/issues/18176)
+* **core:** overriding of `Stack.addFileAsset()` no longer has effect ([#18116](https:/aws/aws-cdk/issues/18116)) ([2290681](https:/aws/aws-cdk/commit/2290681a774667bcb969058c3bdb77e0b0b60044)), closes [#17328](https:/aws/aws-cdk/issues/17328)
+* **events:** event bus name only generated if no props passed ([#18153](https:/aws/aws-cdk/issues/18153)) ([9b81662](https:/aws/aws-cdk/commit/9b81662a2b281443502bbb4e8a98d9f1087388d7)), closes [#18070](https:/aws/aws-cdk/issues/18070)
+* **lambda-python:** runtime is now required ([#18143](https:/aws/aws-cdk/issues/18143)) ([98f1bb1](https:/aws/aws-cdk/commit/98f1bb147624a942773d191344c8d7242adb8d04)), closes [#10248](https:/aws/aws-cdk/issues/10248)
+* **region-info:** ssm service principal - fix more regions ([#18135](https:/aws/aws-cdk/issues/18135)) ([ed30c44](https:/aws/aws-cdk/commit/ed30c4459666840a5c0396e943916e67c76b7135)), closes [#16188](https:/aws/aws-cdk/issues/16188)
+
+
+### Reverts
+
+* **cfnspec:** add CloudFormation documentation to L1 classes ([#18177](https:/aws/aws-cdk/issues/18177)) ([2530016](https:/aws/aws-cdk/commit/253001685990e19fd23f9aa2205615f2f3e3c508))
+
 ## [1.137.0](https:/aws/aws-cdk/compare/v1.136.0...v1.137.0) (2021-12-21)
 
 

CONTRIBUTING.md

@@ -52,9 +52,8 @@ See [Gitpod section](#gitpod) on how to set up the CDK repo on Gitpod.
 
 The following tools need to be installed on your system prior to installing the CDK:
 
-- [Node.js >= 10.13.0](https://nodejs.org/download/release/latest-v10.x/)
+- [Node.js >= 14.15.0](https://nodejs.org/download/release/latest-v14.x/)
  - We recommend using a version in [Active LTS](https://nodejs.org/en/about/releases/)
- - ⚠️ versions `13.0.0` to `13.6.0` are not supported due to compatibility issues with our dependencies.
 - [Yarn >= 1.19.1, < 2](https://yarnpkg.com/lang/en/docs/install)
 - [.NET Core SDK 3.1.x](https://www.microsoft.com/net/download)
 - [Python >= 3.6.5, < 4.0](https://www.python.org/downloads/release/python-365/)