Merge branch 'main' into inspector-assessment-template

Author: mergify[bot]

CHANGELOG.v2.alpha.md

@@ -2,6 +2,17 @@
 
 All notable changes to this project will be documented in this file. See [standard-version](https://github.com/conventional-changelog/standard-version) for commit guidelines.
 
+## [2.181.1-alpha.0](https://github.com/aws/aws-cdk/compare/v2.181.0-alpha.0...v2.181.1-alpha.0) (2025-02-27)
+
+
+### ⚠ BREAKING CHANGES TO EXPERIMENTAL FEATURES
+
+* **cognito-identitypool-alpha:** Any `IdentityPool` resources deployed in versions `>=2.179.0` will now fail to deploy. You will need to delete the `IdentityPoolRoleAttachment` from your stack via the console before redeploying.
+
+### Bug Fixes
+
+* **cognito-identitypool-alpha:** prevent stacks from not deploying correctly ([#33609](https://github.com/aws/aws-cdk/issues/33609)) ([a1e2afe](https://github.com/aws/aws-cdk/commit/a1e2afe67cc907fa278503ebc886aa3b5bf97887)), closes [#33510](https://github.com/aws/aws-cdk/issues/33510)
+
 ## [2.181.0-alpha.0](https://github.com/aws/aws-cdk/compare/v2.180.0-alpha.0...v2.181.0-alpha.0) (2025-02-25)
 
 

CHANGELOG.v2.md

@@ -2,6 +2,8 @@
 
 All notable changes to this project will be documented in this file. See [standard-version](https://github.com/conventional-changelog/standard-version) for commit guidelines.
 
+## [2.181.1](https://github.com/aws/aws-cdk/compare/v2.181.0...v2.181.1) (2025-02-27)
+
 ## [2.181.0](https://github.com/aws/aws-cdk/compare/v2.180.0...v2.181.0) (2025-02-25)
 
 

CONTRIBUTORS.md

@@ -10,16 +10,16 @@ Shout out to our top contributors!
 - [iliapolo](https://github.com/iliapolo)
 - [corymhall](https://github.com/corymhall)
 - [shivlaks](https://github.com/shivlaks)
-- [otaviomacedo](https://github.com/otaviomacedo)
 - [mrgrain](https://github.com/mrgrain)
+- [otaviomacedo](https://github.com/otaviomacedo)
 - [mazyu36](https://github.com/mazyu36)
 - [pahud](https://github.com/pahud)
 - [TheRealAmazonKendra](https://github.com/TheRealAmazonKendra)
 - [comcalvi](https://github.com/comcalvi)
-- [madeline-k](https://github.com/madeline-k)
 - [go-to-k](https://github.com/go-to-k)
-- [NetaNir](https://github.com/NetaNir)
+- [madeline-k](https://github.com/madeline-k)
 - [badmintoncryer](https://github.com/badmintoncryer)
+- [NetaNir](https://github.com/NetaNir)
 - [robertd](https://github.com/robertd)
 - [MrArnoldPalmer](https://github.com/MrArnoldPalmer)
 - [lpizzinidev](https://github.com/lpizzinidev)
@@ -29,4 +29,4 @@ Shout out to our top contributors!
 - [GavinZZ](https://github.com/GavinZZ)
 
 
-_Last updated: Sat, 01 Feb 25 00:11:52 +0000_
+_Last updated: Sat, 01 Mar 25 00:12:56 +0000_

README.md

@@ -155,7 +155,7 @@ this capability, please see the [developer guide](https://docs.aws.amazon.com/cd
 
 ## More Resources
 
-* [CDK Workshop](https://cdkworkshop.com/)
+* [AWS CDK Immersion Day Workshop](https://catalog.us-east-1.prod.workshops.aws/workshops/10141411-0192-4021-afa8-2436f3c66bd8/en-US)
 * [Construct Hub](https://constructs.dev) - Find and use open-source Cloud Development Kit (CDK) libraries
 * Best Practices
   * [Best practices for developing cloud applications with AWS CDK](https://aws.amazon.com/blogs/devops/best-practices-for-developing-cloud-applications-with-aws-cdk/)

ROADMAP.md

@@ -138,7 +138,7 @@ To make the CDK more accessible and easier to understand, we publish educational
 - [Blog] [How the PGA Tour speeds up development with the AWS CDK](https://aws.amazon.com/blogs/devops/driving-development-forward-how-the-pga-tour-speeds-up-development-with-the-aws-cdk/)
 - [Workshop/Livestream] [CDK Workshop Series on CDK Live!](https://youtube.com/playlist?list=PLp1wJE9SAACOLvdtKL2P2Kq_N_AiYIj8N&si=hH14gEVmM_35xivq)
 - [Livestream] [Learn how to build and publish AWS CDK Constructs](https://www.youtube.com/live/kUfSoFy4Mgg?si=aDMMacUT3lq6ZeKw)
-- [Workshop] [The AWS CDK Workshop](https://cdkworkshop.com/)
+- [Workshop] [AWS CDK Immersion Day Workshop](https://catalog.us-east-1.prod.workshops.aws/workshops/10141411-0192-4021-afa8-2436f3c66bd8/en-US)
 - [Workshop] [Extended CDK Workshop](https://catalog.us-east-1.prod.workshops.aws/workshops/071bbc60-6c1f-47b6-8c66-e84f5dc96b3f/en-US)
 - [Workshop] [Automating your workload deployments in AWS Local Zones](https://catalog.workshops.aws/localzone-cdk/en-US)
 - [Blogpost] [Using AWS CloudFormation and AWS Cloud Development Kit to provision multicloud resources](https://aws.amazon.com/blogs/devops/using-aws-cloudformation-and-aws-cloud-development-kit-to-provision-multicloud-resources/)

allowed-breaking-changes.txt

@@ -6,6 +6,7 @@ change-return-type:@aws-cdk/cloud-assembly-schema.Manifest.load
 # Adding any new context queries will add to the ContextQueryProperties type,
 # which changes the signature of MissingContext.
 weakened:@aws-cdk/cloud-assembly-schema.MissingContext
+weakened:aws-cdk-lib.cloud_assembly_schema.MissingContext
 
 removed:@aws-cdk/core.BootstraplessSynthesizer.DEFAULT_ASSET_PUBLISHING_ROLE_ARN
 removed:@aws-cdk/core.DefaultStackSynthesizer.DEFAULT_ASSET_PUBLISHING_ROLE_ARN

packages/@aws-cdk-testing/framework-integ/package.json

@@ -35,6 +35,7 @@
     "@aws-sdk/client-acm": "3.632.0",
     "@aws-sdk/client-rds": "3.632.0",
     "@aws-sdk/client-s3": "3.632.0",
+    "@aws-sdk/client-cognito-identity-provider": "3.632.0",
     "axios": "1.7.8",
     "delay": "5.0.0"
   },

packages/@aws-cdk-testing/framework-integ/test/aws-apigateway/test/integ.restapi.vpc-endpoint.js.snapshot/ApiGatewayVpcEndpointIntegDefaultTestDeployAssert55D396EF.assets.json

@@ -1030,6 +1030,54 @@
     "Vpc1IsolatedSubnet2RouteTableAssociation6394B926"
    ]
   },
+  "TestFunction0ServiceRoleDefaultPolicy02794024": {
+   "Type": "AWS::IAM::Policy",
+   "Properties": {
+    "PolicyDocument": {
+     "Statement": [
+      {
+       "Action": "execute-api:Invoke",
+       "Effect": "Allow",
+       "Resource": {
+        "Fn::Join": [
+         "",
+         [
+          "arn:",
+          {
+           "Ref": "AWS::Partition"
+          },
+          ":execute-api:",
+          {
+           "Ref": "AWS::Region"
+          },
+          ":",
+          {
+           "Ref": "AWS::AccountId"
+          },
+          ":",
+          {
+           "Ref": "ApiF70053CD"
+          },
+          "/*/*/*"
+         ]
+        ]
+       }
+      }
+     ],
+     "Version": "2012-10-17"
+    },
+    "PolicyName": "TestFunction0ServiceRoleDefaultPolicy02794024",
+    "Roles": [
+     {
+      "Ref": "TestFunction0ServiceRoleD0765191"
+     }
+    ]
+   },
+   "DependsOn": [
+    "Vpc1IsolatedSubnet1RouteTableAssociation5CB6A296",
+    "Vpc1IsolatedSubnet2RouteTableAssociation6394B926"
+   ]
+  },
   "TestFunction0SecurityGroup749DC118": {
    "Type": "AWS::EC2::SecurityGroup",
    "Properties": {
@@ -1112,59 +1160,12 @@
     }
    },
    "DependsOn": [
+    "TestFunction0ServiceRoleDefaultPolicy02794024",
     "TestFunction0ServiceRoleD0765191",
     "Vpc1IsolatedSubnet1RouteTableAssociation5CB6A296",
     "Vpc1IsolatedSubnet2RouteTableAssociation6394B926"
    ]
   },
-  "TestFunction0inlinePolicyAddedToExecutionRole00B5803B5": {
-   "Type": "AWS::IAM::Policy",
-   "Properties": {
-    "PolicyDocument": {
-     "Statement": [
-      {
-       "Action": "execute-api:Invoke",
-       "Effect": "Allow",
-       "Resource": {
-        "Fn::Join": [
-         "",
-         [
-          "arn:",
-          {
-           "Ref": "AWS::Partition"
-          },
-          ":execute-api:",
-          {
-           "Ref": "AWS::Region"
-          },
-          ":",
-          {
-           "Ref": "AWS::AccountId"
-          },
-          ":",
-          {
-           "Ref": "ApiF70053CD"
-          },
-          "/*/*/*"
-         ]
-        ]
-       }
-      }
-     ],
-     "Version": "2012-10-17"
-    },
-    "PolicyName": "TestFunction0inlinePolicyAddedToExecutionRole00B5803B5",
-    "Roles": [
-     {
-      "Ref": "TestFunction0ServiceRoleD0765191"
-     }
-    ]
-   },
-   "DependsOn": [
-    "Vpc1IsolatedSubnet1RouteTableAssociation5CB6A296",
-    "Vpc1IsolatedSubnet2RouteTableAssociation6394B926"
-   ]
-  },
   "TestFunction1ServiceRoleFF9BD7F5": {
    "Type": "AWS::IAM::Role",
    "Properties": {
@@ -1212,6 +1213,54 @@
     "Vpc2IsolatedSubnet2RouteTableAssociation0186F707"
    ]
   },
+  "TestFunction1ServiceRoleDefaultPolicyEA6A8ACA": {
+   "Type": "AWS::IAM::Policy",
+   "Properties": {
+    "PolicyDocument": {
+     "Statement": [
+      {
+       "Action": "execute-api:Invoke",
+       "Effect": "Allow",
+       "Resource": {
+        "Fn::Join": [
+         "",
+         [
+          "arn:",
+          {
+           "Ref": "AWS::Partition"
+          },
+          ":execute-api:",
+          {
+           "Ref": "AWS::Region"
+          },
+          ":",
+          {
+           "Ref": "AWS::AccountId"
+          },
+          ":",
+          {
+           "Ref": "ApiF70053CD"
+          },
+          "/*/*/*"
+         ]
+        ]
+       }
+      }
+     ],
+     "Version": "2012-10-17"
+    },
+    "PolicyName": "TestFunction1ServiceRoleDefaultPolicyEA6A8ACA",
+    "Roles": [
+     {
+      "Ref": "TestFunction1ServiceRoleFF9BD7F5"
+     }
+    ]
+   },
+   "DependsOn": [
+    "Vpc2IsolatedSubnet1RouteTableAssociation4E22797D",
+    "Vpc2IsolatedSubnet2RouteTableAssociation0186F707"
+   ]
+  },
   "TestFunction1SecurityGroup263EDDE5": {
    "Type": "AWS::EC2::SecurityGroup",
    "Properties": {
@@ -1294,58 +1343,11 @@
     }
    },
    "DependsOn": [
+    "TestFunction1ServiceRoleDefaultPolicyEA6A8ACA",
     "TestFunction1ServiceRoleFF9BD7F5",
     "Vpc2IsolatedSubnet1RouteTableAssociation4E22797D",
     "Vpc2IsolatedSubnet2RouteTableAssociation0186F707"
    ]
-  },
-  "TestFunction1inlinePolicyAddedToExecutionRole054C03DAF": {
-   "Type": "AWS::IAM::Policy",
-   "Properties": {
-    "PolicyDocument": {
-     "Statement": [
-      {
-       "Action": "execute-api:Invoke",
-       "Effect": "Allow",
-       "Resource": {
-        "Fn::Join": [
-         "",
-         [
-          "arn:",
-          {
-           "Ref": "AWS::Partition"
-          },
-          ":execute-api:",
-          {
-           "Ref": "AWS::Region"
-          },
-          ":",
-          {
-           "Ref": "AWS::AccountId"
-          },
-          ":",
-          {
-           "Ref": "ApiF70053CD"
-          },
-          "/*/*/*"
-         ]
-        ]
-       }
-      }
-     ],
-     "Version": "2012-10-17"
-    },
-    "PolicyName": "TestFunction1inlinePolicyAddedToExecutionRole054C03DAF",
-    "Roles": [
-     {
-      "Ref": "TestFunction1ServiceRoleFF9BD7F5"
-     }
-    ]
-   },
-   "DependsOn": [
-    "Vpc2IsolatedSubnet1RouteTableAssociation4E22797D",
-    "Vpc2IsolatedSubnet2RouteTableAssociation0186F707"
-   ]
   }
  },
  "Outputs": {