GZ

feat(ec2): add NAT instance V2 support using AL2023

1

### Issue # (if applicable) Closes https://github.com/aws/aws-cdk/issues/28907 ### Reason for this change Current NAT instance image has reached EOL on Dec 31 2023. ### Description of changes If NAT instances...

Hi team, With the new intrinsic function released, `Fn::ForEach`, I realize that it's not supported by the schema. I use `AWS ToolKit` for schema support for features like autocomplete. Everything...

LanguageExtensions and Serverless-2016-10-31 conflicts - Support Intrinsic Function in DependsOn

8

### Community Note * Please vote on this issue by adding a 👍 [reaction](https://blog.github.com/2016-03-10-add-reactions-to-pull-requests-issues-and-comments/) to the original issue to help the community and maintainers prioritize this request * Please do...

Bug: empty '.aws-sam/cache' directory after running sam build --cache

3

### Description: According to [sam cli documentation](https://docs.aws.amazon.com/serverless-application-model/latest/developerguide/sam-cli-command-reference-sam-build.html), the directory where the cache artifacts are stored when --cached is specified. The default cache directory is .aws-sam/cache. However, in my testing, it...

fix(custom-resources): provider framework will always log all data including confidential data

2

### Issue # (if applicable) Closes #30275. ### Reason for this change When using a Provider to create a custom resource, the request and response objects are logged by the...

chore(custom-resources): update python runtime for custom resources

2

### Issue # (if applicable) Closes https://github.com/aws/aws-cdk/issues/31245 ### Reason for this change Support latest python runtime that's available everywhere ### Description of changes Update custom resource handler runtime to python...

### Describe the bug The following error happens when deploying a stack to new isolated reegions that uses custom resources with python runtime. The default runtime we use for these...

fix(ec2): allow NAT instance to associate public IP

1

### Issue # (if applicable) Closes #31711 ### Reason for this change When we set mapPublicIpOnLaunch=false for public subnets, NAT instances does not get public IP addresses assigned, resulting in...

fix(core): fix policy synthesizer logic for precreated roles

1

### Issue # (if applicable) Closes https://github.com/aws/aws-cdk/issues/31653 ### Reason for this change With Role.customizeRoles enabled, dynamodb.Table.addGlobalSecondaryIndex causes an error. This is a critical blocker for customers who require the use...