chore(deps): update dependency aws-cdk-lib to v2.202.0

[renovate]

This PR contains the following updates:

Package	Change	Age	Adoption	Passing	Confidence
aws-cdk-lib (source)	2.196.1 -> 2.202.0

---

Release Notes

aws/aws-cdk (aws-cdk-lib)

v2.202.0

Compare Source

Features

• lambda: support for schema registry for kafka (#​34746) (c6ea664)
• update L1 CloudFormation resource definitions (#​34730) (47a3ee3)
• cdk-pipeline: add url and sns topic for manual approval in cdk pipeline (re-create PR since original is auto-closed) (#​34654) (39f1636), closes #​32809 #​12273 #​34227
• eks: support eks with k8s 1.33 (#​34602) (fc46733), closes #​34520 /github.com/aws/aws-cdk/pull/33339#issuecomment-2643498256
• kms: implement .grant methods for Alias.fromAliasName (under feature flag) (#​34237) (8e19dd6), closes #​22697
• opensearch: add logic to only log specific field when less verbosity is needed for opensearch access policy custom resource (#​34701) (856e3b1), closes #​29093
• exclude lambda.Version and apigateway.Deployment from refactoring (#​34710) (dd14a17)

Bug Fixes

• core: splitting tree.json produces a lot of files (#​34718) (650134f), closes #​34478 #​34627
• pipelines: use display name for Asset actions when publishAssetsInParallel is false (#​34049) (754ad50), closes #​34042 #​33844
• route53: warn when ttl is provided with alias target in RecordSet (#​34526) (993d2fd)
• test-app: fix spelling error (#​34762) (1885062)

---

Alpha modules (2.202.0-alpha.0)

Features

• amplify: add compute role support for Amplify branches (#​34708) (817a21a)
• amplify-alpha: support custom response headers in monorepo structures (#​31771) (aea1372), closes #​31758

v2.201.0

Compare Source

Features

• opensearch: update default TLS security policy to TLS 1.2 for OpenSearch domains (#​34660) (3cc2dc2), closes #​34658
• update L1 CloudFormation resource definitions (#​34659) (ef02724)
• update L1 CloudFormation resource definitions (#​34687) (025c82e)
• appconfig: support customer managed key for hosted configuration (#​34256) (484719e)
• codepipeline-actions: native Amazon EC2 deployment support (#​33604) (9d39db7), closes #​33584 /docs.aws.amazon.com/codepipeline/latest/userguide/action-reference-EC2Deploy.html#action-reference-EC2
• core: support adding additional cache key to cdk context values (#​31586) (8848134), closes #​26982
• core: throw typed Errors (#​34587) (4e63b1a), closes #​32569
• eks: added support for bootstrapSelfManagedAddons (#​33597) (cedc1b0), closes #​30792
• rds: DatabaseInstanceFromSnapshot support clusterSnapshotIdentifier (#​33982) (48d30b6), closes #​33889
• rds: support auto-pause configuration for Aurora Serverless v2 (#​34173) (2c55c28), closes #​32280 #​32563
• stepfunctions: add support for Jsonata expressions to Map.ItemSelector (#​34625) (dc30faa), closes #​34538 /github.com/aws/aws-cdk/blob/ed08f3f0b8ecd79a2fa5e804acc73a9ff23eab80/packages/aws-cdk-lib/aws-stepfunctions/lib/states/map-base.ts#L60-L77
• synthetics: playwright 2.0 runtime (#​34609) (1418204)
• synthetics: safe canary update (#​34608) (89c5350)

Bug Fixes

• export errors to make it available in region-info/lib/fact.ts (#​34691) (5c8f50c), closes #​34690 #​34690 #​33384
• apigateway: correct JsonSchema.additionalItems property type (#​33879) (464d521), closes #​33878 #​33878
• cloudfront: use wildcard when grant some cloudfront permission (#​33802) (452a5e1), closes #​33249
• lambda: disable aws-lambda:useCdkManagedLogGroup feature flag when not set (#​34613) (d696688), closes #​34612 #​34612
• logs: exposed metric from the metric filter will now include the dimension map (#​34648) (892b013), closes #​34643
• opensearch: opensearchservice: existing integ test is failing (#​34680) (be21625), closes 1#L59
• typo in jsdoc of noncurrentVersionTransitions property (#​34620) (ed08f3f)

---

Alpha modules (2.201.0-alpha.0)

Features

• amplify: add skew protection feature for Amplify branches (#​34656) (8808998)
• bedrock: adding bedrock l2 construct features (#​34065) (a028927)
• ec2: add interface VPC endpoint for DSQL (#​34487) (3e53c2c)
• ec2: support Firehose IDeliveryStream as flow log destination (#​34596) (cdfe6e7), closes #​33883 #​33757
• ec2: volume initialization rate for EBS volume (#​34570) (527d483)

Reverts

• ec2: support Firehose IDeliveryStream as flow log destination (#​34665) (b77bd0e), closes aws/aws-cdk#34596

v2.200.2

Compare Source

Bug Fixes

• export errors to make it available in region-info/lib/fact.ts (#​34691) (4a75032), closes #​34690 #​34690 #​33384

---

Alpha modules (2.200.2-alpha.0)

v2.200.1

Compare Source

Bug Fixes

• lambda: disable aws-lambda:useCdkManagedLogGroup feature flag when not set (#​34613) (b4cab7f), closes #​34612 #​34612

---

Alpha modules (2.200.1-alpha.0)

v2.200.0

Compare Source

Features

• update L1 CloudFormation resource definitions (#​34594) (1e37ee7)
• custom-resources: throw ValidationError instead of untyped Errors (#​33392) (1dacaa3), closes #​32569
• ec2: implement IPeer to PrefixList to be usable as a connection peer (#​33617) (c277419), closes #​33607
• iam: introduce OidcProviderNative construct utilizing the native CloudFormation resource (#​28634) (d8e6c09), closes #​21197
• iam: throw ValidationErrors instead of untyped errors (#​34579) (bd5caba), closes #​32569
• lambda: allow propagating function tags to loggroup (#​34556) (f556fd1)
• lambda: throw ValidationErrors instead of untyped errors (#​34577) (6ccdd81), closes #​32569
• region-info: throw ValidationError instead of untyped Errors (#​33384) (303daf2), closes #​32569
• s3: add grantReplicationPermission for IAM Role permissions (#​34138) (bfa6490), closes #​34119
• secretsmanager: throw ValidationErrors instead of untyped errors (#​34580) (4d591ef), closes #​32569
• servicecatalog: throw ValidationErrors instead of untyped errors (#​34581) (3895d76), closes #​32569
• sns-subscriptions: support Amazon Data Firehose subscription (#​33811) (632179c), closes #​14391
• stepfunctions: add grant API for RedriveExecution (#​34554) (e03939d), closes #​33578

Bug Fixes

• ec2: validate throughput property on EC2 instance block devices (#​34571) (b31580a), closes #​34033
• elasticloadbalancingv2: fix incorrect max for minimumCapacityUnit (#​34586) (8f19b26), closes #​34582

---

Alpha modules (2.200.0-alpha.0)

Features

• msk: support Kafka 4.0 (#​34501) (aa40e38)

v2.199.0

Compare Source

⚠ BREAKING CHANGES TO EXPERIMENTAL FEATURES

• cloudformation: Some L1 resources experienced breaking changes due to updated CloudFormation resources. Please check the notes for each specific module for more information.
• vpc-lattice: the name and resourceConfigurationType property in CfnResourceConfigurationProps has changed from optional to required. Also, the name, subnetIds and vpcIdentifier properties in CfnResourceGatewayProps have changed from optional to mandatory.

Features

• appconfig: deletion protection check for configuration profile (#​34418) (ce88c76)
• cloudformation: update L1 CloudFormation resource definitions (#​34555) (64662b2)
• ecs-patterns: add minHealthyPercent and maxHealthyPercent props to NetworkMultipleTargetGroupsFargateService (#​34516) (a434aed), closes #​34368
• eks: Addon support configurationValues (#​34061) (b420033), closes #​34001
• events-targets: enable opt-in to use an IAM role for SnsTopic target (#​34259) (a3a0cf0)
• stepfunctions-tasks: bedrock createModelCustomizationJob integration (#​31913) (0c653d3), closes #​29042

Bug Fixes

• elasticloadbalancingv2: add validation on application listeners for certificates on HTTP protocol (#​34233) (ca065bb)
• rds: fix incorrect import/export combination check in AuroraMysqlEngineVersion.of() (#​33564) (9e41154), closes #​33562 #​33562

---

Alpha modules (2.199.0-alpha.0)

v2.198.0

Compare Source

Features

• update L1 CloudFormation resource definitions (#​34528) (92ad68a)

Bug Fixes

• synthesis fails if tree.json exceeds 512MB (#​34478) (ff2f4af)
• aws-ecs-patterns: add missing redirectHTTP dependency on default ALB listener (7b9a07b)
• ecs-patterns: add missing redirectHTTP dependency on main listener in ApplicationLoadBalancedFargateService (#​34510) (8e4ca14), closes #​34235 /github.com/aws/aws-cdk/blob/2bdc07e45f836a710bc049d43a2462806af1c75d/packages/aws-cdk-lib/aws-ecs-patterns/lib/base/application-load-balanced-service-base.ts#L508
• route53: avoid setting unnecessary properties for Recovery Control type Route53 health check (#​34272) (6bc01c9), closes #​34262
• ses-actions: condition should use SourceAccount (#​34081) (f68b947), closes #​29811 #​30143 #​29833 #​30375

---

Alpha modules (2.198.0-alpha.0)

⚠ BREAKING CHANGES TO EXPERIMENTAL FEATURES

• amplify: A compute role is created when platform is Platform.WEB_COMPUTE or Platform.WEB_DYNAMIC.

Features

• amplify: add compute role support for Amplify app (#​33962) (7490b92), closes #​33882
• ec2: add i7i instance class (#​34453) (3fe8ab4)

v2.197.0

Compare Source

Features

• update L1 CloudFormation resource definitions (#​34497) (6b7cdcf)
• cloudwatch: anomaly detection alarms (#​31232) (e2aa338), closes #​10540 #​10540
• custom-resource: update default node runtime to node22 in custom resources for commercial, china and gov regions (#​34319) (eb5e688)

Bug Fixes

• core: platform is ignored during asset bundling (#​33865) (91bec88), closes #​30239
• lambda-nodejs: instantiating NodejsFunction without the entry property fails (#​34498) (36ce84d)

---

Alpha modules (2.197.0-alpha.0)

---

Configuration

📅 Schedule: Branch creation - "before 6am,every weekend" in timezone Europe/Oslo, Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[renovate]

Branch automerge failure

This PR was configured for branch automerge. However, this is not possible, so it has been raised as a PR instead.

---

• Branch has one or more failed status checks

[joakimen]

/update-snapshots

[github-actions]

Updating snapshots... View workflow run

[joakimen]

/update-snapshots

[github-actions]

Updating snapshots... View workflow run

[renovate]

Edited/Blocked Notification

Renovate will not automatically rebase this PR, because it does not recognize the last commit author and assumes somebody else may have edited the PR.

You can manually request rebase by checking the rebase/retry box above.

⚠️ Warning: custom changes will be lost.

[github-actions]

🎉 This PR is included in version 2.5.0 🎉

The release is available on:

• npm package (@latest dist-tag)
• GitHub release

Your semantic-release bot 📦🚀