Update dependency aws-cdk to v2.90.0

[renovate]

This PR contains the following updates:

Package	Change	Age	Adoption	Passing	Confidence
aws-cdk	2.87.0 -> 2.90.0

---

Release Notes

aws/aws-cdk (aws-cdk)

v2.90.0

Compare Source

Features

• aws-cdk-lib: ADOT Lambda Layer v0.31.0 (#​26505) (03c6f6f)
• core: new RemovalPolicy.RETAIN_EXCEPT_ON_CREATE to only retain resources that have been successfully created (#​26602) (c84666c), closes #​26595
• core: support ssh build arg in DockerImageAsset (#​26356) (7b3d381)
• stepfunctions: allow setting comment on state machine (#​25858) (6a70b4f)
• update AWS Service Spec (#​26579) (6c588da)

Bug Fixes

• cli: specifying --quiet does not suppress asset building and publishing logs (#​26493) (b12bc67), closes #​26265
• ec2: flowLogName property for FlowLog construct does not work (#​26371) (f910f78), closes #​26370
• ecr: error handling compatible with aws sdk v3 (#​26608) (300989a), closes #​26433
• ecs: unclear docs on valid ec2 task definition placement constraints and no validation of input #​25933 (#​26384) (4c57f45)
• logs: LogRetention Custom Resource does not use Node18 (#​26609) (54e64c7), closes #​26461

---

Alpha modules (2.90.0-alpha.0)

Features

• glue: glue tables can include storage parameters (#​24498) (f1df9ab), closes #​23132

Bug Fixes

• app-staging-synthesizer: misleading error message about environment-agnostic/aware stacks (#​26607) (7e2f335)
• synthetics: updated handler validation (#​26569) (1eaec92), closes #​26540

v2.89.0

Compare Source

Features

• support max-buffer-size for AWSLogs driver (#​26396) (a74536b)
• update AWS Service Spec (#​26541) (b1ca3c0)
• cli: add diff message on the number of stacks with differences (#​26297) (a9e2789), closes #​10417
• logs: configure custom subscription filter name (#​26498) (7ddb305), closes #​26485
• opensearchservice: L2 properties for offPeakWindowOptions and softwareUpdateOptions (#​26403) (02e8d58), closes #​26388
• rds: isFromLegacyInstanceProps migration flag with ClusterInstance.serverlessV2 (#​26472) (6ec9829), closes /github.com/aws/aws-cdk/issues/20197#issuecomment-1284485844 #​25942
• rds: support aurora mysql 3.03.1 (#​26507) (7fa74c4)
• route53: support geolocation routing (#​26383) (6bd9a2d), closes #​9478
• stepfunctions: add stateMachineRevisionId property to StateMachine (#​26443) (3e47d1b), closes #​26440

Bug Fixes

• autoscaling: StepScalingPolicy intervals not checked for going over allowable maximum (#​26490) (58b004e), closes /github.com/aws/aws-cdk/blob/bc029fe5ac69a8b7fd2dfdbcd8834e9a2cf8e000/packages/aws-cdk-lib/aws-autoscaling/lib/step-scaling-policy.ts#L136-L166 /github.com/aws/aws-cdk/blob/bc029fe5ac69a8b7fd2dfdbcd8834e9a2cf8e000/packages/aws-cdk-lib/aws-autoscaling/lib/step-scaling-policy.ts#L105-L134 #​26215
• cdk: allow bootstrap with policy names with a path (#​26378) (1820fc9), closes #​26320
• core: policy validation trace incorrect for larger constructs (#​26466) (fd181c7)
• ecs: deployment alarm configurations are being added in isolated partitions (#​26458) (eea223b), closes #​26456
• ecs-patterns: minHealthyPercent and maxHealthyPercent props validation (#​26193) (bdfdc91), closes #​26158
• lambda: bundling fails with pnpm >= 8.4.0 (#​26478) (#​26479) (1df243a)
• rds: Add missing Aurora engine 8.0.mysql_aurora.3.02.3 (#​26462) (ac9bb1a)
• secretsmanager: arnForPolicies evaluates to the partial ARN if accessed from a cross-env stack (#​26308) (0e808d8)
• sns-subscriptions: SQS queue encrypted by AWS managed KMS key is allowed to be specified as subscription and dead-letter queue (#​26110) (0531492), closes #​19796
• stepfunctions-tasks: Default Retry policy for LambdaInvoke does not include Lambda.ClientExecutionTimeoutException default Retry settings (#​26474) (f22bd4e), closes #​26470
• stepfunctions-tasks: specify tags in BatchSubmitJob properties (#​26349) (f24ece1), closes #​26336

---

Alpha modules (2.89.0-alpha.0)

Features

• app-staging-synthesizer: option to specify staging stack name prefix (#​26324) (1b36124)
• apprunner: make Service implement IGrantable (#​26130) (6033c9a), closes #​26089
• neptune-alpha: support for Neptune serverless (#​26445) (b42dbc8), closes #​26428
• scheduler: ScheduleGroup (#​26196) (27dc8ff)

Bug Fixes

• cli-lib: set skipLibCheck on generateSchema to prevent intermittent test failures (#​26551) (1807f57)

v2.88.0

Compare Source

Features

• app-mesh: support port property on weighted targets (#​26114) (54f91c8), closes #​26083
• autoscaling: deprecate launch configurations (under feature flag) (#​25910) (ff21c69), closes #​23165
• aws-cdk-lib: use new L1 codegen (#​26318) (f15ed23)
• cfnspec: cloudformation spec v130.0.0 (#​26278) (d316af7)
• cfnspec: cloudformation spec v130.1.0 (#​26362) (52e20c9)
• cloudfront: add denyList to OriginRequestPolicy behaviors (#​25767) (7926560), closes /github.com/awsdocs/aws-cloudformation-user-guide/commit/a38f2735de1b0b34a4feac1c7bde47524e0966b5#diff-630d84276f15d7dbe9836107b0c289d8692c9279ae10adacf34344273f28fcecR33 /github.com/awsdocs/aws-cloudformation-user-guide/commit/a38f2735de1b0b34a4feac1c7bde47524e0966b5#diff-83c67e21c489d688c4da6943452187182e96e8974f447bd3479044da752fe43bR34 /github.com/awsdocs/aws-cloudformation-user-guide/commit/a38f2735de1b0b34a4feac1c7bde47524e0966b5#diff-96b632ead034b3554fb62969ffa46e799f53a1edfb3cfed5deba5df4d769aab1R34
• cloudwatch: allow configuring period on SingleValueWidget (#​26260) (c8edc87), closes #​26259
• cloudwatch: dashboard variables (#​26285) (73f2741), closes #​26200
• codebuild: support for Docker Registry Image for Linux Arm (#​26121) (f522796), closes #​24367 #​24342
• core: allow user to specify --platform (#​26368) (2f8df43), closes #​25759
• custom-resources: add custom environmentEncryption for Provider lambda functions (#​26236) (546456a), closes #​26197
• ec2: make VPC internet gateway creation controllable (#​26314) (cc4ce12), closes #​26270
• ec2: support using ssm parameter to resolve AMI ID at instance launch time (#​26273) (2462b0b)
• eks: support eks with k8s 1.27 (#​25897) (fdd3309)
• lambda-event-sources: added filters support to kafka sources (#​26366) (c575dde), closes #​26348
• opensearch: opensearch 2.7 engine version (#​26313) (fb580b5)
• opensearchservice: support for MultiAZWithStandBy (under feature flag) (#​26082) (6c75581), closes #​26026
• rds: support Aurora MySQL engine v. 2.11.3 (#​26419) (c646644), closes #​26407
• rds: support aurora postgresql 14.8 (#​26427) (e8fc7a8)
• rds: support aurora postgresql 15.3 (#​26377) (669dd7f), closes #​26363
• rds: support configuring secret rotation behavior via rotateImmediatelyOnUpdate prop (#​26329) (979cbff), closes #​26099

Bug Fixes

• apigateway: method response from rest api default options are not passed to Method (#​26275) (9bcc6d5), closes #​26252
• aws_ecs: Do not output NetworkConfiguraiton to ECS Service when using EXTERNAL deployment controller (#​26338) (170edda), closes #​26335
• cli: credential plugin exceptions stop the entire CLI (#​26244) (1a8f5ad)
• cli: hotswap doesn't update SSM parameter environment variables properly (#​26382) (32654f5), closes #​25387 #​25483
• core: cross region exports fail when parameter doesn't exist (#​26434) (d130bd7)
• custom-resource: ignoreErrorCodesMatching broken on sdk v3 (#​26430) (e21dd4e)
• ecs: DeploymentAlarms property is specified for ECS service with CODE_DEPLOY and EXTERNAL deployment controller (#​26317) (b799c82), closes #​25840 #​26307
• ecs: Windows ECS Optimized AMI SSM parameter format is incorrect (#​26326) (43013d0), closes #​26327
• lambda: add instrument handler option to adotInstrumentation to support python lambda functions (#​26040) (bd06669), closes #​24666
• lambda: bundling fails with pnpm >= 8.4.0 (#​25612) (#​26386) (928cbc8), closes #​25617
• lambda: Update Python Lambda Adot Lambda layer versions (#​26411) (47f15a6), closes #​26168
• s3: auto-delete-objects fails when bucket doesn't exist (#​26433) (228901a), closes #​16756
• bad error checks in custom resources (#​26392) (267e42c)
• pkglint: library creation generates incorrect package names (#​26330) (05d875b), closes #​26331
• s3: allow empty string as keyPrefixEquals (#​26243) (9381880), closes #​26242
• servicecatalog: product stack asset bucket with forced encryption (#​26303) (cb5bef5), closes #​26302
• servicecatalog: support nested stacks in product stacks (#​26311) (cad0635), closes #​24317

---

Alpha modules (2.88.0-alpha.0)

⚠ BREAKING CHANGES TO EXPERIMENTAL FEATURES

• apprunner-alpha: This change will be destructive if the serviceName is set on an existing resources.

Features

• glue: support Data Quality ruleset (#​26272) (af3a188)
• glue: validate maxCapacity, workerCount, and workerType (#​26241) (349e4d4)
• iot-actions: iot rule https action l2 construct (#​25535) (3aee826), closes #​25491
• synthetics: lifecycle rules for auto-generated artifact buckets (#​26290) (ad0d40c), closes #​22863 #​22634

Bug Fixes

• apprunner-alpha: respect serviceName property (#​26238) (6da9a4c), closes #​26237
• batch: grant execution role logs:CreateLogStream by default (#​26288) (c755f50), closes #​25675
• batch: SSM parameters can't be used as ECS Container secrets (#​26373) (bc3d6a7), closes #​26339
• integ-tests-alpha: assertions handler is broken (#​26400) (111a1cf), closes #​26271 #​26359 #​26360
• integ-tests-alpha: incorrect sdk client resolution (#​26271) (17e343a)
• redshift-alpha: incorrect CR runtime version (#​26406) (c8d8421), closes #​26397
• synthetics: asset code validation failed on bundled assets (#​26291) (02a5482), closes #​19342 #​11630

---

Configuration

📅 Schedule: Branch creation - "on the 7 day of the month" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Mend Renovate. View repository job log here.