chore(release): 2.249.0

.github/workflows/ensure-triage-label.yml

@@ -0,0 +1,24 @@
+# Issues created outside GitHub issue templates (e.g., via API or CLI) receive
+# no labels, which causes them to be skipped by the triage pipeline in
+# issue-label-assign.yml. This workflow ensures they get 'needs-triage'.
+name: "Ensure triage label"
+on:
+  issues:
+    types: [opened]
+
+jobs:
+  ensure-triage-label:
+    if: join(github.event.issue.labels.*.name, '') == ''
+    runs-on: ubuntu-latest
+    permissions:
+      issues: write
+    steps:
+      - uses: actions/github-script@v8
+        with:
+          script: |
+            await github.rest.issues.addLabels({
+              owner: context.repo.owner,
+              repo: context.repo.repo,
+              issue_number: context.issue.number,
+              labels: ['needs-triage']
+            });

.github/workflows/pr-linter.yml

@@ -36,7 +36,7 @@ jobs:
     steps:
       - name: "Download workflow_run artifact"
         if: github.event_name == 'workflow_run'
-        uses: dawidd6/action-download-artifact@v19
+        uses: dawidd6/action-download-artifact@v20
         continue-on-error: true
         with:
           run_id: ${{ github.event.workflow_run.id }}

.github/workflows/spec-update.yml

@@ -58,8 +58,13 @@ jobs:
       # Build @aws-cdk/spec2cdk and run L1 gen script to generate base files for new modules
       - name: Build @aws-cdk/spec2cdk
         run: lerna run build --stream --no-progress --skip-nx-cache --scope @aws-cdk/spec2cdk
-      - name: Generate code
-        run: lerna run gen --stream --no-progress --skip-nx-cache --scope aws-cdk-lib --scope @aws-cdk/mixins-preview
+      # Generate L1 code for aws-cdk-lib first — this updates scope-map.json with new services.
+      # mixins-preview and cfn-property-mixins read scope-map.json during their gen, so they
+      # must run after aws-cdk-lib to see the new service entries.
+      - name: Generate L1 code
+        run: lerna run gen --stream --no-progress --skip-nx-cache --scope aws-cdk-lib
+      - name: Generate mixins
+        run: lerna run gen --stream --no-progress --skip-nx-cache --scope @aws-cdk/mixins-preview --scope @aws-cdk/cfn-property-mixins
 
       # Next, create and upload the changes as a patch file. This will later be downloaded to create a pull request
       # Creating a pull request requires write permissions and it's best to keep write privileges isolated.

CHANGELOG.v2.alpha.md

@@ -2,6 +2,8 @@
 
 All notable changes to this project will be documented in this file. See [standard-version](https://github.com/conventional-changelog/standard-version) for commit guidelines.
 
+## [2.249.0-alpha.0](https://github.com/aws/aws-cdk/compare/v2.248.0-alpha.0...v2.249.0-alpha.0) (2026-04-10)
+
 ## [2.248.0-alpha.0](https://github.com/aws/aws-cdk/compare/v2.247.0-alpha.0...v2.248.0-alpha.0) (2026-04-02)
 
 ## [2.247.0-alpha.0](https://github.com/aws/aws-cdk/compare/v2.246.0-alpha.0...v2.247.0-alpha.0) (2026-04-02)

CHANGELOG.v2.md

@@ -2,6 +2,38 @@
 
 All notable changes to this project will be documented in this file. See [standard-version](https://github.com/conventional-changelog/standard-version) for commit guidelines.
 
+## [2.249.0](https://github.com/aws/aws-cdk/compare/v2.248.0...v2.249.0) (2026-04-10)
+
+
+### ⚠ BREAKING CHANGES
+
+* L1 resources are automatically generated from
+public CloudFormation Resource Schemas. They are built to closely
+reflect the real state of CloudFormation. Sometimes these updates can
+contain changes that are incompatible with previous types, but more
+accurately reflect reality. In this release we have changed:
+
+aws-appstream: AWS::AppStream::Stack: Id attribute removed.
+aws-appsync: AWS::AppSync::GraphQLApi: LogConfig.CloudWatchLogsRoleArn
+property is now required.
+aws-appsync: AWS::AppSync::GraphQLApi: LogConfig.FieldLogLevel property
+is now required.
+aws-kafkaconnect: AWS::KafkaConnect::Connector:
+ProvisionedCapacity.McuCount property is now required.
+
+### Features
+
+* **batch:** add AL2023 image types and default to AL2023 (under feature flag) ([#37539](https://github.com/aws/aws-cdk/issues/37539)) ([6c1251c](https://github.com/aws/aws-cdk/commit/6c1251c5b18b99a31b6973d3877907f93b5130f0)), closes [#35839](https://github.com/aws/aws-cdk/issues/35839) [#37205](https://github.com/aws/aws-cdk/issues/37205)
+* update L1 CloudFormation resource definitions ([f28bb0e](https://github.com/aws/aws-cdk/commit/f28bb0ea65e6cd777299e14c364d33f8cd4a7af9))
+* update L1 CloudFormation resource definitions ([#37530](https://github.com/aws/aws-cdk/issues/37530)) ([117562c](https://github.com/aws/aws-cdk/commit/117562c3545720a5ed5127ecadae02787241b483))
+* **core:** add source tracing for L1 construct property mutations ([#37543](https://github.com/aws/aws-cdk/issues/37543)) ([8f38378](https://github.com/aws/aws-cdk/commit/8f3837807ef5d06d249c59cf9a567a71a4d4cc8d))
+
+
+### Bug Fixes
+
+* ensure issues created outside templates receive needs-triage label ([#37505](https://github.com/aws/aws-cdk/issues/37505)) ([58cb92a](https://github.com/aws/aws-cdk/commit/58cb92a30fb3c3984f9360a39cce3dbdf46999e9)), closes [#37454](https://github.com/aws/aws-cdk/issues/37454) [Abogical/aws-cdk#24](https://github.com/Abogical/aws-cdk/issues/24)
+* include cfn-property-mixins in spec-update workflow gen step ([e847c52](https://github.com/aws/aws-cdk/commit/e847c52d750089aa0213f620fc55de70fc06b3cd)), closes [#36300](https://github.com/aws/aws-cdk/issues/36300)
+
 ## [2.248.0](https://github.com/aws/aws-cdk/compare/v2.247.0...v2.248.0) (2026-04-02)
 
 

packages/@aws-cdk-testing/framework-integ/package.json

@@ -9,7 +9,7 @@
     "lint": "cdk-lint",
     "pkglint": "pkglint -f",
     "test": "cdk-test",
-    "integ": "integ-runner --unstable=toolkit-lib-engine --language javascript",
+    "integ": "env JSII_DEPRECATED=fail integ-runner --unstable=toolkit-lib-engine --language javascript",
     "package": "cdk-package",
     "build+test": "yarn build && yarn test",
     "build+extract": "yarn build",

packages/@aws-cdk-testing/framework-integ/test/aws-apigateway/test/integ.stepfunctions-api-without-default-method-responses.ts

@@ -13,7 +13,7 @@ class SfnRestApiWithoutDefaultMethodResponsesStack extends cdk.Stack {
     });
 
     const stateMachine = new sfn.StateMachine(this, 'StateMachine', {
-      definition: passTask,
+      definitionBody: sfn.DefinitionBody.fromChainable(passTask),
       stateMachineType: sfn.StateMachineType.EXPRESS,
     });
 

packages/@aws-cdk-testing/framework-integ/test/aws-apigateway/test/integ.stepfunctions-api.ts

@@ -20,7 +20,7 @@ class StepFunctionsRestApiDeploymentStack extends cdk.Stack {
     });
 
     const stateMachine = new sfn.StateMachine(this, 'StateMachine', {
-      definition: passTask,
+      definitionBody: sfn.DefinitionBody.fromChainable(passTask),
       stateMachineType: sfn.StateMachineType.EXPRESS,
     });
 

packages/@aws-cdk-testing/framework-integ/test/aws-apigatewayv2-integrations/test/http/integ.stepfunctions.ts

@@ -8,10 +8,10 @@ const app = new App();
 const stack = new Stack(app, 'stepfunctions-integration');
 
 const stateMachine = new sfn.StateMachine(stack, 'RouteStateMachine', {
-  definition: new sfn.Pass(stack, 'Pass1'),
+  definitionBody: sfn.DefinitionBody.fromChainable(new sfn.Pass(stack, 'Pass1')),
 });
 const expressStateMachine = new sfn.StateMachine(stack, 'ExpressStateMachine', {
-  definition: new sfn.Pass(stack, 'Pass2'),
+  definitionBody: sfn.DefinitionBody.fromChainable(new sfn.Pass(stack, 'Pass2')),
   stateMachineType: sfn.StateMachineType.EXPRESS,
 });
 

packages/@aws-cdk-testing/framework-integ/test/aws-appsync/test/integ.api-import.ts

@@ -24,7 +24,9 @@ const baseStack = new cdk.Stack(app, 'baseStack');
 
 const baseApi = new appsync.GraphqlApi(baseStack, 'baseApi', {
   name: 'baseApi',
-  schema: appsync.SchemaFile.fromAsset(path.join(__dirname, 'appsync.test.graphql')),
+  definition: {
+    schema: appsync.SchemaFile.fromAsset(path.join(__dirname, 'appsync.test.graphql')),
+  },
 });
 
 const stack = new cdk.Stack(app, 'stack');

packages/@aws-cdk-testing/framework-integ/test/aws-appsync/test/integ.appsync-disable-introspection.ts

@@ -8,7 +8,9 @@ const stack = new cdk.Stack(app, 'stack');
 
 const api = new appsync.GraphqlApi(stack, 'DisableIntrospection', {
   name: 'DisableIntrospection',
-  schema: appsync.SchemaFile.fromAsset(path.join(__dirname, 'appsync.test.graphql')),
+  definition: {
+    schema: appsync.SchemaFile.fromAsset(path.join(__dirname, 'appsync.test.graphql')),
+  },
   introspectionConfig: appsync.IntrospectionConfig.DISABLED,
 });
 

packages/@aws-cdk-testing/framework-integ/test/aws-appsync/test/integ.appsync-eventbridge.ts

@@ -9,7 +9,9 @@ const stack = new cdk.Stack(app, 'stack');
 
 const api = new appsync.GraphqlApi(stack, 'EventBridgeApi', {
   name: 'EventBridgeApi',
-  schema: appsync.SchemaFile.fromAsset(path.join(__dirname, 'appsync.eventbridge.graphql')),
+  definition: {
+    schema: appsync.SchemaFile.fromAsset(path.join(__dirname, 'appsync.eventbridge.graphql')),
+  },
 });
 
 const bus = new events.EventBus(stack, 'DestinationEventBus', {});

packages/@aws-cdk-testing/framework-integ/test/aws-appsync/test/integ.appsync-function-max-batch-size.ts

@@ -14,7 +14,9 @@ const stack = new cdk.Stack(app, 'aws-cdk-appsync-function-max-batch-size');
 
 const api = new appsync.GraphqlApi(stack, 'LambdaAPI', {
   name: 'LambdaAPI',
-  schema: appsync.SchemaFile.fromAsset(path.join(__dirname, 'appsync.lambda.graphql')),
+  definition: {
+    schema: appsync.SchemaFile.fromAsset(path.join(__dirname, 'appsync.lambda.graphql')),
+  },
 });
 
 const func = new lambda.Function(stack, 'func', {

packages/@aws-cdk-testing/framework-integ/test/aws-appsync/test/integ.appsync-global-api.ts

@@ -8,7 +8,9 @@ const stack = new cdk.Stack(app, 'stack');
 
 const api = new appsync.GraphqlApi(stack, 'GlobalApi', {
   name: 'GlobalApi',
-  schema: appsync.SchemaFile.fromAsset(path.join(__dirname, 'appsync.test.graphql')),
+  definition: {
+    schema: appsync.SchemaFile.fromAsset(path.join(__dirname, 'appsync.test.graphql')),
+  },
   visibility: appsync.Visibility.GLOBAL,
 });
 

packages/@aws-cdk-testing/framework-integ/test/aws-appsync/test/integ.appsync-lambda.ts

@@ -24,7 +24,9 @@ const stack = new cdk.Stack(app, 'stack');
 
 const api = new appsync.GraphqlApi(stack, 'LambdaAPI', {
   name: 'LambdaAPI',
-  schema: appsync.SchemaFile.fromAsset(path.join(__dirname, 'appsync.lambda.graphql')),
+  definition: {
+    schema: appsync.SchemaFile.fromAsset(path.join(__dirname, 'appsync.lambda.graphql')),
+  },
 });
 
 const func = new lambda.Function(stack, 'func', {

packages/@aws-cdk-testing/framework-integ/test/aws-appsync/test/integ.appsync-limit-configs.ts

@@ -8,7 +8,9 @@ const stack = new cdk.Stack(app, 'stack');
 
 const api = new appsync.GraphqlApi(stack, 'ApiLimitConfigs', {
   name: 'ApiLimitConfigs',
-  schema: appsync.SchemaFile.fromAsset(path.join(__dirname, 'appsync.test.graphql')),
+  definition: {
+    schema: appsync.SchemaFile.fromAsset(path.join(__dirname, 'appsync.test.graphql')),
+  },
   queryDepthLimit: 2,
   resolverCountLimit: 2,
 });

packages/@aws-cdk-testing/framework-integ/test/aws-appsync/test/integ.appsync-logmetrics.ts

@@ -16,7 +16,9 @@ const logConfig: LogConfig = {
 const api = new GraphqlApi(stack, 'Api', {
   authorizationConfig: {},
   name: 'IntegLogRetention',
-  schema: SchemaFile.fromAsset(join(__dirname, 'appsync.test.graphql')),
+  definition: {
+    schema: SchemaFile.fromAsset(join(__dirname, 'appsync.test.graphql')),
+  },
   logConfig,
 });
 

packages/@aws-cdk-testing/framework-integ/test/aws-appsync/test/integ.appsync-none.ts

@@ -8,7 +8,9 @@ const stack = new cdk.Stack(app, 'stack');
 
 const api = new appsync.GraphqlApi(stack, 'NoneAPI', {
   name: 'NoneAPI',
-  schema: appsync.SchemaFile.fromAsset(path.join(__dirname, 'appsync.none.graphql')),
+  definition: {
+    schema: appsync.SchemaFile.fromAsset(path.join(__dirname, 'appsync.none.graphql')),
+  },
 });
 
 api.addNoneDataSource('NoneDS', {

packages/@aws-cdk-testing/framework-integ/test/aws-appsync/test/integ.appsync-private-api.ts

@@ -8,7 +8,9 @@ const stack = new cdk.Stack(app, 'stack');
 
 const api = new appsync.GraphqlApi(stack, 'PrivateApi', {
   name: 'PrivateApi',
-  schema: appsync.SchemaFile.fromAsset(path.join(__dirname, 'appsync.test.graphql')),
+  definition: {
+    schema: appsync.SchemaFile.fromAsset(path.join(__dirname, 'appsync.test.graphql')),
+  },
   visibility: appsync.Visibility.PRIVATE,
 });
 

packages/@aws-cdk-testing/framework-integ/test/aws-appsync/test/integ.auth-apikey.ts

@@ -23,7 +23,9 @@ const stack = new Stack(app, 'aws-appsync-integ');
 
 const api = new GraphqlApi(stack, 'Api', {
   name: 'Integ_Test_APIKey',
-  schema: SchemaFile.fromAsset(join(__dirname, 'appsync.auth.graphql')),
+  definition: {
+    schema: SchemaFile.fromAsset(join(__dirname, 'appsync.auth.graphql')),
+  },
   authorizationConfig: {
     defaultAuthorization: {
       authorizationType: AuthorizationType.API_KEY,

packages/@aws-cdk-testing/framework-integ/test/aws-appsync/test/integ.environment-variables.ts

@@ -8,7 +8,9 @@ const stack = new cdk.Stack(app, 'AppSyncEnvironmentVariables');
 
 const api = new appsync.GraphqlApi(stack, 'Api', {
   name: 'Api',
-  schema: appsync.SchemaFile.fromAsset(path.join(__dirname, 'appsync.js-resolver.graphql')),
+  definition: {
+    schema: appsync.SchemaFile.fromAsset(path.join(__dirname, 'appsync.js-resolver.graphql')),
+  },
   environmentVariables: {
     EnvKey1: 'non-empty-1',
   },