You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardexpand all lines: packages/@aws-cdk/cx-api/FEATURE_FLAGS.md
+62-4
Original file line number
Diff line number
Diff line change
@@ -68,7 +68,10 @@ Flags come in three types:
68
68
|[@aws-cdk/aws-codepipeline:defaultPipelineTypeToV2](#aws-cdkaws-codepipelinedefaultpipelinetypetov2)| Enables Pipeline to set the default pipeline type to V2. | 2.133.0 | (default) |
69
69
|[@aws-cdk/aws-kms:reduceCrossAccountRegionPolicyScope](#aws-cdkaws-kmsreducecrossaccountregionpolicyscope)| When enabled, IAM Policy created from KMS key grant will reduce the resource scope to this key only. | 2.134.0 | (fix) |
70
70
|[@aws-cdk/aws-eks:nodegroupNameAttribute](#aws-cdkaws-eksnodegroupnameattribute)| When enabled, nodegroupName attribute of the provisioned EKS NodeGroup will not have the cluster name prefix. | 2.139.0 | (fix) |
71
-
|[@aws-cdk/aws-ec2:ebsDefaultGp3Volume](#aws-cdkaws-ec2ebsdefaultgp3volume)| When enabled, the default volume type of the EBS volume will be GP3 | V2NEXT | (default) |
71
+
|[@aws-cdk/aws-ec2:ebsDefaultGp3Volume](#aws-cdkaws-ec2ebsdefaultgp3volume)| When enabled, the default volume type of the EBS volume will be GP3 | 2.140.0 | (default) |
72
+
|[@aws-cdk/pipelines:reduceAssetRoleTrustScope](#aws-cdkpipelinesreduceassetroletrustscope)| Remove the root account principal from PipelineAssetsFileRole trust policy | 2.141.0 | (default) |
|[@aws-cdk/custom-resources:logApiResponseDataPropertyTrueDefault](#aws-cdkcustom-resourceslogapiresponsedatapropertytruedefault)| When enabled, the custom resource used for `AwsCustomResource` will configure the `logApiResponseData` property as true by default | 2.145.0 | (fix) |
72
75
73
76
<!-- END table -->
74
77
@@ -128,7 +131,9 @@ The following json shows the current recommended set of flags, as `cdk init` wou
|[@aws-cdk/aws-lambda:recognizeVersionProps](#aws-cdkaws-lambdarecognizeversionprops)| Enable this feature flag to opt in to the updated logical id calculation for Lambda Version created using the `fn.currentVersion`. | (fix) | 1.106.0 |`false`|`true`|
173
178
|[@aws-cdk/aws-cloudfront:defaultSecurityPolicyTLSv1.2\_2021](#aws-cdkaws-cloudfrontdefaultsecuritypolicytlsv12_2021)| Enable this feature flag to have cloudfront distributions use the security policy TLSv1.2_2021 by default. | (fix) | 1.117.0 |`false`|`true`|
179
+
|[@aws-cdk/pipelines:reduceAssetRoleTrustScope](#aws-cdkpipelinesreduceassetroletrustscope)| Remove the root account principal from PipelineAssetsFileRole trust policy | (default) ||`false`|`true`|
174
180
175
181
<!-- END diff -->
176
182
@@ -185,7 +191,8 @@ Here is an example of a `cdk.json` file that restores v1 behavior for these flag
@@ -1293,9 +1300,60 @@ When this featuer flag is enabled, the default volume type of the EBS volume wil
1293
1300
| Since | Default | Recommended |
1294
1301
| ----- | ----- | ----- |
1295
1302
| (not in v1) | | |
1296
-
| V2NEXT | `false` | `true` |
1303
+
| 2.140.0 | `false` | `true` |
1297
1304
1298
1305
**Compatibility with old behavior:** Pass `volumeType: EbsDeviceVolumeType.GENERAL_PURPOSE_SSD` to `Volume` construct to restore the previous behavior.
1299
1306
1300
1307
1308
+
### @aws-cdk/pipelines:reduceAssetRoleTrustScope
1309
+
1310
+
*Remove the root account principal from PipelineAssetsFileRole trust policy* (default)
1311
+
1312
+
When this feature flag is enabled, the root account principal will not be added to the trust policy of asset role.
1313
+
When this feature flag is disabled, it will keep the root account principal in the trust policy.
1314
+
1315
+
1316
+
| Since | Default | Recommended |
1317
+
| ----- | ----- | ----- |
1318
+
| (not in v1) | | |
1319
+
| 2.141.0 | `true` | `true` |
1320
+
1321
+
**Compatibility with old behavior:** Disable the feature flag to add the root account principal back
*When enabled, the custom resource used for `AwsCustomResource` will configure the `logApiResponseData` property as true by default* (fix)
1342
+
1343
+
This results in 'logApiResponseData' being passed as true to the custom resource provider. This will cause the custom resource handler to receive an 'Update' event. If you don't
1344
+
have an SDK call configured for the 'Update' event and you're dependent on specific SDK call response data, you will see this error from CFN:
1345
+
1346
+
CustomResource attribute error: Vendor response doesn't contain <attribute-name> attribute in object. See https://github.com/aws/aws-cdk/issues/29949) for more details.
1347
+
1348
+
Unlike most feature flags, we don't recommend setting this feature flag to true. However, if you're using the 'AwsCustomResource' construct with 'logApiResponseData' as true in
1349
+
the event object, then setting this feature flag will keep this behavior. Otherwise, setting this feature flag to false will trigger an 'Update' event by removing the 'logApiResponseData'
0 commit comments