⚠ BREAKING CHANGES TO EXPERIMENTAL FEATURES

• assertions: hasOutput(props: any) becomes hasOutput(logicalId: string, props: any)
• assertions: findOutputs(props: any = {}) becomes findOutputs(logicalId: string, props: any = {})
• assertions: hasMapping(props: any) becomes hasMapping(logicalId: string, props: any)
• assertions: findMappings(props: any = {}) becomes findMappings(logicalId: string, props: any = {})

Features

• ec2: Allow ApplyCloudformationInitOptions to set additional params (#16121) (1d94646), closes #16004
• backup: option to prevent recovery point deletions (#16282) (6e71806)
• cli: hotswap deployments (#15748) (6e55c95)
• config: EC2_INSTANCE_PROFILE_ATTACHED managed rule (#16011) (816a319)
• ec2: rename SubnetTypes to improve clarity with EC2 conventions (#16348) (2023004), closes #15929
• ec2: vpc endpoint for aws keyspaces (#16306) (ad425d0)
• ecs-service-extensions: Subscribe Extension (#16049) (66baca5)
• elasticloadbalancingv2: ALPN policy support for NLB listener (#15956) (5427578)
• kms: support fromLookup in KMS key to get key by alias name (#15652) (34a57ed), closes #8822
• lambda: python 3.9 runtime (#16366) (a534829)
• pipelines: stack-level steps (#16215) (d499c85), closes #16148
• stepfunctions-tasks: await the eval so async ops can be passed to tasks.EvaluateExpression (#16290) (174b066)

Bug Fixes

• apigatewayv2: some methods of the defaultStage are not available without casting it to IHttpStage (#15607) (27a0113)
• assets: run executable command of container assets in cloud assembly root directory (#16094) (c2852c9), closes #15721
• assertions: output and mapping assertions do not accept logical id (#16329), closes #16242
• autoscaling: EbsDeviceVolumeType.IO2 is not a valid CloudFormation value (#16028) (492d33b), closes #16027
• cli: 'deploy' and 'diff' silently does nothing when given unknown stack name (#16150) (74776f3), closes #15866
• cloudwatch: cross account alarms does not support math expressions (#16333) (1ffd897), closes #16331
• core: allow asset bundling when selinux is enabled (#15742) (dbfebb4)
• iam: permissions boundary aspect doesn't always recognize roles (#16154) (c8bfcf6)
• stepfunctions-tasks: Athena StartQueryExecution includes QueryExecutionContext even when object is empty (#16141) (6e2a3e0), closes #16133 #16133