All pull requests

Pull requests

• fix(s3): notifications cleanup fails when bucket is already deleted

  #248·alvazjor opened Nov 5, 2026Owner·1 task done·

  ·

• fix(stepfunctions): default role trust policy breaks tasks with cross-account credentials

  pr/needs-further-review
  #247·alvazjor opened Nov 5, 2026Owner·1 task done·

  ·

• fix(bedrockagentcore): execution role of OnlineEvaluationConfig cannot invoke code-based evaluator functions

  pr/needs-further-review
  #246·alvazjor opened Nov 5, 2026Owner·

  ·

• feat(cloudfront): default Distribution viewer security policy to TLSv…

  pr/needs-further-review
  #245·alvazjor opened Nov 5, 2026Owner·1 task done·

  ·

• fix(servicecatalog): product stack assets are not published before the asset bucket stack is deployed

  #244·alvazjor opened Nov 5, 2026Owner·1 task done·

  ·

• fix(pipelines): additionalInputs fail on Windows build images

  #243·alvazjor opened Nov 5, 2026Owner·1 task done·

  ·

• fix(lambda-nodejs): prevent pnpm store and workspace state timestamps from changing asset hash (#​39550)

  #242·alvazjor opened Nov 5, 2026Owner·1 task done·

  ·

• fix(eks): use AL2023 nodegroup in eks-cluster-handlers-vpc integ test

  #241·alvazjor opened Nov 5, 2026Owner·1 task done·

  ·

• fix(core): skip default validation when context is unresolved

  #240·alvazjor opened Nov 5, 2026Owner·1 task done·

  ·

• feat(cognito): support SecretValue for OIDC identity provider client secret

  pr/needs-further-review
  #239·alvazjor opened Nov 5, 2026Owner·1 task done·

  ·

• fix(iam): PolicyDocument.fromJson() drops the policy Id element

  #238·alvazjor opened Nov 5, 2026Owner·1 task done·

  ·

• feat(codebuild): add Project.addEnvironmentVariable

  #237·alvazjor opened Nov 5, 2026Owner·

  ·

• fix(ec2): NatProvider.instanceV2 UserData fails due to dnf race condition (under feature flag)

  #236·alvazjor opened Nov 5, 2026Owner·1 task done·

  ·

• fix(cloudwatch): alarm on math expression with INSIGHT_RULE_METRIC and submetrics omits period

  #235·alvazjor opened Nov 5, 2026Owner·1 task done·

  ·

• fix(iam): imported users and groups get a default policy name that is not stack-safe

  pr/needs-further-review
  #234·alvazjor opened Nov 5, 2026Owner·1 task done·

  ·

• feat(stepfunctions-tasks): add DynamoTransactWriteItems task

  pr/needs-further-review
  #233·alvazjor opened Nov 5, 2026Owner·

  ·

• fix(stepfunctions): customer managed key access denied for unnamed state machines

  pr/needs-further-review
  #232·alvazjor opened Nov 5, 2026Owner·1 task done·

  ·

• feat(acm): add L2 constructs for ACME endpoints

  pr/needs-further-review
  #231·alvazjor opened Nov 5, 2026Owner·1 task done·

  ·

• fix(stepfunctions-tasks): CallAwsService generates invalid IAM actions for services whose IAM prefix differs

  pr/needs-further-review
  #230·alvazjor opened Nov 5, 2026Owner·1 task done·

  ·

• fix(lambda): late logs recreate a deleted log group (under feature flag)

  pr/needs-further-review
  #229·alvazjor opened Nov 5, 2026Owner·1 task done·

  ·

• fix(codepipeline-actions): source action role is missing codeconnections:UseConnection permission

  pr/needs-further-review
  #228·alvazjor opened Nov 5, 2026Owner·1 task done·

  ·

• feat(elasticache-alpha): support public endpoints for serverless cache

  pr/needs-further-review
  #227·alvazjor opened Nov 5, 2026Owner·1 task done·

  ·

• feat(custom-resources): redact sensitive properties from custom resource handler logs

  pr/needs-further-review
  #226·alvazjor opened Nov 5, 2026Owner·1 task done·

  ·

• fix(logs): include the log group ARN in grant, grantRead and grantWrite

  pr/needs-further-review
  #225·alvazjor opened Nov 5, 2026Owner·1 task·

  ·

• fix(opensearchservice): use dual-stack endpoint for custom endpoints

  #224·alvazjor opened Nov 5, 2026Owner·1 task done·

  ·