chore(deps): update dependency aws-cdk-lib to v2.160.0

[renovate]

This PR contains the following updates:

Package	Change	Age	Adoption	Passing	Confidence
aws-cdk-lib (source)	2.155.0 -> 2.160.0

---

Release Notes

aws/aws-cdk (aws-cdk-lib)

v2.160.0

Compare Source

Features

• allow all sts options for roles assumed by the cli (#​31089) (5e95ba2), closes #​26157 #​22535
• update L1 CloudFormation resource definitions (#​31534) (cd17fed)
• core: configure Stack SNS notification ARNs on the Stack construct (#​31107) (1593500), closes #​8581
• stepfunctions: add support for EncryptionConfiguration (#​30959) (b49032b)

---

Alpha modules (2.160.0-alpha.0)

Features

• kinesisanalytics-flink: support Apache Flink 1.20 (#​31349) (b3b9aa8)

Bug Fixes

• cognito-identitypool-alpha: cannot configure roleMappings with imported userPool and client (#​30421) (0fdd6a9), closes #​30304 /github.com/aws/aws-cdk/blob/c3003ab41f0efc763f39eb2cab490c8a005e146b/packages/aws-cdk-lib/aws-cognito/lib/user-pool.ts#L902
• ec2: instance resourceSignalTimeout overwrites initOptions.timeout (#​31446) (a29bf19), closes #​30052

v2.159.1

Compare Source

Reverts

• fix(ec2): fixing vpc endpoint pattern for ecr and ecr docker (#​31496) (f7e8452)

---

Alpha modules (2.159.1-alpha.0)

v2.159.0

Compare Source

Features

• update L1 CloudFormation resource definitions (#​31484) (60ce351), closes /docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-ec2-launchtemplate-launchtemplatedata.html#cfn-ec2 /docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-ec2-launchtemplate-launchtemplatedata.html#cfn-ec2 /docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-ec2-launchtemplate-launchtemplatedata.html#cfn-ec2 /docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-ec2-launchtemplate-launchtemplatedata.html#cfn-ec2
• opensearch: support OpenSearch version 2.15 (#​31398) (33eea3f)
• update L1 CloudFormation resource definitions (#​31460) (e220e90)
• apigatewayv2: support for setting routeSelectionExpression for an HTTP API (#​31373) (36baf51), closes #​31104
• elasticloadbalancingv2: alb dualstack without public ipv4 (#​30248) (4068af3), closes #​30256
• events-target: support Dead Letter Queue for Kinesis Stream Event Target (#​31435) (358f231), closes #​31428 #​13600
• stepfunctions-tasks: support idle timeout for EmrCreateCluster (#​31142) (432ffaf), closes #​29926
• vpcv2: implementation of add gateway method (#​31224) (4b90bfc)

Bug Fixes

• cli: bootstrap respects qualifier from cdk.json (#​31410) (44134ad), closes #​28249
• cli: hotswapping appsync functions fails when API does not return function on the first page (#​31406) (0da4f43), closes /github.com/aws/aws-cdk/blob/1e203753519e10e19ef0db87e1382377b609bcaa/packages/aws-cdk/lib/api/evaluate-cloudformation-template.ts#L23-L36
• cli: release outdir lock when synth fails (#​30874) (b6ad97f), closes #​27864
• cognito: deprecate privateKey and add privateKeyValue as typed SecureValue (#​31409) (7ee183d), closes /github.com/aws/aws-cdk/blob/1e203753519e10e19ef0db87e1382377b609bcaa/packages/aws-cdk-lib/aws-cognito/lib/user-pool-idps/google.ts#L28
• ecs: reduce ecs service task role cloudwatch permissions when no log configured (under feature flag) (#​31475) (de7ab7c)
• eks: fargateCluster compatibility with AuthenticationMode.API (#​31267) (4d12833)
• eks: update private ecr repo url regex (#​31394) (386fca3)
• lambda: invalid Version object created from Version.fromVersionArn (#​31433) (1726abd)
• ssm: update ssm-context to prevent raising an error on missing parameter (#​31415) (ff02cca), closes #​7051 #​22064 #​7259
• pipelines ties cli version with cdk-assets version (#​31261) (4392ab4), closes #​31253

---

Alpha modules (2.159.0-alpha.0)

⚠ BREAKING CHANGES TO EXPERIMENTAL FEATURES

• kinesisfirehose-alpha: encryptionKey property is removed and encryption property type has changed from the StreamEncryption enum to the StreamEncryption class.

To pass in a KMS key for the customer managed key case, use StreamEncryption.customerManagedKey(key)

Details

Replaced encryption and encryptionKey properties with a single property encryption of type StreamEncryption and is used by calling one of the 3 methods:

SreamEncryption.unencrypted()
StreamEncryption.awsOwnedKey()
StreamEncryption.customerManagedKey(key?: IKey)

This makes it so it's not longer possible to pass in a key when the encryption type is AWS owned or unencrypted. The key is an optional parameter in StreamEncryption.customerManagedKey(key?: IKey) so following the previous behaviour, if a key is provided it will be used, otherwise a key will be created for the user.

Description of how you validated changes

Generated templates do not change so behaviour remains the same.

Updated integ/unit tests.

Checklist

• My code adheres to the CONTRIBUTING GUIDE and DESIGN GUIDELINES

Features

• ivs: support RTMP ingest for IVS channel (#​31380) (a907a7e)

Bug Fixes

• ec2: fixing vpc endpoint pattern for ecr and ecr docker (#​31434) (95c49ab)

Miscellaneous Chores

• kinesisfirehose-alpha: refactor encryption property to combine encryptionKey (#​31430) (8e92185)

v2.158.0

Compare Source

Bug Fixes

• cloudformation-include: can't use CFN intrinsics in Tags (#​30515) (af9e6ba), closes #​27594

---

Alpha modules (2.158.0-alpha.0)

Features

• amplify: support cache configuration for app (#​31381) (b7bd041)
• iot: configure IoT Logging (#​31352) (6348717), closes #​31357

v2.157.0

Compare Source

Features

• update L1 CloudFormation resource definitions (#​31361) (bc4dbfd)
• appsync: support DEBUG and INFO logging levels for AppSync GraphQL APIs (#​31326) (4b9643f)
• lambda: added new property allowAllIpv6Outbound to FunctionOptions (#​31013) (fa55194), closes #​30994

Bug Fixes

• rds: proxy target group does not depend on database instances when using writer property for database cluster (#​31354) (6542207), closes #​31304 /github.com/aws/aws-cdk/blob/main/packages/aws-cdk-lib/aws-rds/lib/proxy.ts#L535-L539

---

Alpha modules (2.157.0-alpha.0)

v2.156.0

Compare Source

Features

• bedrock: add Stable Image Ultra, Stable Diffusion 3 Large, and Stable Image Core model identifiers (#​31327) (586cb04)
• cloudfront: s3 origin access control L2 construct (#​31254) (30675f0), closes #​21771
• codebuild: support three arm-based compute types, Medium, X-Large and 2X-Large (#​31214) (39492e9), closes #​30869
• docdb: i/o optimized storage type (#​30163) (7ed221c), closes #​30165
• ecs-patterns: dualstack ALB (#​30089) (98ea3db), closes #​29039
• eks: support alb controller versions 2.7.0-2.8.2 (#​31264) (a3863a6)
• events-targets: support for RedshiftDataParameters (#​29462) (84c6442), closes #​15712 #​31017
• synthetics: syn-nodejs-puppeteer-9.0 as supported runtime (#​31272) (c1d7782), closes #​31271

Bug Fixes

• custom-resources: remove presigned url from cloudwatch logs (#​31322) (b5e4496)
• eks: albController incompatibility with AuthenticationMode.API mode (#​31258) (427cd61)
• prlint: a review label doesn't appear when a PR is approved if there are too many comments (#​31290) (1c63070), closes #​31294 /github.com/aws/aws-cdk/pull/30920#issuecomment-2324932936 aws-cdk/prlint/lint.ts#L377 40aws-cdk/prlint/lint.ts#L376
• stepfunctions-tasks: add back BedrockInvokeModel to use JsonPath (#​31325) (5b059b9), closes aws/aws-cdk#31308
• stepfunctions-tasks: fix bedrock input/output path in step-funct… (#​31305) (a190935), closes #​31302 PR#30298 #​29229
• stepfunctions-tasks: sageMakerCreateTrainingJob does not correctly support empty inputDataConfig (#​31210) (6d43146), closes #​31132

---

Alpha modules (2.156.0-alpha.0)

Features

• location: support RouteCalculator (#​30682) (574d383), closes #​30681
• neptune-alpha: specify port for the cluster (#​31137) (130b62b), closes #​31074
• scheduler: validate schedule name length (#​31200) (d0f9688)

Bug Fixes

• scheduler: the value of the description property is not reflected to the resource. (#​31276) (a3332b6), closes #​31269

---

Configuration

📅 Schedule: Branch creation - "before 6am,every weekend" in timezone Europe/Oslo, Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[renovate]

Branch automerge failure

This PR was configured for branch automerge. However, this is not possible, so it has been raised as a PR instead.

---

• Branch has one or more failed status checks