You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardexpand all lines: packages/@aws-cdk/cx-api/FEATURE_FLAGS.md
+40-4
Original file line number
Diff line number
Diff line change
@@ -68,7 +68,9 @@ Flags come in three types:
68
68
|[@aws-cdk/aws-codepipeline:defaultPipelineTypeToV2](#aws-cdkaws-codepipelinedefaultpipelinetypetov2)| Enables Pipeline to set the default pipeline type to V2. | 2.133.0 | (default) |
69
69
|[@aws-cdk/aws-kms:reduceCrossAccountRegionPolicyScope](#aws-cdkaws-kmsreducecrossaccountregionpolicyscope)| When enabled, IAM Policy created from KMS key grant will reduce the resource scope to this key only. | 2.134.0 | (fix) |
70
70
|[@aws-cdk/aws-eks:nodegroupNameAttribute](#aws-cdkaws-eksnodegroupnameattribute)| When enabled, nodegroupName attribute of the provisioned EKS NodeGroup will not have the cluster name prefix. | 2.139.0 | (fix) |
71
-
|[@aws-cdk/aws-ec2:ebsDefaultGp3Volume](#aws-cdkaws-ec2ebsdefaultgp3volume)| When enabled, the default volume type of the EBS volume will be GP3 | V2NEXT | (default) |
71
+
|[@aws-cdk/aws-ec2:ebsDefaultGp3Volume](#aws-cdkaws-ec2ebsdefaultgp3volume)| When enabled, the default volume type of the EBS volume will be GP3 | 2.140.0 | (default) |
72
+
|[@aws-cdk/pipelines:reduceAssetRoleTrustScope](#aws-cdkpipelinesreduceassetroletrustscope)| Remove the root account principal from PipelineAssetsFileRole trust policy | 2.141.0 | (default) |
|[@aws-cdk/aws-lambda:recognizeVersionProps](#aws-cdkaws-lambdarecognizeversionprops)| Enable this feature flag to opt in to the updated logical id calculation for Lambda Version created using the `fn.currentVersion`. | (fix) | 1.106.0 |`false`|`true`|
173
176
|[@aws-cdk/aws-cloudfront:defaultSecurityPolicyTLSv1.2\_2021](#aws-cdkaws-cloudfrontdefaultsecuritypolicytlsv12_2021)| Enable this feature flag to have cloudfront distributions use the security policy TLSv1.2_2021 by default. | (fix) | 1.117.0 |`false`|`true`|
177
+
|[@aws-cdk/pipelines:reduceAssetRoleTrustScope](#aws-cdkpipelinesreduceassetroletrustscope)| Remove the root account principal from PipelineAssetsFileRole trust policy | (default) ||`false`|`true`|
174
178
175
179
<!-- END diff -->
176
180
@@ -185,7 +189,8 @@ Here is an example of a `cdk.json` file that restores v1 behavior for these flag
@@ -1293,9 +1298,40 @@ When this featuer flag is enabled, the default volume type of the EBS volume wil
1293
1298
| Since | Default | Recommended |
1294
1299
| ----- | ----- | ----- |
1295
1300
| (not in v1) | | |
1296
-
| V2NEXT | `false` | `true` |
1301
+
| 2.140.0 | `false` | `true` |
1297
1302
1298
1303
**Compatibility with old behavior:** Pass `volumeType: EbsDeviceVolumeType.GENERAL_PURPOSE_SSD` to `Volume` construct to restore the previous behavior.
1299
1304
1300
1305
1306
+
### @aws-cdk/pipelines:reduceAssetRoleTrustScope
1307
+
1308
+
*Remove the root account principal from PipelineAssetsFileRole trust policy* (default)
1309
+
1310
+
When this feature flag is enabled, the root account principal will not be added to the trust policy of asset role.
1311
+
When this feature flag is disabled, it will keep the root account principal in the trust policy.
1312
+
1313
+
1314
+
| Since | Default | Recommended |
1315
+
| ----- | ----- | ----- |
1316
+
| (not in v1) | | |
1317
+
| 2.141.0 | `true` | `true` |
1318
+
1319
+
**Compatibility with old behavior:** Disable the feature flag to add the root account principal back
0 commit comments