v1.33.0

⚠ BREAKING CHANGES

• kinesis: grantRead() API no longer provides permissions to kinesis:DescribeStream as it provides permissions to kinesis:DescribeStreamSummary and kinesis:SubscribeToShard in it's place. If it's still desired, it can be added through the grant() API on the stream.
• kinesis: grantWrite() API no longer has DescribeStream permissions as it has been replaced by ListShards for shard discovery

Features

• cfnspec: cloudformation spec v12.2.0 (#7248) (1475d5a)
• Support AppSync DataSource type: NONE (f35a4db)
• cfnspec: cloudformation spec v12.3.0 (#7359) (a80918f)
• ec2: expose blockDevices in CommonAutoScalingGroupProps (#7291) (5fe4480)
• ec2: filtering selected subnets by availability zone (2d3e612)
• eks: support a new option to create bottlerocket capacity. (e9f691f), closes #7268
• kinesis: grantRead now allows the ListShards action and grant is now public (#6141) (563fba4), closes #3357
• kinesis: add grant API to IStream to add permissions to a Stream (#7354) (c223406)
• kinesis: the aws-kinesis module is now stable (#7349) (4ab3ffa), closes #5874
• update "constructs" to 3.x (#7408) (8f8d20f), closes #6978

Bug Fixes

• appsync: Don't create serviceRole for datasource type NONE (6d1cb11), closes #7360
• cli: --app command does not work when executing a command without arguments (#7249) (994414c), closes #6930
• cli: parameter values with multiple = symbols get truncated (#7226) (b7ddf5b), closes #7246
• cloudwatch: Alarm annotation ignores datapointsToAlarm (#7202) (92fb853), closes #7152
• cloudwatch: Dashboard Spacer doesn't require empty props object (ca2f923)
• new IAM Condition type is unusable in Java (#7270) (ffb2e1e)
• core: unable to reference resources across multiple nested stacks (#7187) (000f0c2), closes #6473 #7059 #7059 #5888
• ec2: can reference VpcEndpointService id and service name (1007a22)
• efs: support tagging + filesystem naming (3dd8058)
• eks: missing permissions to add and remove tags when creating EKS cluster resource (#7302) (b14172d), closes #7163
• eks: unable to create KubernetesResources in another stack (#7322) (54129c8), closes #7231
• elbv2: imported LoadBalancer ignores pathPatterns prop (8ed2e0c), closes #7303
• route53-patterns: HttpsRedirect redirects to index.html (278fe29), closes /github.com/aws/aws-cdk/issues/5700#issuecomment-614112813 /github.com/aws/aws-cdk/issues/5700#issuecomment-614816819
• s3: allow accessLogsPrefix without accessLogsBucket (#6709) (4c199f6), closes #6599