Release v2.10.0 · aws/aws-cdk

assertions: support assertions on stack messages (#18521) (cb86e30), closes #18347
aws-ecs-patterns: adding support for custom HealthCheck while creating QueueProcessingFargateService (#18219) (0ca81a1), closes #15636
certificatemanager: DnsValidatedCertificate DNS record cleanup (#18311) (36d356d), closes #3333 #7063
cfnspec: cloudformation spec v53.1.0 (#18588) (a283a48)
cfnspec: cloudformation spec v53.1.0 (#18658) (2eda19e)
cfnspec: cloudformation spec v53.1.0 (#18680) (f385059)
cloudfront-origins: extend readTimeout maximum value for HttpOriginProps (#18697) (e64de67), closes #18628
ec2: session timeout and login banner for client vpn endpoint (#18590) (7294118)
ecs: add BaseService.fromServiceArnWithCluster() for use in CodePipeline (#18530) (3d192a9)
eks: cluster logging (#18112) (872277b), closes #4159
lambda-nodejs: Allow setting mainFields for esbuild (#18569) (0e78aeb)
s3: custom role for the bucket notifications handler (#17794) (43f232d), closes #9918 #13241

aws-apigateway: cross region authorizer ref (#18444) (0e0a092)
aws-lambda-nodejs: pre compilation with tsc is not being run (#18062) (7ac7221), closes #18002
cli: hotswap should wait for lambda's updateFunctionCode to complete (#18536) (0e08eeb), closes #18386 #18386
elasticloadbalancingv2: ApplicationLoadBalancer.logAccessLogs does not grant all necessary permissions (#18558) (bde1795), closes #18367
pipelines: undeployable due to dependency cycle (#18686) (009d689), closes #18492 #18673
region-info: incorrect codedeploy service principals (#18505) (16db963)
route53: add RoutingControlArn to HealthCheck patch (#18645) (c58e8bb), closes #18570
s3: add missing safe actions to grantWrite, grantReadWrite and grantPut methods (#18494) (940d043), closes #13616
secretsmanager: SecretRotation for secret imported by name has incorrect permissions (#18567) (9ed263c), closes #18424
stepfunctions: task token integration cannot be used with API Gateway (#18595) (678eede), closes #14184 #14181
stepfunctions-tasks: cluster creation fails with unresolved release labels (#18288) (9940952)

Alpha modules (2.10.0-alpha.0)

servicecatalog: TagOptions now have scope and props argument in constructor, and data is now passed via a allowedValueForTags field in props

iotevents: add DetectorModel L2 Construct (#18049) (d0960f1), closes #17711 #17711
iotevents: allow setting description, evaluation method and key of DetectorModel (#18644) (2eeaebc)
lambda-python: support setting environment vars for bundling (#18635) (30e2233)
servicecatalog: Create TagOptions Construct (#18314) (903c4b6), closes #17753

apigatewayv2: websocket api: allow all methods in grant manage connections (#18544) (41c8a3f), closes #18410
synthetics: correct getbucketlocation policy (#13573) (e743525), closes #13572