Issues

• (bedrockagentcore): support namespace keys and indexed keys on Memory

  @aws-cdk/aws-cloudformationneeds-triage
  aws/aws-cdk#39708 · Filter by author moneytool opened on Nov 12, 2026

• (logs): support system field selection and dimensions on MetricFilter and SubscriptionFilter

  needs-triage
  aws/aws-cdk#39707 · Filter by author moneytool opened on Nov 12, 2026

• (logs): support query language and query parameters on QueryDefinition

  @aws-cdk/aws-logsneeds-triage
  aws/aws-cdk#39706 · Filter by author moneytool opened on Nov 12, 2026

• (ecs): support FIPS, IMDS tag propagation and Nitro Enclaves on ManagedInstancesCapacityProvider

  @aws-cdk/aws-ecsneeds-triage
  aws/aws-cdk#39705 · Filter by author moneytool opened on Nov 12, 2026

• (ecs): support Service Connect proxy log level on services

  @aws-cdk/aws-ecsneeds-triage
  aws/aws-cdk#39704 · Filter by author moneytool opened on Nov 12, 2026

• (batch): support EKS pod security context, Linux capabilities and seccomp profile on EKS job definitions

  needs-triage
  aws/aws-cdk#39702 · Filter by author moneytool opened on Nov 12, 2026

• (bedrockagentcore): ApiKeyCredentialLocation.header cannot omit the credential prefix

  needs-triage
  aws/aws-cdk#39693 · Filter by author patrickdomnick opened on Nov 11, 2026
  1

• (bedrockagentcore): ApiKeyCredentialProvider cannot reference an existing secret

  needs-triage
  aws/aws-cdk#39692 · Filter by author patrickdomnick opened on Nov 11, 2026

• (bedrockagentcore): support connector gateway targets (bedrock-knowledge-bases)

  needs-triage
  aws/aws-cdk#39691 · Filter by author patrickdomnick opened on Nov 11, 2026

• (bedrockagentcore): Policy fails with an engine from PolicyEngine.fromPolicyEngineAttributes

  @aws-cdk/aws-iamneeds-triage
  aws/aws-cdk#39690 · Filter by author patrickdomnick opened on Nov 11, 2026

• (bedrockagentcore): GatewayTarget.forMcpServer cannot set listingMode

  aws-cdk-libneeds-triage
  aws/aws-cdk#39689 · Filter by author patrickdomnick opened on Nov 11, 2026

• cdk: Add Node.js 26 support to CDK setup and documentation

  documentationneeds-triage
  aws/aws-cdk#39686 · Filter by author coding-jj opened on Nov 11, 2026

• (ec2): default VPC Flow Logs IAM role trust policy has no confused-deputy conditions

  @aws-cdk/aws-ec2effort/mediumfeature-request
  aws/aws-cdk#39674 · Filter by author laazyj opened on Nov 9, 2026
  2

• (bedrockagentcore): Memory eventExpiryDuration minimum is 7 in @aws/agentcore-cdk / aws-cdk-lib, but 3 in the AgentCore Memory service and the AgentCore CLI

  bugeffort/mediump2package/tools
  aws/aws-cdk#39671 · Filter by author pmanschek opened on Nov 9, 2026
  2

• (integ-tests-alpha): assertions.expect() fails deployment with "Vendor response doesn't contain data attribute"

  @aws-cdk/assertionseffort/mediump2
  aws/aws-cdk#39670 · Filter by author badmintoncryer opened on Nov 9, 2026
  4

• (bedrockagentcore): support certificate configurations and private endpoints for gateway targets

  @aws-cdk/aws-bedrock-agentcore-alphaeffort/mediumfeature-requestp2
  aws/aws-cdk#39665 · Filter by author badmintoncryer opened on Nov 9, 2026
  1

• (integ-tests-alpha): ExpectedResult.exact() never matches ("Expected type object but received string")

  @aws-cdk/integ-testsbugeffort/mediump2
  aws/aws-cdk#39664 · Filter by author badmintoncryer opened on Nov 9, 2026
  1

• (aws-sns): high-throughput FIFO example uses TOPIC instead of MESSAGE_GROUP

  documentationeffort/smallp3
  aws/aws-cdk#39662 · Filter by author ZainnQureshii opened on Nov 8, 2026
  1

• (imagebuilder-alpha): support building on a parent instance from an Auto Scaling group

  @aws-cdk/aws-autoscalingeffort/mediumfeature-request
  aws/aws-cdk#39653 · Filter by author vivian-az opened on Nov 5, 2026
  1

• (stepfunctions-tasks): EmrCreateCluster rejects JsonPath values for ebsRootVolumeSize, ebsRootVolumeIops, ebsRootVolumeThroughput and releaseLabel

  @aws-cdk/aws-stepfunctions-tasksbugeffort/mediump2potential-regression
  aws/aws-cdk#39646 · Filter by author haeganm opened on Nov 4, 2026
  1

• RDS: Add missing instance-engine version

  @aws-cdk/aws-rdsfeature-requestp2
  aws/aws-cdk#39639 · Filter by author daanvzijl opened on Nov 4, 2026
  1

• (bedrockagentcore): support record expiry (long-term memory TTL) on Memory strategies

  @aws-cdk/aws-bedrock-agentcore-alphafeature-requestp2
  aws/aws-cdk#39633 · Filter by author moneytool opened on Nov 4, 2026
  3

• (synthetics): auto delete underlying resources handler returns a misspelled PhysicalResourceId on Create

  @aws-cdk/aws-syntheticsbugeffort/smallp2
  aws/aws-cdk#39629 · Filter by author blacksoxx opened on Nov 4, 2026
  2

• (iam): OpenIdConnectProvider handler always verifies the issuer certificate, the oidcRejectUnauthorizedConnections flag has no effect

  bugeffort/smallp1potential-regression
  aws/aws-cdk#39627 · Filter by author blacksoxx opened on Nov 4, 2026
  2

• (ec2): restrictDefaultSecurityGroup custom resource fails to delete when the default rules already exist

  @aws-cdk/aws-ec2bugeffort/mediump2
  aws/aws-cdk#39625 · Filter by author blacksoxx opened on Nov 4, 2026
  2