| #38416 |
chore(deps): bump stale fast-xml-parser resolution to 4.5.7 (GHSA-m7jm-9gc2-mpf2) |
@AtsutoNakayama |
2026-07-28 (4d) |
| #36892 |
feat(eks): support internal load balancers in isolated subnets |
@Ashutosh0x |
2026-07-29 (4d) |
| #38384 |
fix(dynamodb): table v2 arn validation (#38354) |
@wasim-builds |
2026-07-29 (4d) |
| #38385 |
fix(ec2): eks proxy endpoint (#38369) |
@wasim-builds |
2026-07-29 (4d) |
| #38357 |
fix(stepfunctions-tasks): tighten permissions in SubmitBatchJob to scoped job definitions |
@wasim-builds |
2026-07-29 (4d) |
| #38330 |
fix(logs): emit canonical root ARN for ResourcePolicy principals |
@wasim-builds |
2026-07-29 (4d) |
| #38420 |
fix(logs): use AccountPrincipal for drift prevention |
@wasim-builds |
2026-07-29 (4d) |
| #37670 |
fix(s3-deployment): sanitize all log outputs to mitigate CWE-117/93 |
@jonmiller-iv |
2026-07-29 (4d) |
| #38195 |
fix(logs): emit account root ARN in resource policies to avoid drift false positive |
@UTKARSH698 |
2026-07-30 (3d) |
| #36643 |
feat(apigateway): update domain name security policy |
@Jojo134 |
2026-07-30 (3d) |
| #38084 |
fix(secretsmanager): make SecretBase and SecretTargetAttachment assignable to their interfaces under exactOptionalPropertyTypes |
@laazyj |
2026-07-31 (2d) |
| #37991 |
docs(sns): expand grant* JSDoc with granted actions |
@MukundaKatta |
2026-07-31 (2d) |
| #38200 |
feat(s3-deployment): add destinationBucketRegion prop for cross-region deployments |
@bentorb |
2026-07-31 (2d) |
| #37858 |
feat(lambda-python-alpha): opt-in local (docker-less) bundling for PythonFunction |
@CoreOxide |
2026-07-31 (2d) |
| #38446 |
fix(s3-deployment): preserve custom log groups during deletion |
@Hashim1999164 |
2026-07-31 (2d) |
| #38122 |
fix(iam): ensure attachToRole honors role mutability |
@joerino96 |
2026-07-31 (1d) |
| #37899 |
fix(lambda-nodejs): run beforeInstall hook after workspace files are written |
@Zelys-DFKH |
2026-08-01 (1d) |
| #37878 |
fix(custom-resource-handlers): retry on AccessDeniedException to handle IAM propagation delay |
@Zelys-DFKH |
2026-08-01 (0d) |
| #37893 |
fix(ec2): add DependsOn VPCGatewayAttachment to IPv6 default route |
@Zelys-DFKH |
2026-08-01 (0d) |
| #37896 |
fix(ec2): wrap L1 CfnSubnet in selectSubnetObjects so SubnetIds resolve in templates |
@Zelys-DFKH |
2026-08-01 (0d) |
| #37865 |
fix(events): omit KmsKeyIdentifier from Archive when no KMS key is configured |
@Zelys-DFKH |
2026-08-01 (0d) |
| #36451 |
feat(ec2): add volume initialization rate to ebs props for launchtemplate |
@dalatrex |
2026-08-02 (0d) |
| #38461 |
docs(s3,kms): replace object-literal IResourceWithPolicyV2 example with named class |
@AmariahAK |
2026-08-02 (0d) |
| #38470 |
docs(events): add examples for RuleTargetInput and EventField |
@krantboy |
2026-08-02 (0d) |
| #38471 |
feat(codebuild): add Node.js 24 Lambda build image constants |
@sanyamk23 |
2026-08-02 (0d) |
| #38375 |
fix(elasticloadbalancingv2): make NetworkLoadBalancer assignable to INetworkLoadBalancer under exactOptionalPropertyTypes |
@sanyamk23 |
2026-08-02 (0d) |
| #38372 |
feat(bedrockagentcore): add manageDeliveryResourcePolicy opt-out for runtime observability |
@sanyamk23 |
2026-08-02 (0d) |
| #38332 |
fix(bedrockagentcore): set default child on BrowserCustom L2 so applyRemovalPolicy works |
@sanyamk23 |
2026-08-02 (0d) |
| #38328 |
fix(bedrockagentcore): set default child on Runtime L2 so applyRemovalPolicy works |
@sanyamk23 |
2026-08-02 (0d) |
| #38228 |
fix(ecs): validate environment variable limit in container definitions |
@sanyamk23 |
2026-08-02 (0d) |
| #38219 |
feat(applicationautoscaling): add high-resolution ECS predefined metrics |
@sanyamk23 |
2026-08-02 (0d) |
Beginning-contributor PRs that entered pending maintainer CI action during week 2026-July27-W31.
Last updated: 2026-08-02T21:21:54.994Z (refreshed daily by the Pending Maintainer Action Check workflow)
31 PR(s) — 🔒 Pending CI approval: 31
🔒 Pending CI approval (31)
Close this issue once all listed PRs have been handled.