Issues

• aws-redshift: Utilise Waiter State machine within Custom resource

  @aws-cdk/aws-redshiftfeature-requestneeds-triage
  aws/aws-cdk#38990 · Filter by author Rizxcviii opened on Oct 7, 2026

• core: context-miss dummy values (vpc-12345, p-12345, dummy-value-for-...) fail the built-in CloudFormation validation

  @aws-cdk/coreneeds-triagepotential-regression
  aws/aws-cdk#38989 · Filter by author variia opened on Oct 7, 2026

• CI pending maintainer action: week 2026-October5-W41

  ci-pending-tracking
  aws/aws-cdk#38987 · Filter by author aws-cdk-automation opened on Oct 6, 2026

• (aws-applicationsignals-alpha): DotNetLinuxInjector has no musl profiler path, and DotnetInstrumentationVersion stops at v1.7.0

  @aws-cdk/aws-applicationsignals-alphabugneeds-triage
  aws/aws-cdk#38986 · Filter by author jeanvelez2 opened on Oct 6, 2026

• aws-rds: CloudFormation-Validate::E9006 false positive — SqlServerEngineVersion.VER_16 emits '16.00', which CDK's own validator rejects

  @aws-cdk/aws-rdsneeds-triage
  aws/aws-cdk#38983 · Filter by author azatoth opened on Oct 6, 2026

• core: CloudFormation-Validate::E3047 false positive on parameterized Fargate Cpu/Memory, and messages reused across resources

  @aws-cdk/coreneeds-triage
  aws/aws-cdk#38982 · Filter by author azatoth opened on Oct 6, 2026
  1

• (aws-certificatemanager): add L2 constructs for ACME certificate automation

  @aws-cdk/aws-certificatemanagerneeds-triage
  aws/aws-cdk#38972 · Filter by author frankhefeng opened on Oct 5, 2026

• (aws-stepfunctions): CustomerManagedEncryptionConfiguration on an unnamed StateMachine grants a KMS condition that matches no ARN, so executions are denied the key

  @aws-cdk/aws-stepfunctionsneeds-triage
  aws/aws-cdk#38958 · Filter by author laazyj opened on Oct 3, 2026
  2

• aws-kinesis: add in RecordDistributionStrategy for service managed partition keys

  @aws-cdk/aws-kinesisfeature-requestneeds-triage
  aws/aws-cdk#38952 · Filter by author engjonah opened on Oct 2, 2026
  1

• (aws-bedrock-alpha): synth-time validations throw on unresolved tokens

  @aws-cdk/aws-bedrock-alphaneeds-triage
  aws/aws-cdk#38949 · Filter by author dfernaro opened on Oct 2, 2026

• (aws-mediapackagev2-alpha): OriginEndpointPolicy has no dependency on OriginEndpoint, causing intermittent deploy failures

  @aws-cdk/aws-iambugneeds-triage
  aws/aws-cdk#38945 · Filter by author damianzm-aws opened on Oct 2, 2026

• aws_stepfunction_tasks: DynamoDB.TransactWriteItems task is missing

  @aws-cdk/aws-stepfunctions-taskseffort/mediumfeature-requestp2
  aws/aws-cdk#38934 · Filter by author TomasChmelik opened on Sep 30, 2026
  2

• (aws-ec2): InterfaceVpcEndpointAwsService is missing "sso" endpoint

  @aws-cdk/aws-ec2effort/smallfeature-requestp2
  aws/aws-cdk#38933 · Filter by author Obirah opened on Sep 30, 2026
  2

• (cognito): Add support for configuring tls on User Pool Custom Domain

  @aws-cdk/aws-cognitoeffort/smallfeature-request
  aws/aws-cdk#38930 · Filter by author mbp opened on Sep 30, 2026
  2

• (aws-bedrock-alpha): no foundation model constants for OpenAI GPT-6 Astra, Sol and Luna

  @aws-cdk/aws-bedrock-alphaeffort/smallfeature-requestp2
  aws/aws-cdk#38926 · Filter by author vishwakt opened on Sep 29, 2026
  2

• (aws-synthetics): support multi-location canaries (replicas) in the Canary L2

  @aws-cdk/aws-syntheticseffort/mediumfeature-requestp2
  aws/aws-cdk#38913 · Filter by author shukrash opened on Sep 28, 2026
  1

• CI pending maintainer action: week 2026-September28-W40

  ci-pending-tracking
  aws/aws-cdk#38912 · Filter by author aws-cdk-automation opened on Sep 28, 2026

• (logs): LogRetention with removalPolicy DESTROY grants logs:DeleteLogGroup on the stack region instead of logGroupRegion

  @aws-cdk/aws-logseffort/smallfeature-requestp2
  aws/aws-cdk#38900 · Filter by author HasutoSasaki opened on Sep 27, 2026
  2

• aws-iam: imported Group's default policy name is not stack-safe, so grants from one stack silently replace another's

  @aws-cdk/aws-iameffort/mediumfeature-requestp1
  aws/aws-cdk#38892 · Filter by author yasomaru opened on Sep 25, 2026
  1

• (aws_bedrockagentcore): Python version of ToolSchema.from_inline does not accept a dictionary

  @aws-cdk/aws-bedrock-agentcore-alphabugp2
  aws/aws-cdk#38886 · Filter by author SamStephens opened on Sep 24, 2026
  3

• core: add default validation rules for ElastiCache ReplicationGroup

  feature-request
  aws/aws-cdk#38878 · Filter by author badmintoncryer opened on Sep 23, 2026
  1

• (aws-bedrockagentcore): Gateway OAuth/API-key IAM grants use mixed-case workload identity ARNs

  @aws-cdk/aws-bedrock-agentcore-alphaeffort/smallfeature-requestp2
  aws/aws-cdk#38869 · Filter by author aidandaly24 opened on Sep 21, 2026
  3

• codepipeline: ensure action role policies are created before pipeline

  @aws-cdk/aws-codepipelinebugeffort/mediump2
  aws/aws-cdk#38861 · Filter by author faridnsh opened on Sep 21, 2026
  2

• aws-bedrockagentcore: support platformVersion (V1/V2) on Runtime

  @aws-cdk/aws-bedrock-agentcore-alphafeature-requestneeds-cfnp2
  aws/aws-cdk#38854 · Filter by author tmokmss opened on Sep 19, 2026
  2

• (aws-bedrockagentcore): code-based evaluator function is unreachable through IEvaluator, so OnlineEvaluationConfig's execution role is never granted lambda:InvokeFunction

  @aws-cdk/aws-lambdabugeffort/smallp2
  aws/aws-cdk#38847 · Filter by author reibjok opened on Sep 18, 2026
  2