aws-cdk-cli 2.1144.0__tar.gz → 2.1146.0__tar.gz

{aws_cdk_cli-2.1144.0/aws_cdk_cli.egg-info → aws_cdk_cli-2.1146.0}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: aws-cdk-cli
-Version: 2.1144.0
+Version: 2.1146.0
 Summary: Python wrapper for AWS CDK CLI with smart Node.js runtime management
 Home-page: https://github.com/rvben/aws-cdk-cli-py
 Author-email: "Ruben J. Jongejan" <ruben.jongejan@gmail.com>

{aws_cdk_cli-2.1144.0 → aws_cdk_cli-2.1146.0}/aws_cdk_cli/node_modules/aws-cdk/README.md

@@ -207,6 +207,58 @@ $ cdk diff --app='node bin/main.js' MyStackName
 $ cdk diff --app='node bin/main.js' MyStackName --template=path/to/template.yml
 ```
 
+Use `--parameters` to supply CloudFormation parameter values for the diff change set, using the same
+`STACK:KEY=VALUE` syntax as `cdk deploy`. Unqualified `KEY=VALUE` applies to all selected stacks;
+stack-qualified values override unqualified values for that stack. For example:
+
+```console
+$ cdk diff MyStackName --method=change-set --parameters MyStackName:LogLevel=DEBUG
+```
+
+This option requires change-set diffing and cannot be used with `--method=template`,
+`--no-change-set`, or a local `--template` comparison. With `--method=auto`, a failed change set
+can still fall back to a template-only diff, which cannot evaluate parameter values. Use
+`--method=change-set` when a parameter-aware result is required. Omitted parameter values retain
+the existing change-set behavior; this option does not automatically reuse deployed values.
+
+Use `--fail-on` to control which kind of change makes the command exit with code 1. It takes the same
+values as `cdk deploy --require-approval`:
+
+- `--fail-on=any-change`: fail on any difference. `--fail` is an alias for this value.
+- `--fail-on=broadening`: fail only on changes that broaden security permissions, such as new IAM
+  statements or security group rules. All differences are still shown.
+- `--fail-on=destructive`: fail only on changes that replace, delete or orphan an existing resource.
+  See below. `cdk deploy --require-approval=destructive` uses the same classification.
+- `--fail-on=never`: never fail. `--no-fail` is an alias for this value.
+
+```console
+# Fail in CI only when a change broadens security permissions
+$ cdk diff --fail-on=broadening
+```
+
+`--fail-on` cannot be combined with `--fail` or `--no-fail`. When none of them is given, the command does
+not fail, unless the `aws-cdk:enableDiffNoFail` feature flag is set to `false`, in which case it fails on
+any difference.
+
+`--fail-on=destructive` lists the resources that would be replaced, deleted or orphaned, and exits with
+code 1. Changes that update resources in place or add new resources do not cause a failure. This is
+useful in CI to stop changes that would lose data, such as a stateful resource whose logical ID
+changed after it was moved to another construct.
+
+```console
+$ cdk diff --fail-on=destructive MyStackName
+...
+❌  Found 1 destructive change(s) (--fail-on=destructive):
+  MyStackName: AWS::DynamoDB::Table MyTable MyTable794EDED1 will be orphaned
+```
+
+Whether a property change replaces the resource is determined by the change set, so use the default
+`--method=auto` or `--method=change-set` for accurate results. With `--method=template`, a change to
+a property that requires replacement is always reported as a replacement, and a change to a property
+that may require replacement is reported as "may be replaced", which also causes a failure.
+With `--security-only`, changes that are likely mangled non-ASCII characters are not filtered out,
+so they can also be reported as destructive.
+
 The stack header shows the environment the stack will be deployed to. For environment-agnostic
 stacks this is the resolved account and region, not `unknown-account`/`unknown-region`. It is
 omitted when diffing against a local template with `--template`, which does not contact AWS.
@@ -268,6 +320,27 @@ currently deployed stack to the template and tags that are about to be deployed
 will skip deployment if they are identical. Use `--force` to override this behavior
 and always deploy the stack.
 
+#### Requiring approval
+
+`--require-approval` (or `requireApproval` in `cdk.json`) controls which changes need a manual
+confirmation before they are deployed:
+
+- `never`: approval is never required.
+- `any-change`: approval is required for any change to the stack.
+- `broadening` (default): approval is required if changes broaden permissions or security group rules.
+- `destructive`: approval is required if changes replace, delete or orphan an existing resource,
+  including resources in nested stacks. The affected resources are listed before the confirmation.
+  Changes that only broaden permissions do not require approval in this mode. With `--method=direct`,
+  no change set is created, so a change to a property that may require replacement also requires approval.
+
+When approval is required but no terminal is attached, for example in CI, the deployment fails.
+Use `--yes` to confirm automatically.
+
+```console
+# Stop before anything is replaced or deleted, deploy everything else unattended
+$ cdk deploy --require-approval=destructive
+```
+
 #### Disabling Rollback
 
 If a resource fails to be created or updated, the deployment will *roll back* before the CLI returns. All changes made
@@ -1954,7 +2027,7 @@ The CDK CLI determines which AWS region to use with the following priority order
 3. `AWS_DEFAULT_REGION` / `AMAZON_DEFAULT_REGION` environment variable
 4. Region from the shared INI files (`~/.aws/credentials` then `~/.aws/config`) for the active profile
 5. Region from the `[default]` profile in the shared INI files
-6. EC2 instance metadata (IMDS)
+6. EC2 instance metadata (IMDS), unless `AWS_EC2_METADATA_DISABLED` is set to a value other than `false`
 7. `us-east-1`
 
 When `--profile` is specified, the region configured in that profile is used (step 4). When `--region` is also specified, it takes priority over everything else including environment variables and the profile's own region setting. This is consistent with how the AWS CLI handles `--region`, and is useful for non-commercial partitions where the default `us-east-1` fallback would fail because credentials are partition-specific.

{aws_cdk_cli-2.1144.0 → aws_cdk_cli-2.1146.0}/aws_cdk_cli/node_modules/aws-cdk/THIRD_PARTY_LICENSES

@@ -4326,7 +4326,7 @@ The aws-cdk package includes the following third-party software/licensing:
 
 ----------------
 
-** @aws-sdk/core@3.978.1 - https://www.npmjs.com/package/@aws-sdk/core/v/3.978.1 | Apache-2.0
+** @aws-sdk/core@3.978.3 - https://www.npmjs.com/package/@aws-sdk/core/v/3.978.3 | Apache-2.0
 Apache License
                            Version 2.0, January 2004
                         http://www.apache.org/licenses/
@@ -4531,7 +4531,7 @@ Apache License
 
 ----------------
 
-** @aws-sdk/credential-provider-cognito-identity@3.972.71 - https://www.npmjs.com/package/@aws-sdk/credential-provider-cognito-identity/v/3.972.71 | Apache-2.0
+** @aws-sdk/credential-provider-cognito-identity@3.972.73 - https://www.npmjs.com/package/@aws-sdk/credential-provider-cognito-identity/v/3.972.73 | Apache-2.0
                                 Apache License
                            Version 2.0, January 2004
                         http://www.apache.org/licenses/
@@ -4737,7 +4737,7 @@ Apache License
 
 ----------------
 
-** @aws-sdk/credential-provider-env@3.972.72 - https://www.npmjs.com/package/@aws-sdk/credential-provider-env/v/3.972.72 | Apache-2.0
+** @aws-sdk/credential-provider-env@3.972.74 - https://www.npmjs.com/package/@aws-sdk/credential-provider-env/v/3.972.74 | Apache-2.0
 Apache License
                            Version 2.0, January 2004
                         http://www.apache.org/licenses/
@@ -4942,11 +4942,11 @@ Apache License
 
 ----------------
 
-** @aws-sdk/credential-provider-http@3.972.74 - https://www.npmjs.com/package/@aws-sdk/credential-provider-http/v/3.972.74 | Apache-2.0
+** @aws-sdk/credential-provider-http@3.972.76 - https://www.npmjs.com/package/@aws-sdk/credential-provider-http/v/3.972.76 | Apache-2.0
 
 ----------------
 
-** @aws-sdk/credential-provider-ini@3.973.17 - https://www.npmjs.com/package/@aws-sdk/credential-provider-ini/v/3.973.17 | Apache-2.0
+** @aws-sdk/credential-provider-ini@3.973.19 - https://www.npmjs.com/package/@aws-sdk/credential-provider-ini/v/3.973.19 | Apache-2.0
 Apache License
                            Version 2.0, January 2004
                         http://www.apache.org/licenses/
@@ -5151,11 +5151,11 @@ Apache License
 
 ----------------
 
-** @aws-sdk/credential-provider-login@3.972.79 - https://www.npmjs.com/package/@aws-sdk/credential-provider-login/v/3.972.79 | Apache-2.0
+** @aws-sdk/credential-provider-login@3.972.81 - https://www.npmjs.com/package/@aws-sdk/credential-provider-login/v/3.972.81 | Apache-2.0
 
 ----------------
 
-** @aws-sdk/credential-provider-node@3.972.84 - https://www.npmjs.com/package/@aws-sdk/credential-provider-node/v/3.972.84 | Apache-2.0
+** @aws-sdk/credential-provider-node@3.972.86 - https://www.npmjs.com/package/@aws-sdk/credential-provider-node/v/3.972.86 | Apache-2.0
 Apache License
                            Version 2.0, January 2004
                         http://www.apache.org/licenses/
@@ -5360,7 +5360,7 @@ Apache License
 
 ----------------
 
-** @aws-sdk/credential-provider-process@3.972.72 - https://www.npmjs.com/package/@aws-sdk/credential-provider-process/v/3.972.72 | Apache-2.0
+** @aws-sdk/credential-provider-process@3.972.74 - https://www.npmjs.com/package/@aws-sdk/credential-provider-process/v/3.972.74 | Apache-2.0
 Apache License
                            Version 2.0, January 2004
                         http://www.apache.org/licenses/
@@ -5565,7 +5565,7 @@ Apache License
 
 ----------------
 
-** @aws-sdk/credential-provider-sso@3.973.16 - https://www.npmjs.com/package/@aws-sdk/credential-provider-sso/v/3.973.16 | Apache-2.0
+** @aws-sdk/credential-provider-sso@3.973.18 - https://www.npmjs.com/package/@aws-sdk/credential-provider-sso/v/3.973.18 | Apache-2.0
 Apache License
                            Version 2.0, January 2004
                         http://www.apache.org/licenses/
@@ -5770,7 +5770,7 @@ Apache License
 
 ----------------
 
-** @aws-sdk/credential-provider-web-identity@3.972.78 - https://www.npmjs.com/package/@aws-sdk/credential-provider-web-identity/v/3.972.78 | Apache-2.0
+** @aws-sdk/credential-provider-web-identity@3.972.80 - https://www.npmjs.com/package/@aws-sdk/credential-provider-web-identity/v/3.972.80 | Apache-2.0
 Apache License
                            Version 2.0, January 2004
                         http://www.apache.org/licenses/
@@ -5975,7 +5975,7 @@ Apache License
 
 ----------------
 
-** @aws-sdk/credential-providers@3.1140.0 - https://www.npmjs.com/package/@aws-sdk/credential-providers/v/3.1140.0 | Apache-2.0
+** @aws-sdk/credential-providers@3.1152.0 - https://www.npmjs.com/package/@aws-sdk/credential-providers/v/3.1152.0 | Apache-2.0
 Apache License
                            Version 2.0, January 2004
                         http://www.apache.org/licenses/
@@ -7207,11 +7207,11 @@ Apache License
 
 ----------------
 
-** @aws-sdk/nested-clients@3.997.46 - https://www.npmjs.com/package/@aws-sdk/nested-clients/v/3.997.46 | Apache-2.0
+** @aws-sdk/nested-clients@3.997.48 - https://www.npmjs.com/package/@aws-sdk/nested-clients/v/3.997.48 | Apache-2.0
 
 ----------------
 
-** @aws-sdk/signature-v4-multi-region@3.996.47 - https://www.npmjs.com/package/@aws-sdk/signature-v4-multi-region/v/3.996.47 | Apache-2.0
+** @aws-sdk/signature-v4-multi-region@3.996.48 - https://www.npmjs.com/package/@aws-sdk/signature-v4-multi-region/v/3.996.48 | Apache-2.0
                                 Apache License
                            Version 2.0, January 2004
                         http://www.apache.org/licenses/
@@ -7417,7 +7417,7 @@ Apache License
 
 ----------------
 
-** @aws-sdk/token-providers@3.1138.0 - https://www.npmjs.com/package/@aws-sdk/token-providers/v/3.1138.0 | Apache-2.0
+** @aws-sdk/token-providers@3.1150.0 - https://www.npmjs.com/package/@aws-sdk/token-providers/v/3.1150.0 | Apache-2.0
 Apache License
                            Version 2.0, January 2004
                         http://www.apache.org/licenses/
@@ -8361,7 +8361,7 @@ Apache License
 
 ----------------
 
-** @smithy/core@3.35.0 - https://www.npmjs.com/package/@smithy/core/v/3.35.0 | Apache-2.0
+** @smithy/core@3.36.0 - https://www.npmjs.com/package/@smithy/core/v/3.36.0 | Apache-2.0
                                 Apache License
                            Version 2.0, January 2004
                         http://www.apache.org/licenses/
@@ -9797,7 +9797,7 @@ Apache License
 
 ----------------
 
-** @smithy/signature-v4@5.7.3 - https://www.npmjs.com/package/@smithy/signature-v4/v/5.7.3 | Apache-2.0
+** @smithy/signature-v4@5.7.4 - https://www.npmjs.com/package/@smithy/signature-v4/v/5.7.4 | Apache-2.0
 Apache License
                            Version 2.0, January 2004
                         http://www.apache.org/licenses/
@@ -10936,7 +10936,7 @@ THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLI
 
 ----------------
 
-** cdk-from-cfn@0.334.0 - https://www.npmjs.com/package/cdk-from-cfn/v/0.334.0 | MIT OR Apache-2.0
+** cdk-from-cfn@0.338.0 - https://www.npmjs.com/package/cdk-from-cfn/v/0.338.0 | MIT OR Apache-2.0
 
 ----------------
 
@@ -12986,8 +12986,8 @@ THIS SOFTWARE.
 
 ----------------
 
-** yaml@1.10.3 - https://www.npmjs.com/package/yaml/v/1.10.3 | ISC
-Copyright 2018 Eemeli Aro <eemeli@gmail.com>
+** yaml@2.9.1 - https://www.npmjs.com/package/yaml/v/2.9.1 | ISC
+Copyright Eemeli Aro <eemeli@gmail.com>
 
 Permission to use, copy, modify, and/or distribute this software for any purpose
 with or without fee is hereby granted, provided that the above copyright notice

aws_cdk_cli-2.1146.0/aws_cdk_cli/node_modules/aws-cdk/build-info.json

@@ -0,0 +1,4 @@
+{
+  "comment": "Generated at 2026-10-20T00:06:03Z by generate.sh",
+  "commit": "60e0a2d"
+}

{aws_cdk_cli-2.1144.0 → aws_cdk_cli-2.1146.0}/aws_cdk_cli/node_modules/aws-cdk/lib/api-private.d.ts

@@ -6,9 +6,9 @@ export { Diagnosis } from '../../@aws-cdk/toolkit-lib/lib/api/diagnosing/diagnos
 export type { ChangeSetReport } from '../../@aws-cdk/toolkit-lib/lib/api/change-sets';
 export { createIgnoreMatcher } from '../../@aws-cdk/toolkit-lib/lib/util/glob-matcher';
 export { formatExpressStabilizationWarning } from '../../@aws-cdk/toolkit-lib/lib/util/cfn-express';
+export { toCloudFormationRollbackConfiguration } from '../../@aws-cdk/toolkit-lib/lib/util/cloudformation';
 export * from '../../@aws-cdk/toolkit-lib/lib/api/io/private';
 export * from '../../@aws-cdk/toolkit-lib/lib/api/tags/private';
 export * from '../../@aws-cdk/toolkit-lib/lib/private/activity-printer';
 export * from '../../@aws-cdk/toolkit-lib/lib/api/cloud-assembly/private/borrowed-assembly';
 export * from '../../@aws-cdk/toolkit-lib/lib/toolkit/private/count-assembly-results';
-export { throwIfValidationFailures } from '../../@aws-cdk/toolkit-lib/lib/toolkit/private/validation-report';

{aws_cdk_cli-2.1144.0 → aws_cdk_cli-2.1146.0}/aws_cdk_cli/node_modules/aws-cdk/lib/api-private.js

@@ -36,7 +36,7 @@ var __exportStar = (this && this.__exportStar) || function(m, exports) {
     for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
 };
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.throwIfValidationFailures = exports.formatExpressStabilizationWarning = exports.createIgnoreMatcher = exports.Diagnosis = exports.ChangeSetDescriber = exports.cfnApi = exports.deployStack = void 0;
+exports.toCloudFormationRollbackConfiguration = exports.formatExpressStabilizationWarning = exports.createIgnoreMatcher = exports.Diagnosis = exports.ChangeSetDescriber = exports.cfnApi = exports.deployStack = void 0;
 /* eslint-disable import/no-relative-packages */
 var deploy_stack_1 = require("../../@aws-cdk/toolkit-lib/lib/api/deployments/deploy-stack");
 Object.defineProperty(exports, "deployStack", { enumerable: true, get: function () { return deploy_stack_1.deployStack; } });
@@ -49,11 +49,11 @@ var glob_matcher_1 = require("../../@aws-cdk/toolkit-lib/lib/util/glob-matcher")
 Object.defineProperty(exports, "createIgnoreMatcher", { enumerable: true, get: function () { return glob_matcher_1.createIgnoreMatcher; } });
 var cfn_express_1 = require("../../@aws-cdk/toolkit-lib/lib/util/cfn-express");
 Object.defineProperty(exports, "formatExpressStabilizationWarning", { enumerable: true, get: function () { return cfn_express_1.formatExpressStabilizationWarning; } });
+var cloudformation_1 = require("../../@aws-cdk/toolkit-lib/lib/util/cloudformation");
+Object.defineProperty(exports, "toCloudFormationRollbackConfiguration", { enumerable: true, get: function () { return cloudformation_1.toCloudFormationRollbackConfiguration; } });
 __exportStar(require("../../@aws-cdk/toolkit-lib/lib/api/io/private"), exports);
 __exportStar(require("../../@aws-cdk/toolkit-lib/lib/api/tags/private"), exports);
 __exportStar(require("../../@aws-cdk/toolkit-lib/lib/private/activity-printer"), exports);
 __exportStar(require("../../@aws-cdk/toolkit-lib/lib/api/cloud-assembly/private/borrowed-assembly"), exports);
 __exportStar(require("../../@aws-cdk/toolkit-lib/lib/toolkit/private/count-assembly-results"), exports);
-var validation_report_1 = require("../../@aws-cdk/toolkit-lib/lib/toolkit/private/validation-report");
-Object.defineProperty(exports, "throwIfValidationFailures", { enumerable: true, get: function () { return validation_report_1.throwIfValidationFailures; } });
-//# sourceMappingURL=data:application/json;base64,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
+//# sourceMappingURL=data:application/json;base64,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

{aws_cdk_cli-2.1144.0 → aws_cdk_cli-2.1146.0}/aws_cdk_cli/node_modules/aws-cdk/lib/cli/cdk-toolkit.d.ts

@@ -1,5 +1,5 @@
 import { RequireApproval } from '@aws-cdk/cloud-assembly-schema';
-import type { DeploymentMethod, DiagnoseOptions, PublishAssetsOptions, StackSelector, SynthOptions as ToolkitSynthOptions, ToolkitOptions, ValidateOptions } from '@aws-cdk/toolkit-lib';
+import type { DeploymentMethod, DiagnoseOptions, PublishAssetsOptions, RollbackConfiguration, StackSelector, SynthOptions as ToolkitSynthOptions, ToolkitOptions, ValidateOptions } from '@aws-cdk/toolkit-lib';
 import { Toolkit } from '@aws-cdk/toolkit-lib';
 import { CliIoHost } from './io-host';
 import type { Configuration } from './user-configuration';
@@ -285,11 +285,16 @@ export interface DiffOptions {
      */
     readonly contextLines?: number;
     /**
-     * Whether to fail with exit code 1 in case of diff
+     * Which kind of change makes the diff fail with exit code 1
      *
-     * @default false
+     * - `any-change`: any difference
+     * - `broadening`: a change that broadens security permissions
+     * - `destructive`: a change that replaces, deletes or orphans an existing resource
+     * - `never`: the diff never fails
+     *
+     * @default RequireApproval.NEVER
      */
-    readonly fail?: boolean;
+    readonly failOn?: RequireApproval;
     /**
      * Only run diff on broadened security changes
      *
@@ -386,6 +391,11 @@ export interface CliValidateOptions extends ValidateOptions {
     readonly watch?: boolean;
 }
 interface WatchOptions extends Omit<CfnDeployOptions, 'execute'> {
+    /**
+     * Path to file where stack outputs will be written after a successful deploy as JSON
+     * @default - Outputs are not written to any file
+     */
+    outputsFile?: string;
     /**
      * Reuse the assets with the given asset IDs
      */
@@ -421,6 +431,12 @@ export interface DeployOptions extends CfnDeployOptions, WatchOptions {
      * ARNs of SNS topics that CloudFormation will notify with stack related events
      */
     notificationArns?: string[];
+    /**
+     * CloudFormation rollback triggers to monitor during the deployment
+     *
+     * @default - Rollback configuration is not managed by CDK
+     */
+    rollbackConfiguration?: RollbackConfiguration;
     /**
      * What kind of security changes require approval
      *
@@ -446,11 +462,6 @@ export interface DeployOptions extends CfnDeployOptions, WatchOptions {
      * @default true
      */
     usePreviousParameters?: boolean;
-    /**
-     * Path to file where stack outputs will be written after a successful deploy as JSON
-     * @default - Outputs are not written to any file
-     */
-    outputsFile?: string;
     /**
      * Whether we are on a CI system
      *