{
  "slug": "cdk-diff-adds-method-to-enforce-change-set-usage-bbf32a1a0140",
  "title": "cdk diff adds --method to enforce change set usage",
  "tools": [
    "cdk"
  ],
  "tags": [
    "agent"
  ],
  "introduced_at": "2026-03-30T13:26:21.000Z",
  "announced_at": "2026-03-30T13:26:21.000Z",
  "effective_at": null,
  "date_basis": "source-publication",
  "status": "unknown",
  "how": {
    "incantation": "When a stack diff must always use a CloudFormation change set, run `cdk diff <stack-id> --method=change-set`. The command fails if it cannot create the change set.",
    "examples": [
      "cdk diff <stack-id> --method=change-set"
    ],
    "gotchas": [
      "Version: v2.1115.0",
      "<stack-id>: CDK stack construct ID to diff.",
      "--method=change-set: Always creates a CloudFormation change set and fails if it cannot be created; uses the deploy role. Allowed `--method` values documented: `auto` (default), `change-set`, `template`."
    ]
  },
  "why_it_matters": "When reviewing a CDK stack diff that must use a change set, enforce change set usage.",
  "sources": [
    "https://github.com/aws/aws-cdk-cli/releases/tag/aws-cdk%40v2.1115.0",
    "https://github.com/aws/aws-cdk-cli/blob/23bc301a65086c4b68ad63e94b5cc80aa521fdbc/packages/aws-cdk/README.md",
    "https://docs.aws.amazon.com/cdk/v2/guide/ref-cli-cmd-diff.html"
  ],
  "rank": 0.96036,
  "judge": {
    "publish": true,
    "judge_model": "codex-cli/gpt-6-luna+typesafe/jev-1.13.0",
    "prompt_version": "extract-v7+enrich-v2+judge-v2x3-rejudge+jev-publish-v1"
  },
  "review_state": "approved",
  "provenance": {
    "run_id": "wave2a-20261017",
    "verdict_id": "wave2a-20261017:wave2a-20261017-e6abf6b958857c63-0:rescue",
    "evidence_hash": "e2178b46f3ef2d753b4043ed5fe51df7c90b4c232d7ad53973d12b4dba90ab04"
  },
  "review": {
    "draft_hash": "9952b668b2dd5da653276ef57a83949fb2c9cc34556691ed0251dc266fe6fb12",
    "reviewer": "publication-gate",
    "reviewed_at": "2026-10-07T00:00:00.000Z",
    "decision": "wave2a-20261017:rescue",
    "reason": "Rescue path: first rejected only because the extracted card lacked usage; judged again on the enriched card, 3 of 3 judge runs approved with p_yes >= 0.9 (mean 0.96 >= 0.9; 2 needed) and Jev gave 0.74 (>= 0.6 needed)."
  }
}
