packages/@aws-cdk/cloudformation-diff/lib/diff/types.ts (5 lines):
	- line 414: // TODO: define specific difference attributes
	- line 419: // TODO: define specific difference attributes
	- line 424: // TODO: define specific difference attributes
	- line 429: // TODO: define specific difference attributes
	- line 434: // TODO: define specific difference attributes


packages/@aws-cdk/pipelines/lib/legacy/stage.ts (3 lines):
	- line 236: * FIXME: This is here because Actions are immutable and can't be reordered
	- line 259: * FIXME: This is here because Actions are immutable and can't be reordered
	- line 264: // FIXME: Make sure this only gets run once. There seems to be an issue in the reconciliation


packages/@aws-cdk/pipelines/lib/legacy/pipeline.ts (2 lines):
	- line 527: // FIXME: this is silly, we need the relative path here but no easy way to get it
	- line 568: // FIXME: The ultimate best solution is probably to generate a single Project per asset type


tools/@aws-cdk/cdk-build-tools/config/eslintrc.js (2 lines):
	- line 158: // FIXME: there's no way to do this properly. The proposed tslint replacement
	- line 177: // FIXME: there's no way to disable name checking in object literals. Maintainer won't have it


packages/@aws-cdk/aws-ecs/lib/amis.ts (2 lines):
	- line 40: * TODO:v2.0.0
	- line 94: * TODO:v2.0.0 remove EcsOptimizedAmi


packages/@aws-cdk/app-delivery/lib/pipeline-deploy-stack-action.ts (2 lines):
	- line 124: // FIXME: Implement the necessary actions to publish assets
	- line 157: // FIXME: Add the necessary to extend to stacks in a different account


packages/@aws-cdk/pipelines/lib/private/asset-manifest.ts (1 line):
	- line 1: // FIXME: copied from `ckd-assets`, because this tool needs to read the asset manifest aswell.


packages/@aws-cdk/aws-events/lib/rule.ts (1 line):
	- line 226: // FIXME: the MirrorRule is a bit silly, forwarding the exact same event to another event bus


packages/@aws-cdk/aws-ec2/lib/nat.ts (1 line):
	- line 296: // FIXME: Ideally, NAT instances don't have a role at all, but


packages/@aws-cdk/aws-ec2/lib/machine-image.ts (1 line):
	- line 154: // FIXME: this class ought to be `@deprecated` and removed from v2, but that


packages/@aws-cdk/aws-eks/lib/helm-chart.ts (1 line):
	- line 139: RoleArn: provider.roleArn, // TODO: bake into the provider's environment


packages/@aws-cdk/custom-resources/lib/aws-custom-resource/aws-custom-resource.ts (1 line):
	- line 509: * TODO: is this mapping correct for all services?


packages/@aws-cdk/aws-lambda/lib/function-base.ts (1 line):
	- line 254: // FIXME: @deprecated(v2) - throw an error if calling `addPermission` on a resource that doesn't support it.


packages/@aws-cdk/pipelines/lib/legacy/actions/publish-assets-action.ts (1 line):
	- line 218: // FIXME: I have had to make this class a Construct, because:


packages/@aws-cdk/aws-lambda-event-sources/lib/kinesis.ts (1 line):
	- line 37: // FIXME This permission can be removed when the event source mapping resource drops it from validation.


packages/@aws-cdk/aws-eks/lib/k8s-patch.ts (1 line):
	- line 90: RoleArn: provider.roleArn, // TODO: bake into provider's environment


packages/@aws-cdk/aws-ecs/lib/container-definition.ts (1 line):
	- line 76: * TODO: Update these to specify using classes of IContainerImage


packages/@aws-cdk/aws-cloudfront/lib/web-distribution.ts (1 line):
	- line 829: customErrorResponses: props.errorConfigurations, // TODO: validation : https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-cloudfront-distribution-customerrorresponse.html#cfn-cloudfront-distribution-customerrorresponse-errorcachingminttl


packages/@aws-cdk/pipelines/lib/legacy/actions/update-pipeline-action.ts (1 line):
	- line 172: // FIXME: I have had to make this class a Construct, because:


packages/aws-cdk/lib/diff.ts (1 line):
	- line 75: * TODO: Filter the security impact determination based off of an enum that allows


packages/@aws-cdk/aws-iam/lib/role.ts (1 line):
	- line 239: // FIXME: Add warning that we're ignoring this


packages/@aws-cdk/aws-logs/lib/pattern.ts (1 line):
	- line 297: // TODO: Temporarily changed from private to protected to unblock build. We need to think


packages/@aws-cdk/aws-ec2/lib/vpn.ts (1 line):
	- line 141: * TODO: remove once https://github.com/aws/jsii/issues/231 is fixed


packages/@aws-cdk/aws-eks/lib/k8s-manifest.ts (1 line):
	- line 151: RoleArn: provider.roleArn, // TODO: bake into provider's environment


packages/aws-cdk/lib/assets.ts (1 line):
	- line 33: // FIXME: Should have excluded by construct path here instead of by unique ID, preferably using


packages/@aws-cdk/aws-cloudtrail/lib/cloudtrail.ts (1 line):
	- line 274: // TODO: not all regions support validation. Use service configuration data to fail gracefully


tools/@aws-cdk/cdk-integ-tools/lib/integ-helpers.ts (1 line):
	- line 132: // FIXME: Refactor later if it doesn't introduce dependency cycles


packages/@aws-cdk/core/lib/names.ts (1 line):
	- line 29: * TODO (v2): replace with API to use `constructs.Node`.


packages/@aws-cdk/aws-glue/lib/schema.ts (1 line):
	- line 121: * TODO: Bounds


packages/@aws-cdk/pipelines/lib/helpers-internal/pipeline-graph.ts (1 line):
	- line 188: // FIXME: Custom Cloud Assembly currently doesn't actually help separating