packages/@aws-cdk/aws-ec2-alpha/lib/route.ts (3 lines):
	- line 101: * //TODO: ADD L2 for elastic ip
	- line 637: * TODO: Look for strong IP type implementation here.
	- line 731: // TODO Validate for IPv6 CIDR range


packages/aws-cdk-lib/aws-inspector/lib/assessment-template.ts (2 lines):
	- line 18: * TODO: Add properties and remove "props-physical-name:aws-cdk-lib.aws_inspector.AssessmentTemplateProps" from `awslint.json`
	- line 25: * TODO: This class should implement IAssessmentTemplate and "construct-ctor-props-type:aws-cdk-lib.aws_inspector.AssessmentTemplate" should be


packages/aws-cdk-lib/aws-ecs/lib/amis.ts (2 lines):
	- line 49: * TODO:v2.0.0
	- line 103: * TODO:v2.0.0 remove EcsOptimizedAmi


tools/@aws-cdk/cdk-build-tools/config/eslintrc.js (2 lines):
	- line 183: // FIXME: there's no way to do this properly. The proposed tslint replacement
	- line 202: // FIXME: there's no way to disable name checking in object literals. Maintainer won't have it


packages/aws-cdk-lib/pipelines/lib/private/asset-manifest.ts (1 line):
	- line 1: // FIXME: copied from `ckd-assets`, because this tool needs to read the asset manifest aswell.


packages/@aws-cdk/aws-glue-alpha/lib/schema.ts (1 line):
	- line 121: * TODO: Bounds


packages/aws-cdk-lib/core/lib/metadata-resource.ts (1 line):
	- line 113: * @TODO we will build a JSON blueprint of ENUM-type values in the codebase and


packages/aws-cdk-lib/aws-eks/lib/helm-chart.ts (1 line):
	- line 169: RoleArn: provider.roleArn, // TODO: bake into the provider's environment


packages/aws-cdk-lib/assets/lib/fs/follow-mode.ts (1 line):
	- line 21: // ----------------- TODO::::::::::::::::::::::::::::::::::::::::::::


packages/aws-cdk-lib/aws-logs/lib/pattern.ts (1 line):
	- line 329: // TODO: Temporarily changed from private to protected to unblock build. We need to think


packages/@aws-cdk/aws-ec2-alpha/lib/vpc-v2-base.ts (1 line):
	- line 718: // TODO: throw error as new VpcV2 cannot support subnetName or subnetGroupName anymore


packages/aws-cdk-lib/aws-eks/lib/k8s-patch.ts (1 line):
	- line 86: RoleArn: provider.roleArn, // TODO: bake into provider's environment


packages/aws-cdk-lib/aws-ecs/lib/container-definition.ts (1 line):
	- line 110: * TODO: Update these to specify using classes of IContainerImage


packages/aws-cdk-lib/aws-ec2/lib/machine-image/machine-image.ts (1 line):
	- line 206: // FIXME: this class ought to be `@deprecated` and removed from v2, but that


packages/@aws-cdk/aws-msk-alpha/lib/serverless-cluster.ts (1 line):
	- line 100: * TODO At the time of implementation, MSK Serverless only supports IAM authentication, so it cannot be disabled.


packages/aws-cdk-lib/aws-fsx/lib/lustre-file-system.ts (1 line):
	- line 420: // TODO: Add validation for V_2_12 with PERSISTENT_2 deployment mode and metadata configuration mode when metadata configuration is supported.


packages/@aws-cdk/aws-eks-v2-alpha/lib/service-account.ts (1 line):
	- line 189: // TODO: raise an error when using Fargate


packages/aws-cdk-lib/aws-ec2/lib/vpn.ts (1 line):
	- line 155: * TODO: remove once https://github.com/aws/jsii/issues/231 is fixed


packages/aws-cdk-lib/core/lib/names.ts (1 line):
	- line 59: * TODO (v2): replace with API to use `constructs.Node`.


packages/aws-cdk-lib/core/lib/private/asset-staging.ts (1 line):
	- line 176: this.startHelperContainer(user); // TODO handle user properly


packages/@aws-cdk/app-staging-synthesizer-alpha/lib/default-staging-stack.ts (1 line):
	- line 281: // FIXME: when stabilizing this module, we should make `stagingBucketEncryption` optional, defaulting to S3_MANAGED.


packages/@aws-cdk/aws-ec2-alpha/lib/subnet-v2.ts (1 line):
	- line 80: * TODO: Add validation check `subnetType` when adding resources (e.g. cannot add NatGateway to private)


tools/@aws-cdk/lazify/lib/index.ts (1 line):
	- line 162: // FIXME: Should probably do this in a subprocess


packages/aws-cdk-lib/aws-ec2/lib/nat.ts (1 line):
	- line 376: // FIXME: Ideally, NAT instances don't have a role at all, but


packages/@aws-cdk/custom-resource-handlers/lib/aws-s3/auto-delete-objects-handler/index.ts (1 line):
	- line 54: // TODO: this is probably an error of some sort


packages/aws-cdk-lib/aws-events/lib/rule.ts (1 line):
	- line 216: // FIXME: the MirrorRule is a bit silly, forwarding the exact same event to another event bus


packages/aws-cdk-lib/pipelines/lib/helpers-internal/pipeline-graph.ts (1 line):
	- line 196: // FIXME: Custom Cloud Assembly currently doesn't actually help separating


tools/@aws-cdk/construct-metadata-updater/lib/metadata-updater.ts (1 line):
	- line 433: // TODO: maybe use the cache instead


packages/aws-cdk-lib/aws-cloudfront/lib/web-distribution.ts (1 line):
	- line 923: customErrorResponses: props.errorConfigurations, // TODO: validation : https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-cloudfront-distribution-customerrorresponse.html#cfn-cloudfront-distribution-customerrorresponse-errorcachingminttl


packages/aws-cdk-lib/aws-ec2/lib/vpc-flow-logs.ts (1 line):
	- line 180: * TODO: there are other destination options, currently they are


packages/aws-cdk-lib/aws-cloudtrail/lib/cloudtrail.ts (1 line):
	- line 334: // TODO: not all regions support validation. Use service configuration data to fail gracefully


packages/aws-cdk-lib/aws-eks/lib/k8s-manifest.ts (1 line):
	- line 147: RoleArn: provider.roleArn, // TODO: bake into provider's environment


tools/@aws-cdk/prlint/linter-base.ts (1 line):
	- line 209: // FIXME: this function is doing too much at once. We should split this out into separate


packages/aws-cdk-lib/assertions/lib/matcher.ts (1 line):
	- line 322: * FIXME: All of this rendering should have been at the discretion of


packages/@aws-cdk/aws-eks-v2-alpha/lib/cluster.ts (1 line):
	- line 1049: // TODO: revisit logging format