npm - @aws-cdk/integ-runner - Versions diffs - 2.178.2-alpha.0 → 2.180.0-alpha.0 - Mend

@aws-cdk/integ-runner 2.178.2-alpha.0 → 2.180.0-alpha.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Files changed (6) hide show

package/THIRD_PARTY_LICENSES +20 -0
package/lib/index.js +2 -2
package/lib/recommended-feature-flags.json +2 -1
package/lib/runner/runner-base.d.ts +1 -0
package/lib/workers/extract/index.js +1378 -1274
package/package.json +13 -12

package/lib/workers/extract/index.js CHANGED Viewed

@@ -5,6 +5,9 @@ var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
 var __getOwnPropNames = Object.getOwnPropertyNames;
 var __getProtoOf = Object.getPrototypeOf;
 var __hasOwnProp = Object.prototype.hasOwnProperty;
+var __typeError = (msg) => {
+  throw TypeError(msg);
+};
 var __esm = (fn, res) => function __init() {
   return fn && (res = (0, fn[__getOwnPropNames(fn)[0]])(fn = 0)), res;
 };
@@ -32,6 +35,10 @@ var __toESM = (mod, isNodeMode, target) => (target = mod != null ? __create(__ge
   mod
 ));
 var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
+var __accessCheck = (obj, member, msg) => member.has(obj) || __typeError("Cannot " + msg);
+var __privateGet = (obj, member, getter) => (__accessCheck(obj, member, "read from private field"), getter ? getter.call(obj) : member.get(obj));
+var __privateAdd = (obj, member, value) => member.has(obj) ? __typeError("Cannot add the same private member more than once") : member instanceof WeakSet ? member.add(obj) : member.set(obj, value);
+var __privateSet = (obj, member, value, setter) => (__accessCheck(obj, member, "write to private field"), setter ? setter.call(obj, value) : member.set(obj, value), value);
 // ../../../node_modules/workerpool/src/requireFoolWebpack.js
 var require_requireFoolWebpack = __commonJS({
@@ -1771,8 +1778,8 @@ var require_helpers = __commonJS({
     var ValidationError = exports2.ValidationError = function ValidationError2(message, instance, schema, path11, name, argument) {
       if (Array.isArray(path11)) {
         this.path = path11;
-        this.property = path11.reduce(function(sum2, item) {
-          return sum2 + makeSuffix(item);
+        this.property = path11.reduce(function(sum, item) {
+          return sum + makeSuffix(item);
         }, "instance");
       } else if (path11 !== void 0) {
         this.property = path11;
@@ -1871,8 +1878,8 @@ var require_helpers = __commonJS({
       this.options = options;
       if (Array.isArray(path11)) {
         this.path = path11;
-        this.propertyPath = path11.reduce(function(sum2, item) {
-          return sum2 + makeSuffix(item);
+        this.propertyPath = path11.reduce(function(sum, item) {
+          return sum + makeSuffix(item);
         }, "instance");
       } else {
         this.propertyPath = path11;
@@ -1949,16 +1956,16 @@ var require_helpers = __commonJS({
     FORMAT_REGEXPS.regexp = FORMAT_REGEXPS.regex;
     FORMAT_REGEXPS.pattern = FORMAT_REGEXPS.regex;
     FORMAT_REGEXPS.ipv4 = FORMAT_REGEXPS["ip-address"];
-    exports2.isFormat = function isFormat(input, format4, validator) {
-      if (typeof input === "string" && FORMAT_REGEXPS[format4] !== void 0) {
-        if (FORMAT_REGEXPS[format4] instanceof RegExp) {
-          return FORMAT_REGEXPS[format4].test(input);
+    exports2.isFormat = function isFormat(input, format3, validator) {
+      if (typeof input === "string" && FORMAT_REGEXPS[format3] !== void 0) {
+        if (FORMAT_REGEXPS[format3] instanceof RegExp) {
+          return FORMAT_REGEXPS[format3].test(input);
         }
-        if (typeof FORMAT_REGEXPS[format4] === "function") {
-          return FORMAT_REGEXPS[format4](input);
+        if (typeof FORMAT_REGEXPS[format3] === "function") {
+          return FORMAT_REGEXPS[format3](input);
         }
-      } else if (validator && validator.customFormats && typeof validator.customFormats[format4] === "function") {
-        return validator.customFormats[format4](input);
+      } else if (validator && validator.customFormats && typeof validator.customFormats[format3] === "function") {
+        return validator.customFormats[format3](input);
       }
       return true;
     };
@@ -3625,16 +3632,16 @@ var require_prerelease = __commonJS({
 var require_compare = __commonJS({
   "../../../node_modules/@aws-cdk/cloud-assembly-schema/node_modules/semver/functions/compare.js"(exports2, module2) {
     var SemVer = require_semver();
-    var compare2 = (a, b, loose) => new SemVer(a, loose).compare(new SemVer(b, loose));
-    module2.exports = compare2;
+    var compare = (a, b, loose) => new SemVer(a, loose).compare(new SemVer(b, loose));
+    module2.exports = compare;
   }
 });
 // ../../../node_modules/@aws-cdk/cloud-assembly-schema/node_modules/semver/functions/rcompare.js
 var require_rcompare = __commonJS({
   "../../../node_modules/@aws-cdk/cloud-assembly-schema/node_modules/semver/functions/rcompare.js"(exports2, module2) {
-    var compare2 = require_compare();
-    var rcompare = (a, b, loose) => compare2(b, a, loose);
+    var compare = require_compare();
+    var rcompare = (a, b, loose) => compare(b, a, loose);
     module2.exports = rcompare;
   }
 });
@@ -3642,8 +3649,8 @@ var require_rcompare = __commonJS({
 // ../../../node_modules/@aws-cdk/cloud-assembly-schema/node_modules/semver/functions/compare-loose.js
 var require_compare_loose = __commonJS({
   "../../../node_modules/@aws-cdk/cloud-assembly-schema/node_modules/semver/functions/compare-loose.js"(exports2, module2) {
-    var compare2 = require_compare();
-    var compareLoose = (a, b) => compare2(a, b, true);
+    var compare = require_compare();
+    var compareLoose = (a, b) => compare(a, b, true);
     module2.exports = compareLoose;
   }
 });
@@ -3682,8 +3689,8 @@ var require_rsort = __commonJS({
 // ../../../node_modules/@aws-cdk/cloud-assembly-schema/node_modules/semver/functions/gt.js
 var require_gt = __commonJS({
   "../../../node_modules/@aws-cdk/cloud-assembly-schema/node_modules/semver/functions/gt.js"(exports2, module2) {
-    var compare2 = require_compare();
-    var gt = (a, b, loose) => compare2(a, b, loose) > 0;
+    var compare = require_compare();
+    var gt = (a, b, loose) => compare(a, b, loose) > 0;
     module2.exports = gt;
   }
 });
@@ -3691,8 +3698,8 @@ var require_gt = __commonJS({
 // ../../../node_modules/@aws-cdk/cloud-assembly-schema/node_modules/semver/functions/lt.js
 var require_lt = __commonJS({
   "../../../node_modules/@aws-cdk/cloud-assembly-schema/node_modules/semver/functions/lt.js"(exports2, module2) {
-    var compare2 = require_compare();
-    var lt = (a, b, loose) => compare2(a, b, loose) < 0;
+    var compare = require_compare();
+    var lt = (a, b, loose) => compare(a, b, loose) < 0;
     module2.exports = lt;
   }
 });
@@ -3700,8 +3707,8 @@ var require_lt = __commonJS({
 // ../../../node_modules/@aws-cdk/cloud-assembly-schema/node_modules/semver/functions/eq.js
 var require_eq = __commonJS({
   "../../../node_modules/@aws-cdk/cloud-assembly-schema/node_modules/semver/functions/eq.js"(exports2, module2) {
-    var compare2 = require_compare();
-    var eq = (a, b, loose) => compare2(a, b, loose) === 0;
+    var compare = require_compare();
+    var eq = (a, b, loose) => compare(a, b, loose) === 0;
     module2.exports = eq;
   }
 });
@@ -3709,8 +3716,8 @@ var require_eq = __commonJS({
 // ../../../node_modules/@aws-cdk/cloud-assembly-schema/node_modules/semver/functions/neq.js
 var require_neq = __commonJS({
   "../../../node_modules/@aws-cdk/cloud-assembly-schema/node_modules/semver/functions/neq.js"(exports2, module2) {
-    var compare2 = require_compare();
-    var neq = (a, b, loose) => compare2(a, b, loose) !== 0;
+    var compare = require_compare();
+    var neq = (a, b, loose) => compare(a, b, loose) !== 0;
     module2.exports = neq;
   }
 });
@@ -3718,8 +3725,8 @@ var require_neq = __commonJS({
 // ../../../node_modules/@aws-cdk/cloud-assembly-schema/node_modules/semver/functions/gte.js
 var require_gte = __commonJS({
   "../../../node_modules/@aws-cdk/cloud-assembly-schema/node_modules/semver/functions/gte.js"(exports2, module2) {
-    var compare2 = require_compare();
-    var gte = (a, b, loose) => compare2(a, b, loose) >= 0;
+    var compare = require_compare();
+    var gte = (a, b, loose) => compare(a, b, loose) >= 0;
     module2.exports = gte;
   }
 });
@@ -3727,8 +3734,8 @@ var require_gte = __commonJS({
 // ../../../node_modules/@aws-cdk/cloud-assembly-schema/node_modules/semver/functions/lte.js
 var require_lte = __commonJS({
   "../../../node_modules/@aws-cdk/cloud-assembly-schema/node_modules/semver/functions/lte.js"(exports2, module2) {
-    var compare2 = require_compare();
-    var lte = (a, b, loose) => compare2(a, b, loose) <= 0;
+    var compare = require_compare();
+    var lte = (a, b, loose) => compare(a, b, loose) <= 0;
     module2.exports = lte;
   }
 });
@@ -4608,12 +4615,12 @@ var require_intersects = __commonJS({
 var require_simplify = __commonJS({
   "../../../node_modules/@aws-cdk/cloud-assembly-schema/node_modules/semver/ranges/simplify.js"(exports2, module2) {
     var satisfies = require_satisfies();
-    var compare2 = require_compare();
+    var compare = require_compare();
     module2.exports = (versions, range, options) => {
       const set = [];
       let first = null;
       let prev = null;
-      const v = versions.sort((a, b) => compare2(a, b, options));
+      const v = versions.sort((a, b) => compare(a, b, options));
       for (const version of v) {
         const included = satisfies(version, range, options);
         if (included) {
@@ -4660,7 +4667,7 @@ var require_subset = __commonJS({
     var Comparator = require_comparator();
     var { ANY } = Comparator;
     var satisfies = require_satisfies();
-    var compare2 = require_compare();
+    var compare = require_compare();
     var subset = (sub, dom, options = {}) => {
       if (sub === dom) {
         return true;
@@ -4720,7 +4727,7 @@ var require_subset = __commonJS({
       }
       let gtltComp;
       if (gt && lt) {
-        gtltComp = compare2(gt.semver, lt.semver, options);
+        gtltComp = compare(gt.semver, lt.semver, options);
         if (gtltComp > 0) {
           return null;
         } else if (gtltComp === 0 && (gt.operator !== ">=" || lt.operator !== "<=")) {
@@ -4800,14 +4807,14 @@ var require_subset = __commonJS({
       if (!a) {
         return b;
       }
-      const comp = compare2(a.semver, b.semver, options);
+      const comp = compare(a.semver, b.semver, options);
       return comp > 0 ? a : comp < 0 ? b : b.operator === ">" && a.operator === ">=" ? b : a;
     };
     var lowerLT = (a, b, options) => {
       if (!a) {
         return b;
       }
-      const comp = compare2(a.semver, b.semver, options);
+      const comp = compare(a.semver, b.semver, options);
       return comp < 0 ? a : comp > 0 ? b : b.operator === "<" && a.operator === "<=" ? b : a;
     };
     module2.exports = subset;
@@ -4830,7 +4837,7 @@ var require_semver2 = __commonJS({
     var minor = require_minor();
     var patch = require_patch();
     var prerelease = require_prerelease();
-    var compare2 = require_compare();
+    var compare = require_compare();
     var rcompare = require_rcompare();
     var compareLoose = require_compare_loose();
     var compareBuild = require_compare_build();
@@ -4868,7 +4875,7 @@ var require_semver2 = __commonJS({
       minor,
       patch,
       prerelease,
-      compare: compare2,
+      compare,
       rcompare,
       compareLoose,
       compareBuild,
@@ -7128,6 +7135,36 @@ var require_lib3 = __commonJS({
   }
 });
+// ../cx-api/lib/private/error.ts
+var ASSEMBLY_ERROR_SYMBOL, _time, _CloudAssemblyError, CloudAssemblyError;
+var init_error = __esm({
+  "../cx-api/lib/private/error.ts"() {
+    "use strict";
+    ASSEMBLY_ERROR_SYMBOL = Symbol.for("@aws-cdk/cx-api.CloudAssemblyError");
+    _CloudAssemblyError = class _CloudAssemblyError extends Error {
+      constructor(msg) {
+        super(msg);
+        __privateAdd(this, _time);
+        Object.setPrototypeOf(this, _CloudAssemblyError.prototype);
+        Object.defineProperty(this, ASSEMBLY_ERROR_SYMBOL, { value: true });
+        this.name = new.target.name;
+        __privateSet(this, _time, (/* @__PURE__ */ new Date()).toISOString());
+      }
+      /**
+       * The time the error was thrown.
+       */
+      get time() {
+        return __privateGet(this, _time);
+      }
+      get type() {
+        return "assembly";
+      }
+    };
+    _time = new WeakMap();
+    CloudAssemblyError = _CloudAssemblyError;
+  }
+});
 // ../cx-api/lib/cloud-artifact.ts
 var cloud_artifact_exports = {};
 __export(cloud_artifact_exports, {
@@ -7139,6 +7176,7 @@ var init_cloud_artifact = __esm({
     "use strict";
     init_metadata();
     cxschema = __toESM(require_lib3());
+    init_error();
     CloudArtifact = class {
       constructor(assembly, id, manifest) {
         this.assembly = assembly;
@@ -7156,8 +7194,8 @@ var init_cloud_artifact = __esm({
        * @returns the `CloudArtifact` that matches the artifact type or `undefined` if it's an artifact type that is unrecognized by this module.
        */
       static fromManifest(assembly, id, artifact) {
-        void 0, void 0, void 0;
-        throw new Error("Implementation not overridden yet");
+        void assembly, void id, void artifact;
+        throw new CloudAssemblyError("Implementation not overridden yet");
       }
       /**
        * Returns all the artifacts that this artifact depends on.
@@ -7169,7 +7207,7 @@ var init_cloud_artifact = __esm({
         this._deps = this._dependencyIDs.map((id) => {
           const dep = this.assembly.tryGetArtifact(id);
           if (!dep) {
-            throw new Error(`Artifact ${this.id} depends on non-existing artifact ${id}`);
+            throw new CloudAssemblyError(`Artifact ${this.id} depends on non-existing artifact ${id}`);
           }
           return dep;
         });
@@ -7236,6 +7274,7 @@ var init_asset_manifest_artifact = __esm({
     fs = __toESM(require("fs"));
     path = __toESM(require("path"));
     init_cloud_artifact();
+    init_error();
     ASSET_MANIFEST_ARTIFACT_SYM = Symbol.for("@aws-cdk/cx-api.AssetManifestArtifact");
     AssetManifestArtifact = class extends CloudArtifact {
       /**
@@ -7262,7 +7301,7 @@ var init_asset_manifest_artifact = __esm({
         super(assembly, name, artifact);
         const properties = this.manifest.properties || {};
         if (!properties.file) {
-          throw new Error('Invalid AssetManifestArtifact. Missing "file" property');
+          throw new CloudAssemblyError('Invalid AssetManifestArtifact. Missing "file" property');
         }
         this.file = path.resolve(this.assembly.directory, properties.file);
         this.requiresBootstrapStackVersion = properties.requiresBootstrapStackVersion;
@@ -7298,6 +7337,7 @@ var AWS_ENV_REGEX, UNKNOWN_ACCOUNT, UNKNOWN_REGION, EnvironmentUtils;
 var init_environment = __esm({
   "../cx-api/lib/environment.ts"() {
     "use strict";
+    init_error();
     AWS_ENV_REGEX = /aws\:\/\/([a-z0-9A-Z\-\@\.\_]+)\/([a-z\-0-9]+)/;
     UNKNOWN_ACCOUNT = "unknown-account";
     UNKNOWN_REGION = "unknown-region";
@@ -7305,13 +7345,13 @@ var init_environment = __esm({
       static parse(environment) {
         const env = AWS_ENV_REGEX.exec(environment);
         if (!env) {
-          throw new Error(
+          throw new CloudAssemblyError(
             `Unable to parse environment specification "${environment}". Expected format: aws://account/region`
           );
         }
         const [, account, region] = env;
         if (!account || !region) {
-          throw new Error(`Invalid environment specification: ${environment}`);
+          throw new CloudAssemblyError(`Invalid environment specification: ${environment}`);
         }
         return { account, region, name: environment };
       }
@@ -7345,6 +7385,7 @@ var init_cloudformation_artifact = __esm({
     cxschema2 = __toESM(require_lib3());
     init_cloud_artifact();
     init_environment();
+    init_error();
     CLOUDFORMATION_STACK_ARTIFACT_SYM = Symbol.for("@aws-cdk/cx-api.CloudFormationStackArtifact");
     CloudFormationStackArtifact = class extends CloudArtifact {
       /**
@@ -7371,10 +7412,10 @@ var init_cloudformation_artifact = __esm({
         super(assembly, artifactId, artifact);
         const properties = this.manifest.properties || {};
         if (!properties.templateFile) {
-          throw new Error('Invalid CloudFormation stack artifact. Missing "templateFile" property in cloud assembly manifest');
+          throw new CloudAssemblyError('Invalid CloudFormation stack artifact. Missing "templateFile" property in cloud assembly manifest');
         }
         if (!artifact.environment) {
-          throw new Error("Invalid CloudFormation stack artifact. Missing environment");
+          throw new CloudAssemblyError("Invalid CloudFormation stack artifact. Missing environment");
         }
         this.environment = EnvironmentUtils.parse(artifact.environment);
         this.templateFile = properties.templateFile;
@@ -7494,6 +7535,7 @@ var init_tree_cloud_artifact = __esm({
   "../cx-api/lib/artifacts/tree-cloud-artifact.ts"() {
     "use strict";
     init_cloud_artifact();
+    init_error();
     TREE_CLOUD_ARTIFACT_SYM = Symbol.for("@aws-cdk/cx-api.TreeCloudArtifact");
     TreeCloudArtifact = class extends CloudArtifact {
       /**
@@ -7520,7 +7562,7 @@ var init_tree_cloud_artifact = __esm({
         super(assembly, name, artifact);
         const properties = this.manifest.properties || {};
         if (!properties.file) {
-          throw new Error('Invalid TreeCloudArtifact. Missing "file" property');
+          throw new CloudAssemblyError('Invalid TreeCloudArtifact. Missing "file" property');
         }
         this.file = properties.file;
       }
@@ -7578,7 +7620,7 @@ function topologicalSort(xs, keyFn, depFn) {
       remaining.delete(selected.key);
     }
     if (selectable.length === 0) {
-      throw new Error(`Could not determine ordering between: ${Array.from(remaining.keys()).join(", ")}`);
+      throw new CloudAssemblyError(`Could not determine ordering between: ${Array.from(remaining.keys()).join(", ")}`);
     }
   }
   return ret;
@@ -7586,6 +7628,7 @@ function topologicalSort(xs, keyFn, depFn) {
 var init_toposort = __esm({
   "../cx-api/lib/toposort.ts"() {
     "use strict";
+    init_error();
   }
 });
@@ -7620,7 +7663,7 @@ function determineOutputDirectory(outdir) {
 function ensureDirSync(dir) {
   if (fs3.existsSync(dir)) {
     if (!fs3.statSync(dir).isDirectory()) {
-      throw new Error(`${dir} must be a directory`);
+      throw new CloudAssemblyError(`${dir} must be a directory`);
     }
   } else {
     fs3.mkdirSync(dir, { recursive: true });
@@ -7639,6 +7682,7 @@ var init_cloud_assembly = __esm({
     init_cloud_artifact();
     init_toposort();
     cxschema4 = __toESM(require_lib3());
+    init_error();
     CLOUD_ASSEMBLY_SYMBOL = Symbol.for("@aws-cdk/cx-api.CloudAssembly");
     MANIFEST_FILE = "manifest.json";
     CloudAssembly = class {
@@ -7685,10 +7729,10 @@ var init_cloud_assembly = __esm({
       getStackByName(stackName) {
         const artifacts = this.artifacts.filter((a) => a instanceof CloudFormationStackArtifact && a.stackName === stackName);
         if (!artifacts || artifacts.length === 0) {
-          throw new Error(`Unable to find stack with stack name "${stackName}"`);
+          throw new CloudAssemblyError(`Unable to find stack with stack name "${stackName}"`);
         }
         if (artifacts.length > 1) {
-          throw new Error(`There are multiple stacks with the stack name "${stackName}" (${artifacts.map((a) => a.id).join(",")}). Use "getStackArtifact(id)" instead`);
+          throw new CloudAssemblyError(`There are multiple stacks with the stack name "${stackName}" (${artifacts.map((a) => a.id).join(",")}). Use "getStackArtifact(id)" instead`);
         }
         return artifacts[0];
       }
@@ -7709,10 +7753,10 @@ var init_cloud_assembly = __esm({
       getStackArtifact(artifactId) {
         const artifact = this.tryGetArtifactRecursively(artifactId);
         if (!artifact) {
-          throw new Error(`Unable to find artifact with id "${artifactId}"`);
+          throw new CloudAssemblyError(`Unable to find artifact with id "${artifactId}"`);
         }
         if (!(artifact instanceof CloudFormationStackArtifact)) {
-          throw new Error(`Artifact ${artifactId} is not a CloudFormation stack`);
+          throw new CloudAssemblyError(`Artifact ${artifactId} is not a CloudFormation stack`);
         }
         return artifact;
       }
@@ -7741,10 +7785,10 @@ var init_cloud_assembly = __esm({
       getNestedAssemblyArtifact(artifactId) {
         const artifact = this.tryGetArtifact(artifactId);
         if (!artifact) {
-          throw new Error(`Unable to find artifact with id "${artifactId}"`);
+          throw new CloudAssemblyError(`Unable to find artifact with id "${artifactId}"`);
         }
         if (!(artifact instanceof NestedCloudAssemblyArtifact)) {
-          throw new Error(`Found artifact '${artifactId}' but it's not a nested cloud assembly`);
+          throw new CloudAssemblyError(`Found artifact '${artifactId}' but it's not a nested cloud assembly`);
         }
         return artifact;
       }
@@ -7766,11 +7810,11 @@ var init_cloud_assembly = __esm({
         if (trees.length === 0) {
           return void 0;
         } else if (trees.length > 1) {
-          throw new Error(`Multiple artifacts of type ${cxschema4.ArtifactType.CDK_TREE} found in manifest`);
+          throw new CloudAssemblyError(`Multiple artifacts of type ${cxschema4.ArtifactType.CDK_TREE} found in manifest`);
         }
         const tree = trees[0];
         if (!(tree instanceof TreeCloudArtifact)) {
-          throw new Error('"Tree" artifact is not of expected type');
+          throw new CloudAssemblyError('"Tree" artifact is not of expected type');
         }
         return tree;
       }
@@ -8015,6 +8059,7 @@ __export(features_exports, {
   KMS_ALIAS_NAME_REF: () => KMS_ALIAS_NAME_REF,
   KMS_DEFAULT_KEY_POLICIES: () => KMS_DEFAULT_KEY_POLICIES,
   KMS_REDUCE_CROSS_ACCOUNT_REGION_POLICY_SCOPE: () => KMS_REDUCE_CROSS_ACCOUNT_REGION_POLICY_SCOPE,
+  LAMBDA_CREATE_NEW_POLICIES_WITH_ADDTOROLEPOLICY: () => LAMBDA_CREATE_NEW_POLICIES_WITH_ADDTOROLEPOLICY,
   LAMBDA_NODEJS_SDK_V3_EXCLUDE_SMITHY_PACKAGES: () => LAMBDA_NODEJS_SDK_V3_EXCLUDE_SMITHY_PACKAGES,
   LAMBDA_NODEJS_USE_LATEST_RUNTIME: () => LAMBDA_NODEJS_USE_LATEST_RUNTIME,
   LAMBDA_PERMISSION_LOGICAL_ID_FOR_LAMBDA_ACTION: () => LAMBDA_PERMISSION_LOGICAL_ID_FOR_LAMBDA_ACTION,
@@ -8052,7 +8097,7 @@ function futureFlagDefault(flag) {
   }
   return value;
 }
-var ENABLE_STACK_NAME_DUPLICATES_CONTEXT, ENABLE_DIFF_NO_FAIL_CONTEXT, ENABLE_DIFF_NO_FAIL, NEW_STYLE_STACK_SYNTHESIS_CONTEXT, STACK_RELATIVE_EXPORTS_CONTEXT, DOCKER_IGNORE_SUPPORT, SECRETS_MANAGER_PARSE_OWNED_SECRET_NAME, KMS_DEFAULT_KEY_POLICIES, S3_GRANT_WRITE_WITHOUT_ACL, ECS_REMOVE_DEFAULT_DESIRED_COUNT, RDS_LOWERCASE_DB_IDENTIFIER, APIGATEWAY_USAGEPLANKEY_ORDERINSENSITIVE_ID, EFS_DEFAULT_ENCRYPTION_AT_REST, LAMBDA_RECOGNIZE_VERSION_PROPS, LAMBDA_RECOGNIZE_LAYER_VERSION, CLOUDFRONT_DEFAULT_SECURITY_POLICY_TLS_V1_2_2021, CHECK_SECRET_USAGE, TARGET_PARTITIONS, ECS_SERVICE_EXTENSIONS_ENABLE_DEFAULT_LOG_DRIVER, EC2_UNIQUE_IMDSV2_LAUNCH_TEMPLATE_NAME, ECS_ARN_FORMAT_INCLUDES_CLUSTER_NAME, IAM_MINIMIZE_POLICIES, IAM_IMPORTED_ROLE_STACK_SAFE_DEFAULT_POLICY_NAME, VALIDATE_SNAPSHOT_REMOVAL_POLICY, CODEPIPELINE_CROSS_ACCOUNT_KEY_ALIAS_STACK_SAFE_RESOURCE_NAME, S3_CREATE_DEFAULT_LOGGING_POLICY, SNS_SUBSCRIPTIONS_SQS_DECRYPTION_POLICY, APIGATEWAY_DISABLE_CLOUDWATCH_ROLE, ENABLE_PARTITION_LITERALS, EVENTS_TARGET_QUEUE_SAME_ACCOUNT, ECS_DISABLE_EXPLICIT_DEPLOYMENT_CONTROLLER_FOR_CIRCUIT_BREAKER, S3_SERVER_ACCESS_LOGS_USE_BUCKET_POLICY, ROUTE53_PATTERNS_USE_CERTIFICATE, AWS_CUSTOM_RESOURCE_LATEST_SDK_DEFAULT, DATABASE_PROXY_UNIQUE_RESOURCE_NAME, CODEDEPLOY_REMOVE_ALARMS_FROM_DEPLOYMENT_GROUP, APIGATEWAY_AUTHORIZER_CHANGE_DEPLOYMENT_LOGICAL_ID, EC2_LAUNCH_TEMPLATE_DEFAULT_USER_DATA, SECRETS_MANAGER_TARGET_ATTACHMENT_RESOURCE_POLICY, REDSHIFT_COLUMN_ID, ENABLE_EMR_SERVICE_POLICY_V2, EC2_RESTRICT_DEFAULT_SECURITY_GROUP, APIGATEWAY_REQUEST_VALIDATOR_UNIQUE_ID, INCLUDE_PREFIX_IN_UNIQUE_NAME_GENERATION, KMS_ALIAS_NAME_REF, EFS_DENY_ANONYMOUS_ACCESS, EFS_MOUNTTARGET_ORDERINSENSITIVE_LOGICAL_ID, AUTOSCALING_GENERATE_LAUNCH_TEMPLATE, ENABLE_OPENSEARCH_MULTIAZ_WITH_STANDBY, LAMBDA_NODEJS_USE_LATEST_RUNTIME, RDS_PREVENT_RENDERING_DEPRECATED_CREDENTIALS, AURORA_CLUSTER_CHANGE_SCOPE_OF_INSTANCE_PARAMETER_GROUP_WITH_EACH_PARAMETERS, APPSYNC_ENABLE_USE_ARN_IDENTIFIER_SOURCE_API_ASSOCIATION, CODECOMMIT_SOURCE_ACTION_DEFAULT_BRANCH_NAME, LAMBDA_PERMISSION_LOGICAL_ID_FOR_LAMBDA_ACTION, CODEPIPELINE_CROSS_ACCOUNT_KEYS_DEFAULT_VALUE_TO_FALSE, CODEPIPELINE_DEFAULT_PIPELINE_TYPE_TO_V2, KMS_REDUCE_CROSS_ACCOUNT_REGION_POLICY_SCOPE, PIPELINE_REDUCE_ASSET_ROLE_TRUST_SCOPE, EKS_NODEGROUP_NAME, EBS_DEFAULT_GP3, ECS_REMOVE_DEFAULT_DEPLOYMENT_ALARM, LOG_API_RESPONSE_DATA_PROPERTY_TRUE_DEFAULT, S3_KEEP_NOTIFICATION_IN_IMPORTED_BUCKET, USE_NEW_S3URI_PARAMETERS_FOR_BEDROCK_INVOKE_MODEL_TASK, REDUCE_EC2_FARGATE_CLOUDWATCH_PERMISSIONS, DYNAMODB_TABLEV2_RESOURCE_POLICY_PER_REPLICA, EC2_SUM_TIMEOUT_ENABLED, APPSYNC_GRAPHQLAPI_SCOPE_LAMBDA_FUNCTION_PERMISSION, USE_CORRECT_VALUE_FOR_INSTANCE_RESOURCE_ID_PROPERTY, CFN_INCLUDE_REJECT_COMPLEX_RESOURCE_UPDATE_CREATE_POLICY_INTRINSICS, LAMBDA_NODEJS_SDK_V3_EXCLUDE_SMITHY_PACKAGES, STEPFUNCTIONS_TASKS_FIX_RUN_ECS_TASK_POLICY, BASTION_HOST_USE_AMAZON_LINUX_2023_BY_DEFAULT, ASPECT_STABILIZATION, USER_POOL_DOMAIN_NAME_METHOD_WITHOUT_CUSTOM_RESOURCE, Enable_IMDS_Blocking_Deprecated_Feature, Disable_ECS_IMDS_Blocking, ALB_DUALSTACK_WITHOUT_PUBLIC_IPV4_SECURITY_GROUP_RULES_DEFAULT, IAM_OIDC_REJECT_UNAUTHORIZED_CONNECTIONS, ENABLE_ADDITIONAL_METADATA_COLLECTION, FLAGS, CURRENT_MV, CURRENT_VERSION_EXPIRED_FLAGS, CURRENTLY_RECOMMENDED_FLAGS, CURRENT_VERSION_FLAG_DEFAULTS, FUTURE_FLAGS_EXPIRED, FUTURE_FLAGS, NEW_PROJECT_DEFAULT_CONTEXT;
+var ENABLE_STACK_NAME_DUPLICATES_CONTEXT, ENABLE_DIFF_NO_FAIL_CONTEXT, ENABLE_DIFF_NO_FAIL, NEW_STYLE_STACK_SYNTHESIS_CONTEXT, STACK_RELATIVE_EXPORTS_CONTEXT, DOCKER_IGNORE_SUPPORT, SECRETS_MANAGER_PARSE_OWNED_SECRET_NAME, KMS_DEFAULT_KEY_POLICIES, S3_GRANT_WRITE_WITHOUT_ACL, ECS_REMOVE_DEFAULT_DESIRED_COUNT, RDS_LOWERCASE_DB_IDENTIFIER, APIGATEWAY_USAGEPLANKEY_ORDERINSENSITIVE_ID, EFS_DEFAULT_ENCRYPTION_AT_REST, LAMBDA_RECOGNIZE_VERSION_PROPS, LAMBDA_RECOGNIZE_LAYER_VERSION, CLOUDFRONT_DEFAULT_SECURITY_POLICY_TLS_V1_2_2021, CHECK_SECRET_USAGE, TARGET_PARTITIONS, ECS_SERVICE_EXTENSIONS_ENABLE_DEFAULT_LOG_DRIVER, EC2_UNIQUE_IMDSV2_LAUNCH_TEMPLATE_NAME, ECS_ARN_FORMAT_INCLUDES_CLUSTER_NAME, IAM_MINIMIZE_POLICIES, IAM_IMPORTED_ROLE_STACK_SAFE_DEFAULT_POLICY_NAME, VALIDATE_SNAPSHOT_REMOVAL_POLICY, CODEPIPELINE_CROSS_ACCOUNT_KEY_ALIAS_STACK_SAFE_RESOURCE_NAME, S3_CREATE_DEFAULT_LOGGING_POLICY, SNS_SUBSCRIPTIONS_SQS_DECRYPTION_POLICY, APIGATEWAY_DISABLE_CLOUDWATCH_ROLE, ENABLE_PARTITION_LITERALS, EVENTS_TARGET_QUEUE_SAME_ACCOUNT, ECS_DISABLE_EXPLICIT_DEPLOYMENT_CONTROLLER_FOR_CIRCUIT_BREAKER, S3_SERVER_ACCESS_LOGS_USE_BUCKET_POLICY, ROUTE53_PATTERNS_USE_CERTIFICATE, AWS_CUSTOM_RESOURCE_LATEST_SDK_DEFAULT, DATABASE_PROXY_UNIQUE_RESOURCE_NAME, CODEDEPLOY_REMOVE_ALARMS_FROM_DEPLOYMENT_GROUP, APIGATEWAY_AUTHORIZER_CHANGE_DEPLOYMENT_LOGICAL_ID, EC2_LAUNCH_TEMPLATE_DEFAULT_USER_DATA, SECRETS_MANAGER_TARGET_ATTACHMENT_RESOURCE_POLICY, REDSHIFT_COLUMN_ID, ENABLE_EMR_SERVICE_POLICY_V2, EC2_RESTRICT_DEFAULT_SECURITY_GROUP, APIGATEWAY_REQUEST_VALIDATOR_UNIQUE_ID, INCLUDE_PREFIX_IN_UNIQUE_NAME_GENERATION, KMS_ALIAS_NAME_REF, EFS_DENY_ANONYMOUS_ACCESS, EFS_MOUNTTARGET_ORDERINSENSITIVE_LOGICAL_ID, AUTOSCALING_GENERATE_LAUNCH_TEMPLATE, ENABLE_OPENSEARCH_MULTIAZ_WITH_STANDBY, LAMBDA_NODEJS_USE_LATEST_RUNTIME, RDS_PREVENT_RENDERING_DEPRECATED_CREDENTIALS, AURORA_CLUSTER_CHANGE_SCOPE_OF_INSTANCE_PARAMETER_GROUP_WITH_EACH_PARAMETERS, APPSYNC_ENABLE_USE_ARN_IDENTIFIER_SOURCE_API_ASSOCIATION, CODECOMMIT_SOURCE_ACTION_DEFAULT_BRANCH_NAME, LAMBDA_PERMISSION_LOGICAL_ID_FOR_LAMBDA_ACTION, CODEPIPELINE_CROSS_ACCOUNT_KEYS_DEFAULT_VALUE_TO_FALSE, CODEPIPELINE_DEFAULT_PIPELINE_TYPE_TO_V2, KMS_REDUCE_CROSS_ACCOUNT_REGION_POLICY_SCOPE, PIPELINE_REDUCE_ASSET_ROLE_TRUST_SCOPE, EKS_NODEGROUP_NAME, EBS_DEFAULT_GP3, ECS_REMOVE_DEFAULT_DEPLOYMENT_ALARM, LOG_API_RESPONSE_DATA_PROPERTY_TRUE_DEFAULT, S3_KEEP_NOTIFICATION_IN_IMPORTED_BUCKET, USE_NEW_S3URI_PARAMETERS_FOR_BEDROCK_INVOKE_MODEL_TASK, REDUCE_EC2_FARGATE_CLOUDWATCH_PERMISSIONS, DYNAMODB_TABLEV2_RESOURCE_POLICY_PER_REPLICA, EC2_SUM_TIMEOUT_ENABLED, APPSYNC_GRAPHQLAPI_SCOPE_LAMBDA_FUNCTION_PERMISSION, USE_CORRECT_VALUE_FOR_INSTANCE_RESOURCE_ID_PROPERTY, CFN_INCLUDE_REJECT_COMPLEX_RESOURCE_UPDATE_CREATE_POLICY_INTRINSICS, LAMBDA_NODEJS_SDK_V3_EXCLUDE_SMITHY_PACKAGES, STEPFUNCTIONS_TASKS_FIX_RUN_ECS_TASK_POLICY, BASTION_HOST_USE_AMAZON_LINUX_2023_BY_DEFAULT, ASPECT_STABILIZATION, USER_POOL_DOMAIN_NAME_METHOD_WITHOUT_CUSTOM_RESOURCE, Enable_IMDS_Blocking_Deprecated_Feature, Disable_ECS_IMDS_Blocking, ALB_DUALSTACK_WITHOUT_PUBLIC_IPV4_SECURITY_GROUP_RULES_DEFAULT, IAM_OIDC_REJECT_UNAUTHORIZED_CONNECTIONS, ENABLE_ADDITIONAL_METADATA_COLLECTION, LAMBDA_CREATE_NEW_POLICIES_WITH_ADDTOROLEPOLICY, FLAGS, CURRENT_MV, CURRENT_VERSION_EXPIRED_FLAGS, CURRENTLY_RECOMMENDED_FLAGS, CURRENT_VERSION_FLAG_DEFAULTS, FUTURE_FLAGS_EXPIRED, FUTURE_FLAGS, NEW_PROJECT_DEFAULT_CONTEXT;
 var init_features = __esm({
   "../cx-api/lib/features.ts"() {
     "use strict";
@@ -8138,6 +8183,7 @@ var init_features = __esm({
     ALB_DUALSTACK_WITHOUT_PUBLIC_IPV4_SECURITY_GROUP_RULES_DEFAULT = "@aws-cdk/aws-elasticloadbalancingV2:albDualstackWithoutPublicIpv4SecurityGroupRulesDefault";
     IAM_OIDC_REJECT_UNAUTHORIZED_CONNECTIONS = "@aws-cdk/aws-iam:oidcRejectUnauthorizedConnections";
     ENABLE_ADDITIONAL_METADATA_COLLECTION = "@aws-cdk/core:enableAdditionalMetadataCollection";
+    LAMBDA_CREATE_NEW_POLICIES_WITH_ADDTOROLEPOLICY = "@aws-cdk/aws-lambda:createNewPoliciesWithAddToRolePolicy";
     FLAGS = {
       //////////////////////////////////////////////////////////////////////
       [ENABLE_STACK_NAME_DUPLICATES_CONTEXT]: {
@@ -9315,6 +9361,18 @@ var init_features = __esm({
     `,
         introducedIn: { v2: "2.178.0" },
         recommendedValue: true
+      },
+      //////////////////////////////////////////////////////////////////////
+      [LAMBDA_CREATE_NEW_POLICIES_WITH_ADDTOROLEPOLICY]: {
+        type: 1 /* BugFix */,
+        summary: "When enabled, Lambda will create new inline policies with AddToRolePolicy instead of adding to the Default Policy Statement",
+        detailsMd: `
+      When this feature flag is enabled, Lambda will create new inline policies with AddToRolePolicy.
+      The purpose of this is to prevent lambda from creating a dependency on the Default Policy Statement.
+      This solves an issue where a circular dependency could occur if adding lambda to something like a Cognito Trigger, then adding the User Pool to the lambda execution role permissions.
+    `,
+        introducedIn: { v2: "2.180.0" },
+        recommendedValue: true
       }
     };
     CURRENT_MV = "v2";
@@ -12308,6 +12366,7 @@ __export(recommended_feature_flags_exports, {
   "@aws-cdk/aws-kms:reduceCrossAccountRegionPolicyScope": () => _aws_cdk_aws_kms_reduceCrossAccountRegionPolicyScope,
   "@aws-cdk/aws-lambda-nodejs:sdkV3ExcludeSmithyPackages": () => _aws_cdk_aws_lambda_nodejs_sdkV3ExcludeSmithyPackages,
   "@aws-cdk/aws-lambda-nodejs:useLatestRuntimeVersion": () => _aws_cdk_aws_lambda_nodejs_useLatestRuntimeVersion,
+  "@aws-cdk/aws-lambda:createNewPoliciesWithAddToRolePolicy": () => _aws_cdk_aws_lambda_createNewPoliciesWithAddToRolePolicy,
   "@aws-cdk/aws-lambda:recognizeLayerVersion": () => _aws_cdk_aws_lambda_recognizeLayerVersion,
   "@aws-cdk/aws-opensearchservice:enableOpensearchMultiAzWithStandby": () => _aws_cdk_aws_opensearchservice_enableOpensearchMultiAzWithStandby,
   "@aws-cdk/aws-rds:auroraClusterChangeScopeOfInstanceParameterGroupWithEachParameters": () => _aws_cdk_aws_rds_auroraClusterChangeScopeOfInstanceParameterGroupWithEachParameters,
@@ -12335,7 +12394,7 @@ __export(recommended_feature_flags_exports, {
   "@aws-cdk/customresources:installLatestAwsSdkDefault": () => _aws_cdk_customresources_installLatestAwsSdkDefault,
   default: () => recommended_feature_flags_default
 });
-var _aws_cdk_aws_lambda_recognizeLayerVersion, _aws_cdk_core_checkSecretUsage, _aws_cdk_core_target_partitions, _aws_cdk_containers_ecs_service_extensions_enableDefaultLogDriver, _aws_cdk_aws_ec2_uniqueImdsv2TemplateName, _aws_cdk_aws_ecs_arnFormatIncludesClusterName, _aws_cdk_aws_iam_minimizePolicies, _aws_cdk_core_validateSnapshotRemovalPolicy, _aws_cdk_aws_codepipeline_crossAccountKeyAliasStackSafeResourceName, _aws_cdk_aws_s3_createDefaultLoggingPolicy, _aws_cdk_aws_sns_subscriptions_restrictSqsDescryption, _aws_cdk_aws_apigateway_disableCloudWatchRole, _aws_cdk_core_enablePartitionLiterals, _aws_cdk_aws_events_eventsTargetQueueSameAccount, _aws_cdk_aws_ecs_disableExplicitDeploymentControllerForCircuitBreaker, _aws_cdk_aws_iam_importedRoleStackSafeDefaultPolicyName, _aws_cdk_aws_s3_serverAccessLogsUseBucketPolicy, _aws_cdk_aws_route53_patters_useCertificate, _aws_cdk_customresources_installLatestAwsSdkDefault, _aws_cdk_aws_rds_databaseProxyUniqueResourceName, _aws_cdk_aws_codedeploy_removeAlarmsFromDeploymentGroup, _aws_cdk_aws_apigateway_authorizerChangeDeploymentLogicalId, _aws_cdk_aws_ec2_launchTemplateDefaultUserData, _aws_cdk_aws_secretsmanager_useAttachedSecretResourcePolicyForSecretTargetAttachments, _aws_cdk_aws_redshift_columnId, _aws_cdk_aws_stepfunctions_tasks_enableEmrServicePolicyV2, _aws_cdk_aws_ec2_restrictDefaultSecurityGroup, _aws_cdk_aws_apigateway_requestValidatorUniqueId, _aws_cdk_aws_kms_aliasNameRef, _aws_cdk_aws_autoscaling_generateLaunchTemplateInsteadOfLaunchConfig, _aws_cdk_core_includePrefixInUniqueNameGeneration, _aws_cdk_aws_efs_denyAnonymousAccess, _aws_cdk_aws_opensearchservice_enableOpensearchMultiAzWithStandby, _aws_cdk_aws_lambda_nodejs_useLatestRuntimeVersion, _aws_cdk_aws_efs_mountTargetOrderInsensitiveLogicalId, _aws_cdk_aws_rds_auroraClusterChangeScopeOfInstanceParameterGroupWithEachParameters, _aws_cdk_aws_appsync_useArnForSourceApiAssociationIdentifier, _aws_cdk_aws_rds_preventRenderingDeprecatedCredentials, _aws_cdk_aws_codepipeline_actions_useNewDefaultBranchForCodeCommitSource, _aws_cdk_aws_cloudwatch_actions_changeLambdaPermissionLogicalIdForLambdaAction, _aws_cdk_aws_codepipeline_crossAccountKeysDefaultValueToFalse, _aws_cdk_aws_codepipeline_defaultPipelineTypeToV2, _aws_cdk_aws_kms_reduceCrossAccountRegionPolicyScope, _aws_cdk_aws_eks_nodegroupNameAttribute, _aws_cdk_aws_ec2_ebsDefaultGp3Volume, _aws_cdk_aws_ecs_removeDefaultDeploymentAlarm, _aws_cdk_custom_resources_logApiResponseDataPropertyTrueDefault, _aws_cdk_aws_s3_keepNotificationInImportedBucket, _aws_cdk_aws_ecs_enableImdsBlockingDeprecatedFeature, _aws_cdk_aws_ecs_disableEcsImdsBlocking, _aws_cdk_aws_ecs_reduceEc2FargateCloudWatchPermissions, _aws_cdk_aws_dynamodb_resourcePolicyPerReplica, _aws_cdk_aws_ec2_ec2SumTImeoutEnabled, _aws_cdk_aws_appsync_appSyncGraphQLAPIScopeLambdaPermission, _aws_cdk_aws_rds_setCorrectValueForDatabaseInstanceReadReplicaInstanceResourceId, _aws_cdk_core_cfnIncludeRejectComplexResourceUpdateCreatePolicyIntrinsics, _aws_cdk_aws_lambda_nodejs_sdkV3ExcludeSmithyPackages, _aws_cdk_aws_stepfunctions_tasks_fixRunEcsTaskPolicy, _aws_cdk_aws_ec2_bastionHostUseAmazonLinux2023ByDefault, _aws_cdk_aws_route53_targets_userPoolDomainNameMethodWithoutCustomResource, _aws_cdk_aws_elasticloadbalancingV2_albDualstackWithoutPublicIpv4SecurityGroupRulesDefault, _aws_cdk_aws_iam_oidcRejectUnauthorizedConnections, _aws_cdk_core_enableAdditionalMetadataCollection, recommended_feature_flags_default;
+var _aws_cdk_aws_lambda_recognizeLayerVersion, _aws_cdk_core_checkSecretUsage, _aws_cdk_core_target_partitions, _aws_cdk_containers_ecs_service_extensions_enableDefaultLogDriver, _aws_cdk_aws_ec2_uniqueImdsv2TemplateName, _aws_cdk_aws_ecs_arnFormatIncludesClusterName, _aws_cdk_aws_iam_minimizePolicies, _aws_cdk_core_validateSnapshotRemovalPolicy, _aws_cdk_aws_codepipeline_crossAccountKeyAliasStackSafeResourceName, _aws_cdk_aws_s3_createDefaultLoggingPolicy, _aws_cdk_aws_sns_subscriptions_restrictSqsDescryption, _aws_cdk_aws_apigateway_disableCloudWatchRole, _aws_cdk_core_enablePartitionLiterals, _aws_cdk_aws_events_eventsTargetQueueSameAccount, _aws_cdk_aws_ecs_disableExplicitDeploymentControllerForCircuitBreaker, _aws_cdk_aws_iam_importedRoleStackSafeDefaultPolicyName, _aws_cdk_aws_s3_serverAccessLogsUseBucketPolicy, _aws_cdk_aws_route53_patters_useCertificate, _aws_cdk_customresources_installLatestAwsSdkDefault, _aws_cdk_aws_rds_databaseProxyUniqueResourceName, _aws_cdk_aws_codedeploy_removeAlarmsFromDeploymentGroup, _aws_cdk_aws_apigateway_authorizerChangeDeploymentLogicalId, _aws_cdk_aws_ec2_launchTemplateDefaultUserData, _aws_cdk_aws_secretsmanager_useAttachedSecretResourcePolicyForSecretTargetAttachments, _aws_cdk_aws_redshift_columnId, _aws_cdk_aws_stepfunctions_tasks_enableEmrServicePolicyV2, _aws_cdk_aws_ec2_restrictDefaultSecurityGroup, _aws_cdk_aws_apigateway_requestValidatorUniqueId, _aws_cdk_aws_kms_aliasNameRef, _aws_cdk_aws_autoscaling_generateLaunchTemplateInsteadOfLaunchConfig, _aws_cdk_core_includePrefixInUniqueNameGeneration, _aws_cdk_aws_efs_denyAnonymousAccess, _aws_cdk_aws_opensearchservice_enableOpensearchMultiAzWithStandby, _aws_cdk_aws_lambda_nodejs_useLatestRuntimeVersion, _aws_cdk_aws_efs_mountTargetOrderInsensitiveLogicalId, _aws_cdk_aws_rds_auroraClusterChangeScopeOfInstanceParameterGroupWithEachParameters, _aws_cdk_aws_appsync_useArnForSourceApiAssociationIdentifier, _aws_cdk_aws_rds_preventRenderingDeprecatedCredentials, _aws_cdk_aws_codepipeline_actions_useNewDefaultBranchForCodeCommitSource, _aws_cdk_aws_cloudwatch_actions_changeLambdaPermissionLogicalIdForLambdaAction, _aws_cdk_aws_codepipeline_crossAccountKeysDefaultValueToFalse, _aws_cdk_aws_codepipeline_defaultPipelineTypeToV2, _aws_cdk_aws_kms_reduceCrossAccountRegionPolicyScope, _aws_cdk_aws_eks_nodegroupNameAttribute, _aws_cdk_aws_ec2_ebsDefaultGp3Volume, _aws_cdk_aws_ecs_removeDefaultDeploymentAlarm, _aws_cdk_custom_resources_logApiResponseDataPropertyTrueDefault, _aws_cdk_aws_s3_keepNotificationInImportedBucket, _aws_cdk_aws_ecs_enableImdsBlockingDeprecatedFeature, _aws_cdk_aws_ecs_disableEcsImdsBlocking, _aws_cdk_aws_ecs_reduceEc2FargateCloudWatchPermissions, _aws_cdk_aws_dynamodb_resourcePolicyPerReplica, _aws_cdk_aws_ec2_ec2SumTImeoutEnabled, _aws_cdk_aws_appsync_appSyncGraphQLAPIScopeLambdaPermission, _aws_cdk_aws_rds_setCorrectValueForDatabaseInstanceReadReplicaInstanceResourceId, _aws_cdk_core_cfnIncludeRejectComplexResourceUpdateCreatePolicyIntrinsics, _aws_cdk_aws_lambda_nodejs_sdkV3ExcludeSmithyPackages, _aws_cdk_aws_stepfunctions_tasks_fixRunEcsTaskPolicy, _aws_cdk_aws_ec2_bastionHostUseAmazonLinux2023ByDefault, _aws_cdk_aws_route53_targets_userPoolDomainNameMethodWithoutCustomResource, _aws_cdk_aws_elasticloadbalancingV2_albDualstackWithoutPublicIpv4SecurityGroupRulesDefault, _aws_cdk_aws_iam_oidcRejectUnauthorizedConnections, _aws_cdk_core_enableAdditionalMetadataCollection, _aws_cdk_aws_lambda_createNewPoliciesWithAddToRolePolicy, recommended_feature_flags_default;
 var init_recommended_feature_flags = __esm({
   "lib/recommended-feature-flags.json"() {
     _aws_cdk_aws_lambda_recognizeLayerVersion = true;
@@ -12404,6 +12463,7 @@ var init_recommended_feature_flags = __esm({
     _aws_cdk_aws_elasticloadbalancingV2_albDualstackWithoutPublicIpv4SecurityGroupRulesDefault = true;
     _aws_cdk_aws_iam_oidcRejectUnauthorizedConnections = true;
     _aws_cdk_core_enableAdditionalMetadataCollection = true;
+    _aws_cdk_aws_lambda_createNewPoliciesWithAddToRolePolicy = true;
     recommended_feature_flags_default = {
       "@aws-cdk/aws-lambda:recognizeLayerVersion": _aws_cdk_aws_lambda_recognizeLayerVersion,
       "@aws-cdk/core:checkSecretUsage": _aws_cdk_core_checkSecretUsage,
@@ -12467,7 +12527,8 @@ var init_recommended_feature_flags = __esm({
       "@aws-cdk/aws-route53-targets:userPoolDomainNameMethodWithoutCustomResource": _aws_cdk_aws_route53_targets_userPoolDomainNameMethodWithoutCustomResource,
       "@aws-cdk/aws-elasticloadbalancingV2:albDualstackWithoutPublicIpv4SecurityGroupRulesDefault": _aws_cdk_aws_elasticloadbalancingV2_albDualstackWithoutPublicIpv4SecurityGroupRulesDefault,
       "@aws-cdk/aws-iam:oidcRejectUnauthorizedConnections": _aws_cdk_aws_iam_oidcRejectUnauthorizedConnections,
-      "@aws-cdk/core:enableAdditionalMetadataCollection": _aws_cdk_core_enableAdditionalMetadataCollection
+      "@aws-cdk/core:enableAdditionalMetadataCollection": _aws_cdk_core_enableAdditionalMetadataCollection,
+      "@aws-cdk/aws-lambda:createNewPoliciesWithAddToRolePolicy": _aws_cdk_aws_lambda_createNewPoliciesWithAddToRolePolicy
     };
   }
 });
@@ -12701,8 +12762,8 @@ var require_helpers2 = __commonJS({
     var ValidationError = exports2.ValidationError = function ValidationError2(message, instance, schema, path11, name, argument) {
       if (Array.isArray(path11)) {
         this.path = path11;
-        this.property = path11.reduce(function(sum2, item) {
-          return sum2 + makeSuffix(item);
+        this.property = path11.reduce(function(sum, item) {
+          return sum + makeSuffix(item);
         }, "instance");
       } else if (path11 !== void 0) {
         this.property = path11;
@@ -12801,8 +12862,8 @@ var require_helpers2 = __commonJS({
       this.options = options;
       if (Array.isArray(path11)) {
         this.path = path11;
-        this.propertyPath = path11.reduce(function(sum2, item) {
-          return sum2 + makeSuffix(item);
+        this.propertyPath = path11.reduce(function(sum, item) {
+          return sum + makeSuffix(item);
         }, "instance");
       } else {
         this.propertyPath = path11;
@@ -12879,16 +12940,16 @@ var require_helpers2 = __commonJS({
     FORMAT_REGEXPS.regexp = FORMAT_REGEXPS.regex;
     FORMAT_REGEXPS.pattern = FORMAT_REGEXPS.regex;
     FORMAT_REGEXPS.ipv4 = FORMAT_REGEXPS["ip-address"];
-    exports2.isFormat = function isFormat(input, format4, validator) {
-      if (typeof input === "string" && FORMAT_REGEXPS[format4] !== void 0) {
-        if (FORMAT_REGEXPS[format4] instanceof RegExp) {
-          return FORMAT_REGEXPS[format4].test(input);
+    exports2.isFormat = function isFormat(input, format3, validator) {
+      if (typeof input === "string" && FORMAT_REGEXPS[format3] !== void 0) {
+        if (FORMAT_REGEXPS[format3] instanceof RegExp) {
+          return FORMAT_REGEXPS[format3].test(input);
         }
-        if (typeof FORMAT_REGEXPS[format4] === "function") {
-          return FORMAT_REGEXPS[format4](input);
+        if (typeof FORMAT_REGEXPS[format3] === "function") {
+          return FORMAT_REGEXPS[format3](input);
         }
-      } else if (validator && validator.customFormats && typeof validator.customFormats[format4] === "function") {
-        return validator.customFormats[format4](input);
+      } else if (validator && validator.customFormats && typeof validator.customFormats[format3] === "function") {
+        return validator.customFormats[format3](input);
       }
       return true;
     };
@@ -14043,6 +14104,7 @@ var require_re2 = __commonJS({
     var re = exports2.re = [];
     var safeRe = exports2.safeRe = [];
     var src = exports2.src = [];
+    var safeSrc = exports2.safeSrc = [];
     var t = exports2.t = {};
     var R = 0;
     var LETTERDASHNUMBER = "[a-zA-Z0-9-]";
@@ -14063,6 +14125,7 @@ var require_re2 = __commonJS({
       debug(name, index, value);
       t[name] = index;
       src[index] = value;
+      safeSrc[index] = safe;
       re[index] = new RegExp(value, isGlobal ? "g" : void 0);
       safeRe[index] = new RegExp(safe, isGlobal ? "g" : void 0);
     };
@@ -14159,7 +14222,7 @@ var require_semver3 = __commonJS({
   "../../../node_modules/cdk-assets/node_modules/@aws-cdk/cloud-assembly-schema/node_modules/semver/classes/semver.js"(exports2, module2) {
     var debug = require_debug2();
     var { MAX_LENGTH, MAX_SAFE_INTEGER } = require_constants2();
-    var { safeRe: re, t } = require_re2();
+    var { safeRe: re, safeSrc: src, t } = require_re2();
     var parseOptions = require_parse_options2();
     var { compareIdentifiers } = require_identifiers2();
     var SemVer = class _SemVer {
@@ -14299,6 +14362,18 @@ var require_semver3 = __commonJS({
       // preminor will bump the version up to the next minor release, and immediately
       // down to pre-release. premajor and prepatch work the same way.
       inc(release, identifier, identifierBase) {
+        if (release.startsWith("pre")) {
+          if (!identifier && identifierBase === false) {
+            throw new Error("invalid increment argument: identifier is empty");
+          }
+          if (identifier) {
+            const r = new RegExp(`^${this.options.loose ? src[t.PRERELEASELOOSE] : src[t.PRERELEASE]}$`);
+            const match = `-${identifier}`.match(r);
+            if (!match || match[1] !== identifier) {
+              throw new Error(`invalid identifier: ${identifier}`);
+            }
+          }
+        }
         switch (release) {
           case "premajor":
             this.prerelease.length = 0;
@@ -14326,6 +14401,12 @@ var require_semver3 = __commonJS({
             }
             this.inc("pre", identifier, identifierBase);
             break;
+          case "release":
+            if (this.prerelease.length === 0) {
+              throw new Error(`version ${this.raw} is not a prerelease`);
+            }
+            this.prerelease.length = 0;
+            break;
           case "major":
             if (this.minor !== 0 || this.patch !== 0 || this.prerelease.length === 0) {
               this.major++;
@@ -14351,9 +14432,6 @@ var require_semver3 = __commonJS({
           // 1.0.0 'pre' would become 1.0.0-0 which is the wrong direction.
           case "pre": {
             const base = Number(identifierBase) ? 1 : 0;
-            if (!identifier && identifierBase === false) {
-              throw new Error("invalid increment argument: identifier is empty");
-            }
             if (this.prerelease.length === 0) {
               this.prerelease = [base];
             } else {
@@ -14488,13 +14566,12 @@ var require_diff2 = __commonJS({
         if (!lowVersion.patch && !lowVersion.minor) {
           return "major";
         }
-        if (highVersion.patch) {
+        if (lowVersion.compareMain(highVersion) === 0) {
+          if (lowVersion.minor && !lowVersion.patch) {
+            return "minor";
+          }
           return "patch";
         }
-        if (highVersion.minor) {
-          return "minor";
-        }
-        return "major";
       }
       const prefix = highHasPre ? "pre" : "";
       if (v1.major !== v2.major) {
@@ -14555,16 +14632,16 @@ var require_prerelease2 = __commonJS({
 var require_compare2 = __commonJS({
   "../../../node_modules/cdk-assets/node_modules/@aws-cdk/cloud-assembly-schema/node_modules/semver/functions/compare.js"(exports2, module2) {
     var SemVer = require_semver3();
-    var compare2 = (a, b, loose) => new SemVer(a, loose).compare(new SemVer(b, loose));
-    module2.exports = compare2;
+    var compare = (a, b, loose) => new SemVer(a, loose).compare(new SemVer(b, loose));
+    module2.exports = compare;
   }
 });
 // ../../../node_modules/cdk-assets/node_modules/@aws-cdk/cloud-assembly-schema/node_modules/semver/functions/rcompare.js
 var require_rcompare2 = __commonJS({
   "../../../node_modules/cdk-assets/node_modules/@aws-cdk/cloud-assembly-schema/node_modules/semver/functions/rcompare.js"(exports2, module2) {
-    var compare2 = require_compare2();
-    var rcompare = (a, b, loose) => compare2(b, a, loose);
+    var compare = require_compare2();
+    var rcompare = (a, b, loose) => compare(b, a, loose);
     module2.exports = rcompare;
   }
 });
@@ -14572,8 +14649,8 @@ var require_rcompare2 = __commonJS({
 // ../../../node_modules/cdk-assets/node_modules/@aws-cdk/cloud-assembly-schema/node_modules/semver/functions/compare-loose.js
 var require_compare_loose2 = __commonJS({
   "../../../node_modules/cdk-assets/node_modules/@aws-cdk/cloud-assembly-schema/node_modules/semver/functions/compare-loose.js"(exports2, module2) {
-    var compare2 = require_compare2();
-    var compareLoose = (a, b) => compare2(a, b, true);
+    var compare = require_compare2();
+    var compareLoose = (a, b) => compare(a, b, true);
     module2.exports = compareLoose;
   }
 });
@@ -14612,8 +14689,8 @@ var require_rsort2 = __commonJS({
 // ../../../node_modules/cdk-assets/node_modules/@aws-cdk/cloud-assembly-schema/node_modules/semver/functions/gt.js
 var require_gt2 = __commonJS({
   "../../../node_modules/cdk-assets/node_modules/@aws-cdk/cloud-assembly-schema/node_modules/semver/functions/gt.js"(exports2, module2) {
-    var compare2 = require_compare2();
-    var gt = (a, b, loose) => compare2(a, b, loose) > 0;
+    var compare = require_compare2();
+    var gt = (a, b, loose) => compare(a, b, loose) > 0;
     module2.exports = gt;
   }
 });
@@ -14621,8 +14698,8 @@ var require_gt2 = __commonJS({
 // ../../../node_modules/cdk-assets/node_modules/@aws-cdk/cloud-assembly-schema/node_modules/semver/functions/lt.js
 var require_lt2 = __commonJS({
   "../../../node_modules/cdk-assets/node_modules/@aws-cdk/cloud-assembly-schema/node_modules/semver/functions/lt.js"(exports2, module2) {
-    var compare2 = require_compare2();
-    var lt = (a, b, loose) => compare2(a, b, loose) < 0;
+    var compare = require_compare2();
+    var lt = (a, b, loose) => compare(a, b, loose) < 0;
     module2.exports = lt;
   }
 });
@@ -14630,8 +14707,8 @@ var require_lt2 = __commonJS({
 // ../../../node_modules/cdk-assets/node_modules/@aws-cdk/cloud-assembly-schema/node_modules/semver/functions/eq.js
 var require_eq2 = __commonJS({
   "../../../node_modules/cdk-assets/node_modules/@aws-cdk/cloud-assembly-schema/node_modules/semver/functions/eq.js"(exports2, module2) {
-    var compare2 = require_compare2();
-    var eq = (a, b, loose) => compare2(a, b, loose) === 0;
+    var compare = require_compare2();
+    var eq = (a, b, loose) => compare(a, b, loose) === 0;
     module2.exports = eq;
   }
 });
@@ -14639,8 +14716,8 @@ var require_eq2 = __commonJS({
 // ../../../node_modules/cdk-assets/node_modules/@aws-cdk/cloud-assembly-schema/node_modules/semver/functions/neq.js
 var require_neq2 = __commonJS({
   "../../../node_modules/cdk-assets/node_modules/@aws-cdk/cloud-assembly-schema/node_modules/semver/functions/neq.js"(exports2, module2) {
-    var compare2 = require_compare2();
-    var neq = (a, b, loose) => compare2(a, b, loose) !== 0;
+    var compare = require_compare2();
+    var neq = (a, b, loose) => compare(a, b, loose) !== 0;
     module2.exports = neq;
   }
 });
@@ -14648,8 +14725,8 @@ var require_neq2 = __commonJS({
 // ../../../node_modules/cdk-assets/node_modules/@aws-cdk/cloud-assembly-schema/node_modules/semver/functions/gte.js
 var require_gte2 = __commonJS({
   "../../../node_modules/cdk-assets/node_modules/@aws-cdk/cloud-assembly-schema/node_modules/semver/functions/gte.js"(exports2, module2) {
-    var compare2 = require_compare2();
-    var gte = (a, b, loose) => compare2(a, b, loose) >= 0;
+    var compare = require_compare2();
+    var gte = (a, b, loose) => compare(a, b, loose) >= 0;
     module2.exports = gte;
   }
 });
@@ -14657,8 +14734,8 @@ var require_gte2 = __commonJS({
 // ../../../node_modules/cdk-assets/node_modules/@aws-cdk/cloud-assembly-schema/node_modules/semver/functions/lte.js
 var require_lte2 = __commonJS({
   "../../../node_modules/cdk-assets/node_modules/@aws-cdk/cloud-assembly-schema/node_modules/semver/functions/lte.js"(exports2, module2) {
-    var compare2 = require_compare2();
-    var lte = (a, b, loose) => compare2(a, b, loose) <= 0;
+    var compare = require_compare2();
+    var lte = (a, b, loose) => compare(a, b, loose) <= 0;
     module2.exports = lte;
   }
 });
@@ -15538,12 +15615,12 @@ var require_intersects2 = __commonJS({
 var require_simplify2 = __commonJS({
   "../../../node_modules/cdk-assets/node_modules/@aws-cdk/cloud-assembly-schema/node_modules/semver/ranges/simplify.js"(exports2, module2) {
     var satisfies = require_satisfies2();
-    var compare2 = require_compare2();
+    var compare = require_compare2();
     module2.exports = (versions, range, options) => {
       const set = [];
       let first = null;
       let prev = null;
-      const v = versions.sort((a, b) => compare2(a, b, options));
+      const v = versions.sort((a, b) => compare(a, b, options));
       for (const version of v) {
         const included = satisfies(version, range, options);
         if (included) {
@@ -15590,7 +15667,7 @@ var require_subset2 = __commonJS({
     var Comparator = require_comparator2();
     var { ANY } = Comparator;
     var satisfies = require_satisfies2();
-    var compare2 = require_compare2();
+    var compare = require_compare2();
     var subset = (sub, dom, options = {}) => {
       if (sub === dom) {
         return true;
@@ -15650,7 +15727,7 @@ var require_subset2 = __commonJS({
       }
       let gtltComp;
       if (gt && lt) {
-        gtltComp = compare2(gt.semver, lt.semver, options);
+        gtltComp = compare(gt.semver, lt.semver, options);
         if (gtltComp > 0) {
           return null;
         } else if (gtltComp === 0 && (gt.operator !== ">=" || lt.operator !== "<=")) {
@@ -15730,14 +15807,14 @@ var require_subset2 = __commonJS({
       if (!a) {
         return b;
       }
-      const comp = compare2(a.semver, b.semver, options);
+      const comp = compare(a.semver, b.semver, options);
       return comp > 0 ? a : comp < 0 ? b : b.operator === ">" && a.operator === ">=" ? b : a;
     };
     var lowerLT = (a, b, options) => {
       if (!a) {
         return b;
       }
-      const comp = compare2(a.semver, b.semver, options);
+      const comp = compare(a.semver, b.semver, options);
       return comp < 0 ? a : comp > 0 ? b : b.operator === "<" && a.operator === "<=" ? b : a;
     };
     module2.exports = subset;
@@ -15760,7 +15837,7 @@ var require_semver4 = __commonJS({
     var minor = require_minor2();
     var patch = require_patch2();
     var prerelease = require_prerelease2();
-    var compare2 = require_compare2();
+    var compare = require_compare2();
     var rcompare = require_rcompare2();
     var compareLoose = require_compare_loose2();
     var compareBuild = require_compare_build2();
@@ -15798,7 +15875,7 @@ var require_semver4 = __commonJS({
       minor,
       patch,
       prerelease,
-      compare: compare2,
+      compare,
       rcompare,
       compareLoose,
       compareBuild,
@@ -17903,7 +17980,7 @@ ${errors.map((e) => e.stack).join("\n")}`);
     };
     exports2.Manifest = Manifest5;
     _a = JSII_RTTI_SYMBOL_1;
-    Manifest5[_a] = { fqn: "@aws-cdk/cloud-assembly-schema.Manifest", version: "39.2.3" };
+    Manifest5[_a] = { fqn: "@aws-cdk/cloud-assembly-schema.Manifest", version: "39.2.20" };
     function mapValues(xs, fn) {
       if (!xs) {
         return void 0;
@@ -20236,11 +20313,11 @@ var require_picomatch = __commonJS({
         return { isMatch: false, output: "" };
       }
       const opts = options || {};
-      const format4 = opts.format || (posix ? utils.toPosixSlashes : null);
+      const format3 = opts.format || (posix ? utils.toPosixSlashes : null);
       let match = input === glob;
-      let output = match && format4 ? format4(input) : input;
+      let output = match && format3 ? format3(input) : input;
       if (match === false) {
-        output = format4 ? format4(input) : input;
+        output = format3 ? format3(input) : input;
         match = output === glob;
       }
       if (match === false || opts.capture === true) {
@@ -21034,7 +21111,7 @@ var require_to_regex_range = __commonJS({
         stop = countZeros(max + 1, zeros) - 1;
       }
       stops = [...stops];
-      stops.sort(compare2);
+      stops.sort(compare);
       return stops;
     }
     function rangeToPattern(start, stop, options) {
@@ -21092,10 +21169,10 @@ var require_to_regex_range = __commonJS({
       let result = [];
       for (let ele of arr) {
         let { string } = ele;
-        if (!intersection && !contains2(comparison, "string", string)) {
+        if (!intersection && !contains(comparison, "string", string)) {
           result.push(prefix + string);
         }
-        if (intersection && contains2(comparison, "string", string)) {
+        if (intersection && contains(comparison, "string", string)) {
           result.push(prefix + string);
         }
       }
@@ -21106,10 +21183,10 @@ var require_to_regex_range = __commonJS({
       for (let i = 0; i < a.length; i++) arr.push([a[i], b[i]]);
       return arr;
     }
-    function compare2(a, b) {
+    function compare(a, b) {
       return a > b ? 1 : b > a ? -1 : 0;
     }
-    function contains2(arr, key, val) {
+    function contains(arr, key, val) {
       return arr.some((ele) => ele[key] === val);
     }
     function countNines(min, len) {
@@ -21273,7 +21350,7 @@ var require_fill_range = __commonJS({
       let padded = zeros(startString) || zeros(endString) || zeros(stepString);
       let maxLen = padded ? Math.max(startString.length, endString.length, stepString.length) : 0;
       let toNumber = padded === false && stringify(start, end, options) === false;
-      let format4 = options.transform || transform(toNumber);
+      let format3 = options.transform || transform(toNumber);
       if (options.toRegex && step === 1) {
         return toRange(toMaxLen(start, maxLen), toMaxLen(end, maxLen), true, options);
       }
@@ -21285,7 +21362,7 @@ var require_fill_range = __commonJS({
         if (options.toRegex === true && step > 1) {
           push(a);
         } else {
-          range.push(pad(format4(a, index), maxLen, toNumber));
+          range.push(pad(format3(a, index), maxLen, toNumber));
         }
         a = descending ? a - step : a + step;
         index++;
@@ -21299,7 +21376,7 @@ var require_fill_range = __commonJS({
       if (!isNumber(start) && start.length > 1 || !isNumber(end) && end.length > 1) {
         return invalidRange(start, end, options);
       }
-      let format4 = options.transform || ((val) => String.fromCharCode(val));
+      let format3 = options.transform || ((val) => String.fromCharCode(val));
       let a = `${start}`.charCodeAt(0);
       let b = `${end}`.charCodeAt(0);
       let descending = a > b;
@@ -21311,7 +21388,7 @@ var require_fill_range = __commonJS({
       let range = [];
       let index = 0;
       while (descending ? a >= b : a <= b) {
-        range.push(format4(a, index));
+        range.push(format3(a, index));
         a = descending ? a - step : a + step;
         index++;
       }
@@ -24686,17 +24763,17 @@ var require_conversions = __commonJS({
       return [0, 0, args[0]];
     };
     convert.gray.hsv = convert.gray.hsl;
-    convert.gray.hwb = function(gray4) {
-      return [0, 100, gray4[0]];
+    convert.gray.hwb = function(gray2) {
+      return [0, 100, gray2[0]];
     };
-    convert.gray.cmyk = function(gray4) {
-      return [0, 0, 0, gray4[0]];
+    convert.gray.cmyk = function(gray2) {
+      return [0, 0, 0, gray2[0]];
     };
-    convert.gray.lab = function(gray4) {
-      return [gray4[0], 0, 0];
+    convert.gray.lab = function(gray2) {
+      return [gray2[0], 0, 0];
     };
-    convert.gray.hex = function(gray4) {
-      const val = Math.round(gray4[0] / 100 * 255) & 255;
+    convert.gray.hex = function(gray2) {
+      const val = Math.round(gray2[0] / 100 * 255) & 255;
       const integer = (val << 16) + (val << 8) + val;
       const string = integer.toString(16).toUpperCase();
       return "000000".substring(string.length) + string;
@@ -25197,14 +25274,14 @@ var require_templates = __commonJS({
       }
       return results;
     }
-    function buildStyle(chalk7, styles) {
+    function buildStyle(chalk3, styles) {
       const enabled = {};
       for (const layer of styles) {
         for (const style of layer.styles) {
           enabled[style[0]] = layer.inverse ? null : style.slice(1);
         }
       }
-      let current = chalk7;
+      let current = chalk3;
       for (const [styleName, styles2] of Object.entries(enabled)) {
         if (!Array.isArray(styles2)) {
           continue;
@@ -25216,7 +25293,7 @@ var require_templates = __commonJS({
       }
       return current;
     }
-    module2.exports = (chalk7, temporary) => {
+    module2.exports = (chalk3, temporary) => {
       const styles = [];
       const chunks2 = [];
       let chunk = [];
@@ -25226,13 +25303,13 @@ var require_templates = __commonJS({
         } else if (style) {
           const string = chunk.join("");
           chunk = [];
-          chunks2.push(styles.length === 0 ? string : buildStyle(chalk7, styles)(string));
+          chunks2.push(styles.length === 0 ? string : buildStyle(chalk3, styles)(string));
           styles.push({ inverse, styles: parseStyle(style) });
         } else if (close) {
           if (styles.length === 0) {
             throw new Error("Found extraneous } in Chalk template literal");
           }
-          chunks2.push(buildStyle(chalk7, styles)(chunk.join("")));
+          chunks2.push(buildStyle(chalk3, styles)(chunk.join("")));
           chunk = [];
           styles.pop();
         } else {
@@ -25280,16 +25357,16 @@ var require_source = __commonJS({
       }
     };
     var chalkFactory = (options) => {
-      const chalk8 = {};
-      applyOptions(chalk8, options);
-      chalk8.template = (...arguments_) => chalkTag(chalk8.template, ...arguments_);
-      Object.setPrototypeOf(chalk8, Chalk.prototype);
-      Object.setPrototypeOf(chalk8.template, chalk8);
-      chalk8.template.constructor = () => {
+      const chalk4 = {};
+      applyOptions(chalk4, options);
+      chalk4.template = (...arguments_) => chalkTag(chalk4.template, ...arguments_);
+      Object.setPrototypeOf(chalk4, Chalk.prototype);
+      Object.setPrototypeOf(chalk4.template, chalk4);
+      chalk4.template.constructor = () => {
         throw new Error("`chalk.constructor()` is deprecated. Use `new chalk.Instance()` instead.");
       };
-      chalk8.template.Instance = ChalkClass;
-      return chalk8.template;
+      chalk4.template.Instance = ChalkClass;
+      return chalk4.template;
     };
     function Chalk(options) {
       return chalkFactory(options);
@@ -25400,7 +25477,7 @@ var require_source = __commonJS({
       return openAll + string + closeAll;
     };
     var template;
-    var chalkTag = (chalk8, ...strings) => {
+    var chalkTag = (chalk4, ...strings) => {
       const [firstString] = strings;
       if (!isArray(firstString) || !isArray(firstString.raw)) {
         return strings.join(" ");
@@ -25416,14 +25493,14 @@ var require_source = __commonJS({
       if (template === void 0) {
         template = require_templates();
       }
-      return template(chalk8, parts.join(""));
+      return template(chalk4, parts.join(""));
     };
     Object.defineProperties(Chalk.prototype, styles);
-    var chalk7 = Chalk();
-    chalk7.supportsColor = stdoutColor;
-    chalk7.stderr = Chalk({ level: stderrColor ? stderrColor.level : 0 });
-    chalk7.stderr.supportsColor = stderrColor;
-    module2.exports = chalk7;
+    var chalk3 = Chalk();
+    chalk3.supportsColor = stdoutColor;
+    chalk3.stderr = Chalk({ level: stderrColor ? stderrColor.level : 0 });
+    chalk3.stderr.supportsColor = stderrColor;
+    module2.exports = chalk3;
   }
 });
@@ -26664,27 +26741,27 @@ var require_resource = __commonJS({
       return x.type === "array" || x.type === "map";
     }
     exports2.isCollectionType = isCollectionType;
-    var ResourceScrutinyType3;
-    (function(ResourceScrutinyType4) {
-      ResourceScrutinyType4["None"] = "None";
-      ResourceScrutinyType4["ResourcePolicyResource"] = "ResourcePolicyResource";
-      ResourceScrutinyType4["IdentityPolicyResource"] = "IdentityPolicyResource";
-      ResourceScrutinyType4["LambdaPermission"] = "LambdaPermission";
-      ResourceScrutinyType4["IngressRuleResource"] = "IngressRuleResource";
-      ResourceScrutinyType4["EgressRuleResource"] = "EgressRuleResource";
-      ResourceScrutinyType4["SsoAssignmentResource"] = "SsoAssignmentResource";
-      ResourceScrutinyType4["SsoInstanceACAConfigResource"] = "SsoInstanceACAConfigResource";
-      ResourceScrutinyType4["SsoPermissionSet"] = "SsoPermissionSet";
-    })(ResourceScrutinyType3 = exports2.ResourceScrutinyType || (exports2.ResourceScrutinyType = {}));
-    var PropertyScrutinyType3;
-    (function(PropertyScrutinyType4) {
-      PropertyScrutinyType4["None"] = "None";
-      PropertyScrutinyType4["InlineResourcePolicy"] = "InlineResourcePolicy";
-      PropertyScrutinyType4["InlineIdentityPolicies"] = "InlineIdentityPolicies";
-      PropertyScrutinyType4["ManagedPolicies"] = "ManagedPolicies";
-      PropertyScrutinyType4["IngressRules"] = "IngressRules";
-      PropertyScrutinyType4["EgressRules"] = "EgressRules";
-    })(PropertyScrutinyType3 = exports2.PropertyScrutinyType || (exports2.PropertyScrutinyType = {}));
+    var ResourceScrutinyType;
+    (function(ResourceScrutinyType2) {
+      ResourceScrutinyType2["None"] = "None";
+      ResourceScrutinyType2["ResourcePolicyResource"] = "ResourcePolicyResource";
+      ResourceScrutinyType2["IdentityPolicyResource"] = "IdentityPolicyResource";
+      ResourceScrutinyType2["LambdaPermission"] = "LambdaPermission";
+      ResourceScrutinyType2["IngressRuleResource"] = "IngressRuleResource";
+      ResourceScrutinyType2["EgressRuleResource"] = "EgressRuleResource";
+      ResourceScrutinyType2["SsoAssignmentResource"] = "SsoAssignmentResource";
+      ResourceScrutinyType2["SsoInstanceACAConfigResource"] = "SsoInstanceACAConfigResource";
+      ResourceScrutinyType2["SsoPermissionSet"] = "SsoPermissionSet";
+    })(ResourceScrutinyType = exports2.ResourceScrutinyType || (exports2.ResourceScrutinyType = {}));
+    var PropertyScrutinyType;
+    (function(PropertyScrutinyType2) {
+      PropertyScrutinyType2["None"] = "None";
+      PropertyScrutinyType2["InlineResourcePolicy"] = "InlineResourcePolicy";
+      PropertyScrutinyType2["InlineIdentityPolicies"] = "InlineIdentityPolicies";
+      PropertyScrutinyType2["ManagedPolicies"] = "ManagedPolicies";
+      PropertyScrutinyType2["IngressRules"] = "IngressRules";
+      PropertyScrutinyType2["EgressRules"] = "EgressRules";
+    })(PropertyScrutinyType = exports2.PropertyScrutinyType || (exports2.PropertyScrutinyType = {}));
     var RichPropertyType = class _RichPropertyType {
       constructor(type) {
         this.type = type;
@@ -26880,132 +26957,130 @@ var require_lib9 = __commonJS({
   }
 });
-// ../cloudformation-diff/lib/diff/util.ts
-var util_exports = {};
-__export(util_exports, {
-  deepEqual: () => deepEqual,
-  diffKeyedEntities: () => diffKeyedEntities,
-  loadResourceModel: () => loadResourceModel,
-  mangleLikeCloudFormation: () => mangleLikeCloudFormation,
-  unionOf: () => unionOf
-});
-function deepEqual(lvalue, rvalue) {
-  if (lvalue === rvalue) {
-    return true;
-  }
-  if ((typeof lvalue === "string" && typeof rvalue === "boolean" || typeof lvalue === "boolean" && typeof rvalue === "string") && lvalue.toString() === rvalue.toString()) {
-    return true;
-  }
-  if ((typeof lvalue === "string" || typeof rvalue === "string") && safeParseFloat(lvalue) === safeParseFloat(rvalue)) {
-    return true;
-  }
-  if (typeof lvalue !== typeof rvalue) {
-    return false;
-  }
-  if (Array.isArray(lvalue) !== Array.isArray(rvalue)) {
-    return false;
-  }
-  if (Array.isArray(lvalue)) {
-    if (lvalue.length !== rvalue.length) {
-      return false;
-    }
-    for (let i = 0; i < lvalue.length; i++) {
-      if (!deepEqual(lvalue[i], rvalue[i])) {
+// ../../../node_modules/@aws-cdk/cloudformation-diff/lib/diff/util.js
+var require_util2 = __commonJS({
+  "../../../node_modules/@aws-cdk/cloudformation-diff/lib/diff/util.js"(exports2) {
+    "use strict";
+    Object.defineProperty(exports2, "__esModule", { value: true });
+    exports2.deepEqual = deepEqual;
+    exports2.diffKeyedEntities = diffKeyedEntities;
+    exports2.unionOf = unionOf;
+    exports2.mangleLikeCloudFormation = mangleLikeCloudFormation;
+    exports2.loadResourceModel = loadResourceModel;
+    var aws_service_spec_1 = require("@aws-cdk/aws-service-spec");
+    function deepEqual(lvalue, rvalue) {
+      if (lvalue === rvalue) {
+        return true;
+      }
+      if ((typeof lvalue === "string" && typeof rvalue === "boolean" || typeof lvalue === "boolean" && typeof rvalue === "string") && lvalue.toString() === rvalue.toString()) {
+        return true;
+      }
+      if ((typeof lvalue === "string" || typeof rvalue === "string") && safeParseFloat(lvalue) === safeParseFloat(rvalue)) {
+        return true;
+      }
+      if (typeof lvalue !== typeof rvalue) {
         return false;
       }
-    }
-    return true;
-  }
-  if (typeof lvalue === "object") {
-    if (lvalue === null || rvalue === null) {
-      return false;
-    }
-    const keys = Object.keys(lvalue);
-    if (keys.length !== Object.keys(rvalue).length) {
+      if (Array.isArray(lvalue) !== Array.isArray(rvalue)) {
+        return false;
+      }
+      if (Array.isArray(lvalue)) {
+        if (lvalue.length !== rvalue.length) {
+          return false;
+        }
+        for (let i = 0; i < lvalue.length; i++) {
+          if (!deepEqual(lvalue[i], rvalue[i])) {
+            return false;
+          }
+        }
+        return true;
+      }
+      if (typeof lvalue === "object") {
+        if (lvalue === null || rvalue === null) {
+          return false;
+        }
+        const keys = Object.keys(lvalue);
+        if (keys.length !== Object.keys(rvalue).length) {
+          return false;
+        }
+        for (const key of keys) {
+          if (!rvalue.hasOwnProperty(key)) {
+            return false;
+          }
+          if (key === "DependsOn") {
+            if (!dependsOnEqual(lvalue[key], rvalue[key])) {
+              return false;
+            }
+            continue;
+          }
+          if (!deepEqual(lvalue[key], rvalue[key])) {
+            return false;
+          }
+        }
+        return true;
+      }
       return false;
     }
-    for (const key of keys) {
-      if (!rvalue.hasOwnProperty(key)) {
+    function dependsOnEqual(lvalue, rvalue) {
+      if (Array.isArray(lvalue) !== Array.isArray(rvalue)) {
+        const array = Array.isArray(lvalue) ? lvalue : rvalue;
+        const nonArray = Array.isArray(lvalue) ? rvalue : lvalue;
+        if (array.length === 1 && deepEqual(array[0], nonArray)) {
+          return true;
+        }
         return false;
       }
-      if (key === "DependsOn") {
-        if (!dependsOnEqual(lvalue[key], rvalue[key])) {
+      if (Array.isArray(lvalue) && Array.isArray(rvalue)) {
+        if (lvalue.length !== rvalue.length) {
           return false;
         }
-        continue;
+        for (let i = 0; i < lvalue.length; i++) {
+          for (let j = 0; j < lvalue.length; j++) {
+            if (!deepEqual(lvalue[i], rvalue[j]) && j === lvalue.length - 1) {
+              return false;
+            }
+            break;
+          }
+        }
+        return true;
       }
-      if (!deepEqual(lvalue[key], rvalue[key])) {
-        return false;
+      return false;
+    }
+    function diffKeyedEntities(oldValue, newValue, elementDiff) {
+      const result = {};
+      for (const logicalId of unionOf(Object.keys(oldValue || {}), Object.keys(newValue || {}))) {
+        const oldElement = oldValue && oldValue[logicalId];
+        const newElement = newValue && newValue[logicalId];
+        if (oldElement === void 0 && newElement === void 0) {
+          continue;
+        }
+        result[logicalId] = elementDiff(oldElement, newElement, logicalId);
+      }
+      return result;
+    }
+    function unionOf(lv, rv) {
+      const result = new Set(lv);
+      for (const v of rv) {
+        result.add(v);
       }
+      return new Array(...result);
     }
-    return true;
-  }
-  return false;
-}
-function dependsOnEqual(lvalue, rvalue) {
-  if (Array.isArray(lvalue) !== Array.isArray(rvalue)) {
-    const array = Array.isArray(lvalue) ? lvalue : rvalue;
-    const nonArray = Array.isArray(lvalue) ? rvalue : lvalue;
-    if (array.length === 1 && deepEqual(array[0], nonArray)) {
-      return true;
+    function mangleLikeCloudFormation(payload) {
+      return payload.replace(/[\u{80}-\u{10ffff}]/gu, "?");
     }
-    return false;
-  }
-  if (Array.isArray(lvalue) && Array.isArray(rvalue)) {
-    if (lvalue.length !== rvalue.length) {
-      return false;
+    function safeParseFloat(str) {
+      return Number(str);
     }
-    for (let i = 0; i < lvalue.length; i++) {
-      for (let j = 0; j < lvalue.length; j++) {
-        if (!deepEqual(lvalue[i], rvalue[j]) && j === lvalue.length - 1) {
-          return false;
-        }
-        break;
+    var DATABASE;
+    function database() {
+      if (!DATABASE) {
+        DATABASE = (0, aws_service_spec_1.loadAwsServiceSpecSync)();
       }
+      return DATABASE;
     }
-    return true;
-  }
-  return false;
-}
-function diffKeyedEntities(oldValue, newValue, elementDiff) {
-  const result = {};
-  for (const logicalId of unionOf(Object.keys(oldValue || {}), Object.keys(newValue || {}))) {
-    const oldElement = oldValue && oldValue[logicalId];
-    const newElement = newValue && newValue[logicalId];
-    if (oldElement === void 0 && newElement === void 0) {
-      continue;
+    function loadResourceModel(type) {
+      return database().lookup("resource", "cloudFormationType", "equals", type)[0];
     }
-    result[logicalId] = elementDiff(oldElement, newElement, logicalId);
-  }
-  return result;
-}
-function unionOf(lv, rv) {
-  const result = new Set(lv);
-  for (const v of rv) {
-    result.add(v);
-  }
-  return new Array(...result);
-}
-function mangleLikeCloudFormation(payload) {
-  return payload.replace(/[\u{80}-\u{10ffff}]/gu, "?");
-}
-function safeParseFloat(str) {
-  return Number(str);
-}
-function database() {
-  if (!DATABASE) {
-    DATABASE = (0, import_aws_service_spec.loadAwsServiceSpecSync)();
-  }
-  return DATABASE;
-}
-function loadResourceModel(type) {
-  return database().lookup("resource", "cloudFormationType", "equals", type)[0];
-}
-var import_aws_service_spec, DATABASE;
-var init_util = __esm({
-  "../cloudformation-diff/lib/diff/util.ts"() {
-    "use strict";
-    import_aws_service_spec = require("@aws-cdk/aws-service-spec");
   }
 });
@@ -27044,13 +27119,14 @@ var require_fast_deep_equal = __commonJS({
   }
 });
-// ../cloudformation-diff/lib/iam/iam-identity-center.ts
-var deepEqual2, SsoPermissionSet, SsoAssignment, SsoInstanceACAConfig;
-var init_iam_identity_center = __esm({
-  "../cloudformation-diff/lib/iam/iam-identity-center.ts"() {
+// ../../../node_modules/@aws-cdk/cloudformation-diff/lib/iam/iam-identity-center.js
+var require_iam_identity_center = __commonJS({
+  "../../../node_modules/@aws-cdk/cloudformation-diff/lib/iam/iam-identity-center.js"(exports2) {
     "use strict";
-    deepEqual2 = require_fast_deep_equal();
-    SsoPermissionSet = class {
+    Object.defineProperty(exports2, "__esModule", { value: true });
+    exports2.SsoInstanceACAConfig = exports2.SsoAssignment = exports2.SsoPermissionSet = void 0;
+    var deepEqual = require_fast_deep_equal();
+    var SsoPermissionSet = class {
       constructor(props) {
         this.cfnLogicalId = props.cfnLogicalId;
         this.name = props.name;
@@ -27059,10 +27135,11 @@ var init_iam_identity_center = __esm({
         this.ssoCustomerManagedPolicyReferences = props.ssoCustomerManagedPolicyReferences;
       }
       equal(other) {
-        return deepEqual2(this, other);
+        return deepEqual(this, other);
       }
     };
-    SsoAssignment = class {
+    exports2.SsoPermissionSet = SsoPermissionSet;
+    var SsoAssignment = class {
       constructor(props) {
         this.cfnLogicalId = props.cfnLogicalId;
         this.ssoInstanceArn = props.ssoInstanceArn;
@@ -27073,52 +27150,58 @@ var init_iam_identity_center = __esm({
         this.targetType = props.targetType;
       }
       equal(other) {
-        return deepEqual2(this, other);
+        return deepEqual(this, other);
       }
     };
-    SsoInstanceACAConfig = class {
+    exports2.SsoAssignment = SsoAssignment;
+    var SsoInstanceACAConfig = class {
       constructor(props) {
         this.cfnLogicalId = props.cfnLogicalId;
         this.ssoInstanceArn = props.ssoInstanceArn;
         this.accessControlAttributes = props.accessControlAttributes;
       }
       equal(other) {
-        return deepEqual2(this, other);
+        return deepEqual(this, other);
       }
     };
+    exports2.SsoInstanceACAConfig = SsoInstanceACAConfig;
   }
 });
-// ../cloudformation-diff/lib/diff/maybe-parsed.ts
-function mkParsed(value) {
-  return { type: "parsed", value };
-}
-function mkUnparseable(value) {
-  return {
-    type: "unparseable",
-    repr: typeof value === "string" ? value : JSON.stringify(value)
-  };
-}
-var init_maybe_parsed = __esm({
-  "../cloudformation-diff/lib/diff/maybe-parsed.ts"() {
+// ../../../node_modules/@aws-cdk/cloudformation-diff/lib/diff/maybe-parsed.js
+var require_maybe_parsed = __commonJS({
+  "../../../node_modules/@aws-cdk/cloudformation-diff/lib/diff/maybe-parsed.js"(exports2) {
     "use strict";
+    Object.defineProperty(exports2, "__esModule", { value: true });
+    exports2.mkParsed = mkParsed;
+    exports2.mkUnparseable = mkUnparseable;
+    function mkParsed(value) {
+      return { type: "parsed", value };
+    }
+    function mkUnparseable(value) {
+      return {
+        type: "unparseable",
+        repr: typeof value === "string" ? value : JSON.stringify(value)
+      };
+    }
   }
 });
-// ../cloudformation-diff/lib/iam/managed-policy.ts
-var ManagedPolicyAttachment;
-var init_managed_policy = __esm({
-  "../cloudformation-diff/lib/iam/managed-policy.ts"() {
+// ../../../node_modules/@aws-cdk/cloudformation-diff/lib/iam/managed-policy.js
+var require_managed_policy = __commonJS({
+  "../../../node_modules/@aws-cdk/cloudformation-diff/lib/iam/managed-policy.js"(exports2) {
     "use strict";
-    init_maybe_parsed();
-    ManagedPolicyAttachment = class _ManagedPolicyAttachment {
+    Object.defineProperty(exports2, "__esModule", { value: true });
+    exports2.ManagedPolicyAttachment = void 0;
+    var maybe_parsed_1 = require_maybe_parsed();
+    var ManagedPolicyAttachment = class _ManagedPolicyAttachment {
+      static parseManagedPolicies(identityArn, arns) {
+        return typeof arns === "string" ? [new _ManagedPolicyAttachment(identityArn, arns)] : arns.map((arn) => new _ManagedPolicyAttachment(identityArn, arn));
+      }
       constructor(identityArn, managedPolicyArn) {
         this.identityArn = identityArn;
         this.managedPolicyArn = managedPolicyArn;
       }
-      static parseManagedPolicies(identityArn, arns) {
-        return typeof arns === "string" ? [new _ManagedPolicyAttachment(identityArn, arns)] : arns.map((arn) => new _ManagedPolicyAttachment(identityArn, arn));
-      }
       equal(other) {
         return this.identityArn === other.identityArn && this.managedPolicyArn === other.managedPolicyArn;
       }
@@ -27129,166 +27212,96 @@ var init_managed_policy = __esm({
        * @internal
        */
       _toJson() {
-        return mkParsed({
+        return (0, maybe_parsed_1.mkParsed)({
           identityArn: this.identityArn,
           managedPolicyArn: this.managedPolicyArn
         });
       }
     };
+    exports2.ManagedPolicyAttachment = ManagedPolicyAttachment;
   }
 });
-// ../cloudformation-diff/lib/util.ts
-function makeComparator(keyFn) {
-  return (a, b) => {
-    const keyA = keyFn(a);
-    const keyB = keyFn(b);
-    const len = Math.min(keyA.length, keyB.length);
-    for (let i = 0; i < len; i++) {
-      const c = compare(keyA[i], keyB[i]);
-      if (c !== 0) {
-        return c;
-      }
-    }
-    return keyA.length - keyB.length;
-  };
-}
-function compare(a, b) {
-  if (a < b) {
-    return -1;
-  }
-  if (b < a) {
-    return 1;
-  }
-  return 0;
-}
-function dropIfEmpty(xs) {
-  return xs.length > 0 ? xs : void 0;
-}
-function deepRemoveUndefined(x) {
-  if (typeof x === void 0 || x === null) {
-    return x;
-  }
-  if (Array.isArray(x)) {
-    return x.map(deepRemoveUndefined);
-  }
-  if (typeof x === "object") {
-    for (const [key, value] of Object.entries(x)) {
-      x[key] = deepRemoveUndefined(value);
-      if (x[key] === void 0) {
-        delete x[key];
-      }
-    }
-    return x;
-  }
-  return x;
-}
-function flatMap(xs, f) {
-  const ret = new Array();
-  for (const x of xs) {
-    ret.push(...f(x));
-  }
-  return ret;
-}
-var init_util2 = __esm({
-  "../cloudformation-diff/lib/util.ts"() {
+// ../../../node_modules/@aws-cdk/cloudformation-diff/lib/util.js
+var require_util3 = __commonJS({
+  "../../../node_modules/@aws-cdk/cloudformation-diff/lib/util.js"(exports2) {
     "use strict";
-  }
-});
-// ../cloudformation-diff/lib/iam/statement.ts
-function parseStatements(x) {
-  if (x === void 0) {
-    x = [];
-  }
-  if (!Array.isArray(x)) {
-    x = [x];
-  }
-  return x.map((s) => new Statement(s));
-}
-function parseLambdaPermission(x) {
-  const statement = {
-    Effect: "Allow",
-    Action: x.Action,
-    Resource: x.FunctionName
-  };
-  if (x.Principal !== void 0) {
-    if (x.Principal === "*") {
-      statement.Principal = "*";
-    } else if (/^\d{12}$/.test(x.Principal)) {
-      statement.Principal = { AWS: `arn:aws:iam::${x.Principal}:root` };
-    } else {
-      statement.Principal = { Service: x.Principal };
+    Object.defineProperty(exports2, "__esModule", { value: true });
+    exports2.makeComparator = makeComparator;
+    exports2.dropIfEmpty = dropIfEmpty;
+    exports2.deepRemoveUndefined = deepRemoveUndefined;
+    exports2.flatMap = flatMap;
+    function makeComparator(keyFn) {
+      return (a, b) => {
+        const keyA = keyFn(a);
+        const keyB = keyFn(b);
+        const len = Math.min(keyA.length, keyB.length);
+        for (let i = 0; i < len; i++) {
+          const c = compare(keyA[i], keyB[i]);
+          if (c !== 0) {
+            return c;
+          }
+        }
+        return keyA.length - keyB.length;
+      };
     }
-  }
-  if (x.SourceArn !== void 0) {
-    if (statement.Condition === void 0) {
-      statement.Condition = {};
+    function compare(a, b) {
+      if (a < b) {
+        return -1;
+      }
+      if (b < a) {
+        return 1;
+      }
+      return 0;
     }
-    statement.Condition.ArnLike = { "AWS:SourceArn": x.SourceArn };
-  }
-  if (x.SourceAccount !== void 0) {
-    if (statement.Condition === void 0) {
-      statement.Condition = {};
+    function dropIfEmpty(xs) {
+      return xs.length > 0 ? xs : void 0;
     }
-    statement.Condition.StringEquals = { "AWS:SourceAccount": x.SourceAccount };
-  }
-  if (x.EventSourceToken !== void 0) {
-    if (statement.Condition === void 0) {
-      statement.Condition = {};
+    function deepRemoveUndefined(x) {
+      if (typeof x === void 0 || x === null) {
+        return x;
+      }
+      if (Array.isArray(x)) {
+        return x.map(deepRemoveUndefined);
+      }
+      if (typeof x === "object") {
+        for (const [key, value] of Object.entries(x)) {
+          x[key] = deepRemoveUndefined(value);
+          if (x[key] === void 0) {
+            delete x[key];
+          }
+        }
+        return x;
+      }
+      return x;
     }
-    statement.Condition.StringEquals = { "lambda:EventSourceToken": x.EventSourceToken };
-  }
-  return new Statement(statement);
-}
-function expectString(x) {
-  return typeof x === "string" ? x : void 0;
-}
-function expectEffect(x) {
-  if (x === "Allow" /* Allow */ || x === "Deny" /* Deny */) {
-    return x;
-  }
-  return "Unknown" /* Unknown */;
-}
-function forceListOfStrings(x) {
-  if (typeof x === "string") {
-    return [x];
-  }
-  if (typeof x === "undefined" || x === null) {
-    return [];
-  }
-  if (Array.isArray(x)) {
-    return x.map((e) => forceListOfStrings(e).join(","));
-  }
-  if (typeof x === "object" && x !== null) {
-    const ret = [];
-    for (const [key, value] of Object.entries(x)) {
-      ret.push(...forceListOfStrings(value).map((s) => `${key}:${s}`));
+    function flatMap(xs, f) {
+      const ret = new Array();
+      for (const x of xs) {
+        ret.push(...f(x));
+      }
+      return ret;
     }
-    return ret;
-  }
-  return [`${x}`];
-}
-function renderCondition(condition) {
-  if (!condition || Object.keys(condition).length === 0) {
-    return "";
   }
-  const jsonRepresentation = JSON.stringify(condition, void 0, 2);
-  const lines = jsonRepresentation.split("\n");
-  return lines.slice(1, lines.length - 1).map((s) => s.slice(2)).join("\n");
-}
-var deepEqual3, Statement, Targets;
-var init_statement = __esm({
-  "../cloudformation-diff/lib/iam/statement.ts"() {
-    "use strict";
-    init_maybe_parsed();
-    init_util2();
-    deepEqual3 = require_fast_deep_equal();
-    Statement = class {
+});
+// ../../../node_modules/@aws-cdk/cloudformation-diff/lib/iam/statement.js
+var require_statement = __commonJS({
+  "../../../node_modules/@aws-cdk/cloudformation-diff/lib/iam/statement.js"(exports2) {
+    "use strict";
+    Object.defineProperty(exports2, "__esModule", { value: true });
+    exports2.Effect = exports2.Targets = exports2.Statement = void 0;
+    exports2.parseStatements = parseStatements;
+    exports2.parseLambdaPermission = parseLambdaPermission;
+    exports2.renderCondition = renderCondition;
+    var maybe_parsed_1 = require_maybe_parsed();
+    var util_1 = require_util3();
+    var deepEqual = require_fast_deep_equal();
+    var Statement = class {
       constructor(statement) {
         if (typeof statement === "string") {
           this.sid = void 0;
-          this.effect = "Unknown" /* Unknown */;
+          this.effect = Effect.Unknown;
           this.resources = new Targets({}, "", "");
           this.actions = new Targets({}, "", "");
           this.principals = new Targets({}, "", "");
@@ -27308,7 +27321,7 @@ var init_statement = __esm({
        * Whether this statement is equal to the other statement
        */
       equal(other) {
-        return this.sid === other.sid && this.effect === other.effect && this.serializedIntrinsic === other.serializedIntrinsic && this.resources.equal(other.resources) && this.actions.equal(other.actions) && this.principals.equal(other.principals) && deepEqual3(this.condition, other.condition);
+        return this.sid === other.sid && this.effect === other.effect && this.serializedIntrinsic === other.serializedIntrinsic && this.resources.equal(other.resources) && this.actions.equal(other.actions) && this.principals.equal(other.principals) && deepEqual(this.condition, other.condition);
       }
       render() {
         return this.serializedIntrinsic ? {
@@ -27333,7 +27346,7 @@ var init_statement = __esm({
        * @internal
        */
       _toJson() {
-        return this.serializedIntrinsic ? mkUnparseable(this.serializedIntrinsic) : mkParsed(deepRemoveUndefined({
+        return this.serializedIntrinsic ? (0, maybe_parsed_1.mkUnparseable)(this.serializedIntrinsic) : (0, maybe_parsed_1.mkParsed)((0, util_1.deepRemoveUndefined)({
           sid: this.sid,
           effect: this.effect,
           resources: this.resources._toJson(),
@@ -27350,10 +27363,55 @@ var init_statement = __esm({
        */
       get isNegativeStatement() {
         const notTarget = this.actions.not || this.principals.not || this.resources.not;
-        return this.effect === "Allow" /* Allow */ ? notTarget : !notTarget;
+        return this.effect === Effect.Allow ? notTarget : !notTarget;
       }
     };
-    Targets = class {
+    exports2.Statement = Statement;
+    function parseStatements(x) {
+      if (x === void 0) {
+        x = [];
+      }
+      if (!Array.isArray(x)) {
+        x = [x];
+      }
+      return x.map((s) => new Statement(s));
+    }
+    function parseLambdaPermission(x) {
+      const statement = {
+        Effect: "Allow",
+        Action: x.Action,
+        Resource: x.FunctionName
+      };
+      if (x.Principal !== void 0) {
+        if (x.Principal === "*") {
+          statement.Principal = "*";
+        } else if (/^\d{12}$/.test(x.Principal)) {
+          statement.Principal = { AWS: `arn:aws:iam::${x.Principal}:root` };
+        } else {
+          statement.Principal = { Service: x.Principal };
+        }
+      }
+      if (x.SourceArn !== void 0) {
+        if (statement.Condition === void 0) {
+          statement.Condition = {};
+        }
+        statement.Condition.ArnLike = { "AWS:SourceArn": x.SourceArn };
+      }
+      if (x.SourceAccount !== void 0) {
+        if (statement.Condition === void 0) {
+          statement.Condition = {};
+        }
+        statement.Condition.StringEquals = { "AWS:SourceAccount": x.SourceAccount };
+      }
+      if (x.EventSourceToken !== void 0) {
+        if (statement.Condition === void 0) {
+          statement.Condition = {};
+        }
+        statement.Condition.StringEquals = { "lambda:EventSourceToken": x.EventSourceToken };
+      }
+      return new Statement(statement);
+    }
+    var Targets = class {
       constructor(statement, positiveKey, negativeKey) {
         if (negativeKey in statement) {
           this.values = forceListOfStrings(statement[negativeKey]);
@@ -27371,7 +27429,7 @@ var init_statement = __esm({
        * Whether this set of targets is equal to the other set of targets
        */
       equal(other) {
-        return this.not === other.not && deepEqual3(this.values.sort(), other.values.sort());
+        return this.not === other.not && deepEqual(this.values.sort(), other.values.sort());
       }
       /**
        * If the current value set is empty, put this in it
@@ -27408,21 +27466,59 @@ var init_statement = __esm({
         return { not: this.not, values: this.values };
       }
     };
+    exports2.Targets = Targets;
+    var Effect;
+    (function(Effect2) {
+      Effect2["Unknown"] = "Unknown";
+      Effect2["Allow"] = "Allow";
+      Effect2["Deny"] = "Deny";
+    })(Effect || (exports2.Effect = Effect = {}));
+    function expectString(x) {
+      return typeof x === "string" ? x : void 0;
+    }
+    function expectEffect(x) {
+      if (x === Effect.Allow || x === Effect.Deny) {
+        return x;
+      }
+      return Effect.Unknown;
+    }
+    function forceListOfStrings(x) {
+      if (typeof x === "string") {
+        return [x];
+      }
+      if (typeof x === "undefined" || x === null) {
+        return [];
+      }
+      if (Array.isArray(x)) {
+        return x.map((e) => forceListOfStrings(e).join(","));
+      }
+      if (typeof x === "object" && x !== null) {
+        const ret = [];
+        for (const [key, value] of Object.entries(x)) {
+          ret.push(...forceListOfStrings(value).map((s) => `${key}:${s}`));
+        }
+        return ret;
+      }
+      return [`${x}`];
+    }
+    function renderCondition(condition) {
+      if (!condition || Object.keys(condition).length === 0) {
+        return "";
+      }
+      const jsonRepresentation = JSON.stringify(condition, void 0, 2);
+      const lines = jsonRepresentation.split("\n");
+      return lines.slice(1, lines.length - 1).map((s) => s.slice(2)).join("\n");
+    }
   }
 });
-// ../cloudformation-diff/lib/diffable.ts
-function contains(element, xs) {
-  return xs.some((x) => x.equal(element));
-}
-function difference(collection, elements) {
-  return collection.filter((x) => !contains(x, elements));
-}
-var DiffableCollection;
-var init_diffable = __esm({
-  "../cloudformation-diff/lib/diffable.ts"() {
+// ../../../node_modules/@aws-cdk/cloudformation-diff/lib/diffable.js
+var require_diffable = __commonJS({
+  "../../../node_modules/@aws-cdk/cloudformation-diff/lib/diffable.js"(exports2) {
     "use strict";
-    DiffableCollection = class {
+    Object.defineProperty(exports2, "__esModule", { value: true });
+    exports2.DiffableCollection = void 0;
+    var DiffableCollection = class {
       constructor() {
         this.additions = [];
         this.removals = [];
@@ -27449,101 +27545,100 @@ var init_diffable = __esm({
         return this.removals.length > 0;
       }
     };
+    exports2.DiffableCollection = DiffableCollection;
+    function contains(element, xs) {
+      return xs.some((x) => x.equal(element));
+    }
+    function difference(collection, elements) {
+      return collection.filter((x) => !contains(x, elements));
+    }
   }
 });
-// ../cloudformation-diff/lib/render-intrinsics.ts
-function renderIntrinsics(x) {
-  if (Array.isArray(x)) {
-    return x.filter((el) => !isNoValue(el)).map(renderIntrinsics);
-  }
-  if (isNoValue(x)) {
-    return void 0;
-  }
-  const intrinsic = getIntrinsic(x);
-  if (intrinsic) {
-    if (intrinsic.fn === "Ref") {
-      return "${" + intrinsic.args + "}";
+// ../../../node_modules/@aws-cdk/cloudformation-diff/lib/render-intrinsics.js
+var require_render_intrinsics = __commonJS({
+  "../../../node_modules/@aws-cdk/cloudformation-diff/lib/render-intrinsics.js"(exports2) {
+    "use strict";
+    Object.defineProperty(exports2, "__esModule", { value: true });
+    exports2.renderIntrinsics = renderIntrinsics;
+    function renderIntrinsics(x) {
+      if (Array.isArray(x)) {
+        return x.filter((el) => !isNoValue(el)).map(renderIntrinsics);
+      }
+      if (isNoValue(x)) {
+        return void 0;
+      }
+      const intrinsic = getIntrinsic(x);
+      if (intrinsic) {
+        if (intrinsic.fn === "Ref") {
+          return "${" + intrinsic.args + "}";
+        }
+        if (intrinsic.fn === "Fn::GetAtt") {
+          return "${" + intrinsic.args[0] + "." + intrinsic.args[1] + "}";
+        }
+        if (intrinsic.fn === "Fn::Join") {
+          return unCloudFormationFnJoin(intrinsic.args[0], intrinsic.args[1]);
+        }
+        return stringifyIntrinsic(intrinsic.fn, intrinsic.args);
+      }
+      if (typeof x === "object" && x !== null) {
+        const ret = {};
+        for (const [key, value] of Object.entries(x)) {
+          if (!isNoValue(value)) {
+            ret[key] = renderIntrinsics(value);
+          }
+        }
+        return ret;
+      }
+      return x;
     }
-    if (intrinsic.fn === "Fn::GetAtt") {
-      return "${" + intrinsic.args[0] + "." + intrinsic.args[1] + "}";
+    function unCloudFormationFnJoin(separator, args) {
+      if (Array.isArray(args)) {
+        return args.filter((el) => !isNoValue(el)).map(renderIntrinsics).join(separator);
+      }
+      return stringifyIntrinsic("Fn::Join", [separator, args]);
     }
-    if (intrinsic.fn === "Fn::Join") {
-      return unCloudFormationFnJoin(intrinsic.args[0], intrinsic.args[1]);
+    function stringifyIntrinsic(fn, args) {
+      return JSON.stringify({ [fn]: renderIntrinsics(args) });
     }
-    return stringifyIntrinsic(intrinsic.fn, intrinsic.args);
-  }
-  if (typeof x === "object" && x !== null) {
-    const ret = {};
-    for (const [key, value] of Object.entries(x)) {
-      if (!isNoValue(value)) {
-        ret[key] = renderIntrinsics(value);
+    function getIntrinsic(x) {
+      if (x === void 0 || x === null || Array.isArray(x)) {
+        return void 0;
       }
+      if (typeof x !== "object") {
+        return void 0;
+      }
+      const keys = Object.keys(x);
+      return keys.length === 1 && (keys[0] === "Ref" || keys[0].startsWith("Fn::")) ? { fn: keys[0], args: x[keys[0]] } : void 0;
+    }
+    function isNoValue(x) {
+      const int = getIntrinsic(x);
+      return int && int.fn === "Ref" && int.args === "AWS::NoValue";
     }
-    return ret;
-  }
-  return x;
-}
-function unCloudFormationFnJoin(separator, args) {
-  if (Array.isArray(args)) {
-    return args.filter((el) => !isNoValue(el)).map(renderIntrinsics).join(separator);
-  }
-  return stringifyIntrinsic("Fn::Join", [separator, args]);
-}
-function stringifyIntrinsic(fn, args) {
-  return JSON.stringify({ [fn]: renderIntrinsics(args) });
-}
-function getIntrinsic(x) {
-  if (x === void 0 || x === null || Array.isArray(x)) {
-    return void 0;
-  }
-  if (typeof x !== "object") {
-    return void 0;
-  }
-  const keys = Object.keys(x);
-  return keys.length === 1 && (keys[0] === "Ref" || keys[0].startsWith("Fn::")) ? { fn: keys[0], args: x[keys[0]] } : void 0;
-}
-function isNoValue(x) {
-  const int = getIntrinsic(x);
-  return int && int.fn === "Ref" && int.args === "AWS::NoValue";
-}
-var init_render_intrinsics = __esm({
-  "../cloudformation-diff/lib/render-intrinsics.ts"() {
-    "use strict";
   }
 });
-// ../cloudformation-diff/lib/iam/iam-changes.ts
-function defaultPrincipal(principal, statements) {
-  statements.forEach((s) => s.principals.replaceEmpty(principal));
-  statements.forEach((s) => s.principals.replaceStar(principal));
-  return statements;
-}
-function defaultResource(resource, statements) {
-  statements.forEach((s) => s.resources.replaceEmpty(resource));
-  statements.forEach((s) => s.resources.replaceStar(resource));
-  return statements;
-}
-var import_service_spec_types, chalk3, IamChanges;
-var init_iam_changes = __esm({
-  "../cloudformation-diff/lib/iam/iam-changes.ts"() {
-    "use strict";
-    import_service_spec_types = __toESM(require_lib9());
-    chalk3 = __toESM(require_source());
-    init_iam_identity_center();
-    init_managed_policy();
-    init_statement();
-    init_diffable();
-    init_render_intrinsics();
-    init_util2();
-    IamChanges = class {
+// ../../../node_modules/@aws-cdk/cloudformation-diff/lib/iam/iam-changes.js
+var require_iam_changes = __commonJS({
+  "../../../node_modules/@aws-cdk/cloudformation-diff/lib/iam/iam-changes.js"(exports2) {
+    "use strict";
+    Object.defineProperty(exports2, "__esModule", { value: true });
+    exports2.IamChanges = void 0;
+    var service_spec_types_1 = require_lib9();
+    var chalk3 = require_source();
+    var iam_identity_center_1 = require_iam_identity_center();
+    var managed_policy_1 = require_managed_policy();
+    var statement_1 = require_statement();
+    var diffable_1 = require_diffable();
+    var render_intrinsics_1 = require_render_intrinsics();
+    var util_1 = require_util3();
+    var IamChanges = class {
       constructor(props) {
-        // each entry in a DiffableCollection is used to generate a single row of the security changes table that is presented for cdk diff and cdk deploy.
-        this.statements = new DiffableCollection();
-        this.managedPolicies = new DiffableCollection();
-        this.ssoPermissionSets = new DiffableCollection();
-        this.ssoAssignments = new DiffableCollection();
-        this.ssoInstanceACAConfigs = new DiffableCollection();
+        this.statements = new diffable_1.DiffableCollection();
+        this.managedPolicies = new diffable_1.DiffableCollection();
+        this.ssoPermissionSets = new diffable_1.DiffableCollection();
+        this.ssoAssignments = new diffable_1.DiffableCollection();
+        this.ssoInstanceACAConfigs = new diffable_1.DiffableCollection();
         for (const propertyChange of props.propertyChanges) {
           this.readPropertyChange(propertyChange);
         }
@@ -27596,7 +27691,7 @@ var init_iam_changes = __esm({
             renderedStatement.condition
           ].map((s) => chalk3.red(s)));
         }
-        ret.sort(makeComparator((row) => [row[1]]));
+        ret.sort((0, util_1.makeComparator)((row) => [row[1]]));
         ret.splice(0, 0, header);
         return ret;
       }
@@ -27617,7 +27712,7 @@ var init_iam_changes = __esm({
             att.managedPolicyArn
           ].map((s) => chalk3.red(s)));
         }
-        ret.sort(makeComparator((row) => [row[1]]));
+        ret.sort((0, util_1.makeComparator)((row) => [row[1]]));
         ret.splice(0, 0, header);
         return ret;
       }
@@ -27648,7 +27743,7 @@ var init_iam_changes = __esm({
             att.targetType || ""
           ].map((s) => chalk3.red(s)));
         }
-        ret.sort(makeComparator((row) => [row[1]]));
+        ret.sort((0, util_1.makeComparator)((row) => [row[1]]));
         ret.splice(0, 0, header);
         return ret;
       }
@@ -27676,7 +27771,7 @@ var init_iam_changes = __esm({
             ((_b = att.accessControlAttributes) == null ? void 0 : _b.map(formatAccessControlAttribute).join("\n")) || ""
           ].map((s) => chalk3.red(s)));
         }
-        ret.sort(makeComparator((row) => [row[1]]));
+        ret.sort((0, util_1.makeComparator)((row) => [row[1]]));
         ret.splice(0, 0, header);
         return ret;
       }
@@ -27718,7 +27813,7 @@ var init_iam_changes = __esm({
             ((_b = att.ssoCustomerManagedPolicyReferences) == null ? void 0 : _b.map(formatManagedPolicyRef).join("\n")) || ""
           ].map((s) => chalk3.red(s)));
         }
-        ret.sort(makeComparator((row) => [row[1]]));
+        ret.sort((0, util_1.makeComparator)((row) => [row[1]]));
         ret.splice(0, 0, header);
         return ret;
       }
@@ -27729,24 +27824,24 @@ var init_iam_changes = __esm({
        * @internal
        */
       _toJson() {
-        return deepRemoveUndefined({
-          statementAdditions: dropIfEmpty(this.statements.additions.map((s) => s._toJson())),
-          statementRemovals: dropIfEmpty(this.statements.removals.map((s) => s._toJson())),
-          managedPolicyAdditions: dropIfEmpty(this.managedPolicies.additions.map((s) => s._toJson())),
-          managedPolicyRemovals: dropIfEmpty(this.managedPolicies.removals.map((s) => s._toJson()))
+        return (0, util_1.deepRemoveUndefined)({
+          statementAdditions: (0, util_1.dropIfEmpty)(this.statements.additions.map((s) => s._toJson())),
+          statementRemovals: (0, util_1.dropIfEmpty)(this.statements.removals.map((s) => s._toJson())),
+          managedPolicyAdditions: (0, util_1.dropIfEmpty)(this.managedPolicies.additions.map((s) => s._toJson())),
+          managedPolicyRemovals: (0, util_1.dropIfEmpty)(this.managedPolicies.removals.map((s) => s._toJson()))
         });
       }
       readPropertyChange(propertyChange) {
         switch (propertyChange.scrutinyType) {
-          case import_service_spec_types.PropertyScrutinyType.InlineIdentityPolicies:
+          case service_spec_types_1.PropertyScrutinyType.InlineIdentityPolicies:
             this.statements.addOld(...this.readIdentityPolicies(propertyChange.oldValue, propertyChange.resourceLogicalId));
             this.statements.addNew(...this.readIdentityPolicies(propertyChange.newValue, propertyChange.resourceLogicalId));
             break;
-          case import_service_spec_types.PropertyScrutinyType.InlineResourcePolicy:
+          case service_spec_types_1.PropertyScrutinyType.InlineResourcePolicy:
             this.statements.addOld(...this.readResourceStatements(propertyChange.oldValue, propertyChange.resourceLogicalId));
             this.statements.addNew(...this.readResourceStatements(propertyChange.newValue, propertyChange.resourceLogicalId));
             break;
-          case import_service_spec_types.PropertyScrutinyType.ManagedPolicies:
+          case service_spec_types_1.PropertyScrutinyType.ManagedPolicies:
             this.managedPolicies.addOld(...this.readManagedPolicies(propertyChange.oldValue, propertyChange.resourceLogicalId));
             this.managedPolicies.addNew(...this.readManagedPolicies(propertyChange.newValue, propertyChange.resourceLogicalId));
             break;
@@ -27754,27 +27849,27 @@ var init_iam_changes = __esm({
       }
       readResourceChange(resourceChange) {
         switch (resourceChange.scrutinyType) {
-          case import_service_spec_types.ResourceScrutinyType.IdentityPolicyResource:
+          case service_spec_types_1.ResourceScrutinyType.IdentityPolicyResource:
             this.statements.addOld(...this.readIdentityPolicyResource(resourceChange.oldProperties));
             this.statements.addNew(...this.readIdentityPolicyResource(resourceChange.newProperties));
             break;
-          case import_service_spec_types.ResourceScrutinyType.ResourcePolicyResource:
+          case service_spec_types_1.ResourceScrutinyType.ResourcePolicyResource:
             this.statements.addOld(...this.readResourcePolicyResource(resourceChange.oldProperties));
             this.statements.addNew(...this.readResourcePolicyResource(resourceChange.newProperties));
             break;
-          case import_service_spec_types.ResourceScrutinyType.LambdaPermission:
+          case service_spec_types_1.ResourceScrutinyType.LambdaPermission:
             this.statements.addOld(...this.readLambdaStatements(resourceChange.oldProperties));
             this.statements.addNew(...this.readLambdaStatements(resourceChange.newProperties));
             break;
-          case import_service_spec_types.ResourceScrutinyType.SsoPermissionSet:
+          case service_spec_types_1.ResourceScrutinyType.SsoPermissionSet:
             this.ssoPermissionSets.addOld(...this.readSsoPermissionSet(resourceChange.oldProperties, resourceChange.resourceLogicalId));
             this.ssoPermissionSets.addNew(...this.readSsoPermissionSet(resourceChange.newProperties, resourceChange.resourceLogicalId));
             break;
-          case import_service_spec_types.ResourceScrutinyType.SsoAssignmentResource:
+          case service_spec_types_1.ResourceScrutinyType.SsoAssignmentResource:
             this.ssoAssignments.addOld(...this.readSsoAssignments(resourceChange.oldProperties, resourceChange.resourceLogicalId));
             this.ssoAssignments.addNew(...this.readSsoAssignments(resourceChange.newProperties, resourceChange.resourceLogicalId));
             break;
-          case import_service_spec_types.ResourceScrutinyType.SsoInstanceACAConfigResource:
+          case service_spec_types_1.ResourceScrutinyType.SsoInstanceACAConfigResource:
             this.ssoInstanceACAConfigs.addOld(...this.readSsoInstanceACAConfigs(resourceChange.oldProperties, resourceChange.resourceLogicalId));
             this.ssoInstanceACAConfigs.addNew(...this.readSsoInstanceACAConfigs(resourceChange.newProperties, resourceChange.resourceLogicalId));
             break;
@@ -27788,10 +27883,10 @@ var init_iam_changes = __esm({
           return [];
         }
         const appliesToPrincipal = "AWS:${" + logicalId + "}";
-        return flatMap(policies, (policy) => {
+        return (0, util_1.flatMap)(policies, (policy) => {
           var _a;
           const unparsedStatement = ((_a = policy.PolicyDocument) == null ? void 0 : _a.Statement) ? policy.PolicyDocument.Statement : policy;
-          return defaultPrincipal(appliesToPrincipal, parseStatements(renderIntrinsics(unparsedStatement)));
+          return defaultPrincipal(appliesToPrincipal, (0, statement_1.parseStatements)((0, render_intrinsics_1.renderIntrinsics)(unparsedStatement)));
         });
       }
       /**
@@ -27801,19 +27896,19 @@ var init_iam_changes = __esm({
         if (properties === void 0) {
           return [];
         }
-        properties = renderIntrinsics(properties);
+        properties = (0, render_intrinsics_1.renderIntrinsics)(properties);
         const principals = (properties.Groups || []).concat(properties.Users || []).concat(properties.Roles || []);
-        return flatMap(principals, (principal) => {
+        return (0, util_1.flatMap)(principals, (principal) => {
           const ref = "AWS:" + principal;
-          return defaultPrincipal(ref, parseStatements(properties.PolicyDocument.Statement));
+          return defaultPrincipal(ref, (0, statement_1.parseStatements)(properties.PolicyDocument.Statement));
         });
       }
       readSsoInstanceACAConfigs(properties, logicalId) {
         if (properties === void 0) {
           return [];
         }
-        properties = renderIntrinsics(properties);
-        return [new SsoInstanceACAConfig({
+        properties = (0, render_intrinsics_1.renderIntrinsics)(properties);
+        return [new iam_identity_center_1.SsoInstanceACAConfig({
           cfnLogicalId: "${" + logicalId + "}",
           ssoInstanceArn: properties.InstanceArn,
           accessControlAttributes: properties.AccessControlAttributes
@@ -27823,8 +27918,8 @@ var init_iam_changes = __esm({
         if (properties === void 0) {
           return [];
         }
-        properties = renderIntrinsics(properties);
-        return [new SsoAssignment({
+        properties = (0, render_intrinsics_1.renderIntrinsics)(properties);
+        return [new iam_identity_center_1.SsoAssignment({
           cfnLogicalId: "${" + logicalId + "}",
           ssoInstanceArn: properties.InstanceArn,
           permissionSetArn: properties.PermissionSetArn,
@@ -27838,8 +27933,8 @@ var init_iam_changes = __esm({
         if (properties === void 0) {
           return [];
         }
-        properties = renderIntrinsics(properties);
-        return [new SsoPermissionSet({
+        properties = (0, render_intrinsics_1.renderIntrinsics)(properties);
+        return [new iam_identity_center_1.SsoPermissionSet({
           cfnLogicalId: "${" + logicalId + "}",
           name: properties.Name,
           ssoInstanceArn: properties.InstanceArn,
@@ -27852,7 +27947,7 @@ var init_iam_changes = __esm({
           return [];
         }
         const appliesToResource = "${" + logicalId + ".Arn}";
-        return defaultResource(appliesToResource, parseStatements(renderIntrinsics(policy.Statement)));
+        return defaultResource(appliesToResource, (0, statement_1.parseStatements)((0, render_intrinsics_1.renderIntrinsics)(policy.Statement)));
       }
       /**
        * Parse an AWS::*::{Bucket,Topic,Queue}policy
@@ -27861,15 +27956,15 @@ var init_iam_changes = __esm({
         if (properties === void 0) {
           return [];
         }
-        properties = renderIntrinsics(properties);
+        properties = (0, render_intrinsics_1.renderIntrinsics)(properties);
         const policyKeys = Object.keys(properties).filter((key) => key.indexOf("Policy") > -1);
         const resourceKeys = Object.keys(properties).filter((key) => !policyKeys.includes(key) && !key.endsWith("Name"));
         let resources = resourceKeys.length === 1 ? properties[resourceKeys[0]] : ["???"];
         if (!Array.isArray(resources)) {
           resources = [resources];
         }
-        return flatMap(resources, (resource) => {
-          return defaultResource(resource, parseStatements(properties[policyKeys[0]].Statement));
+        return (0, util_1.flatMap)(resources, (resource) => {
+          return defaultResource(resource, (0, statement_1.parseStatements)(properties[policyKeys[0]].Statement));
         });
       }
       readManagedPolicies(policyArns, logicalId) {
@@ -27877,87 +27972,56 @@ var init_iam_changes = __esm({
           return [];
         }
         const rep = "${" + logicalId + "}";
-        return ManagedPolicyAttachment.parseManagedPolicies(rep, renderIntrinsics(policyArns));
+        return managed_policy_1.ManagedPolicyAttachment.parseManagedPolicies(rep, (0, render_intrinsics_1.renderIntrinsics)(policyArns));
       }
       readLambdaStatements(properties) {
         if (!properties) {
           return [];
         }
-        return [parseLambdaPermission(renderIntrinsics(properties))];
+        return [(0, statement_1.parseLambdaPermission)((0, render_intrinsics_1.renderIntrinsics)(properties))];
       }
     };
+    exports2.IamChanges = IamChanges;
     IamChanges.IamPropertyScrutinies = [
-      import_service_spec_types.PropertyScrutinyType.InlineIdentityPolicies,
-      import_service_spec_types.PropertyScrutinyType.InlineResourcePolicy,
-      import_service_spec_types.PropertyScrutinyType.ManagedPolicies
+      service_spec_types_1.PropertyScrutinyType.InlineIdentityPolicies,
+      service_spec_types_1.PropertyScrutinyType.InlineResourcePolicy,
+      service_spec_types_1.PropertyScrutinyType.ManagedPolicies
     ];
     IamChanges.IamResourceScrutinies = [
-      import_service_spec_types.ResourceScrutinyType.ResourcePolicyResource,
-      import_service_spec_types.ResourceScrutinyType.IdentityPolicyResource,
-      import_service_spec_types.ResourceScrutinyType.LambdaPermission,
-      import_service_spec_types.ResourceScrutinyType.SsoAssignmentResource,
-      import_service_spec_types.ResourceScrutinyType.SsoInstanceACAConfigResource,
-      import_service_spec_types.ResourceScrutinyType.SsoPermissionSet
+      service_spec_types_1.ResourceScrutinyType.ResourcePolicyResource,
+      service_spec_types_1.ResourceScrutinyType.IdentityPolicyResource,
+      service_spec_types_1.ResourceScrutinyType.LambdaPermission,
+      service_spec_types_1.ResourceScrutinyType.SsoAssignmentResource,
+      service_spec_types_1.ResourceScrutinyType.SsoInstanceACAConfigResource,
+      service_spec_types_1.ResourceScrutinyType.SsoPermissionSet
     ];
+    function defaultPrincipal(principal, statements) {
+      statements.forEach((s) => s.principals.replaceEmpty(principal));
+      statements.forEach((s) => s.principals.replaceStar(principal));
+      return statements;
+    }
+    function defaultResource(resource, statements) {
+      statements.forEach((s) => s.resources.replaceEmpty(resource));
+      statements.forEach((s) => s.resources.replaceStar(resource));
+      return statements;
+    }
   }
 });
-// ../cloudformation-diff/lib/network/security-group-rule.ts
-function peerEqual(a, b) {
-  if (a === void 0 !== (b === void 0)) {
-    return false;
-  }
-  if (a === void 0) {
-    return true;
-  }
-  if (a.kind !== b.kind) {
-    return false;
-  }
-  switch (a.kind) {
-    case "cidr-ip":
-      return a.ip === b.ip;
-    case "security-group":
-      return a.securityGroupId === b.securityGroupId;
-    case "prefix-list":
-      return a.prefixListId === b.prefixListId;
-  }
-}
-function findFirst(obj, keys, fn) {
-  for (const key of keys) {
-    try {
-      if (key in obj) {
-        return fn(obj[key]);
-      }
-    } catch (e) {
-      debugger;
-    }
-  }
-  return void 0;
-}
-var SecurityGroupRule;
-var init_security_group_rule = __esm({
-  "../cloudformation-diff/lib/network/security-group-rule.ts"() {
+// ../../../node_modules/@aws-cdk/cloudformation-diff/lib/network/security-group-rule.js
+var require_security_group_rule = __commonJS({
+  "../../../node_modules/@aws-cdk/cloudformation-diff/lib/network/security-group-rule.js"(exports2) {
     "use strict";
-    SecurityGroupRule = class {
+    Object.defineProperty(exports2, "__esModule", { value: true });
+    exports2.SecurityGroupRule = void 0;
+    var SecurityGroupRule = class {
       constructor(ruleObject, groupRef) {
         var _a;
         this.ipProtocol = ((_a = ruleObject.IpProtocol) == null ? void 0 : _a.toString()) || "*unknown*";
         this.fromPort = ruleObject.FromPort;
         this.toPort = ruleObject.ToPort;
         this.groupId = ruleObject.GroupId || groupRef || "*unknown*";
-        this.peer = findFirst(
-          ruleObject,
-          ["CidrIp", "CidrIpv6"],
-          (ip) => ({ kind: "cidr-ip", ip })
-        ) || findFirst(
-          ruleObject,
-          ["DestinationSecurityGroupId", "SourceSecurityGroupId"],
-          (securityGroupId) => ({ kind: "security-group", securityGroupId })
-        ) || findFirst(
-          ruleObject,
-          ["DestinationPrefixListId", "SourcePrefixListId"],
-          (prefixListId) => ({ kind: "prefix-list", prefixListId })
-        );
+        this.peer = findFirst(ruleObject, ["CidrIp", "CidrIpv6"], (ip) => ({ kind: "cidr-ip", ip })) || findFirst(ruleObject, ["DestinationSecurityGroupId", "SourceSecurityGroupId"], (securityGroupId) => ({ kind: "security-group", securityGroupId })) || findFirst(ruleObject, ["DestinationPrefixListId", "SourcePrefixListId"], (prefixListId) => ({ kind: "prefix-list", prefixListId }));
       }
       equal(other) {
         return this.ipProtocol === other.ipProtocol && this.fromPort === other.fromPort && this.toPort === other.toPort && peerEqual(this.peer, other.peer);
@@ -28004,23 +28068,56 @@ var init_security_group_rule = __esm({
         };
       }
     };
+    exports2.SecurityGroupRule = SecurityGroupRule;
+    function peerEqual(a, b) {
+      if (a === void 0 !== (b === void 0)) {
+        return false;
+      }
+      if (a === void 0) {
+        return true;
+      }
+      if (a.kind !== b.kind) {
+        return false;
+      }
+      switch (a.kind) {
+        case "cidr-ip":
+          return a.ip === b.ip;
+        case "security-group":
+          return a.securityGroupId === b.securityGroupId;
+        case "prefix-list":
+          return a.prefixListId === b.prefixListId;
+      }
+    }
+    function findFirst(obj, keys, fn) {
+      for (const key of keys) {
+        try {
+          if (key in obj) {
+            return fn(obj[key]);
+          }
+        } catch (e) {
+          debugger;
+        }
+      }
+      return void 0;
+    }
   }
 });
-// ../cloudformation-diff/lib/network/security-group-changes.ts
-var chalk4, SecurityGroupChanges;
-var init_security_group_changes = __esm({
-  "../cloudformation-diff/lib/network/security-group-changes.ts"() {
+// ../../../node_modules/@aws-cdk/cloudformation-diff/lib/network/security-group-changes.js
+var require_security_group_changes = __commonJS({
+  "../../../node_modules/@aws-cdk/cloudformation-diff/lib/network/security-group-changes.js"(exports2) {
     "use strict";
-    chalk4 = __toESM(require_source());
-    init_security_group_rule();
-    init_diffable();
-    init_render_intrinsics();
-    init_util2();
-    SecurityGroupChanges = class {
+    Object.defineProperty(exports2, "__esModule", { value: true });
+    exports2.SecurityGroupChanges = void 0;
+    var chalk3 = require_source();
+    var security_group_rule_1 = require_security_group_rule();
+    var diffable_1 = require_diffable();
+    var render_intrinsics_1 = require_render_intrinsics();
+    var util_1 = require_util3();
+    var SecurityGroupChanges = class {
       constructor(props) {
-        this.ingress = new DiffableCollection();
-        this.egress = new DiffableCollection();
+        this.ingress = new diffable_1.DiffableCollection();
+        this.egress = new diffable_1.DiffableCollection();
         for (const ingressProp of props.ingressRulePropertyChanges) {
           this.ingress.addOld(...this.readInlineRules(ingressProp.oldValue, ingressProp.resourceLogicalId));
           this.ingress.addNew(...this.readInlineRules(ingressProp.newValue, ingressProp.resourceLogicalId));
@@ -28057,21 +28154,21 @@ var init_security_group_changes = __esm({
           inOut,
           rule.describeProtocol(),
           rule.describePeer()
-        ].map((s) => plusMin === "+" ? chalk4.green(s) : chalk4.red(s));
+        ].map((s) => plusMin === "+" ? chalk3.green(s) : chalk3.red(s));
         ret.push(...this.ingress.additions.map(renderRule("+", inWord)));
         ret.push(...this.egress.additions.map(renderRule("+", outWord)));
         ret.push(...this.ingress.removals.map(renderRule("-", inWord)));
         ret.push(...this.egress.removals.map(renderRule("-", outWord)));
-        ret.sort(makeComparator((row) => [row[1], row[2].indexOf(inWord) > -1 ? 0 : 1]));
+        ret.sort((0, util_1.makeComparator)((row) => [row[1], row[2].indexOf(inWord) > -1 ? 0 : 1]));
         ret.splice(0, 0, header);
         return ret;
       }
       toJson() {
-        return deepRemoveUndefined({
-          ingressRuleAdditions: dropIfEmpty(this.ingress.additions.map((s) => s.toJson())),
-          ingressRuleRemovals: dropIfEmpty(this.ingress.removals.map((s) => s.toJson())),
-          egressRuleAdditions: dropIfEmpty(this.egress.additions.map((s) => s.toJson())),
-          egressRuleRemovals: dropIfEmpty(this.egress.removals.map((s) => s.toJson()))
+        return (0, util_1.deepRemoveUndefined)({
+          ingressRuleAdditions: (0, util_1.dropIfEmpty)(this.ingress.additions.map((s) => s.toJson())),
+          ingressRuleRemovals: (0, util_1.dropIfEmpty)(this.ingress.removals.map((s) => s.toJson())),
+          egressRuleAdditions: (0, util_1.dropIfEmpty)(this.egress.additions.map((s) => s.toJson())),
+          egressRuleRemovals: (0, util_1.dropIfEmpty)(this.egress.removals.map((s) => s.toJson()))
         });
       }
       get rulesAdded() {
@@ -28083,59 +28180,34 @@ var init_security_group_changes = __esm({
         }
         const ref = "${" + logicalId + ".GroupId}";
         return rules.flatMap((r) => {
-          const rendered = renderIntrinsics(r);
-          return typeof rendered === "object" ? [new SecurityGroupRule(rendered, ref)] : [];
+          const rendered = (0, render_intrinsics_1.renderIntrinsics)(r);
+          return typeof rendered === "object" ? [new security_group_rule_1.SecurityGroupRule(rendered, ref)] : [];
         });
       }
       readRuleResource(resource) {
         if (!resource) {
           return [];
         }
-        return [new SecurityGroupRule(renderIntrinsics(resource))];
+        return [new security_group_rule_1.SecurityGroupRule((0, render_intrinsics_1.renderIntrinsics)(resource))];
       }
     };
+    exports2.SecurityGroupChanges = SecurityGroupChanges;
   }
 });
-// ../cloudformation-diff/lib/diff/types.ts
-function worstImpact(one, two) {
-  if (!two) {
-    return one;
-  }
-  const badness = {
-    ["NO_CHANGE" /* NO_CHANGE */]: 0,
-    ["WILL_IMPORT" /* WILL_IMPORT */]: 0,
-    ["WILL_UPDATE" /* WILL_UPDATE */]: 1,
-    ["WILL_CREATE" /* WILL_CREATE */]: 2,
-    ["WILL_ORPHAN" /* WILL_ORPHAN */]: 3,
-    ["MAY_REPLACE" /* MAY_REPLACE */]: 4,
-    ["WILL_REPLACE" /* WILL_REPLACE */]: 5,
-    ["WILL_DESTROY" /* WILL_DESTROY */]: 6
-  };
-  return badness[one] > badness[two] ? one : two;
-}
-function isPropertyDifference(diff) {
-  return diff.changeImpact !== void 0;
-}
-function onlyChanges(xs) {
-  const ret = {};
-  for (const [key, diff] of Object.entries(xs)) {
-    if (diff.isDifferent) {
-      ret[key] = diff;
-    }
-  }
-  return ret;
-}
-var import_assert, import_service_spec_types2, TemplateDiff, Difference, PropertyDifference, DifferenceCollection, ConditionDifference, MappingDifference, MetadataDifference, OutputDifference, ParameterDifference, ResourceImpact, ResourceDifference;
-var init_types = __esm({
-  "../cloudformation-diff/lib/diff/types.ts"() {
-    "use strict";
-    import_assert = require("assert");
-    import_service_spec_types2 = __toESM(require_lib9());
-    init_util();
-    init_iam_changes();
-    init_security_group_changes();
-    TemplateDiff = class {
+// ../../../node_modules/@aws-cdk/cloudformation-diff/lib/diff/types.js
+var require_types = __commonJS({
+  "../../../node_modules/@aws-cdk/cloudformation-diff/lib/diff/types.js"(exports2) {
+    "use strict";
+    Object.defineProperty(exports2, "__esModule", { value: true });
+    exports2.ResourceDifference = exports2.ResourceImpact = exports2.ParameterDifference = exports2.OutputDifference = exports2.MetadataDifference = exports2.MappingDifference = exports2.ConditionDifference = exports2.DifferenceCollection = exports2.PropertyDifference = exports2.Difference = exports2.TemplateDiff = void 0;
+    exports2.isPropertyDifference = isPropertyDifference;
+    var assert_1 = require("assert");
+    var service_spec_types_1 = require_lib9();
+    var util_1 = require_util2();
+    var iam_changes_1 = require_iam_changes();
+    var security_group_changes_1 = require_security_group_changes();
+    var TemplateDiff = class {
       constructor(args) {
         if (args.awsTemplateFormatVersion !== void 0) {
           this.awsTemplateFormatVersion = args.awsTemplateFormatVersion;
@@ -28153,15 +28225,15 @@ var init_types = __esm({
         this.parameters = args.parameters || new DifferenceCollection({});
         this.resources = args.resources || new DifferenceCollection({});
         this.unknown = args.unknown || new DifferenceCollection({});
-        this.iamChanges = new IamChanges({
-          propertyChanges: this.scrutinizablePropertyChanges(IamChanges.IamPropertyScrutinies),
-          resourceChanges: this.scrutinizableResourceChanges(IamChanges.IamResourceScrutinies)
+        this.iamChanges = new iam_changes_1.IamChanges({
+          propertyChanges: this.scrutinizablePropertyChanges(iam_changes_1.IamChanges.IamPropertyScrutinies),
+          resourceChanges: this.scrutinizableResourceChanges(iam_changes_1.IamChanges.IamResourceScrutinies)
         });
-        this.securityGroupChanges = new SecurityGroupChanges({
-          egressRulePropertyChanges: this.scrutinizablePropertyChanges([import_service_spec_types2.PropertyScrutinyType.EgressRules]),
-          ingressRulePropertyChanges: this.scrutinizablePropertyChanges([import_service_spec_types2.PropertyScrutinyType.IngressRules]),
-          egressRuleResourceChanges: this.scrutinizableResourceChanges([import_service_spec_types2.ResourceScrutinyType.EgressRuleResource]),
-          ingressRuleResourceChanges: this.scrutinizableResourceChanges([import_service_spec_types2.ResourceScrutinyType.IngressRuleResource])
+        this.securityGroupChanges = new security_group_changes_1.SecurityGroupChanges({
+          egressRulePropertyChanges: this.scrutinizablePropertyChanges([service_spec_types_1.PropertyScrutinyType.EgressRules]),
+          ingressRulePropertyChanges: this.scrutinizablePropertyChanges([service_spec_types_1.PropertyScrutinyType.IngressRules]),
+          egressRuleResourceChanges: this.scrutinizableResourceChanges([service_spec_types_1.ResourceScrutinyType.EgressRuleResource]),
+          ingressRuleResourceChanges: this.scrutinizableResourceChanges([service_spec_types_1.ResourceScrutinyType.IngressRuleResource])
         });
       }
       get differenceCount() {
@@ -28215,9 +28287,9 @@ var init_types = __esm({
           if (!resourceChange.resourceType) {
             continue;
           }
-          const newTypeProps = ((_a = loadResourceModel(resourceChange.resourceType)) == null ? void 0 : _a.properties) || {};
+          const newTypeProps = ((_a = (0, util_1.loadResourceModel)(resourceChange.resourceType)) == null ? void 0 : _a.properties) || {};
           for (const [propertyName, prop] of Object.entries(newTypeProps)) {
-            const propScrutinyType = prop.scrutinizable || import_service_spec_types2.PropertyScrutinyType.None;
+            const propScrutinyType = prop.scrutinizable || service_spec_types_1.PropertyScrutinyType.None;
             if (scrutinyTypes.includes(propScrutinyType)) {
               ret.push({
                 resourceLogicalId,
@@ -28251,7 +28323,7 @@ var init_types = __esm({
           };
           if (resourceChange.resourceTypeChanged) {
             if (resourceChange.oldResourceType) {
-              const oldResourceModel = loadResourceModel(resourceChange.oldResourceType);
+              const oldResourceModel = (0, util_1.loadResourceModel)(resourceChange.oldResourceType);
               if (oldResourceModel && this.resourceIsScrutinizable(oldResourceModel, scrutinyTypes)) {
                 ret.push({
                   ...commonProps,
@@ -28262,7 +28334,7 @@ var init_types = __esm({
               }
             }
             if (resourceChange.newResourceType) {
-              const newResourceModel = loadResourceModel(resourceChange.newResourceType);
+              const newResourceModel = (0, util_1.loadResourceModel)(resourceChange.newResourceType);
               if (newResourceModel && this.resourceIsScrutinizable(newResourceModel, scrutinyTypes)) {
                 ret.push({
                   ...commonProps,
@@ -28276,7 +28348,7 @@ var init_types = __esm({
             if (!resourceChange.resourceType) {
               continue;
             }
-            const resourceModel = loadResourceModel(resourceChange.resourceType);
+            const resourceModel = (0, util_1.loadResourceModel)(resourceChange.resourceType);
             if (resourceModel && this.resourceIsScrutinizable(resourceModel, scrutinyTypes)) {
               ret.push({
                 ...commonProps,
@@ -28289,10 +28361,11 @@ var init_types = __esm({
         return ret;
       }
       resourceIsScrutinizable(res, scrutinyTypes) {
-        return scrutinyTypes.includes(res.scrutinizable || import_service_spec_types2.ResourceScrutinyType.None);
+        return scrutinyTypes.includes(res.scrutinizable || service_spec_types_1.ResourceScrutinyType.None);
       }
     };
-    Difference = class {
+    exports2.TemplateDiff = TemplateDiff;
+    var Difference = class {
       /**
        * @param oldValue the old value, cannot be equal (to the sense of +deepEqual+) to +newValue+.
        * @param newValue the new value, cannot be equal (to the sense of +deepEqual+) to +oldValue+.
@@ -28301,9 +28374,9 @@ var init_types = __esm({
         this.oldValue = oldValue;
         this.newValue = newValue;
         if (oldValue === void 0 && newValue === void 0) {
-          throw new import_assert.AssertionError({ message: "oldValue and newValue are both undefined!" });
+          throw new assert_1.AssertionError({ message: "oldValue and newValue are both undefined!" });
         }
-        this.isDifferent = !deepEqual(oldValue, newValue);
+        this.isDifferent = !(0, util_1.deepEqual)(oldValue, newValue);
       }
       /** @returns +true+ if the element is new to the template. */
       get isAddition() {
@@ -28318,13 +28391,15 @@ var init_types = __esm({
         return this.oldValue !== void 0 && this.newValue !== void 0;
       }
     };
-    PropertyDifference = class extends Difference {
+    exports2.Difference = Difference;
+    var PropertyDifference = class extends Difference {
       constructor(oldValue, newValue, args) {
         super(oldValue, newValue);
         this.changeImpact = args.changeImpact;
       }
     };
-    DifferenceCollection = class _DifferenceCollection {
+    exports2.PropertyDifference = PropertyDifference;
+    var DifferenceCollection = class _DifferenceCollection {
       constructor(diffs) {
         this.diffs = diffs;
       }
@@ -28394,22 +28469,24 @@ var init_types = __esm({
         others.forEach((v) => cb(v.logicalId, v.change));
       }
     };
-    ConditionDifference = class extends Difference {
-      // TODO: define specific difference attributes
+    exports2.DifferenceCollection = DifferenceCollection;
+    var ConditionDifference = class extends Difference {
     };
-    MappingDifference = class extends Difference {
-      // TODO: define specific difference attributes
+    exports2.ConditionDifference = ConditionDifference;
+    var MappingDifference = class extends Difference {
     };
-    MetadataDifference = class extends Difference {
-      // TODO: define specific difference attributes
+    exports2.MappingDifference = MappingDifference;
+    var MetadataDifference = class extends Difference {
     };
-    OutputDifference = class extends Difference {
-      // TODO: define specific difference attributes
+    exports2.MetadataDifference = MetadataDifference;
+    var OutputDifference = class extends Difference {
     };
-    ParameterDifference = class extends Difference {
-      // TODO: define specific difference attributes
+    exports2.OutputDifference = OutputDifference;
+    var ParameterDifference = class extends Difference {
     };
-    ResourceImpact = /* @__PURE__ */ ((ResourceImpact3) => {
+    exports2.ParameterDifference = ParameterDifference;
+    var ResourceImpact2;
+    (function(ResourceImpact3) {
       ResourceImpact3["WILL_UPDATE"] = "WILL_UPDATE";
       ResourceImpact3["WILL_CREATE"] = "WILL_CREATE";
       ResourceImpact3["WILL_REPLACE"] = "WILL_REPLACE";
@@ -28418,9 +28495,24 @@ var init_types = __esm({
       ResourceImpact3["WILL_ORPHAN"] = "WILL_ORPHAN";
       ResourceImpact3["WILL_IMPORT"] = "WILL_IMPORT";
       ResourceImpact3["NO_CHANGE"] = "NO_CHANGE";
-      return ResourceImpact3;
-    })(ResourceImpact || {});
-    ResourceDifference = class {
+    })(ResourceImpact2 || (exports2.ResourceImpact = ResourceImpact2 = {}));
+    function worstImpact(one, two) {
+      if (!two) {
+        return one;
+      }
+      const badness = {
+        [ResourceImpact2.NO_CHANGE]: 0,
+        [ResourceImpact2.WILL_IMPORT]: 0,
+        [ResourceImpact2.WILL_UPDATE]: 1,
+        [ResourceImpact2.WILL_CREATE]: 2,
+        [ResourceImpact2.WILL_ORPHAN]: 3,
+        [ResourceImpact2.MAY_REPLACE]: 4,
+        [ResourceImpact2.WILL_REPLACE]: 5,
+        [ResourceImpact2.WILL_DESTROY]: 6
+      };
+      return badness[one] > badness[two] ? one : two;
+    }
+    var ResourceDifference2 = class {
       constructor(oldValue, newValue, args) {
         this.oldValue = oldValue;
         this.newValue = newValue;
@@ -28511,18 +28603,18 @@ var init_types = __esm({
       }
       get changeImpact() {
         if (this.isImport) {
-          return "WILL_IMPORT" /* WILL_IMPORT */;
+          return ResourceImpact2.WILL_IMPORT;
         }
         if (this.resourceTypes.oldType !== this.resourceTypes.newType) {
           if (this.resourceTypes.oldType === void 0) {
-            return "WILL_CREATE" /* WILL_CREATE */;
+            return ResourceImpact2.WILL_CREATE;
           }
           if (this.resourceTypes.newType === void 0) {
-            return this.oldValue.DeletionPolicy === "Retain" ? "WILL_ORPHAN" /* WILL_ORPHAN */ : "WILL_DESTROY" /* WILL_DESTROY */;
+            return this.oldValue.DeletionPolicy === "Retain" ? ResourceImpact2.WILL_ORPHAN : ResourceImpact2.WILL_DESTROY;
           }
-          return "WILL_REPLACE" /* WILL_REPLACE */;
+          return ResourceImpact2.WILL_REPLACE;
         }
-        const baseImpact = Object.keys(this.otherChanges).length > 0 ? "WILL_UPDATE" /* WILL_UPDATE */ : "NO_CHANGE" /* NO_CHANGE */;
+        const baseImpact = Object.keys(this.otherChanges).length > 0 ? ResourceImpact2.WILL_UPDATE : ResourceImpact2.NO_CHANGE;
         return Object.values(this.propertyDiffs).map((elt) => elt.changeImpact).reduce(worstImpact, baseImpact);
       }
       /**
@@ -28543,99 +28635,118 @@ var init_types = __esm({
         }
       }
     };
+    exports2.ResourceDifference = ResourceDifference2;
+    function isPropertyDifference(diff) {
+      return diff.changeImpact !== void 0;
+    }
+    function onlyChanges(xs) {
+      const ret = {};
+      for (const [key, diff] of Object.entries(xs)) {
+        if (diff.isDifferent) {
+          ret[key] = diff;
+        }
+      }
+      return ret;
+    }
   }
 });
-// ../cloudformation-diff/lib/diff/index.ts
-function diffAttribute(oldValue, newValue) {
-  return new Difference(_asString(oldValue), _asString(newValue));
-}
-function diffCondition(oldValue, newValue) {
-  return new ConditionDifference(oldValue, newValue);
-}
-function diffMapping(oldValue, newValue) {
-  return new MappingDifference(oldValue, newValue);
-}
-function diffMetadata(oldValue, newValue) {
-  return new MetadataDifference(oldValue, newValue);
-}
-function diffOutput(oldValue, newValue) {
-  return new OutputDifference(oldValue, newValue);
-}
-function diffParameter(oldValue, newValue) {
-  return new ParameterDifference(oldValue, newValue);
-}
-function diffResource(oldValue, newValue) {
-  const resourceType = {
-    oldType: oldValue && oldValue.Type,
-    newType: newValue && newValue.Type
-  };
-  let propertyDiffs = {};
-  let otherDiffs = {};
-  if (resourceType.oldType !== void 0 && resourceType.oldType === resourceType.newType) {
-    const impl = loadResourceModel(resourceType.oldType);
-    propertyDiffs = diffKeyedEntities(
-      oldValue.Properties,
-      newValue.Properties,
-      (oldVal, newVal, key) => _diffProperty(oldVal, newVal, key, impl)
-    );
-    otherDiffs = diffKeyedEntities(oldValue, newValue, _diffOther);
-    delete otherDiffs.Properties;
-  }
-  return new ResourceDifference(oldValue, newValue, {
-    resourceType,
-    propertyDiffs,
-    otherDiffs
-  });
-  function _diffProperty(oldV, newV, key, resourceSpec) {
-    var _a;
-    let changeImpact = "NO_CHANGE" /* NO_CHANGE */;
-    const spec = (_a = resourceSpec == null ? void 0 : resourceSpec.properties) == null ? void 0 : _a[key];
-    if (spec && !deepEqual(oldV, newV)) {
-      switch (spec.causesReplacement) {
-        case "yes":
-          changeImpact = "WILL_REPLACE" /* WILL_REPLACE */;
-          break;
-        case "maybe":
-          changeImpact = "MAY_REPLACE" /* MAY_REPLACE */;
-          break;
-        default:
-          changeImpact = "WILL_UPDATE" /* WILL_UPDATE */;
+// ../../../node_modules/@aws-cdk/cloudformation-diff/lib/diff/index.js
+var require_diff4 = __commonJS({
+  "../../../node_modules/@aws-cdk/cloudformation-diff/lib/diff/index.js"(exports2) {
+    "use strict";
+    Object.defineProperty(exports2, "__esModule", { value: true });
+    exports2.diffAttribute = diffAttribute;
+    exports2.diffCondition = diffCondition;
+    exports2.diffMapping = diffMapping;
+    exports2.diffMetadata = diffMetadata;
+    exports2.diffOutput = diffOutput;
+    exports2.diffParameter = diffParameter;
+    exports2.diffResource = diffResource;
+    exports2.diffUnknown = diffUnknown;
+    var types = require_types();
+    var util_1 = require_util2();
+    function diffAttribute(oldValue, newValue) {
+      return new types.Difference(_asString(oldValue), _asString(newValue));
+    }
+    function diffCondition(oldValue, newValue) {
+      return new types.ConditionDifference(oldValue, newValue);
+    }
+    function diffMapping(oldValue, newValue) {
+      return new types.MappingDifference(oldValue, newValue);
+    }
+    function diffMetadata(oldValue, newValue) {
+      return new types.MetadataDifference(oldValue, newValue);
+    }
+    function diffOutput(oldValue, newValue) {
+      return new types.OutputDifference(oldValue, newValue);
+    }
+    function diffParameter(oldValue, newValue) {
+      return new types.ParameterDifference(oldValue, newValue);
+    }
+    function diffResource(oldValue, newValue) {
+      const resourceType = {
+        oldType: oldValue && oldValue.Type,
+        newType: newValue && newValue.Type
+      };
+      let propertyDiffs = {};
+      let otherDiffs = {};
+      if (resourceType.oldType !== void 0 && resourceType.oldType === resourceType.newType) {
+        const impl = (0, util_1.loadResourceModel)(resourceType.oldType);
+        propertyDiffs = (0, util_1.diffKeyedEntities)(oldValue.Properties, newValue.Properties, (oldVal, newVal, key) => _diffProperty(oldVal, newVal, key, impl));
+        otherDiffs = (0, util_1.diffKeyedEntities)(oldValue, newValue, _diffOther);
+        delete otherDiffs.Properties;
+      }
+      return new types.ResourceDifference(oldValue, newValue, {
+        resourceType,
+        propertyDiffs,
+        otherDiffs
+      });
+      function _diffProperty(oldV, newV, key, resourceSpec) {
+        var _a;
+        let changeImpact = types.ResourceImpact.NO_CHANGE;
+        const spec = (_a = resourceSpec == null ? void 0 : resourceSpec.properties) == null ? void 0 : _a[key];
+        if (spec && !(0, util_1.deepEqual)(oldV, newV)) {
+          switch (spec.causesReplacement) {
+            case "yes":
+              changeImpact = types.ResourceImpact.WILL_REPLACE;
+              break;
+            case "maybe":
+              changeImpact = types.ResourceImpact.MAY_REPLACE;
+              break;
+            default:
+              changeImpact = types.ResourceImpact.WILL_UPDATE;
+          }
+        }
+        return new types.PropertyDifference(oldV, newV, { changeImpact });
+      }
+      function _diffOther(oldV, newV) {
+        return new types.Difference(oldV, newV);
       }
     }
-    return new PropertyDifference(oldV, newV, { changeImpact });
-  }
-  function _diffOther(oldV, newV) {
-    return new Difference(oldV, newV);
-  }
-}
-function diffUnknown(oldValue, newValue) {
-  return new Difference(oldValue, newValue);
-}
-function _asString(value) {
-  if (value == null) {
-    return void 0;
-  }
-  if (typeof value === "string") {
-    return value;
-  }
-  return JSON.stringify(value);
-}
-var init_diff = __esm({
-  "../cloudformation-diff/lib/diff/index.ts"() {
-    "use strict";
-    init_types();
-    init_util();
+    function diffUnknown(oldValue, newValue) {
+      return new types.Difference(oldValue, newValue);
+    }
+    function _asString(value) {
+      if (value == null) {
+        return void 0;
+      }
+      if (typeof value === "string") {
+        return value;
+      }
+      return JSON.stringify(value);
+    }
   }
 });
-// ../cloudformation-diff/lib/diff/template-and-changeset-diff-merger.ts
-var _TemplateAndChangeSetDiffMerger, TemplateAndChangeSetDiffMerger;
-var init_template_and_changeset_diff_merger = __esm({
-  "../cloudformation-diff/lib/diff/template-and-changeset-diff-merger.ts"() {
+// ../../../node_modules/@aws-cdk/cloudformation-diff/lib/diff/template-and-changeset-diff-merger.js
+var require_template_and_changeset_diff_merger = __commonJS({
+  "../../../node_modules/@aws-cdk/cloudformation-diff/lib/diff/template-and-changeset-diff-merger.js"(exports2) {
     "use strict";
-    init_types();
-    _TemplateAndChangeSetDiffMerger = class _TemplateAndChangeSetDiffMerger {
+    Object.defineProperty(exports2, "__esModule", { value: true });
+    exports2.TemplateAndChangeSetDiffMerger = void 0;
+    var types = require_types();
+    var TemplateAndChangeSetDiffMerger = class _TemplateAndChangeSetDiffMerger {
       static determineChangeSetReplacementMode(propertyChange) {
         var _a;
         if (((_a = propertyChange.Target) == null ? void 0 : _a.RequiresRecreation) === void 0) {
@@ -28696,30 +28807,30 @@ var init_template_and_changeset_diff_merger = __esm({
           var _a2;
           if (type === "Property") {
             if (!this.changeSetResources[logicalId]) {
-              value.changeImpact = "NO_CHANGE" /* NO_CHANGE */;
+              value.changeImpact = types.ResourceImpact.NO_CHANGE;
               value.isDifferent = false;
               return;
             }
             const changingPropertyCausesResourceReplacement = (_a2 = (this.changeSetResources[logicalId].propertyReplacementModes ?? {})[name]) == null ? void 0 : _a2.replacementMode;
             switch (changingPropertyCausesResourceReplacement) {
               case "Always":
-                value.changeImpact = "WILL_REPLACE" /* WILL_REPLACE */;
+                value.changeImpact = types.ResourceImpact.WILL_REPLACE;
                 break;
               case "Never":
-                value.changeImpact = "WILL_UPDATE" /* WILL_UPDATE */;
+                value.changeImpact = types.ResourceImpact.WILL_UPDATE;
                 break;
               case "Conditionally":
-                value.changeImpact = "MAY_REPLACE" /* MAY_REPLACE */;
+                value.changeImpact = types.ResourceImpact.MAY_REPLACE;
                 break;
               case void 0:
-                value.changeImpact = "NO_CHANGE" /* NO_CHANGE */;
+                value.changeImpact = types.ResourceImpact.NO_CHANGE;
                 value.isDifferent = false;
                 break;
             }
           } else if (type === "Other") {
             switch (name) {
               case "Metadata":
-                change.setOtherChange("Metadata", new Difference(value.newValue, value.newValue));
+                change.setOtherChange("Metadata", new types.Difference(value.newValue, value.newValue));
                 break;
             }
           }
@@ -28744,198 +28855,196 @@ var init_template_and_changeset_diff_merger = __esm({
         return importedResourceLogicalIds;
       }
     };
-    // If we somehow cannot find the resourceType, then we'll mark it as UNKNOWN, so that can be seen in the diff.
-    _TemplateAndChangeSetDiffMerger.UNKNOWN_RESOURCE_TYPE = "UNKNOWN_RESOURCE_TYPE";
-    TemplateAndChangeSetDiffMerger = _TemplateAndChangeSetDiffMerger;
-  }
-});
-// ../cloudformation-diff/lib/diff-template.ts
-var diff_template_exports = {};
-__export(diff_template_exports, {
-  ConditionDifference: () => ConditionDifference,
-  Difference: () => Difference,
-  DifferenceCollection: () => DifferenceCollection,
-  MappingDifference: () => MappingDifference,
-  MetadataDifference: () => MetadataDifference,
-  OutputDifference: () => OutputDifference,
-  ParameterDifference: () => ParameterDifference,
-  PropertyDifference: () => PropertyDifference,
-  ResourceDifference: () => ResourceDifference,
-  ResourceImpact: () => ResourceImpact,
-  TemplateDiff: () => TemplateDiff,
-  diffTemplate: () => diffTemplate,
-  fullDiff: () => fullDiff,
-  isPropertyDifference: () => isPropertyDifference
-});
-function fullDiff(currentTemplate, newTemplate, changeSet, isImport) {
-  normalize(currentTemplate);
-  normalize(newTemplate);
-  const theDiff = diffTemplate(currentTemplate, newTemplate);
-  if (changeSet) {
-    const changeSetDiff = new TemplateAndChangeSetDiffMerger({ changeSet });
-    theDiff.resources.forEachDifference(
-      (logicalId, change) => changeSetDiff.overrideDiffResourceChangeImpactWithChangeSetChangeImpact(logicalId, change)
-    );
-    changeSetDiff.addImportInformationFromChangeset(theDiff.resources);
-  } else if (isImport) {
-    makeAllResourceChangesImports(theDiff);
+    exports2.TemplateAndChangeSetDiffMerger = TemplateAndChangeSetDiffMerger;
+    TemplateAndChangeSetDiffMerger.UNKNOWN_RESOURCE_TYPE = "UNKNOWN_RESOURCE_TYPE";
   }
-  return theDiff;
-}
-function diffTemplate(currentTemplate, newTemplate) {
-  const theDiff = calculateTemplateDiff(currentTemplate, newTemplate);
-  const newTemplateCopy = deepCopy(newTemplate);
-  let didPropagateReferenceChanges;
-  let diffWithReplacements;
-  do {
-    diffWithReplacements = calculateTemplateDiff(currentTemplate, newTemplateCopy);
-    didPropagateReferenceChanges = false;
-    if (diffWithReplacements.resources) {
-      diffWithReplacements.resources.forEachDifference((logicalId, change) => {
-        if (change.changeImpact === "WILL_REPLACE" /* WILL_REPLACE */) {
-          if (propagateReplacedReferences(newTemplateCopy, logicalId)) {
-            didPropagateReferenceChanges = true;
-          }
+});
+// ../../../node_modules/@aws-cdk/cloudformation-diff/lib/diff-template.js
+var require_diff_template = __commonJS({
+  "../../../node_modules/@aws-cdk/cloudformation-diff/lib/diff-template.js"(exports2) {
+    "use strict";
+    var __createBinding2 = exports2 && exports2.__createBinding || (Object.create ? function(o, m, k, k2) {
+      if (k2 === void 0) k2 = k;
+      var desc = Object.getOwnPropertyDescriptor(m, k);
+      if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+        desc = { enumerable: true, get: function() {
+          return m[k];
+        } };
+      }
+      Object.defineProperty(o, k2, desc);
+    } : function(o, m, k, k2) {
+      if (k2 === void 0) k2 = k;
+      o[k2] = m[k];
+    });
+    var __exportStar2 = exports2 && exports2.__exportStar || function(m, exports3) {
+      for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports3, p)) __createBinding2(exports3, m, p);
+    };
+    Object.defineProperty(exports2, "__esModule", { value: true });
+    exports2.fullDiff = fullDiff2;
+    exports2.diffTemplate = diffTemplate;
+    var impl = require_diff4();
+    var template_and_changeset_diff_merger_1 = require_template_and_changeset_diff_merger();
+    var types = require_types();
+    var util_1 = require_util2();
+    __exportStar2(require_types(), exports2);
+    var DIFF_HANDLERS = {
+      AWSTemplateFormatVersion: (diff, oldValue, newValue) => diff.awsTemplateFormatVersion = impl.diffAttribute(oldValue, newValue),
+      Description: (diff, oldValue, newValue) => diff.description = impl.diffAttribute(oldValue, newValue),
+      Metadata: (diff, oldValue, newValue) => diff.metadata = new types.DifferenceCollection((0, util_1.diffKeyedEntities)(oldValue, newValue, impl.diffMetadata)),
+      Parameters: (diff, oldValue, newValue) => diff.parameters = new types.DifferenceCollection((0, util_1.diffKeyedEntities)(oldValue, newValue, impl.diffParameter)),
+      Mappings: (diff, oldValue, newValue) => diff.mappings = new types.DifferenceCollection((0, util_1.diffKeyedEntities)(oldValue, newValue, impl.diffMapping)),
+      Conditions: (diff, oldValue, newValue) => diff.conditions = new types.DifferenceCollection((0, util_1.diffKeyedEntities)(oldValue, newValue, impl.diffCondition)),
+      Transform: (diff, oldValue, newValue) => diff.transform = impl.diffAttribute(oldValue, newValue),
+      Resources: (diff, oldValue, newValue) => diff.resources = new types.DifferenceCollection((0, util_1.diffKeyedEntities)(oldValue, newValue, impl.diffResource)),
+      Outputs: (diff, oldValue, newValue) => diff.outputs = new types.DifferenceCollection((0, util_1.diffKeyedEntities)(oldValue, newValue, impl.diffOutput))
+    };
+    function fullDiff2(currentTemplate, newTemplate, changeSet, isImport) {
+      normalize(currentTemplate);
+      normalize(newTemplate);
+      const theDiff = diffTemplate(currentTemplate, newTemplate);
+      if (changeSet) {
+        const changeSetDiff = new template_and_changeset_diff_merger_1.TemplateAndChangeSetDiffMerger({ changeSet });
+        theDiff.resources.forEachDifference((logicalId, change) => changeSetDiff.overrideDiffResourceChangeImpactWithChangeSetChangeImpact(logicalId, change));
+        changeSetDiff.addImportInformationFromChangeset(theDiff.resources);
+      } else if (isImport) {
+        makeAllResourceChangesImports(theDiff);
+      }
+      return theDiff;
+    }
+    function diffTemplate(currentTemplate, newTemplate) {
+      const theDiff = calculateTemplateDiff(currentTemplate, newTemplate);
+      const newTemplateCopy = deepCopy(newTemplate);
+      let didPropagateReferenceChanges;
+      let diffWithReplacements;
+      do {
+        diffWithReplacements = calculateTemplateDiff(currentTemplate, newTemplateCopy);
+        didPropagateReferenceChanges = false;
+        if (diffWithReplacements.resources) {
+          diffWithReplacements.resources.forEachDifference((logicalId, change) => {
+            if (change.changeImpact === types.ResourceImpact.WILL_REPLACE) {
+              if (propagateReplacedReferences(newTemplateCopy, logicalId)) {
+                didPropagateReferenceChanges = true;
+              }
+            }
+          });
+        }
+      } while (didPropagateReferenceChanges);
+      diffWithReplacements.resources.filter((r) => isReplacement(r.changeImpact)).forEachDifference((logicalId, downstreamReplacement) => {
+        const resource = theDiff.resources.get(logicalId);
+        if (resource.changeImpact !== downstreamReplacement.changeImpact) {
+          propagatePropertyReplacement(downstreamReplacement, resource);
         }
       });
+      return theDiff;
     }
-  } while (didPropagateReferenceChanges);
-  diffWithReplacements.resources.filter((r) => isReplacement(r.changeImpact)).forEachDifference((logicalId, downstreamReplacement) => {
-    const resource = theDiff.resources.get(logicalId);
-    if (resource.changeImpact !== downstreamReplacement.changeImpact) {
-      propagatePropertyReplacement(downstreamReplacement, resource);
-    }
-  });
-  return theDiff;
-}
-function isReplacement(impact) {
-  return impact === "MAY_REPLACE" /* MAY_REPLACE */ || impact === "WILL_REPLACE" /* WILL_REPLACE */;
-}
-function propagatePropertyReplacement(source, dest) {
-  for (const [propertyName, diff] of Object.entries(source.propertyUpdates)) {
-    if (diff.changeImpact && isReplacement(diff.changeImpact)) {
-      dest.setPropertyChange(propertyName, diff);
-    }
-  }
-}
-function calculateTemplateDiff(currentTemplate, newTemplate) {
-  const differences = {};
-  const unknown = {};
-  for (const key of unionOf(Object.keys(currentTemplate), Object.keys(newTemplate)).sort()) {
-    const oldValue = currentTemplate[key];
-    const newValue = newTemplate[key];
-    if (deepEqual(oldValue, newValue)) {
-      continue;
-    }
-    const handler = DIFF_HANDLERS[key] || ((_diff, oldV, newV) => unknown[key] = diffUnknown(oldV, newV));
-    handler(differences, oldValue, newValue);
-  }
-  if (Object.keys(unknown).length > 0) {
-    differences.unknown = new DifferenceCollection(unknown);
-  }
-  return new TemplateDiff(differences);
-}
-function propagateReplacedReferences(template, logicalId) {
-  let ret = false;
-  function recurse(obj) {
-    if (Array.isArray(obj)) {
-      obj.forEach(recurse);
+    function isReplacement(impact) {
+      return impact === types.ResourceImpact.MAY_REPLACE || impact === types.ResourceImpact.WILL_REPLACE;
     }
-    if (typeof obj === "object" && obj !== null) {
-      if (!replaceReference(obj)) {
-        Object.values(obj).forEach(recurse);
+    function propagatePropertyReplacement(source, dest) {
+      for (const [propertyName, diff] of Object.entries(source.propertyUpdates)) {
+        if (diff.changeImpact && isReplacement(diff.changeImpact)) {
+          dest.setPropertyChange(propertyName, diff);
+        }
       }
     }
-  }
-  function replaceReference(obj) {
-    const keys = Object.keys(obj);
-    if (keys.length !== 1) {
-      return false;
-    }
-    const key = keys[0];
-    if (key === "Ref") {
-      if (obj.Ref === logicalId) {
-        obj.Ref = logicalId + " (replaced)";
-        ret = true;
+    function calculateTemplateDiff(currentTemplate, newTemplate) {
+      const differences = {};
+      const unknown = {};
+      for (const key of (0, util_1.unionOf)(Object.keys(currentTemplate), Object.keys(newTemplate)).sort()) {
+        const oldValue = currentTemplate[key];
+        const newValue = newTemplate[key];
+        if ((0, util_1.deepEqual)(oldValue, newValue)) {
+          continue;
+        }
+        const handler = DIFF_HANDLERS[key] || ((_diff, oldV, newV) => unknown[key] = impl.diffUnknown(oldV, newV));
+        handler(differences, oldValue, newValue);
       }
-      return true;
-    }
-    if (key.startsWith("Fn::")) {
-      if (Array.isArray(obj[key]) && obj[key].length > 0 && obj[key][0] === logicalId) {
-        obj[key][0] = logicalId + "(replaced)";
-        ret = true;
+      if (Object.keys(unknown).length > 0) {
+        differences.unknown = new types.DifferenceCollection(unknown);
       }
-      return true;
+      return new types.TemplateDiff(differences);
     }
-    return false;
-  }
-  recurse(template);
-  return ret;
-}
-function deepCopy(x) {
-  if (Array.isArray(x)) {
-    return x.map(deepCopy);
-  }
-  if (typeof x === "object" && x !== null) {
-    const ret = {};
-    for (const key of Object.keys(x)) {
-      ret[key] = deepCopy(x[key]);
+    function propagateReplacedReferences(template, logicalId) {
+      let ret = false;
+      function recurse(obj) {
+        if (Array.isArray(obj)) {
+          obj.forEach(recurse);
+        }
+        if (typeof obj === "object" && obj !== null) {
+          if (!replaceReference(obj)) {
+            Object.values(obj).forEach(recurse);
+          }
+        }
+      }
+      function replaceReference(obj) {
+        const keys = Object.keys(obj);
+        if (keys.length !== 1) {
+          return false;
+        }
+        const key = keys[0];
+        if (key === "Ref") {
+          if (obj.Ref === logicalId) {
+            obj.Ref = logicalId + " (replaced)";
+            ret = true;
+          }
+          return true;
+        }
+        if (key.startsWith("Fn::")) {
+          if (Array.isArray(obj[key]) && obj[key].length > 0 && obj[key][0] === logicalId) {
+            obj[key][0] = logicalId + "(replaced)";
+            ret = true;
+          }
+          return true;
+        }
+        return false;
+      }
+      recurse(template);
+      return ret;
     }
-    return ret;
-  }
-  return x;
-}
-function makeAllResourceChangesImports(diff) {
-  diff.resources.forEachDifference((_logicalId, change) => {
-    change.isImport = true;
-  });
-}
-function normalize(template) {
-  if (typeof template === "object") {
-    for (const key of Object.keys(template ?? {})) {
-      if (key === "Fn::GetAtt" && typeof template[key] === "string") {
-        template[key] = template[key].split(".");
-        continue;
-      } else if (key === "DependsOn") {
-        if (typeof template[key] === "string") {
-          template[key] = [template[key]];
-        } else if (Array.isArray(template[key])) {
-          template[key] = template[key].sort();
+    function deepCopy(x) {
+      if (Array.isArray(x)) {
+        return x.map(deepCopy);
+      }
+      if (typeof x === "object" && x !== null) {
+        const ret = {};
+        for (const key of Object.keys(x)) {
+          ret[key] = deepCopy(x[key]);
         }
-        continue;
+        return ret;
       }
-      if (Array.isArray(template[key])) {
-        for (const element of template[key]) {
-          normalize(element);
+      return x;
+    }
+    function makeAllResourceChangesImports(diff) {
+      diff.resources.forEachDifference((_logicalId, change) => {
+        change.isImport = true;
+      });
+    }
+    function normalize(template) {
+      if (typeof template === "object") {
+        for (const key of Object.keys(template ?? {})) {
+          if (key === "Fn::GetAtt" && typeof template[key] === "string") {
+            template[key] = template[key].split(".");
+            continue;
+          } else if (key === "DependsOn") {
+            if (typeof template[key] === "string") {
+              template[key] = [template[key]];
+            } else if (Array.isArray(template[key])) {
+              template[key] = template[key].sort();
+            }
+            continue;
+          }
+          if (Array.isArray(template[key])) {
+            for (const element of template[key]) {
+              normalize(element);
+            }
+          } else {
+            normalize(template[key]);
+          }
         }
-      } else {
-        normalize(template[key]);
       }
     }
   }
-}
-var DIFF_HANDLERS;
-var init_diff_template = __esm({
-  "../cloudformation-diff/lib/diff-template.ts"() {
-    "use strict";
-    init_diff();
-    init_template_and_changeset_diff_merger();
-    init_types();
-    init_util();
-    init_types();
-    DIFF_HANDLERS = {
-      AWSTemplateFormatVersion: (diff, oldValue, newValue) => diff.awsTemplateFormatVersion = diffAttribute(oldValue, newValue),
-      Description: (diff, oldValue, newValue) => diff.description = diffAttribute(oldValue, newValue),
-      Metadata: (diff, oldValue, newValue) => diff.metadata = new DifferenceCollection(diffKeyedEntities(oldValue, newValue, diffMetadata)),
-      Parameters: (diff, oldValue, newValue) => diff.parameters = new DifferenceCollection(diffKeyedEntities(oldValue, newValue, diffParameter)),
-      Mappings: (diff, oldValue, newValue) => diff.mappings = new DifferenceCollection(diffKeyedEntities(oldValue, newValue, diffMapping)),
-      Conditions: (diff, oldValue, newValue) => diff.conditions = new DifferenceCollection(diffKeyedEntities(oldValue, newValue, diffCondition)),
-      Transform: (diff, oldValue, newValue) => diff.transform = diffAttribute(oldValue, newValue),
-      Resources: (diff, oldValue, newValue) => diff.resources = new DifferenceCollection(diffKeyedEntities(oldValue, newValue, diffResource)),
-      Outputs: (diff, oldValue, newValue) => diff.outputs = new DifferenceCollection(diffKeyedEntities(oldValue, newValue, diffOutput))
-    };
-  }
 });
 // ../../../node_modules/ansi-regex/index.js
@@ -29011,7 +29120,7 @@ var require_string_width = __commonJS({
     var stripAnsi = require_strip_ansi();
     var isFullwidthCodePoint = require_is_fullwidth_code_point();
     var emojiRegex = require_emoji_regex();
-    var stringWidth2 = (string) => {
+    var stringWidth = (string) => {
       if (typeof string !== "string" || string.length === 0) {
         return 0;
       }
@@ -29036,8 +29145,8 @@ var require_string_width = __commonJS({
       }
       return width;
     };
-    module2.exports = stringWidth2;
-    module2.exports.default = stringWidth2;
+    module2.exports = stringWidth;
+    module2.exports.default = stringWidth;
   }
 });
@@ -29299,10 +29408,10 @@ var require_utils4 = __commonJS({
       return (_b = (_a = input.match(/\s+/g)) === null || _a === void 0 ? void 0 : _a.length) !== null && _b !== void 0 ? _b : 0;
     };
     exports2.countSpaceSequence = countSpaceSequence;
-    var distributeUnevenly = (sum2, length) => {
-      const result = Array.from({ length }).fill(Math.floor(sum2 / length));
+    var distributeUnevenly = (sum, length) => {
+      const result = Array.from({ length }).fill(Math.floor(sum / length));
       return result.map((element, index) => {
-        return element + (index < sum2 % length ? 1 : 0);
+        return element + (index < sum % length ? 1 : 0);
       });
     };
     exports2.distributeUnevenly = distributeUnevenly;
@@ -33425,7 +33534,7 @@ var require_table = __commonJS({
     var truncateTableData_1 = require_truncateTableData();
     var utils_1 = require_utils4();
     var validateTableData_1 = require_validateTableData();
-    var table3 = (data, userConfig = {}) => {
+    var table = (data, userConfig = {}) => {
       (0, validateTableData_1.validateTableData)(data);
       let rows = (0, stringifyTableData_1.stringifyTableData)(data);
       const [injectedRows, injectedSpanningCellConfig] = (0, injectHeaderConfig_1.injectHeaderConfig)(rows, userConfig);
@@ -33440,7 +33549,7 @@ var require_table = __commonJS({
       const outputColumnWidths = (0, calculateOutputColumnWidths_1.calculateOutputColumnWidths)(config);
       return (0, drawTable_1.drawTable)(rows, outputColumnWidths, rowHeights, config);
     };
-    exports2.table = table3;
+    exports2.table = table;
   }
 });
@@ -33486,75 +33595,72 @@ var require_src2 = __commonJS({
   }
 });
-// ../cloudformation-diff/lib/format-table.ts
-var format_table_exports = {};
-__export(format_table_exports, {
-  formatTable: () => formatTable
-});
-function formatTable(cells, columns) {
-  return table.table(cells, {
-    border: TABLE_BORDER_CHARACTERS,
-    columns: buildColumnConfig(columns !== void 0 ? calculateColumnWidths(cells, columns) : void 0),
-    drawHorizontalLine: (line) => {
-      return line < 2 || line === cells.length || lineBetween(cells[line - 1], cells[line]);
+// ../../../node_modules/@aws-cdk/cloudformation-diff/lib/format-table.js
+var require_format_table = __commonJS({
+  "../../../node_modules/@aws-cdk/cloudformation-diff/lib/format-table.js"(exports2) {
+    "use strict";
+    Object.defineProperty(exports2, "__esModule", { value: true });
+    exports2.formatTable = formatTable;
+    var chalk3 = require_source();
+    var string_width_1 = require_string_width();
+    var table = require_src2();
+    function formatTable(cells, columns) {
+      return table.table(cells, {
+        border: TABLE_BORDER_CHARACTERS,
+        columns: buildColumnConfig(columns !== void 0 ? calculateColumnWidths(cells, columns) : void 0),
+        drawHorizontalLine: (line) => {
+          return line < 2 || line === cells.length || lineBetween(cells[line - 1], cells[line]);
+        }
+      }).trimRight();
+    }
+    function lineBetween(rowA, rowB) {
+      return rowA[1] !== rowB[1];
+    }
+    function buildColumnConfig(widths) {
+      if (widths === void 0) {
+        return void 0;
+      }
+      const ret = {};
+      widths.forEach((width, i) => {
+        if (width === void 0) {
+          return;
+        }
+        ret[i] = { width };
+      });
+      return ret;
     }
-  }).trimRight();
-}
-function lineBetween(rowA, rowB) {
-  return rowA[1] !== rowB[1];
-}
-function buildColumnConfig(widths) {
-  if (widths === void 0) {
-    return void 0;
-  }
-  const ret = {};
-  widths.forEach((width, i) => {
-    if (width === void 0) {
-      return;
+    function calculateColumnWidths(rows, terminalWidth) {
+      terminalWidth = Math.max(terminalWidth, 40);
+      const columns = rows[0].map((_, i) => Math.max(...rows.map((row) => (0, string_width_1.default)(String(row[i])))));
+      const contentWidth = terminalWidth - 2 - columns.length * 3;
+      if (sum(columns) <= contentWidth) {
+        return columns;
+      }
+      const fairShare = Math.min(contentWidth / columns.length);
+      const smallColumns = columns.filter((w) => w < fairShare);
+      let distributableWidth = contentWidth - sum(smallColumns);
+      const fairDistributable = Math.floor(distributableWidth / (columns.length - smallColumns.length));
+      const ret = new Array();
+      for (const requestedWidth of columns) {
+        if (requestedWidth < fairShare) {
+          ret.push(requestedWidth);
+        } else {
+          const width = distributableWidth < 2 * fairDistributable ? distributableWidth : fairDistributable;
+          ret.push(width);
+          distributableWidth -= width;
+        }
+      }
+      return ret;
     }
-    ret[i] = { width };
-  });
-  return ret;
-}
-function calculateColumnWidths(rows, terminalWidth) {
-  terminalWidth = Math.max(terminalWidth, 40);
-  const columns = rows[0].map((_, i) => Math.max(...rows.map((row) => (0, import_string_width.default)(String(row[i])))));
-  const contentWidth = terminalWidth - 2 - columns.length * 3;
-  if (sum(columns) <= contentWidth) {
-    return columns;
-  }
-  const fairShare = Math.min(contentWidth / columns.length);
-  const smallColumns = columns.filter((w) => w < fairShare);
-  let distributableWidth = contentWidth - sum(smallColumns);
-  const fairDistributable = Math.floor(distributableWidth / (columns.length - smallColumns.length));
-  const ret = new Array();
-  for (const requestedWidth of columns) {
-    if (requestedWidth < fairShare) {
-      ret.push(requestedWidth);
-    } else {
-      const width = distributableWidth < 2 * fairDistributable ? distributableWidth : fairDistributable;
-      ret.push(width);
-      distributableWidth -= width;
+    function sum(xs) {
+      let total = 0;
+      for (const x of xs) {
+        total += x;
+      }
+      return total;
     }
-  }
-  return ret;
-}
-function sum(xs) {
-  let total = 0;
-  for (const x of xs) {
-    total += x;
-  }
-  return total;
-}
-var chalk5, import_string_width, table, tableColor, TABLE_BORDER_CHARACTERS;
-var init_format_table = __esm({
-  "../cloudformation-diff/lib/format-table.ts"() {
-    "use strict";
-    chalk5 = __toESM(require_source());
-    import_string_width = __toESM(require_string_width());
-    table = __toESM(require_src2());
-    tableColor = chalk5.gray;
-    TABLE_BORDER_CHARACTERS = {
+    var tableColor = chalk3.gray;
+    var TABLE_BORDER_CHARACTERS = {
       topBody: tableColor("\u2500"),
       topJoin: tableColor("\u252C"),
       topLeft: tableColor("\u250C"),
@@ -33574,9 +33680,9 @@ var init_format_table = __esm({
   }
 });
-// ../../../node_modules/diff/lib/diff/base.js
+// ../../../node_modules/@aws-cdk/cloudformation-diff/node_modules/diff/lib/diff/base.js
 var require_base = __commonJS({
-  "../../../node_modules/diff/lib/diff/base.js"(exports2) {
+  "../../../node_modules/@aws-cdk/cloudformation-diff/node_modules/diff/lib/diff/base.js"(exports2) {
     "use strict";
     Object.defineProperty(exports2, "__esModule", {
       value: true
@@ -33823,9 +33929,9 @@ var require_base = __commonJS({
   }
 });
-// ../../../node_modules/diff/lib/diff/character.js
+// ../../../node_modules/@aws-cdk/cloudformation-diff/node_modules/diff/lib/diff/character.js
 var require_character = __commonJS({
-  "../../../node_modules/diff/lib/diff/character.js"(exports2) {
+  "../../../node_modules/@aws-cdk/cloudformation-diff/node_modules/diff/lib/diff/character.js"(exports2) {
     "use strict";
     Object.defineProperty(exports2, "__esModule", {
       value: true
@@ -33849,9 +33955,9 @@ var require_character = __commonJS({
   }
 });
-// ../../../node_modules/diff/lib/util/params.js
+// ../../../node_modules/@aws-cdk/cloudformation-diff/node_modules/diff/lib/util/params.js
 var require_params = __commonJS({
-  "../../../node_modules/diff/lib/util/params.js"(exports2) {
+  "../../../node_modules/@aws-cdk/cloudformation-diff/node_modules/diff/lib/util/params.js"(exports2) {
     "use strict";
     Object.defineProperty(exports2, "__esModule", {
       value: true
@@ -33872,9 +33978,9 @@ var require_params = __commonJS({
   }
 });
-// ../../../node_modules/diff/lib/diff/word.js
+// ../../../node_modules/@aws-cdk/cloudformation-diff/node_modules/diff/lib/diff/word.js
 var require_word = __commonJS({
-  "../../../node_modules/diff/lib/diff/word.js"(exports2) {
+  "../../../node_modules/@aws-cdk/cloudformation-diff/node_modules/diff/lib/diff/word.js"(exports2) {
     "use strict";
     Object.defineProperty(exports2, "__esModule", {
       value: true
@@ -33929,9 +34035,9 @@ var require_word = __commonJS({
   }
 });
-// ../../../node_modules/diff/lib/diff/line.js
+// ../../../node_modules/@aws-cdk/cloudformation-diff/node_modules/diff/lib/diff/line.js
 var require_line = __commonJS({
-  "../../../node_modules/diff/lib/diff/line.js"(exports2) {
+  "../../../node_modules/@aws-cdk/cloudformation-diff/node_modules/diff/lib/diff/line.js"(exports2) {
     "use strict";
     Object.defineProperty(exports2, "__esModule", {
       value: true
@@ -33989,9 +34095,9 @@ var require_line = __commonJS({
   }
 });
-// ../../../node_modules/diff/lib/diff/sentence.js
+// ../../../node_modules/@aws-cdk/cloudformation-diff/node_modules/diff/lib/diff/sentence.js
 var require_sentence = __commonJS({
-  "../../../node_modules/diff/lib/diff/sentence.js"(exports2) {
+  "../../../node_modules/@aws-cdk/cloudformation-diff/node_modules/diff/lib/diff/sentence.js"(exports2) {
     "use strict";
     Object.defineProperty(exports2, "__esModule", {
       value: true
@@ -34018,9 +34124,9 @@ var require_sentence = __commonJS({
   }
 });
-// ../../../node_modules/diff/lib/diff/css.js
+// ../../../node_modules/@aws-cdk/cloudformation-diff/node_modules/diff/lib/diff/css.js
 var require_css = __commonJS({
-  "../../../node_modules/diff/lib/diff/css.js"(exports2) {
+  "../../../node_modules/@aws-cdk/cloudformation-diff/node_modules/diff/lib/diff/css.js"(exports2) {
     "use strict";
     Object.defineProperty(exports2, "__esModule", {
       value: true
@@ -34047,9 +34153,9 @@ var require_css = __commonJS({
   }
 });
-// ../../../node_modules/diff/lib/diff/json.js
+// ../../../node_modules/@aws-cdk/cloudformation-diff/node_modules/diff/lib/diff/json.js
 var require_json2 = __commonJS({
-  "../../../node_modules/diff/lib/diff/json.js"(exports2) {
+  "../../../node_modules/@aws-cdk/cloudformation-diff/node_modules/diff/lib/diff/json.js"(exports2) {
     "use strict";
     Object.defineProperty(exports2, "__esModule", {
       value: true
@@ -34169,9 +34275,9 @@ var require_json2 = __commonJS({
   }
 });
-// ../../../node_modules/diff/lib/diff/array.js
+// ../../../node_modules/@aws-cdk/cloudformation-diff/node_modules/diff/lib/diff/array.js
 var require_array = __commonJS({
-  "../../../node_modules/diff/lib/diff/array.js"(exports2) {
+  "../../../node_modules/@aws-cdk/cloudformation-diff/node_modules/diff/lib/diff/array.js"(exports2) {
     "use strict";
     Object.defineProperty(exports2, "__esModule", {
       value: true
@@ -34201,9 +34307,9 @@ var require_array = __commonJS({
   }
 });
-// ../../../node_modules/diff/lib/patch/parse.js
+// ../../../node_modules/@aws-cdk/cloudformation-diff/node_modules/diff/lib/patch/parse.js
 var require_parse5 = __commonJS({
-  "../../../node_modules/diff/lib/patch/parse.js"(exports2) {
+  "../../../node_modules/@aws-cdk/cloudformation-diff/node_modules/diff/lib/patch/parse.js"(exports2) {
     "use strict";
     Object.defineProperty(exports2, "__esModule", {
       value: true
@@ -34317,9 +34423,9 @@ var require_parse5 = __commonJS({
   }
 });
-// ../../../node_modules/diff/lib/util/distance-iterator.js
+// ../../../node_modules/@aws-cdk/cloudformation-diff/node_modules/diff/lib/util/distance-iterator.js
 var require_distance_iterator = __commonJS({
-  "../../../node_modules/diff/lib/util/distance-iterator.js"(exports2) {
+  "../../../node_modules/@aws-cdk/cloudformation-diff/node_modules/diff/lib/util/distance-iterator.js"(exports2) {
     "use strict";
     Object.defineProperty(exports2, "__esModule", {
       value: true
@@ -34354,9 +34460,9 @@ var require_distance_iterator = __commonJS({
   }
 });
-// ../../../node_modules/diff/lib/patch/apply.js
+// ../../../node_modules/@aws-cdk/cloudformation-diff/node_modules/diff/lib/patch/apply.js
 var require_apply = __commonJS({
-  "../../../node_modules/diff/lib/patch/apply.js"(exports2) {
+  "../../../node_modules/@aws-cdk/cloudformation-diff/node_modules/diff/lib/patch/apply.js"(exports2) {
     "use strict";
     Object.defineProperty(exports2, "__esModule", {
       value: true
@@ -34496,14 +34602,14 @@ var require_apply = __commonJS({
   }
 });
-// ../../../node_modules/diff/lib/patch/create.js
+// ../../../node_modules/@aws-cdk/cloudformation-diff/node_modules/diff/lib/patch/create.js
 var require_create = __commonJS({
-  "../../../node_modules/diff/lib/patch/create.js"(exports2) {
+  "../../../node_modules/@aws-cdk/cloudformation-diff/node_modules/diff/lib/patch/create.js"(exports2) {
     "use strict";
     Object.defineProperty(exports2, "__esModule", {
       value: true
     });
-    exports2.structuredPatch = structuredPatch2;
+    exports2.structuredPatch = structuredPatch;
     exports2.formatPatch = formatPatch;
     exports2.createTwoFilesPatch = createTwoFilesPatch;
     exports2.createPatch = createPatch;
@@ -34535,7 +34641,7 @@ var require_create = __commonJS({
       }
       return arr2;
     }
-    function structuredPatch2(oldFileName, newFileName, oldStr, newStr, oldHeader, newHeader, options) {
+    function structuredPatch(oldFileName, newFileName, oldStr, newStr, oldHeader, newHeader, options) {
       if (!options) {
         options = {};
       }
@@ -34688,7 +34794,7 @@ var require_create = __commonJS({
       return ret.join("\n") + "\n";
     }
     function createTwoFilesPatch(oldFileName, newFileName, oldStr, newStr, oldHeader, newHeader, options) {
-      return formatPatch(structuredPatch2(oldFileName, newFileName, oldStr, newStr, oldHeader, newHeader, options));
+      return formatPatch(structuredPatch(oldFileName, newFileName, oldStr, newStr, oldHeader, newHeader, options));
     }
     function createPatch(fileName, oldStr, newStr, oldHeader, newHeader, options) {
       return createTwoFilesPatch(fileName, fileName, oldStr, newStr, oldHeader, newHeader, options);
@@ -34696,9 +34802,9 @@ var require_create = __commonJS({
   }
 });
-// ../../../node_modules/diff/lib/util/array.js
+// ../../../node_modules/@aws-cdk/cloudformation-diff/node_modules/diff/lib/util/array.js
 var require_array2 = __commonJS({
-  "../../../node_modules/diff/lib/util/array.js"(exports2) {
+  "../../../node_modules/@aws-cdk/cloudformation-diff/node_modules/diff/lib/util/array.js"(exports2) {
     "use strict";
     Object.defineProperty(exports2, "__esModule", {
       value: true
@@ -34725,9 +34831,9 @@ var require_array2 = __commonJS({
   }
 });
-// ../../../node_modules/diff/lib/patch/merge.js
+// ../../../node_modules/@aws-cdk/cloudformation-diff/node_modules/diff/lib/patch/merge.js
 var require_merge = __commonJS({
-  "../../../node_modules/diff/lib/patch/merge.js"(exports2) {
+  "../../../node_modules/@aws-cdk/cloudformation-diff/node_modules/diff/lib/patch/merge.js"(exports2) {
     "use strict";
     Object.defineProperty(exports2, "__esModule", {
       value: true
@@ -35148,9 +35254,9 @@ var require_merge = __commonJS({
   }
 });
-// ../../../node_modules/diff/lib/patch/reverse.js
+// ../../../node_modules/@aws-cdk/cloudformation-diff/node_modules/diff/lib/patch/reverse.js
 var require_reverse = __commonJS({
-  "../../../node_modules/diff/lib/patch/reverse.js"(exports2) {
+  "../../../node_modules/@aws-cdk/cloudformation-diff/node_modules/diff/lib/patch/reverse.js"(exports2) {
     "use strict";
     Object.defineProperty(exports2, "__esModule", {
       value: true
@@ -35192,22 +35298,22 @@ var require_reverse = __commonJS({
       }
       return obj;
     }
-    function reversePatch(structuredPatch2) {
-      if (Array.isArray(structuredPatch2)) {
-        return structuredPatch2.map(reversePatch).reverse();
+    function reversePatch(structuredPatch) {
+      if (Array.isArray(structuredPatch)) {
+        return structuredPatch.map(reversePatch).reverse();
       }
       return (
         /*istanbul ignore start*/
         _objectSpread(_objectSpread(
           {},
           /*istanbul ignore end*/
-          structuredPatch2
+          structuredPatch
         ), {}, {
-          oldFileName: structuredPatch2.newFileName,
-          oldHeader: structuredPatch2.newHeader,
-          newFileName: structuredPatch2.oldFileName,
-          newHeader: structuredPatch2.oldHeader,
-          hunks: structuredPatch2.hunks.map(function(hunk) {
+          oldFileName: structuredPatch.newFileName,
+          oldHeader: structuredPatch.newHeader,
+          newFileName: structuredPatch.oldFileName,
+          newHeader: structuredPatch.oldHeader,
+          hunks: structuredPatch.hunks.map(function(hunk) {
             return {
               oldLines: hunk.newLines,
               oldStart: hunk.newStart,
@@ -35243,9 +35349,9 @@ var require_reverse = __commonJS({
   }
 });
-// ../../../node_modules/diff/lib/convert/dmp.js
+// ../../../node_modules/@aws-cdk/cloudformation-diff/node_modules/diff/lib/convert/dmp.js
 var require_dmp = __commonJS({
-  "../../../node_modules/diff/lib/convert/dmp.js"(exports2) {
+  "../../../node_modules/@aws-cdk/cloudformation-diff/node_modules/diff/lib/convert/dmp.js"(exports2) {
     "use strict";
     Object.defineProperty(exports2, "__esModule", {
       value: true
@@ -35269,9 +35375,9 @@ var require_dmp = __commonJS({
   }
 });
-// ../../../node_modules/diff/lib/convert/xml.js
+// ../../../node_modules/@aws-cdk/cloudformation-diff/node_modules/diff/lib/convert/xml.js
 var require_xml = __commonJS({
-  "../../../node_modules/diff/lib/convert/xml.js"(exports2) {
+  "../../../node_modules/@aws-cdk/cloudformation-diff/node_modules/diff/lib/convert/xml.js"(exports2) {
     "use strict";
     Object.defineProperty(exports2, "__esModule", {
       value: true
@@ -35306,9 +35412,9 @@ var require_xml = __commonJS({
   }
 });
-// ../../../node_modules/diff/lib/index.js
+// ../../../node_modules/@aws-cdk/cloudformation-diff/node_modules/diff/lib/index.js
 var require_lib10 = __commonJS({
-  "../../../node_modules/diff/lib/index.js"(exports2) {
+  "../../../node_modules/@aws-cdk/cloudformation-diff/node_modules/diff/lib/index.js"(exports2) {
     "use strict";
     Object.defineProperty(exports2, "__esModule", {
       value: true
@@ -35466,102 +35572,58 @@ var require_lib10 = __commonJS({
   }
 });
-// ../cloudformation-diff/lib/format.ts
-var format_exports = {};
-__export(format_exports, {
-  Formatter: () => Formatter,
-  formatDifferences: () => formatDifferences,
-  formatSecurityChanges: () => formatSecurityChanges
-});
-function formatDifferences(stream, templateDiff, logicalToPathMap = {}, context = 3) {
-  const formatter = new Formatter(stream, logicalToPathMap, templateDiff, context);
-  if (templateDiff.awsTemplateFormatVersion || templateDiff.transform || templateDiff.description) {
-    formatter.printSectionHeader("Template");
-    formatter.formatDifference("AWSTemplateFormatVersion", "AWSTemplateFormatVersion", templateDiff.awsTemplateFormatVersion);
-    formatter.formatDifference("Transform", "Transform", templateDiff.transform);
-    formatter.formatDifference("Description", "Description", templateDiff.description);
-    formatter.printSectionFooter();
-  }
-  formatSecurityChangesWithBanner(formatter, templateDiff);
-  formatter.formatSection("Parameters", "Parameter", templateDiff.parameters);
-  formatter.formatSection("Metadata", "Metadata", templateDiff.metadata);
-  formatter.formatSection("Mappings", "Mapping", templateDiff.mappings);
-  formatter.formatSection("Conditions", "Condition", templateDiff.conditions);
-  formatter.formatSection("Resources", "Resource", templateDiff.resources, formatter.formatResourceDifference.bind(formatter));
-  formatter.formatSection("Outputs", "Output", templateDiff.outputs);
-  formatter.formatSection("Other Changes", "Unknown", templateDiff.unknown);
-}
-function formatSecurityChanges(stream, templateDiff, logicalToPathMap = {}, context) {
-  const formatter = new Formatter(stream, logicalToPathMap, templateDiff, context);
-  formatSecurityChangesWithBanner(formatter, templateDiff);
-}
-function formatSecurityChangesWithBanner(formatter, templateDiff) {
-  if (!templateDiff.iamChanges.hasChanges && !templateDiff.securityGroupChanges.hasChanges) {
-    return;
-  }
-  formatter.formatIamChanges(templateDiff.iamChanges);
-  formatter.formatSecurityGroupChanges(templateDiff.securityGroupChanges);
-  formatter.warning("(NOTE: There may be security-related changes not in this list. See https://github.com/aws/aws-cdk/issues/1299)");
-  formatter.printSectionFooter();
-}
-function _diffStrings(oldStr, newStr, context) {
-  const patch = structuredPatch(null, null, oldStr, newStr, null, null, { context });
-  const result = new Array();
-  for (const hunk of patch.hunks) {
-    result.push(chalk6.magenta(`@@ -${hunk.oldStart},${hunk.oldLines} +${hunk.newStart},${hunk.newLines} @@`));
-    const baseIndent = _findIndent(hunk.lines);
-    for (const line of hunk.lines) {
-      if (line === "\") {
-        continue;
-      }
-      const marker = line.charAt(0);
-      const text = line.slice(1 + baseIndent);
-      switch (marker) {
-        case " ":
-          result.push(`${CONTEXT} ${text}`);
-          break;
-        case "+":
-          result.push(chalk6.bold(`${ADDITION} ${chalk6.green(text)}`));
-          break;
-        case "-":
-          result.push(chalk6.bold(`${REMOVAL} ${chalk6.red(text)}`));
-          break;
-        default:
-          throw new Error(`Unexpected diff marker: ${marker} (full line: ${line})`);
-      }
-    }
-  }
-  return result;
-  function _findIndent(lines) {
-    let indent = Number.MAX_SAFE_INTEGER;
-    for (const line of lines) {
-      for (let i = 1; i < line.length; i++) {
-        if (line.charAt(i) !== " ") {
-          indent = indent > i - 1 ? i - 1 : indent;
-          break;
-        }
+// ../../../node_modules/@aws-cdk/cloudformation-diff/lib/format.js
+var require_format = __commonJS({
+  "../../../node_modules/@aws-cdk/cloudformation-diff/lib/format.js"(exports2) {
+    "use strict";
+    Object.defineProperty(exports2, "__esModule", { value: true });
+    exports2.Formatter = void 0;
+    exports2.formatDifferences = formatDifferences2;
+    exports2.formatSecurityChanges = formatSecurityChanges;
+    var util_1 = require("util");
+    var chalk3 = require_source();
+    var util_2 = require_util2();
+    var diff_template_1 = require_diff_template();
+    var format_table_1 = require_format_table();
+    var PATH_METADATA_KEY2 = "aws:cdk:path";
+    var { structuredPatch } = require_lib10();
+    function formatDifferences2(stream, templateDiff, logicalToPathMap = {}, context = 3) {
+      const formatter = new Formatter(stream, logicalToPathMap, templateDiff, context);
+      if (templateDiff.awsTemplateFormatVersion || templateDiff.transform || templateDiff.description) {
+        formatter.printSectionHeader("Template");
+        formatter.formatDifference("AWSTemplateFormatVersion", "AWSTemplateFormatVersion", templateDiff.awsTemplateFormatVersion);
+        formatter.formatDifference("Transform", "Transform", templateDiff.transform);
+        formatter.formatDifference("Description", "Description", templateDiff.description);
+        formatter.printSectionFooter();
+      }
+      formatSecurityChangesWithBanner(formatter, templateDiff);
+      formatter.formatSection("Parameters", "Parameter", templateDiff.parameters);
+      formatter.formatSection("Metadata", "Metadata", templateDiff.metadata);
+      formatter.formatSection("Mappings", "Mapping", templateDiff.mappings);
+      formatter.formatSection("Conditions", "Condition", templateDiff.conditions);
+      formatter.formatSection("Resources", "Resource", templateDiff.resources, formatter.formatResourceDifference.bind(formatter));
+      formatter.formatSection("Outputs", "Output", templateDiff.outputs);
+      formatter.formatSection("Other Changes", "Unknown", templateDiff.unknown);
+    }
+    function formatSecurityChanges(stream, templateDiff, logicalToPathMap = {}, context) {
+      const formatter = new Formatter(stream, logicalToPathMap, templateDiff, context);
+      formatSecurityChangesWithBanner(formatter, templateDiff);
+    }
+    function formatSecurityChangesWithBanner(formatter, templateDiff) {
+      if (!templateDiff.iamChanges.hasChanges && !templateDiff.securityGroupChanges.hasChanges) {
+        return;
       }
-    }
-    return indent;
-  }
-}
-var import_util8, chalk6, PATH_METADATA_KEY2, structuredPatch, ADDITION, CONTEXT, UPDATE, REMOVAL, IMPORT, Formatter;
-var init_format = __esm({
-  "../cloudformation-diff/lib/format.ts"() {
-    "use strict";
-    import_util8 = require("util");
-    chalk6 = __toESM(require_source());
-    init_util();
-    init_diff_template();
-    init_format_table();
-    PATH_METADATA_KEY2 = "aws:cdk:path";
-    ({ structuredPatch } = require_lib10());
-    ADDITION = chalk6.green("[+]");
-    CONTEXT = chalk6.grey("[ ]");
-    UPDATE = chalk6.yellow("[~]");
-    REMOVAL = chalk6.red("[-]");
-    IMPORT = chalk6.blue("[\u2190]");
-    Formatter = class {
+      formatter.formatIamChanges(templateDiff.iamChanges);
+      formatter.formatSecurityGroupChanges(templateDiff.securityGroupChanges);
+      formatter.warning("(NOTE: There may be security-related changes not in this list. See https://github.com/aws/aws-cdk/issues/1299)");
+      formatter.printSectionFooter();
+    }
+    var ADDITION = chalk3.green("[+]");
+    var CONTEXT = chalk3.grey("[ ]");
+    var UPDATE = chalk3.yellow("[~]");
+    var REMOVAL = chalk3.red("[-]");
+    var IMPORT = chalk3.blue("[\u2190]");
+    var Formatter = class {
       constructor(stream, logicalToPathMap, diff, context = 3) {
         this.stream = stream;
         this.logicalToPathMap = logicalToPathMap;
@@ -35571,10 +35633,10 @@ var init_format = __esm({
         }
       }
       print(fmt, ...args) {
-        this.stream.write(chalk6.white((0, import_util8.format)(fmt, ...args)) + "\n");
+        this.stream.write(chalk3.white((0, util_1.format)(fmt, ...args)) + "\n");
       }
       warning(fmt, ...args) {
-        this.stream.write(chalk6.yellow((0, import_util8.format)(fmt, ...args)) + "\n");
+        this.stream.write(chalk3.yellow((0, util_1.format)(fmt, ...args)) + "\n");
       }
       formatSection(title, entryType, collection, formatter = this.formatDifference.bind(this)) {
         if (collection.differenceCount === 0) {
@@ -35585,7 +35647,7 @@ var init_format = __esm({
         this.printSectionFooter();
       }
       printSectionHeader(title) {
-        this.print(chalk6.underline(chalk6.bold(title)));
+        this.print(chalk3.underline(chalk3.bold(title)));
       }
       printSectionFooter() {
         this.print("");
@@ -35601,8 +35663,8 @@ var init_format = __esm({
           return;
         }
         let value;
-        const oldValue = this.formatValue(diff.oldValue, chalk6.red);
-        const newValue = this.formatValue(diff.newValue, chalk6.green);
+        const oldValue = this.formatValue(diff.oldValue, chalk3.red);
+        const newValue = this.formatValue(diff.newValue, chalk3.green);
         if (diff.isAddition) {
           value = newValue;
         } else if (diff.isUpdate) {
@@ -35610,7 +35672,7 @@ var init_format = __esm({
         } else if (diff.isRemoval) {
           value = oldValue;
         }
-        this.print(`${this.formatPrefix(diff)} ${chalk6.cyan(type)} ${this.formatLogicalId(logicalId)}: ${value}`);
+        this.print(`${this.formatPrefix(diff)} ${chalk3.cyan(type)} ${this.formatLogicalId(logicalId)}: ${value}`);
       }
       /**
        * Print a resource difference for a given logical ID.
@@ -35623,7 +35685,7 @@ var init_format = __esm({
           return;
         }
         const resourceType = diff.isRemoval ? diff.oldResourceType : diff.newResourceType;
-        this.print(`${this.formatResourcePrefix(diff)} ${this.formatValue(resourceType, chalk6.cyan)} ${this.formatLogicalId(logicalId)} ${this.formatImpact(diff.changeImpact)}`.trimEnd());
+        this.print(`${this.formatResourcePrefix(diff)} ${this.formatValue(resourceType, chalk3.cyan)} ${this.formatLogicalId(logicalId)} ${this.formatImpact(diff.changeImpact)}`.trimEnd());
         if (diff.isUpdate) {
           const differenceCount = diff.differenceCount;
           let processedCount = 0;
@@ -35649,7 +35711,7 @@ var init_format = __esm({
         if (diff.isRemoval) {
           return REMOVAL;
         }
-        return chalk6.white("[?]");
+        return chalk3.white("[?]");
       }
       /**
        * @param value the value to be formatted.
@@ -35672,19 +35734,19 @@ var init_format = __esm({
        */
       formatImpact(impact) {
         switch (impact) {
-          case "MAY_REPLACE" /* MAY_REPLACE */:
-            return chalk6.italic(chalk6.yellow("may be replaced"));
-          case "WILL_REPLACE" /* WILL_REPLACE */:
-            return chalk6.italic(chalk6.bold(chalk6.red("replace")));
-          case "WILL_DESTROY" /* WILL_DESTROY */:
-            return chalk6.italic(chalk6.bold(chalk6.red("destroy")));
-          case "WILL_ORPHAN" /* WILL_ORPHAN */:
-            return chalk6.italic(chalk6.yellow("orphan"));
-          case "WILL_IMPORT" /* WILL_IMPORT */:
-            return chalk6.italic(chalk6.blue("import"));
-          case "WILL_UPDATE" /* WILL_UPDATE */:
-          case "WILL_CREATE" /* WILL_CREATE */:
-          case "NO_CHANGE" /* NO_CHANGE */:
+          case diff_template_1.ResourceImpact.MAY_REPLACE:
+            return chalk3.italic(chalk3.yellow("may be replaced"));
+          case diff_template_1.ResourceImpact.WILL_REPLACE:
+            return chalk3.italic(chalk3.bold(chalk3.red("replace")));
+          case diff_template_1.ResourceImpact.WILL_DESTROY:
+            return chalk3.italic(chalk3.bold(chalk3.red("destroy")));
+          case diff_template_1.ResourceImpact.WILL_ORPHAN:
+            return chalk3.italic(chalk3.yellow("orphan"));
+          case diff_template_1.ResourceImpact.WILL_IMPORT:
+            return chalk3.italic(chalk3.blue("import"));
+          case diff_template_1.ResourceImpact.WILL_UPDATE:
+          case diff_template_1.ResourceImpact.WILL_CREATE:
+          case diff_template_1.ResourceImpact.NO_CHANGE:
             return "";
         }
       }
@@ -35696,10 +35758,10 @@ var init_format = __esm({
        */
       formatTreeDiff(name, diff, last) {
         let additionalInfo = "";
-        if (isPropertyDifference(diff)) {
-          if (diff.changeImpact === "MAY_REPLACE" /* MAY_REPLACE */) {
+        if ((0, diff_template_1.isPropertyDifference)(diff)) {
+          if (diff.changeImpact === diff_template_1.ResourceImpact.MAY_REPLACE) {
             additionalInfo = " (may cause replacement)";
-          } else if (diff.changeImpact === "WILL_REPLACE" /* WILL_REPLACE */) {
+          } else if (diff.changeImpact === diff_template_1.ResourceImpact.WILL_REPLACE) {
             additionalInfo = " (requires replacement)";
           }
         }
@@ -35725,31 +35787,31 @@ var init_format = __esm({
                 this.print("%s   %s %s", linePrefix, i === 0 ? "\u2514\u2500" : "  ", diff[i]);
               }
             } else {
-              this.print("%s   \u251C\u2500 %s %s", linePrefix, REMOVAL, this.formatValue(oldObject, chalk6.red));
-              this.print("%s   \u2514\u2500 %s %s", linePrefix, ADDITION, this.formatValue(newObject, chalk6.green));
+              this.print("%s   \u251C\u2500 %s %s", linePrefix, REMOVAL, this.formatValue(oldObject, chalk3.red));
+              this.print("%s   \u2514\u2500 %s %s", linePrefix, ADDITION, this.formatValue(newObject, chalk3.green));
             }
           } else if (oldObject !== void 0) {
-            this.print("%s   \u2514\u2500 %s", linePrefix, this.formatValue(oldObject, chalk6.red));
+            this.print("%s   \u2514\u2500 %s", linePrefix, this.formatValue(oldObject, chalk3.red));
           } else {
-            this.print("%s   \u2514\u2500 %s", linePrefix, this.formatValue(newObject, chalk6.green));
+            this.print("%s   \u2514\u2500 %s", linePrefix, this.formatValue(newObject, chalk3.green));
           }
           return;
         }
         const keySet = new Set(Object.keys(oldObject));
         Object.keys(newObject).forEach((k) => keySet.add(k));
-        const keys = new Array(...keySet).filter((k) => !deepEqual(oldObject[k], newObject[k])).sort();
+        const keys = new Array(...keySet).filter((k) => !(0, util_2.deepEqual)(oldObject[k], newObject[k])).sort();
         const lastKey = keys[keys.length - 1];
         for (const key of keys) {
           const oldValue = oldObject[key];
           const newValue = newObject[key];
           const treePrefix = key === lastKey ? "\u2514" : "\u251C";
           if (oldValue !== void 0 && newValue !== void 0) {
-            this.print("%s   %s\u2500 %s %s:", linePrefix, treePrefix, this.changeTag(oldValue, newValue), chalk6.blue(`.${key}`));
+            this.print("%s   %s\u2500 %s %s:", linePrefix, treePrefix, this.changeTag(oldValue, newValue), chalk3.blue(`.${key}`));
             this.formatObjectDiff(oldValue, newValue, `${linePrefix}   ${key === lastKey ? " " : "\u2502"}`);
           } else if (oldValue !== void 0) {
-            this.print("%s   %s\u2500 %s Removed: %s", linePrefix, treePrefix, REMOVAL, chalk6.blue(`.${key}`));
+            this.print("%s   %s\u2500 %s Removed: %s", linePrefix, treePrefix, REMOVAL, chalk3.blue(`.${key}`));
           } else {
-            this.print("%s   %s\u2500 %s Added: %s", linePrefix, treePrefix, ADDITION, chalk6.blue(`.${key}`));
+            this.print("%s   %s\u2500 %s Added: %s", linePrefix, treePrefix, ADDITION, chalk3.blue(`.${key}`));
           }
         }
       }
@@ -35794,7 +35856,7 @@ var init_format = __esm({
       formatLogicalId(logicalId) {
         const normalized = this.normalizedLogicalIdPath(logicalId);
         if (normalized) {
-          return `${normalized} ${chalk6.gray(logicalId)}`;
+          return `${normalized} ${chalk3.gray(logicalId)}`;
         }
         return logicalId;
       }
@@ -35825,22 +35887,22 @@ var init_format = __esm({
         }
         if (changes.statements.hasChanges) {
           this.printSectionHeader("IAM Statement Changes");
-          this.print(formatTable(this.deepSubstituteBracedLogicalIds(changes.summarizeStatements()), this.stream.columns));
+          this.print((0, format_table_1.formatTable)(this.deepSubstituteBracedLogicalIds(changes.summarizeStatements()), this.stream.columns));
         }
         if (changes.managedPolicies.hasChanges) {
           this.printSectionHeader("IAM Policy Changes");
-          this.print(formatTable(this.deepSubstituteBracedLogicalIds(changes.summarizeManagedPolicies()), this.stream.columns));
+          this.print((0, format_table_1.formatTable)(this.deepSubstituteBracedLogicalIds(changes.summarizeManagedPolicies()), this.stream.columns));
         }
         if (changes.ssoPermissionSets.hasChanges || changes.ssoInstanceACAConfigs.hasChanges || changes.ssoAssignments.hasChanges) {
           this.printSectionHeader("IAM Identity Center Changes");
           if (changes.ssoPermissionSets.hasChanges) {
-            this.print(formatTable(this.deepSubstituteBracedLogicalIds(changes.summarizeSsoPermissionSets()), this.stream.columns));
+            this.print((0, format_table_1.formatTable)(this.deepSubstituteBracedLogicalIds(changes.summarizeSsoPermissionSets()), this.stream.columns));
           }
           if (changes.ssoInstanceACAConfigs.hasChanges) {
-            this.print(formatTable(this.deepSubstituteBracedLogicalIds(changes.summarizeSsoInstanceACAConfigs()), this.stream.columns));
+            this.print((0, format_table_1.formatTable)(this.deepSubstituteBracedLogicalIds(changes.summarizeSsoInstanceACAConfigs()), this.stream.columns));
           }
           if (changes.ssoAssignments.hasChanges) {
-            this.print(formatTable(this.deepSubstituteBracedLogicalIds(changes.summarizeSsoAssignments()), this.stream.columns));
+            this.print((0, format_table_1.formatTable)(this.deepSubstituteBracedLogicalIds(changes.summarizeSsoAssignments()), this.stream.columns));
           }
         }
       }
@@ -35849,7 +35911,7 @@ var init_format = __esm({
           return;
         }
         this.printSectionHeader("Security Group Changes");
-        this.print(formatTable(this.deepSubstituteBracedLogicalIds(changes.summarize()), this.stream.columns));
+        this.print((0, format_table_1.formatTable)(this.deepSubstituteBracedLogicalIds(changes.summarize()), this.stream.columns));
       }
       deepSubstituteBracedLogicalIds(rows) {
         return rows.map((row) => row.map(this.substituteBracedLogicalIds.bind(this)));
@@ -35863,12 +35925,54 @@ var init_format = __esm({
         });
       }
     };
+    exports2.Formatter = Formatter;
+    function _diffStrings(oldStr, newStr, context) {
+      const patch = structuredPatch(null, null, oldStr, newStr, null, null, { context });
+      const result = new Array();
+      for (const hunk of patch.hunks) {
+        result.push(chalk3.magenta(`@@ -${hunk.oldStart},${hunk.oldLines} +${hunk.newStart},${hunk.newLines} @@`));
+        const baseIndent = _findIndent(hunk.lines);
+        for (const line of hunk.lines) {
+          if (line === "\") {
+            continue;
+          }
+          const marker = line.charAt(0);
+          const text = line.slice(1 + baseIndent);
+          switch (marker) {
+            case " ":
+              result.push(`${CONTEXT} ${text}`);
+              break;
+            case "+":
+              result.push(chalk3.bold(`${ADDITION} ${chalk3.green(text)}`));
+              break;
+            case "-":
+              result.push(chalk3.bold(`${REMOVAL} ${chalk3.red(text)}`));
+              break;
+            default:
+              throw new Error(`Unexpected diff marker: ${marker} (full line: ${line})`);
+          }
+        }
+      }
+      return result;
+      function _findIndent(lines) {
+        let indent = Number.MAX_SAFE_INTEGER;
+        for (const line of lines) {
+          for (let i = 1; i < line.length; i++) {
+            if (line.charAt(i) !== " ") {
+              indent = indent > i - 1 ? i - 1 : indent;
+              break;
+            }
+          }
+        }
+        return indent;
+      }
+    }
   }
 });
-// ../cloudformation-diff/lib/index.js
+// ../../../node_modules/@aws-cdk/cloudformation-diff/lib/index.js
 var require_lib11 = __commonJS({
-  "../cloudformation-diff/lib/index.js"(exports2) {
+  "../../../node_modules/@aws-cdk/cloudformation-diff/lib/index.js"(exports2) {
     "use strict";
     var __createBinding2 = exports2 && exports2.__createBinding || (Object.create ? function(o, m, k, k2) {
       if (k2 === void 0) k2 = k;
@@ -35888,10 +35992,10 @@ var require_lib11 = __commonJS({
     };
     Object.defineProperty(exports2, "__esModule", { value: true });
     exports2.mangleLikeCloudFormation = exports2.deepEqual = void 0;
-    __exportStar2((init_diff_template(), __toCommonJS(diff_template_exports)), exports2);
-    __exportStar2((init_format(), __toCommonJS(format_exports)), exports2);
-    __exportStar2((init_format_table(), __toCommonJS(format_table_exports)), exports2);
-    var util_1 = (init_util(), __toCommonJS(util_exports));
+    __exportStar2(require_diff_template(), exports2);
+    __exportStar2(require_format(), exports2);
+    __exportStar2(require_format_table(), exports2);
+    var util_1 = require_util2();
     Object.defineProperty(exports2, "deepEqual", { enumerable: true, get: function() {
       return util_1.deepEqual;
     } });