@aws-cdk/integ-runner 2.186.6 → 2.186.8

package/THIRD_PARTY_LICENSES

@@ -750,7 +750,7 @@ SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.
 
 ----------------
 
-** semver@7.7.1 - https://www.npmjs.com/package/semver/v/7.7.1 | ISC
+** semver@7.7.2 - https://www.npmjs.com/package/semver/v/7.7.2 | ISC
 The ISC License
 
 Copyright (c) Isaac Z. Schlueter and Contributors

package/lib/recommended-feature-flags.json

@@ -70,5 +70,6 @@
   "@aws-cdk/aws-events:requireEventBusPolicySid": true,
   "@aws-cdk/core:aspectPrioritiesMutating": true,
   "@aws-cdk/aws-dynamodb:retainTableReplica": true,
-  "@aws-cdk/aws-stepfunctions:useDistributedMapResultWriterV2": true
+  "@aws-cdk/aws-stepfunctions:useDistributedMapResultWriterV2": true,
+  "@aws-cdk/s3-notifications:addS3TrustKeyPolicyForSnsSubscriptions": true
 }

package/lib/runner/runner-base.d.ts

@@ -286,4 +286,5 @@ export declare function currentlyRecommendedAwsCdkLibFlags(): {
     "@aws-cdk/core:aspectPrioritiesMutating": boolean;
     "@aws-cdk/aws-dynamodb:retainTableReplica": boolean;
     "@aws-cdk/aws-stepfunctions:useDistributedMapResultWriterV2": boolean;
+    "@aws-cdk/s3-notifications:addS3TrustKeyPolicyForSnsSubscriptions": boolean;
 };

package/lib/workers/extract/index.js

@@ -3192,6 +3192,7 @@ var require_lib2 = __commonJS({
 // ../cloud-assembly-schema/node_modules/semver/internal/constants.js
 var require_constants = __commonJS({
   "../cloud-assembly-schema/node_modules/semver/internal/constants.js"(exports2, module2) {
+    "use strict";
     var SEMVER_SPEC_VERSION = "2.0.0";
     var MAX_LENGTH = 256;
     var MAX_SAFE_INTEGER = Number.MAX_SAFE_INTEGER || /* istanbul ignore next */
@@ -3223,6 +3224,7 @@ var require_constants = __commonJS({
 // ../cloud-assembly-schema/node_modules/semver/internal/debug.js
 var require_debug = __commonJS({
   "../cloud-assembly-schema/node_modules/semver/internal/debug.js"(exports2, module2) {
+    "use strict";
     var debug = typeof process === "object" && process.env && process.env.NODE_DEBUG && /\bsemver\b/i.test(process.env.NODE_DEBUG) ? (...args) => console.error("SEMVER", ...args) : () => {
     };
     module2.exports = debug;
@@ -3232,6 +3234,7 @@ var require_debug = __commonJS({
 // ../cloud-assembly-schema/node_modules/semver/internal/re.js
 var require_re = __commonJS({
   "../cloud-assembly-schema/node_modules/semver/internal/re.js"(exports2, module2) {
+    "use strict";
     var {
       MAX_SAFE_COMPONENT_LENGTH,
       MAX_SAFE_BUILD_LENGTH,
@@ -3272,8 +3275,8 @@ var require_re = __commonJS({
     createToken("NONNUMERICIDENTIFIER", `\\d*[a-zA-Z-]${LETTERDASHNUMBER}*`);
     createToken("MAINVERSION", `(${src[t.NUMERICIDENTIFIER]})\\.(${src[t.NUMERICIDENTIFIER]})\\.(${src[t.NUMERICIDENTIFIER]})`);
     createToken("MAINVERSIONLOOSE", `(${src[t.NUMERICIDENTIFIERLOOSE]})\\.(${src[t.NUMERICIDENTIFIERLOOSE]})\\.(${src[t.NUMERICIDENTIFIERLOOSE]})`);
-    createToken("PRERELEASEIDENTIFIER", `(?:${src[t.NUMERICIDENTIFIER]}|${src[t.NONNUMERICIDENTIFIER]})`);
-    createToken("PRERELEASEIDENTIFIERLOOSE", `(?:${src[t.NUMERICIDENTIFIERLOOSE]}|${src[t.NONNUMERICIDENTIFIER]})`);
+    createToken("PRERELEASEIDENTIFIER", `(?:${src[t.NONNUMERICIDENTIFIER]}|${src[t.NUMERICIDENTIFIER]})`);
+    createToken("PRERELEASEIDENTIFIERLOOSE", `(?:${src[t.NONNUMERICIDENTIFIER]}|${src[t.NUMERICIDENTIFIERLOOSE]})`);
     createToken("PRERELEASE", `(?:-(${src[t.PRERELEASEIDENTIFIER]}(?:\\.${src[t.PRERELEASEIDENTIFIER]})*))`);
     createToken("PRERELEASELOOSE", `(?:-?(${src[t.PRERELEASEIDENTIFIERLOOSE]}(?:\\.${src[t.PRERELEASEIDENTIFIERLOOSE]})*))`);
     createToken("BUILDIDENTIFIER", `${LETTERDASHNUMBER}+`);
@@ -3319,6 +3322,7 @@ var require_re = __commonJS({
 // ../cloud-assembly-schema/node_modules/semver/internal/parse-options.js
 var require_parse_options = __commonJS({
   "../cloud-assembly-schema/node_modules/semver/internal/parse-options.js"(exports2, module2) {
+    "use strict";
     var looseOption = Object.freeze({ loose: true });
     var emptyOpts = Object.freeze({});
     var parseOptions = (options) => {
@@ -3337,6 +3341,7 @@ var require_parse_options = __commonJS({
 // ../cloud-assembly-schema/node_modules/semver/internal/identifiers.js
 var require_identifiers = __commonJS({
   "../cloud-assembly-schema/node_modules/semver/internal/identifiers.js"(exports2, module2) {
+    "use strict";
     var numeric = /^[0-9]+$/;
     var compareIdentifiers = (a, b) => {
       const anum = numeric.test(a);
@@ -3358,9 +3363,10 @@ var require_identifiers = __commonJS({
 // ../cloud-assembly-schema/node_modules/semver/classes/semver.js
 var require_semver = __commonJS({
   "../cloud-assembly-schema/node_modules/semver/classes/semver.js"(exports2, module2) {
+    "use strict";
     var debug = require_debug();
     var { MAX_LENGTH, MAX_SAFE_INTEGER } = require_constants();
-    var { safeRe: re, safeSrc: src, t } = require_re();
+    var { safeRe: re, t } = require_re();
     var parseOptions = require_parse_options();
     var { compareIdentifiers } = require_identifiers();
     var SemVer = class _SemVer {
@@ -3505,8 +3511,7 @@ var require_semver = __commonJS({
             throw new Error("invalid increment argument: identifier is empty");
           }
           if (identifier) {
-            const r = new RegExp(`^${this.options.loose ? src[t.PRERELEASELOOSE] : src[t.PRERELEASE]}$`);
-            const match = `-${identifier}`.match(r);
+            const match = `-${identifier}`.match(this.options.loose ? re[t.PRERELEASELOOSE] : re[t.PRERELEASE]);
             if (!match || match[1] !== identifier) {
               throw new Error(`invalid identifier: ${identifier}`);
             }
@@ -3619,6 +3624,7 @@ var require_semver = __commonJS({
 // ../cloud-assembly-schema/node_modules/semver/functions/parse.js
 var require_parse = __commonJS({
   "../cloud-assembly-schema/node_modules/semver/functions/parse.js"(exports2, module2) {
+    "use strict";
     var SemVer = require_semver();
     var parse2 = (version, options, throwErrors = false) => {
       if (version instanceof SemVer) {
@@ -3640,6 +3646,7 @@ var require_parse = __commonJS({
 // ../cloud-assembly-schema/node_modules/semver/functions/valid.js
 var require_valid = __commonJS({
   "../cloud-assembly-schema/node_modules/semver/functions/valid.js"(exports2, module2) {
+    "use strict";
     var parse2 = require_parse();
     var valid2 = (version, options) => {
       const v = parse2(version, options);
@@ -3652,6 +3659,7 @@ var require_valid = __commonJS({
 // ../cloud-assembly-schema/node_modules/semver/functions/clean.js
 var require_clean = __commonJS({
   "../cloud-assembly-schema/node_modules/semver/functions/clean.js"(exports2, module2) {
+    "use strict";
     var parse2 = require_parse();
     var clean = (version, options) => {
       const s = parse2(version.trim().replace(/^[=v]+/, ""), options);
@@ -3664,6 +3672,7 @@ var require_clean = __commonJS({
 // ../cloud-assembly-schema/node_modules/semver/functions/inc.js
 var require_inc = __commonJS({
   "../cloud-assembly-schema/node_modules/semver/functions/inc.js"(exports2, module2) {
+    "use strict";
     var SemVer = require_semver();
     var inc = (version, release, options, identifier, identifierBase) => {
       if (typeof options === "string") {
@@ -3687,6 +3696,7 @@ var require_inc = __commonJS({
 // ../cloud-assembly-schema/node_modules/semver/functions/diff.js
 var require_diff = __commonJS({
   "../cloud-assembly-schema/node_modules/semver/functions/diff.js"(exports2, module2) {
+    "use strict";
     var parse2 = require_parse();
     var diff = (version1, version2) => {
       const v1 = parse2(version1, null, true);
@@ -3730,6 +3740,7 @@ var require_diff = __commonJS({
 // ../cloud-assembly-schema/node_modules/semver/functions/major.js
 var require_major = __commonJS({
   "../cloud-assembly-schema/node_modules/semver/functions/major.js"(exports2, module2) {
+    "use strict";
     var SemVer = require_semver();
     var major2 = (a, loose) => new SemVer(a, loose).major;
     module2.exports = major2;
@@ -3739,6 +3750,7 @@ var require_major = __commonJS({
 // ../cloud-assembly-schema/node_modules/semver/functions/minor.js
 var require_minor = __commonJS({
   "../cloud-assembly-schema/node_modules/semver/functions/minor.js"(exports2, module2) {
+    "use strict";
     var SemVer = require_semver();
     var minor = (a, loose) => new SemVer(a, loose).minor;
     module2.exports = minor;
@@ -3748,6 +3760,7 @@ var require_minor = __commonJS({
 // ../cloud-assembly-schema/node_modules/semver/functions/patch.js
 var require_patch = __commonJS({
   "../cloud-assembly-schema/node_modules/semver/functions/patch.js"(exports2, module2) {
+    "use strict";
     var SemVer = require_semver();
     var patch = (a, loose) => new SemVer(a, loose).patch;
     module2.exports = patch;
@@ -3757,6 +3770,7 @@ var require_patch = __commonJS({
 // ../cloud-assembly-schema/node_modules/semver/functions/prerelease.js
 var require_prerelease = __commonJS({
   "../cloud-assembly-schema/node_modules/semver/functions/prerelease.js"(exports2, module2) {
+    "use strict";
     var parse2 = require_parse();
     var prerelease = (version, options) => {
       const parsed = parse2(version, options);
@@ -3769,6 +3783,7 @@ var require_prerelease = __commonJS({
 // ../cloud-assembly-schema/node_modules/semver/functions/compare.js
 var require_compare = __commonJS({
   "../cloud-assembly-schema/node_modules/semver/functions/compare.js"(exports2, module2) {
+    "use strict";
     var SemVer = require_semver();
     var compare2 = (a, b, loose) => new SemVer(a, loose).compare(new SemVer(b, loose));
     module2.exports = compare2;
@@ -3778,6 +3793,7 @@ var require_compare = __commonJS({
 // ../cloud-assembly-schema/node_modules/semver/functions/rcompare.js
 var require_rcompare = __commonJS({
   "../cloud-assembly-schema/node_modules/semver/functions/rcompare.js"(exports2, module2) {
+    "use strict";
     var compare2 = require_compare();
     var rcompare = (a, b, loose) => compare2(b, a, loose);
     module2.exports = rcompare;
@@ -3787,6 +3803,7 @@ var require_rcompare = __commonJS({
 // ../cloud-assembly-schema/node_modules/semver/functions/compare-loose.js
 var require_compare_loose = __commonJS({
   "../cloud-assembly-schema/node_modules/semver/functions/compare-loose.js"(exports2, module2) {
+    "use strict";
     var compare2 = require_compare();
     var compareLoose = (a, b) => compare2(a, b, true);
     module2.exports = compareLoose;
@@ -3796,6 +3813,7 @@ var require_compare_loose = __commonJS({
 // ../cloud-assembly-schema/node_modules/semver/functions/compare-build.js
 var require_compare_build = __commonJS({
   "../cloud-assembly-schema/node_modules/semver/functions/compare-build.js"(exports2, module2) {
+    "use strict";
     var SemVer = require_semver();
     var compareBuild = (a, b, loose) => {
       const versionA = new SemVer(a, loose);
@@ -3809,6 +3827,7 @@ var require_compare_build = __commonJS({
 // ../cloud-assembly-schema/node_modules/semver/functions/sort.js
 var require_sort = __commonJS({
   "../cloud-assembly-schema/node_modules/semver/functions/sort.js"(exports2, module2) {
+    "use strict";
     var compareBuild = require_compare_build();
     var sort = (list, loose) => list.sort((a, b) => compareBuild(a, b, loose));
     module2.exports = sort;
@@ -3818,6 +3837,7 @@ var require_sort = __commonJS({
 // ../cloud-assembly-schema/node_modules/semver/functions/rsort.js
 var require_rsort = __commonJS({
   "../cloud-assembly-schema/node_modules/semver/functions/rsort.js"(exports2, module2) {
+    "use strict";
     var compareBuild = require_compare_build();
     var rsort = (list, loose) => list.sort((a, b) => compareBuild(b, a, loose));
     module2.exports = rsort;
@@ -3827,6 +3847,7 @@ var require_rsort = __commonJS({
 // ../cloud-assembly-schema/node_modules/semver/functions/gt.js
 var require_gt = __commonJS({
   "../cloud-assembly-schema/node_modules/semver/functions/gt.js"(exports2, module2) {
+    "use strict";
     var compare2 = require_compare();
     var gt = (a, b, loose) => compare2(a, b, loose) > 0;
     module2.exports = gt;
@@ -3836,6 +3857,7 @@ var require_gt = __commonJS({
 // ../cloud-assembly-schema/node_modules/semver/functions/lt.js
 var require_lt = __commonJS({
   "../cloud-assembly-schema/node_modules/semver/functions/lt.js"(exports2, module2) {
+    "use strict";
     var compare2 = require_compare();
     var lt = (a, b, loose) => compare2(a, b, loose) < 0;
     module2.exports = lt;
@@ -3845,6 +3867,7 @@ var require_lt = __commonJS({
 // ../cloud-assembly-schema/node_modules/semver/functions/eq.js
 var require_eq = __commonJS({
   "../cloud-assembly-schema/node_modules/semver/functions/eq.js"(exports2, module2) {
+    "use strict";
     var compare2 = require_compare();
     var eq = (a, b, loose) => compare2(a, b, loose) === 0;
     module2.exports = eq;
@@ -3854,6 +3877,7 @@ var require_eq = __commonJS({
 // ../cloud-assembly-schema/node_modules/semver/functions/neq.js
 var require_neq = __commonJS({
   "../cloud-assembly-schema/node_modules/semver/functions/neq.js"(exports2, module2) {
+    "use strict";
     var compare2 = require_compare();
     var neq = (a, b, loose) => compare2(a, b, loose) !== 0;
     module2.exports = neq;
@@ -3863,6 +3887,7 @@ var require_neq = __commonJS({
 // ../cloud-assembly-schema/node_modules/semver/functions/gte.js
 var require_gte = __commonJS({
   "../cloud-assembly-schema/node_modules/semver/functions/gte.js"(exports2, module2) {
+    "use strict";
     var compare2 = require_compare();
     var gte = (a, b, loose) => compare2(a, b, loose) >= 0;
     module2.exports = gte;
@@ -3872,6 +3897,7 @@ var require_gte = __commonJS({
 // ../cloud-assembly-schema/node_modules/semver/functions/lte.js
 var require_lte = __commonJS({
   "../cloud-assembly-schema/node_modules/semver/functions/lte.js"(exports2, module2) {
+    "use strict";
     var compare2 = require_compare();
     var lte = (a, b, loose) => compare2(a, b, loose) <= 0;
     module2.exports = lte;
@@ -3881,6 +3907,7 @@ var require_lte = __commonJS({
 // ../cloud-assembly-schema/node_modules/semver/functions/cmp.js
 var require_cmp = __commonJS({
   "../cloud-assembly-schema/node_modules/semver/functions/cmp.js"(exports2, module2) {
+    "use strict";
     var eq = require_eq();
     var neq = require_neq();
     var gt = require_gt();
@@ -3930,6 +3957,7 @@ var require_cmp = __commonJS({
 // ../cloud-assembly-schema/node_modules/semver/functions/coerce.js
 var require_coerce = __commonJS({
   "../cloud-assembly-schema/node_modules/semver/functions/coerce.js"(exports2, module2) {
+    "use strict";
     var SemVer = require_semver();
     var parse2 = require_parse();
     var { safeRe: re, t } = require_re();
@@ -3975,6 +4003,7 @@ var require_coerce = __commonJS({
 // ../cloud-assembly-schema/node_modules/semver/internal/lrucache.js
 var require_lrucache = __commonJS({
   "../cloud-assembly-schema/node_modules/semver/internal/lrucache.js"(exports2, module2) {
+    "use strict";
     var LRUCache = class {
       constructor() {
         this.max = 1e3;
@@ -4012,6 +4041,7 @@ var require_lrucache = __commonJS({
 // ../cloud-assembly-schema/node_modules/semver/classes/range.js
 var require_range = __commonJS({
   "../cloud-assembly-schema/node_modules/semver/classes/range.js"(exports2, module2) {
+    "use strict";
     var SPACE_CHARACTERS = /\s+/g;
     var Range = class _Range {
       constructor(range, options) {
@@ -4387,6 +4417,7 @@ var require_range = __commonJS({
 // ../cloud-assembly-schema/node_modules/semver/classes/comparator.js
 var require_comparator = __commonJS({
   "../cloud-assembly-schema/node_modules/semver/classes/comparator.js"(exports2, module2) {
+    "use strict";
     var ANY = Symbol("SemVer ANY");
     var Comparator = class _Comparator {
       static get ANY() {
@@ -4499,6 +4530,7 @@ var require_comparator = __commonJS({
 // ../cloud-assembly-schema/node_modules/semver/functions/satisfies.js
 var require_satisfies = __commonJS({
   "../cloud-assembly-schema/node_modules/semver/functions/satisfies.js"(exports2, module2) {
+    "use strict";
     var Range = require_range();
     var satisfies = (version, range, options) => {
       try {
@@ -4515,6 +4547,7 @@ var require_satisfies = __commonJS({
 // ../cloud-assembly-schema/node_modules/semver/ranges/to-comparators.js
 var require_to_comparators = __commonJS({
   "../cloud-assembly-schema/node_modules/semver/ranges/to-comparators.js"(exports2, module2) {
+    "use strict";
     var Range = require_range();
     var toComparators = (range, options) => new Range(range, options).set.map((comp) => comp.map((c) => c.value).join(" ").trim().split(" "));
     module2.exports = toComparators;
@@ -4524,6 +4557,7 @@ var require_to_comparators = __commonJS({
 // ../cloud-assembly-schema/node_modules/semver/ranges/max-satisfying.js
 var require_max_satisfying = __commonJS({
   "../cloud-assembly-schema/node_modules/semver/ranges/max-satisfying.js"(exports2, module2) {
+    "use strict";
     var SemVer = require_semver();
     var Range = require_range();
     var maxSatisfying = (versions, range, options) => {
@@ -4552,6 +4586,7 @@ var require_max_satisfying = __commonJS({
 // ../cloud-assembly-schema/node_modules/semver/ranges/min-satisfying.js
 var require_min_satisfying = __commonJS({
   "../cloud-assembly-schema/node_modules/semver/ranges/min-satisfying.js"(exports2, module2) {
+    "use strict";
     var SemVer = require_semver();
     var Range = require_range();
     var minSatisfying = (versions, range, options) => {
@@ -4580,6 +4615,7 @@ var require_min_satisfying = __commonJS({
 // ../cloud-assembly-schema/node_modules/semver/ranges/min-version.js
 var require_min_version = __commonJS({
   "../cloud-assembly-schema/node_modules/semver/ranges/min-version.js"(exports2, module2) {
+    "use strict";
     var SemVer = require_semver();
     var Range = require_range();
     var gt = require_gt();
@@ -4638,6 +4674,7 @@ var require_min_version = __commonJS({
 // ../cloud-assembly-schema/node_modules/semver/ranges/valid.js
 var require_valid2 = __commonJS({
   "../cloud-assembly-schema/node_modules/semver/ranges/valid.js"(exports2, module2) {
+    "use strict";
     var Range = require_range();
     var validRange = (range, options) => {
       try {
@@ -4653,6 +4690,7 @@ var require_valid2 = __commonJS({
 // ../cloud-assembly-schema/node_modules/semver/ranges/outside.js
 var require_outside = __commonJS({
   "../cloud-assembly-schema/node_modules/semver/ranges/outside.js"(exports2, module2) {
+    "use strict";
     var SemVer = require_semver();
     var Comparator = require_comparator();
     var { ANY } = Comparator;
@@ -4721,6 +4759,7 @@ var require_outside = __commonJS({
 // ../cloud-assembly-schema/node_modules/semver/ranges/gtr.js
 var require_gtr = __commonJS({
   "../cloud-assembly-schema/node_modules/semver/ranges/gtr.js"(exports2, module2) {
+    "use strict";
     var outside = require_outside();
     var gtr = (version, range, options) => outside(version, range, ">", options);
     module2.exports = gtr;
@@ -4730,6 +4769,7 @@ var require_gtr = __commonJS({
 // ../cloud-assembly-schema/node_modules/semver/ranges/ltr.js
 var require_ltr = __commonJS({
   "../cloud-assembly-schema/node_modules/semver/ranges/ltr.js"(exports2, module2) {
+    "use strict";
     var outside = require_outside();
     var ltr = (version, range, options) => outside(version, range, "<", options);
     module2.exports = ltr;
@@ -4739,6 +4779,7 @@ var require_ltr = __commonJS({
 // ../cloud-assembly-schema/node_modules/semver/ranges/intersects.js
 var require_intersects = __commonJS({
   "../cloud-assembly-schema/node_modules/semver/ranges/intersects.js"(exports2, module2) {
+    "use strict";
     var Range = require_range();
     var intersects = (r1, r2, options) => {
       r1 = new Range(r1, options);
@@ -4752,6 +4793,7 @@ var require_intersects = __commonJS({
 // ../cloud-assembly-schema/node_modules/semver/ranges/simplify.js
 var require_simplify = __commonJS({
   "../cloud-assembly-schema/node_modules/semver/ranges/simplify.js"(exports2, module2) {
+    "use strict";
     var satisfies = require_satisfies();
     var compare2 = require_compare();
     module2.exports = (versions, range, options) => {
@@ -4801,6 +4843,7 @@ var require_simplify = __commonJS({
 // ../cloud-assembly-schema/node_modules/semver/ranges/subset.js
 var require_subset = __commonJS({
   "../cloud-assembly-schema/node_modules/semver/ranges/subset.js"(exports2, module2) {
+    "use strict";
     var Range = require_range();
     var Comparator = require_comparator();
     var { ANY } = Comparator;
@@ -4962,6 +5005,7 @@ var require_subset = __commonJS({
 // ../cloud-assembly-schema/node_modules/semver/index.js
 var require_semver2 = __commonJS({
   "../cloud-assembly-schema/node_modules/semver/index.js"(exports2, module2) {
+    "use strict";
     var internalRe = require_re();
     var constants = require_constants();
     var SemVer = require_semver();
@@ -5056,7 +5100,7 @@ var require_semver2 = __commonJS({
 // ../cloud-assembly-schema/cli-version.json
 var require_cli_version = __commonJS({
   "../cloud-assembly-schema/cli-version.json"(exports2, module2) {
-    module2.exports = { version: "2.1014.0" };
+    module2.exports = { version: "2.1016.0" };
   }
 });
 
@@ -7514,7 +7558,7 @@ var require_cloud_artifact = __commonJS({
     };
     exports2.CloudArtifact = CloudArtifact;
     _a = JSII_RTTI_SYMBOL_1;
-    CloudArtifact[_a] = { fqn: "@aws-cdk/cx-api.CloudArtifact", version: "2.194.0" };
+    CloudArtifact[_a] = { fqn: "@aws-cdk/cx-api.CloudArtifact", version: "2.195.0" };
   }
 });
 
@@ -7584,7 +7628,7 @@ var require_asset_manifest_artifact = __commonJS({
     };
     exports2.AssetManifestArtifact = AssetManifestArtifact;
     _a = JSII_RTTI_SYMBOL_1;
-    AssetManifestArtifact[_a] = { fqn: "@aws-cdk/cx-api.AssetManifestArtifact", version: "2.194.0" };
+    AssetManifestArtifact[_a] = { fqn: "@aws-cdk/cx-api.AssetManifestArtifact", version: "2.195.0" };
     Object.defineProperty(AssetManifestArtifact.prototype, ASSET_MANIFEST_ARTIFACT_SYM, {
       value: true,
       enumerable: false,
@@ -7632,7 +7676,7 @@ var require_environment2 = __commonJS({
     };
     exports2.EnvironmentUtils = EnvironmentUtils;
     _a = JSII_RTTI_SYMBOL_1;
-    EnvironmentUtils[_a] = { fqn: "@aws-cdk/cx-api.EnvironmentUtils", version: "2.194.0" };
+    EnvironmentUtils[_a] = { fqn: "@aws-cdk/cx-api.EnvironmentUtils", version: "2.195.0" };
   }
 });
 
@@ -7738,7 +7782,7 @@ var require_cloudformation_artifact = __commonJS({
     };
     exports2.CloudFormationStackArtifact = CloudFormationStackArtifact;
     _a = JSII_RTTI_SYMBOL_1;
-    CloudFormationStackArtifact[_a] = { fqn: "@aws-cdk/cx-api.CloudFormationStackArtifact", version: "2.194.0" };
+    CloudFormationStackArtifact[_a] = { fqn: "@aws-cdk/cx-api.CloudFormationStackArtifact", version: "2.195.0" };
     Object.defineProperty(CloudFormationStackArtifact.prototype, CLOUDFORMATION_STACK_ARTIFACT_SYM, {
       value: true,
       enumerable: false,
@@ -7803,7 +7847,7 @@ var require_nested_cloud_assembly_artifact = __commonJS({
     };
     exports2.NestedCloudAssemblyArtifact = NestedCloudAssemblyArtifact;
     _a = JSII_RTTI_SYMBOL_1;
-    NestedCloudAssemblyArtifact[_a] = { fqn: "@aws-cdk/cx-api.NestedCloudAssemblyArtifact", version: "2.194.0" };
+    NestedCloudAssemblyArtifact[_a] = { fqn: "@aws-cdk/cx-api.NestedCloudAssemblyArtifact", version: "2.195.0" };
     Object.defineProperty(NestedCloudAssemblyArtifact.prototype, NESTED_CLOUD_ASSEMBLY_SYM, {
       value: true,
       enumerable: false,
@@ -7864,7 +7908,7 @@ var require_tree_cloud_artifact = __commonJS({
     };
     exports2.TreeCloudArtifact = TreeCloudArtifact;
     _a = JSII_RTTI_SYMBOL_1;
-    TreeCloudArtifact[_a] = { fqn: "@aws-cdk/cx-api.TreeCloudArtifact", version: "2.194.0" };
+    TreeCloudArtifact[_a] = { fqn: "@aws-cdk/cx-api.TreeCloudArtifact", version: "2.195.0" };
     Object.defineProperty(TreeCloudArtifact.prototype, TREE_CLOUD_ARTIFACT_SYM, {
       value: true,
       enumerable: false,
@@ -8130,7 +8174,7 @@ var require_cloud_assembly = __commonJS({
     };
     exports2.CloudAssembly = CloudAssembly;
     _a = JSII_RTTI_SYMBOL_1;
-    CloudAssembly[_a] = { fqn: "@aws-cdk/cx-api.CloudAssembly", version: "2.194.0" };
+    CloudAssembly[_a] = { fqn: "@aws-cdk/cx-api.CloudAssembly", version: "2.195.0" };
     var CloudAssemblyBuilder = class _CloudAssemblyBuilder {
       /**
        * Initializes a cloud assembly builder.
@@ -8224,7 +8268,7 @@ var require_cloud_assembly = __commonJS({
     };
     exports2.CloudAssemblyBuilder = CloudAssemblyBuilder;
     _b = JSII_RTTI_SYMBOL_1;
-    CloudAssemblyBuilder[_b] = { fqn: "@aws-cdk/cx-api.CloudAssemblyBuilder", version: "2.194.0" };
+    CloudAssemblyBuilder[_b] = { fqn: "@aws-cdk/cx-api.CloudAssemblyBuilder", version: "2.195.0" };
     function filterUndefined(obj) {
       if (Array.isArray(obj)) {
         return obj.filter((x) => x !== void 0).map((x) => filterUndefined(x));
@@ -8353,7 +8397,7 @@ var require_features = __commonJS({
     "use strict";
     Object.defineProperty(exports2, "__esModule", { value: true });
     exports2.LAMBDA_NODEJS_USE_LATEST_RUNTIME = exports2.ENABLE_OPENSEARCH_MULTIAZ_WITH_STANDBY = exports2.AUTOSCALING_GENERATE_LAUNCH_TEMPLATE = exports2.EFS_MOUNTTARGET_ORDERINSENSITIVE_LOGICAL_ID = exports2.EFS_DENY_ANONYMOUS_ACCESS = exports2.KMS_ALIAS_NAME_REF = exports2.INCLUDE_PREFIX_IN_UNIQUE_NAME_GENERATION = exports2.APIGATEWAY_REQUEST_VALIDATOR_UNIQUE_ID = exports2.EC2_RESTRICT_DEFAULT_SECURITY_GROUP = exports2.ENABLE_EMR_SERVICE_POLICY_V2 = exports2.REDSHIFT_COLUMN_ID = exports2.SECRETS_MANAGER_TARGET_ATTACHMENT_RESOURCE_POLICY = exports2.EC2_LAUNCH_TEMPLATE_DEFAULT_USER_DATA = exports2.APIGATEWAY_AUTHORIZER_CHANGE_DEPLOYMENT_LOGICAL_ID = exports2.CODEDEPLOY_REMOVE_ALARMS_FROM_DEPLOYMENT_GROUP = exports2.DATABASE_PROXY_UNIQUE_RESOURCE_NAME = exports2.AWS_CUSTOM_RESOURCE_LATEST_SDK_DEFAULT = exports2.ROUTE53_PATTERNS_USE_CERTIFICATE = exports2.S3_SERVER_ACCESS_LOGS_USE_BUCKET_POLICY = exports2.ECS_DISABLE_EXPLICIT_DEPLOYMENT_CONTROLLER_FOR_CIRCUIT_BREAKER = exports2.EVENTS_TARGET_QUEUE_SAME_ACCOUNT = exports2.ENABLE_PARTITION_LITERALS = exports2.APIGATEWAY_DISABLE_CLOUDWATCH_ROLE = exports2.SNS_SUBSCRIPTIONS_SQS_DECRYPTION_POLICY = exports2.S3_CREATE_DEFAULT_LOGGING_POLICY = exports2.CODEPIPELINE_CROSS_ACCOUNT_KEY_ALIAS_STACK_SAFE_RESOURCE_NAME = exports2.VALIDATE_SNAPSHOT_REMOVAL_POLICY = exports2.IAM_IMPORTED_ROLE_STACK_SAFE_DEFAULT_POLICY_NAME = exports2.IAM_MINIMIZE_POLICIES = exports2.ECS_ARN_FORMAT_INCLUDES_CLUSTER_NAME = exports2.EC2_UNIQUE_IMDSV2_LAUNCH_TEMPLATE_NAME = exports2.ECS_SERVICE_EXTENSIONS_ENABLE_DEFAULT_LOG_DRIVER = exports2.TARGET_PARTITIONS = exports2.CHECK_SECRET_USAGE = exports2.CLOUDFRONT_DEFAULT_SECURITY_POLICY_TLS_V1_2_2021 = exports2.LAMBDA_RECOGNIZE_LAYER_VERSION = exports2.LAMBDA_RECOGNIZE_VERSION_PROPS = exports2.EFS_DEFAULT_ENCRYPTION_AT_REST = exports2.APIGATEWAY_USAGEPLANKEY_ORDERINSENSITIVE_ID = exports2.RDS_LOWERCASE_DB_IDENTIFIER = exports2.ECS_REMOVE_DEFAULT_DESIRED_COUNT = exports2.S3_GRANT_WRITE_WITHOUT_ACL = exports2.KMS_DEFAULT_KEY_POLICIES = exports2.SECRETS_MANAGER_PARSE_OWNED_SECRET_NAME = exports2.DOCKER_IGNORE_SUPPORT = exports2.STACK_RELATIVE_EXPORTS_CONTEXT = exports2.NEW_STYLE_STACK_SYNTHESIS_CONTEXT = exports2.ENABLE_DIFF_NO_FAIL = exports2.ENABLE_DIFF_NO_FAIL_CONTEXT = exports2.ENABLE_STACK_NAME_DUPLICATES_CONTEXT = void 0;
-    exports2.NEW_PROJECT_DEFAULT_CONTEXT = exports2.FUTURE_FLAGS = exports2.FUTURE_FLAGS_EXPIRED = exports2.CURRENT_VERSION_FLAG_DEFAULTS = exports2.CURRENTLY_RECOMMENDED_FLAGS = exports2.CURRENT_VERSION_EXPIRED_FLAGS = exports2.FLAGS = exports2.PIPELINE_REDUCE_CROSS_ACCOUNT_ACTION_ROLE_TRUST_SCOPE = exports2.LOG_USER_POOL_CLIENT_SECRET_VALUE = exports2.DYNAMODB_TABLE_RETAIN_TABLE_REPLICA = exports2.ASPECT_PRIORITIES_MUTATING = exports2.EVENTBUS_POLICY_SID_REQUIRED = exports2.PIPELINE_REDUCE_STAGE_ROLE_TRUST_SCOPE = exports2.SET_UNIQUE_REPLICATION_ROLE_NAME = exports2.LAMBDA_CREATE_NEW_POLICIES_WITH_ADDTOROLEPOLICY = exports2.ENABLE_ADDITIONAL_METADATA_COLLECTION = exports2.IAM_OIDC_REJECT_UNAUTHORIZED_CONNECTIONS = exports2.ALB_DUALSTACK_WITHOUT_PUBLIC_IPV4_SECURITY_GROUP_RULES_DEFAULT = exports2.Disable_ECS_IMDS_Blocking = exports2.Enable_IMDS_Blocking_Deprecated_Feature = exports2.USER_POOL_DOMAIN_NAME_METHOD_WITHOUT_CUSTOM_RESOURCE = exports2.ASPECT_STABILIZATION = exports2.BASTION_HOST_USE_AMAZON_LINUX_2023_BY_DEFAULT = exports2.STEPFUNCTIONS_USE_DISTRIBUTED_MAP_RESULT_WRITER_V2 = exports2.STEPFUNCTIONS_TASKS_FIX_RUN_ECS_TASK_POLICY = exports2.LAMBDA_NODEJS_SDK_V3_EXCLUDE_SMITHY_PACKAGES = exports2.CFN_INCLUDE_REJECT_COMPLEX_RESOURCE_UPDATE_CREATE_POLICY_INTRINSICS = exports2.USE_CORRECT_VALUE_FOR_INSTANCE_RESOURCE_ID_PROPERTY = exports2.APPSYNC_GRAPHQLAPI_SCOPE_LAMBDA_FUNCTION_PERMISSION = exports2.EC2_SUM_TIMEOUT_ENABLED = exports2.DYNAMODB_TABLEV2_RESOURCE_POLICY_PER_REPLICA = exports2.REDUCE_EC2_FARGATE_CLOUDWATCH_PERMISSIONS = exports2.USE_NEW_S3URI_PARAMETERS_FOR_BEDROCK_INVOKE_MODEL_TASK = exports2.S3_KEEP_NOTIFICATION_IN_IMPORTED_BUCKET = exports2.LOG_API_RESPONSE_DATA_PROPERTY_TRUE_DEFAULT = exports2.ECS_REMOVE_DEFAULT_DEPLOYMENT_ALARM = exports2.EBS_DEFAULT_GP3 = exports2.EKS_NODEGROUP_NAME = exports2.PIPELINE_REDUCE_ASSET_ROLE_TRUST_SCOPE = exports2.KMS_REDUCE_CROSS_ACCOUNT_REGION_POLICY_SCOPE = exports2.CODEPIPELINE_DEFAULT_PIPELINE_TYPE_TO_V2 = exports2.CODEPIPELINE_CROSS_ACCOUNT_KEYS_DEFAULT_VALUE_TO_FALSE = exports2.LAMBDA_PERMISSION_LOGICAL_ID_FOR_LAMBDA_ACTION = exports2.CODECOMMIT_SOURCE_ACTION_DEFAULT_BRANCH_NAME = exports2.APPSYNC_ENABLE_USE_ARN_IDENTIFIER_SOURCE_API_ASSOCIATION = exports2.AURORA_CLUSTER_CHANGE_SCOPE_OF_INSTANCE_PARAMETER_GROUP_WITH_EACH_PARAMETERS = exports2.RDS_PREVENT_RENDERING_DEPRECATED_CREDENTIALS = void 0;
+    exports2.NEW_PROJECT_DEFAULT_CONTEXT = exports2.FUTURE_FLAGS = exports2.FUTURE_FLAGS_EXPIRED = exports2.CURRENT_VERSION_FLAG_DEFAULTS = exports2.CURRENTLY_RECOMMENDED_FLAGS = exports2.CURRENT_VERSION_EXPIRED_FLAGS = exports2.FLAGS = exports2.S3_TRUST_KEY_POLICY_FOR_SNS_SUBSCRIPTIONS = exports2.PIPELINE_REDUCE_CROSS_ACCOUNT_ACTION_ROLE_TRUST_SCOPE = exports2.LOG_USER_POOL_CLIENT_SECRET_VALUE = exports2.DYNAMODB_TABLE_RETAIN_TABLE_REPLICA = exports2.ASPECT_PRIORITIES_MUTATING = exports2.EVENTBUS_POLICY_SID_REQUIRED = exports2.PIPELINE_REDUCE_STAGE_ROLE_TRUST_SCOPE = exports2.SET_UNIQUE_REPLICATION_ROLE_NAME = exports2.LAMBDA_CREATE_NEW_POLICIES_WITH_ADDTOROLEPOLICY = exports2.ENABLE_ADDITIONAL_METADATA_COLLECTION = exports2.IAM_OIDC_REJECT_UNAUTHORIZED_CONNECTIONS = exports2.ALB_DUALSTACK_WITHOUT_PUBLIC_IPV4_SECURITY_GROUP_RULES_DEFAULT = exports2.Disable_ECS_IMDS_Blocking = exports2.Enable_IMDS_Blocking_Deprecated_Feature = exports2.USER_POOL_DOMAIN_NAME_METHOD_WITHOUT_CUSTOM_RESOURCE = exports2.ASPECT_STABILIZATION = exports2.BASTION_HOST_USE_AMAZON_LINUX_2023_BY_DEFAULT = exports2.STEPFUNCTIONS_USE_DISTRIBUTED_MAP_RESULT_WRITER_V2 = exports2.STEPFUNCTIONS_TASKS_FIX_RUN_ECS_TASK_POLICY = exports2.LAMBDA_NODEJS_SDK_V3_EXCLUDE_SMITHY_PACKAGES = exports2.CFN_INCLUDE_REJECT_COMPLEX_RESOURCE_UPDATE_CREATE_POLICY_INTRINSICS = exports2.USE_CORRECT_VALUE_FOR_INSTANCE_RESOURCE_ID_PROPERTY = exports2.APPSYNC_GRAPHQLAPI_SCOPE_LAMBDA_FUNCTION_PERMISSION = exports2.EC2_SUM_TIMEOUT_ENABLED = exports2.DYNAMODB_TABLEV2_RESOURCE_POLICY_PER_REPLICA = exports2.REDUCE_EC2_FARGATE_CLOUDWATCH_PERMISSIONS = exports2.USE_NEW_S3URI_PARAMETERS_FOR_BEDROCK_INVOKE_MODEL_TASK = exports2.S3_KEEP_NOTIFICATION_IN_IMPORTED_BUCKET = exports2.LOG_API_RESPONSE_DATA_PROPERTY_TRUE_DEFAULT = exports2.ECS_REMOVE_DEFAULT_DEPLOYMENT_ALARM = exports2.EBS_DEFAULT_GP3 = exports2.EKS_NODEGROUP_NAME = exports2.PIPELINE_REDUCE_ASSET_ROLE_TRUST_SCOPE = exports2.KMS_REDUCE_CROSS_ACCOUNT_REGION_POLICY_SCOPE = exports2.CODEPIPELINE_DEFAULT_PIPELINE_TYPE_TO_V2 = exports2.CODEPIPELINE_CROSS_ACCOUNT_KEYS_DEFAULT_VALUE_TO_FALSE = exports2.LAMBDA_PERMISSION_LOGICAL_ID_FOR_LAMBDA_ACTION = exports2.CODECOMMIT_SOURCE_ACTION_DEFAULT_BRANCH_NAME = exports2.APPSYNC_ENABLE_USE_ARN_IDENTIFIER_SOURCE_API_ASSOCIATION = exports2.AURORA_CLUSTER_CHANGE_SCOPE_OF_INSTANCE_PARAMETER_GROUP_WITH_EACH_PARAMETERS = exports2.RDS_PREVENT_RENDERING_DEPRECATED_CREDENTIALS = void 0;
     exports2.futureFlagDefault = futureFlagDefault;
     var flag_modeling_1 = require_flag_modeling();
     exports2.ENABLE_STACK_NAME_DUPLICATES_CONTEXT = "@aws-cdk/core:enableStackNameDuplicates";
@@ -8446,6 +8490,7 @@ var require_features = __commonJS({
     exports2.DYNAMODB_TABLE_RETAIN_TABLE_REPLICA = "@aws-cdk/aws-dynamodb:retainTableReplica";
     exports2.LOG_USER_POOL_CLIENT_SECRET_VALUE = "@aws-cdk/cognito:logUserPoolClientSecretValue";
     exports2.PIPELINE_REDUCE_CROSS_ACCOUNT_ACTION_ROLE_TRUST_SCOPE = "@aws-cdk/pipelines:reduceCrossAccountActionRoleTrustScope";
+    exports2.S3_TRUST_KEY_POLICY_FOR_SNS_SUBSCRIPTIONS = "@aws-cdk/s3-notifications:addS3TrustKeyPolicyForSnsSubscriptions";
     exports2.FLAGS = {
       //////////////////////////////////////////////////////////////////////
       [exports2.ENABLE_STACK_NAME_DUPLICATES_CONTEXT]: {
@@ -9777,6 +9822,16 @@ var require_features = __commonJS({
         introducedIn: { v2: "2.188.0" },
         recommendedValue: true,
         compatibilityWithOldBehaviorMd: "Disable the feature flag and set resultWriter in DistributedMap"
+      },
+      //////////////////////////////////////////////////////////////////////
+      [exports2.S3_TRUST_KEY_POLICY_FOR_SNS_SUBSCRIPTIONS]: {
+        type: flag_modeling_1.FlagType.BugFix,
+        summary: "Add an S3 trust policy to a KMS key resource policy for SNS subscriptions.",
+        detailsMd: `
+      When this feature flag is enabled, a S3 trust policy will be added to the KMS key resource policy for encrypted SNS subscriptions.
+          `,
+        introducedIn: { v2: "2.195.0" },
+        recommendedValue: true
       }
     };
     var CURRENT_MV = "v2";
@@ -9893,7 +9948,7 @@ var require_placeholders = __commonJS({
     };
     exports2.EnvironmentPlaceholders = EnvironmentPlaceholders;
     _a = JSII_RTTI_SYMBOL_1;
-    EnvironmentPlaceholders[_a] = { fqn: "@aws-cdk/cx-api.EnvironmentPlaceholders", version: "2.194.0" };
+    EnvironmentPlaceholders[_a] = { fqn: "@aws-cdk/cx-api.EnvironmentPlaceholders", version: "2.195.0" };
     EnvironmentPlaceholders.CURRENT_REGION = "${AWS::Region}";
     EnvironmentPlaceholders.CURRENT_ACCOUNT = "${AWS::AccountId}";
     EnvironmentPlaceholders.CURRENT_PARTITION = "${AWS::Partition}";
@@ -12809,9 +12864,10 @@ __export(recommended_feature_flags_exports, {
   "@aws-cdk/core:validateSnapshotRemovalPolicy": () => _aws_cdk_core_validateSnapshotRemovalPolicy,
   "@aws-cdk/custom-resources:logApiResponseDataPropertyTrueDefault": () => _aws_cdk_custom_resources_logApiResponseDataPropertyTrueDefault,
   "@aws-cdk/customresources:installLatestAwsSdkDefault": () => _aws_cdk_customresources_installLatestAwsSdkDefault,
+  "@aws-cdk/s3-notifications:addS3TrustKeyPolicyForSnsSubscriptions": () => _aws_cdk_s3_notifications_addS3TrustKeyPolicyForSnsSubscriptions,
   default: () => recommended_feature_flags_default
 });
-var _aws_cdk_aws_lambda_recognizeLayerVersion, _aws_cdk_core_checkSecretUsage, _aws_cdk_core_target_partitions, _aws_cdk_containers_ecs_service_extensions_enableDefaultLogDriver, _aws_cdk_aws_ec2_uniqueImdsv2TemplateName, _aws_cdk_aws_ecs_arnFormatIncludesClusterName, _aws_cdk_aws_iam_minimizePolicies, _aws_cdk_core_validateSnapshotRemovalPolicy, _aws_cdk_aws_codepipeline_crossAccountKeyAliasStackSafeResourceName, _aws_cdk_aws_s3_createDefaultLoggingPolicy, _aws_cdk_aws_sns_subscriptions_restrictSqsDescryption, _aws_cdk_aws_apigateway_disableCloudWatchRole, _aws_cdk_core_enablePartitionLiterals, _aws_cdk_aws_events_eventsTargetQueueSameAccount, _aws_cdk_aws_ecs_disableExplicitDeploymentControllerForCircuitBreaker, _aws_cdk_aws_iam_importedRoleStackSafeDefaultPolicyName, _aws_cdk_aws_s3_serverAccessLogsUseBucketPolicy, _aws_cdk_aws_route53_patters_useCertificate, _aws_cdk_customresources_installLatestAwsSdkDefault, _aws_cdk_aws_rds_databaseProxyUniqueResourceName, _aws_cdk_aws_codedeploy_removeAlarmsFromDeploymentGroup, _aws_cdk_aws_apigateway_authorizerChangeDeploymentLogicalId, _aws_cdk_aws_ec2_launchTemplateDefaultUserData, _aws_cdk_aws_secretsmanager_useAttachedSecretResourcePolicyForSecretTargetAttachments, _aws_cdk_aws_redshift_columnId, _aws_cdk_aws_stepfunctions_tasks_enableEmrServicePolicyV2, _aws_cdk_aws_ec2_restrictDefaultSecurityGroup, _aws_cdk_aws_apigateway_requestValidatorUniqueId, _aws_cdk_aws_kms_aliasNameRef, _aws_cdk_aws_autoscaling_generateLaunchTemplateInsteadOfLaunchConfig, _aws_cdk_core_includePrefixInUniqueNameGeneration, _aws_cdk_aws_efs_denyAnonymousAccess, _aws_cdk_aws_opensearchservice_enableOpensearchMultiAzWithStandby, _aws_cdk_aws_lambda_nodejs_useLatestRuntimeVersion, _aws_cdk_aws_efs_mountTargetOrderInsensitiveLogicalId, _aws_cdk_aws_rds_auroraClusterChangeScopeOfInstanceParameterGroupWithEachParameters, _aws_cdk_aws_appsync_useArnForSourceApiAssociationIdentifier, _aws_cdk_aws_rds_preventRenderingDeprecatedCredentials, _aws_cdk_aws_codepipeline_actions_useNewDefaultBranchForCodeCommitSource, _aws_cdk_aws_cloudwatch_actions_changeLambdaPermissionLogicalIdForLambdaAction, _aws_cdk_aws_codepipeline_crossAccountKeysDefaultValueToFalse, _aws_cdk_aws_codepipeline_defaultPipelineTypeToV2, _aws_cdk_aws_kms_reduceCrossAccountRegionPolicyScope, _aws_cdk_aws_eks_nodegroupNameAttribute, _aws_cdk_aws_ec2_ebsDefaultGp3Volume, _aws_cdk_aws_ecs_removeDefaultDeploymentAlarm, _aws_cdk_custom_resources_logApiResponseDataPropertyTrueDefault, _aws_cdk_aws_s3_keepNotificationInImportedBucket, _aws_cdk_aws_ecs_enableImdsBlockingDeprecatedFeature, _aws_cdk_aws_ecs_disableEcsImdsBlocking, _aws_cdk_aws_ecs_reduceEc2FargateCloudWatchPermissions, _aws_cdk_aws_dynamodb_resourcePolicyPerReplica, _aws_cdk_aws_ec2_ec2SumTImeoutEnabled, _aws_cdk_aws_appsync_appSyncGraphQLAPIScopeLambdaPermission, _aws_cdk_aws_rds_setCorrectValueForDatabaseInstanceReadReplicaInstanceResourceId, _aws_cdk_core_cfnIncludeRejectComplexResourceUpdateCreatePolicyIntrinsics, _aws_cdk_aws_lambda_nodejs_sdkV3ExcludeSmithyPackages, _aws_cdk_aws_stepfunctions_tasks_fixRunEcsTaskPolicy, _aws_cdk_aws_ec2_bastionHostUseAmazonLinux2023ByDefault, _aws_cdk_aws_route53_targets_userPoolDomainNameMethodWithoutCustomResource, _aws_cdk_aws_elasticloadbalancingV2_albDualstackWithoutPublicIpv4SecurityGroupRulesDefault, _aws_cdk_aws_iam_oidcRejectUnauthorizedConnections, _aws_cdk_core_enableAdditionalMetadataCollection, _aws_cdk_aws_lambda_createNewPoliciesWithAddToRolePolicy, _aws_cdk_aws_s3_setUniqueReplicationRoleName, _aws_cdk_aws_events_requireEventBusPolicySid, _aws_cdk_core_aspectPrioritiesMutating, _aws_cdk_aws_dynamodb_retainTableReplica, _aws_cdk_aws_stepfunctions_useDistributedMapResultWriterV2, recommended_feature_flags_default;
+var _aws_cdk_aws_lambda_recognizeLayerVersion, _aws_cdk_core_checkSecretUsage, _aws_cdk_core_target_partitions, _aws_cdk_containers_ecs_service_extensions_enableDefaultLogDriver, _aws_cdk_aws_ec2_uniqueImdsv2TemplateName, _aws_cdk_aws_ecs_arnFormatIncludesClusterName, _aws_cdk_aws_iam_minimizePolicies, _aws_cdk_core_validateSnapshotRemovalPolicy, _aws_cdk_aws_codepipeline_crossAccountKeyAliasStackSafeResourceName, _aws_cdk_aws_s3_createDefaultLoggingPolicy, _aws_cdk_aws_sns_subscriptions_restrictSqsDescryption, _aws_cdk_aws_apigateway_disableCloudWatchRole, _aws_cdk_core_enablePartitionLiterals, _aws_cdk_aws_events_eventsTargetQueueSameAccount, _aws_cdk_aws_ecs_disableExplicitDeploymentControllerForCircuitBreaker, _aws_cdk_aws_iam_importedRoleStackSafeDefaultPolicyName, _aws_cdk_aws_s3_serverAccessLogsUseBucketPolicy, _aws_cdk_aws_route53_patters_useCertificate, _aws_cdk_customresources_installLatestAwsSdkDefault, _aws_cdk_aws_rds_databaseProxyUniqueResourceName, _aws_cdk_aws_codedeploy_removeAlarmsFromDeploymentGroup, _aws_cdk_aws_apigateway_authorizerChangeDeploymentLogicalId, _aws_cdk_aws_ec2_launchTemplateDefaultUserData, _aws_cdk_aws_secretsmanager_useAttachedSecretResourcePolicyForSecretTargetAttachments, _aws_cdk_aws_redshift_columnId, _aws_cdk_aws_stepfunctions_tasks_enableEmrServicePolicyV2, _aws_cdk_aws_ec2_restrictDefaultSecurityGroup, _aws_cdk_aws_apigateway_requestValidatorUniqueId, _aws_cdk_aws_kms_aliasNameRef, _aws_cdk_aws_autoscaling_generateLaunchTemplateInsteadOfLaunchConfig, _aws_cdk_core_includePrefixInUniqueNameGeneration, _aws_cdk_aws_efs_denyAnonymousAccess, _aws_cdk_aws_opensearchservice_enableOpensearchMultiAzWithStandby, _aws_cdk_aws_lambda_nodejs_useLatestRuntimeVersion, _aws_cdk_aws_efs_mountTargetOrderInsensitiveLogicalId, _aws_cdk_aws_rds_auroraClusterChangeScopeOfInstanceParameterGroupWithEachParameters, _aws_cdk_aws_appsync_useArnForSourceApiAssociationIdentifier, _aws_cdk_aws_rds_preventRenderingDeprecatedCredentials, _aws_cdk_aws_codepipeline_actions_useNewDefaultBranchForCodeCommitSource, _aws_cdk_aws_cloudwatch_actions_changeLambdaPermissionLogicalIdForLambdaAction, _aws_cdk_aws_codepipeline_crossAccountKeysDefaultValueToFalse, _aws_cdk_aws_codepipeline_defaultPipelineTypeToV2, _aws_cdk_aws_kms_reduceCrossAccountRegionPolicyScope, _aws_cdk_aws_eks_nodegroupNameAttribute, _aws_cdk_aws_ec2_ebsDefaultGp3Volume, _aws_cdk_aws_ecs_removeDefaultDeploymentAlarm, _aws_cdk_custom_resources_logApiResponseDataPropertyTrueDefault, _aws_cdk_aws_s3_keepNotificationInImportedBucket, _aws_cdk_aws_ecs_enableImdsBlockingDeprecatedFeature, _aws_cdk_aws_ecs_disableEcsImdsBlocking, _aws_cdk_aws_ecs_reduceEc2FargateCloudWatchPermissions, _aws_cdk_aws_dynamodb_resourcePolicyPerReplica, _aws_cdk_aws_ec2_ec2SumTImeoutEnabled, _aws_cdk_aws_appsync_appSyncGraphQLAPIScopeLambdaPermission, _aws_cdk_aws_rds_setCorrectValueForDatabaseInstanceReadReplicaInstanceResourceId, _aws_cdk_core_cfnIncludeRejectComplexResourceUpdateCreatePolicyIntrinsics, _aws_cdk_aws_lambda_nodejs_sdkV3ExcludeSmithyPackages, _aws_cdk_aws_stepfunctions_tasks_fixRunEcsTaskPolicy, _aws_cdk_aws_ec2_bastionHostUseAmazonLinux2023ByDefault, _aws_cdk_aws_route53_targets_userPoolDomainNameMethodWithoutCustomResource, _aws_cdk_aws_elasticloadbalancingV2_albDualstackWithoutPublicIpv4SecurityGroupRulesDefault, _aws_cdk_aws_iam_oidcRejectUnauthorizedConnections, _aws_cdk_core_enableAdditionalMetadataCollection, _aws_cdk_aws_lambda_createNewPoliciesWithAddToRolePolicy, _aws_cdk_aws_s3_setUniqueReplicationRoleName, _aws_cdk_aws_events_requireEventBusPolicySid, _aws_cdk_core_aspectPrioritiesMutating, _aws_cdk_aws_dynamodb_retainTableReplica, _aws_cdk_aws_stepfunctions_useDistributedMapResultWriterV2, _aws_cdk_s3_notifications_addS3TrustKeyPolicyForSnsSubscriptions, recommended_feature_flags_default;
 var init_recommended_feature_flags = __esm({
   "lib/recommended-feature-flags.json"() {
     _aws_cdk_aws_lambda_recognizeLayerVersion = true;
@@ -12886,6 +12942,7 @@ var init_recommended_feature_flags = __esm({
     _aws_cdk_core_aspectPrioritiesMutating = true;
     _aws_cdk_aws_dynamodb_retainTableReplica = true;
     _aws_cdk_aws_stepfunctions_useDistributedMapResultWriterV2 = true;
+    _aws_cdk_s3_notifications_addS3TrustKeyPolicyForSnsSubscriptions = true;
     recommended_feature_flags_default = {
       "@aws-cdk/aws-lambda:recognizeLayerVersion": _aws_cdk_aws_lambda_recognizeLayerVersion,
       "@aws-cdk/core:checkSecretUsage": _aws_cdk_core_checkSecretUsage,
@@ -12955,7 +13012,8 @@ var init_recommended_feature_flags = __esm({
       "@aws-cdk/aws-events:requireEventBusPolicySid": _aws_cdk_aws_events_requireEventBusPolicySid,
       "@aws-cdk/core:aspectPrioritiesMutating": _aws_cdk_core_aspectPrioritiesMutating,
       "@aws-cdk/aws-dynamodb:retainTableReplica": _aws_cdk_aws_dynamodb_retainTableReplica,
-      "@aws-cdk/aws-stepfunctions:useDistributedMapResultWriterV2": _aws_cdk_aws_stepfunctions_useDistributedMapResultWriterV2
+      "@aws-cdk/aws-stepfunctions:useDistributedMapResultWriterV2": _aws_cdk_aws_stepfunctions_useDistributedMapResultWriterV2,
+      "@aws-cdk/s3-notifications:addS3TrustKeyPolicyForSnsSubscriptions": _aws_cdk_s3_notifications_addS3TrustKeyPolicyForSnsSubscriptions
     };
   }
 });

package/package.json

@@ -45,16 +45,16 @@
     "@types/yargs": "^17.0.33",
     "@typescript-eslint/eslint-plugin": "^8",
     "@typescript-eslint/parser": "^8",
-    "aws-cdk-lib": "^2.194.0",
+    "aws-cdk-lib": "^2.195.0",
     "commit-and-tag-version": "^12",
     "constructs": "^10",
     "eslint": "^9",
-    "eslint-config-prettier": "^10.1.2",
+    "eslint-config-prettier": "^10.1.5",
     "eslint-import-resolver-typescript": "^4.3.4",
     "eslint-plugin-import": "^2.31.0",
     "eslint-plugin-jest": "^28.11.0",
-    "eslint-plugin-jsdoc": "^50.6.11",
-    "eslint-plugin-prettier": "^5.3.1",
+    "eslint-plugin-jsdoc": "^50.6.14",
+    "eslint-plugin-prettier": "^5.4.0",
     "jest": "^29.7.0",
     "jest-junit": "^16",
     "license-checker": "^25.0.1",
@@ -62,14 +62,14 @@
     "prettier": "^2.8",
     "ts-jest": "^29.3.2",
     "typescript": "5.6",
-    "@aws-cdk/aws-service-spec": "^0.1.71",
+    "@aws-cdk/aws-service-spec": "^0.1.72",
     "@aws-cdk/cdk-cli-wrapper": "0.0.0",
-    "@aws-cdk/cloud-assembly-schema": ">=43.7.0",
-    "@aws-cdk/cloudformation-diff": "2.181.1",
-    "@aws-cdk/cx-api": "^2.194.0",
+    "@aws-cdk/cloud-assembly-schema": ">=43.11.0",
+    "@aws-cdk/cloudformation-diff": "2.181.2",
+    "@aws-cdk/cx-api": "^2.195.0",
     "@aws-sdk/client-cloudformation": "^3",
-    "aws-cdk": "2.1014.0",
-    "cdk-assets": "3.2.1",
+    "aws-cdk": "2.1016.0",
+    "cdk-assets": "3.2.2",
     "chalk": "^4",
     "chokidar": "^3",
     "fs-extra": "^9",
@@ -77,8 +77,8 @@
     "yargs": "^16"
   },
   "dependencies": {
-    "@aws-cdk/aws-service-spec": "0.1.71",
-    "aws-cdk": "2.1014.0"
+    "@aws-cdk/aws-service-spec": "0.1.72",
+    "aws-cdk": "2.1016.0"
   },
   "keywords": [
     "aws",
@@ -93,7 +93,7 @@
   "publishConfig": {
     "access": "public"
   },
-  "version": "2.186.6",
+  "version": "2.186.8",
   "types": "lib/index.d.ts",
   "//": "~~ Generated by projen. To modify, edit .projenrc.js and run \"npx projen\".",
   "optionalDependencies": {