@go-to-k/cdkd 0.278.1 → 0.278.3

package/dist/cli.js

@@ -1,7 +1,7 @@
 #!/usr/bin/env node
-import { $ as DagBuilder, A as red, At as resolveApp, B as isTerminationProtectionPropagationError, Bt as CFN_TEMPLATE_URL_LIMIT, C as isStatefulRecreateTargetSync, Ct as runDockerStreaming, D as cyan, Dt as synthesisStatusMessage, E as bold, Et as Synthesizer, F as ProviderRegistry, Ft as resolveStateBucketWithDefaultAndSource, G as normalizeAwsTagsToCfn, Gt as AssemblyReader, H as cfnRefValueFromPhysicalId, Ht as findLargeInlineResources, I as findActionableSilentDrops, It as resolveUseCdkBootstrapAssets, J as applyRoleArnIfSet, Jt as resolveBucketRegion, K as resolveExplicitPhysicalId, Kt as processStackMessages, L as CloudControlProvider, Lt as stateBucketExistenceConfirmed, M as IAMRoleProvider, Mt as resolveCaptureObservedState, N as collectInlinePolicyNamesManagedBySiblings, Nt as resolveSkipPrefix, O as gray, Ot as getDefaultStateBucketName, P as clearOnUpdateRemoval, Pt as resolveStateBucketWithDefault, Q as isRetryableTransientError, Qt as setAwsClients, R as slowCcOperationTimeoutMs, Rt as warnDeprecatedNoPrefixCliFlag, S as MULTI_REGION_RECREATE_BLOCKED_TYPES, St as runDockerForeground, T as formatResourceLine, Tt as getDockerImageBySourceHash, U as refStateLookupFromResource, Ut as uploadCfnTemplate, V as IntrinsicFunctionResolver, Vt as MIGRATE_TMP_PREFIX, W as WAFv2WebACLProvider, Wt as expectedOwnerParam, X as describeTypeWithThrottleRetry, Xt as getAwsClients, Y as DiffCalculator, Yt as AwsClients, Z as withRetry, Zt as resetAwsClients, _ as createPreDeleteFinalSnapshot, _t as validateAssetBucketName, a as DeploymentEventsStore, an as LocalMigrateError, at as AssetPublisher, b as unsupportedFinalSnapshotError, bn as normalizeAwsError, bt as formatDockerLoginError, c as replayFailedOperations, cn as MissingCdkCliError, ct as buildAssetRedirectMap, d as IMPLICIT_DELETE_DEPENDENCIES, dn as ProvisioningError, dt as rewriteTemplateAssetReferences, en as CdkdError, et as TemplateParser, f as computeImplicitDeleteEdges, fn as ResourceTimeoutError, ft as AssetModeResolver, g as ccRoutedFinalSnapshotError, gt as parseBootstrapMarker, h as buildFinalSnapshotIdentifier, hn as StackTerminationProtectionError, ht as getBootstrapMarkerKey, i as DeploymentEventsReader, in as LocalInvokeBuildError$1, it as shouldRetainResource, j as yellow, jt as resolveAutoAssetStorage, k as green, kt as getLegacyStateBucketName, l as replayRollback, ln as NestedStackChildDirectDestroyError, lt as createAssetRedirectResolver, m as PRE_DELETE_SNAPSHOT_TYPES, mn as StackHasActiveImportsError, mt as ensureAssetStorage, n as DEFAULT_RESOURCE_WARN_AFTER_MS, nt as S3StateBackend, o as planFailedOps, on as LocalStartServiceError, ot as stringifyValue, p as ATOMIC_FINAL_SNAPSHOT_TYPES, pn as ResourceUpdateNotSupportedError, pt as BOOTSTRAP_MARKER_PREFIX, q as assertRegionMatch, r as DeployEngine, rn as DeployCancelledError, rt as rebuildClientForBucketRegion, s as planRollback, st as WorkGraph, t as DEFAULT_RESOURCE_TIMEOUT_MS, tt as LockManager, u as withResourceDeadline, un as PartialFailureError, ut as loadPublishableAssetManifest, v as isFinalSnapshotError, vt as validateContainerRepoName, w as renderStatefulReason, wt as AssetManifestLoader, x as extractDeploymentEventError, xn as withErrorHandling, xt as getDockerCmd, y as refusesFinalSnapshot, yt as buildDockerImage, z as disableInstanceApiTermination, zt as CFN_TEMPLATE_BODY_LIMIT } from "./deploy-engine-BLJ1_r55.js";
+import { $ as DagBuilder, A as red, At as resolveApp, B as isTerminationProtectionPropagationError, Bt as CFN_TEMPLATE_URL_LIMIT, C as isStatefulRecreateTargetSync, Ct as runDockerStreaming, D as cyan, Dt as synthesisStatusMessage, E as bold, Et as Synthesizer, F as ProviderRegistry, Ft as resolveStateBucketWithDefaultAndSource, G as normalizeAwsTagsToCfn, Gt as AssemblyReader, H as cfnRefValueFromPhysicalId, Ht as findLargeInlineResources, I as findActionableSilentDrops, It as resolveUseCdkBootstrapAssets, J as applyRoleArnIfSet, Jt as resolveBucketRegion, K as resolveExplicitPhysicalId, Kt as processStackMessages, L as CloudControlProvider, Lt as stateBucketExistenceConfirmed, M as IAMRoleProvider, Mt as resolveCaptureObservedState, N as collectInlinePolicyNamesManagedBySiblings, Nt as resolveSkipPrefix, O as gray, Ot as getDefaultStateBucketName, P as clearOnUpdateRemoval, Pt as resolveStateBucketWithDefault, Q as isRetryableTransientError, Qt as setAwsClients, R as slowCcOperationTimeoutMs, Rt as warnDeprecatedNoPrefixCliFlag, S as MULTI_REGION_RECREATE_BLOCKED_TYPES, St as runDockerForeground, T as formatResourceLine, Tt as getDockerImageBySourceHash, U as refStateLookupFromResource, Ut as uploadCfnTemplate, V as IntrinsicFunctionResolver, Vt as MIGRATE_TMP_PREFIX, W as WAFv2WebACLProvider, Wt as expectedOwnerParam, X as describeTypeWithThrottleRetry, Xt as getAwsClients, Y as DiffCalculator, Yt as AwsClients, Z as withRetry, Zt as resetAwsClients, _ as createPreDeleteFinalSnapshot, _t as validateAssetBucketName, a as DeploymentEventsStore, an as LocalMigrateError, at as AssetPublisher, b as unsupportedFinalSnapshotError, bn as normalizeAwsError, bt as formatDockerLoginError, c as replayFailedOperations, cn as MissingCdkCliError, ct as buildAssetRedirectMap, d as IMPLICIT_DELETE_DEPENDENCIES, dn as ProvisioningError, dt as rewriteTemplateAssetReferences, en as CdkdError, et as TemplateParser, f as computeImplicitDeleteEdges, fn as ResourceTimeoutError, ft as AssetModeResolver, g as ccRoutedFinalSnapshotError, gt as parseBootstrapMarker, h as buildFinalSnapshotIdentifier, hn as StackTerminationProtectionError, ht as getBootstrapMarkerKey, i as DeploymentEventsReader, in as LocalInvokeBuildError$1, it as shouldRetainResource, j as yellow, jt as resolveAutoAssetStorage, k as green, kt as getLegacyStateBucketName, l as replayRollback, ln as NestedStackChildDirectDestroyError, lt as createAssetRedirectResolver, m as PRE_DELETE_SNAPSHOT_TYPES, mn as StackHasActiveImportsError, mt as ensureAssetStorage, n as DEFAULT_RESOURCE_WARN_AFTER_MS, nt as S3StateBackend, o as planFailedOps, on as LocalStartServiceError, ot as stringifyValue, p as ATOMIC_FINAL_SNAPSHOT_TYPES, pn as ResourceUpdateNotSupportedError, pt as BOOTSTRAP_MARKER_PREFIX, q as assertRegionMatch, r as DeployEngine, rn as DeployCancelledError, rt as rebuildClientForBucketRegion, s as planRollback, st as WorkGraph, t as DEFAULT_RESOURCE_TIMEOUT_MS, tt as LockManager, u as withResourceDeadline, un as PartialFailureError, ut as loadPublishableAssetManifest, v as isFinalSnapshotError, vt as validateContainerRepoName, w as renderStatefulReason, wt as AssetManifestLoader, x as extractDeploymentEventError, xn as withErrorHandling, xt as getDockerCmd, y as refusesFinalSnapshot, yt as buildDockerImage, z as disableInstanceApiTermination, zt as CFN_TEMPLATE_BODY_LIMIT } from "./deploy-engine-BemRUhiN.js";
 import { a as getLiveRenderer, c as PATTERN_B_RESOURCE_TYPES, d as generateResourceNameWithFallback, f as withSkipPrefix, i as runStackBuffered, n as getLogger, o as PATTERN_B_NAME_OPTIONS, p as withStackName, s as PATTERN_B_NAME_PROPERTIES, u as generateResourceName } from "./logger-BYMEE-BS.js";
-import { t as ASGProvider } from "./asg-provider-CaViRSIU.js";
+import { t as ASGProvider } from "./asg-provider-ACQwFzcN.js";
 import { AsyncLocalStorage } from "node:async_hooks";
 import { createHash, randomBytes, randomUUID } from "node:crypto";
 import { CopyObjectCommand, CreateBucketCommand, DeleteBucketAnalyticsConfigurationCommand, DeleteBucketCommand, DeleteBucketCorsCommand, DeleteBucketIntelligentTieringConfigurationCommand, DeleteBucketInventoryConfigurationCommand, DeleteBucketLifecycleCommand, DeleteBucketMetricsConfigurationCommand, DeleteBucketPolicyCommand, DeleteBucketReplicationCommand, DeleteBucketTaggingCommand, DeleteBucketWebsiteCommand, DeleteObjectsCommand, GetBucketAccelerateConfigurationCommand, GetBucketCorsCommand, GetBucketEncryptionCommand, GetBucketLifecycleConfigurationCommand, GetBucketLocationCommand, GetBucketLoggingCommand, GetBucketNotificationConfigurationCommand, GetBucketPolicyCommand, GetBucketReplicationCommand, GetBucketTaggingCommand, GetBucketVersioningCommand, GetBucketWebsiteCommand, GetObjectCommand, GetObjectLockConfigurationCommand, GetPublicAccessBlockCommand, HeadBucketCommand, ListBucketAnalyticsConfigurationsCommand, ListBucketIntelligentTieringConfigurationsCommand, ListBucketInventoryConfigurationsCommand, ListBucketMetricsConfigurationsCommand, ListObjectVersionsCommand, ListObjectsV2Command, NoSuchBucket, PutBucketAccelerateConfigurationCommand, PutBucketAnalyticsConfigurationCommand, PutBucketCorsCommand, PutBucketEncryptionCommand, PutBucketIntelligentTieringConfigurationCommand, PutBucketInventoryConfigurationCommand, PutBucketLifecycleConfigurationCommand, PutBucketLoggingCommand, PutBucketMetricsConfigurationCommand, PutBucketNotificationConfigurationCommand, PutBucketOwnershipControlsCommand, PutBucketPolicyCommand, PutBucketReplicationCommand, PutBucketTaggingCommand, PutBucketVersioningCommand, PutBucketWebsiteCommand, PutObjectCommand, PutObjectLockConfigurationCommand, PutPublicAccessBlockCommand, S3Client, S3ServiceException } from "@aws-sdk/client-s3";
@@ -10946,15 +10946,15 @@ function buildCommonImageInput(properties) {
 	return input;
 }
 function mapCodeArtifact(value) {
-	if (!isRecord(value)) return void 0;
+	if (!isRecord$1(value)) return void 0;
 	const uri = value["Uri"];
 	return typeof uri === "string" ? { uri } : void 0;
 }
 function mapLogging(value) {
-	if (!isRecord(value)) return void 0;
+	if (!isRecord$1(value)) return void 0;
 	if (value["Disabled"] === true) return { disabled: {} };
 	const cloudWatch = value["CloudWatch"];
-	if (isRecord(cloudWatch)) {
+	if (isRecord$1(cloudWatch)) {
 		const cw = {};
 		if (typeof cloudWatch["LogGroup"] === "string") cw.logGroup = cloudWatch["LogGroup"];
 		if (typeof cloudWatch["LogStream"] === "string") cw.logStream = cloudWatch["LogStream"];
@@ -10963,11 +10963,11 @@ function mapLogging(value) {
 }
 function mapCpuConfigurations(value) {
 	if (!Array.isArray(value)) return void 0;
-	return value.filter(isRecord).map((c) => ({ architecture: c["Architecture"] }));
+	return value.filter(isRecord$1).map((c) => ({ architecture: c["Architecture"] }));
 }
 function mapResources(value) {
 	if (!Array.isArray(value)) return void 0;
-	return value.filter(isRecord).map((r) => Number(r["MinimumMemoryInMiB"])).filter((n) => Number.isFinite(n)).map((minimumMemoryInMiB) => ({ minimumMemoryInMiB }));
+	return value.filter(isRecord$1).map((r) => Number(r["MinimumMemoryInMiB"])).filter((n) => Number.isFinite(n)).map((minimumMemoryInMiB) => ({ minimumMemoryInMiB }));
 }
 /**
 * Translate the CFn `Hooks` structure (PascalCase keys throughout, all leaf
@@ -10976,7 +10976,7 @@ function mapResources(value) {
 * carries no tagged unions and no array-of-record members.
 */
 function mapHooks(value) {
-	if (!isRecord(value)) return void 0;
+	if (!isRecord$1(value)) return void 0;
 	return lowerFirstKeysDeep(value);
 }
 /**
@@ -10987,19 +10987,19 @@ function mapHooks(value) {
 function mapKeyValueListToRecord(value) {
 	if (!Array.isArray(value)) return void 0;
 	const out = {};
-	for (const entry of value) if (isRecord(entry) && typeof entry["Key"] === "string") out[entry["Key"]] = typeof entry["Value"] === "string" ? entry["Value"] : "";
+	for (const entry of value) if (isRecord$1(entry) && typeof entry["Key"] === "string") out[entry["Key"]] = typeof entry["Value"] === "string" ? entry["Value"] : "";
 	return Object.keys(out).length > 0 ? out : void 0;
 }
 function lowerFirstKeysDeep(value) {
 	if (Array.isArray(value)) return value.map(lowerFirstKeysDeep);
-	if (isRecord(value)) {
+	if (isRecord$1(value)) {
 		const out = {};
 		for (const [k, v] of Object.entries(value)) out[k.charAt(0).toLowerCase() + k.slice(1)] = lowerFirstKeysDeep(v);
 		return out;
 	}
 	return value;
 }
-function isRecord(value) {
+function isRecord$1(value) {
 	return typeof value === "object" && value !== null && !Array.isArray(value);
 }
 
@@ -14790,6 +14790,112 @@ var EventBridgeRuleProvider = class {
 		this.eventBridgeClient = awsClients.eventBridge;
 	}
 	/**
+	* Convert each target's CFn-shaped `EcsParameters` to the SDK shape
+	* (issue #1381). The `AWS::Events::Rule` schema and
+	* `@aws-sdk/client-eventbridge` diverge on several ECS sub-shape
+	* spellings, and the SDK serializer silently drops unknown keys — a
+	* Fargate target's `NetworkConfiguration.AwsVpcConfiguration` never
+	* reached AWS, so PutTargets rejected with "Parameter
+	* NetworkConfiguration must be specified".
+	*/
+	toSdkTargets(targets) {
+		return targets.map((target) => {
+			const ecs = target["EcsParameters"];
+			if (!ecs) return target;
+			return {
+				...target,
+				EcsParameters: this.toSdkEcsParameters(ecs)
+			};
+		});
+	}
+	toSdkEcsParameters(ecs) {
+		const result = { ...ecs };
+		const network = result["NetworkConfiguration"];
+		if (network && network["AwsVpcConfiguration"] !== void 0) {
+			const { AwsVpcConfiguration, ...restNetwork } = network;
+			result["NetworkConfiguration"] = {
+				...restNetwork,
+				awsvpcConfiguration: AwsVpcConfiguration
+			};
+		}
+		if (result["TagList"] !== void 0) {
+			result["Tags"] = result["TagList"];
+			delete result["TagList"];
+		}
+		if (Array.isArray(result["PlacementStrategies"])) {
+			result["PlacementStrategy"] = result["PlacementStrategies"].map((item) => this.lowerCaseItemKeys(item, ["Type", "Field"]));
+			delete result["PlacementStrategies"];
+		}
+		if (Array.isArray(result["PlacementConstraints"])) result["PlacementConstraints"] = result["PlacementConstraints"].map((item) => this.lowerCaseItemKeys(item, ["Type", "Expression"]));
+		if (Array.isArray(result["CapacityProviderStrategy"])) result["CapacityProviderStrategy"] = result["CapacityProviderStrategy"].map((item) => this.lowerCaseItemKeys(item, [
+			"CapacityProvider",
+			"Weight",
+			"Base"
+		]));
+		return result;
+	}
+	/**
+	* Inverse of {@link toSdkEcsParameters} for `readCurrentState`:
+	* ListTargetsByRule returns the SDK spellings, but drift compares the
+	* whole `Targets` array against state's CFn spellings — without the
+	* re-map every ECS Fargate rule target would report phantom drift on
+	* `AwsVpcConfiguration` / `TagList` / `PlacementStrategies` under the
+	* `properties`-fallback baseline.
+	*/
+	toCfnTargets(targets) {
+		return targets.map((target) => {
+			const ecs = target["EcsParameters"];
+			if (!ecs) return target;
+			return {
+				...target,
+				EcsParameters: this.toCfnEcsParameters(ecs)
+			};
+		});
+	}
+	toCfnEcsParameters(ecs) {
+		const result = { ...ecs };
+		const network = result["NetworkConfiguration"];
+		if (network && network["awsvpcConfiguration"] !== void 0) {
+			const { awsvpcConfiguration, ...restNetwork } = network;
+			result["NetworkConfiguration"] = {
+				...restNetwork,
+				AwsVpcConfiguration: awsvpcConfiguration
+			};
+		}
+		if (result["Tags"] !== void 0) {
+			result["TagList"] = result["Tags"];
+			delete result["Tags"];
+		}
+		if (Array.isArray(result["PlacementStrategy"])) {
+			result["PlacementStrategies"] = result["PlacementStrategy"].map((item) => this.renameItemKeys(item, ["type", "field"], "upper"));
+			delete result["PlacementStrategy"];
+		}
+		if (Array.isArray(result["PlacementConstraints"])) result["PlacementConstraints"] = result["PlacementConstraints"].map((item) => this.renameItemKeys(item, ["type", "expression"], "upper"));
+		if (Array.isArray(result["CapacityProviderStrategy"])) result["CapacityProviderStrategy"] = result["CapacityProviderStrategy"].map((item) => this.renameItemKeys(item, [
+			"capacityProvider",
+			"weight",
+			"base"
+		], "upper"));
+		return result;
+	}
+	lowerCaseItemKeys(item, keys) {
+		return this.renameItemKeys(item, keys, "lower");
+	}
+	/**
+	* Flip the first letter's case on the listed keys of one array item
+	* (`Type` <-> `type`, `CapacityProvider` <-> `capacityProvider`); keys
+	* not listed (or absent) pass through unchanged.
+	*/
+	renameItemKeys(item, keys, direction) {
+		const result = { ...item };
+		for (const key of keys) if (result[key] !== void 0) {
+			const flipped = direction === "lower" ? key.charAt(0).toLowerCase() + key.slice(1) : key.charAt(0).toUpperCase() + key.slice(1);
+			result[flipped] = result[key];
+			delete result[key];
+		}
+		return result;
+	}
+	/**
 	* Create an EventBridge rule
 	*/
 	async create(logicalId, resourceType, properties) {
@@ -14813,7 +14919,7 @@ var EventBridgeRuleProvider = class {
 					await this.eventBridgeClient.send(new PutTargetsCommand({
 						Rule: ruleName,
 						EventBusName: eventBusName,
-						Targets: targets
+						Targets: this.toSdkTargets(targets)
 					}));
 					this.logger.debug(`Added ${targets.length} targets to rule ${ruleName}`);
 				}
@@ -14881,7 +14987,7 @@ var EventBridgeRuleProvider = class {
 				await this.eventBridgeClient.send(new PutTargetsCommand({
 					Rule: ruleName,
 					EventBusName: eventBusName,
-					Targets: newTargets
+					Targets: this.toSdkTargets(newTargets)
 				}));
 				this.logger.debug(`Updated ${newTargets.length} targets on rule ${ruleName}`);
 			}
@@ -15014,10 +15120,11 @@ var EventBridgeRuleProvider = class {
 		if (resp.State !== void 0) result["State"] = resp.State;
 		if (resp.RoleArn !== void 0) result["RoleArn"] = resp.RoleArn;
 		try {
-			result["Targets"] = (await this.eventBridgeClient.send(new ListTargetsByRuleCommand({
+			const targetsResp = await this.eventBridgeClient.send(new ListTargetsByRuleCommand({
 				Rule: ruleName,
 				...busParam
-			}))).Targets ?? [];
+			}));
+			result["Targets"] = this.toCfnTargets(targetsResp.Targets ?? []);
 		} catch (err) {
 			if (!(err instanceof ResourceNotFoundException$2)) throw err;
 		}
@@ -35277,14 +35384,16 @@ var SchedulerScheduleProvider = class {
 	}
 	/**
 	* Map the CFn property shape to the Scheduler SDK input shape. The two
-	* are PascalCase-identical except `StartDate` / `EndDate`, which CFn
-	* carries as ISO strings and the SDK types as `Date`.
+	* are PascalCase-identical except `StartDate` / `EndDate` (CFn carries
+	* ISO strings, the SDK types `Date`) and the Target's ECS sub-shapes
+	* (camelCase islands in the SDK model — see {@link toSdkTarget},
+	* issue #1382).
 	*/
 	toSdkFields(properties) {
 		return {
 			ScheduleExpression: properties["ScheduleExpression"],
 			FlexibleTimeWindow: properties["FlexibleTimeWindow"],
-			Target: properties["Target"],
+			Target: this.toSdkTarget(properties["Target"]),
 			...properties["Description"] !== void 0 && { Description: properties["Description"] },
 			...properties["ScheduleExpressionTimezone"] !== void 0 && { ScheduleExpressionTimezone: properties["ScheduleExpressionTimezone"] },
 			...properties["StartDate"] !== void 0 && { StartDate: new Date(properties["StartDate"]) },
@@ -35293,6 +35402,84 @@ var SchedulerScheduleProvider = class {
 			...properties["KmsKeyArn"] !== void 0 && { KmsKeyArn: properties["KmsKeyArn"] }
 		};
 	}
+	/**
+	* Convert the CFn-shaped `Target` blob's ECS sub-shapes to the SDK shape
+	* (issue #1382). `@aws-sdk/client-scheduler` is PascalCase except a few
+	* camelCase islands the CFn schema spells PascalCase; the SDK serializer
+	* silently drops unknown keys, so a Fargate target's
+	* `NetworkConfiguration.AwsvpcConfiguration` never reached AWS and
+	* CreateSchedule rejected with "Parameter NetworkConfiguration must be
+	* specified".
+	*/
+	toSdkTarget(target) {
+		const ecs = target["EcsParameters"];
+		if (!ecs) return target;
+		const result = { ...ecs };
+		const network = result["NetworkConfiguration"];
+		if (network && network["AwsvpcConfiguration"] !== void 0) {
+			const { AwsvpcConfiguration, ...restNetwork } = network;
+			result["NetworkConfiguration"] = {
+				...restNetwork,
+				awsvpcConfiguration: AwsvpcConfiguration
+			};
+		}
+		if (Array.isArray(result["PlacementStrategy"])) result["PlacementStrategy"] = result["PlacementStrategy"].map((item) => this.renameItemKeys(item, ["Type", "Field"], "lower"));
+		if (Array.isArray(result["PlacementConstraints"])) result["PlacementConstraints"] = result["PlacementConstraints"].map((item) => this.renameItemKeys(item, ["Type", "Expression"], "lower"));
+		if (Array.isArray(result["CapacityProviderStrategy"])) result["CapacityProviderStrategy"] = result["CapacityProviderStrategy"].map((item) => this.renameItemKeys(item, [
+			"CapacityProvider",
+			"Weight",
+			"Base"
+		], "lower"));
+		return {
+			...target,
+			EcsParameters: result
+		};
+	}
+	/**
+	* Inverse of {@link toSdkTarget} for `readCurrentState`: GetSchedule
+	* returns the SDK spellings, but drift compares against the state's CFn
+	* spellings — without the re-map every ECS Fargate schedule would report
+	* phantom drift on `AwsvpcConfiguration` after deploy.
+	*/
+	toCfnTarget(target) {
+		const raw = target;
+		const ecs = raw["EcsParameters"];
+		if (!ecs) return raw;
+		const result = { ...ecs };
+		const network = result["NetworkConfiguration"];
+		if (network && network["awsvpcConfiguration"] !== void 0) {
+			const { awsvpcConfiguration, ...restNetwork } = network;
+			result["NetworkConfiguration"] = {
+				...restNetwork,
+				AwsvpcConfiguration: awsvpcConfiguration
+			};
+		}
+		if (Array.isArray(result["PlacementStrategy"])) result["PlacementStrategy"] = result["PlacementStrategy"].map((item) => this.renameItemKeys(item, ["type", "field"], "upper"));
+		if (Array.isArray(result["PlacementConstraints"])) result["PlacementConstraints"] = result["PlacementConstraints"].map((item) => this.renameItemKeys(item, ["type", "expression"], "upper"));
+		if (Array.isArray(result["CapacityProviderStrategy"])) result["CapacityProviderStrategy"] = result["CapacityProviderStrategy"].map((item) => this.renameItemKeys(item, [
+			"capacityProvider",
+			"weight",
+			"base"
+		], "upper"));
+		return {
+			...raw,
+			EcsParameters: result
+		};
+	}
+	/**
+	* Flip the first letter's case on the listed keys of one array item
+	* (`Type` <-> `type`, `CapacityProvider` <-> `capacityProvider`); keys
+	* not listed (or absent) pass through unchanged.
+	*/
+	renameItemKeys(item, keys, direction) {
+		const result = { ...item };
+		for (const key of keys) if (result[key] !== void 0) {
+			const flipped = direction === "lower" ? key.charAt(0).toLowerCase() + key.slice(1) : key.charAt(0).toUpperCase() + key.slice(1);
+			result[flipped] = result[key];
+			delete result[key];
+		}
+		return result;
+	}
 	async create(logicalId, resourceType, properties) {
 		const name = properties["Name"] ?? generateResourceName(logicalId, { maxLength: 64 });
 		const groupName = this.groupNameOf(properties);
@@ -35395,7 +35582,7 @@ var SchedulerScheduleProvider = class {
 				...response.State !== void 0 && { State: response.State },
 				...response.KmsKeyArn !== void 0 && { KmsKeyArn: response.KmsKeyArn },
 				...response.FlexibleTimeWindow !== void 0 && { FlexibleTimeWindow: response.FlexibleTimeWindow },
-				...response.Target !== void 0 && { Target: response.Target }
+				...response.Target !== void 0 && { Target: this.toCfnTarget(response.Target) }
 			};
 		} catch (error) {
 			if (error instanceof ResourceNotFoundException$11) return;
@@ -37197,6 +37384,87 @@ var FSxFileSystemProvider = class {
 	}
 };
 
+//#endregion
+//#region src/provisioning/emr-configuration.ts
+/**
+* CFn -> SDK shape converters for the two `AWS::EMR::*` nested blobs whose CFn
+* key spelling diverges from the `@aws-sdk/client-emr` model (issue #1383).
+*
+* | CFn key                                          | SDK member                     |
+* | ------------------------------------------------ | ------------------------------ |
+* | `Configuration.ConfigurationProperties`           | `Configuration.Properties`     |
+* | `HadoopJarStepConfig.StepProperties`              | `HadoopJarStepConfig.Properties` |
+*
+* Both are plain renames — the VALUE shapes already match (`Record<string,string>`
+* for the former, `KeyValue[]` for the latter, verified against the live CFn
+* registry schema on 2026-08-09). The AWS SDK v3 serializer drops unknown
+* members, so before this conversion every EMR application configuration
+* (spark-defaults / hive-site / yarn-site ...) silently vanished while cdkd
+* reported the deploy as successful.
+*
+* `Configurations` nests into itself, so the rename is applied at EVERY level.
+* Non-object / non-array inputs (an unresolved intrinsic, a malformed template)
+* pass through untouched so this layer never turns a bad template into a
+* confusing crash — AWS surfaces the real validation error instead.
+*/
+function isRecord(value) {
+	return typeof value === "object" && value !== null && !Array.isArray(value);
+}
+function toSdkConfiguration(raw) {
+	if (!isRecord(raw)) return raw;
+	const { ConfigurationProperties, Configurations, ...rest } = raw;
+	return {
+		...rest,
+		...ConfigurationProperties !== void 0 ? { Properties: ConfigurationProperties } : {},
+		...Configurations !== void 0 ? { Configurations: toSdkConfigurations(Configurations) } : {}
+	};
+}
+/**
+* CFn `Configurations` list -> SDK `Configuration[]`, renaming
+* `ConfigurationProperties` -> `Properties` at every nesting level.
+*/
+function toSdkConfigurations(value) {
+	if (value === void 0) return void 0;
+	if (!Array.isArray(value)) return value;
+	return value.map(toSdkConfiguration);
+}
+/**
+* CFn `Steps` list -> SDK `StepConfig[]`, renaming
+* `HadoopJarStep.StepProperties` -> `HadoopJarStep.Properties`.
+*/
+function toSdkStepConfigs(value) {
+	if (value === void 0) return void 0;
+	if (!Array.isArray(value)) return value;
+	return value.map((step) => {
+		if (!isRecord(step)) return step;
+		const hadoopJarStep = step["HadoopJarStep"];
+		if (!isRecord(hadoopJarStep) || hadoopJarStep["StepProperties"] === void 0) return step;
+		const { StepProperties, ...restHadoopJarStep } = hadoopJarStep;
+		return {
+			...step,
+			HadoopJarStep: {
+				...restHadoopJarStep,
+				Properties: StepProperties
+			}
+		};
+	});
+}
+/**
+* CFn `InstanceTypeConfigs` list -> SDK `InstanceTypeConfig[]`, converting each
+* element's nested per-instance-type `Configurations`.
+*/
+function toSdkInstanceTypeConfigs(value) {
+	if (value === void 0) return void 0;
+	if (!Array.isArray(value)) return value;
+	return value.map((instanceTypeConfig) => {
+		if (!isRecord(instanceTypeConfig) || instanceTypeConfig["Configurations"] === void 0) return instanceTypeConfig;
+		return {
+			...instanceTypeConfig,
+			Configurations: toSdkConfigurations(instanceTypeConfig["Configurations"])
+		};
+	});
+}
+
 //#endregion
 //#region src/provisioning/providers/emr-cluster-provider.ts
 /**
@@ -37365,9 +37633,9 @@ var EMRClusterProvider = class {
 				StepConcurrencyLevel: toNumber$2(properties["StepConcurrencyLevel"]),
 				VisibleToAllUsers: toBoolean(properties["VisibleToAllUsers"]),
 				Applications: properties["Applications"],
-				Configurations: properties["Configurations"],
+				Configurations: toSdkConfigurations(properties["Configurations"]),
 				BootstrapActions: properties["BootstrapActions"],
-				Steps: properties["Steps"],
+				Steps: toSdkStepConfigs(properties["Steps"]),
 				KerberosAttributes: properties["KerberosAttributes"],
 				PlacementGroupConfigs: properties["PlacementGroupConfigs"],
 				ManagedScalingPolicy: this.toManagedScalingPolicy(properties["ManagedScalingPolicy"]),
@@ -37455,7 +37723,7 @@ var EMRClusterProvider = class {
 			Name: raw["Name"],
 			Market: raw["Market"],
 			BidPrice: raw["BidPrice"],
-			Configurations: raw["Configurations"],
+			Configurations: toSdkConfigurations(raw["Configurations"]),
 			EbsConfiguration: raw["EbsConfiguration"],
 			AutoScalingPolicy: raw["AutoScalingPolicy"],
 			CustomAmiId: raw["CustomAmiId"]
@@ -37467,7 +37735,7 @@ var EMRClusterProvider = class {
 			Name: raw["Name"],
 			TargetOnDemandCapacity: toNumber$2(raw["TargetOnDemandCapacity"]),
 			TargetSpotCapacity: toNumber$2(raw["TargetSpotCapacity"]),
-			InstanceTypeConfigs: raw["InstanceTypeConfigs"],
+			InstanceTypeConfigs: toSdkInstanceTypeConfigs(raw["InstanceTypeConfigs"]),
 			LaunchSpecifications: raw["LaunchSpecifications"],
 			ResizeSpecifications: raw["ResizeSpecifications"]
 		};
@@ -38119,7 +38387,7 @@ var EMRInstanceGroupConfigProvider = class {
 			Name: properties["Name"],
 			Market: properties["Market"],
 			BidPrice: properties["BidPrice"],
-			Configurations: properties["Configurations"],
+			Configurations: toSdkConfigurations(properties["Configurations"]),
 			EbsConfiguration: properties["EbsConfiguration"],
 			AutoScalingPolicy: properties["AutoScalingPolicy"],
 			CustomAmiId: properties["CustomAmiId"]
@@ -38430,7 +38698,7 @@ var EMRInstanceFleetConfigProvider = class {
 			Name: properties["Name"],
 			TargetOnDemandCapacity: toNumber(properties["TargetOnDemandCapacity"]),
 			TargetSpotCapacity: toNumber(properties["TargetSpotCapacity"]),
-			InstanceTypeConfigs: properties["InstanceTypeConfigs"],
+			InstanceTypeConfigs: toSdkInstanceTypeConfigs(properties["InstanceTypeConfigs"]),
 			LaunchSpecifications: properties["LaunchSpecifications"],
 			ResizeSpecifications: properties["ResizeSpecifications"]
 		};
@@ -38466,7 +38734,7 @@ var EMRInstanceFleetConfigProvider = class {
 				TargetOnDemandCapacity: toNumber(properties["TargetOnDemandCapacity"]),
 				TargetSpotCapacity: toNumber(properties["TargetSpotCapacity"]),
 				ResizeSpecifications: properties["ResizeSpecifications"],
-				InstanceTypeConfigs: properties["InstanceTypeConfigs"]
+				InstanceTypeConfigs: toSdkInstanceTypeConfigs(properties["InstanceTypeConfigs"])
 			};
 			await this.getClient().send(new ModifyInstanceFleetCommand({
 				ClusterId: clusterId,
@@ -64098,7 +64366,7 @@ function createMigrateCommand() {
 */
 function buildProgram() {
 	const program = new Command();
-	program.name("cdkd").description("CDK Direct - Deploy AWS CDK apps directly via SDK/Cloud Control API").version("0.278.1");
+	program.name("cdkd").description("CDK Direct - Deploy AWS CDK apps directly via SDK/Cloud Control API").version("0.278.3");
 	program.hook("preAction", (_thisCommand, actionCommand) => {
 		const { profile } = actionCommand.optsWithGlobals();
 		if (profile !== void 0) process.env["AWS_PROFILE"] = profile;