@go-to-k/cdkd 0.296.9 → 0.296.11

package/dist/{provider-classes-y-yYsSvB.js → provider-classes-4lVceW9g.js}

@@ -1,13 +1,13 @@
 import { r as getAwsClients } from "./aws-clients-CnmtbrxD.js";
 import { A as displayIdent, F as plainIdentOr, I as safeMsg, M as displayStackName, N as isPasteableIdent, T as SECRET_REF_MAX_CODE_POINTS, _ as generateResourceNameWithFallback, g as generateResourceName, j as displaySafe, n as getLogger } from "./logger-DAaB7GFO.js";
-import { $ as compositeIdFormatMessage, $n as markRedactedCause, A as isTerminalDeleteFailure, B as WITHHELD_AWS_COMMAND, C as refusalTypeShown, D as ProtectionFlipRegistry, Dn as shellQuote, H as pasteableAwsCommand, Ht as AccountIdUnavailableError, J as isInterruptedWaitError, Jn as safeStringify, Kn as describeAwsFailure, L as userPoolProtectionSite, Ln as markNameCollision, Lt as withPasteableAwsProfile, M as observeThenDisableProtection, Mt as injectiveKey, N as protectionFlipKey, Nt as injectiveKeyPrefix, On as withheldTargetClause, P as rdsFamilyProtectionSite, Q as canonicalizeRoute53QueryName, Qn as markNonRetryable, Rn as markReplayMayCollide, Rt as ambientClientDefaults, S as quotedRemedyLogicalId, Sn as pasteableCommand, T as resolveExplicitPhysicalId, U as protectedReplacementAdvice, Un as isRetryableTransientError, V as isAwsCliLiteral, Vn as isAmbiguousOutcomeError, Vt as credentialFingerprint, W as renderDisableCommand, Wn as isTransientServerError, Wt as CdkdError, X as ElapsedBudgetRegistry, Xn as isMarkedNonRetryable, Y as startInterruptWatch, Yn as THROTTLING_ERROR_NAMES, Zn as isThrottlingError, _ as VALUE_NOT_SHOWN, a as onlySecretDerived, at as segmentAfterAnchor, b as isQuotableImportValue, bn as hasClauseBreak, bt as markAuxiliaryFailure, c as recordedPrincipalsRepair, ct as createMaskedRetryLogger, dt as maskerOrIdentity, er as wrapMaskedAwsError, et as compositeIdSeparatorRefusal, ft as withDerivedNameMasks, g as assertRegionMatch, h as RESOURCE_NOT_FOUND, ht as clearCreatedBeforeFailure, i as holdsSecretDerivedEntry, in as ProvisioningError, j as logGroupProtectionSite, k as deleteWithProtectionCompensation, lt as isSecretDerivedValue, nt as logicalIdShown, o as readPrincipalLists, on as ResourceUpdateNotSupportedError, ot as stateOrphanRecordRemedy, p as withRemovalDefaults, qn as isAwsAuthoredFailure, r as SECRET_DERIVED_READ_LIVE, rt as packCompositeId, st as createMaskedLogSinks, tt as compositeIdSkipResult, u as clearOnUpdateRemoval, ut as maskDeep, v as isPlainImportJson, w as remedyLogicalId, wn as plainOrDescribed, x as normalizeAwsTagsToCfn, xn as isInertUnquoted, xt as markCreatedBeforeFailure, y as isPlainImportValue, yn as commandHole, z as UNNAMEABLE_ID_CLAUSE, zt as ambientCredentialConfig } from "./iam-policy-targets-BREzwsG6.js";
+import { $ as compositeIdFormatMessage, $n as markRedactedCause, A as isTerminalDeleteFailure, B as WITHHELD_AWS_COMMAND, Bt as clientDefaultsFor, C as refusalTypeShown, D as ProtectionFlipRegistry, Dn as shellQuote, H as pasteableAwsCommand, Ht as AccountIdUnavailableError, J as isInterruptedWaitError, Jn as safeStringify, Kn as describeAwsFailure, L as userPoolProtectionSite, Ln as markNameCollision, Lt as withPasteableAwsProfile, M as observeThenDisableProtection, Mt as injectiveKey, N as protectionFlipKey, Nt as injectiveKeyPrefix, On as withheldTargetClause, P as rdsFamilyProtectionSite, Q as canonicalizeRoute53QueryName, Qn as markNonRetryable, Rn as markReplayMayCollide, Rt as ambientClientDefaults, S as quotedRemedyLogicalId, Sn as pasteableCommand, T as resolveExplicitPhysicalId, U as protectedReplacementAdvice, Un as isRetryableTransientError, V as isAwsCliLiteral, Vn as isAmbiguousOutcomeError, Vt as credentialFingerprint, W as renderDisableCommand, Wn as isTransientServerError, Wt as CdkdError, X as ElapsedBudgetRegistry, Xn as isMarkedNonRetryable, Y as startInterruptWatch, Yn as THROTTLING_ERROR_NAMES, Zn as isThrottlingError, _ as VALUE_NOT_SHOWN, a as onlySecretDerived, at as segmentAfterAnchor, b as isQuotableImportValue, bn as hasClauseBreak, bt as markAuxiliaryFailure, c as recordedPrincipalsRepair, ct as createMaskedRetryLogger, dt as maskerOrIdentity, er as wrapMaskedAwsError, et as compositeIdSeparatorRefusal, ft as withDerivedNameMasks, g as assertRegionMatch, h as RESOURCE_NOT_FOUND, ht as clearCreatedBeforeFailure, i as holdsSecretDerivedEntry, in as ProvisioningError, j as logGroupProtectionSite, k as deleteWithProtectionCompensation, lt as isSecretDerivedValue, nt as logicalIdShown, o as readPrincipalLists, on as ResourceUpdateNotSupportedError, ot as stateOrphanRecordRemedy, p as withRemovalDefaults, qn as isAwsAuthoredFailure, r as SECRET_DERIVED_READ_LIVE, rt as packCompositeId, st as createMaskedLogSinks, tt as compositeIdSkipResult, u as clearOnUpdateRemoval, ut as maskDeep, v as isPlainImportJson, w as remedyLogicalId, wn as plainOrDescribed, x as normalizeAwsTagsToCfn, xn as isInertUnquoted, xt as markCreatedBeforeFailure, y as isPlainImportValue, yn as commandHole, z as UNNAMEABLE_ID_CLAUSE, zt as ambientCredentialConfig } from "./iam-policy-targets-BREzwsG6.js";
 import { s as ambientRegion } from "./aws-client-defaults-D0q0z4dG.js";
-import { $n as deleteSkipReason, $r as accountArgs, A as resolveDynamoDbDeleteBudgetClock, Aa as replayWarn, An as acquireIdempotencyToken, Ar as s3BucketWebsiteUrl, B as getPriorAttempts, Ba as sameLambdaFunctionAddress, Ca as toFiniteNumber, Ct as getStackRecords, D as beginDeleteWait, Da as configIntegerRefusal, Dr as s3BucketDomainName, E as DYNAMODB_DELETE_MIN_RESOURCE_TIMEOUT_MS, Ea as configBooleanRefusal, En as earliestDefined, Er as s3BucketArn, F as waitForIndexesSettled, Fn as refuseMalformedDesiredTags, Gn as getCurrentResourceSecrets, I as ECR_AUTO_DELETE_IMAGES_TAG, In as tagMapAsList, It as REDACTED_DELETE_ADDRESS_SKIP_REASON, Ji as refuseMalformedResourcesForDestroy, Jn as slowCcOperationTimeoutMs, Ka as hasMaskableValues, Ko as stringifyValue, L as S3_AUTO_DELETE_OBJECTS_TAG, La as withRetry, Ln as tagPlanWarning, Lt as isRedactedRecordedValue, M as DELETE_INDEX_WAIT_PROCEED_NOTE, Ma as requireConfigObject, Mn as DBPROXY_TAG_OPTIONS, N as INDEX_SETTLE_POLL_INTERVAL_MS, Na as requireConfigString, Nn as planTagDiff, O as compensateRemovedDeletionProtection, Oa as configStringRefusal, Oi as refuseMalformedNestedChildOutputs, On as reserveStackCreateToken, Or as s3BucketDualStackDomainName, P as deleteTableWithIndexBusyRetry, Pn as readTagList, Pr as getAccountInfo, Pt as getCurrentProducerRegions, R as hasCdkAutoDeleteTag, Ra as canonicalLambdaFunctionName, Rn as definedAttributes, Rt as redactedDeleteAddressFields, Sa as toCfnInteger, T as DynamoDBGlobalTableProvider, Ta as coerceCfnInteger, Tr as isSettledInstanceState, V as markRefusedBeforeApplying, Wr as parseWebACLArn, Xn as unchangedBehindSecretReference, Zo as rewriteTemplateAssetReferences, Zs as decodeListingKey, _t as getCurrentNestedStackContext, a as findNestedTemplateTreeDefect, ar as isTerminationProtectionPropagationError, ba as coerceWarmThroughput$1, c as renderNestedTemplateTreeDefect, ca as findSilentDropProperties, cr as reEnableInstanceApiTermination, dc as describeFileReadFailure, dt as getNestedRevertRun, ec as canonicalizeRegion, er as withIndeterminateGuard, fc as displayAssemblyPath, fo as recoverMaskedOutput, io as redactSecretsForState, ir as ec2InstanceProtectionSite, j as resolveDynamoDbDeleteBudgetMs, ja as requireConfigArray, jn as DBPROXY_TAGS_WHAT, k as deleteBudgetKey, ka as readConfigString, kr as s3BucketRegionalDomainName, mc as resolveAssemblyPath, mo as carriesSecretMask, mt as revertNestedChildFromJournal, nr as markWaitAbandoned, o as isAbsoluteAssetPath, oa as withheldAccountClause, or as observeThenDisableInstanceApiTermination, pc as renderAssemblyPathEscape, qr as passedParameterClassesOf, ro as markSameGenerationBag, s as listNestedTemplateRows, so as dynamicReferenceTokens, sr as reDisableInstanceApiTermination, t as DeployEngine, tc as derivePartitionAndUrlSuffix, tr as isWaitAbandonedError, ua as withoutSilentDropProperties, vt as withNestedStackContext, wa as coerceCfnBoolean, xa as isWarmThroughputDecrease, xt as awaitInFlightSibling, ya as WARM_THROUGHPUT_MEMBERS, z as isTruthyCfnBoolean, za as lambdaFunctionNameForMask, zn as stringifyIfAssigned, zt as redactedDeleteAddressSkip } from "./deploy-engine-B-oaHd2t.js";
-import { a as AmbiguousCreateLatch, c as isInsideWindow, i as AMBIGUOUS_LATCH_TTL_MS, l as setBounded, n as collectInlinePolicyNamesManagedBySiblings, o as RecentIdSet, r as IamCreateClientCache, s as createAttemptKey, t as IAMRoleProvider, u as withoutServerErrorRetries } from "./iam-role-provider-DsJM0NT3.js";
-import { a as canonicalizeIpProtocolValue, i as resolveSecretDerivedPrincipals, n as runDestroyForStack, o as resolvedResourceTimeoutMs, r as isResolvableSecretPrincipalList, t as canonicalizeIpv4Cidr } from "./program-DTXVCX29.js";
-import { RDSProvider } from "./rds-provider-B0YTjZKU.js";
-import { NeptuneProvider } from "./neptune-provider-DGaKBQxm.js";
-import { ASGProvider } from "./asg-provider-B0IrI6EW.js";
+import { $n as deleteSkipReason, $r as accountArgs, A as resolveDynamoDbDeleteBudgetClock, Aa as replayWarn, An as acquireIdempotencyToken, Ar as s3BucketWebsiteUrl, B as getPriorAttempts, Ba as sameLambdaFunctionAddress, Ca as toFiniteNumber, Ct as getStackRecords, D as beginDeleteWait, Da as configIntegerRefusal, Dr as s3BucketDomainName, E as DYNAMODB_DELETE_MIN_RESOURCE_TIMEOUT_MS, Ea as configBooleanRefusal, En as earliestDefined, Er as s3BucketArn, F as waitForIndexesSettled, Fn as refuseMalformedDesiredTags, Gn as getCurrentResourceSecrets, I as ECR_AUTO_DELETE_IMAGES_TAG, In as tagMapAsList, It as REDACTED_DELETE_ADDRESS_SKIP_REASON, Ji as refuseMalformedResourcesForDestroy, Jn as slowCcOperationTimeoutMs, Ka as hasMaskableValues, Ko as stringifyValue, L as S3_AUTO_DELETE_OBJECTS_TAG, La as withRetry, Ln as tagPlanWarning, Lt as isRedactedRecordedValue, M as DELETE_INDEX_WAIT_PROCEED_NOTE, Ma as requireConfigObject, Mn as DBPROXY_TAG_OPTIONS, N as INDEX_SETTLE_POLL_INTERVAL_MS, Na as requireConfigString, Nn as planTagDiff, O as compensateRemovedDeletionProtection, Oa as configStringRefusal, Oi as refuseMalformedNestedChildOutputs, On as reserveStackCreateToken, Or as s3BucketDualStackDomainName, P as deleteTableWithIndexBusyRetry, Pn as readTagList, Pr as getAccountInfo, Pt as getCurrentProducerRegions, R as hasCdkAutoDeleteTag, Ra as canonicalLambdaFunctionName, Rn as definedAttributes, Rt as redactedDeleteAddressFields, Sa as toCfnInteger, T as DynamoDBGlobalTableProvider, Ta as coerceCfnInteger, Tr as isSettledInstanceState, V as markRefusedBeforeApplying, Wr as parseWebACLArn, Xn as unchangedBehindSecretReference, Zo as rewriteTemplateAssetReferences, Zs as decodeListingKey, _t as getCurrentNestedStackContext, a as findNestedTemplateTreeDefect, ar as isTerminationProtectionPropagationError, ba as coerceWarmThroughput$1, c as renderNestedTemplateTreeDefect, ca as findSilentDropProperties, cr as reEnableInstanceApiTermination, dc as describeFileReadFailure, dt as getNestedRevertRun, ec as canonicalizeRegion, er as withIndeterminateGuard, fc as displayAssemblyPath, fo as recoverMaskedOutput, io as redactSecretsForState, ir as ec2InstanceProtectionSite, j as resolveDynamoDbDeleteBudgetMs, ja as requireConfigArray, jn as DBPROXY_TAGS_WHAT, k as deleteBudgetKey, ka as readConfigString, kr as s3BucketRegionalDomainName, mc as resolveAssemblyPath, mo as carriesSecretMask, mt as revertNestedChildFromJournal, nr as markWaitAbandoned, o as isAbsoluteAssetPath, oa as withheldAccountClause, or as observeThenDisableInstanceApiTermination, pc as renderAssemblyPathEscape, qr as passedParameterClassesOf, ro as markSameGenerationBag, s as listNestedTemplateRows, so as dynamicReferenceTokens, sr as reDisableInstanceApiTermination, t as DeployEngine, tc as derivePartitionAndUrlSuffix, tr as isWaitAbandonedError, ua as withoutSilentDropProperties, vt as withNestedStackContext, wa as coerceCfnBoolean, xa as isWarmThroughputDecrease, xt as awaitInFlightSibling, ya as WARM_THROUGHPUT_MEMBERS, z as isTruthyCfnBoolean, za as lambdaFunctionNameForMask, zn as stringifyIfAssigned, zt as redactedDeleteAddressSkip } from "./deploy-engine-aXeTL7rk.js";
+import { a as AmbiguousCreateLatch, c as isInsideWindow, i as AMBIGUOUS_LATCH_TTL_MS, l as setBounded, n as collectInlinePolicyNamesManagedBySiblings, o as RecentIdSet, r as IamCreateClientCache, s as createAttemptKey, t as IAMRoleProvider, u as withoutServerErrorRetries } from "./iam-role-provider-B8gFSZcy.js";
+import { a as canonicalizeIpProtocolValue, i as resolveSecretDerivedPrincipals, n as runDestroyForStack, o as resolvedResourceTimeoutMs, r as isResolvableSecretPrincipalList, t as canonicalizeIpv4Cidr } from "./program-w_06Pj_g.js";
+import { RDSProvider } from "./rds-provider-CUN4EuIb.js";
+import { NeptuneProvider } from "./neptune-provider-xf0xgelu.js";
+import { ASGProvider } from "./asg-provider-HvY_p4Yc.js";
 import { createHash, randomUUID } from "node:crypto";
 import { CreateBucketCommand, DeleteBucketAnalyticsConfigurationCommand, DeleteBucketCommand, DeleteBucketCorsCommand, DeleteBucketEncryptionCommand, DeleteBucketIntelligentTieringConfigurationCommand, DeleteBucketInventoryConfigurationCommand, DeleteBucketLifecycleCommand, DeleteBucketMetricsConfigurationCommand, DeleteBucketOwnershipControlsCommand, DeleteBucketPolicyCommand, DeleteBucketReplicationCommand, DeleteBucketTaggingCommand, DeleteBucketWebsiteCommand, DeleteObjectsCommand, GetBucketAccelerateConfigurationCommand, GetBucketCorsCommand, GetBucketEncryptionCommand, GetBucketLifecycleConfigurationCommand, GetBucketLocationCommand, GetBucketLoggingCommand, GetBucketNotificationConfigurationCommand, GetBucketOwnershipControlsCommand, GetBucketPolicyCommand, GetBucketReplicationCommand, GetBucketTaggingCommand, GetBucketVersioningCommand, GetBucketWebsiteCommand, GetObjectCommand, GetObjectLockConfigurationCommand, GetPublicAccessBlockCommand, HeadBucketCommand, ListBucketAnalyticsConfigurationsCommand, ListBucketIntelligentTieringConfigurationsCommand, ListBucketInventoryConfigurationsCommand, ListBucketMetricsConfigurationsCommand, ListObjectVersionsCommand, ListObjectsV2Command, NoSuchBucket, PutBucketAccelerateConfigurationCommand, PutBucketAnalyticsConfigurationCommand, PutBucketCorsCommand, PutBucketEncryptionCommand, PutBucketIntelligentTieringConfigurationCommand, PutBucketInventoryConfigurationCommand, PutBucketLifecycleConfigurationCommand, PutBucketLoggingCommand, PutBucketMetricsConfigurationCommand, PutBucketNotificationConfigurationCommand, PutBucketOwnershipControlsCommand, PutBucketPolicyCommand, PutBucketReplicationCommand, PutBucketTaggingCommand, PutBucketVersioningCommand, PutBucketWebsiteCommand, PutObjectLockConfigurationCommand, PutPublicAccessBlockCommand, S3Client } from "@aws-sdk/client-s3";
 import { AddRoleToInstanceProfileCommand, AddUserToGroupCommand, AttachGroupPolicyCommand, AttachRolePolicyCommand, AttachUserPolicyCommand, CreateAccessKeyCommand, CreateGroupCommand, CreateInstanceProfileCommand, CreateLoginProfileCommand, CreatePolicyCommand, CreatePolicyVersionCommand, CreateUserCommand, DeleteAccessKeyCommand, DeleteGroupCommand, DeleteGroupPolicyCommand, DeleteInstanceProfileCommand, DeleteLoginProfileCommand, DeletePolicyCommand, DeletePolicyVersionCommand, DeleteRolePolicyCommand, DeleteUserCommand, DeleteUserPermissionsBoundaryCommand, DeleteUserPolicyCommand, DetachGroupPolicyCommand, DetachRolePolicyCommand, DetachUserPolicyCommand, GetAccessKeyLastUsedCommand, GetGroupCommand, GetGroupPolicyCommand, GetInstanceProfileCommand, GetPolicyCommand, GetPolicyVersionCommand, GetRolePolicyCommand, GetUserCommand, GetUserPolicyCommand, IAMClient, ListAccessKeysCommand, ListAttachedGroupPoliciesCommand, ListAttachedUserPoliciesCommand, ListEntitiesForPolicyCommand, ListGroupPoliciesCommand, ListGroupsForUserCommand, ListPoliciesCommand, ListPolicyTagsCommand, ListPolicyVersionsCommand, ListUserPoliciesCommand, NoSuchEntityException, PutGroupPolicyCommand, PutRolePolicyCommand, PutUserPermissionsBoundaryCommand, PutUserPolicyCommand, RemoveRoleFromInstanceProfileCommand, RemoveUserFromGroupCommand, TagPolicyCommand, TagUserCommand, UntagPolicyCommand, UntagUserCommand, UpdateAccessKeyCommand, UpdateLoginProfileCommand } from "@aws-sdk/client-iam";
@@ -12159,6 +12159,7 @@ var CloudWatchAlarmProvider = class {
 
 //#endregion
 //#region src/provisioning/providers/cloudwatch-anomaly-detector-provider.ts
+const ID_ATTRIBUTES = ["AnomalyDetectorId", "Id"];
 var CloudWatchAnomalyDetectorProvider = class {
 	cloudWatchClient;
 	logger = getLogger().child("CloudWatchAnomalyDetectorProvider");
@@ -12187,7 +12188,10 @@ var CloudWatchAnomalyDetectorProvider = class {
 			this.logger.debug(`Successfully created CloudWatch anomaly detector ${logicalId}: ${physicalId}`);
 			return {
 				physicalId,
-				attributes: { Id: physicalId }
+				attributes: {
+					AnomalyDetectorId: physicalId,
+					Id: physicalId
+				}
 			};
 		} catch (error) {
 			const cause = error instanceof Error ? error : void 0;
@@ -12202,7 +12206,10 @@ var CloudWatchAnomalyDetectorProvider = class {
 			return {
 				physicalId,
 				wasReplaced: false,
-				attributes: { Id: physicalId }
+				attributes: {
+					AnomalyDetectorId: physicalId,
+					Id: physicalId
+				}
 			};
 		} catch (error) {
 			const cause = error instanceof Error ? error : void 0;
@@ -12236,13 +12243,16 @@ var CloudWatchAnomalyDetectorProvider = class {
 		}
 	}
 	async getAttribute(physicalId, resourceType, attributeName, logicalId) {
-		if (attributeName === "Id") return physicalId;
-		throw new ProvisioningError(`Unknown attribute ${attributeName} for ${resourceType} (only 'Id' is defined)`, resourceType, logicalId, physicalId);
+		if (ID_ATTRIBUTES.includes(attributeName)) return physicalId;
+		throw new ProvisioningError(`Unknown attribute ${attributeName} for ${resourceType} (only 'AnomalyDetectorId' and 'Id' are defined)`, resourceType, logicalId, physicalId);
 	}
 	async import(input) {
 		if (input.knownPhysicalId) return {
 			physicalId: input.knownPhysicalId,
-			attributes: { Id: input.knownPhysicalId }
+			attributes: {
+				AnomalyDetectorId: input.knownPhysicalId,
+				Id: input.knownPhysicalId
+			}
 		};
 		return null;
 	}
@@ -31440,8 +31450,21 @@ function makeCallerAccountResolver(region) {
 		return cached;
 	};
 }
+function newGlueClients(region) {
+	return {
+		client: new GlueClient({
+			...ambientClientDefaults(),
+			...region ? { region } : {}
+		}),
+		createClient: withoutServerErrorRetries(new GlueClient({
+			...ambientClientDefaults(),
+			...region ? { region } : {}
+		}))
+	};
+}
 var GlueProvider = class {
 	client;
+	createClient;
 	providerRegion = ambientRegion();
 	callerAccountId = makeCallerAccountResolver(this.providerRegion);
 	logger = getLogger().child("GlueProvider");
@@ -31460,12 +31483,13 @@ var GlueProvider = class {
 		"OpenTableFormatInput"
 	])]]);
 	getClient() {
-		if (!this.client) this.client = new GlueClient({
-			...ambientClientDefaults(),
-			...this.providerRegion ? { region: this.providerRegion } : {}
-		});
+		if (!this.client) ({client: this.client, createClient: this.createClient} = newGlueClients(this.providerRegion));
 		return this.client;
 	}
+	getCreateClient() {
+		this.getClient();
+		return this.createClient;
+	}
 	async create(logicalId, resourceType, properties, context) {
 		switch (resourceType) {
 			case "AWS::Glue::Database": return this.createDatabase(logicalId, resourceType, properties, context);
@@ -31501,7 +31525,7 @@ var GlueProvider = class {
 		if (!databaseName) throw new ProvisioningError(`DatabaseInput.Name or top-level DatabaseName is required for Glue Database ${logicalId}`, resourceType, logicalId);
 		const catalogId = properties["CatalogId"];
 		try {
-			await this.getClient().send(new CreateDatabaseCommand({
+			await this.getCreateClient().send(new CreateDatabaseCommand({
 				CatalogId: catalogId,
 				DatabaseInput: this.buildDatabaseInput(databaseInput, databaseName, { ...replayWarn(log, context) })
 			}));
@@ -31622,7 +31646,7 @@ var GlueProvider = class {
 		for (const [field, value] of [["DatabaseName", databaseName], ["TableInput.Name", tableName]]) if (typeof value !== "string") throw new ProvisioningError(`Glue Table ${logicalId}: ${field} must be a string, got ${describeUnresolvedName(value, log.mask)}. Set it to the ${field === "DatabaseName" ? "database" : "table"} name.`, resourceType, logicalId);
 		const physicalId = `${databaseName}|${tableName}`;
 		try {
-			await this.getClient().send(new CreateTableCommand$1({
+			await this.getCreateClient().send(new CreateTableCommand$1({
 				CatalogId: catalogId,
 				DatabaseName: databaseName,
 				TableInput: this.buildTableInput(tableInput, tableName),
@@ -32107,6 +32131,7 @@ var GlueProvider = class {
 };
 var GlueWorkflowProvider = class {
 	client;
+	createClient;
 	stsClient;
 	cachedAccountId;
 	providerRegion = ambientRegion();
@@ -32122,12 +32147,13 @@ var GlueWorkflowProvider = class {
 		"Tags"
 	])]]);
 	getClient() {
-		if (!this.client) this.client = new GlueClient({
-			...ambientClientDefaults(),
-			...this.providerRegion ? { region: this.providerRegion } : {}
-		});
+		if (!this.client) ({client: this.client, createClient: this.createClient} = newGlueClients(this.providerRegion));
 		return this.client;
 	}
+	getCreateClient() {
+		this.getClient();
+		return this.createClient;
+	}
 	async create(logicalId, resourceType, properties, context) {
 		const log = glueOperationSinks(this.logger, context?.maskSecrets, secretNamePairs([properties["Name"]]));
 		const { value: v } = log;
@@ -32136,7 +32162,7 @@ var GlueWorkflowProvider = class {
 		if (!name) throw new ProvisioningError(`Name is required for Glue Workflow ${logicalId}`, resourceType, logicalId);
 		const tags = desiredGlueTags(properties["Tags"], resourceType, logicalId);
 		try {
-			await this.getClient().send(new CreateWorkflowCommand({
+			await this.getCreateClient().send(new CreateWorkflowCommand({
 				Name: name,
 				...properties["Description"] !== void 0 && { Description: properties["Description"] },
 				...properties["DefaultRunProperties"] !== void 0 && { DefaultRunProperties: properties["DefaultRunProperties"] },
@@ -32261,6 +32287,7 @@ var GlueWorkflowProvider = class {
 };
 var GlueSecurityConfigurationProvider = class {
 	client;
+	createClient;
 	providerRegion = ambientRegion();
 	logger = getLogger().child("GlueSecurityConfigurationProvider");
 	wrapMaskedError(mask, error, build) {
@@ -32268,12 +32295,13 @@ var GlueSecurityConfigurationProvider = class {
 	}
 	handledProperties = /* @__PURE__ */ new Map([["AWS::Glue::SecurityConfiguration", /* @__PURE__ */ new Set(["Name", "EncryptionConfiguration"])]]);
 	getClient() {
-		if (!this.client) this.client = new GlueClient({
-			...ambientClientDefaults(),
-			...this.providerRegion ? { region: this.providerRegion } : {}
-		});
+		if (!this.client) ({client: this.client, createClient: this.createClient} = newGlueClients(this.providerRegion));
 		return this.client;
 	}
+	getCreateClient() {
+		this.getClient();
+		return this.createClient;
+	}
 	async create(logicalId, resourceType, properties, context) {
 		const log = glueOperationSinks(this.logger, context?.maskSecrets, secretNamePairs([properties["Name"]]));
 		const { value: v } = log;
@@ -32283,7 +32311,7 @@ var GlueSecurityConfigurationProvider = class {
 		const encryptionConfiguration = properties["EncryptionConfiguration"];
 		if (!encryptionConfiguration) throw new ProvisioningError(`EncryptionConfiguration is required for Glue SecurityConfiguration ${logicalId}`, resourceType, logicalId);
 		try {
-			await this.getClient().send(new CreateSecurityConfigurationCommand({
+			await this.getCreateClient().send(new CreateSecurityConfigurationCommand({
 				Name: name,
 				EncryptionConfiguration: buildEncryptionConfiguration(encryptionConfiguration)
 			}));
@@ -32447,6 +32475,7 @@ async function fetchGlueTags(client, stsClient, resource, name, accountId, logge
 }
 var GlueJobProvider = class {
 	client;
+	createClient;
 	stsClient;
 	cachedAccountId;
 	providerRegion = ambientRegion();
@@ -32481,12 +32510,13 @@ var GlueJobProvider = class {
 		"Tags"
 	])]]);
 	getClient() {
-		if (!this.client) this.client = new GlueClient({
-			...ambientClientDefaults(),
-			...this.providerRegion ? { region: this.providerRegion } : {}
-		});
+		if (!this.client) ({client: this.client, createClient: this.createClient} = newGlueClients(this.providerRegion));
 		return this.client;
 	}
+	getCreateClient() {
+		this.getClient();
+		return this.createClient;
+	}
 	getStsClient() {
 		if (!this.stsClient) this.stsClient = new STSClient({
 			...ambientClientDefaults(),
@@ -32505,7 +32535,7 @@ var GlueJobProvider = class {
 		if (!command) throw new ProvisioningError(`Command is required for Glue Job ${logicalId}`, resourceType, logicalId);
 		const tags = desiredGlueTags(properties["Tags"], resourceType, logicalId);
 		try {
-			await this.getClient().send(new CreateJobCommand({
+			await this.getCreateClient().send(new CreateJobCommand({
 				Name: name,
 				Role: role,
 				Command: buildJobCommand(command),
@@ -32738,6 +32768,7 @@ function pickDefined(obj) {
 }
 var GlueCrawlerProvider = class {
 	client;
+	createClient;
 	stsClient;
 	cachedAccountId;
 	providerRegion = ambientRegion();
@@ -32763,12 +32794,13 @@ var GlueCrawlerProvider = class {
 		"Tags"
 	])]]);
 	getClient() {
-		if (!this.client) this.client = new GlueClient({
-			...ambientClientDefaults(),
-			...this.providerRegion ? { region: this.providerRegion } : {}
-		});
+		if (!this.client) ({client: this.client, createClient: this.createClient} = newGlueClients(this.providerRegion));
 		return this.client;
 	}
+	getCreateClient() {
+		this.getClient();
+		return this.createClient;
+	}
 	getStsClient() {
 		if (!this.stsClient) this.stsClient = new STSClient({
 			...ambientClientDefaults(),
@@ -32787,7 +32819,7 @@ var GlueCrawlerProvider = class {
 		if (!targets) throw new ProvisioningError(`Targets is required for Glue Crawler ${logicalId}`, resourceType, logicalId);
 		const tags = desiredGlueTags(properties["Tags"], resourceType, logicalId);
 		try {
-			await this.getClient().send(new CreateCrawlerCommand({
+			await this.getCreateClient().send(new CreateCrawlerCommand({
 				Name: name,
 				Role: role,
 				Targets: toSdkCrawlerTargets(targets),
@@ -32996,6 +33028,7 @@ function toCfnCrawlerTargets(targets) {
 }
 var GlueConnectionProvider = class {
 	client;
+	createClient;
 	providerRegion = ambientRegion();
 	callerAccountId = makeCallerAccountResolver(this.providerRegion);
 	logger = getLogger().child("GlueConnectionProvider");
@@ -33004,12 +33037,13 @@ var GlueConnectionProvider = class {
 	}
 	handledProperties = /* @__PURE__ */ new Map([["AWS::Glue::Connection", /* @__PURE__ */ new Set(["ConnectionInput", "CatalogId"])]]);
 	getClient() {
-		if (!this.client) this.client = new GlueClient({
-			...ambientClientDefaults(),
-			...this.providerRegion ? { region: this.providerRegion } : {}
-		});
+		if (!this.client) ({client: this.client, createClient: this.createClient} = newGlueClients(this.providerRegion));
 		return this.client;
 	}
+	getCreateClient() {
+		this.getClient();
+		return this.createClient;
+	}
 	async create(logicalId, resourceType, properties, context) {
 		const log = glueOperationSinks(this.logger, context?.maskSecrets, secretNamePairs([asRecord$1(properties["ConnectionInput"])?.["Name"], properties["CatalogId"]]));
 		const { value: v } = log;
@@ -33019,7 +33053,7 @@ var GlueConnectionProvider = class {
 		const name = connectionInput["Name"] ?? logicalId;
 		const catalogId = properties["CatalogId"];
 		try {
-			await this.getClient().send(new CreateConnectionCommand({
+			await this.getCreateClient().send(new CreateConnectionCommand({
 				...catalogId && { CatalogId: catalogId },
 				ConnectionInput: buildConnectionInput(connectionInput, name)
 			}));
@@ -33167,6 +33201,7 @@ function buildConnectionInput(ci, fallbackName) {
 }
 var GlueTriggerProvider = class {
 	client;
+	createClient;
 	stsClient;
 	cachedAccountId;
 	providerRegion = ambientRegion();
@@ -33187,12 +33222,13 @@ var GlueTriggerProvider = class {
 		"Tags"
 	])]]);
 	getClient() {
-		if (!this.client) this.client = new GlueClient({
-			...ambientClientDefaults(),
-			...this.providerRegion ? { region: this.providerRegion } : {}
-		});
+		if (!this.client) ({client: this.client, createClient: this.createClient} = newGlueClients(this.providerRegion));
 		return this.client;
 	}
+	getCreateClient() {
+		this.getClient();
+		return this.createClient;
+	}
 	getStsClient() {
 		if (!this.stsClient) this.stsClient = new STSClient({
 			...ambientClientDefaults(),
@@ -33211,7 +33247,7 @@ var GlueTriggerProvider = class {
 		if (!actions) throw new ProvisioningError(`Actions is required for Glue Trigger ${logicalId}`, resourceType, logicalId);
 		const tags = desiredGlueTags(properties["Tags"], resourceType, logicalId);
 		try {
-			await this.getClient().send(new CreateTriggerCommand({
+			await this.getCreateClient().send(new CreateTriggerCommand({
 				Name: name,
 				Type: type,
 				Actions: actions,
@@ -34924,6 +34960,7 @@ function consumerArnParts(consumerArn) {
 }
 var KinesisStreamConsumerProvider = class {
 	client;
+	createClient;
 	providerRegion = ambientRegion();
 	logger = getLogger().child("KinesisStreamConsumerProvider");
 	handledProperties = /* @__PURE__ */ new Map([["AWS::Kinesis::StreamConsumer", /* @__PURE__ */ new Set([
@@ -34932,12 +34969,22 @@ var KinesisStreamConsumerProvider = class {
 		"Tags"
 	])]]);
 	getClient() {
-		if (!this.client) this.client = new KinesisClient({
-			...ambientClientDefaults(),
-			...this.providerRegion ? { region: this.providerRegion } : {}
-		});
+		if (!this.client) {
+			this.client = new KinesisClient({
+				...ambientClientDefaults(),
+				...this.providerRegion ? { region: this.providerRegion } : {}
+			});
+			this.createClient = withoutServerErrorRetries(new KinesisClient({
+				...ambientClientDefaults(),
+				...this.providerRegion ? { region: this.providerRegion } : {}
+			}));
+		}
 		return this.client;
 	}
+	getCreateClient() {
+		this.getClient();
+		return this.createClient;
+	}
 	async create(logicalId, resourceType, properties) {
 		const tagList = refuseMalformedDesiredTags(properties["Tags"], resourceType, logicalId);
 		const consumerName = properties["ConsumerName"];
@@ -34948,7 +34995,7 @@ var KinesisStreamConsumerProvider = class {
 		const tagMap = tagListToMap(tagList);
 		let createdArn;
 		try {
-			const consumer = (await this.getClient().send(new RegisterStreamConsumerCommand({
+			const consumer = (await this.getCreateClient().send(new RegisterStreamConsumerCommand({
 				StreamARN: streamArn,
 				ConsumerName: consumerName,
 				...tagMap && Object.keys(tagMap).length > 0 ? { Tags: tagMap } : {}
@@ -35706,6 +35753,7 @@ function deleteFailureClassifier(resourceType, logicalId, physicalId) {
 }
 var PipesPipeProvider = class {
 	client;
+	createClient;
 	providerRegion = ambientRegion();
 	logger = getLogger().child("PipesPipeProvider");
 	options;
@@ -35738,19 +35786,29 @@ var PipesPipeProvider = class {
 		this.options = options;
 	}
 	getClient() {
-		if (!this.client) this.client = new PipesClient({
-			...ambientClientDefaults(),
-			...this.providerRegion ? { region: this.providerRegion } : {}
-		});
+		if (!this.client) {
+			this.client = new PipesClient({
+				...ambientClientDefaults(),
+				...this.providerRegion ? { region: this.providerRegion } : {}
+			});
+			this.createClient = withoutServerErrorRetries(new PipesClient({
+				...ambientClientDefaults(),
+				...this.providerRegion ? { region: this.providerRegion } : {}
+			}));
+		}
 		return this.client;
 	}
+	getCreateClient() {
+		this.getClient();
+		return this.createClient;
+	}
 	async create(logicalId, resourceType, properties, context) {
 		const mask = maskerOrIdentity(context?.maskSecrets);
 		const name = properties["Name"] ?? generateResourceName(logicalId, { maxLength: 64 });
 		const tags = desiredTagMap(properties["Tags"], logicalId);
 		this.logger.debug(mask(`Creating Pipe ${logicalId}: ${name}`));
 		try {
-			await this.getClient().send(new CreatePipeCommand({
+			await this.getCreateClient().send(new CreatePipeCommand({
 				Name: name,
 				RoleArn: properties["RoleArn"],
 				Source: properties["Source"],
@@ -35767,7 +35825,7 @@ var PipesPipeProvider = class {
 			}));
 		} catch (error) {
 			const cause = error instanceof Error ? error : void 0;
-			throw new ProvisioningError(`Failed to create Pipe ${logicalId}: ${cause?.message ?? String(error)}`, resourceType, logicalId, void 0, cause);
+			throw new ProvisioningError(`Failed to create Pipe ${logicalId}: ${mask(cause?.message ?? String(error))}`, resourceType, logicalId, void 0, cause);
 		}
 		let settled;
 		try {
@@ -35839,7 +35897,7 @@ var PipesPipeProvider = class {
 			if (error instanceof ProvisioningError) throw error;
 			if (error instanceof NotFoundException$6) assertRegionMatch(await this.getClient().config.region(), context?.expectedRegion, resourceType, logicalId, physicalId);
 			const cause = error instanceof Error ? error : void 0;
-			throw new ProvisioningError(`Failed to update Pipe ${logicalId}: ${cause?.message ?? String(error)}`, resourceType, logicalId, physicalId, cause);
+			throw new ProvisioningError(`Failed to update Pipe ${logicalId}: ${mask(cause?.message ?? String(error))}`, resourceType, logicalId, physicalId, cause);
 		}
 		return {
 			physicalId,
@@ -39178,6 +39236,7 @@ const FIREHOSE_DELETE_POLL_INTERVAL_MS = 5e3;
 const FIREHOSE_DELETE_MAX_WAIT_MS = 6e5;
 var FirehoseProvider = class {
 	client;
+	createClient;
 	providerRegion = ambientRegion();
 	logger = getLogger().child("FirehoseProvider");
 	handledProperties = /* @__PURE__ */ new Map([["AWS::KinesisFirehose::DeliveryStream", /* @__PURE__ */ new Set([
@@ -39196,12 +39255,22 @@ var FirehoseProvider = class {
 		"DeliveryStreamEncryptionConfigurationInput"
 	])]]);
 	getClient() {
-		if (!this.client) this.client = new FirehoseClient({
-			...ambientClientDefaults(),
-			...this.providerRegion ? { region: this.providerRegion } : {}
-		});
+		if (!this.client) {
+			this.client = new FirehoseClient({
+				...ambientClientDefaults(),
+				...this.providerRegion ? { region: this.providerRegion } : {}
+			});
+			this.createClient = withoutServerErrorRetries(new FirehoseClient({
+				...ambientClientDefaults(),
+				...this.providerRegion ? { region: this.providerRegion } : {}
+			}));
+		}
 		return this.client;
 	}
+	getCreateClient() {
+		this.getClient();
+		return this.createClient;
+	}
 	async create(logicalId, resourceType, properties) {
 		this.logger.debug(`Creating Firehose delivery stream ${logicalId}`);
 		const deliveryStreamName = properties["DeliveryStreamName"];
@@ -39334,7 +39403,7 @@ var FirehoseProvider = class {
 				Key: t.Key,
 				Value: t.Value
 			}));
-			const response = await this.getClient().send(new CreateDeliveryStreamCommand(input));
+			const response = await this.getCreateClient().send(new CreateDeliveryStreamCommand(input));
 			const physicalId = deliveryStreamName || input.DeliveryStreamName || response.DeliveryStreamARN?.split("/").pop() || "";
 			createdStreamName = physicalId;
 			const arn = response.DeliveryStreamARN;
@@ -40045,6 +40114,7 @@ function describeValue(value) {
 }
 var CloudTrailProvider = class {
 	client;
+	createClient;
 	providerRegion = ambientRegion();
 	logger = getLogger().child("CloudTrailProvider");
 	removalDefaults = /* @__PURE__ */ new Map([["AWS::CloudTrail::Trail", /* @__PURE__ */ new Map([["IsMultiRegionTrail", false], ["EnableLogFileValidation", false]])]]);
@@ -40066,12 +40136,22 @@ var CloudTrailProvider = class {
 		"IsOrganizationTrail"
 	])]]);
 	getClient() {
-		if (!this.client) this.client = new CloudTrailClient({
-			...ambientClientDefaults(),
-			...this.providerRegion ? { region: this.providerRegion } : {}
-		});
+		if (!this.client) {
+			this.client = new CloudTrailClient({
+				...ambientClientDefaults(),
+				...this.providerRegion ? { region: this.providerRegion } : {}
+			});
+			this.createClient = withoutServerErrorRetries(new CloudTrailClient({
+				...ambientClientDefaults(),
+				...this.providerRegion ? { region: this.providerRegion } : {}
+			}));
+		}
 		return this.client;
 	}
+	getCreateClient() {
+		this.getClient();
+		return this.createClient;
+	}
 	async create(logicalId, resourceType, properties) {
 		this.logger.debug(`Creating CloudTrail Trail ${logicalId}`);
 		const desiredTags = refuseMalformedDesiredTags(properties["Tags"], resourceType, logicalId);
@@ -40093,7 +40173,7 @@ var CloudTrailProvider = class {
 		let trailCreated = false;
 		let createdTrailArn;
 		try {
-			const result = await this.getClient().send(new CreateTrailCommand({
+			const result = await this.getCreateClient().send(new CreateTrailCommand({
 				Name: trailName ?? logicalId,
 				S3BucketName: s3BucketName,
 				S3KeyPrefix: s3KeyPrefix,
@@ -41579,6 +41659,7 @@ var DLMLifecyclePolicyProvider = class {
 //#region src/provisioning/providers/s3-vectors-provider.ts
 var S3VectorsProvider = class {
 	client;
+	createClient;
 	providerRegion = ambientRegion();
 	logger = getLogger().child("S3VectorsProvider");
 	handledProperties = /* @__PURE__ */ new Map([["AWS::S3Vectors::VectorBucket", /* @__PURE__ */ new Set([
@@ -41590,12 +41671,22 @@ var S3VectorsProvider = class {
 		return wrapMaskedAwsError(mask, error, build);
 	}
 	getClient() {
-		if (!this.client) this.client = new S3VectorsClient({
-			...ambientClientDefaults(),
-			...this.providerRegion ? { region: this.providerRegion } : {}
-		});
+		if (!this.client) {
+			this.client = new S3VectorsClient({
+				...ambientClientDefaults(),
+				...this.providerRegion ? { region: this.providerRegion } : {}
+			});
+			this.createClient = withoutServerErrorRetries(new S3VectorsClient({
+				...ambientClientDefaults(),
+				...this.providerRegion ? { region: this.providerRegion } : {}
+			}));
+		}
 		return this.client;
 	}
+	getCreateClient() {
+		this.getClient();
+		return this.createClient;
+	}
 	async create(logicalId, resourceType, properties) {
 		switch (resourceType) {
 			case "AWS::S3Vectors::VectorBucket": return this.createVectorBucket(logicalId, resourceType, properties);
@@ -41670,7 +41761,7 @@ var S3VectorsProvider = class {
 		const tagRecord = Object.fromEntries(desiredTags.map((t) => [t.Key, t.Value]));
 		const tags = Object.keys(tagRecord).length > 0 ? tagRecord : void 0;
 		try {
-			const result = await this.getClient().send(new CreateVectorBucketCommand({
+			const result = await this.getCreateClient().send(new CreateVectorBucketCommand({
 				vectorBucketName,
 				encryptionConfiguration: encryptionConfiguration ? {
 					sseType: encryptionConfiguration["SseType"],
@@ -41794,6 +41885,8 @@ function notEmptyRefusalMessage(bucketName) {
 }
 var S3DirectoryBucketProvider = class {
 	s3Client;
+	createClient;
+	credentialConfig;
 	stsClient;
 	logger = getLogger().child("S3DirectoryBucketProvider");
 	handledProperties = /* @__PURE__ */ new Map([["AWS::S3Express::DirectoryBucket", /* @__PURE__ */ new Set([
@@ -41809,6 +41902,17 @@ var S3DirectoryBucketProvider = class {
 		const awsClients = getAwsClients();
 		this.s3Client = awsClients.s3;
 		this.stsClient = awsClients.sts;
+		this.credentialConfig = awsClients.credentialConfig ?? {};
+	}
+	getCreateClient() {
+		this.createClient ??= this.s3Client.config.region().then((region) => withoutServerErrorRetries(new S3Client({
+			...clientDefaultsFor(this.credentialConfig),
+			region
+		})), (error) => {
+			this.createClient = void 0;
+			throw error;
+		});
+		return this.createClient;
 	}
 	getEc2Client() {
 		if (!this.ec2Client) this.ec2Client = new EC2Client({
@@ -41866,7 +41970,7 @@ var S3DirectoryBucketProvider = class {
 		const includeTags = tags.length > 0;
 		try {
 			const attributes = await this.buildAttributes(bucketName);
-			await this.s3Client.send(new CreateBucketCommand({
+			await (await this.getCreateClient()).send(new CreateBucketCommand({
 				Bucket: bucketName,
 				CreateBucketConfiguration: {
 					Bucket: {
@@ -42076,6 +42180,7 @@ function tableIdentityFromGetTable(tableARN, namespace, name) {
 }
 var S3TablesProvider = class {
 	client;
+	createClient;
 	providerRegion = ambientRegion();
 	logger = getLogger().child("S3TablesProvider");
 	handledProperties = /* @__PURE__ */ new Map([
@@ -42092,12 +42197,22 @@ var S3TablesProvider = class {
 		])]
 	]);
 	getClient() {
-		if (!this.client) this.client = new S3TablesClient({
-			...ambientClientDefaults(),
-			...this.providerRegion ? { region: this.providerRegion } : {}
-		});
+		if (!this.client) {
+			this.client = new S3TablesClient({
+				...ambientClientDefaults(),
+				...this.providerRegion ? { region: this.providerRegion } : {}
+			});
+			this.createClient = withoutServerErrorRetries(new S3TablesClient({
+				...ambientClientDefaults(),
+				...this.providerRegion ? { region: this.providerRegion } : {}
+			}));
+		}
 		return this.client;
 	}
+	getCreateClient() {
+		this.getClient();
+		return this.createClient;
+	}
 	async create(logicalId, resourceType, properties, context) {
 		switch (resourceType) {
 			case "AWS::S3Tables::TableBucket": return this.createTableBucket(logicalId, resourceType, properties);
@@ -42140,7 +42255,7 @@ var S3TablesProvider = class {
 		if (!tableBucketName) throw new ProvisioningError(`TableBucketName is required for S3 Table Bucket ${logicalId}`, resourceType, logicalId);
 		const tags = this.tagListToSdkMap(desiredTags);
 		try {
-			const tableBucketARN = (await this.getClient().send(new CreateTableBucketCommand({
+			const tableBucketARN = (await this.getCreateClient().send(new CreateTableBucketCommand({
 				name: tableBucketName,
 				...tags !== void 0 && { tags }
 			}))).arn;
@@ -42237,7 +42352,7 @@ var S3TablesProvider = class {
 			...context?.replayingState === true && { onRefusal: (message) => this.logger.warn(message) }
 		});
 		try {
-			await this.getClient().send(new CreateNamespaceCommand({
+			await this.getCreateClient().send(new CreateNamespaceCommand({
 				tableBucketARN,
 				namespace: [namespaceName]
 			}));
@@ -42303,7 +42418,7 @@ var S3TablesProvider = class {
 		});
 		let tableCreated = false;
 		try {
-			const response = await this.getClient().send(new CreateTableCommand$2({
+			const response = await this.getCreateClient().send(new CreateTableCommand$2({
 				tableBucketARN,
 				namespace,
 				name,
@@ -43690,4 +43805,4 @@ var ACMCertificateProvider = class {
 
 //#endregion
 export { ACMCertificateProvider, ASGProvider, AgentCoreBrowserProvider, AgentCoreCodeInterpreterProvider, AgentCoreEvaluatorProvider, AgentCoreRuntimeProvider, ApiGatewayProvider, ApiGatewayV2Provider, AppSyncProvider, BudgetsBudgetProvider, CloudFrontDistributionProvider, CloudFrontOACProvider, CloudFrontOAIProvider, CloudTrailProvider, CloudWatchAlarmProvider, CloudWatchAnomalyDetectorProvider, CodeBuildProvider, CodeCommitRepositoryProvider, CognitoUserPoolProvider, DLMLifecyclePolicyProvider, DocDBProvider, DocDBSubnetGroupProvider, DynamoDBGlobalTableProvider, DynamoDBTableProvider, EC2Provider, ECRProvider, ECSProvider, EFSProvider, ELBv2Provider, EMRClusterProvider, EMRInstanceFleetConfigProvider, EMRInstanceGroupConfigProvider, ElastiCacheProvider, EventBridgeBusProvider, EventBridgeRuleProvider, FSxFileSystemProvider, FirehoseProvider, GlueConnectionProvider, GlueCrawlerProvider, GlueJobProvider, GlueProvider, GlueSecurityConfigurationProvider, GlueTriggerProvider, GlueWorkflowProvider, IAMAccessKeyProvider, IAMInstanceProfileProvider, IAMManagedPolicyProvider, IAMPolicyProvider, IAMRoleProvider, IAMUserGroupProvider, KMSProvider, KinesisStreamConsumerProvider, KinesisStreamProvider, LambdaEventInvokeConfigProvider, LambdaEventSourceMappingProvider, LambdaFunctionProvider, LambdaLayerVersionProvider, LambdaMicrovmImageProvider, LambdaPermissionProvider, LambdaUrlProvider, LogsLogGroupProvider, NeptuneProvider, NestedStackProvider, PipesPipeProvider, RDSDBProxyEndpointProvider, RDSDBProxyProvider, RDSDBProxyTargetGroupProvider, RDSProvider, Route53Provider, S3BucketPolicyProvider, S3BucketProvider, S3DirectoryBucketProvider, S3TablesProvider, S3VectorsProvider, SNSSubscriptionProvider, SNSTopicPolicyProvider, SNSTopicProvider, SQSQueuePolicyProvider, SQSQueueProvider, SSMParameterProvider, SchedulerScheduleProvider, SecretsManagerSecretProvider, ServiceDiscoveryProvider, StepFunctionsProvider, WAFv2WebACLProvider, WaitConditionHandleProvider };
-//# sourceMappingURL=provider-classes-y-yYsSvB.js.map
+//# sourceMappingURL=provider-classes-4lVceW9g.js.map