@mavogel/cdk-vscode-server 0.0.54 → 0.0.56

package/CLAUDE.md

@@ -4,156 +4,122 @@ This file provides guidance to Claude Code (claude.ai/code) when working with co
 
 ## Repository Overview
 
-This is a CDK construct library for deploying VS Code Server on AWS, designed for development and workshop purposes. The project creates a complete infrastructure setup that allows users to run a cloud-based VS Code instance accessible through CloudFront.
+This is a JSII-enabled CDK construct library published to npm, PyPI, and Go that deploys VS Code Server on AWS. It's designed for workshop/development purposes and creates infrastructure for running a cloud-based VS Code instance accessible through CloudFront.
+
+**Key Characteristics**:
+- **Projen-managed**: All project configuration is in `.projenrc.ts` - run `npx projen` after modifying it
+- **Multi-language**: TypeScript source published to Python and Go via JSII
+- **Not production-ready**: Intentionally permissive for workshop scenarios
 
 ## Development Commands
 
 ### Build and Test
 ```bash
-# Build the project (TypeScript compilation, bundling, etc.)
+# Build project (compiles TS, bundles Lambdas, generates API docs)
 npx projen build
 
-# Run tests
+# Run unit tests
 npx projen test
 
+# Run single test file
+npx jest test/vscode-server.test.ts
+
 # Run tests in watch mode
 npx projen test:watch
 
-# Run a single test file
-npx jest test/vscode-server.test.ts
-
-# Run integration tests (deploys to AWS)
+# Integration tests (deploys to eu-west-1, eu-west-2, eu-north-1)
 npm run integ-test
 ```
 
 ### Code Quality
 ```bash
-# Run ESLint
+# ESLint
 npx projen eslint
 
-# AWS CDK linting
+# AWS CDK-specific linting (awslint rules)
 npm run awslint
 ```
 
-### Package Management
+### Lambda Development
 ```bash
-# Install dependencies and update projen
-npx projen
-
-# Build and package for all targets (JS, Python, Go)
-npx projen package-all
-
-# Package for specific target
-npx projen package:js
-npx projen package:python
-npx projen package:go
-```
-
-### Lambda Functions
-```bash
-# Bundle installer Lambda
+# Bundle specific Lambda
 npx projen bundle:installer/installer.lambda
-
-# Bundle secret retriever Lambda
 npx projen bundle:secret-retriever/secret-retriever.lambda
 
 # Watch mode for development
 npx projen bundle:installer/installer.lambda:watch
 ```
 
-## Architecture Overview
-
-### Core Components
-
-**Main Construct (`src/vscode-server.ts`)**:
-- `VSCodeServer` - Primary construct that orchestrates the entire solution
-- Creates VPC, EC2 instance, CloudFront distribution, security groups
-- Supports Ubuntu 22/24 and Amazon Linux 2023
-- Configurable instance types, storage, and additional permissions
-
-**Infrastructure Components**:
-- **VPC**: Single AZ public subnet configuration
-- **EC2 Instance**: Configurable instance with pre-installed development tools
-- **CloudFront**: Distribution for secure access with cache policies
-- **Security Groups**: Restricted to CloudFront prefix lists only
-- **IAM**: Comprehensive role for CDK operations and AWS service access
-
-**Lambda Functions** (`src/installer/`, `src/secret-retriever/`):
-- **Installer**: Custom resource for OS-specific VS Code server installation
-- **Secret Retriever**: Custom resource for extracting generated passwords
-
-**Utility Modules**:
-- `src/mappings.ts` - AMI mappings for different OS/architecture combinations  
-- `src/prefixlist-retriever/` - AWS managed prefix list retrieval
-- `src/suppress-nags.ts` - CDK-nag suppression patterns
-
-### Supported Configurations
-
-**Operating Systems**:
-- Ubuntu 22.04 LTS (`LinuxFlavorType.UBUNTU_22`)
-- Ubuntu 24.04 LTS (`LinuxFlavorType.UBUNTU_24`) 
-- Amazon Linux 2023 (`LinuxFlavorType.AMAZON_LINUX_2023`)
-
-**Architectures**:
-- ARM64 (`LinuxArchitectureType.ARM`)
-- x86_64 (`LinuxArchitectureType.AMD64`)
-
-**Default Instance**: m7g.xlarge (ARM-based Graviton3)
-
-## Project Structure
+### Publishing
+```bash
+# Package for all targets (JS, Python, Go)
+npx projen package-all
 
+# Package specific target
+npx projen package:js
+npx projen package:python
+npx projen package:go
 ```
-src/
-├── index.ts                    # Main export
-├── vscode-server.ts           # Core VSCodeServer construct
-├── mappings.ts                # AMI mappings
-├── installer/                 # Installation Lambda functions
-├── secret-retriever/          # Password generation utilities  
-└── prefixlist-retriever/      # AWS prefix list utilities
-
-test/
-├── vscode-server.test.ts      # Unit tests
-└── installer/                 # Lambda function tests
-
-integ-tests/
-├── integ.ubuntu.ts           # Ubuntu integration tests
-└── integ.al2023.ts           # Amazon Linux integration tests
-
-examples/
-├── simple/                   # Basic usage example
-└── custom/                   # Advanced configuration example
-```
-
-## Key Properties and Customization
 
-The `VSCodeServerProps` interface allows extensive customization:
-
-- **Instance Configuration**: `instanceClass`, `instanceSize`, `instanceVolumeSize`
-- **Operating System**: `instanceOperatingSystem`, `instanceCpuArchitecture`  
-- **VS Code Settings**: `vscodeUser`, `vscodePassword`, `homeFolder`
-- **Development Server**: `devServerBasePath`, `devServerPort`
+## Architecture
+
+### Main Construct (`VSCodeServer`)
+Located in `src/vscode-server.ts`, orchestrates:
+- VPC with single public subnet
+- EC2 instance (default: m7g.xlarge Graviton3 ARM)
+- CloudFront distribution with custom cache policies for VS Code Server
+- Security groups (CloudFront prefix list restriction only)
+- IAM role with CDK permissions for workshop use
+- Optional Route53 + ACM certificate integration via `domainName` prop
+
+### Custom Resources Pattern
+Uses Lambda-backed custom resources via CDK Provider construct:
+- **Installer** (`src/installer/`): OS-specific VS Code Server installation via SSM documents
+- **SecretRetriever** (`src/secret-retriever/`): Extracts generated password from Secrets Manager
+- **PrefixListRetriever** (`src/prefixlist-retriever/`): Fetches AWS-managed CloudFront prefix lists
+
+### AMI Selection
+`src/mappings.ts` contains SSM parameter paths for:
+- Ubuntu 22/24 (ARM + x86_64)
+- Amazon Linux 2023 (ARM + x86_64)
+
+Function `getAmiSSMParameterForLinuxArchitectureAndFlavor()` returns region-specific SSM parameter for latest AMI.
+
+### Key Props
+`VSCodeServerProps` in `src/vscode-server.ts:27-155`:
+- **Instance**: `instanceClass`, `instanceSize`, `instanceVolumeSize`
+- **OS**: `instanceOperatingSystem` (LinuxFlavorType enum), `instanceCpuArchitecture` (LinuxArchitectureType enum)
+- **VS Code**: `vscodeUser`, `vscodePassword`, `homeFolder`, `devServerPort`, `devServerBasePath`
+- **Domain**: `domainName`, `hostedZoneId`, `certificateArn`, `autoCreateCertificate`
 - **Extensions**: `additionalInstanceRolePolicies`, `additionalTags`
 
-## Important Development Notes
-
-- This is a **Projen-managed project** - all configuration changes should be made in `.projenrc.ts` (not found in current structure, likely generated)
-- The project uses **JSII** for multi-language support (TypeScript, Python, Go)
-- **CDK-nag** is integrated for security compliance checking
-- Integration tests deploy real AWS resources and require valid AWS credentials
-- Lambda functions are bundled using esbuild for optimal performance
-- CloudFront distribution includes custom cache policies for VS Code Server compatibility
-
-## Security Considerations
-
-- Security groups restrict access to CloudFront IPs only
-- Instance role includes broad permissions for workshop scenarios (not production-ready)
-- Secrets Manager integration for password generation
-- EBS encryption enabled by default
-- IMDSv2 required on EC2 instances
-
-## Testing Strategy
-
-- **Unit Tests**: Mock-based testing of construct logic
-- **Integration Tests**: Full deployment testing in multiple regions (eu-west-1, eu-west-2)
-- **Coverage Reports**: Generated in `coverage/` directory with multiple formats
-- **Jest Configuration**: Includes JUnit reporter for CI/CD integration
+## Important Patterns
+
+### Projen Workflow
+1. Edit `.projenrc.ts` for project changes (dependencies, build config, etc.)
+2. Run `npx projen` to regenerate managed files
+3. Never manually edit `package.json`, task definitions, or GitHub workflows
+
+### JSII Constraints
+- All public APIs must be JSII-compatible (no TS-specific types)
+- Bundled dependencies (like `node-html-parser`) in Lambda code must be listed in `.projenrc.ts` `bundledDeps`
+- Lambda functions use esbuild bundling configured via Projen
+
+### CDK-nag Integration
+- `src/suppress-nags.ts` contains suppression patterns
+- Suppressions are applied via `NagSuppressions.addResourceSuppressions()` throughout construct code
+- Necessary because workshop design intentionally violates production best practices (e.g., broad IAM permissions)
+
+### Integration Tests
+- Located in `integ-tests/`
+- Use `@aws-cdk/integ-tests-alpha` framework
+- Deploy actual stacks to 3 regions in parallel
+- Include assertion tests (e.g., login test via Lambda in `integ-tests/functions/`)
+- Run with `npm run integ-test` (requires AWS credentials)
+
+## Domain/Certificate Feature (feat/route53-domain branch)
+When `domainName` prop is provided:
+- Creates Route53 A record pointing to CloudFront distribution
+- Supports `autoCreateCertificate` flag to create ACM cert in us-east-1 with DNS validation
+- Alternatively accepts existing `certificateArn`
+- Auto-discovers hosted zone if `hostedZoneId` not provided

package/README.md

@@ -20,6 +20,8 @@ we implement new features. Therefore make sure you use an exact version in your
 
 - [Features](#features)
 - [Usage](#usage)
+  - [Standard](#Standard)
+  - [Custom Domain Configuration](#custom-domain-configuration)
 - [Solution Design](#solution-design)
 - [Inspiration](#inspiration)
 
@@ -28,9 +30,13 @@ we implement new features. Therefore make sure you use an exact version in your
 - ⚡ **Quick Setup**: Spin up and configure your [vscode](https://code.visualstudio.com/) server in under 10 minutes in your AWS account
 - 📏 **Best Practice Setup**: Set up with [projen](https://projen.io/) and a [single configuration file](./.projenrc.ts) to keep your changes centralized.
 - 🤹‍♂️ **Pre-installed packages**: Besides the [vscode](https://code.visualstudio.com/) server, other tools and software packages such as `git`, `docker`, `awscli` `nodejs` and `python` are pre-installed on the EC2 instance.
+- 🌐 **Custom Domain Support**: Use your own domain name with automatic ACM certificate creation and Route53 DNS configuration, or bring your existing certificate.
 - 🏗️ **Extensibility**: Pass in properties to the construct, which start with `additional*`. They allow you to extend the configuration to your needs. There are more to come...
 
 ## Usage
+Actually we supported 2 modes:
+
+### Standard
 The following steps get you started:
 
 1. Create a new `awscdk-app` via
@@ -108,6 +114,48 @@ dev.vscodepassword64FBCA12 = foobarbaz
 
 See the [examples](./examples) folder for more inspiration.
 
+### Custom Domain Configuration
+
+You can configure your VS Code Server with a custom domain name instead of using the default CloudFront domain. The construct supports three different configuration options:
+
+#### Option 1: Auto-create Certificate with DNS Validation
+```ts
+new VSCodeServer(this, 'vscode', {
+  domainName: 'vscode.example.com',
+  hostedZoneId: 'Z123EXAMPLE456',  // optional - will auto-discover if not provided
+  autoCreateCertificate: true,
+});
+```
+
+This will:
+- Create an ACM certificate in us-east-1 (required for CloudFront)
+- Validate the certificate using DNS validation
+- Create a Route53 A record pointing to the CloudFront distribution
+- Configure the CloudFront distribution with the custom domain
+
+#### Option 2: Use Existing Certificate
+```ts
+new VSCodeServer(this, 'vscode', {
+  domainName: 'vscode.example.com',
+  hostedZoneId: 'Z123EXAMPLE456',
+  certificateArn: 'arn:aws:acm:us-east-1:123456789012:certificate/12345678-1234-1234-1234-123456789012',
+});
+```
+
+**Requirements:**
+- Certificate must be in us-east-1 region
+- Certificate must be validated and ready to use
+- Certificate must include the domain name
+
+#### Option 3: Default (No Custom Domain)
+```ts
+new VSCodeServer(this, 'vscode', {
+  // No domain configuration - uses CloudFront default domain
+});
+```
+
+For complete examples, see [examples/custom-domain/main.ts](./examples/custom-domain/main.ts).
+
 6. Then open the domain name in your favorite browser and you'd see the following login screen:
 ![vscode-server-ui-login](docs/img/vscode-server-ui-login-min.png)
 

package/assets/installer/installer.lambda/index.js

@@ -120,8 +120,20 @@ var handler = async (event, context) => {
       }
       return { Data: responseData };
     } catch (error) {
-      console.log(error);
-      throw error;
+      console.log("Error occurred:", error);
+      const isUnauthorized = error.name === "UnauthorizedException" || error.name === "AccessDeniedException" || error.message && error.message.includes("not authorized");
+      const isThrottled = error.name === "ThrottlingException" || error.name === "TooManyRequestsException";
+      const isRetryable = isUnauthorized || isThrottled;
+      timeRemaining = context.getRemainingTimeInMillis();
+      if (isRetryable && timeRemaining > SLEEP_MS) {
+        console.log(
+          `Retryable error encountered (${error.name}). Attempt ${attemptNo}. Sleeping: ${SLEEP_MS / 1e3}s before retry`
+        );
+        await new Promise((resolve) => setTimeout(resolve, SLEEP_MS));
+      } else {
+        console.log("Non-retryable error or timeout. Failing...");
+        throw error;
+      }
     }
   }
 };

package/examples/custom-domain/main.ts

@@ -0,0 +1,49 @@
+import { App, Stack, StackProps } from "aws-cdk-lib";
+import { Construct } from "constructs";
+import { VSCodeServer } from "../../src/index";
+
+export class MyStack extends Stack {
+  constructor(scope: Construct, id: string, props: StackProps = {}) {
+    super(scope, id, props);
+
+    // Example 1: Custom domain with existing certificate
+    // Nginx will be configured with: server_name *.cloudfront.net vscode.example.com;
+    new VSCodeServer(this, "vscode-with-existing-cert", {
+      domainName: "vscode.example.com",
+      hostedZoneId: "Z123EXAMPLE456",
+      certificateArn:
+        "arn:aws:acm:us-east-1:123456789012:certificate/12345678-1234-1234-1234-123456789012",
+    });
+
+    // Example 2: Custom domain with auto-created certificate
+    // Nginx will be configured with: server_name *.cloudfront.net vscode-auto.example.com;
+    new VSCodeServer(this, "vscode-with-auto-cert", {
+      domainName: "vscode-auto.example.com",
+      hostedZoneId: "Z123EXAMPLE456",
+      autoCreateCertificate: true,
+    });
+
+    // Example 3: Custom domain with hosted zone lookup (auto-discovery)
+    // Nginx will be configured with: server_name *.cloudfront.net vscode-lookup.example.com;
+    new VSCodeServer(this, "vscode-with-zone-lookup", {
+      domainName: "vscode-lookup.example.com",
+      autoCreateCertificate: true,
+      // hostedZoneId not provided - will be auto-discovered
+    });
+
+    // Example 4: Default behavior (no custom domain)
+    // Nginx will be configured with: server_name *.cloudfront.net;
+    new VSCodeServer(this, "vscode-default", {
+      // No domain configuration - uses CloudFront default domain only
+    });
+  }
+}
+
+const env = {
+  account: "123456789012",
+  region: "eu-central-1",
+};
+
+const app = new App();
+new MyStack(app, "vscode-server-custom-domain", { env });
+app.synth();

package/integ-tests/integ.al2023.ts.snapshot/IntegSetupVSCodeOnAl2023DefaultTestDeployAssert74D8F645.assets.json

@@ -1,20 +1,21 @@
 {
-  "version": "39.0.0",
+  "version": "41.0.0",
   "files": {
-    "f692c9f68e4daba2abc99103efd3518bced1e9d7a2a89847b9b5d5473c64f1bd": {
+    "530055f7515b3f0a47900f5df37e729ba40ca977b2d07b952bdefa2b8f883f42": {
       "source": {
-        "path": "asset.f692c9f68e4daba2abc99103efd3518bced1e9d7a2a89847b9b5d5473c64f1bd.bundle",
+        "path": "asset.530055f7515b3f0a47900f5df37e729ba40ca977b2d07b952bdefa2b8f883f42.bundle",
         "packaging": "zip"
       },
       "destinations": {
         "current_account-current_region": {
           "bucketName": "cdk-hnb659fds-assets-${AWS::AccountId}-${AWS::Region}",
-          "objectKey": "f692c9f68e4daba2abc99103efd3518bced1e9d7a2a89847b9b5d5473c64f1bd.zip",
+          "objectKey": "530055f7515b3f0a47900f5df37e729ba40ca977b2d07b952bdefa2b8f883f42.zip",
           "assumeRoleArn": "arn:${AWS::Partition}:iam::${AWS::AccountId}:role/cdk-hnb659fds-file-publishing-role-${AWS::AccountId}-${AWS::Region}"
         }
       }
     },
-    "84ea43eb26709048c4d2d4a30e0c90d256e372f41390b121784fb6addfd40bb3": {
+    "e5a8816554ca9fe1e7bf41d7d9fcc2f77bb6af7b02cb83746f5f815104b12306": {
+      "displayName": "IntegSetupVSCodeOnAl2023DefaultTestDeployAssert74D8F645 Template",
       "source": {
         "path": "IntegSetupVSCodeOnAl2023DefaultTestDeployAssert74D8F645.template.json",
         "packaging": "file"
@@ -22,7 +23,7 @@
       "destinations": {
         "current_account-current_region": {
           "bucketName": "cdk-hnb659fds-assets-${AWS::AccountId}-${AWS::Region}",
-          "objectKey": "84ea43eb26709048c4d2d4a30e0c90d256e372f41390b121784fb6addfd40bb3.json",
+          "objectKey": "e5a8816554ca9fe1e7bf41d7d9fcc2f77bb6af7b02cb83746f5f815104b12306.json",
           "assumeRoleArn": "arn:${AWS::Partition}:iam::${AWS::AccountId}:role/cdk-hnb659fds-file-publishing-role-${AWS::AccountId}-${AWS::Region}"
         }
       }

package/integ-tests/integ.al2023.ts.snapshot/IntegSetupVSCodeOnAl2023DefaultTestDeployAssert74D8F645.template.json

@@ -45,7 +45,7 @@
      }
     },
     "flattenResponse": "false",
-    "salt": "1739276543111"
+    "salt": "1759320082329"
    },
    "UpdateReplacePolicy": "Delete",
    "DeletionPolicy": "Delete"
@@ -153,7 +153,7 @@
      "S3Bucket": {
       "Fn::Sub": "cdk-hnb659fds-assets-${AWS::AccountId}-${AWS::Region}"
      },
-     "S3Key": "f692c9f68e4daba2abc99103efd3518bced1e9d7a2a89847b9b5d5473c64f1bd.zip"
+     "S3Key": "530055f7515b3f0a47900f5df37e729ba40ca977b2d07b952bdefa2b8f883f42.zip"
     },
     "Timeout": 120,
     "Handler": "index.handler",
@@ -224,10 +224,10 @@
     "value": "nodejs20.x"
    },
    "cn-north-1": {
-    "value": "nodejs18.x"
+    "value": "nodejs20.x"
    },
    "cn-northwest-1": {
-    "value": "nodejs18.x"
+    "value": "nodejs20.x"
    },
    "eu-central-1": {
     "value": "nodejs20.x"
@@ -278,10 +278,10 @@
     "value": "nodejs20.x"
    },
    "us-gov-east-1": {
-    "value": "nodejs18.x"
+    "value": "nodejs20.x"
    },
    "us-gov-west-1": {
-    "value": "nodejs18.x"
+    "value": "nodejs20.x"
    },
    "us-iso-east-1": {
     "value": "nodejs18.x"

package/integ-tests/integ.al2023.ts.snapshot/IntegTestStackAl2023.assets.json

@@ -1,7 +1,8 @@
 {
-  "version": "39.0.0",
+  "version": "41.0.0",
   "files": {
     "781ab0ab74634cdaf61539ab208ab777829ef07097ac21f95b9e15a3b1eedc1b": {
+      "displayName": "IntegVSCodeServer/SecretRetrieverOnEventHandler/Code",
       "source": {
         "path": "asset.781ab0ab74634cdaf61539ab208ab777829ef07097ac21f95b9e15a3b1eedc1b.lambda",
         "packaging": "zip"
@@ -15,6 +16,7 @@
       }
     },
     "bdc104ed9cab1b5b6421713c8155f0b753380595356f710400609664d3635eca": {
+      "displayName": "IntegVSCodeServer/SecretRetrieveProvider/framework-onEvent/Code",
       "source": {
         "path": "asset.bdc104ed9cab1b5b6421713c8155f0b753380595356f710400609664d3635eca",
         "packaging": "zip"
@@ -28,6 +30,7 @@
       }
     },
     "7fa1e366ee8a9ded01fc355f704cff92bfd179574e6f9cfee800a3541df1b200": {
+      "displayName": "IntegTestStackAl2023/Custom::VpcRestrictDefaultSGCustomResourceProvider Code",
       "source": {
         "path": "asset.7fa1e366ee8a9ded01fc355f704cff92bfd179574e6f9cfee800a3541df1b200",
         "packaging": "zip"
@@ -40,46 +43,50 @@
         }
       }
     },
-    "ce2f3595a340d6c519a65888ef97e3b9b64f053f83608e32cc28162e22d7d99a": {
+    "9d043014be736e8162bcc7ec5590cc6d2ff24fd0d9c73a5c5d595151c5fdad00": {
+      "displayName": "AWS679f53fac002430cb0da5b7982bd2287/Code",
       "source": {
-        "path": "asset.ce2f3595a340d6c519a65888ef97e3b9b64f053f83608e32cc28162e22d7d99a",
+        "path": "asset.9d043014be736e8162bcc7ec5590cc6d2ff24fd0d9c73a5c5d595151c5fdad00",
         "packaging": "zip"
       },
       "destinations": {
         "current_account-current_region": {
           "bucketName": "cdk-hnb659fds-assets-${AWS::AccountId}-${AWS::Region}",
-          "objectKey": "ce2f3595a340d6c519a65888ef97e3b9b64f053f83608e32cc28162e22d7d99a.zip",
+          "objectKey": "9d043014be736e8162bcc7ec5590cc6d2ff24fd0d9c73a5c5d595151c5fdad00.zip",
           "assumeRoleArn": "arn:${AWS::Partition}:iam::${AWS::AccountId}:role/cdk-hnb659fds-file-publishing-role-${AWS::AccountId}-${AWS::Region}"
         }
       }
     },
-    "a9865c9d36c7aa999e28cb7926e7a3a8e0b6d0854b25131a172024c5777442fa": {
+    "33da23274e25bd9f43638c5d83dad26e3931cbe78d462ffd9a9f565e948b4f5f": {
+      "displayName": "IntegVSCodeServer/InstallerOnEventHandler/Code",
       "source": {
-        "path": "asset.a9865c9d36c7aa999e28cb7926e7a3a8e0b6d0854b25131a172024c5777442fa.lambda",
+        "path": "asset.33da23274e25bd9f43638c5d83dad26e3931cbe78d462ffd9a9f565e948b4f5f.lambda",
         "packaging": "zip"
       },
       "destinations": {
         "current_account-current_region": {
           "bucketName": "cdk-hnb659fds-assets-${AWS::AccountId}-${AWS::Region}",
-          "objectKey": "a9865c9d36c7aa999e28cb7926e7a3a8e0b6d0854b25131a172024c5777442fa.zip",
+          "objectKey": "33da23274e25bd9f43638c5d83dad26e3931cbe78d462ffd9a9f565e948b4f5f.zip",
           "assumeRoleArn": "arn:${AWS::Partition}:iam::${AWS::AccountId}:role/cdk-hnb659fds-file-publishing-role-${AWS::AccountId}-${AWS::Region}"
         }
       }
     },
-    "23732f3d1982f7fb0da3bd6638a8107337bb767fea165b45eae12000a1dd67ce": {
+    "0ad50fc42afd768c3d0bfdd4701e43284fb077a25f19eea1e8c51a5ca36ebfe4": {
+      "displayName": "login-handler/Code",
       "source": {
-        "path": "asset.23732f3d1982f7fb0da3bd6638a8107337bb767fea165b45eae12000a1dd67ce",
+        "path": "asset.0ad50fc42afd768c3d0bfdd4701e43284fb077a25f19eea1e8c51a5ca36ebfe4",
         "packaging": "zip"
       },
       "destinations": {
         "current_account-current_region": {
           "bucketName": "cdk-hnb659fds-assets-${AWS::AccountId}-${AWS::Region}",
-          "objectKey": "23732f3d1982f7fb0da3bd6638a8107337bb767fea165b45eae12000a1dd67ce.zip",
+          "objectKey": "0ad50fc42afd768c3d0bfdd4701e43284fb077a25f19eea1e8c51a5ca36ebfe4.zip",
           "assumeRoleArn": "arn:${AWS::Partition}:iam::${AWS::AccountId}:role/cdk-hnb659fds-file-publishing-role-${AWS::AccountId}-${AWS::Region}"
         }
       }
     },
     "2819175352ad1ce0dae768e83fc328fb70fb5f10b4a8ff0ccbcb791f02b0716d": {
+      "displayName": "LogRetentionaae0aa3c5b4d4f87b02d85b201efdd8a/Code",
       "source": {
         "path": "asset.2819175352ad1ce0dae768e83fc328fb70fb5f10b4a8ff0ccbcb791f02b0716d",
         "packaging": "zip"
@@ -92,7 +99,8 @@
         }
       }
     },
-    "daccc551628f034bf6f7020e5a4aeea5d8c5af4bc18cebc60f9bb8c6e3f681d4": {
+    "78456291afad0703e73d0edcbe74101f565cb893d6c239a8a39dec908321d182": {
+      "displayName": "IntegTestStackAl2023 Template",
       "source": {
         "path": "IntegTestStackAl2023.template.json",
         "packaging": "file"
@@ -100,7 +108,7 @@
       "destinations": {
         "current_account-current_region": {
           "bucketName": "cdk-hnb659fds-assets-${AWS::AccountId}-${AWS::Region}",
-          "objectKey": "daccc551628f034bf6f7020e5a4aeea5d8c5af4bc18cebc60f9bb8c6e3f681d4.json",
+          "objectKey": "78456291afad0703e73d0edcbe74101f565cb893d6c239a8a39dec908321d182.json",
           "assumeRoleArn": "arn:${AWS::Partition}:iam::${AWS::AccountId}:role/cdk-hnb659fds-file-publishing-role-${AWS::AccountId}-${AWS::Region}"
         }
       }