@mavogel/cdk-vscode-server 0.0.62 → 0.0.64

package/integ-tests/integ.al2023.ts.snapshot/IntegTestStackAl2023.template.json

@@ -125,7 +125,7 @@
       "Arn"
      ]
     },
-    "Runtime": "nodejs20.x",
+    "Runtime": "nodejs22.x",
     "Timeout": 10
    },
    "DependsOn": [
@@ -1470,20 +1470,29 @@
       },
       "NodeVersion": {
        "type": "String",
-       "default": "20",
+       "default": "22",
        "allowedValues": [
+        "24",
         "22",
         "20",
         "18"
        ]
       },
-      "DotNetVersion": {
+      "RepoUrl": {
        "type": "String",
-       "default": "8.0",
-       "allowedValues": [
-        "8.0",
-        "7.0"
-       ]
+       "default": ""
+      },
+      "AssetZipS3Path": {
+       "type": "String",
+       "default": ""
+      },
+      "BranchZipS3Path": {
+       "type": "String",
+       "default": ""
+      },
+      "FolderZipS3Path": {
+       "type": "String",
+       "default": ""
       }
      },
      "mainSteps": [
@@ -1525,11 +1534,10 @@
        "inputs": {
         "runCommand": [
          "#!/bin/bash",
-         "echo 'Adding user: participant'",
-         "adduser -c '' participant",
-         "passwd -l participant",
-         "echo \"participant:{{ VSCodePassword }}\" | chpasswd",
-         "usermod -aG wheel participant",
+         "if [[ \"participant\" == \"ec2-user\" ]]\nthen\n  echo 'Using existing user: participant'\nelse\n  echo 'Adding user: participant'\n  adduser -c '' participant\n  passwd -l participant\n  echo \"participant:{{ VSCodePassword }}\" | chpasswd\n  usermod -aG wheel participant\nfi",
+         "tee /etc/sudoers.d/91-vscode-user <<EOF\nparticipant ALL=(ALL) NOPASSWD:ALL\nEOF",
+         "mkdir -p /home/participant && chown -R participant:participant /home/participant",
+         "mkdir -p /home/participant/.local/bin && chown -R participant:participant /home/participant",
          "echo \"User added. Checking configuration\"",
          "getent passwd participant"
         ]
@@ -1537,32 +1545,58 @@
       },
       {
        "action": "aws:runShellScript",
-       "name": "InstallNodeDnf",
+       "name": "UpdateProfile",
        "inputs": {
         "runCommand": [
          "#!/bin/bash",
-         "dnf install -y nodejs20 npm",
-         "ln -s -f /usr/bin/node-20 /usr/bin/node",
-         "npm install -g npm@latest",
-         "echo \"Node and npm installed. Checking configuration\"",
-         "node -v",
-         "npm -v"
+         "echo LANG=en_US.utf-8 >> /etc/environment",
+         "echo LC_ALL=en_US.UTF-8 >> /etc/environment",
+         "echo 'PATH=$PATH:/home/participant/.local/bin' >> /home/participant/.bashrc",
+         "echo 'export PATH' >> /home/participant/.bashrc",
+         {
+          "Fn::Join": [
+           "",
+           [
+            "echo 'export AWS_REGION=",
+            {
+             "Ref": "AWS::Region"
+            },
+            "' >> /home/participant/.bashrc"
+           ]
+          ]
+         },
+         {
+          "Fn::Join": [
+           "",
+           [
+            "echo 'export AWS_ACCOUNTID=",
+            {
+             "Ref": "AWS::AccountId"
+            },
+            "' >> /home/participant/.bashrc"
+           ]
+          ]
+         },
+         "echo 'export NEXT_TELEMETRY_DISABLED=1' >> /home/participant/.bashrc",
+         "echo \"export PS1='\\[\\033[01;32m\\]\\u:\\[\\033[01;34m\\]\\w\\[\\033[00m\\]\\$ '\" >> /home/participant/.bashrc",
+         "chown -R participant:participant /home/participant"
         ]
        }
       },
       {
        "action": "aws:runShellScript",
-       "name": "InstallDockerDnf",
+       "name": "InstallAWSCLI",
        "inputs": {
         "runCommand": [
          "#!/bin/bash",
-         "dnf install -y docker",
-         "usermod -aG docker participant",
-         "systemctl restart code-server@participant.service",
-         "systemctl start docker.service",
-         "echo \"Docker installed. Checking configuration\"",
-         "docker --version",
-         "systemctl status docker.service"
+         "mkdir -p /tmp",
+         "curl -fsSL https://awscli.amazonaws.com/awscli-exe-linux-$(uname -m).zip -o /tmp/aws-cli.zip",
+         "chown -R participant:participant /tmp/aws-cli.zip",
+         "unzip -q -d /tmp /tmp/aws-cli.zip",
+         "sudo /tmp/aws/install",
+         "rm -rf /tmp/aws",
+         "echo \"AWS CLI installed. Checking configuration\"",
+         "aws --version"
         ]
        }
       },
@@ -1574,7 +1608,7 @@
          "#!/bin/bash",
          "dnf install -y git",
          "sudo -u participant git config --global user.email \"participant@example.com\"",
-         "sudo -u participant git config --global user.name \"Workshop participant\"",
+         "sudo -u participant git config --global user.name \"Workshop Participant\"",
          "sudo -u participant git config --global init.defaultBranch \"main\"",
          "echo \"Git installed. Checking configuration\"",
          "git --version"
@@ -1583,35 +1617,41 @@
       },
       {
        "action": "aws:runShellScript",
-       "name": "InstallPythonDnf",
+       "name": "CloneRepo",
        "inputs": {
         "runCommand": [
          "#!/bin/bash",
-         "dnf install -y python3.11 python3.11-pip python3-virtualenv python3-pytest python3-boto3",
-         "echo 'alias pytest=pytest-3' >> /home/participant/.bashrc",
-         "echo 'alias python3=python3.11' >> /home/participant/.bashrc",
-         "echo 'alias pip3=pip3.11' >> /home/participant/.bashrc",
-         "echo 'alias=python3=python3.11' >> ~/.bashrc",
-         "echo 'alias pip3=pip3.11' >> ~/.bashrc",
-         "python3.11 -m pip install --upgrade pip 2>&1",
-         "echo \"Python and Pip installed. Checking configuration\"",
-         "python3.11 --version",
-         "python3.11 -m pip --version 2>&1"
+         "if [[ -z \"{{ RepoUrl }}\" ]]\nthen\n  echo \"No Repo\"\nelse\n  mkdir -p /Workshop && chown -R participant:participant /Workshop\n  sudo -u participant git clone {{ RepoUrl }} /Workshop\n  echo \"Repo {{ RepoUrl }} cloned. Checking configuration\"\n  ls -la /Workshop\n  sudo -u participant git -C /Workshop remote -v\nfi"
         ]
        }
       },
       {
        "action": "aws:runShellScript",
-       "name": "InstallAWSCLI",
+       "name": "DownloadAssets",
        "inputs": {
         "runCommand": [
          "#!/bin/bash",
-         "curl -fsSL https://awscli.amazonaws.com/awscli-exe-linux-$(uname -m).zip -o /tmp/aws-cli.zip",
-         "unzip -q -d /tmp /tmp/aws-cli.zip",
-         "sudo /tmp/aws/install",
-         "rm -rf /tmp/aws",
-         "echo \"AWS CLI installed. Checking configuration\"",
-         "aws --version"
+         "if [[ -z \"{{ AssetZipS3Path }}\" ]]\nthen\n  echo \"No assets\"\nelse\n  mkdir -p /Workshop && chown -R participant:participant /Workshop\n  mkdir -p /tmp\n  aws s3 cp s3://{{ AssetZipS3Path }} /tmp/asset.zip\n  chown -R participant:participant /tmp/asset.zip\n  unzip -o /tmp/asset.zip -d /Workshop\n  chown -R participant:participant /Workshop\n  if  [[ -d /Workshop/.git ]]\n  then\n    sudo -u participant git -C /Workshop add .\n    sudo -u participant git -C /Workshop commit -m 'chore: workshop commit'\n  else\n    sudo -u participant git -C /Workshop init\n    sudo -u participant git -C /Workshop add .\n    sudo -u participant git -C /Workshop commit -m 'chore: initial commit'\n  fi\n  echo \"Assets downloaded. Checking configuration: /Workshop\"\n  ls -la /Workshop\n  sudo -u participant git -C /Workshop branch\nfi"
+        ]
+       }
+      },
+      {
+       "action": "aws:runShellScript",
+       "name": "DownloadFolders",
+       "inputs": {
+        "runCommand": [
+         "#!/bin/bash",
+         "if [[ -z \"{{ FolderZipS3Path }}\" ]]\nthen\n  echo \"No folders\"\nelse\n  rm -rf /tmp/folder\n  mkdir -p /tmp/folder && chown -R participant:participant /tmp/folder\n  aws s3 cp s3://{{ FolderZipS3Path }} /tmp/asset-folder.zip\n  chown -R participant:participant /tmp/asset-folder.zip\n  unzip -o /tmp/asset-folder.zip -d /tmp/folder\n  chown -R participant:participant /tmp/folder\n  mkdir -p /Workshop && chown -R participant:participant /Workshop\n  cd \"/Workshop\" && cd ..\n  if [[ $(pwd) ==  \"/\" ]]\n  then\n    targetRootFolder=\"\"\n  else\n    targetRootFolder=$(pwd)\n    chown -R participant:participant .\n  fi\n  find \"/tmp/folder\" -maxdepth 1 -mindepth 1 -type d | while read sourceFolder; do\n    folder=\"$(basename $sourceFolder)\"\n    echo \"Processing folder: $folder\"\n    targetFolder=$targetRootFolder/$folder\n    if [[ $targetRootFolder == \"\" ]]\n    then\n      mv $sourceFolder /\n    else\n      mv $sourceFolder $targetRootFolder\n    fi\n    chown -R participant:participant $targetFolder\n    sudo -u participant git -C $targetFolder init\n    sudo -u participant git -C $targetFolder add .\n    sudo -u participant git -C $targetFolder commit -m \"chore: initial commit\"\n    echo \"Folder downloaded. Checking configuration: $targetFolder\"\n    ls -la $targetFolder\n  done\n  rm -rf /tmp/folder\nfi"
+        ]
+       }
+      },
+      {
+       "action": "aws:runShellScript",
+       "name": "DownloadBranches",
+       "inputs": {
+        "runCommand": [
+         "#!/bin/bash",
+         "if [[ -z \"{{ BranchZipS3Path }}\" ]]\nthen\n  echo \"No branches\"\nelse\n  rm -rf /tmp/branch\n  rm -rf /tmp/git\n  mkdir -p /tmp/branch && chown -R participant:participant /tmp/branch\n  mkdir -p /tmp/git && chown -R participant:participant /tmp/git\n  aws s3 cp s3://{{ BranchZipS3Path }} /tmp/asset-branch.zip\n  chown -R participant:participant /tmp/asset-branch.zip\n  unzip -o /tmp/asset-branch.zip -d /tmp/branch\n  chown -R participant:participant /tmp/branch\n  mkdir -p /Workshop && chown -R participant:participant /Workshop\n  sudo -u participant git -C /Workshop init\n  mv /Workshop/.git /tmp/git\n  rm -rf /Workshop\n  mkdir -p /Workshop && chown -R participant:participant /Workshop\n  mv /tmp/git/.git /Workshop\n  find /tmp/branch -maxdepth 1 -mindepth 1 -type d | while read sourceFolder; do\n    branch=\"$(basename $sourceFolder)\"\n    echo \"Processing branch: $branch\"\n    sudo -u participant git -C /Workshop checkout -b $branch 2>&1\n    cp -a $sourceFolder/. /Workshop\n    sudo -u participant git -C /Workshop add .\n    sudo -u participant git -C /Workshop commit -m \"chore: initial commit $branch\"\n    mv /Workshop/.git /tmp/git\n    rm -rf /Workshop\n    mkdir /Workshop && chown -R participant:participant /Workshop\n    mv /tmp/git/.git /Workshop\n  done\n  sudo -u participant git -C /Workshop checkout main 2>&1\n  sudo -u participant git -C /Workshop restore .\n  rm -rf /tmp/branch\n  rm -rf /tmp/git\n  echo \"Branches downloaded. Checking configuration: /Workshop\"\n  sudo -u participant git -C /Workshop branch\n  ls -la /Workshop\nfi"
         ]
        }
       },
@@ -1622,23 +1662,22 @@
         "runCommand": [
          "#!/bin/bash",
          "export HOME=/home/participant",
-         "curl -fsSL https://code-server.dev/install.sh | bash -s -- 2>&1",
+         "curl -fsSL https://code-server.dev/install.sh | sh -s -- --version 4.100.3",
          "systemctl enable --now code-server@participant 2>&1",
-         "tee /etc/nginx/conf.d/code-server.conf <<EOF\nserver {\n    listen 80;\n    listen [::]:80;\n    # server_name distribution.distributionDomainName;\n    server_name *.cloudfront.net;\n    location / {\n      proxy_pass http://localhost:8080/;\n      proxy_set_header Host \\$host;\n      proxy_set_header Upgrade \\$http_upgrade;\n      proxy_set_header Connection upgrade;\n      proxy_set_header Accept-Encoding gzip;\n    }\n    location /app {\n      proxy_pass http://localhost:8081/app;\n      proxy_set_header Host \\$host;\n      proxy_set_header Upgrade \\$http_upgrade;\n      proxy_set_header Connection upgrade;\n      proxy_set_header Accept-Encoding gzip;\n    }\n}\nEOF",
+         "tee /etc/nginx/conf.d/code-server.conf <<EOF\nserver {\n    listen 80;\n    listen [::]:80;\n    # server_name \\$\\{CloudFrontDistribution.DomainName\\};\n    server_name *.cloudfront.net;\n    location / {\n      proxy_pass http://localhost:8080/;\n      proxy_set_header Host \\$host;\n      proxy_set_header Upgrade \\$http_upgrade;\n      proxy_set_header Connection upgrade;\n      proxy_set_header Accept-Encoding gzip;\n    }\n    location /app {\n      proxy_pass http://localhost:8081/app;\n      proxy_set_header Host \\$host;\n      proxy_set_header Upgrade \\$http_upgrade;\n      proxy_set_header Connection upgrade;\n      proxy_set_header Accept-Encoding gzip;\n    }\n}\nEOF",
          "mkdir -p /home/participant/.config/code-server",
          "tee /home/participant/.config/code-server/config.yaml <<EOF\ncert: false\nauth: password\nhashed-password: \"$(echo -n {{ VSCodePassword }} | argon2 $(openssl rand -base64 12) -e)\"\nEOF",
          "mkdir -p /home/participant/.local/share/code-server/User/",
          "touch /home/participant/.hushlogin",
          "mkdir -p /Workshop && chown -R participant:participant /Workshop",
-         "tee /home/participant/.local/share/code-server/User/settings.json <<EOF\n{\n  \"extensions.autoUpdate\": false,\n  \"extensions.autoCheckUpdates\": false,\n  \"telemetry.telemetryLevel\": \"off\",\n  \"security.workspace.trust.startupPrompt\": \"never\",\n  \"security.workspace.trust.enabled\": false,\n  \"security.workspace.trust.banner\": \"never\",\n  \"security.workspace.trust.emptyWindow\": false,\n  \"python.testing.pytestEnabled\": true,\n  \"auto-run-command.rules\": [\n    {\n      \"command\": \"workbench.action.terminal.new\"\n    }\n  ]\n}\nEOF",
+         "tee /home/participant/.local/share/code-server/User/settings.json <<EOF\n{\n  \"extensions.autoUpdate\": false,\n  \"extensions.autoCheckUpdates\": false,\n  \"telemetry.telemetryLevel\": \"off\",\n  \"security.workspace.trust.startupPrompt\": \"never\",\n  \"security.workspace.trust.enabled\": false,\n  \"security.workspace.trust.banner\": \"never\",\n  \"security.workspace.trust.emptyWindow\": false,\n  \"auto-run-command.rules\": [\n    {\n      \"command\": \"workbench.action.terminal.new\"\n    }\n  ]\n}\nEOF",
          "chown -R participant:participant /home/participant",
          "systemctl restart code-server@participant",
          "systemctl restart nginx",
          "sudo -u participant --login code-server --install-extension AmazonWebServices.aws-toolkit-vscode --force",
          "sudo -u participant --login code-server --install-extension AmazonWebServices.amazon-q-vscode --force",
-         "sudo -u participant --login code-server --install-extension synedra.auto-run-command --force",
-         "sudo -u participant --login code-server --install-extension vscjava.vscode-java-pack --force",
          "sudo -u participant --login code-server --install-extension ms-vscode.live-server --force",
+         "sudo -u participant --login code-server --install-extension synedra.auto-run-command --force",
          "chown -R participant:participant /home/participant",
          "echo \"Nginx installed. Checking configuration\"",
          "nginx -t 2>&1",
@@ -1651,41 +1690,15 @@
       },
       {
        "action": "aws:runShellScript",
-       "name": "UpdateProfile",
+       "name": "InstallNodeDnf",
        "inputs": {
         "runCommand": [
          "#!/bin/bash",
-         "echo LANG=en_US.utf-8 >> /etc/environment",
-         "echo LC_ALL=en_US.UTF-8 >> /etc/environment",
-         "echo 'PATH=$PATH:/home/participant/.local/bin' >> /home/participant/.bashrc",
-         "echo 'export PATH' >> /home/participant/.bashrc",
-         {
-          "Fn::Join": [
-           "",
-           [
-            "echo 'export AWS_REGION=",
-            {
-             "Ref": "AWS::Region"
-            },
-            "' >> /home/participant/.bashrc"
-           ]
-          ]
-         },
-         {
-          "Fn::Join": [
-           "",
-           [
-            "echo 'export AWS_ACCOUNTID=",
-            {
-             "Ref": "AWS::AccountId"
-            },
-            "' >> /home/participant/.bashrc"
-           ]
-          ]
-         },
-         "echo 'export NEXT_TELEMETRY_DISABLED=1' >> /home/participant/.bashrc",
-         "echo \"export PS1='\\[\\033[01;32m\\]\\u:\\[\\033[01;34m\\]\\w\\[\\033[00m\\]\\$ '\" >> /home/participant/.bashrc",
-         "chown -R participant:participant /home/participant"
+         "dnf install -y nodejs npm",
+         "npm install -g npm@latest",
+         "echo \"Node and npm installed. Checking configuration\"",
+         "node -v",
+         "npm -v"
         ]
        }
       },
@@ -1700,6 +1713,125 @@
          "cdk --version"
         ]
        }
+      },
+      {
+       "action": "aws:runShellScript",
+       "name": "InstallQCLI",
+       "inputs": {
+        "runCommand": [
+         "#!/bin/bash",
+         "curl --proto '=https' --tlsv1.2 -sSf \"https://desktop-release.q.us-east-1.amazonaws.com/latest/q-$(uname -m)-linux.zip\" -o /tmp/q.zip",
+         "chown -R participant:participant /tmp/q.zip",
+         "unzip -q -d /tmp /tmp/q.zip",
+         "chown -R participant:participant /tmp/q",
+         "chmod +x /tmp/q/install.sh",
+         "sudo -u participant /tmp/q/install.sh --no-confirm",
+         "rm -rf /tmp/q",
+         "echo \"Amazon Q CLI installed\""
+        ]
+       }
+      },
+      {
+       "action": "aws:runShellScript",
+       "name": "Installuv",
+       "inputs": {
+        "runCommand": [
+         "#!/bin/bash",
+         "sudo -u participant --login curl -fsSL https://astral.sh/uv/install.sh -o /tmp/uv_install.sh",
+         "sudo -u participant --login bash /tmp/uv_install.sh",
+         "if uv generate-shell-completion bash &>/dev/null; then\n  echo 'eval \"$(uv generate-shell-completion bash)\"' >> /home/participant/.bashrc\nfi",
+         "if uvx generate-shell-completion bash &>/dev/null; then\n  echo 'eval \"$(uvx generate-shell-completion bash)\"' >> /home/participant/.bashrc\nfi",
+         "echo \"uv installed. Checking configuration\"",
+         "sudo -u participant --login uv --version"
+        ]
+       }
+      },
+      {
+       "action": "aws:runShellScript",
+       "name": "InstallPythonDnf",
+       "inputs": {
+        "runCommand": [
+         "#!/bin/bash",
+         "dnf install -y python3.11 python3.11-pip python3-virtualenv python3-pytest python3-boto3",
+         "echo 'alias pytest=pytest-3' >> /home/participant/.bashrc",
+         "echo 'alias python3=python3.11' >> /home/participant/.bashrc",
+         "echo 'alias pip3=pip3.11' >> /home/participant/.bashrc",
+         "echo 'alias=python3=python3.11' >> ~/.bashrc",
+         "echo 'alias pip3=pip3.11' >> ~/.bashrc",
+         "python3.11 -m pip install --upgrade pip 2>&1",
+         "sudo -u participant --login code-server --install-extension ms-python.python --force",
+         "if [ -f /home/participant/.local/share/code-server/User/settings.json ]; then\n  sed -i \"2i\\\\  \\\"python.testing.pytestEnabled\\\": true,\" /home/participant/.local/share/code-server/User/settings.json\nelse\n  echo '{\n    \"python.testing.pytestEnabled\": true\n  }' > /home/participant/.local/share/code-server/User/settings.json\nfi",
+         "echo \"Python and Pip installed. Checking configuration\"",
+         "python3.11 --version",
+         "python3.11 -m pip --version 2>&1"
+        ]
+       }
+      },
+      {
+       "action": "aws:runShellScript",
+       "name": "InstallJavaDnf",
+       "inputs": {
+        "runCommand": [
+         "#!/bin/bash",
+         "dnf install -y java-21-amazon-corretto java-17-amazon-corretto java-1.8.0-amazon-corretto maven",
+         "echo 'export JAVA_8_HOME=/usr/lib/jvm/java-1.8.0-amazon-corretto' >> /home/participant/.bashrc",
+         "echo 'export JAVA_8_PATH=/usr/lib/jvm/java-1.8.0-amazon-corretto' >> /home/participant/.bashrc",
+         "echo 'export JAVA_17_PATH=/usr/lib/jvm/java-17-amazon-corretto' >> /home/participant/.bashrc",
+         "echo 'export JAVA_17_HOME=/usr/lib/jvm/java-17-amazon-corretto' >> /home/participant/.bashrc",
+         "echo 'export JAVA_21_PATH=/usr/lib/jvm/java-21-amazon-corretto' >> /home/participant/.bashrc",
+         "echo 'export JAVA_21_HOME=/usr/lib/jvm/java-21-amazon-corretto' >> /home/participant/.bashrc",
+         "echo 'export JAVA_HOME=/usr/lib/jvm/java-21-amazon-corretto' >> /home/participant/.bashrc",
+         "echo 'export PATH=$PATH:$JAVA_HOME/bin:/usr/share/maven/bin' >> /home/participant/.bashrc",
+         "sudo -u participant --login code-server --install-extension vscjava.vscode-java-pack --force",
+         "echo \"Java and Maven installed. Checking configuration\"",
+         "java -version 2>&1",
+         "mvn --version"
+        ]
+       }
+      },
+      {
+       "action": "aws:runShellScript",
+       "name": "InstallDotnetDnf",
+       "inputs": {
+        "runCommand": [
+         "#!/bin/bash",
+         "dnf install -y dotnet-sdk-8.0",
+         "dotnet tool install -g Microsoft.Web.LibraryManager.Cli",
+         "echo 'PATH=$PATH:/home/participant/.dotnet/tools' >> /home/participant/.bashrc",
+         "chown -R participant:participant /home/participant",
+         "echo \"Dotnet installed. Checking configuration\"",
+         "dotnet --list-sdks"
+        ]
+       }
+      },
+      {
+       "action": "aws:runShellScript",
+       "name": "InstallDockerDnf",
+       "inputs": {
+        "runCommand": [
+         "#!/bin/bash",
+         "dnf install -y docker",
+         "usermod -aG docker participant",
+         "systemctl restart code-server@participant.service",
+         "systemctl start docker.service",
+         "echo \"Docker installed. Checking configuration\"",
+         "docker --version",
+         "systemctl status docker.service"
+        ]
+       }
+      },
+      {
+       "action": "aws:runShellScript",
+       "name": "InstallGolangDnf",
+       "inputs": {
+        "runCommand": [
+         "#!/bin/bash",
+         "dnf install -y golang",
+         "echo 'PATH=$PATH:/home/participant/go/bin' >> /home/participant/.bashrc",
+         "echo \"Golang installed. Checking configuration\"",
+         "go version"
+        ]
+       }
       }
      ]
     },
@@ -1761,6 +1893,13 @@
       {
        "reason": "For this lambda the latest runtime is not needed",
        "id": "AwsSolutions-L1"
+      },
+      {
+       "reason": "ssm:GetCommandInvocation and ssm:ListCommandInvocations do not support resource-level permissions and require wildcard resources",
+       "id": "AwsSolutions-IAM5",
+       "applies_to": [
+        "Resource::*"
+       ]
       }
      ]
     }
@@ -1772,11 +1911,7 @@
     "PolicyDocument": {
      "Statement": [
       {
-       "Action": [
-        "ssm:GetCommandInvocation",
-        "ssm:ListCommandInvocations",
-        "ssm:SendCommand"
-       ],
+       "Action": "ssm:SendCommand",
        "Effect": "Allow",
        "Resource": [
         {
@@ -1843,6 +1978,14 @@
          ]
         }
        ]
+      },
+      {
+       "Action": [
+        "ssm:GetCommandInvocation",
+        "ssm:ListCommandInvocations"
+       ],
+       "Effect": "Allow",
+       "Resource": "*"
       }
      ],
      "Version": "2012-10-17"
@@ -1853,6 +1996,19 @@
       "Ref": "IntegVSCodeServerInstallerOnEventHandlerServiceRole59651FEF"
      }
     ]
+   },
+   "Metadata": {
+    "cdk_nag": {
+     "rules_to_suppress": [
+      {
+       "reason": "ssm:GetCommandInvocation and ssm:ListCommandInvocations do not support resource-level permissions and require wildcard resources",
+       "id": "AwsSolutions-IAM5",
+       "applies_to": [
+        "Resource::*"
+       ]
+      }
+     ]
+    }
    }
   },
   "IntegVSCodeServerInstallerOnEventHandler6FF91542": {
@@ -1862,7 +2018,7 @@
      "S3Bucket": {
       "Fn::Sub": "cdk-hnb659fds-assets-${AWS::AccountId}-${AWS::Region}"
      },
-     "S3Key": "33da23274e25bd9f43638c5d83dad26e3931cbe78d462ffd9a9f565e948b4f5f.zip"
+     "S3Key": "2f99f38311da357eaaea1284d67c759759324dec4a1cd11621d9c59eea9e81df.zip"
     },
     "Description": "src/installer/installer.lambda.ts",
     "Handler": "index.handler",
@@ -1873,8 +2029,8 @@
       "Arn"
      ]
     },
-    "Runtime": "nodejs20.x",
-    "Timeout": 300
+    "Runtime": "nodejs22.x",
+    "Timeout": 900
    },
    "DependsOn": [
     "IntegVSCodeServerInstallerOnEventHandlerServiceRoleDefaultPolicy1CAD86C2",
@@ -1890,6 +2046,13 @@
       {
        "reason": "For this lambda the latest runtime is not needed",
        "id": "AwsSolutions-L1"
+      },
+      {
+       "reason": "ssm:GetCommandInvocation and ssm:ListCommandInvocations do not support resource-level permissions and require wildcard resources",
+       "id": "AwsSolutions-IAM5",
+       "applies_to": [
+        "Resource::*"
+       ]
       }
      ]
     }
@@ -2084,7 +2247,7 @@
       "Arn"
      ]
     },
-    "ServiceTimeout": 305,
+    "ServiceTimeout": 905,
     "InstanceId": {
      "Ref": "IntegVSCodeServerserverinstance0A3D62D7"
     },
@@ -2276,7 +2439,7 @@
      "S3Bucket": {
       "Fn::Sub": "cdk-hnb659fds-assets-${AWS::AccountId}-${AWS::Region}"
      },
-     "S3Key": "0ad50fc42afd768c3d0bfdd4701e43284fb077a25f19eea1e8c51a5ca36ebfe4.zip"
+     "S3Key": "efac30c7091c58fed492058fa6403c14f7e58aab8cf4fd595d838b8d5eeec2b9.zip"
     },
     "Handler": "index.handler",
     "Role": {