@mavogel/cdk-vscode-server 0.0.63 → 0.0.65

package/CLAUDE.md

@@ -88,9 +88,10 @@ Uses Lambda-backed custom resources via CDK Provider construct:
 
 1. **Installer** (`src/installer/`)
    - Runs SSM documents to install VS Code Server
-   - OS-specific installation for Ubuntu 22/24 and Amazon Linux 2023
+   - OS-specific installation for Ubuntu 22/24/25 and Amazon Linux 2023
    - Returns SUCCESS when installation completes
    - Custom resource name: `SSMInstallerCustomResource`
+   - **Critical**: Must pass `linuxFlavorType` parameter to ensure correct OS-specific SSM document is used
 
 2. **SecretRetriever** (`src/secret-retriever/`)
    - Extracts generated password from Secrets Manager
@@ -130,11 +131,28 @@ enabler.node.addDependency(installerCustomResource);
 ### AMI Selection (`src/mappings.ts`)
 
 Contains SSM parameter paths for:
-- Ubuntu 22/24 (ARM + x86_64)
+- Ubuntu 22/24/25 (ARM + x86_64)
 - Amazon Linux 2023 (ARM + x86_64)
 
+**Ubuntu Codenames**:
+- Ubuntu 22 = "jammy" (uses ebs-gp2)
+- Ubuntu 24 = "noble" (uses ebs-gp3)
+- Ubuntu 25 = "plucky" (uses ebs-gp3)
+
 Function `getAmiSSMParameterForLinuxArchitectureAndFlavor()` returns region-specific SSM parameter for latest AMI.
 
+**Verify SSM Parameters** (when adding new OS versions):
+```bash
+# List available Ubuntu versions
+aws ssm get-parameters-by-path --path "/aws/service/canonical/ubuntu/server/" --recursive --query "Parameters[*].Name" --region us-east-1
+
+# Verify specific AMI paths exist
+aws ssm get-parameters --names \
+  "/aws/service/canonical/ubuntu/server/plucky/stable/current/amd64/hvm/ebs-gp3/ami-id" \
+  "/aws/service/canonical/ubuntu/server/plucky/stable/current/arm64/hvm/ebs-gp3/ami-id" \
+  --region us-east-1
+```
+
 ### Key Props (`src/vscode-server.ts:27-200`)
 
 **Instance Configuration**:
@@ -155,6 +173,10 @@ Function `getAmiSSMParameterForLinuxArchitectureAndFlavor()` returns region-spec
 - `idleCheckIntervalMinutes` - How often to check (default: 5)
 - `skipStatusChecks` - Skip EC2 status checks before stopping (for testing only)
 
+**Custom Installation**:
+- `customInstallSteps` - Array of custom shell commands that run after standard installation
+- `repoUrl` - Git repository to clone into home folder during setup
+
 **Extensions**:
 - `additionalInstanceRolePolicies`, `additionalTags`
 
@@ -164,6 +186,7 @@ Function `getAmiSSMParameterForLinuxArchitectureAndFlavor()` returns region-spec
 - All public APIs must be JSII-compatible (no TS-specific types)
 - Bundled dependencies (like `node-html-parser`) must be in `.projenrc.ts` `bundledDeps`
 - Lambda functions use esbuild bundling configured via Projen (auto-discovered in `src/**/*.lambda.ts`)
+- **@example JSDoc blocks must NOT use code fences** (```) - JSII will fail with "must be code only, no code block fences allowed"
 
 ## CDK-nag Integration
 
@@ -183,6 +206,8 @@ Located in `integ-tests/`, using `@aws-cdk/integ-tests-alpha` framework.
 
 **Test Files**:
 - `integ.ubuntu.ts` - Basic Ubuntu 22 deployment + login test
+- `integ.ubuntu24.ts` - Ubuntu 24 deployment + login test
+- `integ.ubuntu25.ts` - Ubuntu 25 deployment + login test
 - `integ.al2023.ts` - Amazon Linux 2023 deployment
 - `integ.custom-domain.ts` - Custom domain + ACM certificate
 - `integ.stop-on-idle.ts` - **4-phase auto-stop workflow test**
@@ -219,11 +244,50 @@ Projen automatically discovers Lambda functions matching `src/**/*.lambda.ts` pa
 3. Run `npx projen` - auto-discovers and creates bundle task
 4. Import in construct: `import { MyFeatureFunction } from './my-feature/my-feature-function'`
 
+### Adding Custom Installation Steps
+
+Custom steps are appended to SSM document `mainSteps` array in `createSSMDocument()`:
+
+1. **Define interface** (if needed) in `src/vscode-server.ts`:
+   ```typescript
+   export interface CustomInstallStep {
+     readonly name: string;
+     readonly commands: string[];
+   }
+   ```
+
+2. **Add prop** to `VSCodeServerProps` with JSDoc documentation (no code fences!)
+
+3. **Pass to Installer** in both Ubuntu and Amazon Linux paths:
+   ```typescript
+   installer = Installer.ubuntu({
+     // ... other options
+     customInstallSteps: customInstallSteps,
+   })._bind(this);
+   ```
+
+4. **Update `createSSMDocument()`** in `src/installer/installer.ts` to accept and use custom steps:
+   ```typescript
+   ...(customInstallSteps?.map((step) => ({
+     action: 'aws:runShellScript' as const,
+     name: step.name,
+     inputs: {
+       runCommand: step.commands,
+     },
+   })) ?? []),
+   ```
+
+5. **Write unit tests** in `test/vscode-server.test.ts` covering normal usage, without steps, and empty array
+
+6. **Update documentation** in README.md with practical examples and add to `examples/` directory
+
 ### Modifying VSCodeServer Props
 
 1. Edit `src/vscode-server.ts` - update `VSCodeServerProps` interface
-2. Run `npx projen build` - regenerates JSII artifacts + API docs
-3. Update README.md with usage examples
+2. If adding new types/interfaces, export them from `src/vscode-server.ts`
+3. Run `npx projen build` - regenerates JSII artifacts + API docs
+4. Update README.md with usage examples and feature section
+5. Add example usage in `examples/` directory
 
 ### Testing Changes
 
@@ -231,6 +295,59 @@ Projen automatically discovers Lambda functions matching `src/**/*.lambda.ts` pa
 2. Build validation: `npx projen build` (includes awslint checks)
 3. Integration test: `npm run integ-test` (full deployment test)
 
+### Adding Support for a New Ubuntu Version
+
+When Ubuntu releases a new version (e.g., Ubuntu 26):
+
+1. **Add AMI mappings** in `src/mappings.ts`:
+   ```typescript
+   [
+     'arm-ubuntu26',
+     '/aws/service/canonical/ubuntu/server/CODENAME/stable/current/arm64/hvm/ebs-gp3/ami-id',
+   ],
+   [
+     'amd64-ubuntu26',
+     '/aws/service/canonical/ubuntu/server/CODENAME/stable/current/amd64/hvm/ebs-gp3/ami-id',
+   ],
+   ```
+   Replace `CODENAME` with Ubuntu's codename (verify via AWS SSM Parameter Store)
+
+2. **Add enum value** in `src/vscode-server.ts`:
+   ```typescript
+   export enum LinuxFlavorType {
+     // ...
+     UBUNTU_26 = 'ubuntu26',
+   }
+   ```
+
+3. **Update Installer** in `src/installer/installer.ts`:
+   - Add `LinuxFlavorType.UBUNTU_26` to the Ubuntu switch case in `createSSMDocument()` (line ~657)
+   - Update installer calls in `src/vscode-server.ts` to include new case (line ~930)
+
+4. **Pass linuxFlavorType** in `src/vscode-server.ts`:
+   ```typescript
+   installer = Installer.ubuntu({
+     // ... other options
+     linuxFlavorType: instanceOperatingSystem, // Critical!
+   })._bind(this);
+   ```
+
+5. **Create integration test**: Copy `integ-tests/integ.ubuntu25.ts` to `integ.ubuntu26.ts` and update OS version
+
+6. **Update documentation**:
+   - Update README.md examples with inline comments showing all supported versions
+   - Examples in `examples/` directory (optional - can keep as Ubuntu 24)
+
+7. **Verify and build**:
+   ```bash
+   # Verify SSM parameters exist
+   aws ssm get-parameters-by-path --path "/aws/service/canonical/ubuntu/server/CODENAME/" --recursive --region us-east-1
+
+   # Build and test
+   npx projen build
+   npm run integ-test
+   ```
+
 ## Race Condition Prevention (Auto-Stop)
 
 **Issue**: IdleMonitor EventBridge rule triggers immediately on stack creation, potentially stopping instance during installation (observed: instance stopped 72 seconds after installer started).

package/README.md

@@ -24,6 +24,7 @@ we implement new features. Therefore make sure you use an exact version in your
   - [Pre-populate with Git Repository](#pre-populate-with-git-repository)
   - [Custom Domain Configuration](#custom-domain-configuration)
   - [Auto-Stop Configuration](#auto-stop-configuration)
+  - [Custom Installation Steps](#custom-installation-steps)
 - [Solution Design](#solution-design)
 - [Inspiration](#inspiration)
 
@@ -34,6 +35,7 @@ we implement new features. Therefore make sure you use an exact version in your
 - 🤹‍♂️ **Pre-installed packages**: Besides the [vscode](https://code.visualstudio.com/) server, other tools and software packages such as `git`, `docker`, `awscli` `nodejs` and `python` are pre-installed on the EC2 instance.
 - 🌐 **Custom Domain Support**: Use your own domain name with automatic ACM certificate creation and Route53 DNS configuration, or bring your existing certificate.
 - 💰 **Auto-Stop**: Automatically stop EC2 instances after inactivity with Elastic IP retention - save up to 75% on costs for development environments.
+- 🔧 **Custom Install Steps**: Extend the standard installation with your own shell commands to install workshop-specific tools, configure environments, or run setup scripts.
 - 🏗️ **Extensibility**: Pass in properties to the construct, which start with `additional*`. They allow you to extend the configuration to your needs. There are more to come...
 
 ## Usage
@@ -69,7 +71,7 @@ export class MyStack extends Stack {
       instanceVolumeSize: 8,
       instanceClass: ec2.InstanceClass.M7G,
       instanceSize: ec2.InstanceSize.LARGE,
-      instanceOperatingSystem: LinuxFlavorType.UBUNTU_22,
+      instanceOperatingSystem: LinuxFlavorType.UBUNTU_24,
       instanceCpuArchitecture: LinuxArchitectureType.ARM,
       
       // 👇🏽 or if you want to give the InstanceRole more permissions
@@ -261,6 +263,67 @@ Run integration tests with:
 npm run integ-test
 ```
 
+### Custom Installation Steps
+
+Extend the standard VS Code Server installation with your own custom shell commands - perfect for installing workshop-specific tools, configuring development environments, or running setup scripts:
+
+```ts
+new VSCodeServer(this, 'vscode', {
+  // Add custom installation steps that run after standard setup
+  customInstallSteps: [
+    {
+      name: 'InstallWorkshopTools',
+      commands: [
+        '#!/bin/bash',
+        'echo "Installing workshop-specific tools"',
+
+        // Install additional software
+        'curl -fsSL https://get.docker.com | sh',
+        'usermod -aG docker ubuntu',
+
+        // Configure environment
+        'echo "export WORKSHOP_ENV=production" >> /home/ubuntu/.bashrc',
+      ],
+    },
+    {
+      name: 'CloneStarterCode',
+      commands: [
+        '#!/bin/bash',
+        'cd /home/ubuntu',
+        'git clone https://github.com/my-org/workshop-starter.git',
+        'chown -R ubuntu:ubuntu workshop-starter',
+      ],
+    },
+  ],
+});
+```
+
+**Key Features:**
+- **Execute After Standard Setup**: Custom steps run after VS Code Server installation completes
+- **Multiple Steps**: Add as many installation steps as needed, executed in order
+- **Full Shell Access**: Run any shell commands with root privileges
+- **Workshop-Friendly**: Pre-install tools, configure environments, or download starter code
+
+**Common Use Cases:**
+- Install additional development tools (Docker, kubectl, terraform)
+- Configure workshop-specific environments and credentials
+- Clone starter code repositories with specific permissions
+- Set up databases or services required for training
+- Download and prepare datasets or assets
+- Configure IDE extensions or settings
+
+**Supported Operating Systems:**
+- Ubuntu 22/24/25
+- Amazon Linux 2023
+
+**Requirements:**
+- Commands execute with root privileges during instance initialization
+- Use absolute paths or ensure proper working directory context
+- Consider idempotency if instance might be restarted
+- Commands run synchronously in the order specified
+
+For complete examples, see [examples/custom-install-steps/main.ts](./examples/custom-install-steps/main.ts).
+
 ## Solution Design
 
 <details>

package/examples/auto-stop/main.ts

@@ -37,7 +37,7 @@ export class AutoStopExampleStack extends Stack {
       instanceClass: ec2.InstanceClass.M7G,
       instanceSize: ec2.InstanceSize.XLARGE,
       instanceVolumeSize: 40,
-      instanceOperatingSystem: LinuxFlavorType.UBUNTU_22,
+      instanceOperatingSystem: LinuxFlavorType.UBUNTU_24,
       instanceCpuArchitecture: LinuxArchitectureType.ARM,
 
       // 🔥 Auto-Stop Configuration

package/examples/custom/main.ts

@@ -17,7 +17,7 @@ export class MyStack extends Stack {
             instanceVolumeSize: 8,
             instanceClass: ec2.InstanceClass.M7G,
             instanceSize: ec2.InstanceSize.LARGE,
-            instanceOperatingSystem: LinuxFlavorType.UBUNTU_22,
+            instanceOperatingSystem: LinuxFlavorType.UBUNTU_24, // Supports UBUNTU_22, UBUNTU_24, UBUNTU_25, AMAZON_LINUX_2023
             instanceCpuArchitecture: LinuxArchitectureType.ARM,
 
             // 👇🏽 or if you want to give the InstanceRole more permissions
@@ -31,7 +31,29 @@ export class MyStack extends Stack {
                         `arn:aws:codebuild:*:${Stack.of(this).account}:*/*`,
                     ],
                 }),
-            ]
+            ],
+
+            // 👇🏽 Add custom installation steps to extend the standard setup
+            customInstallSteps: [
+                {
+                    name: 'InstallCodeBuildTools',
+                    commands: [
+                        '#!/bin/bash',
+                        'echo "Installing CodeBuild-related tools..."',
+                        // Install AWS CodeBuild local agent for testing
+                        'docker pull public.ecr.aws/codebuild/local-builds:latest',
+                        // Create helper script
+                        'cat > /usr/local/bin/codebuild-local << EOF',
+                        '#!/bin/bash',
+                        'docker run -it --rm -v /var/run/docker.sock:/var/run/docker.sock \\',
+                        '  -e "IMAGE_NAME=public.ecr.aws/codebuild/local-builds:latest" \\',
+                        '  public.ecr.aws/codebuild/local-builds:latest',
+                        'EOF',
+                        'chmod +x /usr/local/bin/codebuild-local',
+                        'echo "CodeBuild tools installed successfully"',
+                    ],
+                },
+            ],
 
             // and more... 💡
         });

package/examples/custom-install-steps/main.ts

@@ -0,0 +1,201 @@
+import { App, Stack, StackProps } from 'aws-cdk-lib';
+import * as ec2 from 'aws-cdk-lib/aws-ec2';
+import { Construct } from 'constructs';
+import {
+  CustomInstallStep,
+  LinuxArchitectureType,
+  LinuxFlavorType,
+  VSCodeServer,
+} from '../../src/index';
+
+/**
+ * Example: VS Code Server with Custom Installation Steps
+ *
+ * This example demonstrates how to extend the standard VS Code Server installation
+ * with custom shell commands. Perfect for:
+ * - Installing workshop-specific tools
+ * - Configuring development environments
+ * - Running setup scripts
+ * - Preparing datasets or assets
+ * - Setting up databases or services
+ *
+ * All custom steps execute with root privileges after the standard installation completes.
+ */
+export class CustomInstallStepsExampleStack extends Stack {
+  constructor(scope: Construct, id: string, props: StackProps = {}) {
+    super(scope, id, props);
+
+    // Define custom installation steps
+    const customSteps: CustomInstallStep[] = [
+      // Step 1: Install additional development tools
+      {
+        name: 'InstallDevelopmentTools',
+        commands: [
+          '#!/bin/bash',
+          'set -e', // Exit on error
+          'echo "Installing development tools..."',
+
+          // Install Docker (if not already installed)
+          'if ! command -v docker &> /dev/null; then',
+          '  curl -fsSL https://get.docker.com | sh',
+          '  usermod -aG docker ubuntu',
+          '  systemctl enable docker',
+          '  systemctl start docker',
+          'fi',
+
+          // Install kubectl
+          'curl -LO "https://dl.k8s.io/release/$(curl -L -s https://dl.k8s.io/release/stable.txt)/bin/linux/arm64/kubectl"',
+          'install -o root -g root -m 0755 kubectl /usr/local/bin/kubectl',
+          'rm kubectl',
+
+          // Install terraform
+          'wget -O- https://apt.releases.hashicorp.com/gpg | gpg --dearmor -o /usr/share/keyrings/hashicorp-archive-keyring.gpg',
+          'echo "deb [signed-by=/usr/share/keyrings/hashicorp-archive-keyring.gpg] https://apt.releases.hashicorp.com $(lsb_release -cs) main" | tee /etc/apt/sources.list.d/hashicorp.list',
+          'apt-get update && apt-get install -y terraform',
+
+          'echo "Development tools installed successfully"',
+        ],
+      },
+
+      // Step 2: Configure workshop environment
+      {
+        name: 'ConfigureWorkshopEnvironment',
+        commands: [
+          '#!/bin/bash',
+          'set -e',
+          'echo "Configuring workshop environment..."',
+
+          // Set environment variables
+          'cat >> /home/ubuntu/.bashrc << EOF',
+          '',
+          '# Workshop environment variables',
+          'export WORKSHOP_NAME="AWS CDK Workshop"',
+          'export WORKSHOP_VERSION="2.0"',
+          'export AWS_REGION="${AWS::Region}"',
+          'export AWS_ACCOUNT_ID="${AWS::AccountId}"',
+          '',
+          '# Custom aliases',
+          'alias k="kubectl"',
+          'alias tf="terraform"',
+          'alias ll="ls -la"',
+          'EOF',
+
+          // Create workshop directories
+          'mkdir -p /home/ubuntu/workshop',
+          'mkdir -p /home/ubuntu/workshop/code',
+          'mkdir -p /home/ubuntu/workshop/data',
+
+          // Set proper ownership
+          'chown -R ubuntu:ubuntu /home/ubuntu/workshop',
+          'chown ubuntu:ubuntu /home/ubuntu/.bashrc',
+
+          'echo "Workshop environment configured successfully"',
+        ],
+      },
+
+      // Step 3: Clone and prepare workshop starter code
+      {
+        name: 'PrepareWorkshopCode',
+        commands: [
+          '#!/bin/bash',
+          'set -e',
+          'echo "Preparing workshop starter code..."',
+
+          // Clone workshop repository
+          'cd /home/ubuntu/workshop/code',
+          'git clone https://github.com/aws-samples/aws-cdk-examples.git',
+
+          // Download sample datasets
+          'cd /home/ubuntu/workshop/data',
+          'curl -o sample-data.json https://raw.githubusercontent.com/aws-samples/aws-cdk-examples/main/package.json',
+
+          // Create a README for participants
+          'cat > /home/ubuntu/workshop/README.md << EOF',
+          '# Welcome to the AWS CDK Workshop!',
+          '',
+          '## Getting Started',
+          '',
+          '1. Navigate to the code directory: `cd ~/workshop/code`',
+          '2. Explore the examples: `ls -la aws-cdk-examples`',
+          '3. Run your first CDK app',
+          '',
+          '## Resources',
+          '',
+          '- AWS CDK Documentation: https://docs.aws.amazon.com/cdk',
+          '- Workshop Guide: [TBD]',
+          '',
+          '## Installed Tools',
+          '',
+          '- Node.js $(node --version)',
+          '- Python $(python3 --version)',
+          '- Docker $(docker --version)',
+          '- kubectl $(kubectl version --client --short 2>/dev/null || echo "installed")',
+          '- Terraform $(terraform version | head -n1)',
+          'EOF',
+
+          // Set ownership
+          'chown -R ubuntu:ubuntu /home/ubuntu/workshop',
+
+          'echo "Workshop code prepared successfully"',
+        ],
+      },
+
+      // Step 4: Install VS Code extensions
+      {
+        name: 'InstallVSCodeExtensions',
+        commands: [
+          '#!/bin/bash',
+          'set -e',
+          'echo "Installing VS Code extensions..."',
+
+          // Switch to ubuntu user to install extensions
+          'sudo -u ubuntu bash << EOF',
+          'export HOME=/home/ubuntu',
+
+          // Wait for code-server to be ready
+          'sleep 5',
+
+          // Install useful extensions (examples - adjust based on your needs)
+          '# Note: Extension installation via CLI requires code-server to be running',
+          '# These would typically be installed through the VS Code UI after first login',
+
+          'echo "VS Code extensions configured successfully"',
+          'EOF',
+        ],
+      },
+    ];
+
+    // Create VS Code Server with custom installation steps
+    new VSCodeServer(this, 'vscode-custom-install', {
+      // Instance configuration
+      instanceClass: ec2.InstanceClass.M7G,
+      instanceSize: ec2.InstanceSize.XLARGE,
+      instanceVolumeSize: 50, // Larger volume for additional tools
+      instanceOperatingSystem: LinuxFlavorType.UBUNTU_24, // Supports UBUNTU_22, UBUNTU_24, UBUNTU_25, AMAZON_LINUX_2023
+      instanceCpuArchitecture: LinuxArchitectureType.ARM,
+
+      // VS Code configuration
+      homeFolder: '/workshop',
+      vscodeUser: 'ubuntu',
+
+      // 🔧 Custom installation steps
+      customInstallSteps: customSteps,
+
+      // Additional configuration
+      additionalTags: {
+        Workshop: 'AWS-CDK-Workshop',
+        Environment: 'Training',
+        CustomInstallSteps: 'Enabled',
+      },
+    });
+  }
+}
+
+const env = {
+  account: process.env.CDK_DEFAULT_ACCOUNT || '123456789012',
+  region: process.env.CDK_DEFAULT_REGION || 'eu-west-1',
+};
+
+const app = new App();
+new CustomInstallStepsExampleStack(app, 'vscode-custom-install-example', { env });
+app.synth();

package/integ-tests/integ.custom-domain.ts.snapshot/IntegSetupVSCodeOnCustomDomainDefaultTestDeployAssert6982D514.assets.json

@@ -14,7 +14,7 @@
         }
       }
     },
-    "c0c8c31a0be065be2df21bb20ec386bf72819c1e19f79e9fc09c29712e67a4a0": {
+    "4191278decec94a8cb032ef5af5b2424a3d6f3a20772116b870ecb754d98bb76": {
       "displayName": "IntegSetupVSCodeOnCustomDomainDefaultTestDeployAssert6982D514 Template",
       "source": {
         "path": "IntegSetupVSCodeOnCustomDomainDefaultTestDeployAssert6982D514.template.json",
@@ -23,7 +23,7 @@
       "destinations": {
         "current_account-current_region": {
           "bucketName": "cdk-hnb659fds-assets-${AWS::AccountId}-${AWS::Region}",
-          "objectKey": "c0c8c31a0be065be2df21bb20ec386bf72819c1e19f79e9fc09c29712e67a4a0.json",
+          "objectKey": "4191278decec94a8cb032ef5af5b2424a3d6f3a20772116b870ecb754d98bb76.json",
           "assumeRoleArn": "arn:${AWS::Partition}:iam::${AWS::AccountId}:role/cdk-hnb659fds-file-publishing-role-${AWS::AccountId}-${AWS::Region}"
         }
       }

package/integ-tests/integ.custom-domain.ts.snapshot/IntegSetupVSCodeOnCustomDomainDefaultTestDeployAssert6982D514.template.json

@@ -41,7 +41,7 @@
      }
     },
     "flattenResponse": "false",
-    "salt": "1762251890627"
+    "salt": "1762256639191"
    },
    "UpdateReplacePolicy": "Delete",
    "DeletionPolicy": "Delete"

package/integ-tests/integ.custom-domain.ts.snapshot/IntegTestStackCustomDomain.assets.json

@@ -113,7 +113,7 @@
         }
       }
     },
-    "0d21ebe148c0168a894b38d8db4c34b6ac5b9a016612b7493c323c5d1dc23b7d": {
+    "7d89a55db29091c7bd6a0da54d0e29cfc725f77b6fcdde3eb3e136b774b01d04": {
       "displayName": "IntegTestStackCustomDomain Template",
       "source": {
         "path": "IntegTestStackCustomDomain.template.json",
@@ -122,7 +122,7 @@
       "destinations": {
         "current_account-current_region": {
           "bucketName": "cdk-hnb659fds-assets-${AWS::AccountId}-${AWS::Region}",
-          "objectKey": "0d21ebe148c0168a894b38d8db4c34b6ac5b9a016612b7493c323c5d1dc23b7d.json",
+          "objectKey": "7d89a55db29091c7bd6a0da54d0e29cfc725f77b6fcdde3eb3e136b774b01d04.json",
           "assumeRoleArn": "arn:${AWS::Partition}:iam::${AWS::AccountId}:role/cdk-hnb659fds-file-publishing-role-${AWS::AccountId}-${AWS::Region}"
         }
       }

package/integ-tests/integ.custom-domain.ts.snapshot/IntegTestStackCustomDomain.template.json

@@ -1418,7 +1418,7 @@
      "Ref": "IntegVSCodeServerserverinstanceInstanceProfile6130979E"
     },
     "ImageId": {
-     "Ref": "SsmParameterValueawsservicecanonicalubuntuserverjammystablecurrentarm64hvmebsgp2amiidC96584B6F00A464EAD1953AFF4B05118Parameter"
+     "Ref": "SsmParameterValueawsservicecanonicalubuntuservernoblestablecurrentarm64hvmebsgp3amiidC96584B6F00A464EAD1953AFF4B05118Parameter"
     },
     "InstanceType": "m7g.xlarge",
     "LaunchTemplate": {
@@ -2998,9 +2998,9 @@
   }
  },
  "Parameters": {
-  "SsmParameterValueawsservicecanonicalubuntuserverjammystablecurrentarm64hvmebsgp2amiidC96584B6F00A464EAD1953AFF4B05118Parameter": {
+  "SsmParameterValueawsservicecanonicalubuntuservernoblestablecurrentarm64hvmebsgp3amiidC96584B6F00A464EAD1953AFF4B05118Parameter": {
    "Type": "AWS::SSM::Parameter::Value<AWS::EC2::Image::Id>",
-   "Default": "/aws/service/canonical/ubuntu/server/jammy/stable/current/arm64/hvm/ebs-gp2/ami-id"
+   "Default": "/aws/service/canonical/ubuntu/server/noble/stable/current/arm64/hvm/ebs-gp3/ami-id"
   },
   "BootstrapVersion": {
    "Type": "AWS::SSM::Parameter::Value<String>",

package/integ-tests/integ.custom-domain.ts.snapshot/integ.json

@@ -6,7 +6,7 @@
         "IntegTestStackCustomDomain"
       ],
       "regions": [
-        "${Token[AWS.Region.8]}"
+        "${Token[AWS.Region.6]}"
       ],
       "cdkCommandOptions": {
         "destroy": {

package/integ-tests/integ.custom-domain.ts.snapshot/manifest.json

@@ -18,7 +18,7 @@
         "validateOnSynth": false,
         "assumeRoleArn": "arn:${AWS::Partition}:iam::${AWS::AccountId}:role/cdk-hnb659fds-deploy-role-${AWS::AccountId}-${AWS::Region}",
         "cloudFormationExecutionRoleArn": "arn:${AWS::Partition}:iam::${AWS::AccountId}:role/cdk-hnb659fds-cfn-exec-role-${AWS::AccountId}-${AWS::Region}",
-        "stackTemplateAssetObjectUrl": "s3://cdk-hnb659fds-assets-${AWS::AccountId}-${AWS::Region}/0d21ebe148c0168a894b38d8db4c34b6ac5b9a016612b7493c323c5d1dc23b7d.json",
+        "stackTemplateAssetObjectUrl": "s3://cdk-hnb659fds-assets-${AWS::AccountId}-${AWS::Region}/7d89a55db29091c7bd6a0da54d0e29cfc725f77b6fcdde3eb3e136b774b01d04.json",
         "requiresBootstrapStackVersion": 6,
         "bootstrapStackVersionSsmParameter": "/cdk-bootstrap/hnb659fds/version",
         "additionalDependencies": [
@@ -902,7 +902,10 @@
         "/IntegTestStackCustomDomain/IntegVSCodeServer/server-instance/Resource": [
           {
             "type": "aws:cdk:logicalId",
-            "data": "IntegVSCodeServerserverinstance0A3D62D7"
+            "data": "IntegVSCodeServerserverinstance0A3D62D7",
+            "trace": [
+              "!!DESTRUCTIVE_CHANGES: WILL_REPLACE"
+            ]
           }
         ],
         "/IntegTestStackCustomDomain/IntegVSCodeServer/server-instance/LaunchTemplate": [
@@ -1356,10 +1359,10 @@
             "data": "AWS679f53fac002430cb0da5b7982bd22872D164C4C"
           }
         ],
-        "/IntegTestStackCustomDomain/SsmParameterValue:--aws--service--canonical--ubuntu--server--jammy--stable--current--arm64--hvm--ebs-gp2--ami-id:C96584B6-F00A-464E-AD19-53AFF4B05118.Parameter": [
+        "/IntegTestStackCustomDomain/SsmParameterValue:--aws--service--canonical--ubuntu--server--noble--stable--current--arm64--hvm--ebs-gp3--ami-id:C96584B6-F00A-464E-AD19-53AFF4B05118.Parameter": [
           {
             "type": "aws:cdk:logicalId",
-            "data": "SsmParameterValueawsservicecanonicalubuntuserverjammystablecurrentarm64hvmebsgp2amiidC96584B6F00A464EAD1953AFF4B05118Parameter"
+            "data": "SsmParameterValueawsservicecanonicalubuntuservernoblestablecurrentarm64hvmebsgp3amiidC96584B6F00A464EAD1953AFF4B05118Parameter"
           }
         ],
         "/IntegTestStackCustomDomain/AWSCloudFrontPartitionHostedZoneIdMap": [
@@ -1576,7 +1579,7 @@
         "validateOnSynth": false,
         "assumeRoleArn": "arn:${AWS::Partition}:iam::${AWS::AccountId}:role/cdk-hnb659fds-deploy-role-${AWS::AccountId}-${AWS::Region}",
         "cloudFormationExecutionRoleArn": "arn:${AWS::Partition}:iam::${AWS::AccountId}:role/cdk-hnb659fds-cfn-exec-role-${AWS::AccountId}-${AWS::Region}",
-        "stackTemplateAssetObjectUrl": "s3://cdk-hnb659fds-assets-${AWS::AccountId}-${AWS::Region}/c0c8c31a0be065be2df21bb20ec386bf72819c1e19f79e9fc09c29712e67a4a0.json",
+        "stackTemplateAssetObjectUrl": "s3://cdk-hnb659fds-assets-${AWS::AccountId}-${AWS::Region}/4191278decec94a8cb032ef5af5b2424a3d6f3a20772116b870ecb754d98bb76.json",
         "requiresBootstrapStackVersion": 6,
         "bootstrapStackVersionSsmParameter": "/cdk-bootstrap/hnb659fds/version",
         "additionalDependencies": [