npm - aws-delivlib - Versions diffs - 13.5.17 → 13.5.18 - Mend

aws-delivlib 13.5.17 → 13.5.18

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Files changed (6) hide show

package/cdk.out/manifest.json +392 -392
package/cdk.out/tree.json +391 -391
package/lib/custom-resource-handlers/src/certificate-signing-request.tsbuildinfo +1 -1
package/lib/custom-resource-handlers/src/pgp-secret.tsbuildinfo +1 -1
package/lib/custom-resource-handlers/src/private-key.tsbuildinfo +1 -1
package/package.json +11 -11

package/cdk.out/manifest.json CHANGED Viewed

@@ -44,8 +44,8 @@
             "type": "aws:cdk:logicalId",
             "data": "CodeCommitPipelineBuildPipelineArtifactsBucketEncryptionKey05A62A83",
             "trace": [
-              "new Key (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-kms/lib/key.js:273:26)",
-              "new Pipeline (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-codepipeline/lib/pipeline.js:200:33)",
+              "new Key (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-kms/lib/key.js:296:26)",
+              "new Pipeline (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-codepipeline/lib/pipeline.js:160:33)",
               "new Pipeline (/home/runner/work/aws-delivlib/aws-delivlib/lib/pipeline.js:50:25)",
               "new TestStack (/home/runner/work/aws-delivlib/aws-delivlib/lib/__tests__/test-stack.js:43:26)",
               "Object.<anonymous> (/home/runner/work/aws-delivlib/aws-delivlib/lib/__tests__/integ.delivlib.js:29:1)",
@@ -63,8 +63,8 @@
             "type": "aws:cdk:logicalId",
             "data": "CodeCommitPipelineBuildPipelineArtifactsBucketEncryptionKeyAliasB1396C5D",
             "trace": [
-              "new Alias (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-kms/lib/alias.js:120:26)",
-              "new Pipeline (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-codepipeline/lib/pipeline.js:207:17)",
+              "new Alias (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-kms/lib/alias.js:75:26)",
+              "new Pipeline (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-codepipeline/lib/pipeline.js:167:17)",
               "new Pipeline (/home/runner/work/aws-delivlib/aws-delivlib/lib/pipeline.js:50:25)",
               "new TestStack (/home/runner/work/aws-delivlib/aws-delivlib/lib/__tests__/test-stack.js:43:26)",
               "Object.<anonymous> (/home/runner/work/aws-delivlib/aws-delivlib/lib/__tests__/integ.delivlib.js:29:1)",
@@ -82,8 +82,8 @@
             "type": "aws:cdk:logicalId",
             "data": "CodeCommitPipelineBuildPipelineArtifactsBucketED2813B3",
             "trace": [
-              "new Bucket (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-s3/lib/bucket.js:634:26)",
-              "new Pipeline (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-codepipeline/lib/pipeline.js:213:27)",
+              "new Bucket (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-s3/lib/bucket.js:595:26)",
+              "new Pipeline (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-codepipeline/lib/pipeline.js:173:27)",
               "new Pipeline (/home/runner/work/aws-delivlib/aws-delivlib/lib/pipeline.js:50:25)",
               "new TestStack (/home/runner/work/aws-delivlib/aws-delivlib/lib/__tests__/test-stack.js:43:26)",
               "Object.<anonymous> (/home/runner/work/aws-delivlib/aws-delivlib/lib/__tests__/integ.delivlib.js:29:1)",
@@ -101,11 +101,11 @@
             "type": "aws:cdk:logicalId",
             "data": "CodeCommitPipelineBuildPipelineArtifactsBucketPolicy97EF6204",
             "trace": [
-              "new BucketPolicy (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-s3/lib/bucket-policy.js:45:25)",
-              "Bucket.addToResourcePolicy (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-s3/lib/bucket.js:152:27)",
-              "Bucket.enforceSSLStatement (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-s3/lib/bucket.js:866:14)",
-              "new Bucket (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-s3/lib/bucket.js:670:18)",
-              "new Pipeline (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-codepipeline/lib/pipeline.js:213:27)",
+              "new BucketPolicy (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-s3/lib/bucket-policy.js:37:25)",
+              "Bucket.addToResourcePolicy (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-s3/lib/bucket.js:148:27)",
+              "Bucket.enforceSSLStatement (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-s3/lib/bucket.js:816:14)",
+              "new Bucket (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-s3/lib/bucket.js:631:18)",
+              "new Pipeline (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-codepipeline/lib/pipeline.js:173:27)",
               "new Pipeline (/home/runner/work/aws-delivlib/aws-delivlib/lib/pipeline.js:50:25)",
               "new TestStack (/home/runner/work/aws-delivlib/aws-delivlib/lib/__tests__/test-stack.js:43:26)",
               "Object.<anonymous> (/home/runner/work/aws-delivlib/aws-delivlib/lib/__tests__/integ.delivlib.js:29:1)",
@@ -123,8 +123,8 @@
             "type": "aws:cdk:logicalId",
             "data": "CodeCommitPipelineBuildPipelineRole1843599A",
             "trace": [
-              "new Role (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-iam/lib/role.js:75:22)",
-              "new Pipeline (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-codepipeline/lib/pipeline.js:224:35)",
+              "new Role (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-iam/lib/role.js:50:22)",
+              "new Pipeline (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-codepipeline/lib/pipeline.js:184:35)",
               "new Pipeline (/home/runner/work/aws-delivlib/aws-delivlib/lib/pipeline.js:50:25)",
               "new TestStack (/home/runner/work/aws-delivlib/aws-delivlib/lib/__tests__/test-stack.js:43:26)",
               "Object.<anonymous> (/home/runner/work/aws-delivlib/aws-delivlib/lib/__tests__/integ.delivlib.js:29:1)",
@@ -142,13 +142,13 @@
             "type": "aws:cdk:logicalId",
             "data": "CodeCommitPipelineBuildPipelineRoleDefaultPolicy94C30F44",
             "trace": [
-              "new Policy (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-iam/lib/policy.js:58:26)",
-              "Role.addToPrincipalPolicy (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-iam/lib/role.js:214:34)",
-              "Function.addToPrincipal (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-iam/lib/grant.js:93:65)",
-              "Function.addToPrincipalOrResource (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-iam/lib/grant.js:47:30)",
-              "Bucket.grant (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-s3/lib/bucket.js:486:31)",
-              "Bucket.grantReadWrite (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-s3/lib/bucket.js:363:21)",
-              "new Pipeline (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-codepipeline/lib/pipeline.js:237:29)",
+              "new Policy (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-iam/lib/policy.js:50:26)",
+              "Role.addToPrincipalPolicy (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-iam/lib/role.js:199:34)",
+              "Function.addToPrincipal (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-iam/lib/grant.js:87:65)",
+              "Function.addToPrincipalOrResource (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-iam/lib/grant.js:43:30)",
+              "Bucket.grant (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-s3/lib/bucket.js:431:31)",
+              "Bucket.grantReadWrite (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-s3/lib/bucket.js:306:21)",
+              "new Pipeline (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-codepipeline/lib/pipeline.js:197:29)",
               "new Pipeline (/home/runner/work/aws-delivlib/aws-delivlib/lib/pipeline.js:50:25)",
               "new TestStack (/home/runner/work/aws-delivlib/aws-delivlib/lib/__tests__/test-stack.js:43:26)",
               "Object.<anonymous> (/home/runner/work/aws-delivlib/aws-delivlib/lib/__tests__/integ.delivlib.js:29:1)",
@@ -166,7 +166,7 @@
             "type": "aws:cdk:logicalId",
             "data": "CodeCommitPipelineBuildPipeline656B8CCB",
             "trace": [
-              "new Pipeline (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-codepipeline/lib/pipeline.js:227:30)",
+              "new Pipeline (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-codepipeline/lib/pipeline.js:187:30)",
               "new Pipeline (/home/runner/work/aws-delivlib/aws-delivlib/lib/pipeline.js:50:25)",
               "new TestStack (/home/runner/work/aws-delivlib/aws-delivlib/lib/__tests__/test-stack.js:43:26)",
               "Object.<anonymous> (/home/runner/work/aws-delivlib/aws-delivlib/lib/__tests__/integ.delivlib.js:29:1)",
@@ -184,10 +184,10 @@
             "type": "aws:cdk:logicalId",
             "data": "CodeCommitPipelineBuildPipelineSourcePullWebhookResource0898F523",
             "trace": [
-              "GitHubSourceAction.bound (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-codepipeline-actions/lib/github/source-action.js:68:13)",
-              "GitHubSourceAction.bind (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-codepipeline/lib/action.js:108:21)",
+              "GitHubSourceAction.bound (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-codepipeline-actions/lib/github/source-action.js:52:13)",
+              "GitHubSourceAction.bind (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-codepipeline/lib/action.js:81:21)",
               "RichAction.bind (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-codepipeline/lib/private/rich-action.js:25:28)",
-              "Pipeline._attachActionToPipeline (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-codepipeline/lib/pipeline.js:359:41)",
+              "Pipeline._attachActionToPipeline (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-codepipeline/lib/pipeline.js:309:41)",
               "Stage.attachActionToPipeline (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-codepipeline/lib/private/stage.js:124:31)",
               "Stage.addAction (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-codepipeline/lib/private/stage.js:71:33)",
               "WritableGitHubRepo.createSourceStage (/home/runner/work/aws-delivlib/aws-delivlib/lib/repo.js:59:15)",
@@ -208,9 +208,9 @@
             "type": "aws:cdk:logicalId",
             "data": "CodeCommitPipelineBuildPipelineBuildCodePipelineActionRoleF95CDA16",
             "trace": [
-              "new Role (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-iam/lib/role.js:75:22)",
-              "Pipeline.getRoleForAction (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-codepipeline/lib/pipeline.js:511:26)",
-              "Pipeline._attachActionToPipeline (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-codepipeline/lib/pipeline.js:355:33)",
+              "new Role (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-iam/lib/role.js:50:22)",
+              "Pipeline.getRoleForAction (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-codepipeline/lib/pipeline.js:459:26)",
+              "Pipeline._attachActionToPipeline (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-codepipeline/lib/pipeline.js:305:33)",
               "Stage.attachActionToPipeline (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-codepipeline/lib/private/stage.js:124:31)",
               "Stage.addAction (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-codepipeline/lib/private/stage.js:71:33)",
               "new Pipeline (/home/runner/work/aws-delivlib/aws-delivlib/lib/pipeline.js:71:20)",
@@ -230,13 +230,13 @@
             "type": "aws:cdk:logicalId",
             "data": "CodeCommitPipelineBuildPipelineBuildCodePipelineActionRoleDefaultPolicy7735849D",
             "trace": [
-              "new Policy (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-iam/lib/policy.js:58:26)",
-              "Role.addToPrincipalPolicy (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-iam/lib/role.js:214:34)",
-              "Role.addToPolicy (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-iam/lib/role.js:227:21)",
-              "CodeBuildAction.bound (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-codepipeline-actions/lib/codebuild/build-action.js:83:22)",
-              "CodeBuildAction.bind (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-codepipeline/lib/action.js:108:21)",
+              "new Policy (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-iam/lib/policy.js:50:26)",
+              "Role.addToPrincipalPolicy (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-iam/lib/role.js:199:34)",
+              "Role.addToPolicy (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-iam/lib/role.js:207:21)",
+              "CodeBuildAction.bound (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-codepipeline-actions/lib/codebuild/build-action.js:78:22)",
+              "CodeBuildAction.bind (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-codepipeline/lib/action.js:81:21)",
               "RichAction.bind (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-codepipeline/lib/private/rich-action.js:25:28)",
-              "Pipeline._attachActionToPipeline (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-codepipeline/lib/pipeline.js:359:41)",
+              "Pipeline._attachActionToPipeline (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-codepipeline/lib/pipeline.js:309:41)",
               "Stage.attachActionToPipeline (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-codepipeline/lib/private/stage.js:124:31)",
               "Stage.addAction (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-codepipeline/lib/private/stage.js:71:33)",
               "new Pipeline (/home/runner/work/aws-delivlib/aws-delivlib/lib/pipeline.js:71:20)",
@@ -256,9 +256,9 @@
             "type": "aws:cdk:logicalId",
             "data": "CodeCommitPipelineBuildPipelineTestTestHelloLinuxCodePipelineActionRole8FAC0642",
             "trace": [
-              "new Role (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-iam/lib/role.js:75:22)",
-              "Pipeline.getRoleForAction (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-codepipeline/lib/pipeline.js:511:26)",
-              "Pipeline._attachActionToPipeline (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-codepipeline/lib/pipeline.js:355:33)",
+              "new Role (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-iam/lib/role.js:50:22)",
+              "Pipeline.getRoleForAction (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-codepipeline/lib/pipeline.js:459:26)",
+              "Pipeline._attachActionToPipeline (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-codepipeline/lib/pipeline.js:305:33)",
               "Stage.attachActionToPipeline (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-codepipeline/lib/private/stage.js:124:31)",
               "Stage.addAction (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-codepipeline/lib/private/stage.js:71:33)",
               "Shellable.addToPipeline (/home/runner/work/aws-delivlib/aws-delivlib/lib/shellable.js:116:15)",
@@ -280,13 +280,13 @@
             "type": "aws:cdk:logicalId",
             "data": "CodeCommitPipelineBuildPipelineTestTestHelloLinuxCodePipelineActionRoleDefaultPolicyDD449768",
             "trace": [
-              "new Policy (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-iam/lib/policy.js:58:26)",
-              "Role.addToPrincipalPolicy (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-iam/lib/role.js:214:34)",
-              "Role.addToPolicy (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-iam/lib/role.js:227:21)",
-              "CodeBuildAction.bound (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-codepipeline-actions/lib/codebuild/build-action.js:83:22)",
-              "CodeBuildAction.bind (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-codepipeline/lib/action.js:108:21)",
+              "new Policy (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-iam/lib/policy.js:50:26)",
+              "Role.addToPrincipalPolicy (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-iam/lib/role.js:199:34)",
+              "Role.addToPolicy (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-iam/lib/role.js:207:21)",
+              "CodeBuildAction.bound (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-codepipeline-actions/lib/codebuild/build-action.js:78:22)",
+              "CodeBuildAction.bind (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-codepipeline/lib/action.js:81:21)",
               "RichAction.bind (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-codepipeline/lib/private/rich-action.js:25:28)",
-              "Pipeline._attachActionToPipeline (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-codepipeline/lib/pipeline.js:359:41)",
+              "Pipeline._attachActionToPipeline (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-codepipeline/lib/pipeline.js:309:41)",
               "Stage.attachActionToPipeline (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-codepipeline/lib/private/stage.js:124:31)",
               "Stage.addAction (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-codepipeline/lib/private/stage.js:71:33)",
               "Shellable.addToPipeline (/home/runner/work/aws-delivlib/aws-delivlib/lib/shellable.js:116:15)",
@@ -308,9 +308,9 @@
             "type": "aws:cdk:logicalId",
             "data": "CodeCommitPipelineBuildPipelineTestTestHelloWindowsCodePipelineActionRole9316936E",
             "trace": [
-              "new Role (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-iam/lib/role.js:75:22)",
-              "Pipeline.getRoleForAction (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-codepipeline/lib/pipeline.js:511:26)",
-              "Pipeline._attachActionToPipeline (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-codepipeline/lib/pipeline.js:355:33)",
+              "new Role (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-iam/lib/role.js:50:22)",
+              "Pipeline.getRoleForAction (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-codepipeline/lib/pipeline.js:459:26)",
+              "Pipeline._attachActionToPipeline (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-codepipeline/lib/pipeline.js:305:33)",
               "Stage.attachActionToPipeline (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-codepipeline/lib/private/stage.js:124:31)",
               "Stage.addAction (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-codepipeline/lib/private/stage.js:71:33)",
               "Shellable.addToPipeline (/home/runner/work/aws-delivlib/aws-delivlib/lib/shellable.js:116:15)",
@@ -332,13 +332,13 @@
             "type": "aws:cdk:logicalId",
             "data": "CodeCommitPipelineBuildPipelineTestTestHelloWindowsCodePipelineActionRoleDefaultPolicyFC7988F8",
             "trace": [
-              "new Policy (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-iam/lib/policy.js:58:26)",
-              "Role.addToPrincipalPolicy (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-iam/lib/role.js:214:34)",
-              "Role.addToPolicy (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-iam/lib/role.js:227:21)",
-              "CodeBuildAction.bound (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-codepipeline-actions/lib/codebuild/build-action.js:83:22)",
-              "CodeBuildAction.bind (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-codepipeline/lib/action.js:108:21)",
+              "new Policy (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-iam/lib/policy.js:50:26)",
+              "Role.addToPrincipalPolicy (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-iam/lib/role.js:199:34)",
+              "Role.addToPolicy (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-iam/lib/role.js:207:21)",
+              "CodeBuildAction.bound (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-codepipeline-actions/lib/codebuild/build-action.js:78:22)",
+              "CodeBuildAction.bind (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-codepipeline/lib/action.js:81:21)",
               "RichAction.bind (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-codepipeline/lib/private/rich-action.js:25:28)",
-              "Pipeline._attachActionToPipeline (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-codepipeline/lib/pipeline.js:359:41)",
+              "Pipeline._attachActionToPipeline (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-codepipeline/lib/pipeline.js:309:41)",
               "Stage.attachActionToPipeline (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-codepipeline/lib/private/stage.js:124:31)",
               "Stage.addAction (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-codepipeline/lib/private/stage.js:71:33)",
               "Shellable.addToPipeline (/home/runner/work/aws-delivlib/aws-delivlib/lib/shellable.js:116:15)",
@@ -360,9 +360,9 @@
             "type": "aws:cdk:logicalId",
             "data": "CodeCommitPipelineBuildPipelineTestTestAssumeRoleCodePipelineActionRole8A7F2D7D",
             "trace": [
-              "new Role (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-iam/lib/role.js:75:22)",
-              "Pipeline.getRoleForAction (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-codepipeline/lib/pipeline.js:511:26)",
-              "Pipeline._attachActionToPipeline (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-codepipeline/lib/pipeline.js:355:33)",
+              "new Role (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-iam/lib/role.js:50:22)",
+              "Pipeline.getRoleForAction (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-codepipeline/lib/pipeline.js:459:26)",
+              "Pipeline._attachActionToPipeline (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-codepipeline/lib/pipeline.js:305:33)",
               "Stage.attachActionToPipeline (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-codepipeline/lib/private/stage.js:124:31)",
               "Stage.addAction (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-codepipeline/lib/private/stage.js:71:33)",
               "Shellable.addToPipeline (/home/runner/work/aws-delivlib/aws-delivlib/lib/shellable.js:116:15)",
@@ -384,13 +384,13 @@
             "type": "aws:cdk:logicalId",
             "data": "CodeCommitPipelineBuildPipelineTestTestAssumeRoleCodePipelineActionRoleDefaultPolicy22EE0A3D",
             "trace": [
-              "new Policy (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-iam/lib/policy.js:58:26)",
-              "Role.addToPrincipalPolicy (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-iam/lib/role.js:214:34)",
-              "Role.addToPolicy (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-iam/lib/role.js:227:21)",
-              "CodeBuildAction.bound (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-codepipeline-actions/lib/codebuild/build-action.js:83:22)",
-              "CodeBuildAction.bind (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-codepipeline/lib/action.js:108:21)",
+              "new Policy (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-iam/lib/policy.js:50:26)",
+              "Role.addToPrincipalPolicy (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-iam/lib/role.js:199:34)",
+              "Role.addToPolicy (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-iam/lib/role.js:207:21)",
+              "CodeBuildAction.bound (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-codepipeline-actions/lib/codebuild/build-action.js:78:22)",
+              "CodeBuildAction.bind (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-codepipeline/lib/action.js:81:21)",
               "RichAction.bind (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-codepipeline/lib/private/rich-action.js:25:28)",
-              "Pipeline._attachActionToPipeline (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-codepipeline/lib/pipeline.js:359:41)",
+              "Pipeline._attachActionToPipeline (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-codepipeline/lib/pipeline.js:309:41)",
               "Stage.attachActionToPipeline (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-codepipeline/lib/private/stage.js:124:31)",
               "Stage.addAction (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-codepipeline/lib/private/stage.js:71:33)",
               "Shellable.addToPipeline (/home/runner/work/aws-delivlib/aws-delivlib/lib/shellable.js:116:15)",
@@ -412,9 +412,9 @@
             "type": "aws:cdk:logicalId",
             "data": "CodeCommitPipelineBuildPipelineTestActionGenerateTwoArtifactsCodePipelineActionRoleD657FD04",
             "trace": [
-              "new Role (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-iam/lib/role.js:75:22)",
-              "Pipeline.getRoleForAction (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-codepipeline/lib/pipeline.js:511:26)",
-              "Pipeline._attachActionToPipeline (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-codepipeline/lib/pipeline.js:355:33)",
+              "new Role (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-iam/lib/role.js:50:22)",
+              "Pipeline.getRoleForAction (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-codepipeline/lib/pipeline.js:459:26)",
+              "Pipeline._attachActionToPipeline (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-codepipeline/lib/pipeline.js:305:33)",
               "Stage.attachActionToPipeline (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-codepipeline/lib/private/stage.js:124:31)",
               "Stage.addAction (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-codepipeline/lib/private/stage.js:71:33)",
               "Shellable.addToPipeline (/home/runner/work/aws-delivlib/aws-delivlib/lib/shellable.js:116:15)",
@@ -435,13 +435,13 @@
             "type": "aws:cdk:logicalId",
             "data": "CodeCommitPipelineBuildPipelineTestActionGenerateTwoArtifactsCodePipelineActionRoleDefaultPolicy23313445",
             "trace": [
-              "new Policy (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-iam/lib/policy.js:58:26)",
-              "Role.addToPrincipalPolicy (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-iam/lib/role.js:214:34)",
-              "Role.addToPolicy (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-iam/lib/role.js:227:21)",
-              "CodeBuildAction.bound (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-codepipeline-actions/lib/codebuild/build-action.js:83:22)",
-              "CodeBuildAction.bind (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-codepipeline/lib/action.js:108:21)",
+              "new Policy (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-iam/lib/policy.js:50:26)",
+              "Role.addToPrincipalPolicy (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-iam/lib/role.js:199:34)",
+              "Role.addToPolicy (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-iam/lib/role.js:207:21)",
+              "CodeBuildAction.bound (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-codepipeline-actions/lib/codebuild/build-action.js:78:22)",
+              "CodeBuildAction.bind (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-codepipeline/lib/action.js:81:21)",
               "RichAction.bind (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-codepipeline/lib/private/rich-action.js:25:28)",
-              "Pipeline._attachActionToPipeline (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-codepipeline/lib/pipeline.js:359:41)",
+              "Pipeline._attachActionToPipeline (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-codepipeline/lib/pipeline.js:309:41)",
               "Stage.attachActionToPipeline (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-codepipeline/lib/private/stage.js:124:31)",
               "Stage.addAction (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-codepipeline/lib/private/stage.js:71:33)",
               "Shellable.addToPipeline (/home/runner/work/aws-delivlib/aws-delivlib/lib/shellable.js:116:15)",
@@ -462,9 +462,9 @@
             "type": "aws:cdk:logicalId",
             "data": "CodeCommitPipelineBuildPipelinePublishNpmPublishCodePipelineActionRoleCAA948F0",
             "trace": [
-              "new Role (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-iam/lib/role.js:75:22)",
-              "Pipeline.getRoleForAction (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-codepipeline/lib/pipeline.js:511:26)",
-              "Pipeline._attachActionToPipeline (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-codepipeline/lib/pipeline.js:355:33)",
+              "new Role (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-iam/lib/role.js:50:22)",
+              "Pipeline.getRoleForAction (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-codepipeline/lib/pipeline.js:459:26)",
+              "Pipeline._attachActionToPipeline (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-codepipeline/lib/pipeline.js:305:33)",
               "Stage.attachActionToPipeline (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-codepipeline/lib/private/stage.js:124:31)",
               "Stage.addAction (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-codepipeline/lib/private/stage.js:71:33)",
               "PublishToNpmProject.addToPipeline (/home/runner/work/aws-delivlib/aws-delivlib/lib/publishing.js:106:15)",
@@ -486,13 +486,13 @@
             "type": "aws:cdk:logicalId",
             "data": "CodeCommitPipelineBuildPipelinePublishNpmPublishCodePipelineActionRoleDefaultPolicyA1E1E060",
             "trace": [
-              "new Policy (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-iam/lib/policy.js:58:26)",
-              "Role.addToPrincipalPolicy (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-iam/lib/role.js:214:34)",
-              "Role.addToPolicy (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-iam/lib/role.js:227:21)",
-              "CodeBuildAction.bound (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-codepipeline-actions/lib/codebuild/build-action.js:83:22)",
-              "CodeBuildAction.bind (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-codepipeline/lib/action.js:108:21)",
+              "new Policy (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-iam/lib/policy.js:50:26)",
+              "Role.addToPrincipalPolicy (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-iam/lib/role.js:199:34)",
+              "Role.addToPolicy (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-iam/lib/role.js:207:21)",
+              "CodeBuildAction.bound (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-codepipeline-actions/lib/codebuild/build-action.js:78:22)",
+              "CodeBuildAction.bind (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-codepipeline/lib/action.js:81:21)",
               "RichAction.bind (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-codepipeline/lib/private/rich-action.js:25:28)",
-              "Pipeline._attachActionToPipeline (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-codepipeline/lib/pipeline.js:359:41)",
+              "Pipeline._attachActionToPipeline (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-codepipeline/lib/pipeline.js:309:41)",
               "Stage.attachActionToPipeline (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-codepipeline/lib/private/stage.js:124:31)",
               "Stage.addAction (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-codepipeline/lib/private/stage.js:71:33)",
               "PublishToNpmProject.addToPipeline (/home/runner/work/aws-delivlib/aws-delivlib/lib/publishing.js:106:15)",
@@ -514,9 +514,9 @@
             "type": "aws:cdk:logicalId",
             "data": "CodeCommitPipelineBuildPipelinePublishNuGetPublishCodePipelineActionRole515B871C",
             "trace": [
-              "new Role (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-iam/lib/role.js:75:22)",
-              "Pipeline.getRoleForAction (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-codepipeline/lib/pipeline.js:511:26)",
-              "Pipeline._attachActionToPipeline (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-codepipeline/lib/pipeline.js:355:33)",
+              "new Role (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-iam/lib/role.js:50:22)",
+              "Pipeline.getRoleForAction (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-codepipeline/lib/pipeline.js:459:26)",
+              "Pipeline._attachActionToPipeline (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-codepipeline/lib/pipeline.js:305:33)",
               "Stage.attachActionToPipeline (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-codepipeline/lib/private/stage.js:124:31)",
               "Stage.addAction (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-codepipeline/lib/private/stage.js:71:33)",
               "PublishToNuGetProject.addToPipeline (/home/runner/work/aws-delivlib/aws-delivlib/lib/publishing.js:159:15)",
@@ -538,13 +538,13 @@
             "type": "aws:cdk:logicalId",
             "data": "CodeCommitPipelineBuildPipelinePublishNuGetPublishCodePipelineActionRoleDefaultPolicy5224BD0C",
             "trace": [
-              "new Policy (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-iam/lib/policy.js:58:26)",
-              "Role.addToPrincipalPolicy (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-iam/lib/role.js:214:34)",
-              "Role.addToPolicy (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-iam/lib/role.js:227:21)",
-              "CodeBuildAction.bound (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-codepipeline-actions/lib/codebuild/build-action.js:83:22)",
-              "CodeBuildAction.bind (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-codepipeline/lib/action.js:108:21)",
+              "new Policy (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-iam/lib/policy.js:50:26)",
+              "Role.addToPrincipalPolicy (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-iam/lib/role.js:199:34)",
+              "Role.addToPolicy (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-iam/lib/role.js:207:21)",
+              "CodeBuildAction.bound (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-codepipeline-actions/lib/codebuild/build-action.js:78:22)",
+              "CodeBuildAction.bind (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-codepipeline/lib/action.js:81:21)",
               "RichAction.bind (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-codepipeline/lib/private/rich-action.js:25:28)",
-              "Pipeline._attachActionToPipeline (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-codepipeline/lib/pipeline.js:359:41)",
+              "Pipeline._attachActionToPipeline (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-codepipeline/lib/pipeline.js:309:41)",
               "Stage.attachActionToPipeline (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-codepipeline/lib/private/stage.js:124:31)",
               "Stage.addAction (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-codepipeline/lib/private/stage.js:71:33)",
               "PublishToNuGetProject.addToPipeline (/home/runner/work/aws-delivlib/aws-delivlib/lib/publishing.js:159:15)",
@@ -566,9 +566,9 @@
             "type": "aws:cdk:logicalId",
             "data": "CodeCommitPipelineBuildPipelinePublishMavenPublishCodePipelineActionRoleB41F452E",
             "trace": [
-              "new Role (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-iam/lib/role.js:75:22)",
-              "Pipeline.getRoleForAction (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-codepipeline/lib/pipeline.js:511:26)",
-              "Pipeline._attachActionToPipeline (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-codepipeline/lib/pipeline.js:355:33)",
+              "new Role (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-iam/lib/role.js:50:22)",
+              "Pipeline.getRoleForAction (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-codepipeline/lib/pipeline.js:459:26)",
+              "Pipeline._attachActionToPipeline (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-codepipeline/lib/pipeline.js:305:33)",
               "Stage.attachActionToPipeline (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-codepipeline/lib/private/stage.js:124:31)",
               "Stage.addAction (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-codepipeline/lib/private/stage.js:71:33)",
               "PublishToMavenProject.addToPipeline (/home/runner/work/aws-delivlib/aws-delivlib/lib/publishing.js:70:15)",
@@ -590,13 +590,13 @@
             "type": "aws:cdk:logicalId",
             "data": "CodeCommitPipelineBuildPipelinePublishMavenPublishCodePipelineActionRoleDefaultPolicy07DE5816",
             "trace": [
-              "new Policy (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-iam/lib/policy.js:58:26)",
-              "Role.addToPrincipalPolicy (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-iam/lib/role.js:214:34)",
-              "Role.addToPolicy (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-iam/lib/role.js:227:21)",
-              "CodeBuildAction.bound (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-codepipeline-actions/lib/codebuild/build-action.js:83:22)",
-              "CodeBuildAction.bind (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-codepipeline/lib/action.js:108:21)",
+              "new Policy (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-iam/lib/policy.js:50:26)",
+              "Role.addToPrincipalPolicy (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-iam/lib/role.js:199:34)",
+              "Role.addToPolicy (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-iam/lib/role.js:207:21)",
+              "CodeBuildAction.bound (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-codepipeline-actions/lib/codebuild/build-action.js:78:22)",
+              "CodeBuildAction.bind (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-codepipeline/lib/action.js:81:21)",
               "RichAction.bind (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-codepipeline/lib/private/rich-action.js:25:28)",
-              "Pipeline._attachActionToPipeline (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-codepipeline/lib/pipeline.js:359:41)",
+              "Pipeline._attachActionToPipeline (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-codepipeline/lib/pipeline.js:309:41)",
               "Stage.attachActionToPipeline (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-codepipeline/lib/private/stage.js:124:31)",
               "Stage.addAction (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-codepipeline/lib/private/stage.js:71:33)",
               "PublishToMavenProject.addToPipeline (/home/runner/work/aws-delivlib/aws-delivlib/lib/publishing.js:70:15)",
@@ -618,9 +618,9 @@
             "type": "aws:cdk:logicalId",
             "data": "CodeCommitPipelineBuildPipelinePublishGitHubPublishCodePipelineActionRole17D6E0C9",
             "trace": [
-              "new Role (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-iam/lib/role.js:75:22)",
-              "Pipeline.getRoleForAction (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-codepipeline/lib/pipeline.js:511:26)",
-              "Pipeline._attachActionToPipeline (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-codepipeline/lib/pipeline.js:355:33)",
+              "new Role (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-iam/lib/role.js:50:22)",
+              "Pipeline.getRoleForAction (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-codepipeline/lib/pipeline.js:459:26)",
+              "Pipeline._attachActionToPipeline (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-codepipeline/lib/pipeline.js:305:33)",
               "Stage.attachActionToPipeline (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-codepipeline/lib/private/stage.js:124:31)",
               "Stage.addAction (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-codepipeline/lib/private/stage.js:71:33)",
               "PublishToGitHub.addToPipeline (/home/runner/work/aws-delivlib/aws-delivlib/lib/publishing.js:243:15)",
@@ -642,13 +642,13 @@
             "type": "aws:cdk:logicalId",
             "data": "CodeCommitPipelineBuildPipelinePublishGitHubPublishCodePipelineActionRoleDefaultPolicyF10F860F",
             "trace": [
-              "new Policy (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-iam/lib/policy.js:58:26)",
-              "Role.addToPrincipalPolicy (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-iam/lib/role.js:214:34)",
-              "Role.addToPolicy (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-iam/lib/role.js:227:21)",
-              "CodeBuildAction.bound (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-codepipeline-actions/lib/codebuild/build-action.js:83:22)",
-              "CodeBuildAction.bind (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-codepipeline/lib/action.js:108:21)",
+              "new Policy (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-iam/lib/policy.js:50:26)",
+              "Role.addToPrincipalPolicy (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-iam/lib/role.js:199:34)",
+              "Role.addToPolicy (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-iam/lib/role.js:207:21)",
+              "CodeBuildAction.bound (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-codepipeline-actions/lib/codebuild/build-action.js:78:22)",
+              "CodeBuildAction.bind (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-codepipeline/lib/action.js:81:21)",
               "RichAction.bind (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-codepipeline/lib/private/rich-action.js:25:28)",
-              "Pipeline._attachActionToPipeline (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-codepipeline/lib/pipeline.js:359:41)",
+              "Pipeline._attachActionToPipeline (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-codepipeline/lib/pipeline.js:309:41)",
               "Stage.attachActionToPipeline (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-codepipeline/lib/private/stage.js:124:31)",
               "Stage.addAction (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-codepipeline/lib/private/stage.js:71:33)",
               "PublishToGitHub.addToPipeline (/home/runner/work/aws-delivlib/aws-delivlib/lib/publishing.js:243:15)",
@@ -670,9 +670,9 @@
             "type": "aws:cdk:logicalId",
             "data": "CodeCommitPipelineBuildPipelinePublishGitHubPagesPublishCodePipelineActionRoleEEE32F4A",
             "trace": [
-              "new Role (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-iam/lib/role.js:75:22)",
-              "Pipeline.getRoleForAction (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-codepipeline/lib/pipeline.js:511:26)",
-              "Pipeline._attachActionToPipeline (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-codepipeline/lib/pipeline.js:355:33)",
+              "new Role (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-iam/lib/role.js:50:22)",
+              "Pipeline.getRoleForAction (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-codepipeline/lib/pipeline.js:459:26)",
+              "Pipeline._attachActionToPipeline (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-codepipeline/lib/pipeline.js:305:33)",
               "Stage.attachActionToPipeline (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-codepipeline/lib/private/stage.js:124:31)",
               "Stage.addAction (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-codepipeline/lib/private/stage.js:71:33)",
               "PublishDocsToGitHubProject.addToPipeline (/home/runner/work/aws-delivlib/aws-delivlib/lib/publishing.js:197:15)",
@@ -694,13 +694,13 @@
             "type": "aws:cdk:logicalId",
             "data": "CodeCommitPipelineBuildPipelinePublishGitHubPagesPublishCodePipelineActionRoleDefaultPolicyDE4085C1",
             "trace": [
-              "new Policy (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-iam/lib/policy.js:58:26)",
-              "Role.addToPrincipalPolicy (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-iam/lib/role.js:214:34)",
-              "Role.addToPolicy (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-iam/lib/role.js:227:21)",
-              "CodeBuildAction.bound (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-codepipeline-actions/lib/codebuild/build-action.js:83:22)",
-              "CodeBuildAction.bind (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-codepipeline/lib/action.js:108:21)",
+              "new Policy (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-iam/lib/policy.js:50:26)",
+              "Role.addToPrincipalPolicy (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-iam/lib/role.js:199:34)",
+              "Role.addToPolicy (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-iam/lib/role.js:207:21)",
+              "CodeBuildAction.bound (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-codepipeline-actions/lib/codebuild/build-action.js:78:22)",
+              "CodeBuildAction.bind (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-codepipeline/lib/action.js:81:21)",
               "RichAction.bind (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-codepipeline/lib/private/rich-action.js:25:28)",
-              "Pipeline._attachActionToPipeline (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-codepipeline/lib/pipeline.js:359:41)",
+              "Pipeline._attachActionToPipeline (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-codepipeline/lib/pipeline.js:309:41)",
               "Stage.attachActionToPipeline (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-codepipeline/lib/private/stage.js:124:31)",
               "Stage.addAction (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-codepipeline/lib/private/stage.js:71:33)",
               "PublishDocsToGitHubProject.addToPipeline (/home/runner/work/aws-delivlib/aws-delivlib/lib/publishing.js:197:15)",
@@ -722,9 +722,9 @@
             "type": "aws:cdk:logicalId",
             "data": "CodeCommitPipelineBuildPipelinePublishPyPIPublishCodePipelineActionRole05AF99D5",
             "trace": [
-              "new Role (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-iam/lib/role.js:75:22)",
-              "Pipeline.getRoleForAction (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-codepipeline/lib/pipeline.js:511:26)",
-              "Pipeline._attachActionToPipeline (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-codepipeline/lib/pipeline.js:355:33)",
+              "new Role (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-iam/lib/role.js:50:22)",
+              "Pipeline.getRoleForAction (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-codepipeline/lib/pipeline.js:459:26)",
+              "Pipeline._attachActionToPipeline (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-codepipeline/lib/pipeline.js:305:33)",
               "Stage.attachActionToPipeline (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-codepipeline/lib/private/stage.js:124:31)",
               "Stage.addAction (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-codepipeline/lib/private/stage.js:71:33)",
               "PublishToPyPi.addToPipeline (/home/runner/work/aws-delivlib/aws-delivlib/lib/publishing.js:304:15)",
@@ -746,13 +746,13 @@
             "type": "aws:cdk:logicalId",
             "data": "CodeCommitPipelineBuildPipelinePublishPyPIPublishCodePipelineActionRoleDefaultPolicyB6A54068",
             "trace": [
-              "new Policy (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-iam/lib/policy.js:58:26)",
-              "Role.addToPrincipalPolicy (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-iam/lib/role.js:214:34)",
-              "Role.addToPolicy (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-iam/lib/role.js:227:21)",
-              "CodeBuildAction.bound (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-codepipeline-actions/lib/codebuild/build-action.js:83:22)",
-              "CodeBuildAction.bind (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-codepipeline/lib/action.js:108:21)",
+              "new Policy (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-iam/lib/policy.js:50:26)",
+              "Role.addToPrincipalPolicy (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-iam/lib/role.js:199:34)",
+              "Role.addToPolicy (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-iam/lib/role.js:207:21)",
+              "CodeBuildAction.bound (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-codepipeline-actions/lib/codebuild/build-action.js:78:22)",
+              "CodeBuildAction.bind (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-codepipeline/lib/action.js:81:21)",
               "RichAction.bind (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-codepipeline/lib/private/rich-action.js:25:28)",
-              "Pipeline._attachActionToPipeline (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-codepipeline/lib/pipeline.js:359:41)",
+              "Pipeline._attachActionToPipeline (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-codepipeline/lib/pipeline.js:309:41)",
               "Stage.attachActionToPipeline (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-codepipeline/lib/private/stage.js:124:31)",
               "Stage.addAction (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-codepipeline/lib/private/stage.js:71:33)",
               "PublishToPyPi.addToPipeline (/home/runner/work/aws-delivlib/aws-delivlib/lib/publishing.js:304:15)",
@@ -774,9 +774,9 @@
             "type": "aws:cdk:logicalId",
             "data": "CodeCommitPipelineBuildPipelinePublishGolangPublishCodePipelineActionRole365FF3C7",
             "trace": [
-              "new Role (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-iam/lib/role.js:75:22)",
-              "Pipeline.getRoleForAction (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-codepipeline/lib/pipeline.js:511:26)",
-              "Pipeline._attachActionToPipeline (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-codepipeline/lib/pipeline.js:355:33)",
+              "new Role (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-iam/lib/role.js:50:22)",
+              "Pipeline.getRoleForAction (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-codepipeline/lib/pipeline.js:459:26)",
+              "Pipeline._attachActionToPipeline (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-codepipeline/lib/pipeline.js:305:33)",
               "Stage.attachActionToPipeline (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-codepipeline/lib/private/stage.js:124:31)",
               "Stage.addAction (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-codepipeline/lib/private/stage.js:71:33)",
               "PublishToGolang.addToPipeline (/home/runner/work/aws-delivlib/aws-delivlib/lib/publishing.js:342:15)",
@@ -798,13 +798,13 @@
             "type": "aws:cdk:logicalId",
             "data": "CodeCommitPipelineBuildPipelinePublishGolangPublishCodePipelineActionRoleDefaultPolicyED342278",
             "trace": [
-              "new Policy (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-iam/lib/policy.js:58:26)",
-              "Role.addToPrincipalPolicy (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-iam/lib/role.js:214:34)",
-              "Role.addToPolicy (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-iam/lib/role.js:227:21)",
-              "CodeBuildAction.bound (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-codepipeline-actions/lib/codebuild/build-action.js:83:22)",
-              "CodeBuildAction.bind (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-codepipeline/lib/action.js:108:21)",
+              "new Policy (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-iam/lib/policy.js:50:26)",
+              "Role.addToPrincipalPolicy (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-iam/lib/role.js:199:34)",
+              "Role.addToPolicy (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-iam/lib/role.js:207:21)",
+              "CodeBuildAction.bound (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-codepipeline-actions/lib/codebuild/build-action.js:78:22)",
+              "CodeBuildAction.bind (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-codepipeline/lib/action.js:81:21)",
               "RichAction.bind (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-codepipeline/lib/private/rich-action.js:25:28)",
-              "Pipeline._attachActionToPipeline (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-codepipeline/lib/pipeline.js:359:41)",
+              "Pipeline._attachActionToPipeline (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-codepipeline/lib/pipeline.js:309:41)",
               "Stage.attachActionToPipeline (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-codepipeline/lib/private/stage.js:124:31)",
               "Stage.addAction (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-codepipeline/lib/private/stage.js:71:33)",
               "PublishToGolang.addToPipeline (/home/runner/work/aws-delivlib/aws-delivlib/lib/publishing.js:342:15)",
@@ -826,9 +826,9 @@
             "type": "aws:cdk:logicalId",
             "data": "CodeCommitPipelineBuildProjectRoleC6347B6E",
             "trace": [
-              "new Role (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-iam/lib/role.js:75:22)",
-              "new Project (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-codebuild/lib/project.js:313:35)",
-              "new PipelineProject (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-codebuild/lib/pipeline-project.js:20:9)",
+              "new Role (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-iam/lib/role.js:50:22)",
+              "new Project (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-codebuild/lib/project.js:267:35)",
+              "new PipelineProject (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-codebuild/lib/pipeline-project.js:15:9)",
               "new Pipeline (/home/runner/work/aws-delivlib/aws-delivlib/lib/pipeline.js:62:29)",
               "new TestStack (/home/runner/work/aws-delivlib/aws-delivlib/lib/__tests__/test-stack.js:43:26)",
               "Object.<anonymous> (/home/runner/work/aws-delivlib/aws-delivlib/lib/__tests__/integ.delivlib.js:29:1)",
@@ -846,11 +846,11 @@
             "type": "aws:cdk:logicalId",
             "data": "CodeCommitPipelineBuildProjectRoleDefaultPolicy1184486E",
             "trace": [
-              "new Policy (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-iam/lib/policy.js:58:26)",
-              "Role.addToPrincipalPolicy (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-iam/lib/role.js:214:34)",
-              "PipelineProject.addToRolePolicy (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-codebuild/lib/project.js:61:23)",
-              "new Project (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-codebuild/lib/project.js:398:14)",
-              "new PipelineProject (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-codebuild/lib/pipeline-project.js:20:9)",
+              "new Policy (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-iam/lib/policy.js:50:26)",
+              "Role.addToPrincipalPolicy (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-iam/lib/role.js:199:34)",
+              "PipelineProject.addToRolePolicy (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-codebuild/lib/project.js:56:23)",
+              "new Project (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-codebuild/lib/project.js:352:14)",
+              "new PipelineProject (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-codebuild/lib/pipeline-project.js:15:9)",
               "new Pipeline (/home/runner/work/aws-delivlib/aws-delivlib/lib/pipeline.js:62:29)",
               "new TestStack (/home/runner/work/aws-delivlib/aws-delivlib/lib/__tests__/test-stack.js:43:26)",
               "Object.<anonymous> (/home/runner/work/aws-delivlib/aws-delivlib/lib/__tests__/integ.delivlib.js:29:1)",
@@ -868,8 +868,8 @@
             "type": "aws:cdk:logicalId",
             "data": "CodeCommitPipelineBuildProject9F59E8AA",
             "trace": [
-              "new Project (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-codebuild/lib/project.js:355:26)",
-              "new PipelineProject (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-codebuild/lib/pipeline-project.js:20:9)",
+              "new Project (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-codebuild/lib/project.js:309:26)",
+              "new PipelineProject (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-codebuild/lib/pipeline-project.js:15:9)",
               "new Pipeline (/home/runner/work/aws-delivlib/aws-delivlib/lib/pipeline.js:62:29)",
               "new TestStack (/home/runner/work/aws-delivlib/aws-delivlib/lib/__tests__/test-stack.js:43:26)",
               "Object.<anonymous> (/home/runner/work/aws-delivlib/aws-delivlib/lib/__tests__/integ.delivlib.js:29:1)",
@@ -887,10 +887,10 @@
             "type": "aws:cdk:logicalId",
             "data": "CodeCommitPipelineBuildProjectOnBuildFailed2A08058D",
             "trace": [
-              "new Rule (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-events/lib/rule.js:37:26)",
-              "PipelineProject.onEvent (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-codebuild/lib/project.js:71:22)",
-              "PipelineProject.onStateChange (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-codebuild/lib/project.js:109:27)",
-              "PipelineProject.onBuildFailed (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-codebuild/lib/project.js:154:27)",
+              "new Rule (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-events/lib/rule.js:33:26)",
+              "PipelineProject.onEvent (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-codebuild/lib/project.js:65:22)",
+              "PipelineProject.onStateChange (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-codebuild/lib/project.js:101:27)",
+              "PipelineProject.onBuildFailed (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-codebuild/lib/project.js:142:27)",
               "Pipeline.addBuildFailureNotification (/home/runner/work/aws-delivlib/aws-delivlib/lib/pipeline.js:305:22)",
               "new Pipeline (/home/runner/work/aws-delivlib/aws-delivlib/lib/pipeline.js:85:14)",
               "new TestStack (/home/runner/work/aws-delivlib/aws-delivlib/lib/__tests__/test-stack.js:43:26)",
@@ -909,7 +909,7 @@
             "type": "aws:cdk:logicalId",
             "data": "CodeCommitPipelineNotificationsTopic36C2D667",
             "trace": [
-              "new Topic (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-sns/lib/topic.js:47:26)",
+              "new Topic (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-sns/lib/topic.js:35:26)",
               "new Pipeline (/home/runner/work/aws-delivlib/aws-delivlib/lib/pipeline.js:79:27)",
               "new TestStack (/home/runner/work/aws-delivlib/aws-delivlib/lib/__tests__/test-stack.js:43:26)",
               "Object.<anonymous> (/home/runner/work/aws-delivlib/aws-delivlib/lib/__tests__/integ.delivlib.js:29:1)",
@@ -927,8 +927,8 @@
             "type": "aws:cdk:logicalId",
             "data": "CodeCommitPipelineNotificationsTopicawscdkdevdelivlibtestamazoncom7F5014D8",
             "trace": [
-              "new Subscription (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-sns/lib/subscription.js:51:9)",
-              "Topic.addSubscription (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-sns/lib/topic-base.js:35:9)",
+              "new Subscription (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-sns/lib/subscription.js:46:9)",
+              "Topic.addSubscription (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-sns/lib/topic-base.js:31:9)",
               "new Pipeline (/home/runner/work/aws-delivlib/aws-delivlib/lib/pipeline.js:80:25)",
               "new TestStack (/home/runner/work/aws-delivlib/aws-delivlib/lib/__tests__/test-stack.js:43:26)",
               "Object.<anonymous> (/home/runner/work/aws-delivlib/aws-delivlib/lib/__tests__/integ.delivlib.js:29:1)",
@@ -946,12 +946,12 @@
             "type": "aws:cdk:logicalId",
             "data": "CodeCommitPipelineNotificationsTopicPolicyBBE90C33",
             "trace": [
-              "new TopicPolicy (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-sns/lib/policy.js:47:9)",
-              "Topic.addToResourcePolicy (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-sns/lib/topic-base.js:52:27)",
-              "Function.addToPrincipalOrResource (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-iam/lib/grant.js:72:49)",
-              "Topic.grantPublish (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-sns/lib/topic-base.js:81:26)",
-              "SnsTopic.bind (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-events-targets/lib/sns.js:38:20)",
-              "Rule.addTarget (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-events/lib/rule.js:91:36)",
+              "new TopicPolicy (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-sns/lib/policy.js:40:9)",
+              "Topic.addToResourcePolicy (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-sns/lib/topic-base.js:46:27)",
+              "Function.addToPrincipalOrResource (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-iam/lib/grant.js:68:49)",
+              "Topic.grantPublish (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-sns/lib/topic-base.js:65:26)",
+              "SnsTopic.bind (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-events-targets/lib/sns.js:34:20)",
+              "Rule.addTarget (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-events/lib/rule.js:85:36)",
               "Pipeline.addBuildFailureNotification (/home/runner/work/aws-delivlib/aws-delivlib/lib/pipeline.js:305:53)",
               "new Pipeline (/home/runner/work/aws-delivlib/aws-delivlib/lib/pipeline.js:85:14)",
               "new TestStack (/home/runner/work/aws-delivlib/aws-delivlib/lib/__tests__/test-stack.js:43:26)",
@@ -970,8 +970,8 @@
             "type": "aws:cdk:logicalId",
             "data": "CodeCommitPipelinePipelineWatcherPollerServiceRole0A1D8005",
             "trace": [
-              "new Role (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-iam/lib/role.js:75:22)",
-              "new Function (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-lambda/lib/function.js:83:35)",
+              "new Role (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-iam/lib/role.js:50:22)",
+              "new Function (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-lambda/lib/function.js:82:35)",
               "new PipelineWatcher (/home/runner/work/aws-delivlib/aws-delivlib/lib/pipeline-watcher/watcher.js:38:33)",
               "Pipeline.addFailureAlarm (/home/runner/work/aws-delivlib/aws-delivlib/lib/pipeline.js:294:16)",
               "new Pipeline (/home/runner/work/aws-delivlib/aws-delivlib/lib/pipeline.js:83:34)",
@@ -991,9 +991,9 @@
             "type": "aws:cdk:logicalId",
             "data": "CodeCommitPipelinePipelineWatcherPollerServiceRoleDefaultPolicyE2104AD1",
             "trace": [
-              "new Policy (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-iam/lib/policy.js:58:26)",
-              "Role.addToPrincipalPolicy (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-iam/lib/role.js:214:34)",
-              "Function.addToRolePolicy (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-lambda/lib/function-base.js:63:19)",
+              "new Policy (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-iam/lib/policy.js:50:26)",
+              "Role.addToPrincipalPolicy (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-iam/lib/role.js:199:34)",
+              "Function.addToRolePolicy (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-lambda/lib/function-base.js:55:19)",
               "new PipelineWatcher (/home/runner/work/aws-delivlib/aws-delivlib/lib/pipeline-watcher/watcher.js:47:25)",
               "Pipeline.addFailureAlarm (/home/runner/work/aws-delivlib/aws-delivlib/lib/pipeline.js:294:16)",
               "new Pipeline (/home/runner/work/aws-delivlib/aws-delivlib/lib/pipeline.js:83:34)",
@@ -1013,7 +1013,7 @@
             "type": "aws:cdk:logicalId",
             "data": "CodeCommitPipelinePipelineWatcherPoller5C65ACDE",
             "trace": [
-              "new Function (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-lambda/lib/function.js:146:26)",
+              "new Function (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-lambda/lib/function.js:154:26)",
               "new PipelineWatcher (/home/runner/work/aws-delivlib/aws-delivlib/lib/pipeline-watcher/watcher.js:38:33)",
               "Pipeline.addFailureAlarm (/home/runner/work/aws-delivlib/aws-delivlib/lib/pipeline.js:294:16)",
               "new Pipeline (/home/runner/work/aws-delivlib/aws-delivlib/lib/pipeline.js:83:34)",
@@ -1033,7 +1033,7 @@
             "type": "aws:cdk:logicalId",
             "data": "CodeCommitPipelinePipelineWatcherTriggerA38A4AD0",
             "trace": [
-              "new Rule (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-events/lib/rule.js:37:26)",
+              "new Rule (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-events/lib/rule.js:33:26)",
               "new PipelineWatcher (/home/runner/work/aws-delivlib/aws-delivlib/lib/pipeline-watcher/watcher.js:56:9)",
               "Pipeline.addFailureAlarm (/home/runner/work/aws-delivlib/aws-delivlib/lib/pipeline.js:294:16)",
               "new Pipeline (/home/runner/work/aws-delivlib/aws-delivlib/lib/pipeline.js:83:34)",
@@ -1053,11 +1053,11 @@
             "type": "aws:cdk:logicalId",
             "data": "CodeCommitPipelinePipelineWatcherTriggerAllowEventRuledelivlibtestCodeCommitPipelinePipelineWatcherPoller7862623143029B4E",
             "trace": [
-              "Function.addPermission (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-lambda/lib/function-base.js:44:9)",
+              "Function.addPermission (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-lambda/lib/function-base.js:38:9)",
               "Object.addLambdaPermission (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-events-targets/lib/util.js:63:17)",
-              "LambdaFunction.bind (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-events-targets/lib/lambda.js:31:16)",
-              "Rule.addTarget (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-events/lib/rule.js:91:36)",
-              "new Rule (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-events/lib/rule.js:54:18)",
+              "LambdaFunction.bind (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-events-targets/lib/lambda.js:25:16)",
+              "Rule.addTarget (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-events/lib/rule.js:85:36)",
+              "new Rule (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-events/lib/rule.js:50:18)",
               "new PipelineWatcher (/home/runner/work/aws-delivlib/aws-delivlib/lib/pipeline-watcher/watcher.js:56:9)",
               "Pipeline.addFailureAlarm (/home/runner/work/aws-delivlib/aws-delivlib/lib/pipeline.js:294:16)",
               "new Pipeline (/home/runner/work/aws-delivlib/aws-delivlib/lib/pipeline.js:83:34)",
@@ -1077,7 +1077,7 @@
             "type": "aws:cdk:logicalId",
             "data": "CodeCommitPipelinePipelineWatcherAlarm73779F48",
             "trace": [
-              "new Alarm (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-cloudwatch/lib/alarm.js:76:23)",
+              "new Alarm (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-cloudwatch/lib/alarm.js:103:23)",
               "new PipelineWatcher (/home/runner/work/aws-delivlib/aws-delivlib/lib/pipeline-watcher/watcher.js:70:22)",
               "Pipeline.addFailureAlarm (/home/runner/work/aws-delivlib/aws-delivlib/lib/pipeline.js:294:16)",
               "new Pipeline (/home/runner/work/aws-delivlib/aws-delivlib/lib/pipeline.js:83:34)",
@@ -1097,8 +1097,8 @@
             "type": "aws:cdk:logicalId",
             "data": "CodeCommitPipelineHelloLinuxRole97734933",
             "trace": [
-              "new Role (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-iam/lib/role.js:75:22)",
-              "new Project (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-codebuild/lib/project.js:313:35)",
+              "new Role (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-iam/lib/role.js:50:22)",
+              "new Project (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-codebuild/lib/project.js:267:35)",
               "new Shellable (/home/runner/work/aws-delivlib/aws-delivlib/lib/shellable.js:64:24)",
               "Pipeline.addShellable (/home/runner/work/aws-delivlib/aws-delivlib/lib/pipeline.js:110:20)",
               "Pipeline.addTest (/home/runner/work/aws-delivlib/aws-delivlib/lib/pipeline.js:118:21)",
@@ -1118,10 +1118,10 @@
             "type": "aws:cdk:logicalId",
             "data": "CodeCommitPipelineHelloLinuxRoleDefaultPolicy234DABC6",
             "trace": [
-              "new Policy (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-iam/lib/policy.js:58:26)",
-              "Role.addToPrincipalPolicy (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-iam/lib/role.js:214:34)",
-              "Project.addToRolePolicy (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-codebuild/lib/project.js:61:23)",
-              "new Project (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-codebuild/lib/project.js:398:14)",
+              "new Policy (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-iam/lib/policy.js:50:26)",
+              "Role.addToPrincipalPolicy (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-iam/lib/role.js:199:34)",
+              "Project.addToRolePolicy (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-codebuild/lib/project.js:56:23)",
+              "new Project (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-codebuild/lib/project.js:352:14)",
               "new Shellable (/home/runner/work/aws-delivlib/aws-delivlib/lib/shellable.js:64:24)",
               "Pipeline.addShellable (/home/runner/work/aws-delivlib/aws-delivlib/lib/pipeline.js:110:20)",
               "Pipeline.addTest (/home/runner/work/aws-delivlib/aws-delivlib/lib/pipeline.js:118:21)",
@@ -1141,7 +1141,7 @@
             "type": "aws:cdk:logicalId",
             "data": "CodeCommitPipelineHelloLinuxCB82AB68",
             "trace": [
-              "new Project (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-codebuild/lib/project.js:355:26)",
+              "new Project (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-codebuild/lib/project.js:309:26)",
               "new Shellable (/home/runner/work/aws-delivlib/aws-delivlib/lib/shellable.js:64:24)",
               "Pipeline.addShellable (/home/runner/work/aws-delivlib/aws-delivlib/lib/pipeline.js:110:20)",
               "Pipeline.addTest (/home/runner/work/aws-delivlib/aws-delivlib/lib/pipeline.js:118:21)",
@@ -1161,10 +1161,10 @@
             "type": "aws:cdk:logicalId",
             "data": "CodeCommitPipelineHelloLinuxOnBuildFailedD96AF043",
             "trace": [
-              "new Rule (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-events/lib/rule.js:37:26)",
-              "Project.onEvent (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-codebuild/lib/project.js:71:22)",
-              "Project.onStateChange (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-codebuild/lib/project.js:109:27)",
-              "Project.onBuildFailed (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-codebuild/lib/project.js:154:27)",
+              "new Rule (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-events/lib/rule.js:33:26)",
+              "Project.onEvent (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-codebuild/lib/project.js:65:22)",
+              "Project.onStateChange (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-codebuild/lib/project.js:101:27)",
+              "Project.onBuildFailed (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-codebuild/lib/project.js:142:27)",
               "Pipeline.addBuildFailureNotification (/home/runner/work/aws-delivlib/aws-delivlib/lib/pipeline.js:305:22)",
               "Pipeline.addShellable (/home/runner/work/aws-delivlib/aws-delivlib/lib/pipeline.js:113:18)",
               "Pipeline.addTest (/home/runner/work/aws-delivlib/aws-delivlib/lib/pipeline.js:118:21)",
@@ -1184,7 +1184,7 @@
             "type": "aws:cdk:logicalId",
             "data": "CodeCommitPipelineHelloLinuxAlarmE81F4D20",
             "trace": [
-              "new Alarm (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-cloudwatch/lib/alarm.js:76:23)",
+              "new Alarm (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-cloudwatch/lib/alarm.js:103:23)",
               "new Shellable (/home/runner/work/aws-delivlib/aws-delivlib/lib/shellable.js:100:22)",
               "Pipeline.addShellable (/home/runner/work/aws-delivlib/aws-delivlib/lib/pipeline.js:110:20)",
               "Pipeline.addTest (/home/runner/work/aws-delivlib/aws-delivlib/lib/pipeline.js:118:21)",
@@ -1204,8 +1204,8 @@
             "type": "aws:cdk:logicalId",
             "data": "CodeCommitPipelineHelloWindowsRole769C073E",
             "trace": [
-              "new Role (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-iam/lib/role.js:75:22)",
-              "new Project (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-codebuild/lib/project.js:313:35)",
+              "new Role (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-iam/lib/role.js:50:22)",
+              "new Project (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-codebuild/lib/project.js:267:35)",
               "new Shellable (/home/runner/work/aws-delivlib/aws-delivlib/lib/shellable.js:64:24)",
               "Pipeline.addShellable (/home/runner/work/aws-delivlib/aws-delivlib/lib/pipeline.js:110:20)",
               "Pipeline.addTest (/home/runner/work/aws-delivlib/aws-delivlib/lib/pipeline.js:118:21)",
@@ -1225,10 +1225,10 @@
             "type": "aws:cdk:logicalId",
             "data": "CodeCommitPipelineHelloWindowsRoleDefaultPolicyA240EEEE",
             "trace": [
-              "new Policy (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-iam/lib/policy.js:58:26)",
-              "Role.addToPrincipalPolicy (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-iam/lib/role.js:214:34)",
-              "Project.addToRolePolicy (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-codebuild/lib/project.js:61:23)",
-              "new Project (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-codebuild/lib/project.js:398:14)",
+              "new Policy (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-iam/lib/policy.js:50:26)",
+              "Role.addToPrincipalPolicy (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-iam/lib/role.js:199:34)",
+              "Project.addToRolePolicy (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-codebuild/lib/project.js:56:23)",
+              "new Project (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-codebuild/lib/project.js:352:14)",
               "new Shellable (/home/runner/work/aws-delivlib/aws-delivlib/lib/shellable.js:64:24)",
               "Pipeline.addShellable (/home/runner/work/aws-delivlib/aws-delivlib/lib/pipeline.js:110:20)",
               "Pipeline.addTest (/home/runner/work/aws-delivlib/aws-delivlib/lib/pipeline.js:118:21)",
@@ -1248,7 +1248,7 @@
             "type": "aws:cdk:logicalId",
             "data": "CodeCommitPipelineHelloWindows61CA8F73",
             "trace": [
-              "new Project (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-codebuild/lib/project.js:355:26)",
+              "new Project (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-codebuild/lib/project.js:309:26)",
               "new Shellable (/home/runner/work/aws-delivlib/aws-delivlib/lib/shellable.js:64:24)",
               "Pipeline.addShellable (/home/runner/work/aws-delivlib/aws-delivlib/lib/pipeline.js:110:20)",
               "Pipeline.addTest (/home/runner/work/aws-delivlib/aws-delivlib/lib/pipeline.js:118:21)",
@@ -1268,10 +1268,10 @@
             "type": "aws:cdk:logicalId",
             "data": "CodeCommitPipelineHelloWindowsOnBuildFailed25F55C59",
             "trace": [
-              "new Rule (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-events/lib/rule.js:37:26)",
-              "Project.onEvent (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-codebuild/lib/project.js:71:22)",
-              "Project.onStateChange (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-codebuild/lib/project.js:109:27)",
-              "Project.onBuildFailed (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-codebuild/lib/project.js:154:27)",
+              "new Rule (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-events/lib/rule.js:33:26)",
+              "Project.onEvent (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-codebuild/lib/project.js:65:22)",
+              "Project.onStateChange (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-codebuild/lib/project.js:101:27)",
+              "Project.onBuildFailed (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-codebuild/lib/project.js:142:27)",
               "Pipeline.addBuildFailureNotification (/home/runner/work/aws-delivlib/aws-delivlib/lib/pipeline.js:305:22)",
               "Pipeline.addShellable (/home/runner/work/aws-delivlib/aws-delivlib/lib/pipeline.js:113:18)",
               "Pipeline.addTest (/home/runner/work/aws-delivlib/aws-delivlib/lib/pipeline.js:118:21)",
@@ -1291,7 +1291,7 @@
             "type": "aws:cdk:logicalId",
             "data": "CodeCommitPipelineHelloWindowsAlarmB6D353FA",
             "trace": [
-              "new Alarm (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-cloudwatch/lib/alarm.js:76:23)",
+              "new Alarm (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-cloudwatch/lib/alarm.js:103:23)",
               "new Shellable (/home/runner/work/aws-delivlib/aws-delivlib/lib/shellable.js:100:22)",
               "Pipeline.addShellable (/home/runner/work/aws-delivlib/aws-delivlib/lib/pipeline.js:110:20)",
               "Pipeline.addTest (/home/runner/work/aws-delivlib/aws-delivlib/lib/pipeline.js:118:21)",
@@ -1311,8 +1311,8 @@
             "type": "aws:cdk:logicalId",
             "data": "CodeCommitPipelineAssumeRoleRole1186B781",
             "trace": [
-              "new Role (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-iam/lib/role.js:75:22)",
-              "new Project (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-codebuild/lib/project.js:313:35)",
+              "new Role (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-iam/lib/role.js:50:22)",
+              "new Project (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-codebuild/lib/project.js:267:35)",
               "new Shellable (/home/runner/work/aws-delivlib/aws-delivlib/lib/shellable.js:64:24)",
               "Pipeline.addShellable (/home/runner/work/aws-delivlib/aws-delivlib/lib/pipeline.js:110:20)",
               "Pipeline.addTest (/home/runner/work/aws-delivlib/aws-delivlib/lib/pipeline.js:118:21)",
@@ -1332,10 +1332,10 @@
             "type": "aws:cdk:logicalId",
             "data": "CodeCommitPipelineAssumeRoleRoleDefaultPolicy438D80DD",
             "trace": [
-              "new Policy (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-iam/lib/policy.js:58:26)",
-              "Role.addToPrincipalPolicy (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-iam/lib/role.js:214:34)",
-              "Project.addToRolePolicy (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-codebuild/lib/project.js:61:23)",
-              "new Project (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-codebuild/lib/project.js:398:14)",
+              "new Policy (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-iam/lib/policy.js:50:26)",
+              "Role.addToPrincipalPolicy (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-iam/lib/role.js:199:34)",
+              "Project.addToRolePolicy (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-codebuild/lib/project.js:56:23)",
+              "new Project (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-codebuild/lib/project.js:352:14)",
               "new Shellable (/home/runner/work/aws-delivlib/aws-delivlib/lib/shellable.js:64:24)",
               "Pipeline.addShellable (/home/runner/work/aws-delivlib/aws-delivlib/lib/pipeline.js:110:20)",
               "Pipeline.addTest (/home/runner/work/aws-delivlib/aws-delivlib/lib/pipeline.js:118:21)",
@@ -1355,7 +1355,7 @@
             "type": "aws:cdk:logicalId",
             "data": "CodeCommitPipelineAssumeRole05A76F51",
             "trace": [
-              "new Project (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-codebuild/lib/project.js:355:26)",
+              "new Project (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-codebuild/lib/project.js:309:26)",
               "new Shellable (/home/runner/work/aws-delivlib/aws-delivlib/lib/shellable.js:64:24)",
               "Pipeline.addShellable (/home/runner/work/aws-delivlib/aws-delivlib/lib/pipeline.js:110:20)",
               "Pipeline.addTest (/home/runner/work/aws-delivlib/aws-delivlib/lib/pipeline.js:118:21)",
@@ -1375,10 +1375,10 @@
             "type": "aws:cdk:logicalId",
             "data": "CodeCommitPipelineAssumeRoleOnBuildFailed494CD87B",
             "trace": [
-              "new Rule (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-events/lib/rule.js:37:26)",
-              "Project.onEvent (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-codebuild/lib/project.js:71:22)",
-              "Project.onStateChange (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-codebuild/lib/project.js:109:27)",
-              "Project.onBuildFailed (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-codebuild/lib/project.js:154:27)",
+              "new Rule (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-events/lib/rule.js:33:26)",
+              "Project.onEvent (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-codebuild/lib/project.js:65:22)",
+              "Project.onStateChange (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-codebuild/lib/project.js:101:27)",
+              "Project.onBuildFailed (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-codebuild/lib/project.js:142:27)",
               "Pipeline.addBuildFailureNotification (/home/runner/work/aws-delivlib/aws-delivlib/lib/pipeline.js:305:22)",
               "Pipeline.addShellable (/home/runner/work/aws-delivlib/aws-delivlib/lib/pipeline.js:113:18)",
               "Pipeline.addTest (/home/runner/work/aws-delivlib/aws-delivlib/lib/pipeline.js:118:21)",
@@ -1398,7 +1398,7 @@
             "type": "aws:cdk:logicalId",
             "data": "CodeCommitPipelineAssumeRoleAlarm6D09484D",
             "trace": [
-              "new Alarm (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-cloudwatch/lib/alarm.js:76:23)",
+              "new Alarm (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-cloudwatch/lib/alarm.js:103:23)",
               "new Shellable (/home/runner/work/aws-delivlib/aws-delivlib/lib/shellable.js:100:22)",
               "Pipeline.addShellable (/home/runner/work/aws-delivlib/aws-delivlib/lib/pipeline.js:110:20)",
               "Pipeline.addTest (/home/runner/work/aws-delivlib/aws-delivlib/lib/pipeline.js:118:21)",
@@ -1418,8 +1418,8 @@
             "type": "aws:cdk:logicalId",
             "data": "CodeCommitPipelineGenerateTwoArtifactsRole91D2CDCA",
             "trace": [
-              "new Role (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-iam/lib/role.js:75:22)",
-              "new Project (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-codebuild/lib/project.js:313:35)",
+              "new Role (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-iam/lib/role.js:50:22)",
+              "new Project (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-codebuild/lib/project.js:267:35)",
               "new Shellable (/home/runner/work/aws-delivlib/aws-delivlib/lib/shellable.js:64:24)",
               "Pipeline.addShellable (/home/runner/work/aws-delivlib/aws-delivlib/lib/pipeline.js:110:20)",
               "new TestStack (/home/runner/work/aws-delivlib/aws-delivlib/lib/__tests__/test-stack.js:84:33)",
@@ -1438,10 +1438,10 @@
             "type": "aws:cdk:logicalId",
             "data": "CodeCommitPipelineGenerateTwoArtifactsRoleDefaultPolicy770BE7EA",
             "trace": [
-              "new Policy (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-iam/lib/policy.js:58:26)",
-              "Role.addToPrincipalPolicy (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-iam/lib/role.js:214:34)",
-              "Project.addToRolePolicy (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-codebuild/lib/project.js:61:23)",
-              "new Project (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-codebuild/lib/project.js:398:14)",
+              "new Policy (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-iam/lib/policy.js:50:26)",
+              "Role.addToPrincipalPolicy (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-iam/lib/role.js:199:34)",
+              "Project.addToRolePolicy (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-codebuild/lib/project.js:56:23)",
+              "new Project (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-codebuild/lib/project.js:352:14)",
               "new Shellable (/home/runner/work/aws-delivlib/aws-delivlib/lib/shellable.js:64:24)",
               "Pipeline.addShellable (/home/runner/work/aws-delivlib/aws-delivlib/lib/pipeline.js:110:20)",
               "new TestStack (/home/runner/work/aws-delivlib/aws-delivlib/lib/__tests__/test-stack.js:84:33)",
@@ -1460,7 +1460,7 @@
             "type": "aws:cdk:logicalId",
             "data": "CodeCommitPipelineGenerateTwoArtifactsA9DAD33B",
             "trace": [
-              "new Project (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-codebuild/lib/project.js:355:26)",
+              "new Project (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-codebuild/lib/project.js:309:26)",
               "new Shellable (/home/runner/work/aws-delivlib/aws-delivlib/lib/shellable.js:64:24)",
               "Pipeline.addShellable (/home/runner/work/aws-delivlib/aws-delivlib/lib/pipeline.js:110:20)",
               "new TestStack (/home/runner/work/aws-delivlib/aws-delivlib/lib/__tests__/test-stack.js:84:33)",
@@ -1479,7 +1479,7 @@
             "type": "aws:cdk:logicalId",
             "data": "CodeCommitPipelineGenerateTwoArtifactsAlarm4299580B",
             "trace": [
-              "new Alarm (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-cloudwatch/lib/alarm.js:76:23)",
+              "new Alarm (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-cloudwatch/lib/alarm.js:103:23)",
               "new Shellable (/home/runner/work/aws-delivlib/aws-delivlib/lib/shellable.js:100:22)",
               "Pipeline.addShellable (/home/runner/work/aws-delivlib/aws-delivlib/lib/pipeline.js:110:20)",
               "new TestStack (/home/runner/work/aws-delivlib/aws-delivlib/lib/__tests__/test-stack.js:84:33)",
@@ -1498,8 +1498,8 @@
             "type": "aws:cdk:logicalId",
             "data": "CodeCommitPipelineCanaryHelloCanaryShellableRole65D634EB",
             "trace": [
-              "new Role (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-iam/lib/role.js:75:22)",
-              "new Project (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-codebuild/lib/project.js:313:35)",
+              "new Role (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-iam/lib/role.js:50:22)",
+              "new Project (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-codebuild/lib/project.js:267:35)",
               "new Shellable (/home/runner/work/aws-delivlib/aws-delivlib/lib/shellable.js:64:24)",
               "new Canary (/home/runner/work/aws-delivlib/aws-delivlib/lib/canary.js:19:27)",
               "Pipeline.addCanary (/home/runner/work/aws-delivlib/aws-delivlib/lib/pipeline.js:130:16)",
@@ -1519,10 +1519,10 @@
             "type": "aws:cdk:logicalId",
             "data": "CodeCommitPipelineCanaryHelloCanaryShellableRoleDefaultPolicyD466B3CA",
             "trace": [
-              "new Policy (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-iam/lib/policy.js:58:26)",
-              "Role.addToPrincipalPolicy (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-iam/lib/role.js:214:34)",
-              "Project.addToRolePolicy (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-codebuild/lib/project.js:61:23)",
-              "new Project (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-codebuild/lib/project.js:398:14)",
+              "new Policy (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-iam/lib/policy.js:50:26)",
+              "Role.addToPrincipalPolicy (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-iam/lib/role.js:199:34)",
+              "Project.addToRolePolicy (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-codebuild/lib/project.js:56:23)",
+              "new Project (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-codebuild/lib/project.js:352:14)",
               "new Shellable (/home/runner/work/aws-delivlib/aws-delivlib/lib/shellable.js:64:24)",
               "new Canary (/home/runner/work/aws-delivlib/aws-delivlib/lib/canary.js:19:27)",
               "Pipeline.addCanary (/home/runner/work/aws-delivlib/aws-delivlib/lib/pipeline.js:130:16)",
@@ -1542,7 +1542,7 @@
             "type": "aws:cdk:logicalId",
             "data": "CodeCommitPipelineCanaryHelloCanaryShellableC8458471",
             "trace": [
-              "new Project (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-codebuild/lib/project.js:355:26)",
+              "new Project (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-codebuild/lib/project.js:309:26)",
               "new Shellable (/home/runner/work/aws-delivlib/aws-delivlib/lib/shellable.js:64:24)",
               "new Canary (/home/runner/work/aws-delivlib/aws-delivlib/lib/canary.js:19:27)",
               "Pipeline.addCanary (/home/runner/work/aws-delivlib/aws-delivlib/lib/pipeline.js:130:16)",
@@ -1562,11 +1562,11 @@
             "type": "aws:cdk:logicalId",
             "data": "CodeCommitPipelineCanaryHelloCanaryShellableEventsRole0F756230",
             "trace": [
-              "new Role (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-iam/lib/role.js:75:22)",
+              "new Role (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-iam/lib/role.js:50:22)",
               "Object.singletonEventRole (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-events-targets/lib/util.js:39:18)",
-              "CodeBuildProject.bind (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-events-targets/lib/codebuild.js:37:50)",
-              "Rule.addTarget (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-events/lib/rule.js:91:36)",
-              "new Rule (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-events/lib/rule.js:54:18)",
+              "CodeBuildProject.bind (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-events-targets/lib/codebuild.js:30:50)",
+              "Rule.addTarget (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-events/lib/rule.js:85:36)",
+              "new Rule (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-events/lib/rule.js:50:18)",
               "new Canary (/home/runner/work/aws-delivlib/aws-delivlib/lib/canary.js:23:9)",
               "Pipeline.addCanary (/home/runner/work/aws-delivlib/aws-delivlib/lib/pipeline.js:130:16)",
               "new TestStack (/home/runner/work/aws-delivlib/aws-delivlib/lib/__tests__/test-stack.js:103:18)",
@@ -1585,14 +1585,14 @@
             "type": "aws:cdk:logicalId",
             "data": "CodeCommitPipelineCanaryHelloCanaryShellableEventsRoleDefaultPolicy6CE0D6E4",
             "trace": [
-              "new Policy (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-iam/lib/policy.js:58:26)",
-              "Role.addToPrincipalPolicy (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-iam/lib/role.js:214:34)",
-              "Role.addToPolicy (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-iam/lib/role.js:227:21)",
+              "new Policy (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-iam/lib/policy.js:50:26)",
+              "Role.addToPrincipalPolicy (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-iam/lib/role.js:199:34)",
+              "Role.addToPolicy (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-iam/lib/role.js:207:21)",
               "Array.forEach (<anonymous>)",
               "Object.singletonEventRole (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-events-targets/lib/util.js:43:22)",
-              "CodeBuildProject.bind (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-events-targets/lib/codebuild.js:37:50)",
-              "Rule.addTarget (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-events/lib/rule.js:91:36)",
-              "new Rule (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-events/lib/rule.js:54:18)",
+              "CodeBuildProject.bind (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-events-targets/lib/codebuild.js:30:50)",
+              "Rule.addTarget (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-events/lib/rule.js:85:36)",
+              "new Rule (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-events/lib/rule.js:50:18)",
               "new Canary (/home/runner/work/aws-delivlib/aws-delivlib/lib/canary.js:23:9)",
               "Pipeline.addCanary (/home/runner/work/aws-delivlib/aws-delivlib/lib/pipeline.js:130:16)",
               "new TestStack (/home/runner/work/aws-delivlib/aws-delivlib/lib/__tests__/test-stack.js:103:18)",
@@ -1611,7 +1611,7 @@
             "type": "aws:cdk:logicalId",
             "data": "CodeCommitPipelineCanaryHelloCanaryShellableAlarm049B43C4",
             "trace": [
-              "new Alarm (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-cloudwatch/lib/alarm.js:76:23)",
+              "new Alarm (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-cloudwatch/lib/alarm.js:103:23)",
               "new Shellable (/home/runner/work/aws-delivlib/aws-delivlib/lib/shellable.js:100:22)",
               "new Canary (/home/runner/work/aws-delivlib/aws-delivlib/lib/canary.js:19:27)",
               "Pipeline.addCanary (/home/runner/work/aws-delivlib/aws-delivlib/lib/pipeline.js:130:16)",
@@ -1631,7 +1631,7 @@
             "type": "aws:cdk:logicalId",
             "data": "CodeCommitPipelineCanaryHelloCanarySchedule6177762B",
             "trace": [
-              "new Rule (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-events/lib/rule.js:37:26)",
+              "new Rule (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-events/lib/rule.js:33:26)",
               "new Canary (/home/runner/work/aws-delivlib/aws-delivlib/lib/canary.js:23:9)",
               "Pipeline.addCanary (/home/runner/work/aws-delivlib/aws-delivlib/lib/pipeline.js:130:16)",
               "new TestStack (/home/runner/work/aws-delivlib/aws-delivlib/lib/__tests__/test-stack.js:103:18)",
@@ -1650,8 +1650,8 @@
             "type": "aws:cdk:logicalId",
             "data": "CodeCommitPipelineNpmRole219D5F49",
             "trace": [
-              "new Role (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-iam/lib/role.js:75:22)",
-              "new Project (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-codebuild/lib/project.js:313:35)",
+              "new Role (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-iam/lib/role.js:50:22)",
+              "new Project (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-codebuild/lib/project.js:267:35)",
               "new Shellable (/home/runner/work/aws-delivlib/aws-delivlib/lib/shellable.js:64:24)",
               "new PublishToNpmProject (/home/runner/work/aws-delivlib/aws-delivlib/lib/publishing.js:88:27)",
               "Pipeline.publishToNpm (/home/runner/work/aws-delivlib/aws-delivlib/lib/pipeline.js:160:25)",
@@ -1671,10 +1671,10 @@
             "type": "aws:cdk:logicalId",
             "data": "CodeCommitPipelineNpmRoleDefaultPolicy1AFB68F0",
             "trace": [
-              "new Policy (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-iam/lib/policy.js:58:26)",
-              "Role.addToPrincipalPolicy (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-iam/lib/role.js:214:34)",
-              "Project.addToRolePolicy (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-codebuild/lib/project.js:61:23)",
-              "new Project (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-codebuild/lib/project.js:398:14)",
+              "new Policy (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-iam/lib/policy.js:50:26)",
+              "Role.addToPrincipalPolicy (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-iam/lib/role.js:199:34)",
+              "Project.addToRolePolicy (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-codebuild/lib/project.js:56:23)",
+              "new Project (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-codebuild/lib/project.js:352:14)",
               "new Shellable (/home/runner/work/aws-delivlib/aws-delivlib/lib/shellable.js:64:24)",
               "new PublishToNpmProject (/home/runner/work/aws-delivlib/aws-delivlib/lib/publishing.js:88:27)",
               "Pipeline.publishToNpm (/home/runner/work/aws-delivlib/aws-delivlib/lib/pipeline.js:160:25)",
@@ -1694,7 +1694,7 @@
             "type": "aws:cdk:logicalId",
             "data": "CodeCommitPipelineNpm0D31AEFC",
             "trace": [
-              "new Project (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-codebuild/lib/project.js:355:26)",
+              "new Project (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-codebuild/lib/project.js:309:26)",
               "new Shellable (/home/runner/work/aws-delivlib/aws-delivlib/lib/shellable.js:64:24)",
               "new PublishToNpmProject (/home/runner/work/aws-delivlib/aws-delivlib/lib/publishing.js:88:27)",
               "Pipeline.publishToNpm (/home/runner/work/aws-delivlib/aws-delivlib/lib/pipeline.js:160:25)",
@@ -1714,7 +1714,7 @@
             "type": "aws:cdk:logicalId",
             "data": "CodeCommitPipelineNpmAlarm7A04F7A3",
             "trace": [
-              "new Alarm (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-cloudwatch/lib/alarm.js:76:23)",
+              "new Alarm (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-cloudwatch/lib/alarm.js:103:23)",
               "new Shellable (/home/runner/work/aws-delivlib/aws-delivlib/lib/shellable.js:100:22)",
               "new PublishToNpmProject (/home/runner/work/aws-delivlib/aws-delivlib/lib/publishing.js:88:27)",
               "Pipeline.publishToNpm (/home/runner/work/aws-delivlib/aws-delivlib/lib/pipeline.js:160:25)",
@@ -1734,8 +1734,8 @@
             "type": "aws:cdk:logicalId",
             "data": "CodeCommitPipelineNuGetRole488DA302",
             "trace": [
-              "new Role (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-iam/lib/role.js:75:22)",
-              "new Project (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-codebuild/lib/project.js:313:35)",
+              "new Role (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-iam/lib/role.js:50:22)",
+              "new Project (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-codebuild/lib/project.js:267:35)",
               "new Shellable (/home/runner/work/aws-delivlib/aws-delivlib/lib/shellable.js:64:24)",
               "new PublishToNuGetProject (/home/runner/work/aws-delivlib/aws-delivlib/lib/publishing.js:138:27)",
               "Pipeline.publishToNuGet (/home/runner/work/aws-delivlib/aws-delivlib/lib/pipeline.js:172:25)",
@@ -1755,10 +1755,10 @@
             "type": "aws:cdk:logicalId",
             "data": "CodeCommitPipelineNuGetRoleDefaultPolicy9AF66D81",
             "trace": [
-              "new Policy (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-iam/lib/policy.js:58:26)",
-              "Role.addToPrincipalPolicy (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-iam/lib/role.js:214:34)",
-              "Project.addToRolePolicy (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-codebuild/lib/project.js:61:23)",
-              "new Project (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-codebuild/lib/project.js:398:14)",
+              "new Policy (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-iam/lib/policy.js:50:26)",
+              "Role.addToPrincipalPolicy (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-iam/lib/role.js:199:34)",
+              "Project.addToRolePolicy (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-codebuild/lib/project.js:56:23)",
+              "new Project (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-codebuild/lib/project.js:352:14)",
               "new Shellable (/home/runner/work/aws-delivlib/aws-delivlib/lib/shellable.js:64:24)",
               "new PublishToNuGetProject (/home/runner/work/aws-delivlib/aws-delivlib/lib/publishing.js:138:27)",
               "Pipeline.publishToNuGet (/home/runner/work/aws-delivlib/aws-delivlib/lib/pipeline.js:172:25)",
@@ -1778,7 +1778,7 @@
             "type": "aws:cdk:logicalId",
             "data": "CodeCommitPipelineNuGet67CE1BA7",
             "trace": [
-              "new Project (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-codebuild/lib/project.js:355:26)",
+              "new Project (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-codebuild/lib/project.js:309:26)",
               "new Shellable (/home/runner/work/aws-delivlib/aws-delivlib/lib/shellable.js:64:24)",
               "new PublishToNuGetProject (/home/runner/work/aws-delivlib/aws-delivlib/lib/publishing.js:138:27)",
               "Pipeline.publishToNuGet (/home/runner/work/aws-delivlib/aws-delivlib/lib/pipeline.js:172:25)",
@@ -1798,7 +1798,7 @@
             "type": "aws:cdk:logicalId",
             "data": "CodeCommitPipelineNuGetAlarm4F3CAC42",
             "trace": [
-              "new Alarm (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-cloudwatch/lib/alarm.js:76:23)",
+              "new Alarm (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-cloudwatch/lib/alarm.js:103:23)",
               "new Shellable (/home/runner/work/aws-delivlib/aws-delivlib/lib/shellable.js:100:22)",
               "new PublishToNuGetProject (/home/runner/work/aws-delivlib/aws-delivlib/lib/publishing.js:138:27)",
               "Pipeline.publishToNuGet (/home/runner/work/aws-delivlib/aws-delivlib/lib/pipeline.js:172:25)",
@@ -1818,8 +1818,8 @@
             "type": "aws:cdk:logicalId",
             "data": "CodeCommitPipelineMavenRoleC3A7769B",
             "trace": [
-              "new Role (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-iam/lib/role.js:75:22)",
-              "new Project (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-codebuild/lib/project.js:313:35)",
+              "new Role (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-iam/lib/role.js:50:22)",
+              "new Project (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-codebuild/lib/project.js:267:35)",
               "new Shellable (/home/runner/work/aws-delivlib/aws-delivlib/lib/shellable.js:64:24)",
               "new PublishToMavenProject (/home/runner/work/aws-delivlib/aws-delivlib/lib/publishing.js:50:27)",
               "Pipeline.publishToMaven (/home/runner/work/aws-delivlib/aws-delivlib/lib/pipeline.js:166:25)",
@@ -1839,10 +1839,10 @@
             "type": "aws:cdk:logicalId",
             "data": "CodeCommitPipelineMavenRoleDefaultPolicyBCD15357",
             "trace": [
-              "new Policy (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-iam/lib/policy.js:58:26)",
-              "Role.addToPrincipalPolicy (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-iam/lib/role.js:214:34)",
-              "Project.addToRolePolicy (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-codebuild/lib/project.js:61:23)",
-              "new Project (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-codebuild/lib/project.js:398:14)",
+              "new Policy (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-iam/lib/policy.js:50:26)",
+              "Role.addToPrincipalPolicy (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-iam/lib/role.js:199:34)",
+              "Project.addToRolePolicy (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-codebuild/lib/project.js:56:23)",
+              "new Project (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-codebuild/lib/project.js:352:14)",
               "new Shellable (/home/runner/work/aws-delivlib/aws-delivlib/lib/shellable.js:64:24)",
               "new PublishToMavenProject (/home/runner/work/aws-delivlib/aws-delivlib/lib/publishing.js:50:27)",
               "Pipeline.publishToMaven (/home/runner/work/aws-delivlib/aws-delivlib/lib/pipeline.js:166:25)",
@@ -1862,7 +1862,7 @@
             "type": "aws:cdk:logicalId",
             "data": "CodeCommitPipelineMavenB7154296",
             "trace": [
-              "new Project (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-codebuild/lib/project.js:355:26)",
+              "new Project (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-codebuild/lib/project.js:309:26)",
               "new Shellable (/home/runner/work/aws-delivlib/aws-delivlib/lib/shellable.js:64:24)",
               "new PublishToMavenProject (/home/runner/work/aws-delivlib/aws-delivlib/lib/publishing.js:50:27)",
               "Pipeline.publishToMaven (/home/runner/work/aws-delivlib/aws-delivlib/lib/pipeline.js:166:25)",
@@ -1882,7 +1882,7 @@
             "type": "aws:cdk:logicalId",
             "data": "CodeCommitPipelineMavenAlarmC4A88DC3",
             "trace": [
-              "new Alarm (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-cloudwatch/lib/alarm.js:76:23)",
+              "new Alarm (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-cloudwatch/lib/alarm.js:103:23)",
               "new Shellable (/home/runner/work/aws-delivlib/aws-delivlib/lib/shellable.js:100:22)",
               "new PublishToMavenProject (/home/runner/work/aws-delivlib/aws-delivlib/lib/publishing.js:50:27)",
               "Pipeline.publishToMaven (/home/runner/work/aws-delivlib/aws-delivlib/lib/pipeline.js:166:25)",
@@ -1902,8 +1902,8 @@
             "type": "aws:cdk:logicalId",
             "data": "CodeCommitPipelineGitHubRole77F2217D",
             "trace": [
-              "new Role (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-iam/lib/role.js:75:22)",
-              "new Project (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-codebuild/lib/project.js:313:35)",
+              "new Role (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-iam/lib/role.js:50:22)",
+              "new Project (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-codebuild/lib/project.js:267:35)",
               "new Shellable (/home/runner/work/aws-delivlib/aws-delivlib/lib/shellable.js:64:24)",
               "new PublishToGitHub (/home/runner/work/aws-delivlib/aws-delivlib/lib/publishing.js:215:27)",
               "Pipeline.publishToGitHub (/home/runner/work/aws-delivlib/aws-delivlib/lib/pipeline.js:184:25)",
@@ -1923,11 +1923,11 @@
             "type": "aws:cdk:logicalId",
             "data": "CodeCommitPipelineGitHubRoleDefaultPolicy3FEA7E07",
             "trace": [
-              "new Policy (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-iam/lib/policy.js:58:26)",
-              "Role.addToPrincipalPolicy (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-iam/lib/role.js:214:34)",
-              "Function.serializeEnvVariables (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-codebuild/lib/project.js:621:92)",
-              "Project.renderEnvironment (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-codebuild/lib/project.js:826:27)",
-              "new Project (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-codebuild/lib/project.js:363:31)",
+              "new Policy (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-iam/lib/policy.js:50:26)",
+              "Role.addToPrincipalPolicy (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-iam/lib/role.js:199:34)",
+              "Function.serializeEnvVariables (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-codebuild/lib/project.js:576:92)",
+              "Project.renderEnvironment (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-codebuild/lib/project.js:763:27)",
+              "new Project (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-codebuild/lib/project.js:317:31)",
               "new Shellable (/home/runner/work/aws-delivlib/aws-delivlib/lib/shellable.js:64:24)",
               "new PublishToGitHub (/home/runner/work/aws-delivlib/aws-delivlib/lib/publishing.js:215:27)",
               "Pipeline.publishToGitHub (/home/runner/work/aws-delivlib/aws-delivlib/lib/pipeline.js:184:25)",
@@ -1947,7 +1947,7 @@
             "type": "aws:cdk:logicalId",
             "data": "CodeCommitPipelineGitHub0797840C",
             "trace": [
-              "new Project (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-codebuild/lib/project.js:355:26)",
+              "new Project (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-codebuild/lib/project.js:309:26)",
               "new Shellable (/home/runner/work/aws-delivlib/aws-delivlib/lib/shellable.js:64:24)",
               "new PublishToGitHub (/home/runner/work/aws-delivlib/aws-delivlib/lib/publishing.js:215:27)",
               "Pipeline.publishToGitHub (/home/runner/work/aws-delivlib/aws-delivlib/lib/pipeline.js:184:25)",
@@ -1967,7 +1967,7 @@
             "type": "aws:cdk:logicalId",
             "data": "CodeCommitPipelineGitHubAlarmBD31FE64",
             "trace": [
-              "new Alarm (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-cloudwatch/lib/alarm.js:76:23)",
+              "new Alarm (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-cloudwatch/lib/alarm.js:103:23)",
               "new Shellable (/home/runner/work/aws-delivlib/aws-delivlib/lib/shellable.js:100:22)",
               "new PublishToGitHub (/home/runner/work/aws-delivlib/aws-delivlib/lib/publishing.js:215:27)",
               "Pipeline.publishToGitHub (/home/runner/work/aws-delivlib/aws-delivlib/lib/pipeline.js:184:25)",
@@ -1987,8 +1987,8 @@
             "type": "aws:cdk:logicalId",
             "data": "CodeCommitPipelineGitHubPagesRole10784D1D",
             "trace": [
-              "new Role (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-iam/lib/role.js:75:22)",
-              "new Project (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-codebuild/lib/project.js:313:35)",
+              "new Role (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-iam/lib/role.js:50:22)",
+              "new Project (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-codebuild/lib/project.js:267:35)",
               "new Shellable (/home/runner/work/aws-delivlib/aws-delivlib/lib/shellable.js:64:24)",
               "new PublishDocsToGitHubProject (/home/runner/work/aws-delivlib/aws-delivlib/lib/publishing.js:175:27)",
               "Pipeline.publishToGitHubPages (/home/runner/work/aws-delivlib/aws-delivlib/lib/pipeline.js:178:25)",
@@ -2008,10 +2008,10 @@
             "type": "aws:cdk:logicalId",
             "data": "CodeCommitPipelineGitHubPagesRoleDefaultPolicy23292E7F",
             "trace": [
-              "new Policy (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-iam/lib/policy.js:58:26)",
-              "Role.addToPrincipalPolicy (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-iam/lib/role.js:214:34)",
-              "Project.addToRolePolicy (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-codebuild/lib/project.js:61:23)",
-              "new Project (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-codebuild/lib/project.js:398:14)",
+              "new Policy (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-iam/lib/policy.js:50:26)",
+              "Role.addToPrincipalPolicy (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-iam/lib/role.js:199:34)",
+              "Project.addToRolePolicy (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-codebuild/lib/project.js:56:23)",
+              "new Project (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-codebuild/lib/project.js:352:14)",
               "new Shellable (/home/runner/work/aws-delivlib/aws-delivlib/lib/shellable.js:64:24)",
               "new PublishDocsToGitHubProject (/home/runner/work/aws-delivlib/aws-delivlib/lib/publishing.js:175:27)",
               "Pipeline.publishToGitHubPages (/home/runner/work/aws-delivlib/aws-delivlib/lib/pipeline.js:178:25)",
@@ -2031,7 +2031,7 @@
             "type": "aws:cdk:logicalId",
             "data": "CodeCommitPipelineGitHubPages53B77CF6",
             "trace": [
-              "new Project (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-codebuild/lib/project.js:355:26)",
+              "new Project (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-codebuild/lib/project.js:309:26)",
               "new Shellable (/home/runner/work/aws-delivlib/aws-delivlib/lib/shellable.js:64:24)",
               "new PublishDocsToGitHubProject (/home/runner/work/aws-delivlib/aws-delivlib/lib/publishing.js:175:27)",
               "Pipeline.publishToGitHubPages (/home/runner/work/aws-delivlib/aws-delivlib/lib/pipeline.js:178:25)",
@@ -2051,7 +2051,7 @@
             "type": "aws:cdk:logicalId",
             "data": "CodeCommitPipelineGitHubPagesAlarmC5B4BC57",
             "trace": [
-              "new Alarm (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-cloudwatch/lib/alarm.js:76:23)",
+              "new Alarm (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-cloudwatch/lib/alarm.js:103:23)",
               "new Shellable (/home/runner/work/aws-delivlib/aws-delivlib/lib/shellable.js:100:22)",
               "new PublishDocsToGitHubProject (/home/runner/work/aws-delivlib/aws-delivlib/lib/publishing.js:175:27)",
               "Pipeline.publishToGitHubPages (/home/runner/work/aws-delivlib/aws-delivlib/lib/pipeline.js:178:25)",
@@ -2071,8 +2071,8 @@
             "type": "aws:cdk:logicalId",
             "data": "CodeCommitPipelinePyPIRole30E20A9B",
             "trace": [
-              "new Role (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-iam/lib/role.js:75:22)",
-              "new Project (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-codebuild/lib/project.js:313:35)",
+              "new Role (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-iam/lib/role.js:50:22)",
+              "new Project (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-codebuild/lib/project.js:267:35)",
               "new Shellable (/home/runner/work/aws-delivlib/aws-delivlib/lib/shellable.js:64:24)",
               "new PublishToPyPi (/home/runner/work/aws-delivlib/aws-delivlib/lib/publishing.js:288:27)",
               "Pipeline.publishToPyPI (/home/runner/work/aws-delivlib/aws-delivlib/lib/pipeline.js:190:25)",
@@ -2092,10 +2092,10 @@
             "type": "aws:cdk:logicalId",
             "data": "CodeCommitPipelinePyPIRoleDefaultPolicy5062B3BA",
             "trace": [
-              "new Policy (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-iam/lib/policy.js:58:26)",
-              "Role.addToPrincipalPolicy (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-iam/lib/role.js:214:34)",
-              "Project.addToRolePolicy (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-codebuild/lib/project.js:61:23)",
-              "new Project (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-codebuild/lib/project.js:398:14)",
+              "new Policy (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-iam/lib/policy.js:50:26)",
+              "Role.addToPrincipalPolicy (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-iam/lib/role.js:199:34)",
+              "Project.addToRolePolicy (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-codebuild/lib/project.js:56:23)",
+              "new Project (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-codebuild/lib/project.js:352:14)",
               "new Shellable (/home/runner/work/aws-delivlib/aws-delivlib/lib/shellable.js:64:24)",
               "new PublishToPyPi (/home/runner/work/aws-delivlib/aws-delivlib/lib/publishing.js:288:27)",
               "Pipeline.publishToPyPI (/home/runner/work/aws-delivlib/aws-delivlib/lib/pipeline.js:190:25)",
@@ -2115,7 +2115,7 @@
             "type": "aws:cdk:logicalId",
             "data": "CodeCommitPipelinePyPI2C59CE7B",
             "trace": [
-              "new Project (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-codebuild/lib/project.js:355:26)",
+              "new Project (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-codebuild/lib/project.js:309:26)",
               "new Shellable (/home/runner/work/aws-delivlib/aws-delivlib/lib/shellable.js:64:24)",
               "new PublishToPyPi (/home/runner/work/aws-delivlib/aws-delivlib/lib/publishing.js:288:27)",
               "Pipeline.publishToPyPI (/home/runner/work/aws-delivlib/aws-delivlib/lib/pipeline.js:190:25)",
@@ -2135,7 +2135,7 @@
             "type": "aws:cdk:logicalId",
             "data": "CodeCommitPipelinePyPIAlarmEA15EF14",
             "trace": [
-              "new Alarm (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-cloudwatch/lib/alarm.js:76:23)",
+              "new Alarm (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-cloudwatch/lib/alarm.js:103:23)",
               "new Shellable (/home/runner/work/aws-delivlib/aws-delivlib/lib/shellable.js:100:22)",
               "new PublishToPyPi (/home/runner/work/aws-delivlib/aws-delivlib/lib/publishing.js:288:27)",
               "Pipeline.publishToPyPI (/home/runner/work/aws-delivlib/aws-delivlib/lib/pipeline.js:190:25)",
@@ -2155,8 +2155,8 @@
             "type": "aws:cdk:logicalId",
             "data": "CodeCommitPipelineGolangRole46DA8D4C",
             "trace": [
-              "new Role (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-iam/lib/role.js:75:22)",
-              "new Project (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-codebuild/lib/project.js:313:35)",
+              "new Role (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-iam/lib/role.js:50:22)",
+              "new Project (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-codebuild/lib/project.js:267:35)",
               "new Shellable (/home/runner/work/aws-delivlib/aws-delivlib/lib/shellable.js:64:24)",
               "new PublishToGolang (/home/runner/work/aws-delivlib/aws-delivlib/lib/publishing.js:321:27)",
               "Pipeline.publishToGolang (/home/runner/work/aws-delivlib/aws-delivlib/lib/pipeline.js:205:25)",
@@ -2176,10 +2176,10 @@
             "type": "aws:cdk:logicalId",
             "data": "CodeCommitPipelineGolangRoleDefaultPolicy189AF9A0",
             "trace": [
-              "new Policy (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-iam/lib/policy.js:58:26)",
-              "Role.addToPrincipalPolicy (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-iam/lib/role.js:214:34)",
-              "Project.addToRolePolicy (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-codebuild/lib/project.js:61:23)",
-              "new Project (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-codebuild/lib/project.js:398:14)",
+              "new Policy (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-iam/lib/policy.js:50:26)",
+              "Role.addToPrincipalPolicy (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-iam/lib/role.js:199:34)",
+              "Project.addToRolePolicy (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-codebuild/lib/project.js:56:23)",
+              "new Project (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-codebuild/lib/project.js:352:14)",
               "new Shellable (/home/runner/work/aws-delivlib/aws-delivlib/lib/shellable.js:64:24)",
               "new PublishToGolang (/home/runner/work/aws-delivlib/aws-delivlib/lib/publishing.js:321:27)",
               "Pipeline.publishToGolang (/home/runner/work/aws-delivlib/aws-delivlib/lib/pipeline.js:205:25)",
@@ -2199,7 +2199,7 @@
             "type": "aws:cdk:logicalId",
             "data": "CodeCommitPipelineGolangBDFA17A1",
             "trace": [
-              "new Project (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-codebuild/lib/project.js:355:26)",
+              "new Project (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-codebuild/lib/project.js:309:26)",
               "new Shellable (/home/runner/work/aws-delivlib/aws-delivlib/lib/shellable.js:64:24)",
               "new PublishToGolang (/home/runner/work/aws-delivlib/aws-delivlib/lib/publishing.js:321:27)",
               "Pipeline.publishToGolang (/home/runner/work/aws-delivlib/aws-delivlib/lib/pipeline.js:205:25)",
@@ -2219,7 +2219,7 @@
             "type": "aws:cdk:logicalId",
             "data": "CodeCommitPipelineGolangAlarmF9F61D0D",
             "trace": [
-              "new Alarm (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-cloudwatch/lib/alarm.js:76:23)",
+              "new Alarm (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-cloudwatch/lib/alarm.js:103:23)",
               "new Shellable (/home/runner/work/aws-delivlib/aws-delivlib/lib/shellable.js:100:22)",
               "new PublishToGolang (/home/runner/work/aws-delivlib/aws-delivlib/lib/publishing.js:321:27)",
               "Pipeline.publishToGolang (/home/runner/work/aws-delivlib/aws-delivlib/lib/pipeline.js:205:25)",
@@ -2239,8 +2239,8 @@
             "type": "aws:cdk:logicalId",
             "data": "CodeCommitPipelineAutoBumpAutoPullRequestRoleE7E0E388",
             "trace": [
-              "new Role (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-iam/lib/role.js:75:22)",
-              "new Project (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-codebuild/lib/project.js:313:35)",
+              "new Role (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-iam/lib/role.js:50:22)",
+              "new Project (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-codebuild/lib/project.js:267:35)",
               "new AutoPullRequest (/home/runner/work/aws-delivlib/aws-delivlib/lib/pull-request/pr.js:77:24)",
               "new AutoBump (/home/runner/work/aws-delivlib/aws-delivlib/lib/pull-request/bump.js:35:19)",
               "Pipeline.autoBump (/home/runner/work/aws-delivlib/aws-delivlib/lib/pipeline.js:218:26)",
@@ -2260,10 +2260,10 @@
             "type": "aws:cdk:logicalId",
             "data": "CodeCommitPipelineAutoBumpAutoPullRequestRoleDefaultPolicy3BB1CD6F",
             "trace": [
-              "new Policy (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-iam/lib/policy.js:58:26)",
-              "Role.addToPrincipalPolicy (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-iam/lib/role.js:214:34)",
-              "Project.addToRolePolicy (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-codebuild/lib/project.js:61:23)",
-              "new Project (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-codebuild/lib/project.js:398:14)",
+              "new Policy (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-iam/lib/policy.js:50:26)",
+              "Role.addToPrincipalPolicy (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-iam/lib/role.js:199:34)",
+              "Project.addToRolePolicy (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-codebuild/lib/project.js:56:23)",
+              "new Project (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-codebuild/lib/project.js:352:14)",
               "new AutoPullRequest (/home/runner/work/aws-delivlib/aws-delivlib/lib/pull-request/pr.js:77:24)",
               "new AutoBump (/home/runner/work/aws-delivlib/aws-delivlib/lib/pull-request/bump.js:35:19)",
               "Pipeline.autoBump (/home/runner/work/aws-delivlib/aws-delivlib/lib/pipeline.js:218:26)",
@@ -2283,7 +2283,7 @@
             "type": "aws:cdk:logicalId",
             "data": "CodeCommitPipelineAutoBumpAutoPullRequest033F6993",
             "trace": [
-              "new Project (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-codebuild/lib/project.js:355:26)",
+              "new Project (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-codebuild/lib/project.js:309:26)",
               "new AutoPullRequest (/home/runner/work/aws-delivlib/aws-delivlib/lib/pull-request/pr.js:77:24)",
               "new AutoBump (/home/runner/work/aws-delivlib/aws-delivlib/lib/pull-request/bump.js:35:19)",
               "Pipeline.autoBump (/home/runner/work/aws-delivlib/aws-delivlib/lib/pipeline.js:218:26)",
@@ -2303,8 +2303,8 @@
             "type": "aws:cdk:logicalId",
             "data": "CodeCommitPipelineAutoBumpAutoPullRequestAutoPullRequestFailedAlarmEFC2345F",
             "trace": [
-              "new Alarm (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-cloudwatch/lib/alarm.js:76:23)",
-              "Metric.createAlarm (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-cloudwatch/lib/metric.js:211:16)",
+              "new Alarm (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-cloudwatch/lib/alarm.js:103:23)",
+              "Metric.createAlarm (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-cloudwatch/lib/metric.js:189:16)",
               "new AutoPullRequest (/home/runner/work/aws-delivlib/aws-delivlib/lib/pull-request/pr.js:108:99)",
               "new AutoBump (/home/runner/work/aws-delivlib/aws-delivlib/lib/pull-request/bump.js:35:19)",
               "Pipeline.autoBump (/home/runner/work/aws-delivlib/aws-delivlib/lib/pipeline.js:218:26)",
@@ -2324,8 +2324,8 @@
             "type": "aws:cdk:logicalId",
             "data": "CodeCommitPipelineAutoBuildProjectRole733AD222",
             "trace": [
-              "new Role (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-iam/lib/role.js:75:22)",
-              "new Project (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-codebuild/lib/project.js:313:35)",
+              "new Role (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-iam/lib/role.js:50:22)",
+              "new Project (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-codebuild/lib/project.js:267:35)",
               "new AutoBuild (/home/runner/work/aws-delivlib/aws-delivlib/lib/auto-build.js:10:24)",
               "Pipeline.autoBuild (/home/runner/work/aws-delivlib/aws-delivlib/lib/pipeline.js:255:16)",
               "new TestStack (/home/runner/work/aws-delivlib/aws-delivlib/lib/__tests__/test-stack.js:175:18)",
@@ -2344,10 +2344,10 @@
             "type": "aws:cdk:logicalId",
             "data": "CodeCommitPipelineAutoBuildProjectRoleDefaultPolicyFF5563AC",
             "trace": [
-              "new Policy (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-iam/lib/policy.js:58:26)",
-              "Role.addToPrincipalPolicy (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-iam/lib/role.js:214:34)",
-              "Project.addToRolePolicy (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-codebuild/lib/project.js:61:23)",
-              "new Project (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-codebuild/lib/project.js:398:14)",
+              "new Policy (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-iam/lib/policy.js:50:26)",
+              "Role.addToPrincipalPolicy (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-iam/lib/role.js:199:34)",
+              "Project.addToRolePolicy (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-codebuild/lib/project.js:56:23)",
+              "new Project (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-codebuild/lib/project.js:352:14)",
               "new AutoBuild (/home/runner/work/aws-delivlib/aws-delivlib/lib/auto-build.js:10:24)",
               "Pipeline.autoBuild (/home/runner/work/aws-delivlib/aws-delivlib/lib/pipeline.js:255:16)",
               "new TestStack (/home/runner/work/aws-delivlib/aws-delivlib/lib/__tests__/test-stack.js:175:18)",
@@ -2366,7 +2366,7 @@
             "type": "aws:cdk:logicalId",
             "data": "CodeCommitPipelineAutoBuildProject5D212EE9",
             "trace": [
-              "new Project (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-codebuild/lib/project.js:355:26)",
+              "new Project (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-codebuild/lib/project.js:309:26)",
               "new AutoBuild (/home/runner/work/aws-delivlib/aws-delivlib/lib/auto-build.js:10:24)",
               "Pipeline.autoBuild (/home/runner/work/aws-delivlib/aws-delivlib/lib/pipeline.js:255:16)",
               "new TestStack (/home/runner/work/aws-delivlib/aws-delivlib/lib/__tests__/test-stack.js:175:18)",
@@ -2403,7 +2403,7 @@
             "type": "aws:cdk:logicalId",
             "data": "CodeCommitPipelineChangeControllerCalendar94B1DEA8",
             "trace": [
-              "new Bucket (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-s3/lib/bucket.js:634:26)",
+              "new Bucket (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-s3/lib/bucket.js:595:26)",
               "new ChangeController (/home/runner/work/aws-delivlib/aws-delivlib/lib/change-controller.js:36:47)",
               "Pipeline.addChangeControl (/home/runner/work/aws-delivlib/aws-delivlib/lib/pipeline.js:154:16)",
               "new TestStack (/home/runner/work/aws-delivlib/aws-delivlib/lib/__tests__/test-stack.js:181:18)",
@@ -2424,10 +2424,10 @@
             "trace": [
               "BucketNotifications.createResourceOnce (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-s3/lib/notifications-resource/notifications-resource.js:98:29)",
               "BucketNotifications.addNotification (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-s3/lib/notifications-resource/notifications-resource.js:45:31)",
-              "/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-s3/lib/bucket.js:421:63",
-              "Bucket.withNotifications (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-s3/lib/bucket.js:430:9)",
-              "Bucket.addEventNotification (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-s3/lib/bucket.js:421:14)",
-              "Bucket.addObjectCreatedNotification (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-s3/lib/bucket.js:445:21)",
+              "/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-s3/lib/bucket.js:370:63",
+              "Bucket.withNotifications (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-s3/lib/bucket.js:379:9)",
+              "Bucket.addEventNotification (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-s3/lib/bucket.js:370:14)",
+              "Bucket.addObjectCreatedNotification (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-s3/lib/bucket.js:392:21)",
               "new ChangeController (/home/runner/work/aws-delivlib/aws-delivlib/lib/change-controller.js:62:23)",
               "Pipeline.addChangeControl (/home/runner/work/aws-delivlib/aws-delivlib/lib/pipeline.js:154:16)",
               "new TestStack (/home/runner/work/aws-delivlib/aws-delivlib/lib/__tests__/test-stack.js:181:18)",
@@ -2446,13 +2446,13 @@
             "type": "aws:cdk:logicalId",
             "data": "CodeCommitPipelineChangeControllerCalendarAllowBucketNotificationsTodelivlibtestCodeCommitPipelineChangeControllerFunction83CC56EB3330DA3F",
             "trace": [
-              "NodejsFunction.addPermission (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-lambda/lib/function-base.js:44:9)",
-              "LambdaDestination.bind (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-s3-notifications/lib/lambda.js:44:21)",
+              "NodejsFunction.addPermission (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-lambda/lib/function-base.js:38:9)",
+              "LambdaDestination.bind (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-s3-notifications/lib/lambda.js:30:21)",
               "BucketNotifications.addNotification (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-s3/lib/notifications-resource/notifications-resource.js:48:36)",
-              "/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-s3/lib/bucket.js:421:63",
-              "Bucket.withNotifications (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-s3/lib/bucket.js:430:9)",
-              "Bucket.addEventNotification (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-s3/lib/bucket.js:421:14)",
-              "Bucket.addObjectCreatedNotification (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-s3/lib/bucket.js:445:21)",
+              "/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-s3/lib/bucket.js:370:63",
+              "Bucket.withNotifications (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-s3/lib/bucket.js:379:9)",
+              "Bucket.addEventNotification (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-s3/lib/bucket.js:370:14)",
+              "Bucket.addObjectCreatedNotification (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-s3/lib/bucket.js:392:21)",
               "new ChangeController (/home/runner/work/aws-delivlib/aws-delivlib/lib/change-controller.js:62:23)",
               "Pipeline.addChangeControl (/home/runner/work/aws-delivlib/aws-delivlib/lib/pipeline.js:154:16)",
               "new TestStack (/home/runner/work/aws-delivlib/aws-delivlib/lib/__tests__/test-stack.js:181:18)",
@@ -2471,9 +2471,9 @@
             "type": "aws:cdk:logicalId",
             "data": "CodeCommitPipelineChangeControllerFunctionServiceRoleF02841DB",
             "trace": [
-              "new Role (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-iam/lib/role.js:75:22)",
-              "new Function (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-lambda/lib/function.js:83:35)",
-              "new NodejsFunction (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-lambda-nodejs/lib/function.js:37:9)",
+              "new Role (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-iam/lib/role.js:50:22)",
+              "new Function (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-lambda/lib/function.js:82:35)",
+              "new NodejsFunction (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-lambda-nodejs/lib/function.js:32:9)",
               "new ChangeController (/home/runner/work/aws-delivlib/aws-delivlib/lib/change-controller.js:43:20)",
               "Pipeline.addChangeControl (/home/runner/work/aws-delivlib/aws-delivlib/lib/pipeline.js:154:16)",
               "new TestStack (/home/runner/work/aws-delivlib/aws-delivlib/lib/__tests__/test-stack.js:181:18)",
@@ -2492,9 +2492,9 @@
             "type": "aws:cdk:logicalId",
             "data": "CodeCommitPipelineChangeControllerFunctionServiceRoleDefaultPolicy315F7AF5",
             "trace": [
-              "new Policy (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-iam/lib/policy.js:58:26)",
-              "Role.addToPrincipalPolicy (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-iam/lib/role.js:214:34)",
-              "NodejsFunction.addToRolePolicy (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-lambda/lib/function-base.js:63:19)",
+              "new Policy (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-iam/lib/policy.js:50:26)",
+              "Role.addToPrincipalPolicy (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-iam/lib/role.js:199:34)",
+              "NodejsFunction.addToRolePolicy (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-lambda/lib/function-base.js:55:19)",
               "new ChangeController (/home/runner/work/aws-delivlib/aws-delivlib/lib/change-controller.js:56:12)",
               "Pipeline.addChangeControl (/home/runner/work/aws-delivlib/aws-delivlib/lib/pipeline.js:154:16)",
               "new TestStack (/home/runner/work/aws-delivlib/aws-delivlib/lib/__tests__/test-stack.js:181:18)",
@@ -2513,8 +2513,8 @@
             "type": "aws:cdk:logicalId",
             "data": "CodeCommitPipelineChangeControllerFunction776EAE6A",
             "trace": [
-              "new Function (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-lambda/lib/function.js:146:26)",
-              "new NodejsFunction (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-lambda-nodejs/lib/function.js:37:9)",
+              "new Function (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-lambda/lib/function.js:154:26)",
+              "new NodejsFunction (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-lambda-nodejs/lib/function.js:32:9)",
               "new ChangeController (/home/runner/work/aws-delivlib/aws-delivlib/lib/change-controller.js:43:20)",
               "Pipeline.addChangeControl (/home/runner/work/aws-delivlib/aws-delivlib/lib/pipeline.js:154:16)",
               "new TestStack (/home/runner/work/aws-delivlib/aws-delivlib/lib/__tests__/test-stack.js:181:18)",
@@ -2533,7 +2533,7 @@
             "type": "aws:cdk:logicalId",
             "data": "CodeCommitPipelineChangeControllerFailed03331BFB",
             "trace": [
-              "new Alarm (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-cloudwatch/lib/alarm.js:76:23)",
+              "new Alarm (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-cloudwatch/lib/alarm.js:103:23)",
               "new ChangeController (/home/runner/work/aws-delivlib/aws-delivlib/lib/change-controller.js:66:29)",
               "Pipeline.addChangeControl (/home/runner/work/aws-delivlib/aws-delivlib/lib/pipeline.js:154:16)",
               "new TestStack (/home/runner/work/aws-delivlib/aws-delivlib/lib/__tests__/test-stack.js:181:18)",
@@ -2552,7 +2552,7 @@
             "type": "aws:cdk:logicalId",
             "data": "CodeCommitPipelineChangeControllerRuleAEEA7A52",
             "trace": [
-              "new Rule (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-events/lib/rule.js:37:26)",
+              "new Rule (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-events/lib/rule.js:33:26)",
               "new ChangeController (/home/runner/work/aws-delivlib/aws-delivlib/lib/change-controller.js:75:9)",
               "Pipeline.addChangeControl (/home/runner/work/aws-delivlib/aws-delivlib/lib/pipeline.js:154:16)",
               "new TestStack (/home/runner/work/aws-delivlib/aws-delivlib/lib/__tests__/test-stack.js:181:18)",
@@ -2571,11 +2571,11 @@
             "type": "aws:cdk:logicalId",
             "data": "CodeCommitPipelineChangeControllerRuleAllowEventRuledelivlibtestCodeCommitPipelineChangeControllerFunction83CC56EB9365DB12",
             "trace": [
-              "NodejsFunction.addPermission (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-lambda/lib/function-base.js:44:9)",
+              "NodejsFunction.addPermission (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-lambda/lib/function-base.js:38:9)",
               "Object.addLambdaPermission (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-events-targets/lib/util.js:63:17)",
-              "LambdaFunction.bind (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-events-targets/lib/lambda.js:31:16)",
-              "Rule.addTarget (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-events/lib/rule.js:91:36)",
-              "new Rule (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-events/lib/rule.js:54:18)",
+              "LambdaFunction.bind (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-events-targets/lib/lambda.js:25:16)",
+              "Rule.addTarget (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-events/lib/rule.js:85:36)",
+              "new Rule (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-events/lib/rule.js:50:18)",
               "new ChangeController (/home/runner/work/aws-delivlib/aws-delivlib/lib/change-controller.js:75:9)",
               "Pipeline.addChangeControl (/home/runner/work/aws-delivlib/aws-delivlib/lib/pipeline.js:154:16)",
               "new TestStack (/home/runner/work/aws-delivlib/aws-delivlib/lib/__tests__/test-stack.js:181:18)",
@@ -2630,7 +2630,7 @@
             "type": "aws:cdk:logicalId",
             "data": "AssumeMe924099BB",
             "trace": [
-              "new Role (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-iam/lib/role.js:75:22)",
+              "new Role (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-iam/lib/role.js:50:22)",
               "new TestStack (/home/runner/work/aws-delivlib/aws-delivlib/lib/__tests__/test-stack.js:68:22)",
               "Object.<anonymous> (/home/runner/work/aws-delivlib/aws-delivlib/lib/__tests__/integ.delivlib.js:29:1)",
               "Module._compile (node:internal/modules/cjs/loader:1103:14)",
@@ -2647,7 +2647,7 @@
             "type": "aws:cdk:logicalId",
             "data": "X509CodeSigningKeyRSAPrivateKeyOpenSslCliLayer3F0C7B04",
             "trace": [
-              "new LayerVersion (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-lambda/lib/layers.js:67:26)",
+              "new LayerVersion (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-lambda/lib/layers.js:50:26)",
               "new RsaPrivateKeySecret (/home/runner/work/aws-delivlib/aws-delivlib/lib/code-signing/private-key.js:45:22)",
               "new CodeSigningCertificate (/home/runner/work/aws-delivlib/aws-delivlib/lib/code-signing/code-signing-certificate.js:48:28)",
               "new TestStack (/home/runner/work/aws-delivlib/aws-delivlib/lib/__tests__/test-stack.js:116:26)",
@@ -2666,8 +2666,8 @@
             "type": "aws:cdk:logicalId",
             "data": "X509CodeSigningKeyRSAPrivateKeyE5980A70",
             "trace": [
-              "new CustomResource (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/core/lib/custom-resource.js:46:25)",
-              "new CustomResource (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-cloudformation/lib/custom-resource.js:78:9)",
+              "new CustomResource (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/core/lib/custom-resource.js:42:25)",
+              "new CustomResource (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-cloudformation/lib/custom-resource.js:63:9)",
               "new RsaPrivateKeySecret (/home/runner/work/aws-delivlib/aws-delivlib/lib/code-signing/private-key.js:80:28)",
               "new CodeSigningCertificate (/home/runner/work/aws-delivlib/aws-delivlib/lib/code-signing/code-signing-certificate.js:48:28)",
               "new TestStack (/home/runner/work/aws-delivlib/aws-delivlib/lib/__tests__/test-stack.js:116:26)",
@@ -2686,7 +2686,7 @@
             "type": "aws:cdk:logicalId",
             "data": "X509CodeSigningKeyRSAPrivateKeyCertificateSigningRequestOpenSslCliLayer61AF8E77",
             "trace": [
-              "new LayerVersion (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-lambda/lib/layers.js:67:26)",
+              "new LayerVersion (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-lambda/lib/layers.js:50:26)",
               "new CertificateSigningRequest (/home/runner/work/aws-delivlib/aws-delivlib/lib/code-signing/certificate-signing-request.js:47:22)",
               "RsaPrivateKeySecret.newCertificateSigningRequest (/home/runner/work/aws-delivlib/aws-delivlib/lib/code-signing/private-key.js:129:16)",
               "new CodeSigningCertificate (/home/runner/work/aws-delivlib/aws-delivlib/lib/code-signing/code-signing-certificate.js:61:36)",
@@ -2706,8 +2706,8 @@
             "type": "aws:cdk:logicalId",
             "data": "X509CodeSigningKeyRSAPrivateKeyCertificateSigningRequest7F706C9D",
             "trace": [
-              "new CustomResource (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/core/lib/custom-resource.js:46:25)",
-              "new CustomResource (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-cloudformation/lib/custom-resource.js:78:9)",
+              "new CustomResource (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/core/lib/custom-resource.js:42:25)",
+              "new CustomResource (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-cloudformation/lib/custom-resource.js:63:9)",
               "new CertificateSigningRequest (/home/runner/work/aws-delivlib/aws-delivlib/lib/code-signing/certificate-signing-request.js:51:21)",
               "RsaPrivateKeySecret.newCertificateSigningRequest (/home/runner/work/aws-delivlib/aws-delivlib/lib/code-signing/private-key.js:129:16)",
               "new CodeSigningCertificate (/home/runner/work/aws-delivlib/aws-delivlib/lib/code-signing/code-signing-certificate.js:61:36)",
@@ -2744,7 +2744,7 @@
             "type": "aws:cdk:logicalId",
             "data": "X509CodeSigningKey8DE65BF8",
             "trace": [
-              "new StringParameter (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-ssm/lib/parameter.js:111:26)",
+              "new StringParameter (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-ssm/lib/parameter.js:120:26)",
               "new CodeSigningCertificate (/home/runner/work/aws-delivlib/aws-delivlib/lib/code-signing/code-signing-certificate.js:70:26)",
               "new TestStack (/home/runner/work/aws-delivlib/aws-delivlib/lib/__tests__/test-stack.js:116:26)",
               "Object.<anonymous> (/home/runner/work/aws-delivlib/aws-delivlib/lib/__tests__/integ.delivlib.js:29:1)",
@@ -2762,10 +2762,10 @@
             "type": "aws:cdk:logicalId",
             "data": "RSAPrivateKey72FD327D38134632934028EC437AA486ServiceRole76094455",
             "trace": [
-              "new Role (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-iam/lib/role.js:75:22)",
-              "new Function (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-lambda/lib/function.js:83:35)",
-              "SingletonFunction.ensureLambda (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-lambda/lib/singleton-lambda.js:156:16)",
-              "new SingletonFunction (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-lambda/lib/singleton-lambda.js:28:36)",
+              "new Role (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-iam/lib/role.js:50:22)",
+              "new Function (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-lambda/lib/function.js:82:35)",
+              "SingletonFunction.ensureLambda (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-lambda/lib/singleton-lambda.js:130:16)",
+              "new SingletonFunction (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-lambda/lib/singleton-lambda.js:24:36)",
               "new RsaPrivateKeySecret (/home/runner/work/aws-delivlib/aws-delivlib/lib/code-signing/private-key.js:36:32)",
               "new CodeSigningCertificate (/home/runner/work/aws-delivlib/aws-delivlib/lib/code-signing/code-signing-certificate.js:48:28)",
               "new TestStack (/home/runner/work/aws-delivlib/aws-delivlib/lib/__tests__/test-stack.js:116:26)",
@@ -2784,9 +2784,9 @@
             "type": "aws:cdk:logicalId",
             "data": "RSAPrivateKey72FD327D38134632934028EC437AA486ServiceRoleDefaultPolicy487DB1EA",
             "trace": [
-              "new Policy (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-iam/lib/policy.js:58:26)",
-              "Role.addToPrincipalPolicy (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-iam/lib/role.js:214:34)",
-              "SingletonFunction.addToRolePolicy (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-lambda/lib/function-base.js:63:19)",
+              "new Policy (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-iam/lib/policy.js:50:26)",
+              "Role.addToPrincipalPolicy (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-iam/lib/role.js:199:34)",
+              "SingletonFunction.addToRolePolicy (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-lambda/lib/function-base.js:55:19)",
               "new RsaPrivateKeySecret (/home/runner/work/aws-delivlib/aws-delivlib/lib/code-signing/private-key.js:56:24)",
               "new CodeSigningCertificate (/home/runner/work/aws-delivlib/aws-delivlib/lib/code-signing/code-signing-certificate.js:48:28)",
               "new TestStack (/home/runner/work/aws-delivlib/aws-delivlib/lib/__tests__/test-stack.js:116:26)",
@@ -2805,9 +2805,9 @@
             "type": "aws:cdk:logicalId",
             "data": "RSAPrivateKey72FD327D38134632934028EC437AA486D8EE708F",
             "trace": [
-              "new Function (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-lambda/lib/function.js:146:26)",
-              "SingletonFunction.ensureLambda (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-lambda/lib/singleton-lambda.js:156:16)",
-              "new SingletonFunction (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-lambda/lib/singleton-lambda.js:28:36)",
+              "new Function (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-lambda/lib/function.js:154:26)",
+              "SingletonFunction.ensureLambda (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-lambda/lib/singleton-lambda.js:130:16)",
+              "new SingletonFunction (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-lambda/lib/singleton-lambda.js:24:36)",
               "new RsaPrivateKeySecret (/home/runner/work/aws-delivlib/aws-delivlib/lib/code-signing/private-key.js:36:32)",
               "new CodeSigningCertificate (/home/runner/work/aws-delivlib/aws-delivlib/lib/code-signing/code-signing-certificate.js:48:28)",
               "new TestStack (/home/runner/work/aws-delivlib/aws-delivlib/lib/__tests__/test-stack.js:116:26)",
@@ -2826,10 +2826,10 @@
             "type": "aws:cdk:logicalId",
             "data": "CreateCSR541F67826DCF49A78C5A67715ADD9E4CServiceRoleD2990C92",
             "trace": [
-              "new Role (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-iam/lib/role.js:75:22)",
-              "new Function (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-lambda/lib/function.js:83:35)",
-              "SingletonFunction.ensureLambda (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-lambda/lib/singleton-lambda.js:156:16)",
-              "new SingletonFunction (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-lambda/lib/singleton-lambda.js:28:36)",
+              "new Role (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-iam/lib/role.js:50:22)",
+              "new Function (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-lambda/lib/function.js:82:35)",
+              "SingletonFunction.ensureLambda (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-lambda/lib/singleton-lambda.js:130:16)",
+              "new SingletonFunction (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-lambda/lib/singleton-lambda.js:24:36)",
               "new CertificateSigningRequest (/home/runner/work/aws-delivlib/aws-delivlib/lib/code-signing/certificate-signing-request.js:38:32)",
               "RsaPrivateKeySecret.newCertificateSigningRequest (/home/runner/work/aws-delivlib/aws-delivlib/lib/code-signing/private-key.js:129:16)",
               "new CodeSigningCertificate (/home/runner/work/aws-delivlib/aws-delivlib/lib/code-signing/code-signing-certificate.js:61:36)",
@@ -2849,9 +2849,9 @@
             "type": "aws:cdk:logicalId",
             "data": "CreateCSR541F67826DCF49A78C5A67715ADD9E4CServiceRoleDefaultPolicyC0800208",
             "trace": [
-              "new Policy (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-iam/lib/policy.js:58:26)",
-              "Role.addToPrincipalPolicy (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-iam/lib/role.js:214:34)",
-              "Role.addToPolicy (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-iam/lib/role.js:227:21)",
+              "new Policy (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-iam/lib/policy.js:50:26)",
+              "Role.addToPrincipalPolicy (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-iam/lib/role.js:199:34)",
+              "Role.addToPolicy (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-iam/lib/role.js:207:21)",
               "RsaPrivateKeySecret.grantGetSecretValue (/home/runner/work/aws-delivlib/aws-delivlib/lib/code-signing/private-key.js:142:17)",
               "new CertificateSigningRequest (/home/runner/work/aws-delivlib/aws-delivlib/lib/code-signing/certificate-signing-request.js:74:30)",
               "RsaPrivateKeySecret.newCertificateSigningRequest (/home/runner/work/aws-delivlib/aws-delivlib/lib/code-signing/private-key.js:129:16)",
@@ -2872,9 +2872,9 @@
             "type": "aws:cdk:logicalId",
             "data": "CreateCSR541F67826DCF49A78C5A67715ADD9E4C8F4169F6",
             "trace": [
-              "new Function (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-lambda/lib/function.js:146:26)",
-              "SingletonFunction.ensureLambda (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-lambda/lib/singleton-lambda.js:156:16)",
-              "new SingletonFunction (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-lambda/lib/singleton-lambda.js:28:36)",
+              "new Function (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-lambda/lib/function.js:154:26)",
+              "SingletonFunction.ensureLambda (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-lambda/lib/singleton-lambda.js:130:16)",
+              "new SingletonFunction (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-lambda/lib/singleton-lambda.js:24:36)",
               "new CertificateSigningRequest (/home/runner/work/aws-delivlib/aws-delivlib/lib/code-signing/certificate-signing-request.js:38:32)",
               "RsaPrivateKeySecret.newCertificateSigningRequest (/home/runner/work/aws-delivlib/aws-delivlib/lib/code-signing/private-key.js:129:16)",
               "new CodeSigningCertificate (/home/runner/work/aws-delivlib/aws-delivlib/lib/code-signing/code-signing-certificate.js:61:36)",
@@ -2894,7 +2894,7 @@
             "type": "aws:cdk:logicalId",
             "data": "CodeSignCMKC986BB89",
             "trace": [
-              "new Key (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-kms/lib/key.js:273:26)",
+              "new Key (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-kms/lib/key.js:296:26)",
               "new TestStack (/home/runner/work/aws-delivlib/aws-delivlib/lib/__tests__/test-stack.js:134:28)",
               "Object.<anonymous> (/home/runner/work/aws-delivlib/aws-delivlib/lib/__tests__/integ.delivlib.js:29:1)",
               "Module._compile (node:internal/modules/cjs/loader:1103:14)",
@@ -2911,7 +2911,7 @@
             "type": "aws:cdk:logicalId",
             "data": "CodeSignGpgLayer4D38F47B",
             "trace": [
-              "new LayerVersion (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-lambda/lib/layers.js:67:26)",
+              "new LayerVersion (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-lambda/lib/layers.js:50:26)",
               "new OpenPGPKeyPair (/home/runner/work/aws-delivlib/aws-delivlib/lib/open-pgp-key-pair.js:70:22)",
               "new TestStack (/home/runner/work/aws-delivlib/aws-delivlib/lib/__tests__/test-stack.js:132:28)",
               "Object.<anonymous> (/home/runner/work/aws-delivlib/aws-delivlib/lib/__tests__/integ.delivlib.js:29:1)",
@@ -2929,8 +2929,8 @@
             "type": "aws:cdk:logicalId",
             "data": "CodeSign52FB6674",
             "trace": [
-              "new CustomResource (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/core/lib/custom-resource.js:46:25)",
-              "new CustomResource (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-cloudformation/lib/custom-resource.js:78:9)",
+              "new CustomResource (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/core/lib/custom-resource.js:42:25)",
+              "new CustomResource (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-cloudformation/lib/custom-resource.js:63:9)",
               "new OpenPGPKeyPair (/home/runner/work/aws-delivlib/aws-delivlib/lib/open-pgp-key-pair.js:105:24)",
               "new TestStack (/home/runner/work/aws-delivlib/aws-delivlib/lib/__tests__/test-stack.js:132:28)",
               "Object.<anonymous> (/home/runner/work/aws-delivlib/aws-delivlib/lib/__tests__/integ.delivlib.js:29:1)",
@@ -2948,7 +2948,7 @@
             "type": "aws:cdk:logicalId",
             "data": "CodeSignPrincipal30E4C212",
             "trace": [
-              "new StringParameter (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-ssm/lib/parameter.js:111:26)",
+              "new StringParameter (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-ssm/lib/parameter.js:120:26)",
               "new OpenPGPKeyPair (/home/runner/work/aws-delivlib/aws-delivlib/lib/open-pgp-key-pair.js:126:26)",
               "new TestStack (/home/runner/work/aws-delivlib/aws-delivlib/lib/__tests__/test-stack.js:132:28)",
               "Object.<anonymous> (/home/runner/work/aws-delivlib/aws-delivlib/lib/__tests__/integ.delivlib.js:29:1)",
@@ -2966,10 +2966,10 @@
             "type": "aws:cdk:logicalId",
             "data": "SingletonLambdaf25803d3054b44fc985f4860d7d6ee74ServiceRole410148CF",
             "trace": [
-              "new Role (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-iam/lib/role.js:75:22)",
-              "new Function (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-lambda/lib/function.js:83:35)",
-              "SingletonFunction.ensureLambda (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-lambda/lib/singleton-lambda.js:156:16)",
-              "new SingletonFunction (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-lambda/lib/singleton-lambda.js:28:36)",
+              "new Role (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-iam/lib/role.js:50:22)",
+              "new Function (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-lambda/lib/function.js:82:35)",
+              "SingletonFunction.ensureLambda (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-lambda/lib/singleton-lambda.js:130:16)",
+              "new SingletonFunction (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-lambda/lib/singleton-lambda.js:24:36)",
               "new OpenPGPKeyPair (/home/runner/work/aws-delivlib/aws-delivlib/lib/open-pgp-key-pair.js:62:20)",
               "new TestStack (/home/runner/work/aws-delivlib/aws-delivlib/lib/__tests__/test-stack.js:132:28)",
               "Object.<anonymous> (/home/runner/work/aws-delivlib/aws-delivlib/lib/__tests__/integ.delivlib.js:29:1)",
@@ -2987,9 +2987,9 @@
             "type": "aws:cdk:logicalId",
             "data": "SingletonLambdaf25803d3054b44fc985f4860d7d6ee74ServiceRoleDefaultPolicyA8FDF5BD",
             "trace": [
-              "new Policy (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-iam/lib/policy.js:58:26)",
-              "Role.addToPrincipalPolicy (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-iam/lib/role.js:214:34)",
-              "SingletonFunction.addToRolePolicy (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-lambda/lib/function-base.js:63:19)",
+              "new Policy (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-iam/lib/policy.js:50:26)",
+              "Role.addToPrincipalPolicy (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-iam/lib/role.js:199:34)",
+              "SingletonFunction.addToRolePolicy (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-lambda/lib/function-base.js:55:19)",
               "new OpenPGPKeyPair (/home/runner/work/aws-delivlib/aws-delivlib/lib/open-pgp-key-pair.js:74:12)",
               "new TestStack (/home/runner/work/aws-delivlib/aws-delivlib/lib/__tests__/test-stack.js:132:28)",
               "Object.<anonymous> (/home/runner/work/aws-delivlib/aws-delivlib/lib/__tests__/integ.delivlib.js:29:1)",
@@ -3007,9 +3007,9 @@
             "type": "aws:cdk:logicalId",
             "data": "SingletonLambdaf25803d3054b44fc985f4860d7d6ee746203BDE6",
             "trace": [
-              "new Function (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-lambda/lib/function.js:146:26)",
-              "SingletonFunction.ensureLambda (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-lambda/lib/singleton-lambda.js:156:16)",
-              "new SingletonFunction (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-lambda/lib/singleton-lambda.js:28:36)",
+              "new Function (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-lambda/lib/function.js:154:26)",
+              "SingletonFunction.ensureLambda (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-lambda/lib/singleton-lambda.js:130:16)",
+              "new SingletonFunction (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-lambda/lib/singleton-lambda.js:24:36)",
               "new OpenPGPKeyPair (/home/runner/work/aws-delivlib/aws-delivlib/lib/open-pgp-key-pair.js:62:20)",
               "new TestStack (/home/runner/work/aws-delivlib/aws-delivlib/lib/__tests__/test-stack.js:132:28)",
               "Object.<anonymous> (/home/runner/work/aws-delivlib/aws-delivlib/lib/__tests__/integ.delivlib.js:29:1)",
@@ -3027,15 +3027,15 @@
             "type": "aws:cdk:logicalId",
             "data": "BucketNotificationsHandler050a0587b7544547bf325f094a3db834RoleB6FB88EC",
             "trace": [
-              "new Role (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-iam/lib/role.js:75:22)",
+              "new Role (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-iam/lib/role.js:50:22)",
               "new NotificationsResourceHandler (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-s3/lib/notifications-resource/notifications-resource-handler.js:35:72)",
               "Function.singleton (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-s3/lib/notifications-resource/notifications-resource-handler.js:85:22)",
               "BucketNotifications.createResourceOnce (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-s3/lib/notifications-resource/notifications-resource.js:88:91)",
               "BucketNotifications.addNotification (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-s3/lib/notifications-resource/notifications-resource.js:45:31)",
-              "/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-s3/lib/bucket.js:421:63",
-              "Bucket.withNotifications (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-s3/lib/bucket.js:430:9)",
-              "Bucket.addEventNotification (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-s3/lib/bucket.js:421:14)",
-              "Bucket.addObjectCreatedNotification (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-s3/lib/bucket.js:445:21)",
+              "/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-s3/lib/bucket.js:370:63",
+              "Bucket.withNotifications (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-s3/lib/bucket.js:379:9)",
+              "Bucket.addEventNotification (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-s3/lib/bucket.js:370:14)",
+              "Bucket.addObjectCreatedNotification (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-s3/lib/bucket.js:392:21)",
               "new ChangeController (/home/runner/work/aws-delivlib/aws-delivlib/lib/change-controller.js:62:23)",
               "Pipeline.addChangeControl (/home/runner/work/aws-delivlib/aws-delivlib/lib/pipeline.js:154:16)",
               "new TestStack (/home/runner/work/aws-delivlib/aws-delivlib/lib/__tests__/test-stack.js:181:18)",
@@ -3054,16 +3054,16 @@
             "type": "aws:cdk:logicalId",
             "data": "BucketNotificationsHandler050a0587b7544547bf325f094a3db834RoleDefaultPolicy2CF63D36",
             "trace": [
-              "new Policy (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-iam/lib/policy.js:58:26)",
-              "Role.addToPrincipalPolicy (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-iam/lib/role.js:214:34)",
+              "new Policy (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-iam/lib/policy.js:50:26)",
+              "Role.addToPrincipalPolicy (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-iam/lib/role.js:199:34)",
               "new NotificationsResourceHandler (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-s3/lib/notifications-resource/notifications-resource-handler.js:39:19)",
               "Function.singleton (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-s3/lib/notifications-resource/notifications-resource-handler.js:85:22)",
               "BucketNotifications.createResourceOnce (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-s3/lib/notifications-resource/notifications-resource.js:88:91)",
               "BucketNotifications.addNotification (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-s3/lib/notifications-resource/notifications-resource.js:45:31)",
-              "/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-s3/lib/bucket.js:421:63",
-              "Bucket.withNotifications (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-s3/lib/bucket.js:430:9)",
-              "Bucket.addEventNotification (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-s3/lib/bucket.js:421:14)",
-              "Bucket.addObjectCreatedNotification (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-s3/lib/bucket.js:445:21)",
+              "/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-s3/lib/bucket.js:370:63",
+              "Bucket.withNotifications (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-s3/lib/bucket.js:379:9)",
+              "Bucket.addEventNotification (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-s3/lib/bucket.js:370:14)",
+              "Bucket.addObjectCreatedNotification (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-s3/lib/bucket.js:392:21)",
               "new ChangeController (/home/runner/work/aws-delivlib/aws-delivlib/lib/change-controller.js:62:23)",
               "Pipeline.addChangeControl (/home/runner/work/aws-delivlib/aws-delivlib/lib/pipeline.js:154:16)",
               "new TestStack (/home/runner/work/aws-delivlib/aws-delivlib/lib/__tests__/test-stack.js:181:18)",
@@ -3086,10 +3086,10 @@
               "Function.singleton (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-s3/lib/notifications-resource/notifications-resource-handler.js:85:22)",
               "BucketNotifications.createResourceOnce (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-s3/lib/notifications-resource/notifications-resource.js:88:91)",
               "BucketNotifications.addNotification (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-s3/lib/notifications-resource/notifications-resource.js:45:31)",
-              "/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-s3/lib/bucket.js:421:63",
-              "Bucket.withNotifications (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-s3/lib/bucket.js:430:9)",
-              "Bucket.addEventNotification (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-s3/lib/bucket.js:421:14)",
-              "Bucket.addObjectCreatedNotification (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-s3/lib/bucket.js:445:21)",
+              "/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-s3/lib/bucket.js:370:63",
+              "Bucket.withNotifications (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-s3/lib/bucket.js:379:9)",
+              "Bucket.addEventNotification (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-s3/lib/bucket.js:370:14)",
+              "Bucket.addObjectCreatedNotification (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/aws-s3/lib/bucket.js:392:21)",
               "new ChangeController (/home/runner/work/aws-delivlib/aws-delivlib/lib/change-controller.js:62:23)",
               "Pipeline.addChangeControl (/home/runner/work/aws-delivlib/aws-delivlib/lib/pipeline.js:154:16)",
               "new TestStack (/home/runner/work/aws-delivlib/aws-delivlib/lib/__tests__/test-stack.js:181:18)",
@@ -3108,14 +3108,14 @@
             "type": "aws:cdk:logicalId",
             "data": "BootstrapVersion",
             "trace": [
-              "addBootstrapVersionRule (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/core/lib/stack-synthesizers/default-synthesizer.js:462:19)",
-              "DefaultStackSynthesizer.synthesize (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/core/lib/stack-synthesizers/default-synthesizer.js:219:13)",
+              "addBootstrapVersionRule (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/core/lib/stack-synthesizers/default-synthesizer.js:237:19)",
+              "DefaultStackSynthesizer.synthesize (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/core/lib/stack-synthesizers/default-synthesizer.js:127:13)",
               "/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/core/lib/private/synthesis.js:155:35",
               "visit (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/core/lib/private/synthesis.js:200:9)",
               "visit (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/core/lib/private/synthesis.js:197:9)",
               "synthesizeTree (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/core/lib/private/synthesis.js:148:5)",
               "Object.synthesize (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/core/lib/private/synthesis.js:33:5)",
-              "App.synth (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/core/lib/stage.js:103:41)",
+              "App.synth (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/core/lib/stage.js:89:41)",
               "Object.<anonymous> (/home/runner/work/aws-delivlib/aws-delivlib/lib/__tests__/integ.delivlib.js:32:5)",
               "Module._compile (node:internal/modules/cjs/loader:1103:14)",
               "Object.Module._extensions..js (node:internal/modules/cjs/loader:1155:10)",
@@ -3131,14 +3131,14 @@
             "type": "aws:cdk:logicalId",
             "data": "CheckBootstrapVersion",
             "trace": [
-              "addBootstrapVersionRule (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/core/lib/stack-synthesizers/default-synthesizer.js:470:5)",
-              "DefaultStackSynthesizer.synthesize (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/core/lib/stack-synthesizers/default-synthesizer.js:219:13)",
+              "addBootstrapVersionRule (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/core/lib/stack-synthesizers/default-synthesizer.js:245:5)",
+              "DefaultStackSynthesizer.synthesize (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/core/lib/stack-synthesizers/default-synthesizer.js:127:13)",
               "/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/core/lib/private/synthesis.js:155:35",
               "visit (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/core/lib/private/synthesis.js:200:9)",
               "visit (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/core/lib/private/synthesis.js:197:9)",
               "synthesizeTree (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/core/lib/private/synthesis.js:148:5)",
               "Object.synthesize (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/core/lib/private/synthesis.js:33:5)",
-              "App.synth (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/core/lib/stage.js:103:41)",
+              "App.synth (/home/runner/work/aws-delivlib/aws-delivlib/node_modules/monocdk/lib/core/lib/stage.js:89:41)",
               "Object.<anonymous> (/home/runner/work/aws-delivlib/aws-delivlib/lib/__tests__/integ.delivlib.js:32:5)",
               "Module._compile (node:internal/modules/cjs/loader:1103:14)",
               "Object.Module._extensions..js (node:internal/modules/cjs/loader:1155:10)",