ec2-instance-running-scheduler 0.3.6 → 0.4.0

package/.jsii

@@ -8440,7 +8440,7 @@
     "stability": "stable"
   },
   "homepage": "https://github.com/gammarers-aws-cdk-constructs/ec2-instance-running-scheduler.git",
-  "jsiiVersion": "5.9.52 (build c132e73)",
+  "jsiiVersion": "6.0.10 (build bb45f01)",
   "keywords": [
     "cdk",
     "durable",
@@ -8462,7 +8462,7 @@
   },
   "name": "ec2-instance-running-scheduler",
   "readme": {
-    "markdown": "# EC2 Instance Running Scheduler (AWS CDK v2)\n\n[![GitHub](https://img.shields.io/github/license/gammarers-aws-cdk-constructs/ec2-instance-running-scheduler?style=flat-square)](https://github.com/gammarers-aws-cdk-constructs/ec2-instance-running-scheduler/blob/main/LICENSE)\n[![npm](https://img.shields.io/npm/v/ec2-instance-running-scheduler?style=flat-square)](https://www.npmjs.com/package/ec2-instance-running-scheduler)\n[![GitHub Workflow Status (branch)](https://img.shields.io/github/actions/workflow/status/gammarers-aws-cdk-constructs/ec2-instance-running-scheduler/release.yml?branch=main&label=release&style=flat-square)](https://github.com/gammarers-aws-cdk-constructs/ec2-instance-running-scheduler/actions/workflows/release.yml)\n[![GitHub release (latest SemVer)](https://img.shields.io/github/v/release/gammarers-aws-cdk-constructs/ec2-instance-running-scheduler?sort=semver&style=flat-square)](https://github.com/gammarers-aws-cdk-constructs/ec2-instance-running-scheduler/releases)\n[![View on Construct Hub](https://constructs.dev/badge?package=ec2-instance-running-scheduler)](https://constructs.dev/packages/ec2-instance-running-scheduler)\n\nAWS CDK construct library that starts and stops EC2 instances on a cron schedule using **EventBridge Scheduler** and a **Durable Execution Lambda**. The handler discovers instances with the **Resource Groups Tagging API**, issues start/stop, **waits until each instance reaches a stable target state** (durable `step` / `wait`), processes **multiple instances in parallel** (bounded concurrency), and posts **Slack** summary and per-instance thread messages using a secret from **Secrets Manager**. The Lambda emits **structured application logs** alongside JSON platform logs.\n\n## Features\n\n- **Tag-based targeting** – Select EC2 instances by tag key and values (e.g. `Schedule` / `YES`) via `tag:GetResources`.\n- **EventBridge Scheduler** – Separate cron rules for start and stop, with per-rule timezone (`aws-cdk-lib` `TimeZone`).\n- **Durable Lambda** – One Lambda with AWS Lambda Durable Execution (`step`, `wait`, `map`, child contexts per instance) for long-running workflows without Step Functions.\n- **Stable-state waiting** – After start/stop, the function waits (20 seconds between attempts) and re-describes instances until `running` (start mode) or `stopped` (stop mode).\n- **Configurable wait limits** – Per-instance **max loop count** and **max elapsed time** via `resourceWait` (default: 90 loops / 1800 seconds). Failures use explicit `ResourceWaitFailed:*` messages instead of running until the Durable execution timeout (construct default: 2 hours).\n- **Validated environment variables** – The bundled handler parses env vars with **strict-env-resolver** (`StrictEnvResolver`). `SLACK_SECRET_NAME` is required; wait limits must be **finite positive numbers** (`> 0`).\n- **Slack notifications** – Parent message plus threaded updates per instance; credentials from Secrets Manager JSON (`token`, `channel`). The construct sets **`SLACK_SECRET_NAME`** on the function.\n- **Structured logging** – Durable execution **`ctx.logger`** for traceable JSON application logs (invocation, describe/start/stop/wait loops, wait limit errors, Slack steps, completion).\n- **Optional failure detection** – CloudWatch alarms and log-based metrics for Lambda errors, instance wait failures (`ResourceWaitFailed`), Slack post failures, and other handler `ERROR` logs. Optional SNS notifications via a caller-supplied topic (`failureDetection.alarmTopic`).\n- **Scheduling toggle** – Enable or disable both schedules without removing the stack (`enableScheduling`).\n- **Configurable schedules** – Optional cron overrides for start and stop (`minute`, `hour`, `week`, `timezone`); sensible defaults if omitted.\n- **IAM and observability** – EC2 and tagging API permissions, Slack secret read grant, **Parameters and Secrets Lambda Extension**, JSON logging, and a dedicated log group (construct defaults).\n\n## Installation\n\n**npm**\n\n```bash\nnpm install ec2-instance-running-scheduler\n```\n\n**yarn**\n\n```bash\nyarn add ec2-instance-running-scheduler\n```\n\n**pnpm**\n\n```bash\npnpm add ec2-instance-running-scheduler\n```\n\n## Usage\n\nUse the **construct** `EC2InstanceRunningScheduler` when embedding the scheduler in an existing stack or other CDK scope.\n\n```typescript\nimport * as cdk from 'aws-cdk-lib';\nimport { TimeZone } from 'aws-cdk-lib';\nimport * as sns from 'aws-cdk-lib/aws-sns';\nimport { EC2InstanceRunningScheduler } from 'ec2-instance-running-scheduler';\n\nconst app = new cdk.App();\nconst stack = new cdk.Stack(app, 'MyStack');\n\nconst alarmTopic = new sns.Topic(stack, 'OpsAlerts');\n\nnew EC2InstanceRunningScheduler(stack, 'EC2InstanceRunningScheduler', {\n  targetResource: {\n    tagKey: 'Schedule',\n    tagValues: ['YES'],\n  },\n  secrets: {\n    slackSecretName: 'my-slack-secret',\n  },\n  startSchedule: {\n    timezone: TimeZone.ASIA_TOKYO,\n    minute: '55',\n    hour: '8',\n    week: 'MON-FRI',\n  },\n  stopSchedule: {\n    timezone: TimeZone.ASIA_TOKYO,\n    minute: '5',\n    hour: '19',\n    week: 'MON-FRI',\n  },\n  enableScheduling: true,\n  resourceWait: {\n    maxLoopCount: 120,\n    maxElapsedSeconds: 3600,\n  },\n  failureDetection: {\n    enabled: true,\n    alarmTopic,\n  },\n});\n```\n\nUse the **stack** `EC2InstanceRunningScheduleStack` when deploying the scheduler as its own stack. It accepts the same **targeting, schedules, secrets, enable flag, and failure detection** as the construct (plus standard `StackProps` such as `env`). For **`resourceWait`**, use the construct directly or extend the stack in your app.\n\n```typescript\nimport * as cdk from 'aws-cdk-lib';\nimport { TimeZone } from 'aws-cdk-lib';\nimport * as sns from 'aws-cdk-lib/aws-sns';\nimport { EC2InstanceRunningScheduleStack } from 'ec2-instance-running-scheduler';\n\nconst app = new cdk.App();\n\nconst alarmTopic = sns.Topic.fromTopicArn(\n  app,\n  'OpsAlerts',\n  'arn:aws:sns:ap-northeast-1:123456789012:ops-alerts',\n);\n\nnew EC2InstanceRunningScheduleStack(app, 'EC2InstanceRunningScheduleStack', {\n  targetResource: {\n    tagKey: 'Schedule',\n    tagValues: ['YES'],\n  },\n  secrets: {\n    slackSecretName: 'my-slack-secret',\n  },\n  startSchedule: {\n    timezone: TimeZone.ASIA_TOKYO,\n    minute: '55',\n    hour: '8',\n    week: 'MON-FRI',\n  },\n  stopSchedule: {\n    timezone: TimeZone.ASIA_TOKYO,\n    minute: '5',\n    hour: '19',\n    week: 'MON-FRI',\n  },\n  enableScheduling: true,\n  failureDetection: {\n    enabled: true,\n    alarmTopic,\n  },\n});\n```\n\nEventBridge Scheduler invokes the Lambda with `Params.TagKey`, `Params.TagValues`, and `Params.Mode` (`Start` or `Stop`); the construct wires this for you. The function environment includes:\n\n| Variable | Source | Purpose |\n|----------|--------|---------|\n| `SLACK_SECRET_NAME` | `secrets.slackSecretName` | Secrets Manager secret for Slack (required) |\n| `PROCESS_RESOURCE_MAX_LOOP_COUNT` | `resourceWait.maxLoopCount` (default `90`) | Max describe/wait iterations per instance |\n| `PROCESS_RESOURCE_MAX_ELAPSED_SECONDS` | `resourceWait.maxElapsedSeconds` (default `1800`) | Max wall-clock seconds waiting for one instance |\n\nWhen you set wait limits via `resourceWait`, the construct writes them as decimal integer strings. At invocation the handler parses them with **strict-env-resolver**; each value must be a **finite number greater than zero**. Missing `SLACK_SECRET_NAME` or invalid env values cause `StrictEnvValidationError` at the start of an invocation.\n\n## Options\n\n### EC2InstanceRunningScheduler\n\n| Option | Type | Required | Description |\n|--------|------|----------|-------------|\n| `targetResource` | `TargetResource` | Yes | Tag key and values used to select EC2 instances. |\n| `secrets` | `Secrets` | Yes | Secrets Manager secret for Slack (`slackSecretName`). |\n| `startSchedule` | `Schedule` | No | Cron for starting instances (default: `50 7 ? * MON-FRI *` in `Etc/UTC`). |\n| `stopSchedule` | `Schedule` | No | Cron for stopping instances (default: `5 19 ? * MON-FRI *` in `Etc/UTC`). |\n| `enableScheduling` | `boolean` | No | Whether both scheduler rules are enabled (default: `true`). |\n| `resourceWait` | `ResourceWaitLimits` | No | Per-instance wait caps (see below). |\n| `failureDetection` | `FailureDetectionAlarms` | No | Optional CloudWatch alarms and log-based metrics (see below). |\n\n### EC2InstanceRunningScheduleStack\n\nIncludes `targetResource`, `secrets`, `startSchedule`, `stopSchedule`, `enableScheduling`, `failureDetection`, and standard `StackProps`. Does **not** expose `resourceWait`; use `EC2InstanceRunningScheduler` when you need custom wait limits.\n\n### TargetResource\n\n- `tagKey` – Tag key used to select instances (e.g. `Schedule`).\n- `tagValues` – Tag values that must match (e.g. `['YES']`).\n\n### Schedule\n\n- `timezone` – `TimeZone` from `aws-cdk-lib` (e.g. `TimeZone.ASIA_TOKYO`, `TimeZone.ETC_UTC`).\n- `minute` – Cron minute (`0`–`59`).\n- `hour` – Cron hour (`0`–`23`).\n- `week` – Cron day-of-week field (e.g. `MON-FRI`).\n\n### Secrets\n\n- `slackSecretName` – Name of the AWS Secrets Manager secret. The Lambda expects JSON with **`token`** (Slack bot token) and **`channel`** (channel ID or name for `chat.postMessage`).\n\n### ResourceWaitLimits\n\nWritten to `PROCESS_RESOURCE_MAX_LOOP_COUNT` and `PROCESS_RESOURCE_MAX_ELAPSED_SECONDS` on the running scheduler Lambda.\n\n- `maxLoopCount` – Maximum describe/wait loop iterations per instance (default: **90**). Must be a positive integer when set.\n- `maxElapsedSeconds` – Maximum wall-clock seconds spent waiting for one instance to stabilize (default: **1800**, 30 minutes). Must be a positive integer when set.\n\nWhen a limit is exceeded during waiting, the handler throws an error with prefix `ResourceWaitFailed:` (`MaxLoopCountExceeded`, `MaxElapsedTimeExceeded`, or `UnexpectedInstanceState` for unknown EC2 states).\n\n### FailureDetectionAlarms\n\nOptional operational failure detection. Alarms are created only when `enabled` is `true`.\n\n- `enabled` – When `true`, creates four CloudWatch alarms and three log metric filters (default: disabled when omitted).\n- `alarmTopic` – Optional `sns.ITopic` for alarm actions. The construct does **not** create an SNS topic; pass an existing or imported topic. When omitted, alarms are created without SNS actions.\n\nWhen enabled, the construct creates:\n\n| Alarm | Trigger |\n|-------|---------|\n| Lambda errors | `AWS/Lambda` `Errors` metric |\n| Instance status failure | Log filter: `ResourceWaitFailed` |\n| Slack post failure | Log filter: `running-scheduler: Slack post failed` |\n| Durable execution failure | Other handler `ERROR` logs (excluding the above) |\n\nCustom metrics are published under the `EC2InstanceRunningScheduler` namespace. Access the created alarms via `EC2InstanceRunningScheduler.failureDetection` when enabled.\n\n## Requirements\n\n- **Node.js** ≥ 20.0.0 (for developing or synthesizing CDK apps that depend on this package).\n- **aws-cdk-lib** ^2.232.0 and **constructs** ^10.5.1 (peer dependencies).\n- **AWS** – EventBridge Scheduler; Lambda with **Durable Execution** (Node.js **24.x** runtime in the construct; Durable Execution requires a supported Node.js runtime in your region), a **live alias**, **Parameters and Secrets Lambda Extension**; EC2 (`DescribeInstances`, `StartInstances`, `StopInstances`); Resource Groups Tagging API (`tag:GetResources`); Secrets Manager. The deployed function uses **arm64**, Durable Execution IAM policies, a 2-hour Durable execution timeout (construct default), and a bundled handler that loads secrets via **aws-lambda-secret-fetcher** (^0.6) and parses env vars via **strict-env-resolver** (^0.5). Secret fetch runs only inside Lambda (requires runtime `AWS_SESSION_TOKEN` and the extension layer); the library retries transient extension errors including cold-start \"not ready\" responses.\n\n## License\n\nThis project is licensed under the Apache-2.0 License.\n"
+    "markdown": "# EC2 Instance Running Scheduler (AWS CDK v2)\n\n[![GitHub](https://img.shields.io/github/license/gammarers-aws-cdk-constructs/ec2-instance-running-scheduler?style=flat-square)](https://github.com/gammarers-aws-cdk-constructs/ec2-instance-running-scheduler/blob/main/LICENSE)\n[![npm](https://img.shields.io/npm/v/ec2-instance-running-scheduler?style=flat-square)](https://www.npmjs.com/package/ec2-instance-running-scheduler)\n[![GitHub Workflow Status (branch)](https://img.shields.io/github/actions/workflow/status/gammarers-aws-cdk-constructs/ec2-instance-running-scheduler/release.yml?branch=main&label=release&style=flat-square)](https://github.com/gammarers-aws-cdk-constructs/ec2-instance-running-scheduler/actions/workflows/release.yml)\n[![GitHub release (latest SemVer)](https://img.shields.io/github/v/release/gammarers-aws-cdk-constructs/ec2-instance-running-scheduler?sort=semver&style=flat-square)](https://github.com/gammarers-aws-cdk-constructs/ec2-instance-running-scheduler/releases)\n\n[![View on Construct Hub](https://constructs.dev/badge?package=ec2-instance-running-scheduler)](https://constructs.dev/packages/ec2-instance-running-scheduler)\n\nAWS CDK construct library that starts and stops EC2 instances on a cron schedule using **EventBridge Scheduler** and a **Durable Execution Lambda**. The handler discovers instances with the **Resource Groups Tagging API**, issues start/stop, **waits until each instance reaches a stable target state** (durable `step` / `wait`), processes **multiple instances in parallel** (bounded concurrency), and posts **Slack** summary and per-instance thread messages using a secret from **Secrets Manager**. The Lambda emits **structured application logs** alongside JSON platform logs.\n\n## Features\n\n- **Tag-based targeting** – Select EC2 instances by tag key and values (e.g. `Schedule` / `YES`) via `tag:GetResources`.\n- **EventBridge Scheduler** – Separate cron rules for start and stop, with per-rule timezone (`aws-cdk-lib` `TimeZone`).\n- **Durable Lambda** – One Lambda with AWS Lambda Durable Execution (`step`, `wait`, `map`, child contexts per instance) for long-running workflows without Step Functions.\n- **Stable-state waiting** – After start/stop, the function waits (`resourceWait.statusChangeWaitSeconds`, default **20** seconds between attempts) and re-describes instances until `running` (start mode) or `stopped` (stop mode).\n- **Configurable wait limits** – Per-instance **max loop count**, **max elapsed time**, and **status-change wait interval** via `resourceWait` (default: 90 loops / 1800 seconds / 20 seconds). Failures use explicit `ResourceWaitFailed:*` messages instead of running until the Durable execution timeout (construct default: 2 hours; override with `durable.executionTimeout`).\n- **Configurable Lambda runtime** – Memory, invoke timeout, and bounded instance concurrency via `runtime` (default: **512 MB** / **15 minutes** / **maxConcurrency 10**). Durable execution timeout and history retention via `durable` (default: **2 hours** / **1 day**).\n- **Configurable logs** – Log group retention and removal policy via `logGroup` (default: **3 months**, `RemovalPolicy.DESTROY`).\n- **Validated environment variables** – The bundled handler parses env vars with **strict-env-resolver** (`StrictEnvResolver`). `SLACK_SECRET_NAME` is required; wait limits and `maxConcurrency` must be **positive integers** (`>= 1`).\n- **Slack notifications** – Parent message plus threaded updates per instance; credentials from Secrets Manager JSON (`token`, `channel`). The construct sets **`SLACK_SECRET_NAME`** on the function.\n- **Structured logging** – Durable execution **`ctx.logger`** for traceable JSON application logs (invocation, describe/start/stop/wait loops, wait limit errors, Slack steps, completion).\n- **Optional failure detection** – CloudWatch alarms and log-based metrics for Lambda errors, instance wait failures (`ResourceWaitFailed`), Slack post failures, and other handler `ERROR` logs. Optional SNS notifications via a caller-supplied topic (`failureDetection.alarmTopic`).\n- **Scheduling toggle** – Enable or disable both schedules without removing the stack (`enableScheduling`).\n- **Configurable schedules** – Optional cron overrides for start and stop (`minute`, `hour`, `week`, `timezone`); sensible defaults if omitted.\n- **IAM and observability** – Start/stop is limited to EC2 instances in the stack account/region whose tags match `targetResource`. Slack secret read grant, **Parameters and Secrets Lambda Extension**, JSON logging, and a dedicated log group (override retention and removal policy via `logGroup`).\n\n## Installation\n\n**npm**\n\n```bash\nnpm install ec2-instance-running-scheduler\n```\n\n**yarn**\n\n```bash\nyarn add ec2-instance-running-scheduler\n```\n\n**pnpm**\n\n```bash\npnpm add ec2-instance-running-scheduler\n```\n\n## Usage\n\nUse the **construct** `EC2InstanceRunningScheduler` when embedding the scheduler in an existing stack or other CDK scope.\n\n```typescript\nimport * as cdk from 'aws-cdk-lib';\nimport { TimeZone } from 'aws-cdk-lib';\nimport * as logs from 'aws-cdk-lib/aws-logs';\nimport * as sns from 'aws-cdk-lib/aws-sns';\nimport { EC2InstanceRunningScheduler } from 'ec2-instance-running-scheduler';\n\nconst app = new cdk.App();\nconst stack = new cdk.Stack(app, 'MyStack');\n\nconst alarmTopic = new sns.Topic(stack, 'OpsAlerts');\n\nnew EC2InstanceRunningScheduler(stack, 'EC2InstanceRunningScheduler', {\n  targetResource: {\n    tagKey: 'Schedule',\n    tagValues: ['YES'],\n  },\n  secrets: {\n    slackSecretName: 'my-slack-secret',\n  },\n  startSchedule: {\n    timezone: TimeZone.ASIA_TOKYO,\n    minute: '55',\n    hour: '8',\n    week: 'MON-FRI',\n  },\n  stopSchedule: {\n    timezone: TimeZone.ASIA_TOKYO,\n    minute: '5',\n    hour: '19',\n    week: 'MON-FRI',\n  },\n  enableScheduling: true,\n  resourceWait: {\n    maxLoopCount: 120,\n    maxElapsedSeconds: 3600,\n    statusChangeWaitSeconds: 15,\n  },\n  runtime: {\n    memorySize: 1024,\n    timeout: cdk.Duration.minutes(15),\n    maxConcurrency: 20,\n  },\n  durable: {\n    executionTimeout: cdk.Duration.hours(4),\n    retentionPeriod: cdk.Duration.days(7),\n  },\n  logGroup: {\n    retention: logs.RetentionDays.ONE_YEAR,\n    removalPolicy: cdk.RemovalPolicy.RETAIN,\n  },\n  failureDetection: {\n    enabled: true,\n    alarmTopic,\n  },\n});\n```\n\nUse the **stack** `EC2InstanceRunningScheduleStack` when deploying the scheduler as its own stack. It accepts the same **targeting, schedules, secrets, enable flag, and failure detection** as the construct (plus standard `StackProps` such as `env`). For **`resourceWait`**, **`runtime`**, **`durable`**, and **`logGroup`**, use the construct directly or extend the stack in your app.\n\n```typescript\nimport * as cdk from 'aws-cdk-lib';\nimport { TimeZone } from 'aws-cdk-lib';\nimport * as sns from 'aws-cdk-lib/aws-sns';\nimport { EC2InstanceRunningScheduleStack } from 'ec2-instance-running-scheduler';\n\nconst app = new cdk.App();\n\nconst alarmTopic = sns.Topic.fromTopicArn(\n  app,\n  'OpsAlerts',\n  'arn:aws:sns:ap-northeast-1:123456789012:ops-alerts',\n);\n\nnew EC2InstanceRunningScheduleStack(app, 'EC2InstanceRunningScheduleStack', {\n  targetResource: {\n    tagKey: 'Schedule',\n    tagValues: ['YES'],\n  },\n  secrets: {\n    slackSecretName: 'my-slack-secret',\n  },\n  startSchedule: {\n    timezone: TimeZone.ASIA_TOKYO,\n    minute: '55',\n    hour: '8',\n    week: 'MON-FRI',\n  },\n  stopSchedule: {\n    timezone: TimeZone.ASIA_TOKYO,\n    minute: '5',\n    hour: '19',\n    week: 'MON-FRI',\n  },\n  enableScheduling: true,\n  failureDetection: {\n    enabled: true,\n    alarmTopic,\n  },\n});\n```\n\n## Tag instances before scheduling\n\nThe scheduler only starts and stops EC2 instances that **already** have the tag key and one of the tag values in `targetResource`. Tag instances in the same account and region as the stack **before** enabling schedules.\n\n**AWS CLI**\n\n```bash\naws ec2 create-tags \\\n  --resources i-0123456789abcdef0 \\\n  --tags Key=Schedule,Value=YES\n```\n\n**Console** – EC2 → Instances → select the instance → Tags → Add `Schedule` = `YES` (or your `tagKey` / `tagValues`).\n\nIAM for `ec2:StartInstances` and `ec2:StopInstances` is limited to:\n\n- instance ARNs in the stack **account** and **region** (`arn:...:ec2:<region>:<account>:instance/*`)\n- instances whose `aws:ResourceTag/<tagKey>` matches one of `tagValues`\n\nAn instance without the tag is not discovered by `tag:GetResources`, and start/stop is denied even if an instance ID is known. `tag:GetResources` and `ec2:DescribeInstances` still use `Resource: *` because those APIs do not support resource-level permissions or resource-tag conditions.\n\nEventBridge Scheduler invokes the Lambda with `Params.TagKey`, `Params.TagValues`, and `Params.Mode` (`Start` or `Stop`); the construct wires this for you. The function environment includes:\n\n| Variable | Source | Purpose |\n|----------|--------|---------|\n| `SLACK_SECRET_NAME` | `secrets.slackSecretName` | Secrets Manager secret for Slack (required) |\n| `PROCESS_RESOURCE_MAX_LOOP_COUNT` | `resourceWait.maxLoopCount` (default `90`) | Max describe/wait iterations per instance |\n| `PROCESS_RESOURCE_MAX_ELAPSED_SECONDS` | `resourceWait.maxElapsedSeconds` (default `1800`) | Max wall-clock seconds waiting for one instance |\n| `PROCESS_RESOURCE_STATUS_CHANGE_WAIT_SECONDS` | `resourceWait.statusChangeWaitSeconds` (default `20`) | Seconds between describe/wait iterations |\n| `PROCESS_RESOURCES_MAX_CONCURRENCY` | `runtime.maxConcurrency` (default `10`) | Max instances processed in parallel |\n\nWhen you set wait limits via `resourceWait` or concurrency via `runtime.maxConcurrency`, the construct writes them as decimal integer strings. At invocation the handler parses them with **strict-env-resolver**; each value must be a **positive integer** (`>= 1`). Missing `SLACK_SECRET_NAME` or invalid env values cause `StrictEnvValidationError` at the start of an invocation.\n\n## Options\n\n### EC2InstanceRunningScheduler\n\n| Option | Type | Required | Description |\n|--------|------|----------|-------------|\n| `targetResource` | `TargetResource` | Yes | Tag key and values used to select EC2 instances. |\n| `secrets` | `Secrets` | Yes | Secrets Manager secret for Slack (`slackSecretName`). |\n| `startSchedule` | `Schedule` | No | Cron for starting instances (default: `50 7 ? * MON-FRI *` in `Etc/UTC`). |\n| `stopSchedule` | `Schedule` | No | Cron for stopping instances (default: `5 19 ? * MON-FRI *` in `Etc/UTC`). |\n| `enableScheduling` | `boolean` | No | Whether both scheduler rules are enabled (default: `true`). |\n| `resourceWait` | `ResourceWaitLimits` | No | Per-instance wait caps (see below). |\n| `runtime` | `RunningSchedulerRuntimeProps` | No | Lambda memory, invoke timeout, and map concurrency. |\n| `durable` | `RunningSchedulerDurableProps` | No | Durable execution timeout and history retention. |\n| `logGroup` | `RunningSchedulerLogGroupProps` | No | Function log group retention and removal policy. |\n| `failureDetection` | `FailureDetectionAlarms` | No | Optional CloudWatch alarms and log-based metrics (see below). |\n\n### EC2InstanceRunningScheduleStack\n\nIncludes `targetResource`, `secrets`, `startSchedule`, `stopSchedule`, `enableScheduling`, `failureDetection`, and standard `StackProps`. Does **not** expose `resourceWait`, `runtime`, `durable`, or `logGroup`; use `EC2InstanceRunningScheduler` when you need custom wait, Lambda, Durable, or log settings.\n\n### TargetResource\n\n- `tagKey` – Tag key used to select instances (e.g. `Schedule`). Required on each target instance before schedules run.\n- `tagValues` – Tag values that must match (e.g. `['YES']`). At least one value is required.\n\nSee [Tag instances before scheduling](#tag-instances-before-scheduling).\n\n### Schedule\n\n- `timezone` – `TimeZone` from `aws-cdk-lib` (e.g. `TimeZone.ASIA_TOKYO`, `TimeZone.ETC_UTC`).\n- `minute` – Cron minute (`0`–`59`).\n- `hour` – Cron hour (`0`–`23`).\n- `week` – Cron day-of-week field (e.g. `MON-FRI`).\n\n### Secrets\n\n- `slackSecretName` – Name of the AWS Secrets Manager secret. The Lambda expects JSON with **`token`** (Slack bot token) and **`channel`** (channel ID or name for `chat.postMessage`).\n\n### ResourceWaitLimits\n\nWritten to `PROCESS_RESOURCE_MAX_LOOP_COUNT`, `PROCESS_RESOURCE_MAX_ELAPSED_SECONDS`, and `PROCESS_RESOURCE_STATUS_CHANGE_WAIT_SECONDS` on the running scheduler Lambda.\n\n- `maxLoopCount` – Maximum describe/wait loop iterations per instance (default: **90**). Must be a positive integer when set.\n- `maxElapsedSeconds` – Maximum wall-clock seconds spent waiting for one instance to stabilize (default: **1800**, 30 minutes). Must be a positive integer when set.\n- `statusChangeWaitSeconds` – Seconds between describe iterations after start/stop or while transitioning (default: **20**). Must be a positive integer when set.\n\nWhen a limit is exceeded during waiting, the handler throws an error with prefix `ResourceWaitFailed:` (`MaxLoopCountExceeded`, `MaxElapsedTimeExceeded`, or `UnexpectedInstanceState` for unknown EC2 states).\n\n### RunningSchedulerRuntimeProps\n\nLambda invoke settings. Written `maxConcurrency` to `PROCESS_RESOURCES_MAX_CONCURRENCY`.\n\n- `memorySize` – Memory in MB (default: **512**). Must be a positive integer when set.\n- `timeout` – Lambda invoke timeout (default: **15 minutes**). AWS maximum is 15 minutes; durable waits continue under `durable.executionTimeout`.\n- `maxConcurrency` – Max instances processed in parallel (default: **10**). Must be a positive integer when set. Increase with instance count.\n\n### RunningSchedulerDurableProps\n\n- `executionTimeout` – Maximum durable execution duration (default: **2 hours**). Increase when many instances wait in sequence of batches.\n- `retentionPeriod` – Durable execution history retention (default: **1 day**).\n\n### RunningSchedulerLogGroupProps\n\n- `retention` – CloudWatch Logs retention (default: **`RetentionDays.THREE_MONTHS`**).\n- `removalPolicy` – Log group removal policy (default: **`RemovalPolicy.DESTROY`**).\n\n### FailureDetectionAlarms\n\nOptional operational failure detection. Alarms are created only when `enabled` is `true`.\n\n- `enabled` – When `true`, creates four CloudWatch alarms and three log metric filters (default: disabled when omitted).\n- `alarmTopic` – Optional `sns.ITopic` for alarm actions. The construct does **not** create an SNS topic; pass an existing or imported topic. When omitted, alarms are created without SNS actions.\n\nWhen enabled, the construct creates:\n\n| Alarm | Trigger |\n|-------|---------|\n| Lambda errors | `AWS/Lambda` `Errors` metric |\n| Instance status failure | Log filter: `ResourceWaitFailed` |\n| Slack post failure | Log filter: `running-scheduler: Slack post failed` |\n| Durable execution failure | Other handler `ERROR` logs (excluding the above) |\n\nCustom metrics are published under the `EC2InstanceRunningScheduler` namespace. Access the created alarms via `EC2InstanceRunningScheduler.failureDetection` when enabled.\n\n## Requirements\n\n- **Node.js** ≥ 20.0.0 (for developing or synthesizing CDK apps that depend on this package).\n- **aws-cdk-lib** ^2.232.0 and **constructs** ^10.5.1 (peer dependencies).\n- **AWS** – EventBridge Scheduler; Lambda with **Durable Execution** (Node.js **24.x** runtime in the construct; Durable Execution requires a supported Node.js runtime in your region), a **live alias**, **Parameters and Secrets Lambda Extension**; EC2 (`DescribeInstances`, `StartInstances`, `StopInstances`); Resource Groups Tagging API (`tag:GetResources`); Secrets Manager. The deployed function uses **arm64**, Durable Execution IAM policies, a 2-hour Durable execution timeout (construct default), and a bundled handler that loads secrets via **aws-lambda-secret-fetcher** (^0.7) and parses env vars via **strict-env-resolver** (^0.6). Secret fetch runs only inside Lambda (requires runtime `AWS_SESSION_TOKEN` and the extension layer); the library retries transient extension errors including cold-start \"not ready\" responses.\n\n## License\n\nThis project is licensed under the Apache-2.0 License.\n"
   },
   "repository": {
     "type": "git",
@@ -8479,7 +8479,7 @@
       "assembly": "ec2-instance-running-scheduler",
       "base": "aws-cdk-lib.Stack",
       "docs": {
-        "remarks": "Wires {@link EC2InstanceRunningScheduler} with targeting, schedules, secrets, scheduling toggle,\nand optional {@link FailureDetectionAlarms}. Does not expose {@link ResourceWaitLimits }; use the\nconstruct directly when custom per-instance wait limits are required.",
+        "remarks": "Wires {@link EC2InstanceRunningScheduler} with targeting, schedules, secrets, scheduling toggle,\nand optional {@link FailureDetectionAlarms}. Does not expose {@link ResourceWaitLimits },\n{@link RunningSchedulerRuntimeProps }, {@link RunningSchedulerDurableProps }, or\n{@link RunningSchedulerLogGroupProps }; use the construct directly when custom runtime,\nwait, durable, or log group settings are required.",
         "stability": "stable",
         "summary": "CDK stack that deploys the EC2 instance running scheduler (EventBridge Scheduler + Durable Lambda)."
       },
@@ -8491,7 +8491,7 @@
         },
         "locationInModule": {
           "filename": "src/stacks/ec2-instance-running-schedule-stack.ts",
-          "line": 40
+          "line": 43
         },
         "parameters": [
           {
@@ -8526,7 +8526,7 @@
       "kind": "class",
       "locationInModule": {
         "filename": "src/stacks/ec2-instance-running-schedule-stack.ts",
-        "line": 32
+        "line": 35
       },
       "name": "EC2InstanceRunningScheduleStack",
       "symbolId": "src/stacks/ec2-instance-running-schedule-stack:EC2InstanceRunningScheduleStack"
@@ -8535,7 +8535,7 @@
       "assembly": "ec2-instance-running-scheduler",
       "datatype": true,
       "docs": {
-        "see": "{@link EC2InstanceRunningSchedulerProps } for construct-level options not exposed here (e.g. `resourceWait`).",
+        "see": "{@link EC2InstanceRunningSchedulerProps } for construct-level options not exposed here\n(e.g. `resourceWait`, `runtime`, `durable`, `logGroup`).",
         "stability": "stable",
         "summary": "Props for the EC2 instance running schedule CDK stack."
       },
@@ -8546,7 +8546,7 @@
       "kind": "interface",
       "locationInModule": {
         "filename": "src/stacks/ec2-instance-running-schedule-stack.ts",
-        "line": 10
+        "line": 11
       },
       "name": "EC2InstanceRunningScheduleStackProps",
       "properties": [
@@ -8559,7 +8559,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "src/stacks/ec2-instance-running-schedule-stack.ts",
-            "line": 16
+            "line": 17
           },
           "name": "secrets",
           "type": {
@@ -8575,7 +8575,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "src/stacks/ec2-instance-running-schedule-stack.ts",
-            "line": 12
+            "line": 13
           },
           "name": "targetResource",
           "type": {
@@ -8592,7 +8592,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "src/stacks/ec2-instance-running-schedule-stack.ts",
-            "line": 14
+            "line": 15
           },
           "name": "enableScheduling",
           "optional": true,
@@ -8609,7 +8609,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "src/stacks/ec2-instance-running-schedule-stack.ts",
-            "line": 22
+            "line": 23
           },
           "name": "failureDetection",
           "optional": true,
@@ -8626,7 +8626,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "src/stacks/ec2-instance-running-schedule-stack.ts",
-            "line": 20
+            "line": 21
           },
           "name": "startSchedule",
           "optional": true,
@@ -8643,7 +8643,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "src/stacks/ec2-instance-running-schedule-stack.ts",
-            "line": 18
+            "line": 19
           },
           "name": "stopSchedule",
           "optional": true,
@@ -8658,7 +8658,7 @@
       "assembly": "ec2-instance-running-scheduler",
       "base": "constructs.Construct",
       "docs": {
-        "remarks": "Each schedule invokes the function with `Params` (`TagKey`, `TagValues`, `Mode`). The function uses\nthe Resource Groups Tagging API and EC2 APIs; Slack notifications use the secret named in {@link Secrets.slackSecretName}.\n\nPer-instance wait timeouts are configured via {@link EC2InstanceRunningSchedulerProps.resourceWait}\nand enforced in the handler before the Durable execution timeout. Optional CloudWatch failure\ndetection is available via {@link EC2InstanceRunningSchedulerProps.failureDetection}.",
+        "remarks": "Each schedule invokes the function with `Params` (`TagKey`, `TagValues`, `Mode`). The function uses\nthe Resource Groups Tagging API and EC2 APIs; Slack notifications use the secret named in {@link Secrets.slackSecretName}.\n\nPer-instance wait timeouts are configured via {@link EC2InstanceRunningSchedulerProps.resourceWait}\nand enforced in the handler before the Durable execution timeout. Lambda memory, invoke timeout,\nand map concurrency are set via {@link EC2InstanceRunningSchedulerProps.runtime}; Durable\nexecution timeout and history retention via {@link EC2InstanceRunningSchedulerProps.durable};\nlog retention via {@link EC2InstanceRunningSchedulerProps.logGroup}. Start/stop IAM is limited\nto instances tagged as {@link TargetResource}. Optional CloudWatch failure\ndetection is available via {@link EC2InstanceRunningSchedulerProps.failureDetection}.",
         "stability": "stable",
         "summary": "Provisions EventBridge Scheduler rules and a Durable Execution Lambda that start/stop tagged EC2 instances."
       },
@@ -8670,7 +8670,7 @@
         },
         "locationInModule": {
           "filename": "src/constructs/ec2-instance-running-scheduler.ts",
-          "line": 136
+          "line": 323
         },
         "parameters": [
           {
@@ -8693,7 +8693,7 @@
           },
           {
             "docs": {
-              "summary": "- Target tags, schedules, Slack secret, schedule enable flag, optional {@link ResourceWaitLimits}, and optional {@link FailureDetectionAlarms}."
+              "summary": "- Target tags, schedules, Slack secret, schedule enable flag, optional {@link ResourceWaitLimits}, {@link RunningSchedulerRuntimeProps}, {@link RunningSchedulerDurableProps}, {@link RunningSchedulerLogGroupProps}, and optional {@link FailureDetectionAlarms}."
             },
             "name": "props",
             "type": {
@@ -8705,7 +8705,7 @@
       "kind": "class",
       "locationInModule": {
         "filename": "src/constructs/ec2-instance-running-scheduler.ts",
-        "line": 123
+        "line": 308
       },
       "name": "EC2InstanceRunningScheduler",
       "properties": [
@@ -8717,7 +8717,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "src/constructs/ec2-instance-running-scheduler.ts",
-            "line": 125
+            "line": 310
           },
           "name": "failureDetection",
           "optional": true,
@@ -8739,7 +8739,7 @@
       "kind": "interface",
       "locationInModule": {
         "filename": "src/constructs/ec2-instance-running-scheduler.ts",
-        "line": 86
+        "line": 171
       },
       "name": "EC2InstanceRunningSchedulerProps",
       "properties": [
@@ -8752,7 +8752,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "src/constructs/ec2-instance-running-scheduler.ts",
-            "line": 92
+            "line": 177
           },
           "name": "secrets",
           "type": {
@@ -8768,13 +8768,31 @@
           "immutable": true,
           "locationInModule": {
             "filename": "src/constructs/ec2-instance-running-scheduler.ts",
-            "line": 88
+            "line": 173
           },
           "name": "targetResource",
           "type": {
             "fqn": "ec2-instance-running-scheduler.TargetResource"
           }
         },
+        {
+          "abstract": true,
+          "docs": {
+            "default": "executionTimeout 2 hours, retentionPeriod 1 day",
+            "stability": "stable",
+            "summary": "Durable Execution timeout and history retention."
+          },
+          "immutable": true,
+          "locationInModule": {
+            "filename": "src/constructs/ec2-instance-running-scheduler.ts",
+            "line": 199
+          },
+          "name": "durable",
+          "optional": true,
+          "type": {
+            "fqn": "ec2-instance-running-scheduler.RunningSchedulerDurableProps"
+          }
+        },
         {
           "abstract": true,
           "docs": {
@@ -8785,7 +8803,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "src/constructs/ec2-instance-running-scheduler.ts",
-            "line": 90
+            "line": 175
           },
           "name": "enableScheduling",
           "optional": true,
@@ -8804,7 +8822,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "src/constructs/ec2-instance-running-scheduler.ts",
-            "line": 110
+            "line": 213
           },
           "name": "failureDetection",
           "optional": true,
@@ -8812,6 +8830,24 @@
             "fqn": "ec2-instance-running-scheduler.FailureDetectionAlarms"
           }
         },
+        {
+          "abstract": true,
+          "docs": {
+            "default": "RetentionDays.THREE_MONTHS, RemovalPolicy.DESTROY",
+            "stability": "stable",
+            "summary": "CloudWatch Logs retention and removal policy for the function log group."
+          },
+          "immutable": true,
+          "locationInModule": {
+            "filename": "src/constructs/ec2-instance-running-scheduler.ts",
+            "line": 205
+          },
+          "name": "logGroup",
+          "optional": true,
+          "type": {
+            "fqn": "ec2-instance-running-scheduler.RunningSchedulerLogGroupProps"
+          }
+        },
         {
           "abstract": true,
           "docs": {
@@ -8822,7 +8858,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "src/constructs/ec2-instance-running-scheduler.ts",
-            "line": 102
+            "line": 187
           },
           "name": "resourceWait",
           "optional": true,
@@ -8830,6 +8866,24 @@
             "fqn": "ec2-instance-running-scheduler.ResourceWaitLimits"
           }
         },
+        {
+          "abstract": true,
+          "docs": {
+            "default": "512 MB, 15 minutes, {@link DEFAULT_MAX_CONCURRENCY } (10)",
+            "stability": "stable",
+            "summary": "Lambda memory, invoke timeout, and per-invocation instance concurrency."
+          },
+          "immutable": true,
+          "locationInModule": {
+            "filename": "src/constructs/ec2-instance-running-scheduler.ts",
+            "line": 193
+          },
+          "name": "runtime",
+          "optional": true,
+          "type": {
+            "fqn": "ec2-instance-running-scheduler.RunningSchedulerRuntimeProps"
+          }
+        },
         {
           "abstract": true,
           "docs": {
@@ -8839,7 +8893,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "src/constructs/ec2-instance-running-scheduler.ts",
-            "line": 96
+            "line": 181
           },
           "name": "startSchedule",
           "optional": true,
@@ -8856,7 +8910,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "src/constructs/ec2-instance-running-scheduler.ts",
-            "line": 94
+            "line": 179
           },
           "name": "stopSchedule",
           "optional": true,
@@ -8935,7 +8989,7 @@
       "kind": "interface",
       "locationInModule": {
         "filename": "src/constructs/ec2-instance-running-scheduler.ts",
-        "line": 68
+        "line": 77
       },
       "name": "ResourceWaitLimits",
       "properties": [
@@ -8949,7 +9003,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "src/constructs/ec2-instance-running-scheduler.ts",
-            "line": 80
+            "line": 89
           },
           "name": "maxElapsedSeconds",
           "optional": true,
@@ -8967,17 +9021,91 @@
           "immutable": true,
           "locationInModule": {
             "filename": "src/constructs/ec2-instance-running-scheduler.ts",
-            "line": 74
+            "line": 83
           },
           "name": "maxLoopCount",
           "optional": true,
           "type": {
             "primitive": "number"
           }
+        },
+        {
+          "abstract": true,
+          "docs": {
+            "default": "{@link DEFAULT_RESOURCE_WAIT_LIMITS.statusChangeWaitSeconds } (20)",
+            "remarks": "Lower values detect state changes sooner; higher values reduce DescribeInstances calls.",
+            "stability": "stable",
+            "summary": "Seconds to wait between describe iterations after start/stop or while transitioning."
+          },
+          "immutable": true,
+          "locationInModule": {
+            "filename": "src/constructs/ec2-instance-running-scheduler.ts",
+            "line": 97
+          },
+          "name": "statusChangeWaitSeconds",
+          "optional": true,
+          "type": {
+            "primitive": "number"
+          }
         }
       ],
       "symbolId": "src/constructs/ec2-instance-running-scheduler:ResourceWaitLimits"
     },
+    "ec2-instance-running-scheduler.RunningSchedulerDurableProps": {
+      "assembly": "ec2-instance-running-scheduler",
+      "datatype": true,
+      "docs": {
+        "stability": "stable",
+        "summary": "Durable Execution timeout and history retention for the running scheduler Lambda."
+      },
+      "fqn": "ec2-instance-running-scheduler.RunningSchedulerDurableProps",
+      "kind": "interface",
+      "locationInModule": {
+        "filename": "src/constructs/ec2-instance-running-scheduler.ts",
+        "line": 133
+      },
+      "name": "RunningSchedulerDurableProps",
+      "properties": [
+        {
+          "abstract": true,
+          "docs": {
+            "default": "Duration.hours(2)",
+            "remarks": "Increase when many instances are processed with long per-instance waits.",
+            "stability": "stable",
+            "summary": "Maximum duration of a durable execution."
+          },
+          "immutable": true,
+          "locationInModule": {
+            "filename": "src/constructs/ec2-instance-running-scheduler.ts",
+            "line": 141
+          },
+          "name": "executionTimeout",
+          "optional": true,
+          "type": {
+            "fqn": "aws-cdk-lib.Duration"
+          }
+        },
+        {
+          "abstract": true,
+          "docs": {
+            "default": "Duration.days(1)",
+            "stability": "stable",
+            "summary": "How long to retain durable execution history."
+          },
+          "immutable": true,
+          "locationInModule": {
+            "filename": "src/constructs/ec2-instance-running-scheduler.ts",
+            "line": 147
+          },
+          "name": "retentionPeriod",
+          "optional": true,
+          "type": {
+            "fqn": "aws-cdk-lib.Duration"
+          }
+        }
+      ],
+      "symbolId": "src/constructs/ec2-instance-running-scheduler:RunningSchedulerDurableProps"
+    },
     "ec2-instance-running-scheduler.RunningSchedulerFailureDetection": {
       "assembly": "ec2-instance-running-scheduler",
       "base": "constructs.Construct",
@@ -9177,6 +9305,134 @@
       ],
       "symbolId": "src/constructs/running-scheduler-failure-detection:RunningSchedulerFailureDetectionProps"
     },
+    "ec2-instance-running-scheduler.RunningSchedulerLogGroupProps": {
+      "assembly": "ec2-instance-running-scheduler",
+      "datatype": true,
+      "docs": {
+        "stability": "stable",
+        "summary": "CloudWatch Logs settings for the running scheduler function log group."
+      },
+      "fqn": "ec2-instance-running-scheduler.RunningSchedulerLogGroupProps",
+      "kind": "interface",
+      "locationInModule": {
+        "filename": "src/constructs/ec2-instance-running-scheduler.ts",
+        "line": 153
+      },
+      "name": "RunningSchedulerLogGroupProps",
+      "properties": [
+        {
+          "abstract": true,
+          "docs": {
+            "default": "RemovalPolicy.DESTROY",
+            "stability": "stable",
+            "summary": "Removal policy for the log group."
+          },
+          "immutable": true,
+          "locationInModule": {
+            "filename": "src/constructs/ec2-instance-running-scheduler.ts",
+            "line": 165
+          },
+          "name": "removalPolicy",
+          "optional": true,
+          "type": {
+            "fqn": "aws-cdk-lib.RemovalPolicy"
+          }
+        },
+        {
+          "abstract": true,
+          "docs": {
+            "default": "RetentionDays.THREE_MONTHS",
+            "stability": "stable",
+            "summary": "How long to retain application logs."
+          },
+          "immutable": true,
+          "locationInModule": {
+            "filename": "src/constructs/ec2-instance-running-scheduler.ts",
+            "line": 159
+          },
+          "name": "retention",
+          "optional": true,
+          "type": {
+            "fqn": "aws-cdk-lib.aws_logs.RetentionDays"
+          }
+        }
+      ],
+      "symbolId": "src/constructs/ec2-instance-running-scheduler:RunningSchedulerLogGroupProps"
+    },
+    "ec2-instance-running-scheduler.RunningSchedulerRuntimeProps": {
+      "assembly": "ec2-instance-running-scheduler",
+      "datatype": true,
+      "docs": {
+        "remarks": "Increase {@link memorySize} and {@link maxConcurrency} when a single invocation targets\nmany instances or regions.",
+        "stability": "stable",
+        "summary": "Lambda invoke settings and bounded parallelism for the running scheduler function."
+      },
+      "fqn": "ec2-instance-running-scheduler.RunningSchedulerRuntimeProps",
+      "kind": "interface",
+      "locationInModule": {
+        "filename": "src/constructs/ec2-instance-running-scheduler.ts",
+        "line": 106
+      },
+      "name": "RunningSchedulerRuntimeProps",
+      "properties": [
+        {
+          "abstract": true,
+          "docs": {
+            "default": "{@link DEFAULT_MAX_CONCURRENCY } (10)",
+            "stability": "stable",
+            "summary": "Maximum number of instances processed in parallel by the durable `map`."
+          },
+          "immutable": true,
+          "locationInModule": {
+            "filename": "src/constructs/ec2-instance-running-scheduler.ts",
+            "line": 127
+          },
+          "name": "maxConcurrency",
+          "optional": true,
+          "type": {
+            "primitive": "number"
+          }
+        },
+        {
+          "abstract": true,
+          "docs": {
+            "default": "512",
+            "stability": "stable",
+            "summary": "Memory allocated to the running scheduler Lambda, in MB."
+          },
+          "immutable": true,
+          "locationInModule": {
+            "filename": "src/constructs/ec2-instance-running-scheduler.ts",
+            "line": 112
+          },
+          "name": "memorySize",
+          "optional": true,
+          "type": {
+            "primitive": "number"
+          }
+        },
+        {
+          "abstract": true,
+          "docs": {
+            "default": "Duration.minutes(15)",
+            "remarks": "AWS Lambda's maximum invoke timeout is 15 minutes. Durable waits can continue\nbeyond this via {@link RunningSchedulerDurableProps.executionTimeout}.",
+            "stability": "stable",
+            "summary": "Invoke timeout for the Lambda function (not the durable execution timeout)."
+          },
+          "immutable": true,
+          "locationInModule": {
+            "filename": "src/constructs/ec2-instance-running-scheduler.ts",
+            "line": 121
+          },
+          "name": "timeout",
+          "optional": true,
+          "type": {
+            "fqn": "aws-cdk-lib.Duration"
+          }
+        }
+      ],
+      "symbolId": "src/constructs/ec2-instance-running-scheduler:RunningSchedulerRuntimeProps"
+    },
     "ec2-instance-running-scheduler.Schedule": {
       "assembly": "ec2-instance-running-scheduler",
       "datatype": true,
@@ -9188,7 +9444,7 @@
       "kind": "interface",
       "locationInModule": {
         "filename": "src/constructs/ec2-instance-running-scheduler.ts",
-        "line": 30
+        "line": 35
       },
       "name": "Schedule",
       "properties": [
@@ -9201,7 +9457,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "src/constructs/ec2-instance-running-scheduler.ts",
-            "line": 32
+            "line": 37
           },
           "name": "timezone",
           "type": {
@@ -9217,7 +9473,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "src/constructs/ec2-instance-running-scheduler.ts",
-            "line": 36
+            "line": 41
           },
           "name": "hour",
           "optional": true,
@@ -9234,7 +9490,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "src/constructs/ec2-instance-running-scheduler.ts",
-            "line": 34
+            "line": 39
           },
           "name": "minute",
           "optional": true,
@@ -9251,7 +9507,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "src/constructs/ec2-instance-running-scheduler.ts",
-            "line": 38
+            "line": 43
           },
           "name": "week",
           "optional": true,
@@ -9273,7 +9529,7 @@
       "kind": "interface",
       "locationInModule": {
         "filename": "src/constructs/ec2-instance-running-scheduler.ts",
-        "line": 54
+        "line": 63
       },
       "name": "Secrets",
       "properties": [
@@ -9286,7 +9542,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "src/constructs/ec2-instance-running-scheduler.ts",
-            "line": 56
+            "line": 65
           },
           "name": "slackSecretName",
           "type": {
@@ -9300,6 +9556,7 @@
       "assembly": "ec2-instance-running-scheduler",
       "datatype": true,
       "docs": {
+        "remarks": "Instances must already have this tag. IAM allows `ec2:StartInstances` /\n`ec2:StopInstances` only on instances in the stack account and region whose\n`aws:ResourceTag/<tagKey>` matches one of {@link TargetResource.tagValues}.",
         "stability": "stable",
         "summary": "Defines which EC2 instances are targeted by tag key and values."
       },
@@ -9307,7 +9564,7 @@
       "kind": "interface",
       "locationInModule": {
         "filename": "src/constructs/ec2-instance-running-scheduler.ts",
-        "line": 44
+        "line": 53
       },
       "name": "TargetResource",
       "properties": [
@@ -9320,7 +9577,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "src/constructs/ec2-instance-running-scheduler.ts",
-            "line": 46
+            "line": 55
           },
           "name": "tagKey",
           "type": {
@@ -9336,7 +9593,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "src/constructs/ec2-instance-running-scheduler.ts",
-            "line": 48
+            "line": 57
           },
           "name": "tagValues",
           "type": {
@@ -9352,6 +9609,6 @@
       "symbolId": "src/constructs/ec2-instance-running-scheduler:TargetResource"
     }
   },
-  "version": "0.3.6",
-  "fingerprint": "4bNGVsMC64PXeIxzDS8SjTB2CSuhR3dq4PNjYxcmUeE="
+  "version": "0.4.0",
+  "fingerprint": "MPBp680fNiHH5tRorE3kFIcOLyFX4+T7nXmkQJPueQ8="
 }