skuba 0.0.0-master-20231121000709 → 0.0.0-master-20240206001217

package/template/lambda-sqs-worker-cdk/infra/__snapshots__/appStack.test.ts.snap

@@ -2,7 +2,306 @@
 
 exports[`returns expected CloudFormation stack for dev 1`] = `
 {
+  "Mappings": {
+    "ServiceprincipalMap": {
+      "af-south-1": {
+        "codedeploy": "codedeploy.af-south-1.amazonaws.com",
+      },
+      "ap-east-1": {
+        "codedeploy": "codedeploy.ap-east-1.amazonaws.com",
+      },
+      "ap-northeast-1": {
+        "codedeploy": "codedeploy.ap-northeast-1.amazonaws.com",
+      },
+      "ap-northeast-2": {
+        "codedeploy": "codedeploy.ap-northeast-2.amazonaws.com",
+      },
+      "ap-northeast-3": {
+        "codedeploy": "codedeploy.ap-northeast-3.amazonaws.com",
+      },
+      "ap-south-1": {
+        "codedeploy": "codedeploy.ap-south-1.amazonaws.com",
+      },
+      "ap-south-2": {
+        "codedeploy": "codedeploy.ap-south-2.amazonaws.com",
+      },
+      "ap-southeast-1": {
+        "codedeploy": "codedeploy.ap-southeast-1.amazonaws.com",
+      },
+      "ap-southeast-2": {
+        "codedeploy": "codedeploy.ap-southeast-2.amazonaws.com",
+      },
+      "ap-southeast-3": {
+        "codedeploy": "codedeploy.ap-southeast-3.amazonaws.com",
+      },
+      "ap-southeast-4": {
+        "codedeploy": "codedeploy.ap-southeast-4.amazonaws.com",
+      },
+      "ca-central-1": {
+        "codedeploy": "codedeploy.ca-central-1.amazonaws.com",
+      },
+      "cn-north-1": {
+        "codedeploy": "codedeploy.cn-north-1.amazonaws.com.cn",
+      },
+      "cn-northwest-1": {
+        "codedeploy": "codedeploy.cn-northwest-1.amazonaws.com.cn",
+      },
+      "eu-central-1": {
+        "codedeploy": "codedeploy.eu-central-1.amazonaws.com",
+      },
+      "eu-central-2": {
+        "codedeploy": "codedeploy.eu-central-2.amazonaws.com",
+      },
+      "eu-north-1": {
+        "codedeploy": "codedeploy.eu-north-1.amazonaws.com",
+      },
+      "eu-south-1": {
+        "codedeploy": "codedeploy.eu-south-1.amazonaws.com",
+      },
+      "eu-south-2": {
+        "codedeploy": "codedeploy.eu-south-2.amazonaws.com",
+      },
+      "eu-west-1": {
+        "codedeploy": "codedeploy.eu-west-1.amazonaws.com",
+      },
+      "eu-west-2": {
+        "codedeploy": "codedeploy.eu-west-2.amazonaws.com",
+      },
+      "eu-west-3": {
+        "codedeploy": "codedeploy.eu-west-3.amazonaws.com",
+      },
+      "il-central-1": {
+        "codedeploy": "codedeploy.il-central-1.amazonaws.com",
+      },
+      "me-central-1": {
+        "codedeploy": "codedeploy.me-central-1.amazonaws.com",
+      },
+      "me-south-1": {
+        "codedeploy": "codedeploy.me-south-1.amazonaws.com",
+      },
+      "sa-east-1": {
+        "codedeploy": "codedeploy.sa-east-1.amazonaws.com",
+      },
+      "us-east-1": {
+        "codedeploy": "codedeploy.us-east-1.amazonaws.com",
+      },
+      "us-east-2": {
+        "codedeploy": "codedeploy.us-east-2.amazonaws.com",
+      },
+      "us-gov-east-1": {
+        "codedeploy": "codedeploy.us-gov-east-1.amazonaws.com",
+      },
+      "us-gov-west-1": {
+        "codedeploy": "codedeploy.us-gov-west-1.amazonaws.com",
+      },
+      "us-iso-east-1": {
+        "codedeploy": "codedeploy.amazonaws.com",
+      },
+      "us-iso-west-1": {
+        "codedeploy": "codedeploy.amazonaws.com",
+      },
+      "us-isob-east-1": {
+        "codedeploy": "codedeploy.amazonaws.com",
+      },
+      "us-west-1": {
+        "codedeploy": "codedeploy.us-west-1.amazonaws.com",
+      },
+      "us-west-2": {
+        "codedeploy": "codedeploy.us-west-2.amazonaws.com",
+      },
+    },
+  },
+  "Parameters": {
+    "BootstrapVersion": {
+      "Default": "/cdk-bootstrap/hnb659fds/version",
+      "Description": "Version of the CDK Bootstrap resources in this environment, automatically retrieved from SSM Parameter Store. [cdk:skip]",
+      "Type": "AWS::SSM::Parameter::Value<String>",
+    },
+  },
   "Resources": {
+    "codedeployalarm9F48D05F": {
+      "Properties": {
+        "ComparisonOperator": "GreaterThanOrEqualToThreshold",
+        "Dimensions": [
+          {
+            "Name": "FunctionName",
+            "Value": {
+              "Ref": "worker28EA3E30",
+            },
+          },
+          {
+            "Name": "Resource",
+            "Value": {
+              "Fn::Join": [
+                "",
+                [
+                  {
+                    "Ref": "worker28EA3E30",
+                  },
+                  ":live",
+                ],
+              ],
+            },
+          },
+        ],
+        "EvaluationPeriods": 1,
+        "MetricName": "Errors",
+        "Namespace": "AWS/Lambda",
+        "Period": 60,
+        "Statistic": "Sum",
+        "Threshold": 1,
+      },
+      "Type": "AWS::CloudWatch::Alarm",
+    },
+    "codedeployapplicationF49B9864": {
+      "Properties": {
+        "ComputePlatform": "Lambda",
+      },
+      "Type": "AWS::CodeDeploy::Application",
+    },
+    "codedeploygroup441B094B": {
+      "Properties": {
+        "AlarmConfiguration": {
+          "Alarms": [
+            {
+              "Name": {
+                "Ref": "codedeployalarm9F48D05F",
+              },
+            },
+          ],
+          "Enabled": true,
+        },
+        "ApplicationName": {
+          "Ref": "codedeployapplicationF49B9864",
+        },
+        "AutoRollbackConfiguration": {
+          "Enabled": true,
+          "Events": [
+            "DEPLOYMENT_FAILURE",
+            "DEPLOYMENT_STOP_ON_ALARM",
+          ],
+        },
+        "DeploymentConfigName": "CodeDeployDefault.LambdaAllAtOnce",
+        "DeploymentStyle": {
+          "DeploymentOption": "WITH_TRAFFIC_CONTROL",
+          "DeploymentType": "BLUE_GREEN",
+        },
+        "ServiceRoleArn": {
+          "Fn::GetAtt": [
+            "codedeploygroupServiceRole1BD49E37",
+            "Arn",
+          ],
+        },
+      },
+      "Type": "AWS::CodeDeploy::DeploymentGroup",
+    },
+    "codedeploygroupServiceRole1BD49E37": {
+      "Properties": {
+        "AssumeRolePolicyDocument": {
+          "Statement": [
+            {
+              "Action": "sts:AssumeRole",
+              "Effect": "Allow",
+              "Principal": {
+                "Service": {
+                  "Fn::FindInMap": [
+                    "ServiceprincipalMap",
+                    {
+                      "Ref": "AWS::Region",
+                    },
+                    "codedeploy",
+                  ],
+                },
+              },
+            },
+          ],
+          "Version": "2012-10-17",
+        },
+        "ManagedPolicyArns": [
+          {
+            "Fn::Join": [
+              "",
+              [
+                "arn:",
+                {
+                  "Ref": "AWS::Partition",
+                },
+                ":iam::aws:policy/service-role/AWSCodeDeployRoleForLambdaLimited",
+              ],
+            ],
+          },
+        ],
+      },
+      "Type": "AWS::IAM::Role",
+    },
+    "codedeploygroupServiceRoleDefaultPolicy2027BC9A": {
+      "Properties": {
+        "PolicyDocument": {
+          "Statement": [
+            {
+              "Action": "lambda:InvokeFunction",
+              "Effect": "Allow",
+              "Resource": [
+                {
+                  "Fn::GetAtt": [
+                    "workerprehook415B13CE",
+                    "Arn",
+                  ],
+                },
+                {
+                  "Fn::Join": [
+                    "",
+                    [
+                      {
+                        "Fn::GetAtt": [
+                          "workerprehook415B13CE",
+                          "Arn",
+                        ],
+                      },
+                      ":*",
+                    ],
+                  ],
+                },
+              ],
+            },
+            {
+              "Action": "lambda:InvokeFunction",
+              "Effect": "Allow",
+              "Resource": [
+                {
+                  "Fn::GetAtt": [
+                    "workerposthook150842D6",
+                    "Arn",
+                  ],
+                },
+                {
+                  "Fn::Join": [
+                    "",
+                    [
+                      {
+                        "Fn::GetAtt": [
+                          "workerposthook150842D6",
+                          "Arn",
+                        ],
+                      },
+                      ":*",
+                    ],
+                  ],
+                },
+              ],
+            },
+          ],
+          "Version": "2012-10-17",
+        },
+        "PolicyName": "codedeploygroupServiceRoleDefaultPolicy2027BC9A",
+        "Roles": [
+          {
+            "Ref": "codedeploygroupServiceRole1BD49E37",
+          },
+        ],
+      },
+      "Type": "AWS::IAM::Policy",
+    },
     "kmskey49FBC3B3": {
       "DeletionPolicy": "Retain",
       "Properties": {
@@ -128,16 +427,7 @@ exports[`returns expected CloudFormation stack for dev 1`] = `
       },
       "Type": "AWS::KMS::Alias",
     },
-    "topic69831491": {
-      "Properties": {
-        "KmsMasterKeyId": {
-          "Fn::GetAtt": [
-            "kmskey49FBC3B3",
-            "Arn",
-          ],
-        },
-        "TopicName": "serviceName",
-      },
+    "sourcetopic7C3DC892": {
       "Type": "AWS::SNS::Topic",
     },
     "worker28EA3E30": {
@@ -155,6 +445,7 @@ exports[`returns expected CloudFormation stack for dev 1`] = `
           },
           "S3Key": "xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx.zip",
         },
+        "Description": "Updated at 1212-12-12T12:12:12.121Z",
         "Environment": {
           "Variables": {
             "NODE_ENV": "production",
@@ -163,13 +454,14 @@ exports[`returns expected CloudFormation stack for dev 1`] = `
           },
         },
         "FunctionName": "serviceName",
-        "Handler": "app.handler",
+        "Handler": "index.handler",
         "KmsKeyArn": {
           "Fn::GetAtt": [
             "kmskey49FBC3B3",
             "Arn",
           ],
         },
+        "ReservedConcurrentExecutions": 2,
         "Role": {
           "Fn::GetAtt": [
             "workerServiceRole2130CC7F",
@@ -177,9 +469,85 @@ exports[`returns expected CloudFormation stack for dev 1`] = `
           ],
         },
         "Runtime": "nodejs20.x",
+        "Timeout": 30,
       },
       "Type": "AWS::Lambda::Function",
     },
+    "workerAliaslive62FE5FAF": {
+      "Properties": {
+        "Description": "The Lambda version currently receiving traffic",
+        "FunctionName": {
+          "Ref": "worker28EA3E30",
+        },
+        "FunctionVersion": {
+          "Fn::GetAtt": [
+            "workerCurrentVersionFA5B4BF4c6e1b764a3a99fdb70911ac06ee9afd5",
+            "Version",
+          ],
+        },
+        "Name": "live",
+      },
+      "Type": "AWS::Lambda::Alias",
+      "UpdatePolicy": {
+        "CodeDeployLambdaAliasUpdate": {
+          "AfterAllowTrafficHook": {
+            "Ref": "workerposthook150842D6",
+          },
+          "ApplicationName": {
+            "Ref": "codedeployapplicationF49B9864",
+          },
+          "BeforeAllowTrafficHook": {
+            "Ref": "workerprehook415B13CE",
+          },
+          "DeploymentGroupName": {
+            "Ref": "codedeploygroup441B094B",
+          },
+        },
+      },
+    },
+    "workerAliasliveSqsEventSourceappStackworkerqueue8281B9F42DEDB47B": {
+      "Properties": {
+        "EventSourceArn": {
+          "Fn::GetAtt": [
+            "workerqueueA05CE5C6",
+            "Arn",
+          ],
+        },
+        "FunctionName": {
+          "Fn::Join": [
+            "",
+            [
+              {
+                "Fn::Select": [
+                  6,
+                  {
+                    "Fn::Split": [
+                      ":",
+                      {
+                        "Ref": "workerAliaslive62FE5FAF",
+                      },
+                    ],
+                  },
+                ],
+              },
+              ":live",
+            ],
+          ],
+        },
+        "ScalingConfig": {
+          "MaximumConcurrency": 2,
+        },
+      },
+      "Type": "AWS::Lambda::EventSourceMapping",
+    },
+    "workerCurrentVersionFA5B4BF4c6e1b764a3a99fdb70911ac06ee9afd5": {
+      "Properties": {
+        "FunctionName": {
+          "Ref": "worker28EA3E30",
+        },
+      },
+      "Type": "AWS::Lambda::Version",
+    },
     "workerServiceRole2130CC7F": {
       "Properties": {
         "AssumeRolePolicyDocument": {
@@ -253,56 +621,342 @@ exports[`returns expected CloudFormation stack for dev 1`] = `
       },
       "Type": "AWS::IAM::Policy",
     },
-    "workerSqsEventSourceappStackworkerqueue8281B9F47B9F582B": {
+    "workerposthook150842D6": {
+      "DependsOn": [
+        "workerposthookServiceRoleDefaultPolicy6A92F69C",
+        "workerposthookServiceRole25452300",
+      ],
       "Properties": {
-        "EventSourceArn": {
-          "Fn::GetAtt": [
-            "workerqueueA05CE5C6",
-            "Arn",
-          ],
+        "Architectures": [
+          "arm64",
+        ],
+        "Code": {
+          "S3Bucket": {
+            "Fn::Sub": "cdk-hnb659fds-assets-\${AWS::AccountId}-\${AWS::Region}",
+          },
+          "S3Key": "xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx.zip",
         },
-        "FunctionName": {
-          "Ref": "worker28EA3E30",
+        "Environment": {
+          "Variables": {
+            "FUNCTION_NAME_TO_PRUNE": {
+              "Ref": "worker28EA3E30",
+            },
+            "NODE_ENV": "production",
+            "NODE_OPTIONS": "--enable-source-maps",
+            "SOMETHING": "dev",
+          },
         },
-      },
-      "Type": "AWS::Lambda::EventSourceMapping",
-    },
-    "workerqueueA05CE5C6": {
-      "DeletionPolicy": "Delete",
-      "Properties": {
-        "KmsMasterKeyId": {
+        "FunctionName": "serviceName-post-hook",
+        "Handler": "index.handler",
+        "KmsKeyArn": {
           "Fn::GetAtt": [
             "kmskey49FBC3B3",
             "Arn",
           ],
         },
-        "QueueName": "serviceName",
-        "RedrivePolicy": {
-          "deadLetterTargetArn": {
-            "Fn::GetAtt": [
-              "workerqueuedlq42262778",
-              "Arn",
-            ],
-          },
-          "maxReceiveCount": 3,
+        "Role": {
+          "Fn::GetAtt": [
+            "workerposthookServiceRole25452300",
+            "Arn",
+          ],
         },
+        "Runtime": "nodejs20.x",
+        "Timeout": 30,
       },
-      "Type": "AWS::SQS::Queue",
-      "UpdateReplacePolicy": "Delete",
+      "Type": "AWS::Lambda::Function",
     },
-    "workerqueuePolicy97054CB4": {
+    "workerposthookServiceRole25452300": {
       "Properties": {
-        "PolicyDocument": {
+        "AssumeRolePolicyDocument": {
           "Statement": [
             {
-              "Action": "sqs:SendMessage",
-              "Condition": {
-                "ArnEquals": {
-                  "aws:SourceArn": {
-                    "Ref": "topic69831491",
-                  },
-                },
-              },
+              "Action": "sts:AssumeRole",
+              "Effect": "Allow",
+              "Principal": {
+                "Service": "lambda.amazonaws.com",
+              },
+            },
+          ],
+          "Version": "2012-10-17",
+        },
+        "ManagedPolicyArns": [
+          {
+            "Fn::Join": [
+              "",
+              [
+                "arn:",
+                {
+                  "Ref": "AWS::Partition",
+                },
+                ":iam::aws:policy/service-role/AWSLambdaBasicExecutionRole",
+              ],
+            ],
+          },
+        ],
+      },
+      "Type": "AWS::IAM::Role",
+    },
+    "workerposthookServiceRoleDefaultPolicy6A92F69C": {
+      "Properties": {
+        "PolicyDocument": {
+          "Statement": [
+            {
+              "Action": [
+                "lambda:ListAliases",
+                "lambda:ListVersionsByFunction",
+                "lambda:DeleteFunction",
+              ],
+              "Effect": "Allow",
+              "Resource": [
+                {
+                  "Fn::GetAtt": [
+                    "worker28EA3E30",
+                    "Arn",
+                  ],
+                },
+                {
+                  "Fn::Join": [
+                    "",
+                    [
+                      {
+                        "Fn::GetAtt": [
+                          "worker28EA3E30",
+                          "Arn",
+                        ],
+                      },
+                      ":*",
+                    ],
+                  ],
+                },
+              ],
+            },
+            {
+              "Action": "codedeploy:PutLifecycleEventHookExecutionStatus",
+              "Effect": "Allow",
+              "Resource": {
+                "Fn::Join": [
+                  "",
+                  [
+                    "arn:",
+                    {
+                      "Ref": "AWS::Partition",
+                    },
+                    ":codedeploy:",
+                    {
+                      "Ref": "AWS::Region",
+                    },
+                    ":",
+                    {
+                      "Ref": "AWS::AccountId",
+                    },
+                    ":deploymentgroup:",
+                    {
+                      "Ref": "codedeployapplicationF49B9864",
+                    },
+                    "/",
+                    {
+                      "Ref": "codedeploygroup441B094B",
+                    },
+                  ],
+                ],
+              },
+            },
+          ],
+          "Version": "2012-10-17",
+        },
+        "PolicyName": "workerposthookServiceRoleDefaultPolicy6A92F69C",
+        "Roles": [
+          {
+            "Ref": "workerposthookServiceRole25452300",
+          },
+        ],
+      },
+      "Type": "AWS::IAM::Policy",
+    },
+    "workerprehook415B13CE": {
+      "DependsOn": [
+        "workerprehookServiceRoleDefaultPolicy991A21B9",
+        "workerprehookServiceRole8F8D9379",
+      ],
+      "Properties": {
+        "Architectures": [
+          "arm64",
+        ],
+        "Code": {
+          "S3Bucket": {
+            "Fn::Sub": "cdk-hnb659fds-assets-\${AWS::AccountId}-\${AWS::Region}",
+          },
+          "S3Key": "xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx.zip",
+        },
+        "Environment": {
+          "Variables": {
+            "FUNCTION_NAME_TO_INVOKE": {
+              "Ref": "worker28EA3E30",
+            },
+            "NODE_ENV": "production",
+            "NODE_OPTIONS": "--enable-source-maps",
+            "SOMETHING": "dev",
+          },
+        },
+        "FunctionName": "serviceName-pre-hook",
+        "Handler": "index.handler",
+        "KmsKeyArn": {
+          "Fn::GetAtt": [
+            "kmskey49FBC3B3",
+            "Arn",
+          ],
+        },
+        "Role": {
+          "Fn::GetAtt": [
+            "workerprehookServiceRole8F8D9379",
+            "Arn",
+          ],
+        },
+        "Runtime": "nodejs20.x",
+        "Timeout": 120,
+      },
+      "Type": "AWS::Lambda::Function",
+    },
+    "workerprehookServiceRole8F8D9379": {
+      "Properties": {
+        "AssumeRolePolicyDocument": {
+          "Statement": [
+            {
+              "Action": "sts:AssumeRole",
+              "Effect": "Allow",
+              "Principal": {
+                "Service": "lambda.amazonaws.com",
+              },
+            },
+          ],
+          "Version": "2012-10-17",
+        },
+        "ManagedPolicyArns": [
+          {
+            "Fn::Join": [
+              "",
+              [
+                "arn:",
+                {
+                  "Ref": "AWS::Partition",
+                },
+                ":iam::aws:policy/service-role/AWSLambdaBasicExecutionRole",
+              ],
+            ],
+          },
+        ],
+      },
+      "Type": "AWS::IAM::Role",
+    },
+    "workerprehookServiceRoleDefaultPolicy991A21B9": {
+      "Properties": {
+        "PolicyDocument": {
+          "Statement": [
+            {
+              "Action": "lambda:InvokeFunction",
+              "Effect": "Allow",
+              "Resource": [
+                {
+                  "Fn::GetAtt": [
+                    "worker28EA3E30",
+                    "Arn",
+                  ],
+                },
+                {
+                  "Fn::Join": [
+                    "",
+                    [
+                      {
+                        "Fn::GetAtt": [
+                          "worker28EA3E30",
+                          "Arn",
+                        ],
+                      },
+                      ":*",
+                    ],
+                  ],
+                },
+              ],
+            },
+            {
+              "Action": "codedeploy:PutLifecycleEventHookExecutionStatus",
+              "Effect": "Allow",
+              "Resource": {
+                "Fn::Join": [
+                  "",
+                  [
+                    "arn:",
+                    {
+                      "Ref": "AWS::Partition",
+                    },
+                    ":codedeploy:",
+                    {
+                      "Ref": "AWS::Region",
+                    },
+                    ":",
+                    {
+                      "Ref": "AWS::AccountId",
+                    },
+                    ":deploymentgroup:",
+                    {
+                      "Ref": "codedeployapplicationF49B9864",
+                    },
+                    "/",
+                    {
+                      "Ref": "codedeploygroup441B094B",
+                    },
+                  ],
+                ],
+              },
+            },
+          ],
+          "Version": "2012-10-17",
+        },
+        "PolicyName": "workerprehookServiceRoleDefaultPolicy991A21B9",
+        "Roles": [
+          {
+            "Ref": "workerprehookServiceRole8F8D9379",
+          },
+        ],
+      },
+      "Type": "AWS::IAM::Policy",
+    },
+    "workerqueueA05CE5C6": {
+      "DeletionPolicy": "Delete",
+      "Properties": {
+        "KmsMasterKeyId": {
+          "Fn::GetAtt": [
+            "kmskey49FBC3B3",
+            "Arn",
+          ],
+        },
+        "QueueName": "serviceName",
+        "RedrivePolicy": {
+          "deadLetterTargetArn": {
+            "Fn::GetAtt": [
+              "workerqueuedlq42262778",
+              "Arn",
+            ],
+          },
+          "maxReceiveCount": 3,
+        },
+      },
+      "Type": "AWS::SQS::Queue",
+      "UpdateReplacePolicy": "Delete",
+    },
+    "workerqueuePolicy97054CB4": {
+      "Properties": {
+        "PolicyDocument": {
+          "Statement": [
+            {
+              "Action": "sqs:SendMessage",
+              "Condition": {
+                "ArnEquals": {
+                  "aws:SourceArn": {
+                    "Ref": "sourcetopic7C3DC892",
+                  },
+                },
+              },
               "Effect": "Allow",
               "Principal": {
                 "Service": "sns.amazonaws.com",
@@ -319,192 +973,852 @@ exports[`returns expected CloudFormation stack for dev 1`] = `
         },
         "Queues": [
           {
-            "Ref": "workerqueueA05CE5C6",
+            "Ref": "workerqueueA05CE5C6",
+          },
+        ],
+      },
+      "Type": "AWS::SQS::QueuePolicy",
+    },
+    "workerqueueappStacksourcetopic613C6BDBD2F224F5": {
+      "DependsOn": [
+        "workerqueuePolicy97054CB4",
+      ],
+      "Properties": {
+        "Endpoint": {
+          "Fn::GetAtt": [
+            "workerqueueA05CE5C6",
+            "Arn",
+          ],
+        },
+        "Protocol": "sqs",
+        "TopicArn": {
+          "Ref": "sourcetopic7C3DC892",
+        },
+      },
+      "Type": "AWS::SNS::Subscription",
+    },
+    "workerqueuedlq42262778": {
+      "DeletionPolicy": "Delete",
+      "Properties": {
+        "KmsMasterKeyId": {
+          "Fn::GetAtt": [
+            "kmskey49FBC3B3",
+            "Arn",
+          ],
+        },
+        "QueueName": "serviceName-dlq",
+      },
+      "Type": "AWS::SQS::Queue",
+      "UpdateReplacePolicy": "Delete",
+    },
+  },
+  "Rules": {
+    "CheckBootstrapVersion": {
+      "Assertions": [
+        {
+          "Assert": {
+            "Fn::Not": [
+              {
+                "Fn::Contains": [
+                  [
+                    "1",
+                    "2",
+                    "3",
+                    "4",
+                    "5",
+                  ],
+                  {
+                    "Ref": "BootstrapVersion",
+                  },
+                ],
+              },
+            ],
+          },
+          "AssertDescription": "CDK bootstrap stack version 6 required. Please run 'cdk bootstrap' with a recent version of the CDK CLI.",
+        },
+      ],
+    },
+  },
+}
+`;
+
+exports[`returns expected CloudFormation stack for prod 1`] = `
+{
+  "Mappings": {
+    "ServiceprincipalMap": {
+      "af-south-1": {
+        "codedeploy": "codedeploy.af-south-1.amazonaws.com",
+      },
+      "ap-east-1": {
+        "codedeploy": "codedeploy.ap-east-1.amazonaws.com",
+      },
+      "ap-northeast-1": {
+        "codedeploy": "codedeploy.ap-northeast-1.amazonaws.com",
+      },
+      "ap-northeast-2": {
+        "codedeploy": "codedeploy.ap-northeast-2.amazonaws.com",
+      },
+      "ap-northeast-3": {
+        "codedeploy": "codedeploy.ap-northeast-3.amazonaws.com",
+      },
+      "ap-south-1": {
+        "codedeploy": "codedeploy.ap-south-1.amazonaws.com",
+      },
+      "ap-south-2": {
+        "codedeploy": "codedeploy.ap-south-2.amazonaws.com",
+      },
+      "ap-southeast-1": {
+        "codedeploy": "codedeploy.ap-southeast-1.amazonaws.com",
+      },
+      "ap-southeast-2": {
+        "codedeploy": "codedeploy.ap-southeast-2.amazonaws.com",
+      },
+      "ap-southeast-3": {
+        "codedeploy": "codedeploy.ap-southeast-3.amazonaws.com",
+      },
+      "ap-southeast-4": {
+        "codedeploy": "codedeploy.ap-southeast-4.amazonaws.com",
+      },
+      "ca-central-1": {
+        "codedeploy": "codedeploy.ca-central-1.amazonaws.com",
+      },
+      "cn-north-1": {
+        "codedeploy": "codedeploy.cn-north-1.amazonaws.com.cn",
+      },
+      "cn-northwest-1": {
+        "codedeploy": "codedeploy.cn-northwest-1.amazonaws.com.cn",
+      },
+      "eu-central-1": {
+        "codedeploy": "codedeploy.eu-central-1.amazonaws.com",
+      },
+      "eu-central-2": {
+        "codedeploy": "codedeploy.eu-central-2.amazonaws.com",
+      },
+      "eu-north-1": {
+        "codedeploy": "codedeploy.eu-north-1.amazonaws.com",
+      },
+      "eu-south-1": {
+        "codedeploy": "codedeploy.eu-south-1.amazonaws.com",
+      },
+      "eu-south-2": {
+        "codedeploy": "codedeploy.eu-south-2.amazonaws.com",
+      },
+      "eu-west-1": {
+        "codedeploy": "codedeploy.eu-west-1.amazonaws.com",
+      },
+      "eu-west-2": {
+        "codedeploy": "codedeploy.eu-west-2.amazonaws.com",
+      },
+      "eu-west-3": {
+        "codedeploy": "codedeploy.eu-west-3.amazonaws.com",
+      },
+      "il-central-1": {
+        "codedeploy": "codedeploy.il-central-1.amazonaws.com",
+      },
+      "me-central-1": {
+        "codedeploy": "codedeploy.me-central-1.amazonaws.com",
+      },
+      "me-south-1": {
+        "codedeploy": "codedeploy.me-south-1.amazonaws.com",
+      },
+      "sa-east-1": {
+        "codedeploy": "codedeploy.sa-east-1.amazonaws.com",
+      },
+      "us-east-1": {
+        "codedeploy": "codedeploy.us-east-1.amazonaws.com",
+      },
+      "us-east-2": {
+        "codedeploy": "codedeploy.us-east-2.amazonaws.com",
+      },
+      "us-gov-east-1": {
+        "codedeploy": "codedeploy.us-gov-east-1.amazonaws.com",
+      },
+      "us-gov-west-1": {
+        "codedeploy": "codedeploy.us-gov-west-1.amazonaws.com",
+      },
+      "us-iso-east-1": {
+        "codedeploy": "codedeploy.amazonaws.com",
+      },
+      "us-iso-west-1": {
+        "codedeploy": "codedeploy.amazonaws.com",
+      },
+      "us-isob-east-1": {
+        "codedeploy": "codedeploy.amazonaws.com",
+      },
+      "us-west-1": {
+        "codedeploy": "codedeploy.us-west-1.amazonaws.com",
+      },
+      "us-west-2": {
+        "codedeploy": "codedeploy.us-west-2.amazonaws.com",
+      },
+    },
+  },
+  "Parameters": {
+    "BootstrapVersion": {
+      "Default": "/cdk-bootstrap/hnb659fds/version",
+      "Description": "Version of the CDK Bootstrap resources in this environment, automatically retrieved from SSM Parameter Store. [cdk:skip]",
+      "Type": "AWS::SSM::Parameter::Value<String>",
+    },
+  },
+  "Resources": {
+    "codedeployalarm9F48D05F": {
+      "Properties": {
+        "ComparisonOperator": "GreaterThanOrEqualToThreshold",
+        "Dimensions": [
+          {
+            "Name": "FunctionName",
+            "Value": {
+              "Ref": "worker28EA3E30",
+            },
+          },
+          {
+            "Name": "Resource",
+            "Value": {
+              "Fn::Join": [
+                "",
+                [
+                  {
+                    "Ref": "worker28EA3E30",
+                  },
+                  ":live",
+                ],
+              ],
+            },
+          },
+        ],
+        "EvaluationPeriods": 1,
+        "MetricName": "Errors",
+        "Namespace": "AWS/Lambda",
+        "Period": 60,
+        "Statistic": "Sum",
+        "Threshold": 1,
+      },
+      "Type": "AWS::CloudWatch::Alarm",
+    },
+    "codedeployapplicationF49B9864": {
+      "Properties": {
+        "ComputePlatform": "Lambda",
+      },
+      "Type": "AWS::CodeDeploy::Application",
+    },
+    "codedeploygroup441B094B": {
+      "Properties": {
+        "AlarmConfiguration": {
+          "Alarms": [
+            {
+              "Name": {
+                "Ref": "codedeployalarm9F48D05F",
+              },
+            },
+          ],
+          "Enabled": true,
+        },
+        "ApplicationName": {
+          "Ref": "codedeployapplicationF49B9864",
+        },
+        "AutoRollbackConfiguration": {
+          "Enabled": true,
+          "Events": [
+            "DEPLOYMENT_FAILURE",
+            "DEPLOYMENT_STOP_ON_ALARM",
+          ],
+        },
+        "DeploymentConfigName": "CodeDeployDefault.LambdaAllAtOnce",
+        "DeploymentStyle": {
+          "DeploymentOption": "WITH_TRAFFIC_CONTROL",
+          "DeploymentType": "BLUE_GREEN",
+        },
+        "ServiceRoleArn": {
+          "Fn::GetAtt": [
+            "codedeploygroupServiceRole1BD49E37",
+            "Arn",
+          ],
+        },
+      },
+      "Type": "AWS::CodeDeploy::DeploymentGroup",
+    },
+    "codedeploygroupServiceRole1BD49E37": {
+      "Properties": {
+        "AssumeRolePolicyDocument": {
+          "Statement": [
+            {
+              "Action": "sts:AssumeRole",
+              "Effect": "Allow",
+              "Principal": {
+                "Service": {
+                  "Fn::FindInMap": [
+                    "ServiceprincipalMap",
+                    {
+                      "Ref": "AWS::Region",
+                    },
+                    "codedeploy",
+                  ],
+                },
+              },
+            },
+          ],
+          "Version": "2012-10-17",
+        },
+        "ManagedPolicyArns": [
+          {
+            "Fn::Join": [
+              "",
+              [
+                "arn:",
+                {
+                  "Ref": "AWS::Partition",
+                },
+                ":iam::aws:policy/service-role/AWSCodeDeployRoleForLambdaLimited",
+              ],
+            ],
+          },
+        ],
+      },
+      "Type": "AWS::IAM::Role",
+    },
+    "codedeploygroupServiceRoleDefaultPolicy2027BC9A": {
+      "Properties": {
+        "PolicyDocument": {
+          "Statement": [
+            {
+              "Action": "lambda:InvokeFunction",
+              "Effect": "Allow",
+              "Resource": [
+                {
+                  "Fn::GetAtt": [
+                    "workerprehook415B13CE",
+                    "Arn",
+                  ],
+                },
+                {
+                  "Fn::Join": [
+                    "",
+                    [
+                      {
+                        "Fn::GetAtt": [
+                          "workerprehook415B13CE",
+                          "Arn",
+                        ],
+                      },
+                      ":*",
+                    ],
+                  ],
+                },
+              ],
+            },
+            {
+              "Action": "lambda:InvokeFunction",
+              "Effect": "Allow",
+              "Resource": [
+                {
+                  "Fn::GetAtt": [
+                    "workerposthook150842D6",
+                    "Arn",
+                  ],
+                },
+                {
+                  "Fn::Join": [
+                    "",
+                    [
+                      {
+                        "Fn::GetAtt": [
+                          "workerposthook150842D6",
+                          "Arn",
+                        ],
+                      },
+                      ":*",
+                    ],
+                  ],
+                },
+              ],
+            },
+          ],
+          "Version": "2012-10-17",
+        },
+        "PolicyName": "codedeploygroupServiceRoleDefaultPolicy2027BC9A",
+        "Roles": [
+          {
+            "Ref": "codedeploygroupServiceRole1BD49E37",
+          },
+        ],
+      },
+      "Type": "AWS::IAM::Policy",
+    },
+    "kmskey49FBC3B3": {
+      "DeletionPolicy": "Retain",
+      "Properties": {
+        "Description": "serviceName",
+        "EnableKeyRotation": true,
+        "KeyPolicy": {
+          "Statement": [
+            {
+              "Action": "kms:*",
+              "Effect": "Allow",
+              "Principal": {
+                "AWS": {
+                  "Fn::Join": [
+                    "",
+                    [
+                      "arn:",
+                      {
+                        "Ref": "AWS::Partition",
+                      },
+                      ":iam::",
+                      {
+                        "Ref": "AWS::AccountId",
+                      },
+                      ":root",
+                    ],
+                  ],
+                },
+              },
+              "Resource": "*",
+            },
+            {
+              "Action": [
+                "kms:Create*",
+                "kms:Describe*",
+                "kms:Enable*",
+                "kms:List*",
+                "kms:Put*",
+                "kms:Update*",
+                "kms:Revoke*",
+                "kms:Disable*",
+                "kms:Get*",
+                "kms:Delete*",
+                "kms:TagResource",
+                "kms:UntagResource",
+                "kms:ScheduleKeyDeletion",
+                "kms:CancelKeyDeletion",
+              ],
+              "Effect": "Allow",
+              "Principal": {
+                "AWS": {
+                  "Fn::Join": [
+                    "",
+                    [
+                      "arn:",
+                      {
+                        "Ref": "AWS::Partition",
+                      },
+                      ":iam::",
+                      {
+                        "Ref": "AWS::AccountId",
+                      },
+                      ":root",
+                    ],
+                  ],
+                },
+              },
+              "Resource": "*",
+            },
+            {
+              "Action": [
+                "kms:Encrypt",
+                "kms:ReEncrypt*",
+                "kms:GenerateDataKey*",
+              ],
+              "Effect": "Allow",
+              "Principal": {
+                "AWS": {
+                  "Fn::Join": [
+                    "",
+                    [
+                      "arn:",
+                      {
+                        "Ref": "AWS::Partition",
+                      },
+                      ":iam::",
+                      {
+                        "Ref": "AWS::AccountId",
+                      },
+                      ":root",
+                    ],
+                  ],
+                },
+              },
+              "Resource": "*",
+            },
+            {
+              "Action": [
+                "kms:Decrypt",
+                "kms:GenerateDataKey",
+              ],
+              "Effect": "Allow",
+              "Principal": {
+                "Service": "sns.amazonaws.com",
+              },
+              "Resource": "*",
+            },
+          ],
+          "Version": "2012-10-17",
+        },
+      },
+      "Type": "AWS::KMS::Key",
+      "UpdateReplacePolicy": "Retain",
+    },
+    "kmskeyAlias39245779": {
+      "Properties": {
+        "AliasName": "alias/seek/self/serviceName",
+        "TargetKeyId": {
+          "Fn::GetAtt": [
+            "kmskey49FBC3B3",
+            "Arn",
+          ],
+        },
+      },
+      "Type": "AWS::KMS::Alias",
+    },
+    "sourcetopic7C3DC892": {
+      "Type": "AWS::SNS::Topic",
+    },
+    "worker28EA3E30": {
+      "DependsOn": [
+        "workerServiceRoleDefaultPolicyBA498553",
+        "workerServiceRole2130CC7F",
+      ],
+      "Properties": {
+        "Architectures": [
+          "arm64",
+        ],
+        "Code": {
+          "S3Bucket": {
+            "Fn::Sub": "cdk-hnb659fds-assets-\${AWS::AccountId}-\${AWS::Region}",
+          },
+          "S3Key": "xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx.zip",
+        },
+        "Description": "Updated at 1212-12-12T12:12:12.121Z",
+        "Environment": {
+          "Variables": {
+            "NODE_ENV": "production",
+            "NODE_OPTIONS": "--enable-source-maps",
+            "SOMETHING": "prod",
+          },
+        },
+        "FunctionName": "serviceName",
+        "Handler": "index.handler",
+        "KmsKeyArn": {
+          "Fn::GetAtt": [
+            "kmskey49FBC3B3",
+            "Arn",
+          ],
+        },
+        "ReservedConcurrentExecutions": 20,
+        "Role": {
+          "Fn::GetAtt": [
+            "workerServiceRole2130CC7F",
+            "Arn",
+          ],
+        },
+        "Runtime": "nodejs20.x",
+        "Timeout": 30,
+      },
+      "Type": "AWS::Lambda::Function",
+    },
+    "workerAliaslive62FE5FAF": {
+      "Properties": {
+        "Description": "The Lambda version currently receiving traffic",
+        "FunctionName": {
+          "Ref": "worker28EA3E30",
+        },
+        "FunctionVersion": {
+          "Fn::GetAtt": [
+            "workerCurrentVersionFA5B4BF40f2ad063ab6223cdd6c6489f9188cf94",
+            "Version",
+          ],
+        },
+        "Name": "live",
+      },
+      "Type": "AWS::Lambda::Alias",
+      "UpdatePolicy": {
+        "CodeDeployLambdaAliasUpdate": {
+          "AfterAllowTrafficHook": {
+            "Ref": "workerposthook150842D6",
+          },
+          "ApplicationName": {
+            "Ref": "codedeployapplicationF49B9864",
+          },
+          "BeforeAllowTrafficHook": {
+            "Ref": "workerprehook415B13CE",
+          },
+          "DeploymentGroupName": {
+            "Ref": "codedeploygroup441B094B",
+          },
+        },
+      },
+    },
+    "workerAliasliveSqsEventSourceappStackworkerqueue8281B9F42DEDB47B": {
+      "Properties": {
+        "EventSourceArn": {
+          "Fn::GetAtt": [
+            "workerqueueA05CE5C6",
+            "Arn",
+          ],
+        },
+        "FunctionName": {
+          "Fn::Join": [
+            "",
+            [
+              {
+                "Fn::Select": [
+                  6,
+                  {
+                    "Fn::Split": [
+                      ":",
+                      {
+                        "Ref": "workerAliaslive62FE5FAF",
+                      },
+                    ],
+                  },
+                ],
+              },
+              ":live",
+            ],
+          ],
+        },
+        "ScalingConfig": {
+          "MaximumConcurrency": 20,
+        },
+      },
+      "Type": "AWS::Lambda::EventSourceMapping",
+    },
+    "workerCurrentVersionFA5B4BF40f2ad063ab6223cdd6c6489f9188cf94": {
+      "Properties": {
+        "FunctionName": {
+          "Ref": "worker28EA3E30",
+        },
+      },
+      "Type": "AWS::Lambda::Version",
+    },
+    "workerServiceRole2130CC7F": {
+      "Properties": {
+        "AssumeRolePolicyDocument": {
+          "Statement": [
+            {
+              "Action": "sts:AssumeRole",
+              "Effect": "Allow",
+              "Principal": {
+                "Service": "lambda.amazonaws.com",
+              },
+            },
+          ],
+          "Version": "2012-10-17",
+        },
+        "ManagedPolicyArns": [
+          {
+            "Fn::Join": [
+              "",
+              [
+                "arn:",
+                {
+                  "Ref": "AWS::Partition",
+                },
+                ":iam::aws:policy/service-role/AWSLambdaBasicExecutionRole",
+              ],
+            ],
+          },
+        ],
+      },
+      "Type": "AWS::IAM::Role",
+    },
+    "workerServiceRoleDefaultPolicyBA498553": {
+      "Properties": {
+        "PolicyDocument": {
+          "Statement": [
+            {
+              "Action": [
+                "sqs:ReceiveMessage",
+                "sqs:ChangeMessageVisibility",
+                "sqs:GetQueueUrl",
+                "sqs:DeleteMessage",
+                "sqs:GetQueueAttributes",
+              ],
+              "Effect": "Allow",
+              "Resource": {
+                "Fn::GetAtt": [
+                  "workerqueueA05CE5C6",
+                  "Arn",
+                ],
+              },
+            },
+            {
+              "Action": "kms:Decrypt",
+              "Effect": "Allow",
+              "Resource": {
+                "Fn::GetAtt": [
+                  "kmskey49FBC3B3",
+                  "Arn",
+                ],
+              },
+            },
+          ],
+          "Version": "2012-10-17",
+        },
+        "PolicyName": "workerServiceRoleDefaultPolicyBA498553",
+        "Roles": [
+          {
+            "Ref": "workerServiceRole2130CC7F",
           },
         ],
       },
-      "Type": "AWS::SQS::QueuePolicy",
+      "Type": "AWS::IAM::Policy",
     },
-    "workerqueueappStacktopic0CA45134AFB31FF4": {
+    "workerposthook150842D6": {
       "DependsOn": [
-        "workerqueuePolicy97054CB4",
+        "workerposthookServiceRoleDefaultPolicy6A92F69C",
+        "workerposthookServiceRole25452300",
       ],
       "Properties": {
-        "Endpoint": {
+        "Architectures": [
+          "arm64",
+        ],
+        "Code": {
+          "S3Bucket": {
+            "Fn::Sub": "cdk-hnb659fds-assets-\${AWS::AccountId}-\${AWS::Region}",
+          },
+          "S3Key": "xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx.zip",
+        },
+        "Environment": {
+          "Variables": {
+            "FUNCTION_NAME_TO_PRUNE": {
+              "Ref": "worker28EA3E30",
+            },
+            "NODE_ENV": "production",
+            "NODE_OPTIONS": "--enable-source-maps",
+            "SOMETHING": "prod",
+          },
+        },
+        "FunctionName": "serviceName-post-hook",
+        "Handler": "index.handler",
+        "KmsKeyArn": {
           "Fn::GetAtt": [
-            "workerqueueA05CE5C6",
+            "kmskey49FBC3B3",
             "Arn",
           ],
         },
-        "Protocol": "sqs",
-        "TopicArn": {
-          "Ref": "topic69831491",
-        },
-      },
-      "Type": "AWS::SNS::Subscription",
-    },
-    "workerqueuedlq42262778": {
-      "DeletionPolicy": "Delete",
-      "Properties": {
-        "KmsMasterKeyId": {
+        "Role": {
           "Fn::GetAtt": [
-            "kmskey49FBC3B3",
+            "workerposthookServiceRole25452300",
             "Arn",
           ],
         },
-        "QueueName": "serviceName-dlq",
+        "Runtime": "nodejs20.x",
+        "Timeout": 30,
       },
-      "Type": "AWS::SQS::Queue",
-      "UpdateReplacePolicy": "Delete",
+      "Type": "AWS::Lambda::Function",
     },
-  },
-}
-`;
-
-exports[`returns expected CloudFormation stack for prod 1`] = `
-{
-  "Resources": {
-    "kmskey49FBC3B3": {
-      "DeletionPolicy": "Retain",
+    "workerposthookServiceRole25452300": {
       "Properties": {
-        "Description": "serviceName",
-        "EnableKeyRotation": true,
-        "KeyPolicy": {
+        "AssumeRolePolicyDocument": {
           "Statement": [
             {
-              "Action": "kms:*",
+              "Action": "sts:AssumeRole",
               "Effect": "Allow",
               "Principal": {
-                "AWS": {
-                  "Fn::Join": [
-                    "",
-                    [
-                      "arn:",
-                      {
-                        "Ref": "AWS::Partition",
-                      },
-                      ":iam::",
-                      {
-                        "Ref": "AWS::AccountId",
-                      },
-                      ":root",
-                    ],
-                  ],
-                },
+                "Service": "lambda.amazonaws.com",
               },
-              "Resource": "*",
             },
+          ],
+          "Version": "2012-10-17",
+        },
+        "ManagedPolicyArns": [
+          {
+            "Fn::Join": [
+              "",
+              [
+                "arn:",
+                {
+                  "Ref": "AWS::Partition",
+                },
+                ":iam::aws:policy/service-role/AWSLambdaBasicExecutionRole",
+              ],
+            ],
+          },
+        ],
+      },
+      "Type": "AWS::IAM::Role",
+    },
+    "workerposthookServiceRoleDefaultPolicy6A92F69C": {
+      "Properties": {
+        "PolicyDocument": {
+          "Statement": [
             {
               "Action": [
-                "kms:Create*",
-                "kms:Describe*",
-                "kms:Enable*",
-                "kms:List*",
-                "kms:Put*",
-                "kms:Update*",
-                "kms:Revoke*",
-                "kms:Disable*",
-                "kms:Get*",
-                "kms:Delete*",
-                "kms:TagResource",
-                "kms:UntagResource",
-                "kms:ScheduleKeyDeletion",
-                "kms:CancelKeyDeletion",
+                "lambda:ListAliases",
+                "lambda:ListVersionsByFunction",
+                "lambda:DeleteFunction",
               ],
               "Effect": "Allow",
-              "Principal": {
-                "AWS": {
-                  "Fn::Join": [
-                    "",
-                    [
-                      "arn:",
-                      {
-                        "Ref": "AWS::Partition",
-                      },
-                      ":iam::",
-                      {
-                        "Ref": "AWS::AccountId",
-                      },
-                      ":root",
-                    ],
+              "Resource": [
+                {
+                  "Fn::GetAtt": [
+                    "worker28EA3E30",
+                    "Arn",
                   ],
                 },
-              },
-              "Resource": "*",
-            },
-            {
-              "Action": [
-                "kms:Encrypt",
-                "kms:ReEncrypt*",
-                "kms:GenerateDataKey*",
-              ],
-              "Effect": "Allow",
-              "Principal": {
-                "AWS": {
+                {
                   "Fn::Join": [
                     "",
                     [
-                      "arn:",
                       {
-                        "Ref": "AWS::Partition",
-                      },
-                      ":iam::",
-                      {
-                        "Ref": "AWS::AccountId",
+                        "Fn::GetAtt": [
+                          "worker28EA3E30",
+                          "Arn",
+                        ],
                       },
-                      ":root",
+                      ":*",
                     ],
                   ],
                 },
-              },
-              "Resource": "*",
+              ],
             },
             {
-              "Action": [
-                "kms:Decrypt",
-                "kms:GenerateDataKey",
-              ],
+              "Action": "codedeploy:PutLifecycleEventHookExecutionStatus",
               "Effect": "Allow",
-              "Principal": {
-                "Service": "sns.amazonaws.com",
+              "Resource": {
+                "Fn::Join": [
+                  "",
+                  [
+                    "arn:",
+                    {
+                      "Ref": "AWS::Partition",
+                    },
+                    ":codedeploy:",
+                    {
+                      "Ref": "AWS::Region",
+                    },
+                    ":",
+                    {
+                      "Ref": "AWS::AccountId",
+                    },
+                    ":deploymentgroup:",
+                    {
+                      "Ref": "codedeployapplicationF49B9864",
+                    },
+                    "/",
+                    {
+                      "Ref": "codedeploygroup441B094B",
+                    },
+                  ],
+                ],
               },
-              "Resource": "*",
             },
           ],
           "Version": "2012-10-17",
         },
+        "PolicyName": "workerposthookServiceRoleDefaultPolicy6A92F69C",
+        "Roles": [
+          {
+            "Ref": "workerposthookServiceRole25452300",
+          },
+        ],
       },
-      "Type": "AWS::KMS::Key",
-      "UpdateReplacePolicy": "Retain",
-    },
-    "kmskeyAlias39245779": {
-      "Properties": {
-        "AliasName": "alias/seek/self/serviceName",
-        "TargetKeyId": {
-          "Fn::GetAtt": [
-            "kmskey49FBC3B3",
-            "Arn",
-          ],
-        },
-      },
-      "Type": "AWS::KMS::Alias",
-    },
-    "topic69831491": {
-      "Properties": {
-        "KmsMasterKeyId": {
-          "Fn::GetAtt": [
-            "kmskey49FBC3B3",
-            "Arn",
-          ],
-        },
-        "TopicName": "serviceName",
-      },
-      "Type": "AWS::SNS::Topic",
+      "Type": "AWS::IAM::Policy",
     },
-    "worker28EA3E30": {
+    "workerprehook415B13CE": {
       "DependsOn": [
-        "workerServiceRoleDefaultPolicyBA498553",
-        "workerServiceRole2130CC7F",
+        "workerprehookServiceRoleDefaultPolicy991A21B9",
+        "workerprehookServiceRole8F8D9379",
       ],
       "Properties": {
         "Architectures": [
@@ -518,13 +1832,16 @@ exports[`returns expected CloudFormation stack for prod 1`] = `
         },
         "Environment": {
           "Variables": {
+            "FUNCTION_NAME_TO_INVOKE": {
+              "Ref": "worker28EA3E30",
+            },
             "NODE_ENV": "production",
             "NODE_OPTIONS": "--enable-source-maps",
             "SOMETHING": "prod",
           },
         },
-        "FunctionName": "serviceName",
-        "Handler": "app.handler",
+        "FunctionName": "serviceName-pre-hook",
+        "Handler": "index.handler",
         "KmsKeyArn": {
           "Fn::GetAtt": [
             "kmskey49FBC3B3",
@@ -533,15 +1850,16 @@ exports[`returns expected CloudFormation stack for prod 1`] = `
         },
         "Role": {
           "Fn::GetAtt": [
-            "workerServiceRole2130CC7F",
+            "workerprehookServiceRole8F8D9379",
             "Arn",
           ],
         },
         "Runtime": "nodejs20.x",
+        "Timeout": 120,
       },
       "Type": "AWS::Lambda::Function",
     },
-    "workerServiceRole2130CC7F": {
+    "workerprehookServiceRole8F8D9379": {
       "Properties": {
         "AssumeRolePolicyDocument": {
           "Statement": [
@@ -572,62 +1890,79 @@ exports[`returns expected CloudFormation stack for prod 1`] = `
       },
       "Type": "AWS::IAM::Role",
     },
-    "workerServiceRoleDefaultPolicyBA498553": {
+    "workerprehookServiceRoleDefaultPolicy991A21B9": {
       "Properties": {
         "PolicyDocument": {
           "Statement": [
             {
-              "Action": [
-                "sqs:ReceiveMessage",
-                "sqs:ChangeMessageVisibility",
-                "sqs:GetQueueUrl",
-                "sqs:DeleteMessage",
-                "sqs:GetQueueAttributes",
-              ],
+              "Action": "lambda:InvokeFunction",
               "Effect": "Allow",
-              "Resource": {
-                "Fn::GetAtt": [
-                  "workerqueueA05CE5C6",
-                  "Arn",
-                ],
-              },
+              "Resource": [
+                {
+                  "Fn::GetAtt": [
+                    "worker28EA3E30",
+                    "Arn",
+                  ],
+                },
+                {
+                  "Fn::Join": [
+                    "",
+                    [
+                      {
+                        "Fn::GetAtt": [
+                          "worker28EA3E30",
+                          "Arn",
+                        ],
+                      },
+                      ":*",
+                    ],
+                  ],
+                },
+              ],
             },
             {
-              "Action": "kms:Decrypt",
+              "Action": "codedeploy:PutLifecycleEventHookExecutionStatus",
               "Effect": "Allow",
               "Resource": {
-                "Fn::GetAtt": [
-                  "kmskey49FBC3B3",
-                  "Arn",
+                "Fn::Join": [
+                  "",
+                  [
+                    "arn:",
+                    {
+                      "Ref": "AWS::Partition",
+                    },
+                    ":codedeploy:",
+                    {
+                      "Ref": "AWS::Region",
+                    },
+                    ":",
+                    {
+                      "Ref": "AWS::AccountId",
+                    },
+                    ":deploymentgroup:",
+                    {
+                      "Ref": "codedeployapplicationF49B9864",
+                    },
+                    "/",
+                    {
+                      "Ref": "codedeploygroup441B094B",
+                    },
+                  ],
                 ],
               },
             },
           ],
           "Version": "2012-10-17",
         },
-        "PolicyName": "workerServiceRoleDefaultPolicyBA498553",
+        "PolicyName": "workerprehookServiceRoleDefaultPolicy991A21B9",
         "Roles": [
           {
-            "Ref": "workerServiceRole2130CC7F",
+            "Ref": "workerprehookServiceRole8F8D9379",
           },
         ],
       },
       "Type": "AWS::IAM::Policy",
     },
-    "workerSqsEventSourceappStackworkerqueue8281B9F47B9F582B": {
-      "Properties": {
-        "EventSourceArn": {
-          "Fn::GetAtt": [
-            "workerqueueA05CE5C6",
-            "Arn",
-          ],
-        },
-        "FunctionName": {
-          "Ref": "worker28EA3E30",
-        },
-      },
-      "Type": "AWS::Lambda::EventSourceMapping",
-    },
     "workerqueueA05CE5C6": {
       "DeletionPolicy": "Delete",
       "Properties": {
@@ -660,7 +1995,7 @@ exports[`returns expected CloudFormation stack for prod 1`] = `
               "Condition": {
                 "ArnEquals": {
                   "aws:SourceArn": {
-                    "Ref": "topic69831491",
+                    "Ref": "sourcetopic7C3DC892",
                   },
                 },
               },
@@ -686,7 +2021,7 @@ exports[`returns expected CloudFormation stack for prod 1`] = `
       },
       "Type": "AWS::SQS::QueuePolicy",
     },
-    "workerqueueappStacktopic0CA45134AFB31FF4": {
+    "workerqueueappStacksourcetopic613C6BDBD2F224F5": {
       "DependsOn": [
         "workerqueuePolicy97054CB4",
       ],
@@ -699,7 +2034,7 @@ exports[`returns expected CloudFormation stack for prod 1`] = `
         },
         "Protocol": "sqs",
         "TopicArn": {
-          "Ref": "topic69831491",
+          "Ref": "sourcetopic7C3DC892",
         },
       },
       "Type": "AWS::SNS::Subscription",
@@ -719,5 +2054,32 @@ exports[`returns expected CloudFormation stack for prod 1`] = `
       "UpdateReplacePolicy": "Delete",
     },
   },
+  "Rules": {
+    "CheckBootstrapVersion": {
+      "Assertions": [
+        {
+          "Assert": {
+            "Fn::Not": [
+              {
+                "Fn::Contains": [
+                  [
+                    "1",
+                    "2",
+                    "3",
+                    "4",
+                    "5",
+                  ],
+                  {
+                    "Ref": "BootstrapVersion",
+                  },
+                ],
+              },
+            ],
+          },
+          "AssertDescription": "CDK bootstrap stack version 6 required. Please run 'cdk bootstrap' with a recent version of the CDK CLI.",
+        },
+      ],
+    },
+  },
 }
 `;