jjrawlins-cdk-ami-builder 0.0.11__py3-none-any.whl → 0.0.133__py3-none-any.whl

jjrawlins_cdk_ami_builder/__init__.py

@@ -89,7 +89,6 @@ const imagePipeline = new ImagePipeline(this, 'ImagePipeline', {
     parentImage: image.getImage(this).imageId,
     vpc: vpc,
     imageRecipeVersion: version,
-    autoBuild: true, // Otherwise you can't use the below output
     components: [
         {
             name: 'Install-Monitoring',
@@ -215,65 +214,54 @@ class CheckStateMachineStatusFunction(
 
     def __init__(
         self,
-        scope: _constructs_77d1e7e8.Construct,
+        scope: "_constructs_77d1e7e8.Construct",
         id: builtins.str,
         *,
-        adot_instrumentation: typing.Optional[typing.Union[_aws_cdk_aws_lambda_ceddda9d.AdotInstrumentationConfig, typing.Dict[builtins.str, typing.Any]]] = None,
+        adot_instrumentation: typing.Optional[typing.Union["_aws_cdk_aws_lambda_ceddda9d.AdotInstrumentationConfig", typing.Dict[builtins.str, typing.Any]]] = None,
         allow_all_outbound: typing.Optional[builtins.bool] = None,
         allow_public_subnet: typing.Optional[builtins.bool] = None,
-        application_log_level: typing.Optional[builtins.str] = None,
-        application_log_level_v2: typing.Optional[_aws_cdk_aws_lambda_ceddda9d.ApplicationLogLevel] = None,
-        architecture: typing.Optional[_aws_cdk_aws_lambda_ceddda9d.Architecture] = None,
-        code_signing_config: typing.Optional[_aws_cdk_aws_lambda_ceddda9d.ICodeSigningConfig] = None,
-        current_version_options: typing.Optional[typing.Union[_aws_cdk_aws_lambda_ceddda9d.VersionOptions, typing.Dict[builtins.str, typing.Any]]] = None,
-        dead_letter_queue: typing.Optional[_aws_cdk_aws_sqs_ceddda9d.IQueue] = None,
+        architecture: typing.Optional["_aws_cdk_aws_lambda_ceddda9d.Architecture"] = None,
+        code_signing_config: typing.Optional["_aws_cdk_aws_lambda_ceddda9d.ICodeSigningConfig"] = None,
+        current_version_options: typing.Optional[typing.Union["_aws_cdk_aws_lambda_ceddda9d.VersionOptions", typing.Dict[builtins.str, typing.Any]]] = None,
+        dead_letter_queue: typing.Optional["_aws_cdk_aws_sqs_ceddda9d.IQueue"] = None,
         dead_letter_queue_enabled: typing.Optional[builtins.bool] = None,
-        dead_letter_topic: typing.Optional[_aws_cdk_aws_sns_ceddda9d.ITopic] = None,
+        dead_letter_topic: typing.Optional["_aws_cdk_aws_sns_ceddda9d.ITopic"] = None,
         description: typing.Optional[builtins.str] = None,
         environment: typing.Optional[typing.Mapping[builtins.str, builtins.str]] = None,
-        environment_encryption: typing.Optional[_aws_cdk_aws_kms_ceddda9d.IKey] = None,
-        ephemeral_storage_size: typing.Optional[_aws_cdk_ceddda9d.Size] = None,
-        events: typing.Optional[typing.Sequence[_aws_cdk_aws_lambda_ceddda9d.IEventSource]] = None,
-        filesystem: typing.Optional[_aws_cdk_aws_lambda_ceddda9d.FileSystem] = None,
+        environment_encryption: typing.Optional["_aws_cdk_aws_kms_ceddda9d.IKey"] = None,
+        ephemeral_storage_size: typing.Optional["_aws_cdk_ceddda9d.Size"] = None,
+        events: typing.Optional[typing.Sequence["_aws_cdk_aws_lambda_ceddda9d.IEventSource"]] = None,
+        filesystem: typing.Optional["_aws_cdk_aws_lambda_ceddda9d.FileSystem"] = None,
         function_name: typing.Optional[builtins.str] = None,
-        initial_policy: typing.Optional[typing.Sequence[_aws_cdk_aws_iam_ceddda9d.PolicyStatement]] = None,
-        insights_version: typing.Optional[_aws_cdk_aws_lambda_ceddda9d.LambdaInsightsVersion] = None,
-        ipv6_allowed_for_dual_stack: typing.Optional[builtins.bool] = None,
-        layers: typing.Optional[typing.Sequence[_aws_cdk_aws_lambda_ceddda9d.ILayerVersion]] = None,
-        log_format: typing.Optional[builtins.str] = None,
-        logging_format: typing.Optional[_aws_cdk_aws_lambda_ceddda9d.LoggingFormat] = None,
-        log_group: typing.Optional[_aws_cdk_aws_logs_ceddda9d.ILogGroup] = None,
-        log_retention: typing.Optional[_aws_cdk_aws_logs_ceddda9d.RetentionDays] = None,
-        log_retention_retry_options: typing.Optional[typing.Union[_aws_cdk_aws_lambda_ceddda9d.LogRetentionRetryOptions, typing.Dict[builtins.str, typing.Any]]] = None,
-        log_retention_role: typing.Optional[_aws_cdk_aws_iam_ceddda9d.IRole] = None,
+        initial_policy: typing.Optional[typing.Sequence["_aws_cdk_aws_iam_ceddda9d.PolicyStatement"]] = None,
+        insights_version: typing.Optional["_aws_cdk_aws_lambda_ceddda9d.LambdaInsightsVersion"] = None,
+        layers: typing.Optional[typing.Sequence["_aws_cdk_aws_lambda_ceddda9d.ILayerVersion"]] = None,
+        log_retention: typing.Optional["_aws_cdk_aws_logs_ceddda9d.RetentionDays"] = None,
+        log_retention_retry_options: typing.Optional[typing.Union["_aws_cdk_aws_lambda_ceddda9d.LogRetentionRetryOptions", typing.Dict[builtins.str, typing.Any]]] = None,
+        log_retention_role: typing.Optional["_aws_cdk_aws_iam_ceddda9d.IRole"] = None,
         memory_size: typing.Optional[jsii.Number] = None,
-        params_and_secrets: typing.Optional[_aws_cdk_aws_lambda_ceddda9d.ParamsAndSecretsLayerVersion] = None,
+        params_and_secrets: typing.Optional["_aws_cdk_aws_lambda_ceddda9d.ParamsAndSecretsLayerVersion"] = None,
         profiling: typing.Optional[builtins.bool] = None,
-        profiling_group: typing.Optional[_aws_cdk_aws_codeguruprofiler_ceddda9d.IProfilingGroup] = None,
+        profiling_group: typing.Optional["_aws_cdk_aws_codeguruprofiler_ceddda9d.IProfilingGroup"] = None,
         reserved_concurrent_executions: typing.Optional[jsii.Number] = None,
-        role: typing.Optional[_aws_cdk_aws_iam_ceddda9d.IRole] = None,
-        runtime_management_mode: typing.Optional[_aws_cdk_aws_lambda_ceddda9d.RuntimeManagementMode] = None,
-        security_groups: typing.Optional[typing.Sequence[_aws_cdk_aws_ec2_ceddda9d.ISecurityGroup]] = None,
-        snap_start: typing.Optional[_aws_cdk_aws_lambda_ceddda9d.SnapStartConf] = None,
-        system_log_level: typing.Optional[builtins.str] = None,
-        system_log_level_v2: typing.Optional[_aws_cdk_aws_lambda_ceddda9d.SystemLogLevel] = None,
-        timeout: typing.Optional[_aws_cdk_ceddda9d.Duration] = None,
-        tracing: typing.Optional[_aws_cdk_aws_lambda_ceddda9d.Tracing] = None,
-        vpc: typing.Optional[_aws_cdk_aws_ec2_ceddda9d.IVpc] = None,
-        vpc_subnets: typing.Optional[typing.Union[_aws_cdk_aws_ec2_ceddda9d.SubnetSelection, typing.Dict[builtins.str, typing.Any]]] = None,
-        max_event_age: typing.Optional[_aws_cdk_ceddda9d.Duration] = None,
-        on_failure: typing.Optional[_aws_cdk_aws_lambda_ceddda9d.IDestination] = None,
-        on_success: typing.Optional[_aws_cdk_aws_lambda_ceddda9d.IDestination] = None,
+        role: typing.Optional["_aws_cdk_aws_iam_ceddda9d.IRole"] = None,
+        runtime_management_mode: typing.Optional["_aws_cdk_aws_lambda_ceddda9d.RuntimeManagementMode"] = None,
+        security_groups: typing.Optional[typing.Sequence["_aws_cdk_aws_ec2_ceddda9d.ISecurityGroup"]] = None,
+        timeout: typing.Optional["_aws_cdk_ceddda9d.Duration"] = None,
+        tracing: typing.Optional["_aws_cdk_aws_lambda_ceddda9d.Tracing"] = None,
+        vpc: typing.Optional["_aws_cdk_aws_ec2_ceddda9d.IVpc"] = None,
+        vpc_subnets: typing.Optional[typing.Union["_aws_cdk_aws_ec2_ceddda9d.SubnetSelection", typing.Dict[builtins.str, typing.Any]]] = None,
+        max_event_age: typing.Optional["_aws_cdk_ceddda9d.Duration"] = None,
+        on_failure: typing.Optional["_aws_cdk_aws_lambda_ceddda9d.IDestination"] = None,
+        on_success: typing.Optional["_aws_cdk_aws_lambda_ceddda9d.IDestination"] = None,
         retry_attempts: typing.Optional[jsii.Number] = None,
     ) -> None:
         '''
         :param scope: -
         :param id: -
         :param adot_instrumentation: Specify the configuration of AWS Distro for OpenTelemetry (ADOT) instrumentation. Default: - No ADOT instrumentation
-        :param allow_all_outbound: Whether to allow the Lambda to send all network traffic. If set to false, you must individually add traffic rules to allow the Lambda to connect to network targets. Do not specify this property if the ``securityGroups`` or ``securityGroup`` property is set. Instead, configure ``allowAllOutbound`` directly on the security group. Default: true
+        :param allow_all_outbound: Whether to allow the Lambda to send all network traffic. If set to false, you must individually add traffic rules to allow the Lambda to connect to network targets. Default: true
         :param allow_public_subnet: Lambda Functions in a public subnet can NOT access the internet. Use this property to acknowledge this limitation and still place the function in a public subnet. Default: false
-        :param application_log_level: (deprecated) Sets the application log level for the function. Default: "INFO"
-        :param application_log_level_v2: Sets the application log level for the function. Default: ApplicationLogLevel.INFO
         :param architecture: The system architectures compatible with this lambda function. Default: Architecture.X86_64
         :param code_signing_config: Code signing config associated with this function. Default: - Not Sign the Code
         :param current_version_options: Options for the ``lambda.Version`` resource automatically created by the ``fn.currentVersion`` method. Default: - default options as described in ``VersionOptions``
@@ -289,14 +277,10 @@ class CheckStateMachineStatusFunction(
         :param function_name: A name for the function. Default: - AWS CloudFormation generates a unique physical ID and uses that ID for the function's name. For more information, see Name Type.
         :param initial_policy: Initial policy statements to add to the created Lambda Role. You can call ``addToRolePolicy`` to the created lambda to add statements post creation. Default: - No policy statements are added to the created Lambda role.
         :param insights_version: Specify the version of CloudWatch Lambda insights to use for monitoring. Default: - No Lambda Insights
-        :param ipv6_allowed_for_dual_stack: Allows outbound IPv6 traffic on VPC functions that are connected to dual-stack subnets. Only used if 'vpc' is supplied. Default: false
         :param layers: A list of layers to add to the function's execution environment. You can configure your Lambda function to pull in additional code during initialization in the form of layers. Layers are packages of libraries or other dependencies that can be used by multiple functions. Default: - No layers.
-        :param log_format: (deprecated) Sets the logFormat for the function. Default: "Text"
-        :param logging_format: Sets the loggingFormat for the function. Default: LoggingFormat.TEXT
-        :param log_group: The log group the function sends logs to. By default, Lambda functions send logs to an automatically created default log group named /aws/lambda/<function name>. However you cannot change the properties of this auto-created log group using the AWS CDK, e.g. you cannot set a different log retention. Use the ``logGroup`` property to create a fully customizable LogGroup ahead of time, and instruct the Lambda function to send logs to it. Providing a user-controlled log group was rolled out to commercial regions on 2023-11-16. If you are deploying to another type of region, please check regional availability first. Default: ``/aws/lambda/${this.functionName}`` - default log group created by Lambda
-        :param log_retention: The number of days log events are kept in CloudWatch Logs. When updating this property, unsetting it doesn't remove the log retention policy. To remove the retention policy, set the value to ``INFINITE``. This is a legacy API and we strongly recommend you move away from it if you can. Instead create a fully customizable log group with ``logs.LogGroup`` and use the ``logGroup`` property to instruct the Lambda function to send logs to it. Migrating from ``logRetention`` to ``logGroup`` will cause the name of the log group to change. Users and code and referencing the name verbatim will have to adjust. In AWS CDK code, you can access the log group name directly from the LogGroup construct:: import * as logs from 'aws-cdk-lib/aws-logs'; declare const myLogGroup: logs.LogGroup; myLogGroup.logGroupName; Default: logs.RetentionDays.INFINITE
-        :param log_retention_retry_options: When log retention is specified, a custom resource attempts to create the CloudWatch log group. These options control the retry policy when interacting with CloudWatch APIs. This is a legacy API and we strongly recommend you migrate to ``logGroup`` if you can. ``logGroup`` allows you to create a fully customizable log group and instruct the Lambda function to send logs to it. Default: - Default AWS SDK retry options.
-        :param log_retention_role: The IAM role for the Lambda function associated with the custom resource that sets the retention policy. This is a legacy API and we strongly recommend you migrate to ``logGroup`` if you can. ``logGroup`` allows you to create a fully customizable log group and instruct the Lambda function to send logs to it. Default: - A new role is created.
+        :param log_retention: The number of days log events are kept in CloudWatch Logs. When updating this property, unsetting it doesn't remove the log retention policy. To remove the retention policy, set the value to ``INFINITE``. Default: logs.RetentionDays.INFINITE
+        :param log_retention_retry_options: When log retention is specified, a custom resource attempts to create the CloudWatch log group. These options control the retry policy when interacting with CloudWatch APIs. Default: - Default AWS SDK retry options.
+        :param log_retention_role: The IAM role for the Lambda function associated with the custom resource that sets the retention policy. Default: - A new role is created.
         :param memory_size: The amount of memory, in MB, that is allocated to your Lambda function. Lambda uses this value to proportionally allocate the amount of CPU power. For more information, see Resource Model in the AWS Lambda Developer Guide. Default: 128
         :param params_and_secrets: Specify the configuration of Parameters and Secrets Extension. Default: - No Parameters and Secrets Extension
         :param profiling: Enable profiling. Default: - No profiling.
@@ -305,9 +289,6 @@ class CheckStateMachineStatusFunction(
         :param role: Lambda execution role. This is the role that will be assumed by the function upon execution. It controls the permissions that the function will have. The Role must be assumable by the 'lambda.amazonaws.com' service principal. The default Role automatically has permissions granted for Lambda execution. If you provide a Role, you must add the relevant AWS managed policies yourself. The relevant managed policies are "service-role/AWSLambdaBasicExecutionRole" and "service-role/AWSLambdaVPCAccessExecutionRole". Default: - A unique role will be generated for this lambda function. Both supplied and generated roles can always be changed by calling ``addToRolePolicy``.
         :param runtime_management_mode: Sets the runtime management configuration for a function's version. Default: Auto
         :param security_groups: The list of security groups to associate with the Lambda's network interfaces. Only used if 'vpc' is supplied. Default: - If the function is placed within a VPC and a security group is not specified, either by this or securityGroup prop, a dedicated security group will be created for this function.
-        :param snap_start: Enable SnapStart for Lambda Function. SnapStart is currently supported only for Java 11, 17 runtime Default: - No snapstart
-        :param system_log_level: (deprecated) Sets the system log level for the function. Default: "INFO"
-        :param system_log_level_v2: Sets the system log level for the function. Default: SystemLogLevel.INFO
         :param timeout: The function execution time (in seconds) after which Lambda terminates the function. Because the execution time affects cost, set this value based on the function's expected execution time. Default: Duration.seconds(3)
         :param tracing: Enable AWS X-Ray Tracing for Lambda Function. Default: Tracing.Disabled
         :param vpc: VPC network to place Lambda network interfaces. Specify this if the Lambda function needs to access resources in a VPC. This is required when ``vpcSubnets`` is specified. Default: - Function is not placed within a VPC.
@@ -325,8 +306,6 @@ class CheckStateMachineStatusFunction(
             adot_instrumentation=adot_instrumentation,
             allow_all_outbound=allow_all_outbound,
             allow_public_subnet=allow_public_subnet,
-            application_log_level=application_log_level,
-            application_log_level_v2=application_log_level_v2,
             architecture=architecture,
             code_signing_config=code_signing_config,
             current_version_options=current_version_options,
@@ -342,11 +321,7 @@ class CheckStateMachineStatusFunction(
             function_name=function_name,
             initial_policy=initial_policy,
             insights_version=insights_version,
-            ipv6_allowed_for_dual_stack=ipv6_allowed_for_dual_stack,
             layers=layers,
-            log_format=log_format,
-            logging_format=logging_format,
-            log_group=log_group,
             log_retention=log_retention,
             log_retention_retry_options=log_retention_retry_options,
             log_retention_role=log_retention_role,
@@ -358,9 +333,6 @@ class CheckStateMachineStatusFunction(
             role=role,
             runtime_management_mode=runtime_management_mode,
             security_groups=security_groups,
-            snap_start=snap_start,
-            system_log_level=system_log_level,
-            system_log_level_v2=system_log_level_v2,
             timeout=timeout,
             tracing=tracing,
             vpc=vpc,
@@ -385,8 +357,6 @@ class CheckStateMachineStatusFunction(
         "adot_instrumentation": "adotInstrumentation",
         "allow_all_outbound": "allowAllOutbound",
         "allow_public_subnet": "allowPublicSubnet",
-        "application_log_level": "applicationLogLevel",
-        "application_log_level_v2": "applicationLogLevelV2",
         "architecture": "architecture",
         "code_signing_config": "codeSigningConfig",
         "current_version_options": "currentVersionOptions",
@@ -402,11 +372,7 @@ class CheckStateMachineStatusFunction(
         "function_name": "functionName",
         "initial_policy": "initialPolicy",
         "insights_version": "insightsVersion",
-        "ipv6_allowed_for_dual_stack": "ipv6AllowedForDualStack",
         "layers": "layers",
-        "log_format": "logFormat",
-        "logging_format": "loggingFormat",
-        "log_group": "logGroup",
         "log_retention": "logRetention",
         "log_retention_retry_options": "logRetentionRetryOptions",
         "log_retention_role": "logRetentionRole",
@@ -418,9 +384,6 @@ class CheckStateMachineStatusFunction(
         "role": "role",
         "runtime_management_mode": "runtimeManagementMode",
         "security_groups": "securityGroups",
-        "snap_start": "snapStart",
-        "system_log_level": "systemLogLevel",
-        "system_log_level_v2": "systemLogLevelV2",
         "timeout": "timeout",
         "tracing": "tracing",
         "vpc": "vpc",
@@ -433,53 +396,44 @@ class CheckStateMachineStatusFunctionProps(
     def __init__(
         self,
         *,
-        max_event_age: typing.Optional[_aws_cdk_ceddda9d.Duration] = None,
-        on_failure: typing.Optional[_aws_cdk_aws_lambda_ceddda9d.IDestination] = None,
-        on_success: typing.Optional[_aws_cdk_aws_lambda_ceddda9d.IDestination] = None,
+        max_event_age: typing.Optional["_aws_cdk_ceddda9d.Duration"] = None,
+        on_failure: typing.Optional["_aws_cdk_aws_lambda_ceddda9d.IDestination"] = None,
+        on_success: typing.Optional["_aws_cdk_aws_lambda_ceddda9d.IDestination"] = None,
         retry_attempts: typing.Optional[jsii.Number] = None,
-        adot_instrumentation: typing.Optional[typing.Union[_aws_cdk_aws_lambda_ceddda9d.AdotInstrumentationConfig, typing.Dict[builtins.str, typing.Any]]] = None,
+        adot_instrumentation: typing.Optional[typing.Union["_aws_cdk_aws_lambda_ceddda9d.AdotInstrumentationConfig", typing.Dict[builtins.str, typing.Any]]] = None,
         allow_all_outbound: typing.Optional[builtins.bool] = None,
         allow_public_subnet: typing.Optional[builtins.bool] = None,
-        application_log_level: typing.Optional[builtins.str] = None,
-        application_log_level_v2: typing.Optional[_aws_cdk_aws_lambda_ceddda9d.ApplicationLogLevel] = None,
-        architecture: typing.Optional[_aws_cdk_aws_lambda_ceddda9d.Architecture] = None,
-        code_signing_config: typing.Optional[_aws_cdk_aws_lambda_ceddda9d.ICodeSigningConfig] = None,
-        current_version_options: typing.Optional[typing.Union[_aws_cdk_aws_lambda_ceddda9d.VersionOptions, typing.Dict[builtins.str, typing.Any]]] = None,
-        dead_letter_queue: typing.Optional[_aws_cdk_aws_sqs_ceddda9d.IQueue] = None,
+        architecture: typing.Optional["_aws_cdk_aws_lambda_ceddda9d.Architecture"] = None,
+        code_signing_config: typing.Optional["_aws_cdk_aws_lambda_ceddda9d.ICodeSigningConfig"] = None,
+        current_version_options: typing.Optional[typing.Union["_aws_cdk_aws_lambda_ceddda9d.VersionOptions", typing.Dict[builtins.str, typing.Any]]] = None,
+        dead_letter_queue: typing.Optional["_aws_cdk_aws_sqs_ceddda9d.IQueue"] = None,
         dead_letter_queue_enabled: typing.Optional[builtins.bool] = None,
-        dead_letter_topic: typing.Optional[_aws_cdk_aws_sns_ceddda9d.ITopic] = None,
+        dead_letter_topic: typing.Optional["_aws_cdk_aws_sns_ceddda9d.ITopic"] = None,
         description: typing.Optional[builtins.str] = None,
         environment: typing.Optional[typing.Mapping[builtins.str, builtins.str]] = None,
-        environment_encryption: typing.Optional[_aws_cdk_aws_kms_ceddda9d.IKey] = None,
-        ephemeral_storage_size: typing.Optional[_aws_cdk_ceddda9d.Size] = None,
-        events: typing.Optional[typing.Sequence[_aws_cdk_aws_lambda_ceddda9d.IEventSource]] = None,
-        filesystem: typing.Optional[_aws_cdk_aws_lambda_ceddda9d.FileSystem] = None,
+        environment_encryption: typing.Optional["_aws_cdk_aws_kms_ceddda9d.IKey"] = None,
+        ephemeral_storage_size: typing.Optional["_aws_cdk_ceddda9d.Size"] = None,
+        events: typing.Optional[typing.Sequence["_aws_cdk_aws_lambda_ceddda9d.IEventSource"]] = None,
+        filesystem: typing.Optional["_aws_cdk_aws_lambda_ceddda9d.FileSystem"] = None,
         function_name: typing.Optional[builtins.str] = None,
-        initial_policy: typing.Optional[typing.Sequence[_aws_cdk_aws_iam_ceddda9d.PolicyStatement]] = None,
-        insights_version: typing.Optional[_aws_cdk_aws_lambda_ceddda9d.LambdaInsightsVersion] = None,
-        ipv6_allowed_for_dual_stack: typing.Optional[builtins.bool] = None,
-        layers: typing.Optional[typing.Sequence[_aws_cdk_aws_lambda_ceddda9d.ILayerVersion]] = None,
-        log_format: typing.Optional[builtins.str] = None,
-        logging_format: typing.Optional[_aws_cdk_aws_lambda_ceddda9d.LoggingFormat] = None,
-        log_group: typing.Optional[_aws_cdk_aws_logs_ceddda9d.ILogGroup] = None,
-        log_retention: typing.Optional[_aws_cdk_aws_logs_ceddda9d.RetentionDays] = None,
-        log_retention_retry_options: typing.Optional[typing.Union[_aws_cdk_aws_lambda_ceddda9d.LogRetentionRetryOptions, typing.Dict[builtins.str, typing.Any]]] = None,
-        log_retention_role: typing.Optional[_aws_cdk_aws_iam_ceddda9d.IRole] = None,
+        initial_policy: typing.Optional[typing.Sequence["_aws_cdk_aws_iam_ceddda9d.PolicyStatement"]] = None,
+        insights_version: typing.Optional["_aws_cdk_aws_lambda_ceddda9d.LambdaInsightsVersion"] = None,
+        layers: typing.Optional[typing.Sequence["_aws_cdk_aws_lambda_ceddda9d.ILayerVersion"]] = None,
+        log_retention: typing.Optional["_aws_cdk_aws_logs_ceddda9d.RetentionDays"] = None,
+        log_retention_retry_options: typing.Optional[typing.Union["_aws_cdk_aws_lambda_ceddda9d.LogRetentionRetryOptions", typing.Dict[builtins.str, typing.Any]]] = None,
+        log_retention_role: typing.Optional["_aws_cdk_aws_iam_ceddda9d.IRole"] = None,
         memory_size: typing.Optional[jsii.Number] = None,
-        params_and_secrets: typing.Optional[_aws_cdk_aws_lambda_ceddda9d.ParamsAndSecretsLayerVersion] = None,
+        params_and_secrets: typing.Optional["_aws_cdk_aws_lambda_ceddda9d.ParamsAndSecretsLayerVersion"] = None,
         profiling: typing.Optional[builtins.bool] = None,
-        profiling_group: typing.Optional[_aws_cdk_aws_codeguruprofiler_ceddda9d.IProfilingGroup] = None,
+        profiling_group: typing.Optional["_aws_cdk_aws_codeguruprofiler_ceddda9d.IProfilingGroup"] = None,
         reserved_concurrent_executions: typing.Optional[jsii.Number] = None,
-        role: typing.Optional[_aws_cdk_aws_iam_ceddda9d.IRole] = None,
-        runtime_management_mode: typing.Optional[_aws_cdk_aws_lambda_ceddda9d.RuntimeManagementMode] = None,
-        security_groups: typing.Optional[typing.Sequence[_aws_cdk_aws_ec2_ceddda9d.ISecurityGroup]] = None,
-        snap_start: typing.Optional[_aws_cdk_aws_lambda_ceddda9d.SnapStartConf] = None,
-        system_log_level: typing.Optional[builtins.str] = None,
-        system_log_level_v2: typing.Optional[_aws_cdk_aws_lambda_ceddda9d.SystemLogLevel] = None,
-        timeout: typing.Optional[_aws_cdk_ceddda9d.Duration] = None,
-        tracing: typing.Optional[_aws_cdk_aws_lambda_ceddda9d.Tracing] = None,
-        vpc: typing.Optional[_aws_cdk_aws_ec2_ceddda9d.IVpc] = None,
-        vpc_subnets: typing.Optional[typing.Union[_aws_cdk_aws_ec2_ceddda9d.SubnetSelection, typing.Dict[builtins.str, typing.Any]]] = None,
+        role: typing.Optional["_aws_cdk_aws_iam_ceddda9d.IRole"] = None,
+        runtime_management_mode: typing.Optional["_aws_cdk_aws_lambda_ceddda9d.RuntimeManagementMode"] = None,
+        security_groups: typing.Optional[typing.Sequence["_aws_cdk_aws_ec2_ceddda9d.ISecurityGroup"]] = None,
+        timeout: typing.Optional["_aws_cdk_ceddda9d.Duration"] = None,
+        tracing: typing.Optional["_aws_cdk_aws_lambda_ceddda9d.Tracing"] = None,
+        vpc: typing.Optional["_aws_cdk_aws_ec2_ceddda9d.IVpc"] = None,
+        vpc_subnets: typing.Optional[typing.Union["_aws_cdk_aws_ec2_ceddda9d.SubnetSelection", typing.Dict[builtins.str, typing.Any]]] = None,
     ) -> None:
         '''Props for CheckStateMachineStatusFunction.
 
@@ -488,10 +442,8 @@ class CheckStateMachineStatusFunctionProps(
         :param on_success: The destination for successful invocations. Default: - no destination
         :param retry_attempts: The maximum number of times to retry when the function returns an error. Minimum: 0 Maximum: 2 Default: 2
         :param adot_instrumentation: Specify the configuration of AWS Distro for OpenTelemetry (ADOT) instrumentation. Default: - No ADOT instrumentation
-        :param allow_all_outbound: Whether to allow the Lambda to send all network traffic. If set to false, you must individually add traffic rules to allow the Lambda to connect to network targets. Do not specify this property if the ``securityGroups`` or ``securityGroup`` property is set. Instead, configure ``allowAllOutbound`` directly on the security group. Default: true
+        :param allow_all_outbound: Whether to allow the Lambda to send all network traffic. If set to false, you must individually add traffic rules to allow the Lambda to connect to network targets. Default: true
         :param allow_public_subnet: Lambda Functions in a public subnet can NOT access the internet. Use this property to acknowledge this limitation and still place the function in a public subnet. Default: false
-        :param application_log_level: (deprecated) Sets the application log level for the function. Default: "INFO"
-        :param application_log_level_v2: Sets the application log level for the function. Default: ApplicationLogLevel.INFO
         :param architecture: The system architectures compatible with this lambda function. Default: Architecture.X86_64
         :param code_signing_config: Code signing config associated with this function. Default: - Not Sign the Code
         :param current_version_options: Options for the ``lambda.Version`` resource automatically created by the ``fn.currentVersion`` method. Default: - default options as described in ``VersionOptions``
@@ -507,14 +459,10 @@ class CheckStateMachineStatusFunctionProps(
         :param function_name: A name for the function. Default: - AWS CloudFormation generates a unique physical ID and uses that ID for the function's name. For more information, see Name Type.
         :param initial_policy: Initial policy statements to add to the created Lambda Role. You can call ``addToRolePolicy`` to the created lambda to add statements post creation. Default: - No policy statements are added to the created Lambda role.
         :param insights_version: Specify the version of CloudWatch Lambda insights to use for monitoring. Default: - No Lambda Insights
-        :param ipv6_allowed_for_dual_stack: Allows outbound IPv6 traffic on VPC functions that are connected to dual-stack subnets. Only used if 'vpc' is supplied. Default: false
         :param layers: A list of layers to add to the function's execution environment. You can configure your Lambda function to pull in additional code during initialization in the form of layers. Layers are packages of libraries or other dependencies that can be used by multiple functions. Default: - No layers.
-        :param log_format: (deprecated) Sets the logFormat for the function. Default: "Text"
-        :param logging_format: Sets the loggingFormat for the function. Default: LoggingFormat.TEXT
-        :param log_group: The log group the function sends logs to. By default, Lambda functions send logs to an automatically created default log group named /aws/lambda/<function name>. However you cannot change the properties of this auto-created log group using the AWS CDK, e.g. you cannot set a different log retention. Use the ``logGroup`` property to create a fully customizable LogGroup ahead of time, and instruct the Lambda function to send logs to it. Providing a user-controlled log group was rolled out to commercial regions on 2023-11-16. If you are deploying to another type of region, please check regional availability first. Default: ``/aws/lambda/${this.functionName}`` - default log group created by Lambda
-        :param log_retention: The number of days log events are kept in CloudWatch Logs. When updating this property, unsetting it doesn't remove the log retention policy. To remove the retention policy, set the value to ``INFINITE``. This is a legacy API and we strongly recommend you move away from it if you can. Instead create a fully customizable log group with ``logs.LogGroup`` and use the ``logGroup`` property to instruct the Lambda function to send logs to it. Migrating from ``logRetention`` to ``logGroup`` will cause the name of the log group to change. Users and code and referencing the name verbatim will have to adjust. In AWS CDK code, you can access the log group name directly from the LogGroup construct:: import * as logs from 'aws-cdk-lib/aws-logs'; declare const myLogGroup: logs.LogGroup; myLogGroup.logGroupName; Default: logs.RetentionDays.INFINITE
-        :param log_retention_retry_options: When log retention is specified, a custom resource attempts to create the CloudWatch log group. These options control the retry policy when interacting with CloudWatch APIs. This is a legacy API and we strongly recommend you migrate to ``logGroup`` if you can. ``logGroup`` allows you to create a fully customizable log group and instruct the Lambda function to send logs to it. Default: - Default AWS SDK retry options.
-        :param log_retention_role: The IAM role for the Lambda function associated with the custom resource that sets the retention policy. This is a legacy API and we strongly recommend you migrate to ``logGroup`` if you can. ``logGroup`` allows you to create a fully customizable log group and instruct the Lambda function to send logs to it. Default: - A new role is created.
+        :param log_retention: The number of days log events are kept in CloudWatch Logs. When updating this property, unsetting it doesn't remove the log retention policy. To remove the retention policy, set the value to ``INFINITE``. Default: logs.RetentionDays.INFINITE
+        :param log_retention_retry_options: When log retention is specified, a custom resource attempts to create the CloudWatch log group. These options control the retry policy when interacting with CloudWatch APIs. Default: - Default AWS SDK retry options.
+        :param log_retention_role: The IAM role for the Lambda function associated with the custom resource that sets the retention policy. Default: - A new role is created.
         :param memory_size: The amount of memory, in MB, that is allocated to your Lambda function. Lambda uses this value to proportionally allocate the amount of CPU power. For more information, see Resource Model in the AWS Lambda Developer Guide. Default: 128
         :param params_and_secrets: Specify the configuration of Parameters and Secrets Extension. Default: - No Parameters and Secrets Extension
         :param profiling: Enable profiling. Default: - No profiling.
@@ -523,9 +471,6 @@ class CheckStateMachineStatusFunctionProps(
         :param role: Lambda execution role. This is the role that will be assumed by the function upon execution. It controls the permissions that the function will have. The Role must be assumable by the 'lambda.amazonaws.com' service principal. The default Role automatically has permissions granted for Lambda execution. If you provide a Role, you must add the relevant AWS managed policies yourself. The relevant managed policies are "service-role/AWSLambdaBasicExecutionRole" and "service-role/AWSLambdaVPCAccessExecutionRole". Default: - A unique role will be generated for this lambda function. Both supplied and generated roles can always be changed by calling ``addToRolePolicy``.
         :param runtime_management_mode: Sets the runtime management configuration for a function's version. Default: Auto
         :param security_groups: The list of security groups to associate with the Lambda's network interfaces. Only used if 'vpc' is supplied. Default: - If the function is placed within a VPC and a security group is not specified, either by this or securityGroup prop, a dedicated security group will be created for this function.
-        :param snap_start: Enable SnapStart for Lambda Function. SnapStart is currently supported only for Java 11, 17 runtime Default: - No snapstart
-        :param system_log_level: (deprecated) Sets the system log level for the function. Default: "INFO"
-        :param system_log_level_v2: Sets the system log level for the function. Default: SystemLogLevel.INFO
         :param timeout: The function execution time (in seconds) after which Lambda terminates the function. Because the execution time affects cost, set this value based on the function's expected execution time. Default: Duration.seconds(3)
         :param tracing: Enable AWS X-Ray Tracing for Lambda Function. Default: Tracing.Disabled
         :param vpc: VPC network to place Lambda network interfaces. Specify this if the Lambda function needs to access resources in a VPC. This is required when ``vpcSubnets`` is specified. Default: - Function is not placed within a VPC.
@@ -548,8 +493,6 @@ class CheckStateMachineStatusFunctionProps(
             check_type(argname="argument adot_instrumentation", value=adot_instrumentation, expected_type=type_hints["adot_instrumentation"])
             check_type(argname="argument allow_all_outbound", value=allow_all_outbound, expected_type=type_hints["allow_all_outbound"])
             check_type(argname="argument allow_public_subnet", value=allow_public_subnet, expected_type=type_hints["allow_public_subnet"])
-            check_type(argname="argument application_log_level", value=application_log_level, expected_type=type_hints["application_log_level"])
-            check_type(argname="argument application_log_level_v2", value=application_log_level_v2, expected_type=type_hints["application_log_level_v2"])
             check_type(argname="argument architecture", value=architecture, expected_type=type_hints["architecture"])
             check_type(argname="argument code_signing_config", value=code_signing_config, expected_type=type_hints["code_signing_config"])
             check_type(argname="argument current_version_options", value=current_version_options, expected_type=type_hints["current_version_options"])
@@ -565,11 +508,7 @@ class CheckStateMachineStatusFunctionProps(
             check_type(argname="argument function_name", value=function_name, expected_type=type_hints["function_name"])
             check_type(argname="argument initial_policy", value=initial_policy, expected_type=type_hints["initial_policy"])
             check_type(argname="argument insights_version", value=insights_version, expected_type=type_hints["insights_version"])
-            check_type(argname="argument ipv6_allowed_for_dual_stack", value=ipv6_allowed_for_dual_stack, expected_type=type_hints["ipv6_allowed_for_dual_stack"])
             check_type(argname="argument layers", value=layers, expected_type=type_hints["layers"])
-            check_type(argname="argument log_format", value=log_format, expected_type=type_hints["log_format"])
-            check_type(argname="argument logging_format", value=logging_format, expected_type=type_hints["logging_format"])
-            check_type(argname="argument log_group", value=log_group, expected_type=type_hints["log_group"])
             check_type(argname="argument log_retention", value=log_retention, expected_type=type_hints["log_retention"])
             check_type(argname="argument log_retention_retry_options", value=log_retention_retry_options, expected_type=type_hints["log_retention_retry_options"])
             check_type(argname="argument log_retention_role", value=log_retention_role, expected_type=type_hints["log_retention_role"])
@@ -581,9 +520,6 @@ class CheckStateMachineStatusFunctionProps(
             check_type(argname="argument role", value=role, expected_type=type_hints["role"])
             check_type(argname="argument runtime_management_mode", value=runtime_management_mode, expected_type=type_hints["runtime_management_mode"])
             check_type(argname="argument security_groups", value=security_groups, expected_type=type_hints["security_groups"])
-            check_type(argname="argument snap_start", value=snap_start, expected_type=type_hints["snap_start"])
-            check_type(argname="argument system_log_level", value=system_log_level, expected_type=type_hints["system_log_level"])
-            check_type(argname="argument system_log_level_v2", value=system_log_level_v2, expected_type=type_hints["system_log_level_v2"])
             check_type(argname="argument timeout", value=timeout, expected_type=type_hints["timeout"])
             check_type(argname="argument tracing", value=tracing, expected_type=type_hints["tracing"])
             check_type(argname="argument vpc", value=vpc, expected_type=type_hints["vpc"])
@@ -603,10 +539,6 @@ class CheckStateMachineStatusFunctionProps(
             self._values["allow_all_outbound"] = allow_all_outbound
         if allow_public_subnet is not None:
             self._values["allow_public_subnet"] = allow_public_subnet
-        if application_log_level is not None:
-            self._values["application_log_level"] = application_log_level
-        if application_log_level_v2 is not None:
-            self._values["application_log_level_v2"] = application_log_level_v2
         if architecture is not None:
             self._values["architecture"] = architecture
         if code_signing_config is not None:
@@ -637,16 +569,8 @@ class CheckStateMachineStatusFunctionProps(
             self._values["initial_policy"] = initial_policy
         if insights_version is not None:
             self._values["insights_version"] = insights_version
-        if ipv6_allowed_for_dual_stack is not None:
-            self._values["ipv6_allowed_for_dual_stack"] = ipv6_allowed_for_dual_stack
         if layers is not None:
             self._values["layers"] = layers
-        if log_format is not None:
-            self._values["log_format"] = log_format
-        if logging_format is not None:
-            self._values["logging_format"] = logging_format
-        if log_group is not None:
-            self._values["log_group"] = log_group
         if log_retention is not None:
             self._values["log_retention"] = log_retention
         if log_retention_retry_options is not None:
@@ -669,12 +593,6 @@ class CheckStateMachineStatusFunctionProps(
             self._values["runtime_management_mode"] = runtime_management_mode
         if security_groups is not None:
             self._values["security_groups"] = security_groups
-        if snap_start is not None:
-            self._values["snap_start"] = snap_start
-        if system_log_level is not None:
-            self._values["system_log_level"] = system_log_level
-        if system_log_level_v2 is not None:
-            self._values["system_log_level_v2"] = system_log_level_v2
         if timeout is not None:
             self._values["timeout"] = timeout
         if tracing is not None:
@@ -685,7 +603,7 @@ class CheckStateMachineStatusFunctionProps(
             self._values["vpc_subnets"] = vpc_subnets
 
     @builtins.property
-    def max_event_age(self) -> typing.Optional[_aws_cdk_ceddda9d.Duration]:
+    def max_event_age(self) -> typing.Optional["_aws_cdk_ceddda9d.Duration"]:
         '''The maximum age of a request that Lambda sends to a function for processing.
 
         Minimum: 60 seconds
@@ -694,25 +612,29 @@ class CheckStateMachineStatusFunctionProps(
         :default: Duration.hours(6)
         '''
         result = self._values.get("max_event_age")
-        return typing.cast(typing.Optional[_aws_cdk_ceddda9d.Duration], result)
+        return typing.cast(typing.Optional["_aws_cdk_ceddda9d.Duration"], result)
 
     @builtins.property
-    def on_failure(self) -> typing.Optional[_aws_cdk_aws_lambda_ceddda9d.IDestination]:
+    def on_failure(
+        self,
+    ) -> typing.Optional["_aws_cdk_aws_lambda_ceddda9d.IDestination"]:
         '''The destination for failed invocations.
 
         :default: - no destination
         '''
         result = self._values.get("on_failure")
-        return typing.cast(typing.Optional[_aws_cdk_aws_lambda_ceddda9d.IDestination], result)
+        return typing.cast(typing.Optional["_aws_cdk_aws_lambda_ceddda9d.IDestination"], result)
 
     @builtins.property
-    def on_success(self) -> typing.Optional[_aws_cdk_aws_lambda_ceddda9d.IDestination]:
+    def on_success(
+        self,
+    ) -> typing.Optional["_aws_cdk_aws_lambda_ceddda9d.IDestination"]:
         '''The destination for successful invocations.
 
         :default: - no destination
         '''
         result = self._values.get("on_success")
-        return typing.cast(typing.Optional[_aws_cdk_aws_lambda_ceddda9d.IDestination], result)
+        return typing.cast(typing.Optional["_aws_cdk_aws_lambda_ceddda9d.IDestination"], result)
 
     @builtins.property
     def retry_attempts(self) -> typing.Optional[jsii.Number]:
@@ -729,7 +651,7 @@ class CheckStateMachineStatusFunctionProps(
     @builtins.property
     def adot_instrumentation(
         self,
-    ) -> typing.Optional[_aws_cdk_aws_lambda_ceddda9d.AdotInstrumentationConfig]:
+    ) -> typing.Optional["_aws_cdk_aws_lambda_ceddda9d.AdotInstrumentationConfig"]:
         '''Specify the configuration of AWS Distro for OpenTelemetry (ADOT) instrumentation.
 
         :default: - No ADOT instrumentation
@@ -737,7 +659,7 @@ class CheckStateMachineStatusFunctionProps(
         :see: https://aws-otel.github.io/docs/getting-started/lambda
         '''
         result = self._values.get("adot_instrumentation")
-        return typing.cast(typing.Optional[_aws_cdk_aws_lambda_ceddda9d.AdotInstrumentationConfig], result)
+        return typing.cast(typing.Optional["_aws_cdk_aws_lambda_ceddda9d.AdotInstrumentationConfig"], result)
 
     @builtins.property
     def allow_all_outbound(self) -> typing.Optional[builtins.bool]:
@@ -746,9 +668,6 @@ class CheckStateMachineStatusFunctionProps(
         If set to false, you must individually add traffic rules to allow the
         Lambda to connect to network targets.
 
-        Do not specify this property if the ``securityGroups`` or ``securityGroup`` property is set.
-        Instead, configure ``allowAllOutbound`` directly on the security group.
-
         :default: true
         '''
         result = self._values.get("allow_all_outbound")
@@ -767,65 +686,41 @@ class CheckStateMachineStatusFunctionProps(
         result = self._values.get("allow_public_subnet")
         return typing.cast(typing.Optional[builtins.bool], result)
 
-    @builtins.property
-    def application_log_level(self) -> typing.Optional[builtins.str]:
-        '''(deprecated) Sets the application log level for the function.
-
-        :default: "INFO"
-
-        :deprecated: Use ``applicationLogLevelV2`` as a property instead.
-
-        :stability: deprecated
-        '''
-        result = self._values.get("application_log_level")
-        return typing.cast(typing.Optional[builtins.str], result)
-
-    @builtins.property
-    def application_log_level_v2(
-        self,
-    ) -> typing.Optional[_aws_cdk_aws_lambda_ceddda9d.ApplicationLogLevel]:
-        '''Sets the application log level for the function.
-
-        :default: ApplicationLogLevel.INFO
-        '''
-        result = self._values.get("application_log_level_v2")
-        return typing.cast(typing.Optional[_aws_cdk_aws_lambda_ceddda9d.ApplicationLogLevel], result)
-
     @builtins.property
     def architecture(
         self,
-    ) -> typing.Optional[_aws_cdk_aws_lambda_ceddda9d.Architecture]:
+    ) -> typing.Optional["_aws_cdk_aws_lambda_ceddda9d.Architecture"]:
         '''The system architectures compatible with this lambda function.
 
         :default: Architecture.X86_64
         '''
         result = self._values.get("architecture")
-        return typing.cast(typing.Optional[_aws_cdk_aws_lambda_ceddda9d.Architecture], result)
+        return typing.cast(typing.Optional["_aws_cdk_aws_lambda_ceddda9d.Architecture"], result)
 
     @builtins.property
     def code_signing_config(
         self,
-    ) -> typing.Optional[_aws_cdk_aws_lambda_ceddda9d.ICodeSigningConfig]:
+    ) -> typing.Optional["_aws_cdk_aws_lambda_ceddda9d.ICodeSigningConfig"]:
         '''Code signing config associated with this function.
 
         :default: - Not Sign the Code
         '''
         result = self._values.get("code_signing_config")
-        return typing.cast(typing.Optional[_aws_cdk_aws_lambda_ceddda9d.ICodeSigningConfig], result)
+        return typing.cast(typing.Optional["_aws_cdk_aws_lambda_ceddda9d.ICodeSigningConfig"], result)
 
     @builtins.property
     def current_version_options(
         self,
-    ) -> typing.Optional[_aws_cdk_aws_lambda_ceddda9d.VersionOptions]:
+    ) -> typing.Optional["_aws_cdk_aws_lambda_ceddda9d.VersionOptions"]:
         '''Options for the ``lambda.Version`` resource automatically created by the ``fn.currentVersion`` method.
 
         :default: - default options as described in ``VersionOptions``
         '''
         result = self._values.get("current_version_options")
-        return typing.cast(typing.Optional[_aws_cdk_aws_lambda_ceddda9d.VersionOptions], result)
+        return typing.cast(typing.Optional["_aws_cdk_aws_lambda_ceddda9d.VersionOptions"], result)
 
     @builtins.property
-    def dead_letter_queue(self) -> typing.Optional[_aws_cdk_aws_sqs_ceddda9d.IQueue]:
+    def dead_letter_queue(self) -> typing.Optional["_aws_cdk_aws_sqs_ceddda9d.IQueue"]:
         '''The SQS queue to use if DLQ is enabled.
 
         If SNS topic is desired, specify ``deadLetterTopic`` property instead.
@@ -833,7 +728,7 @@ class CheckStateMachineStatusFunctionProps(
         :default: - SQS queue with 14 day retention period if ``deadLetterQueueEnabled`` is ``true``
         '''
         result = self._values.get("dead_letter_queue")
-        return typing.cast(typing.Optional[_aws_cdk_aws_sqs_ceddda9d.IQueue], result)
+        return typing.cast(typing.Optional["_aws_cdk_aws_sqs_ceddda9d.IQueue"], result)
 
     @builtins.property
     def dead_letter_queue_enabled(self) -> typing.Optional[builtins.bool]:
@@ -848,7 +743,7 @@ class CheckStateMachineStatusFunctionProps(
         return typing.cast(typing.Optional[builtins.bool], result)
 
     @builtins.property
-    def dead_letter_topic(self) -> typing.Optional[_aws_cdk_aws_sns_ceddda9d.ITopic]:
+    def dead_letter_topic(self) -> typing.Optional["_aws_cdk_aws_sns_ceddda9d.ITopic"]:
         '''The SNS topic to use as a DLQ.
 
         Note that if ``deadLetterQueueEnabled`` is set to ``true``, an SQS queue will be created
@@ -857,7 +752,7 @@ class CheckStateMachineStatusFunctionProps(
         :default: - no SNS topic
         '''
         result = self._values.get("dead_letter_topic")
-        return typing.cast(typing.Optional[_aws_cdk_aws_sns_ceddda9d.ITopic], result)
+        return typing.cast(typing.Optional["_aws_cdk_aws_sns_ceddda9d.ITopic"], result)
 
     @builtins.property
     def description(self) -> typing.Optional[builtins.str]:
@@ -884,27 +779,29 @@ class CheckStateMachineStatusFunctionProps(
         return typing.cast(typing.Optional[typing.Mapping[builtins.str, builtins.str]], result)
 
     @builtins.property
-    def environment_encryption(self) -> typing.Optional[_aws_cdk_aws_kms_ceddda9d.IKey]:
+    def environment_encryption(
+        self,
+    ) -> typing.Optional["_aws_cdk_aws_kms_ceddda9d.IKey"]:
         '''The AWS KMS key that's used to encrypt your function's environment variables.
 
         :default: - AWS Lambda creates and uses an AWS managed customer master key (CMK).
         '''
         result = self._values.get("environment_encryption")
-        return typing.cast(typing.Optional[_aws_cdk_aws_kms_ceddda9d.IKey], result)
+        return typing.cast(typing.Optional["_aws_cdk_aws_kms_ceddda9d.IKey"], result)
 
     @builtins.property
-    def ephemeral_storage_size(self) -> typing.Optional[_aws_cdk_ceddda9d.Size]:
+    def ephemeral_storage_size(self) -> typing.Optional["_aws_cdk_ceddda9d.Size"]:
         '''The size of the function’s /tmp directory in MiB.
 
         :default: 512 MiB
         '''
         result = self._values.get("ephemeral_storage_size")
-        return typing.cast(typing.Optional[_aws_cdk_ceddda9d.Size], result)
+        return typing.cast(typing.Optional["_aws_cdk_ceddda9d.Size"], result)
 
     @builtins.property
     def events(
         self,
-    ) -> typing.Optional[typing.List[_aws_cdk_aws_lambda_ceddda9d.IEventSource]]:
+    ) -> typing.Optional[typing.List["_aws_cdk_aws_lambda_ceddda9d.IEventSource"]]:
         '''Event sources for this function.
 
         You can also add event sources using ``addEventSource``.
@@ -912,16 +809,16 @@ class CheckStateMachineStatusFunctionProps(
         :default: - No event sources.
         '''
         result = self._values.get("events")
-        return typing.cast(typing.Optional[typing.List[_aws_cdk_aws_lambda_ceddda9d.IEventSource]], result)
+        return typing.cast(typing.Optional[typing.List["_aws_cdk_aws_lambda_ceddda9d.IEventSource"]], result)
 
     @builtins.property
-    def filesystem(self) -> typing.Optional[_aws_cdk_aws_lambda_ceddda9d.FileSystem]:
+    def filesystem(self) -> typing.Optional["_aws_cdk_aws_lambda_ceddda9d.FileSystem"]:
         '''The filesystem configuration for the lambda function.
 
         :default: - will not mount any filesystem
         '''
         result = self._values.get("filesystem")
-        return typing.cast(typing.Optional[_aws_cdk_aws_lambda_ceddda9d.FileSystem], result)
+        return typing.cast(typing.Optional["_aws_cdk_aws_lambda_ceddda9d.FileSystem"], result)
 
     @builtins.property
     def function_name(self) -> typing.Optional[builtins.str]:
@@ -938,7 +835,7 @@ class CheckStateMachineStatusFunctionProps(
     @builtins.property
     def initial_policy(
         self,
-    ) -> typing.Optional[typing.List[_aws_cdk_aws_iam_ceddda9d.PolicyStatement]]:
+    ) -> typing.Optional[typing.List["_aws_cdk_aws_iam_ceddda9d.PolicyStatement"]]:
         '''Initial policy statements to add to the created Lambda Role.
 
         You can call ``addToRolePolicy`` to the created lambda to add statements post creation.
@@ -946,12 +843,12 @@ class CheckStateMachineStatusFunctionProps(
         :default: - No policy statements are added to the created Lambda role.
         '''
         result = self._values.get("initial_policy")
-        return typing.cast(typing.Optional[typing.List[_aws_cdk_aws_iam_ceddda9d.PolicyStatement]], result)
+        return typing.cast(typing.Optional[typing.List["_aws_cdk_aws_iam_ceddda9d.PolicyStatement"]], result)
 
     @builtins.property
     def insights_version(
         self,
-    ) -> typing.Optional[_aws_cdk_aws_lambda_ceddda9d.LambdaInsightsVersion]:
+    ) -> typing.Optional["_aws_cdk_aws_lambda_ceddda9d.LambdaInsightsVersion"]:
         '''Specify the version of CloudWatch Lambda insights to use for monitoring.
 
         :default: - No Lambda Insights
@@ -959,23 +856,12 @@ class CheckStateMachineStatusFunctionProps(
         :see: https://docs.aws.amazon.com/AmazonCloudWatch/latest/monitoring/Lambda-Insights-Getting-Started-docker.html
         '''
         result = self._values.get("insights_version")
-        return typing.cast(typing.Optional[_aws_cdk_aws_lambda_ceddda9d.LambdaInsightsVersion], result)
-
-    @builtins.property
-    def ipv6_allowed_for_dual_stack(self) -> typing.Optional[builtins.bool]:
-        '''Allows outbound IPv6 traffic on VPC functions that are connected to dual-stack subnets.
-
-        Only used if 'vpc' is supplied.
-
-        :default: false
-        '''
-        result = self._values.get("ipv6_allowed_for_dual_stack")
-        return typing.cast(typing.Optional[builtins.bool], result)
+        return typing.cast(typing.Optional["_aws_cdk_aws_lambda_ceddda9d.LambdaInsightsVersion"], result)
 
     @builtins.property
     def layers(
         self,
-    ) -> typing.Optional[typing.List[_aws_cdk_aws_lambda_ceddda9d.ILayerVersion]]:
+    ) -> typing.Optional[typing.List["_aws_cdk_aws_lambda_ceddda9d.ILayerVersion"]]:
         '''A list of layers to add to the function's execution environment.
 
         You can configure your Lambda function to pull in
@@ -985,104 +871,44 @@ class CheckStateMachineStatusFunctionProps(
         :default: - No layers.
         '''
         result = self._values.get("layers")
-        return typing.cast(typing.Optional[typing.List[_aws_cdk_aws_lambda_ceddda9d.ILayerVersion]], result)
-
-    @builtins.property
-    def log_format(self) -> typing.Optional[builtins.str]:
-        '''(deprecated) Sets the logFormat for the function.
-
-        :default: "Text"
-
-        :deprecated: Use ``loggingFormat`` as a property instead.
-
-        :stability: deprecated
-        '''
-        result = self._values.get("log_format")
-        return typing.cast(typing.Optional[builtins.str], result)
-
-    @builtins.property
-    def logging_format(
-        self,
-    ) -> typing.Optional[_aws_cdk_aws_lambda_ceddda9d.LoggingFormat]:
-        '''Sets the loggingFormat for the function.
-
-        :default: LoggingFormat.TEXT
-        '''
-        result = self._values.get("logging_format")
-        return typing.cast(typing.Optional[_aws_cdk_aws_lambda_ceddda9d.LoggingFormat], result)
-
-    @builtins.property
-    def log_group(self) -> typing.Optional[_aws_cdk_aws_logs_ceddda9d.ILogGroup]:
-        '''The log group the function sends logs to.
-
-        By default, Lambda functions send logs to an automatically created default log group named /aws/lambda/.
-        However you cannot change the properties of this auto-created log group using the AWS CDK, e.g. you cannot set a different log retention.
-
-        Use the ``logGroup`` property to create a fully customizable LogGroup ahead of time, and instruct the Lambda function to send logs to it.
-
-        Providing a user-controlled log group was rolled out to commercial regions on 2023-11-16.
-        If you are deploying to another type of region, please check regional availability first.
-
-        :default: ``/aws/lambda/${this.functionName}`` - default log group created by Lambda
-        '''
-        result = self._values.get("log_group")
-        return typing.cast(typing.Optional[_aws_cdk_aws_logs_ceddda9d.ILogGroup], result)
+        return typing.cast(typing.Optional[typing.List["_aws_cdk_aws_lambda_ceddda9d.ILayerVersion"]], result)
 
     @builtins.property
     def log_retention(
         self,
-    ) -> typing.Optional[_aws_cdk_aws_logs_ceddda9d.RetentionDays]:
+    ) -> typing.Optional["_aws_cdk_aws_logs_ceddda9d.RetentionDays"]:
         '''The number of days log events are kept in CloudWatch Logs.
 
         When updating
         this property, unsetting it doesn't remove the log retention policy. To
         remove the retention policy, set the value to ``INFINITE``.
 
-        This is a legacy API and we strongly recommend you move away from it if you can.
-        Instead create a fully customizable log group with ``logs.LogGroup`` and use the ``logGroup`` property
-        to instruct the Lambda function to send logs to it.
-        Migrating from ``logRetention`` to ``logGroup`` will cause the name of the log group to change.
-        Users and code and referencing the name verbatim will have to adjust.
-
-        In AWS CDK code, you can access the log group name directly from the LogGroup construct::
-
-           import * as logs from 'aws-cdk-lib/aws-logs';
-
-           declare const myLogGroup: logs.LogGroup;
-           myLogGroup.logGroupName;
-
         :default: logs.RetentionDays.INFINITE
         '''
         result = self._values.get("log_retention")
-        return typing.cast(typing.Optional[_aws_cdk_aws_logs_ceddda9d.RetentionDays], result)
+        return typing.cast(typing.Optional["_aws_cdk_aws_logs_ceddda9d.RetentionDays"], result)
 
     @builtins.property
     def log_retention_retry_options(
         self,
-    ) -> typing.Optional[_aws_cdk_aws_lambda_ceddda9d.LogRetentionRetryOptions]:
+    ) -> typing.Optional["_aws_cdk_aws_lambda_ceddda9d.LogRetentionRetryOptions"]:
         '''When log retention is specified, a custom resource attempts to create the CloudWatch log group.
 
         These options control the retry policy when interacting with CloudWatch APIs.
 
-        This is a legacy API and we strongly recommend you migrate to ``logGroup`` if you can.
-        ``logGroup`` allows you to create a fully customizable log group and instruct the Lambda function to send logs to it.
-
         :default: - Default AWS SDK retry options.
         '''
         result = self._values.get("log_retention_retry_options")
-        return typing.cast(typing.Optional[_aws_cdk_aws_lambda_ceddda9d.LogRetentionRetryOptions], result)
+        return typing.cast(typing.Optional["_aws_cdk_aws_lambda_ceddda9d.LogRetentionRetryOptions"], result)
 
     @builtins.property
-    def log_retention_role(self) -> typing.Optional[_aws_cdk_aws_iam_ceddda9d.IRole]:
+    def log_retention_role(self) -> typing.Optional["_aws_cdk_aws_iam_ceddda9d.IRole"]:
         '''The IAM role for the Lambda function associated with the custom resource that sets the retention policy.
 
-        This is a legacy API and we strongly recommend you migrate to ``logGroup`` if you can.
-        ``logGroup`` allows you to create a fully customizable log group and instruct the Lambda function to send logs to it.
-
         :default: - A new role is created.
         '''
         result = self._values.get("log_retention_role")
-        return typing.cast(typing.Optional[_aws_cdk_aws_iam_ceddda9d.IRole], result)
+        return typing.cast(typing.Optional["_aws_cdk_aws_iam_ceddda9d.IRole"], result)
 
     @builtins.property
     def memory_size(self) -> typing.Optional[jsii.Number]:
@@ -1100,7 +926,7 @@ class CheckStateMachineStatusFunctionProps(
     @builtins.property
     def params_and_secrets(
         self,
-    ) -> typing.Optional[_aws_cdk_aws_lambda_ceddda9d.ParamsAndSecretsLayerVersion]:
+    ) -> typing.Optional["_aws_cdk_aws_lambda_ceddda9d.ParamsAndSecretsLayerVersion"]:
         '''Specify the configuration of Parameters and Secrets Extension.
 
         :default: - No Parameters and Secrets Extension
@@ -1108,7 +934,7 @@ class CheckStateMachineStatusFunctionProps(
         :see: https://docs.aws.amazon.com/systems-manager/latest/userguide/ps-integration-lambda-extensions.html
         '''
         result = self._values.get("params_and_secrets")
-        return typing.cast(typing.Optional[_aws_cdk_aws_lambda_ceddda9d.ParamsAndSecretsLayerVersion], result)
+        return typing.cast(typing.Optional["_aws_cdk_aws_lambda_ceddda9d.ParamsAndSecretsLayerVersion"], result)
 
     @builtins.property
     def profiling(self) -> typing.Optional[builtins.bool]:
@@ -1124,7 +950,7 @@ class CheckStateMachineStatusFunctionProps(
     @builtins.property
     def profiling_group(
         self,
-    ) -> typing.Optional[_aws_cdk_aws_codeguruprofiler_ceddda9d.IProfilingGroup]:
+    ) -> typing.Optional["_aws_cdk_aws_codeguruprofiler_ceddda9d.IProfilingGroup"]:
         '''Profiling Group.
 
         :default: - A new profiling group will be created if ``profiling`` is set.
@@ -1132,7 +958,7 @@ class CheckStateMachineStatusFunctionProps(
         :see: https://docs.aws.amazon.com/codeguru/latest/profiler-ug/setting-up-lambda.html
         '''
         result = self._values.get("profiling_group")
-        return typing.cast(typing.Optional[_aws_cdk_aws_codeguruprofiler_ceddda9d.IProfilingGroup], result)
+        return typing.cast(typing.Optional["_aws_cdk_aws_codeguruprofiler_ceddda9d.IProfilingGroup"], result)
 
     @builtins.property
     def reserved_concurrent_executions(self) -> typing.Optional[jsii.Number]:
@@ -1146,7 +972,7 @@ class CheckStateMachineStatusFunctionProps(
         return typing.cast(typing.Optional[jsii.Number], result)
 
     @builtins.property
-    def role(self) -> typing.Optional[_aws_cdk_aws_iam_ceddda9d.IRole]:
+    def role(self) -> typing.Optional["_aws_cdk_aws_iam_ceddda9d.IRole"]:
         '''Lambda execution role.
 
         This is the role that will be assumed by the function upon execution.
@@ -1165,23 +991,23 @@ class CheckStateMachineStatusFunctionProps(
         Both supplied and generated roles can always be changed by calling ``addToRolePolicy``.
         '''
         result = self._values.get("role")
-        return typing.cast(typing.Optional[_aws_cdk_aws_iam_ceddda9d.IRole], result)
+        return typing.cast(typing.Optional["_aws_cdk_aws_iam_ceddda9d.IRole"], result)
 
     @builtins.property
     def runtime_management_mode(
         self,
-    ) -> typing.Optional[_aws_cdk_aws_lambda_ceddda9d.RuntimeManagementMode]:
+    ) -> typing.Optional["_aws_cdk_aws_lambda_ceddda9d.RuntimeManagementMode"]:
         '''Sets the runtime management configuration for a function's version.
 
         :default: Auto
         '''
         result = self._values.get("runtime_management_mode")
-        return typing.cast(typing.Optional[_aws_cdk_aws_lambda_ceddda9d.RuntimeManagementMode], result)
+        return typing.cast(typing.Optional["_aws_cdk_aws_lambda_ceddda9d.RuntimeManagementMode"], result)
 
     @builtins.property
     def security_groups(
         self,
-    ) -> typing.Optional[typing.List[_aws_cdk_aws_ec2_ceddda9d.ISecurityGroup]]:
+    ) -> typing.Optional[typing.List["_aws_cdk_aws_ec2_ceddda9d.ISecurityGroup"]]:
         '''The list of security groups to associate with the Lambda's network interfaces.
 
         Only used if 'vpc' is supplied.
@@ -1193,45 +1019,10 @@ class CheckStateMachineStatusFunctionProps(
         group will be created for this function.
         '''
         result = self._values.get("security_groups")
-        return typing.cast(typing.Optional[typing.List[_aws_cdk_aws_ec2_ceddda9d.ISecurityGroup]], result)
-
-    @builtins.property
-    def snap_start(self) -> typing.Optional[_aws_cdk_aws_lambda_ceddda9d.SnapStartConf]:
-        '''Enable SnapStart for Lambda Function.
-
-        SnapStart is currently supported only for Java 11, 17 runtime
-
-        :default: - No snapstart
-        '''
-        result = self._values.get("snap_start")
-        return typing.cast(typing.Optional[_aws_cdk_aws_lambda_ceddda9d.SnapStartConf], result)
+        return typing.cast(typing.Optional[typing.List["_aws_cdk_aws_ec2_ceddda9d.ISecurityGroup"]], result)
 
     @builtins.property
-    def system_log_level(self) -> typing.Optional[builtins.str]:
-        '''(deprecated) Sets the system log level for the function.
-
-        :default: "INFO"
-
-        :deprecated: Use ``systemLogLevelV2`` as a property instead.
-
-        :stability: deprecated
-        '''
-        result = self._values.get("system_log_level")
-        return typing.cast(typing.Optional[builtins.str], result)
-
-    @builtins.property
-    def system_log_level_v2(
-        self,
-    ) -> typing.Optional[_aws_cdk_aws_lambda_ceddda9d.SystemLogLevel]:
-        '''Sets the system log level for the function.
-
-        :default: SystemLogLevel.INFO
-        '''
-        result = self._values.get("system_log_level_v2")
-        return typing.cast(typing.Optional[_aws_cdk_aws_lambda_ceddda9d.SystemLogLevel], result)
-
-    @builtins.property
-    def timeout(self) -> typing.Optional[_aws_cdk_ceddda9d.Duration]:
+    def timeout(self) -> typing.Optional["_aws_cdk_ceddda9d.Duration"]:
         '''The function execution time (in seconds) after which Lambda terminates the function.
 
         Because the execution time affects cost, set this value
@@ -1240,19 +1031,19 @@ class CheckStateMachineStatusFunctionProps(
         :default: Duration.seconds(3)
         '''
         result = self._values.get("timeout")
-        return typing.cast(typing.Optional[_aws_cdk_ceddda9d.Duration], result)
+        return typing.cast(typing.Optional["_aws_cdk_ceddda9d.Duration"], result)
 
     @builtins.property
-    def tracing(self) -> typing.Optional[_aws_cdk_aws_lambda_ceddda9d.Tracing]:
+    def tracing(self) -> typing.Optional["_aws_cdk_aws_lambda_ceddda9d.Tracing"]:
         '''Enable AWS X-Ray Tracing for Lambda Function.
 
         :default: Tracing.Disabled
         '''
         result = self._values.get("tracing")
-        return typing.cast(typing.Optional[_aws_cdk_aws_lambda_ceddda9d.Tracing], result)
+        return typing.cast(typing.Optional["_aws_cdk_aws_lambda_ceddda9d.Tracing"], result)
 
     @builtins.property
-    def vpc(self) -> typing.Optional[_aws_cdk_aws_ec2_ceddda9d.IVpc]:
+    def vpc(self) -> typing.Optional["_aws_cdk_aws_ec2_ceddda9d.IVpc"]:
         '''VPC network to place Lambda network interfaces.
 
         Specify this if the Lambda function needs to access resources in a VPC.
@@ -1261,10 +1052,12 @@ class CheckStateMachineStatusFunctionProps(
         :default: - Function is not placed within a VPC.
         '''
         result = self._values.get("vpc")
-        return typing.cast(typing.Optional[_aws_cdk_aws_ec2_ceddda9d.IVpc], result)
+        return typing.cast(typing.Optional["_aws_cdk_aws_ec2_ceddda9d.IVpc"], result)
 
     @builtins.property
-    def vpc_subnets(self) -> typing.Optional[_aws_cdk_aws_ec2_ceddda9d.SubnetSelection]:
+    def vpc_subnets(
+        self,
+    ) -> typing.Optional["_aws_cdk_aws_ec2_ceddda9d.SubnetSelection"]:
         '''Where to place the network interfaces within the VPC.
 
         This requires ``vpc`` to be specified in order for interfaces to actually be
@@ -1276,7 +1069,7 @@ class CheckStateMachineStatusFunctionProps(
         :default: - the Vpc default strategy if not specified
         '''
         result = self._values.get("vpc_subnets")
-        return typing.cast(typing.Optional[_aws_cdk_aws_ec2_ceddda9d.SubnetSelection], result)
+        return typing.cast(typing.Optional["_aws_cdk_aws_ec2_ceddda9d.SubnetSelection"], result)
 
     def __eq__(self, rhs: typing.Any) -> builtins.bool:
         return isinstance(rhs, self.__class__) and rhs._values == self._values
@@ -1429,11 +1222,11 @@ class IComponentProps(typing_extensions.Protocol):
 
     @builtins.property
     @jsii.member(jsii_name="componentDocument")
-    def component_document(self) -> IComponentDocument:
+    def component_document(self) -> "IComponentDocument":
         ...
 
     @component_document.setter
-    def component_document(self, value: IComponentDocument) -> None:
+    def component_document(self, value: "IComponentDocument") -> None:
         ...
 
     @builtins.property
@@ -1503,11 +1296,11 @@ class _IComponentPropsProxy:
 
     @builtins.property
     @jsii.member(jsii_name="componentDocument")
-    def component_document(self) -> IComponentDocument:
-        return typing.cast(IComponentDocument, jsii.get(self, "componentDocument"))
+    def component_document(self) -> "IComponentDocument":
+        return typing.cast("IComponentDocument", jsii.get(self, "componentDocument"))
 
     @component_document.setter
-    def component_document(self, value: IComponentDocument) -> None:
+    def component_document(self, value: "IComponentDocument") -> None:
         if __debug__:
             type_hints = typing.get_type_hints(_typecheckingstub__b0ad2caab3355f4838637405d4f26c75ee1cce783903c32551e643abe82659e8)
             check_type(argname="argument value", value=value, expected_type=type_hints["value"])
@@ -1894,11 +1687,11 @@ class IStepCommands(typing_extensions.Protocol):
 
     @builtins.property
     @jsii.member(jsii_name="inputs")
-    def inputs(self) -> typing.Optional[IActionCommands]:
+    def inputs(self) -> typing.Optional["IActionCommands"]:
         ...
 
     @inputs.setter
-    def inputs(self, value: typing.Optional[IActionCommands]) -> None:
+    def inputs(self, value: typing.Optional["IActionCommands"]) -> None:
         ...
 
 
@@ -1931,11 +1724,11 @@ class _IStepCommandsProxy:
 
     @builtins.property
     @jsii.member(jsii_name="inputs")
-    def inputs(self) -> typing.Optional[IActionCommands]:
-        return typing.cast(typing.Optional[IActionCommands], jsii.get(self, "inputs"))
+    def inputs(self) -> typing.Optional["IActionCommands"]:
+        return typing.cast(typing.Optional["IActionCommands"], jsii.get(self, "inputs"))
 
     @inputs.setter
-    def inputs(self, value: typing.Optional[IActionCommands]) -> None:
+    def inputs(self, value: typing.Optional["IActionCommands"]) -> None:
         if __debug__:
             type_hints = typing.get_type_hints(_typecheckingstub__31f544d77b7639a100d3ef21a2dccb6780ad4865ad30dc0927169fa6f58ba844)
             check_type(argname="argument value", value=value, expected_type=type_hints["value"])
@@ -1952,13 +1745,13 @@ class ImagePipeline(
 ):
     def __init__(
         self,
-        scope: _constructs_77d1e7e8.Construct,
+        scope: "_constructs_77d1e7e8.Construct",
         id: builtins.str,
         *,
-        components: typing.Sequence[IComponentProps],
+        components: typing.Sequence["IComponentProps"],
         parent_image: builtins.str,
-        vpc: _aws_cdk_aws_ec2_ceddda9d.Vpc,
-        additional_policies: typing.Optional[typing.Sequence[_aws_cdk_aws_iam_ceddda9d.ManagedPolicy]] = None,
+        vpc: "_aws_cdk_aws_ec2_ceddda9d.Vpc",
+        additional_policies: typing.Optional[typing.Sequence["_aws_cdk_aws_iam_ceddda9d.ManagedPolicy"]] = None,
         debug_image_pipeline: typing.Optional[builtins.bool] = None,
         distribution_account_ids: typing.Optional[typing.Sequence[builtins.str]] = None,
         distribution_kms_key_alias: typing.Optional[builtins.str] = None,
@@ -2060,13 +1853,13 @@ class ImagePipeline(
     @jsii.member(jsii_name="imageRecipeComponents")
     def image_recipe_components(
         self,
-    ) -> typing.List[_aws_cdk_aws_imagebuilder_ceddda9d.CfnImageRecipe.ComponentConfigurationProperty]:
-        return typing.cast(typing.List[_aws_cdk_aws_imagebuilder_ceddda9d.CfnImageRecipe.ComponentConfigurationProperty], jsii.get(self, "imageRecipeComponents"))
+    ) -> typing.List["_aws_cdk_aws_imagebuilder_ceddda9d.CfnImageRecipe.ComponentConfigurationProperty"]:
+        return typing.cast(typing.List["_aws_cdk_aws_imagebuilder_ceddda9d.CfnImageRecipe.ComponentConfigurationProperty"], jsii.get(self, "imageRecipeComponents"))
 
     @image_recipe_components.setter
     def image_recipe_components(
         self,
-        value: typing.List[_aws_cdk_aws_imagebuilder_ceddda9d.CfnImageRecipe.ComponentConfigurationProperty],
+        value: typing.List["_aws_cdk_aws_imagebuilder_ceddda9d.CfnImageRecipe.ComponentConfigurationProperty"],
     ) -> None:
         if __debug__:
             type_hints = typing.get_type_hints(_typecheckingstub__eeb1c8226fc2b10c398b3b6c92875d7937e349500e49aef10cfda8c99a39abca)
@@ -2105,10 +1898,10 @@ class ImagePipelineProps:
     def __init__(
         self,
         *,
-        components: typing.Sequence[IComponentProps],
+        components: typing.Sequence["IComponentProps"],
         parent_image: builtins.str,
-        vpc: _aws_cdk_aws_ec2_ceddda9d.Vpc,
-        additional_policies: typing.Optional[typing.Sequence[_aws_cdk_aws_iam_ceddda9d.ManagedPolicy]] = None,
+        vpc: "_aws_cdk_aws_ec2_ceddda9d.Vpc",
+        additional_policies: typing.Optional[typing.Sequence["_aws_cdk_aws_iam_ceddda9d.ManagedPolicy"]] = None,
         debug_image_pipeline: typing.Optional[builtins.bool] = None,
         distribution_account_ids: typing.Optional[typing.Sequence[builtins.str]] = None,
         distribution_kms_key_alias: typing.Optional[builtins.str] = None,
@@ -2216,11 +2009,11 @@ class ImagePipelineProps:
             self._values["vuln_scans_repo_tags"] = vuln_scans_repo_tags
 
     @builtins.property
-    def components(self) -> typing.List[IComponentProps]:
+    def components(self) -> typing.List["IComponentProps"]:
         '''List of component props.'''
         result = self._values.get("components")
         assert result is not None, "Required property 'components' is missing"
-        return typing.cast(typing.List[IComponentProps], result)
+        return typing.cast(typing.List["IComponentProps"], result)
 
     @builtins.property
     def parent_image(self) -> builtins.str:
@@ -2233,19 +2026,19 @@ class ImagePipelineProps:
         return typing.cast(builtins.str, result)
 
     @builtins.property
-    def vpc(self) -> _aws_cdk_aws_ec2_ceddda9d.Vpc:
+    def vpc(self) -> "_aws_cdk_aws_ec2_ceddda9d.Vpc":
         '''Vpc to use for the Image Builder Pipeline.'''
         result = self._values.get("vpc")
         assert result is not None, "Required property 'vpc' is missing"
-        return typing.cast(_aws_cdk_aws_ec2_ceddda9d.Vpc, result)
+        return typing.cast("_aws_cdk_aws_ec2_ceddda9d.Vpc", result)
 
     @builtins.property
     def additional_policies(
         self,
-    ) -> typing.Optional[typing.List[_aws_cdk_aws_iam_ceddda9d.ManagedPolicy]]:
+    ) -> typing.Optional[typing.List["_aws_cdk_aws_iam_ceddda9d.ManagedPolicy"]]:
         '''Additional policies to add to the instance profile associated with the Instance Configurations.'''
         result = self._values.get("additional_policies")
-        return typing.cast(typing.Optional[typing.List[_aws_cdk_aws_iam_ceddda9d.ManagedPolicy]], result)
+        return typing.cast(typing.Optional[typing.List["_aws_cdk_aws_iam_ceddda9d.ManagedPolicy"]], result)
 
     @builtins.property
     def debug_image_pipeline(self) -> typing.Optional[builtins.bool]:
@@ -2395,65 +2188,54 @@ class StartStateMachineFunction(
 
     def __init__(
         self,
-        scope: _constructs_77d1e7e8.Construct,
+        scope: "_constructs_77d1e7e8.Construct",
         id: builtins.str,
         *,
-        adot_instrumentation: typing.Optional[typing.Union[_aws_cdk_aws_lambda_ceddda9d.AdotInstrumentationConfig, typing.Dict[builtins.str, typing.Any]]] = None,
+        adot_instrumentation: typing.Optional[typing.Union["_aws_cdk_aws_lambda_ceddda9d.AdotInstrumentationConfig", typing.Dict[builtins.str, typing.Any]]] = None,
         allow_all_outbound: typing.Optional[builtins.bool] = None,
         allow_public_subnet: typing.Optional[builtins.bool] = None,
-        application_log_level: typing.Optional[builtins.str] = None,
-        application_log_level_v2: typing.Optional[_aws_cdk_aws_lambda_ceddda9d.ApplicationLogLevel] = None,
-        architecture: typing.Optional[_aws_cdk_aws_lambda_ceddda9d.Architecture] = None,
-        code_signing_config: typing.Optional[_aws_cdk_aws_lambda_ceddda9d.ICodeSigningConfig] = None,
-        current_version_options: typing.Optional[typing.Union[_aws_cdk_aws_lambda_ceddda9d.VersionOptions, typing.Dict[builtins.str, typing.Any]]] = None,
-        dead_letter_queue: typing.Optional[_aws_cdk_aws_sqs_ceddda9d.IQueue] = None,
+        architecture: typing.Optional["_aws_cdk_aws_lambda_ceddda9d.Architecture"] = None,
+        code_signing_config: typing.Optional["_aws_cdk_aws_lambda_ceddda9d.ICodeSigningConfig"] = None,
+        current_version_options: typing.Optional[typing.Union["_aws_cdk_aws_lambda_ceddda9d.VersionOptions", typing.Dict[builtins.str, typing.Any]]] = None,
+        dead_letter_queue: typing.Optional["_aws_cdk_aws_sqs_ceddda9d.IQueue"] = None,
         dead_letter_queue_enabled: typing.Optional[builtins.bool] = None,
-        dead_letter_topic: typing.Optional[_aws_cdk_aws_sns_ceddda9d.ITopic] = None,
+        dead_letter_topic: typing.Optional["_aws_cdk_aws_sns_ceddda9d.ITopic"] = None,
         description: typing.Optional[builtins.str] = None,
         environment: typing.Optional[typing.Mapping[builtins.str, builtins.str]] = None,
-        environment_encryption: typing.Optional[_aws_cdk_aws_kms_ceddda9d.IKey] = None,
-        ephemeral_storage_size: typing.Optional[_aws_cdk_ceddda9d.Size] = None,
-        events: typing.Optional[typing.Sequence[_aws_cdk_aws_lambda_ceddda9d.IEventSource]] = None,
-        filesystem: typing.Optional[_aws_cdk_aws_lambda_ceddda9d.FileSystem] = None,
+        environment_encryption: typing.Optional["_aws_cdk_aws_kms_ceddda9d.IKey"] = None,
+        ephemeral_storage_size: typing.Optional["_aws_cdk_ceddda9d.Size"] = None,
+        events: typing.Optional[typing.Sequence["_aws_cdk_aws_lambda_ceddda9d.IEventSource"]] = None,
+        filesystem: typing.Optional["_aws_cdk_aws_lambda_ceddda9d.FileSystem"] = None,
         function_name: typing.Optional[builtins.str] = None,
-        initial_policy: typing.Optional[typing.Sequence[_aws_cdk_aws_iam_ceddda9d.PolicyStatement]] = None,
-        insights_version: typing.Optional[_aws_cdk_aws_lambda_ceddda9d.LambdaInsightsVersion] = None,
-        ipv6_allowed_for_dual_stack: typing.Optional[builtins.bool] = None,
-        layers: typing.Optional[typing.Sequence[_aws_cdk_aws_lambda_ceddda9d.ILayerVersion]] = None,
-        log_format: typing.Optional[builtins.str] = None,
-        logging_format: typing.Optional[_aws_cdk_aws_lambda_ceddda9d.LoggingFormat] = None,
-        log_group: typing.Optional[_aws_cdk_aws_logs_ceddda9d.ILogGroup] = None,
-        log_retention: typing.Optional[_aws_cdk_aws_logs_ceddda9d.RetentionDays] = None,
-        log_retention_retry_options: typing.Optional[typing.Union[_aws_cdk_aws_lambda_ceddda9d.LogRetentionRetryOptions, typing.Dict[builtins.str, typing.Any]]] = None,
-        log_retention_role: typing.Optional[_aws_cdk_aws_iam_ceddda9d.IRole] = None,
+        initial_policy: typing.Optional[typing.Sequence["_aws_cdk_aws_iam_ceddda9d.PolicyStatement"]] = None,
+        insights_version: typing.Optional["_aws_cdk_aws_lambda_ceddda9d.LambdaInsightsVersion"] = None,
+        layers: typing.Optional[typing.Sequence["_aws_cdk_aws_lambda_ceddda9d.ILayerVersion"]] = None,
+        log_retention: typing.Optional["_aws_cdk_aws_logs_ceddda9d.RetentionDays"] = None,
+        log_retention_retry_options: typing.Optional[typing.Union["_aws_cdk_aws_lambda_ceddda9d.LogRetentionRetryOptions", typing.Dict[builtins.str, typing.Any]]] = None,
+        log_retention_role: typing.Optional["_aws_cdk_aws_iam_ceddda9d.IRole"] = None,
         memory_size: typing.Optional[jsii.Number] = None,
-        params_and_secrets: typing.Optional[_aws_cdk_aws_lambda_ceddda9d.ParamsAndSecretsLayerVersion] = None,
+        params_and_secrets: typing.Optional["_aws_cdk_aws_lambda_ceddda9d.ParamsAndSecretsLayerVersion"] = None,
         profiling: typing.Optional[builtins.bool] = None,
-        profiling_group: typing.Optional[_aws_cdk_aws_codeguruprofiler_ceddda9d.IProfilingGroup] = None,
+        profiling_group: typing.Optional["_aws_cdk_aws_codeguruprofiler_ceddda9d.IProfilingGroup"] = None,
         reserved_concurrent_executions: typing.Optional[jsii.Number] = None,
-        role: typing.Optional[_aws_cdk_aws_iam_ceddda9d.IRole] = None,
-        runtime_management_mode: typing.Optional[_aws_cdk_aws_lambda_ceddda9d.RuntimeManagementMode] = None,
-        security_groups: typing.Optional[typing.Sequence[_aws_cdk_aws_ec2_ceddda9d.ISecurityGroup]] = None,
-        snap_start: typing.Optional[_aws_cdk_aws_lambda_ceddda9d.SnapStartConf] = None,
-        system_log_level: typing.Optional[builtins.str] = None,
-        system_log_level_v2: typing.Optional[_aws_cdk_aws_lambda_ceddda9d.SystemLogLevel] = None,
-        timeout: typing.Optional[_aws_cdk_ceddda9d.Duration] = None,
-        tracing: typing.Optional[_aws_cdk_aws_lambda_ceddda9d.Tracing] = None,
-        vpc: typing.Optional[_aws_cdk_aws_ec2_ceddda9d.IVpc] = None,
-        vpc_subnets: typing.Optional[typing.Union[_aws_cdk_aws_ec2_ceddda9d.SubnetSelection, typing.Dict[builtins.str, typing.Any]]] = None,
-        max_event_age: typing.Optional[_aws_cdk_ceddda9d.Duration] = None,
-        on_failure: typing.Optional[_aws_cdk_aws_lambda_ceddda9d.IDestination] = None,
-        on_success: typing.Optional[_aws_cdk_aws_lambda_ceddda9d.IDestination] = None,
+        role: typing.Optional["_aws_cdk_aws_iam_ceddda9d.IRole"] = None,
+        runtime_management_mode: typing.Optional["_aws_cdk_aws_lambda_ceddda9d.RuntimeManagementMode"] = None,
+        security_groups: typing.Optional[typing.Sequence["_aws_cdk_aws_ec2_ceddda9d.ISecurityGroup"]] = None,
+        timeout: typing.Optional["_aws_cdk_ceddda9d.Duration"] = None,
+        tracing: typing.Optional["_aws_cdk_aws_lambda_ceddda9d.Tracing"] = None,
+        vpc: typing.Optional["_aws_cdk_aws_ec2_ceddda9d.IVpc"] = None,
+        vpc_subnets: typing.Optional[typing.Union["_aws_cdk_aws_ec2_ceddda9d.SubnetSelection", typing.Dict[builtins.str, typing.Any]]] = None,
+        max_event_age: typing.Optional["_aws_cdk_ceddda9d.Duration"] = None,
+        on_failure: typing.Optional["_aws_cdk_aws_lambda_ceddda9d.IDestination"] = None,
+        on_success: typing.Optional["_aws_cdk_aws_lambda_ceddda9d.IDestination"] = None,
         retry_attempts: typing.Optional[jsii.Number] = None,
     ) -> None:
         '''
         :param scope: -
         :param id: -
         :param adot_instrumentation: Specify the configuration of AWS Distro for OpenTelemetry (ADOT) instrumentation. Default: - No ADOT instrumentation
-        :param allow_all_outbound: Whether to allow the Lambda to send all network traffic. If set to false, you must individually add traffic rules to allow the Lambda to connect to network targets. Do not specify this property if the ``securityGroups`` or ``securityGroup`` property is set. Instead, configure ``allowAllOutbound`` directly on the security group. Default: true
+        :param allow_all_outbound: Whether to allow the Lambda to send all network traffic. If set to false, you must individually add traffic rules to allow the Lambda to connect to network targets. Default: true
         :param allow_public_subnet: Lambda Functions in a public subnet can NOT access the internet. Use this property to acknowledge this limitation and still place the function in a public subnet. Default: false
-        :param application_log_level: (deprecated) Sets the application log level for the function. Default: "INFO"
-        :param application_log_level_v2: Sets the application log level for the function. Default: ApplicationLogLevel.INFO
         :param architecture: The system architectures compatible with this lambda function. Default: Architecture.X86_64
         :param code_signing_config: Code signing config associated with this function. Default: - Not Sign the Code
         :param current_version_options: Options for the ``lambda.Version`` resource automatically created by the ``fn.currentVersion`` method. Default: - default options as described in ``VersionOptions``
@@ -2469,14 +2251,10 @@ class StartStateMachineFunction(
         :param function_name: A name for the function. Default: - AWS CloudFormation generates a unique physical ID and uses that ID for the function's name. For more information, see Name Type.
         :param initial_policy: Initial policy statements to add to the created Lambda Role. You can call ``addToRolePolicy`` to the created lambda to add statements post creation. Default: - No policy statements are added to the created Lambda role.
         :param insights_version: Specify the version of CloudWatch Lambda insights to use for monitoring. Default: - No Lambda Insights
-        :param ipv6_allowed_for_dual_stack: Allows outbound IPv6 traffic on VPC functions that are connected to dual-stack subnets. Only used if 'vpc' is supplied. Default: false
         :param layers: A list of layers to add to the function's execution environment. You can configure your Lambda function to pull in additional code during initialization in the form of layers. Layers are packages of libraries or other dependencies that can be used by multiple functions. Default: - No layers.
-        :param log_format: (deprecated) Sets the logFormat for the function. Default: "Text"
-        :param logging_format: Sets the loggingFormat for the function. Default: LoggingFormat.TEXT
-        :param log_group: The log group the function sends logs to. By default, Lambda functions send logs to an automatically created default log group named /aws/lambda/<function name>. However you cannot change the properties of this auto-created log group using the AWS CDK, e.g. you cannot set a different log retention. Use the ``logGroup`` property to create a fully customizable LogGroup ahead of time, and instruct the Lambda function to send logs to it. Providing a user-controlled log group was rolled out to commercial regions on 2023-11-16. If you are deploying to another type of region, please check regional availability first. Default: ``/aws/lambda/${this.functionName}`` - default log group created by Lambda
-        :param log_retention: The number of days log events are kept in CloudWatch Logs. When updating this property, unsetting it doesn't remove the log retention policy. To remove the retention policy, set the value to ``INFINITE``. This is a legacy API and we strongly recommend you move away from it if you can. Instead create a fully customizable log group with ``logs.LogGroup`` and use the ``logGroup`` property to instruct the Lambda function to send logs to it. Migrating from ``logRetention`` to ``logGroup`` will cause the name of the log group to change. Users and code and referencing the name verbatim will have to adjust. In AWS CDK code, you can access the log group name directly from the LogGroup construct:: import * as logs from 'aws-cdk-lib/aws-logs'; declare const myLogGroup: logs.LogGroup; myLogGroup.logGroupName; Default: logs.RetentionDays.INFINITE
-        :param log_retention_retry_options: When log retention is specified, a custom resource attempts to create the CloudWatch log group. These options control the retry policy when interacting with CloudWatch APIs. This is a legacy API and we strongly recommend you migrate to ``logGroup`` if you can. ``logGroup`` allows you to create a fully customizable log group and instruct the Lambda function to send logs to it. Default: - Default AWS SDK retry options.
-        :param log_retention_role: The IAM role for the Lambda function associated with the custom resource that sets the retention policy. This is a legacy API and we strongly recommend you migrate to ``logGroup`` if you can. ``logGroup`` allows you to create a fully customizable log group and instruct the Lambda function to send logs to it. Default: - A new role is created.
+        :param log_retention: The number of days log events are kept in CloudWatch Logs. When updating this property, unsetting it doesn't remove the log retention policy. To remove the retention policy, set the value to ``INFINITE``. Default: logs.RetentionDays.INFINITE
+        :param log_retention_retry_options: When log retention is specified, a custom resource attempts to create the CloudWatch log group. These options control the retry policy when interacting with CloudWatch APIs. Default: - Default AWS SDK retry options.
+        :param log_retention_role: The IAM role for the Lambda function associated with the custom resource that sets the retention policy. Default: - A new role is created.
         :param memory_size: The amount of memory, in MB, that is allocated to your Lambda function. Lambda uses this value to proportionally allocate the amount of CPU power. For more information, see Resource Model in the AWS Lambda Developer Guide. Default: 128
         :param params_and_secrets: Specify the configuration of Parameters and Secrets Extension. Default: - No Parameters and Secrets Extension
         :param profiling: Enable profiling. Default: - No profiling.
@@ -2485,9 +2263,6 @@ class StartStateMachineFunction(
         :param role: Lambda execution role. This is the role that will be assumed by the function upon execution. It controls the permissions that the function will have. The Role must be assumable by the 'lambda.amazonaws.com' service principal. The default Role automatically has permissions granted for Lambda execution. If you provide a Role, you must add the relevant AWS managed policies yourself. The relevant managed policies are "service-role/AWSLambdaBasicExecutionRole" and "service-role/AWSLambdaVPCAccessExecutionRole". Default: - A unique role will be generated for this lambda function. Both supplied and generated roles can always be changed by calling ``addToRolePolicy``.
         :param runtime_management_mode: Sets the runtime management configuration for a function's version. Default: Auto
         :param security_groups: The list of security groups to associate with the Lambda's network interfaces. Only used if 'vpc' is supplied. Default: - If the function is placed within a VPC and a security group is not specified, either by this or securityGroup prop, a dedicated security group will be created for this function.
-        :param snap_start: Enable SnapStart for Lambda Function. SnapStart is currently supported only for Java 11, 17 runtime Default: - No snapstart
-        :param system_log_level: (deprecated) Sets the system log level for the function. Default: "INFO"
-        :param system_log_level_v2: Sets the system log level for the function. Default: SystemLogLevel.INFO
         :param timeout: The function execution time (in seconds) after which Lambda terminates the function. Because the execution time affects cost, set this value based on the function's expected execution time. Default: Duration.seconds(3)
         :param tracing: Enable AWS X-Ray Tracing for Lambda Function. Default: Tracing.Disabled
         :param vpc: VPC network to place Lambda network interfaces. Specify this if the Lambda function needs to access resources in a VPC. This is required when ``vpcSubnets`` is specified. Default: - Function is not placed within a VPC.
@@ -2505,8 +2280,6 @@ class StartStateMachineFunction(
             adot_instrumentation=adot_instrumentation,
             allow_all_outbound=allow_all_outbound,
             allow_public_subnet=allow_public_subnet,
-            application_log_level=application_log_level,
-            application_log_level_v2=application_log_level_v2,
             architecture=architecture,
             code_signing_config=code_signing_config,
             current_version_options=current_version_options,
@@ -2522,11 +2295,7 @@ class StartStateMachineFunction(
             function_name=function_name,
             initial_policy=initial_policy,
             insights_version=insights_version,
-            ipv6_allowed_for_dual_stack=ipv6_allowed_for_dual_stack,
             layers=layers,
-            log_format=log_format,
-            logging_format=logging_format,
-            log_group=log_group,
             log_retention=log_retention,
             log_retention_retry_options=log_retention_retry_options,
             log_retention_role=log_retention_role,
@@ -2538,9 +2307,6 @@ class StartStateMachineFunction(
             role=role,
             runtime_management_mode=runtime_management_mode,
             security_groups=security_groups,
-            snap_start=snap_start,
-            system_log_level=system_log_level,
-            system_log_level_v2=system_log_level_v2,
             timeout=timeout,
             tracing=tracing,
             vpc=vpc,
@@ -2565,8 +2331,6 @@ class StartStateMachineFunction(
         "adot_instrumentation": "adotInstrumentation",
         "allow_all_outbound": "allowAllOutbound",
         "allow_public_subnet": "allowPublicSubnet",
-        "application_log_level": "applicationLogLevel",
-        "application_log_level_v2": "applicationLogLevelV2",
         "architecture": "architecture",
         "code_signing_config": "codeSigningConfig",
         "current_version_options": "currentVersionOptions",
@@ -2582,11 +2346,7 @@ class StartStateMachineFunction(
         "function_name": "functionName",
         "initial_policy": "initialPolicy",
         "insights_version": "insightsVersion",
-        "ipv6_allowed_for_dual_stack": "ipv6AllowedForDualStack",
         "layers": "layers",
-        "log_format": "logFormat",
-        "logging_format": "loggingFormat",
-        "log_group": "logGroup",
         "log_retention": "logRetention",
         "log_retention_retry_options": "logRetentionRetryOptions",
         "log_retention_role": "logRetentionRole",
@@ -2598,9 +2358,6 @@ class StartStateMachineFunction(
         "role": "role",
         "runtime_management_mode": "runtimeManagementMode",
         "security_groups": "securityGroups",
-        "snap_start": "snapStart",
-        "system_log_level": "systemLogLevel",
-        "system_log_level_v2": "systemLogLevelV2",
         "timeout": "timeout",
         "tracing": "tracing",
         "vpc": "vpc",
@@ -2611,53 +2368,44 @@ class StartStateMachineFunctionProps(_aws_cdk_aws_lambda_ceddda9d.FunctionOption
     def __init__(
         self,
         *,
-        max_event_age: typing.Optional[_aws_cdk_ceddda9d.Duration] = None,
-        on_failure: typing.Optional[_aws_cdk_aws_lambda_ceddda9d.IDestination] = None,
-        on_success: typing.Optional[_aws_cdk_aws_lambda_ceddda9d.IDestination] = None,
+        max_event_age: typing.Optional["_aws_cdk_ceddda9d.Duration"] = None,
+        on_failure: typing.Optional["_aws_cdk_aws_lambda_ceddda9d.IDestination"] = None,
+        on_success: typing.Optional["_aws_cdk_aws_lambda_ceddda9d.IDestination"] = None,
         retry_attempts: typing.Optional[jsii.Number] = None,
-        adot_instrumentation: typing.Optional[typing.Union[_aws_cdk_aws_lambda_ceddda9d.AdotInstrumentationConfig, typing.Dict[builtins.str, typing.Any]]] = None,
+        adot_instrumentation: typing.Optional[typing.Union["_aws_cdk_aws_lambda_ceddda9d.AdotInstrumentationConfig", typing.Dict[builtins.str, typing.Any]]] = None,
         allow_all_outbound: typing.Optional[builtins.bool] = None,
         allow_public_subnet: typing.Optional[builtins.bool] = None,
-        application_log_level: typing.Optional[builtins.str] = None,
-        application_log_level_v2: typing.Optional[_aws_cdk_aws_lambda_ceddda9d.ApplicationLogLevel] = None,
-        architecture: typing.Optional[_aws_cdk_aws_lambda_ceddda9d.Architecture] = None,
-        code_signing_config: typing.Optional[_aws_cdk_aws_lambda_ceddda9d.ICodeSigningConfig] = None,
-        current_version_options: typing.Optional[typing.Union[_aws_cdk_aws_lambda_ceddda9d.VersionOptions, typing.Dict[builtins.str, typing.Any]]] = None,
-        dead_letter_queue: typing.Optional[_aws_cdk_aws_sqs_ceddda9d.IQueue] = None,
+        architecture: typing.Optional["_aws_cdk_aws_lambda_ceddda9d.Architecture"] = None,
+        code_signing_config: typing.Optional["_aws_cdk_aws_lambda_ceddda9d.ICodeSigningConfig"] = None,
+        current_version_options: typing.Optional[typing.Union["_aws_cdk_aws_lambda_ceddda9d.VersionOptions", typing.Dict[builtins.str, typing.Any]]] = None,
+        dead_letter_queue: typing.Optional["_aws_cdk_aws_sqs_ceddda9d.IQueue"] = None,
         dead_letter_queue_enabled: typing.Optional[builtins.bool] = None,
-        dead_letter_topic: typing.Optional[_aws_cdk_aws_sns_ceddda9d.ITopic] = None,
+        dead_letter_topic: typing.Optional["_aws_cdk_aws_sns_ceddda9d.ITopic"] = None,
         description: typing.Optional[builtins.str] = None,
         environment: typing.Optional[typing.Mapping[builtins.str, builtins.str]] = None,
-        environment_encryption: typing.Optional[_aws_cdk_aws_kms_ceddda9d.IKey] = None,
-        ephemeral_storage_size: typing.Optional[_aws_cdk_ceddda9d.Size] = None,
-        events: typing.Optional[typing.Sequence[_aws_cdk_aws_lambda_ceddda9d.IEventSource]] = None,
-        filesystem: typing.Optional[_aws_cdk_aws_lambda_ceddda9d.FileSystem] = None,
+        environment_encryption: typing.Optional["_aws_cdk_aws_kms_ceddda9d.IKey"] = None,
+        ephemeral_storage_size: typing.Optional["_aws_cdk_ceddda9d.Size"] = None,
+        events: typing.Optional[typing.Sequence["_aws_cdk_aws_lambda_ceddda9d.IEventSource"]] = None,
+        filesystem: typing.Optional["_aws_cdk_aws_lambda_ceddda9d.FileSystem"] = None,
         function_name: typing.Optional[builtins.str] = None,
-        initial_policy: typing.Optional[typing.Sequence[_aws_cdk_aws_iam_ceddda9d.PolicyStatement]] = None,
-        insights_version: typing.Optional[_aws_cdk_aws_lambda_ceddda9d.LambdaInsightsVersion] = None,
-        ipv6_allowed_for_dual_stack: typing.Optional[builtins.bool] = None,
-        layers: typing.Optional[typing.Sequence[_aws_cdk_aws_lambda_ceddda9d.ILayerVersion]] = None,
-        log_format: typing.Optional[builtins.str] = None,
-        logging_format: typing.Optional[_aws_cdk_aws_lambda_ceddda9d.LoggingFormat] = None,
-        log_group: typing.Optional[_aws_cdk_aws_logs_ceddda9d.ILogGroup] = None,
-        log_retention: typing.Optional[_aws_cdk_aws_logs_ceddda9d.RetentionDays] = None,
-        log_retention_retry_options: typing.Optional[typing.Union[_aws_cdk_aws_lambda_ceddda9d.LogRetentionRetryOptions, typing.Dict[builtins.str, typing.Any]]] = None,
-        log_retention_role: typing.Optional[_aws_cdk_aws_iam_ceddda9d.IRole] = None,
+        initial_policy: typing.Optional[typing.Sequence["_aws_cdk_aws_iam_ceddda9d.PolicyStatement"]] = None,
+        insights_version: typing.Optional["_aws_cdk_aws_lambda_ceddda9d.LambdaInsightsVersion"] = None,
+        layers: typing.Optional[typing.Sequence["_aws_cdk_aws_lambda_ceddda9d.ILayerVersion"]] = None,
+        log_retention: typing.Optional["_aws_cdk_aws_logs_ceddda9d.RetentionDays"] = None,
+        log_retention_retry_options: typing.Optional[typing.Union["_aws_cdk_aws_lambda_ceddda9d.LogRetentionRetryOptions", typing.Dict[builtins.str, typing.Any]]] = None,
+        log_retention_role: typing.Optional["_aws_cdk_aws_iam_ceddda9d.IRole"] = None,
         memory_size: typing.Optional[jsii.Number] = None,
-        params_and_secrets: typing.Optional[_aws_cdk_aws_lambda_ceddda9d.ParamsAndSecretsLayerVersion] = None,
+        params_and_secrets: typing.Optional["_aws_cdk_aws_lambda_ceddda9d.ParamsAndSecretsLayerVersion"] = None,
         profiling: typing.Optional[builtins.bool] = None,
-        profiling_group: typing.Optional[_aws_cdk_aws_codeguruprofiler_ceddda9d.IProfilingGroup] = None,
+        profiling_group: typing.Optional["_aws_cdk_aws_codeguruprofiler_ceddda9d.IProfilingGroup"] = None,
         reserved_concurrent_executions: typing.Optional[jsii.Number] = None,
-        role: typing.Optional[_aws_cdk_aws_iam_ceddda9d.IRole] = None,
-        runtime_management_mode: typing.Optional[_aws_cdk_aws_lambda_ceddda9d.RuntimeManagementMode] = None,
-        security_groups: typing.Optional[typing.Sequence[_aws_cdk_aws_ec2_ceddda9d.ISecurityGroup]] = None,
-        snap_start: typing.Optional[_aws_cdk_aws_lambda_ceddda9d.SnapStartConf] = None,
-        system_log_level: typing.Optional[builtins.str] = None,
-        system_log_level_v2: typing.Optional[_aws_cdk_aws_lambda_ceddda9d.SystemLogLevel] = None,
-        timeout: typing.Optional[_aws_cdk_ceddda9d.Duration] = None,
-        tracing: typing.Optional[_aws_cdk_aws_lambda_ceddda9d.Tracing] = None,
-        vpc: typing.Optional[_aws_cdk_aws_ec2_ceddda9d.IVpc] = None,
-        vpc_subnets: typing.Optional[typing.Union[_aws_cdk_aws_ec2_ceddda9d.SubnetSelection, typing.Dict[builtins.str, typing.Any]]] = None,
+        role: typing.Optional["_aws_cdk_aws_iam_ceddda9d.IRole"] = None,
+        runtime_management_mode: typing.Optional["_aws_cdk_aws_lambda_ceddda9d.RuntimeManagementMode"] = None,
+        security_groups: typing.Optional[typing.Sequence["_aws_cdk_aws_ec2_ceddda9d.ISecurityGroup"]] = None,
+        timeout: typing.Optional["_aws_cdk_ceddda9d.Duration"] = None,
+        tracing: typing.Optional["_aws_cdk_aws_lambda_ceddda9d.Tracing"] = None,
+        vpc: typing.Optional["_aws_cdk_aws_ec2_ceddda9d.IVpc"] = None,
+        vpc_subnets: typing.Optional[typing.Union["_aws_cdk_aws_ec2_ceddda9d.SubnetSelection", typing.Dict[builtins.str, typing.Any]]] = None,
     ) -> None:
         '''Props for StartStateMachineFunction.
 
@@ -2666,10 +2414,8 @@ class StartStateMachineFunctionProps(_aws_cdk_aws_lambda_ceddda9d.FunctionOption
         :param on_success: The destination for successful invocations. Default: - no destination
         :param retry_attempts: The maximum number of times to retry when the function returns an error. Minimum: 0 Maximum: 2 Default: 2
         :param adot_instrumentation: Specify the configuration of AWS Distro for OpenTelemetry (ADOT) instrumentation. Default: - No ADOT instrumentation
-        :param allow_all_outbound: Whether to allow the Lambda to send all network traffic. If set to false, you must individually add traffic rules to allow the Lambda to connect to network targets. Do not specify this property if the ``securityGroups`` or ``securityGroup`` property is set. Instead, configure ``allowAllOutbound`` directly on the security group. Default: true
+        :param allow_all_outbound: Whether to allow the Lambda to send all network traffic. If set to false, you must individually add traffic rules to allow the Lambda to connect to network targets. Default: true
         :param allow_public_subnet: Lambda Functions in a public subnet can NOT access the internet. Use this property to acknowledge this limitation and still place the function in a public subnet. Default: false
-        :param application_log_level: (deprecated) Sets the application log level for the function. Default: "INFO"
-        :param application_log_level_v2: Sets the application log level for the function. Default: ApplicationLogLevel.INFO
         :param architecture: The system architectures compatible with this lambda function. Default: Architecture.X86_64
         :param code_signing_config: Code signing config associated with this function. Default: - Not Sign the Code
         :param current_version_options: Options for the ``lambda.Version`` resource automatically created by the ``fn.currentVersion`` method. Default: - default options as described in ``VersionOptions``
@@ -2685,14 +2431,10 @@ class StartStateMachineFunctionProps(_aws_cdk_aws_lambda_ceddda9d.FunctionOption
         :param function_name: A name for the function. Default: - AWS CloudFormation generates a unique physical ID and uses that ID for the function's name. For more information, see Name Type.
         :param initial_policy: Initial policy statements to add to the created Lambda Role. You can call ``addToRolePolicy`` to the created lambda to add statements post creation. Default: - No policy statements are added to the created Lambda role.
         :param insights_version: Specify the version of CloudWatch Lambda insights to use for monitoring. Default: - No Lambda Insights
-        :param ipv6_allowed_for_dual_stack: Allows outbound IPv6 traffic on VPC functions that are connected to dual-stack subnets. Only used if 'vpc' is supplied. Default: false
         :param layers: A list of layers to add to the function's execution environment. You can configure your Lambda function to pull in additional code during initialization in the form of layers. Layers are packages of libraries or other dependencies that can be used by multiple functions. Default: - No layers.
-        :param log_format: (deprecated) Sets the logFormat for the function. Default: "Text"
-        :param logging_format: Sets the loggingFormat for the function. Default: LoggingFormat.TEXT
-        :param log_group: The log group the function sends logs to. By default, Lambda functions send logs to an automatically created default log group named /aws/lambda/<function name>. However you cannot change the properties of this auto-created log group using the AWS CDK, e.g. you cannot set a different log retention. Use the ``logGroup`` property to create a fully customizable LogGroup ahead of time, and instruct the Lambda function to send logs to it. Providing a user-controlled log group was rolled out to commercial regions on 2023-11-16. If you are deploying to another type of region, please check regional availability first. Default: ``/aws/lambda/${this.functionName}`` - default log group created by Lambda
-        :param log_retention: The number of days log events are kept in CloudWatch Logs. When updating this property, unsetting it doesn't remove the log retention policy. To remove the retention policy, set the value to ``INFINITE``. This is a legacy API and we strongly recommend you move away from it if you can. Instead create a fully customizable log group with ``logs.LogGroup`` and use the ``logGroup`` property to instruct the Lambda function to send logs to it. Migrating from ``logRetention`` to ``logGroup`` will cause the name of the log group to change. Users and code and referencing the name verbatim will have to adjust. In AWS CDK code, you can access the log group name directly from the LogGroup construct:: import * as logs from 'aws-cdk-lib/aws-logs'; declare const myLogGroup: logs.LogGroup; myLogGroup.logGroupName; Default: logs.RetentionDays.INFINITE
-        :param log_retention_retry_options: When log retention is specified, a custom resource attempts to create the CloudWatch log group. These options control the retry policy when interacting with CloudWatch APIs. This is a legacy API and we strongly recommend you migrate to ``logGroup`` if you can. ``logGroup`` allows you to create a fully customizable log group and instruct the Lambda function to send logs to it. Default: - Default AWS SDK retry options.
-        :param log_retention_role: The IAM role for the Lambda function associated with the custom resource that sets the retention policy. This is a legacy API and we strongly recommend you migrate to ``logGroup`` if you can. ``logGroup`` allows you to create a fully customizable log group and instruct the Lambda function to send logs to it. Default: - A new role is created.
+        :param log_retention: The number of days log events are kept in CloudWatch Logs. When updating this property, unsetting it doesn't remove the log retention policy. To remove the retention policy, set the value to ``INFINITE``. Default: logs.RetentionDays.INFINITE
+        :param log_retention_retry_options: When log retention is specified, a custom resource attempts to create the CloudWatch log group. These options control the retry policy when interacting with CloudWatch APIs. Default: - Default AWS SDK retry options.
+        :param log_retention_role: The IAM role for the Lambda function associated with the custom resource that sets the retention policy. Default: - A new role is created.
         :param memory_size: The amount of memory, in MB, that is allocated to your Lambda function. Lambda uses this value to proportionally allocate the amount of CPU power. For more information, see Resource Model in the AWS Lambda Developer Guide. Default: 128
         :param params_and_secrets: Specify the configuration of Parameters and Secrets Extension. Default: - No Parameters and Secrets Extension
         :param profiling: Enable profiling. Default: - No profiling.
@@ -2701,9 +2443,6 @@ class StartStateMachineFunctionProps(_aws_cdk_aws_lambda_ceddda9d.FunctionOption
         :param role: Lambda execution role. This is the role that will be assumed by the function upon execution. It controls the permissions that the function will have. The Role must be assumable by the 'lambda.amazonaws.com' service principal. The default Role automatically has permissions granted for Lambda execution. If you provide a Role, you must add the relevant AWS managed policies yourself. The relevant managed policies are "service-role/AWSLambdaBasicExecutionRole" and "service-role/AWSLambdaVPCAccessExecutionRole". Default: - A unique role will be generated for this lambda function. Both supplied and generated roles can always be changed by calling ``addToRolePolicy``.
         :param runtime_management_mode: Sets the runtime management configuration for a function's version. Default: Auto
         :param security_groups: The list of security groups to associate with the Lambda's network interfaces. Only used if 'vpc' is supplied. Default: - If the function is placed within a VPC and a security group is not specified, either by this or securityGroup prop, a dedicated security group will be created for this function.
-        :param snap_start: Enable SnapStart for Lambda Function. SnapStart is currently supported only for Java 11, 17 runtime Default: - No snapstart
-        :param system_log_level: (deprecated) Sets the system log level for the function. Default: "INFO"
-        :param system_log_level_v2: Sets the system log level for the function. Default: SystemLogLevel.INFO
         :param timeout: The function execution time (in seconds) after which Lambda terminates the function. Because the execution time affects cost, set this value based on the function's expected execution time. Default: Duration.seconds(3)
         :param tracing: Enable AWS X-Ray Tracing for Lambda Function. Default: Tracing.Disabled
         :param vpc: VPC network to place Lambda network interfaces. Specify this if the Lambda function needs to access resources in a VPC. This is required when ``vpcSubnets`` is specified. Default: - Function is not placed within a VPC.
@@ -2726,8 +2465,6 @@ class StartStateMachineFunctionProps(_aws_cdk_aws_lambda_ceddda9d.FunctionOption
             check_type(argname="argument adot_instrumentation", value=adot_instrumentation, expected_type=type_hints["adot_instrumentation"])
             check_type(argname="argument allow_all_outbound", value=allow_all_outbound, expected_type=type_hints["allow_all_outbound"])
             check_type(argname="argument allow_public_subnet", value=allow_public_subnet, expected_type=type_hints["allow_public_subnet"])
-            check_type(argname="argument application_log_level", value=application_log_level, expected_type=type_hints["application_log_level"])
-            check_type(argname="argument application_log_level_v2", value=application_log_level_v2, expected_type=type_hints["application_log_level_v2"])
             check_type(argname="argument architecture", value=architecture, expected_type=type_hints["architecture"])
             check_type(argname="argument code_signing_config", value=code_signing_config, expected_type=type_hints["code_signing_config"])
             check_type(argname="argument current_version_options", value=current_version_options, expected_type=type_hints["current_version_options"])
@@ -2743,11 +2480,7 @@ class StartStateMachineFunctionProps(_aws_cdk_aws_lambda_ceddda9d.FunctionOption
             check_type(argname="argument function_name", value=function_name, expected_type=type_hints["function_name"])
             check_type(argname="argument initial_policy", value=initial_policy, expected_type=type_hints["initial_policy"])
             check_type(argname="argument insights_version", value=insights_version, expected_type=type_hints["insights_version"])
-            check_type(argname="argument ipv6_allowed_for_dual_stack", value=ipv6_allowed_for_dual_stack, expected_type=type_hints["ipv6_allowed_for_dual_stack"])
             check_type(argname="argument layers", value=layers, expected_type=type_hints["layers"])
-            check_type(argname="argument log_format", value=log_format, expected_type=type_hints["log_format"])
-            check_type(argname="argument logging_format", value=logging_format, expected_type=type_hints["logging_format"])
-            check_type(argname="argument log_group", value=log_group, expected_type=type_hints["log_group"])
             check_type(argname="argument log_retention", value=log_retention, expected_type=type_hints["log_retention"])
             check_type(argname="argument log_retention_retry_options", value=log_retention_retry_options, expected_type=type_hints["log_retention_retry_options"])
             check_type(argname="argument log_retention_role", value=log_retention_role, expected_type=type_hints["log_retention_role"])
@@ -2759,9 +2492,6 @@ class StartStateMachineFunctionProps(_aws_cdk_aws_lambda_ceddda9d.FunctionOption
             check_type(argname="argument role", value=role, expected_type=type_hints["role"])
             check_type(argname="argument runtime_management_mode", value=runtime_management_mode, expected_type=type_hints["runtime_management_mode"])
             check_type(argname="argument security_groups", value=security_groups, expected_type=type_hints["security_groups"])
-            check_type(argname="argument snap_start", value=snap_start, expected_type=type_hints["snap_start"])
-            check_type(argname="argument system_log_level", value=system_log_level, expected_type=type_hints["system_log_level"])
-            check_type(argname="argument system_log_level_v2", value=system_log_level_v2, expected_type=type_hints["system_log_level_v2"])
             check_type(argname="argument timeout", value=timeout, expected_type=type_hints["timeout"])
             check_type(argname="argument tracing", value=tracing, expected_type=type_hints["tracing"])
             check_type(argname="argument vpc", value=vpc, expected_type=type_hints["vpc"])
@@ -2781,10 +2511,6 @@ class StartStateMachineFunctionProps(_aws_cdk_aws_lambda_ceddda9d.FunctionOption
             self._values["allow_all_outbound"] = allow_all_outbound
         if allow_public_subnet is not None:
             self._values["allow_public_subnet"] = allow_public_subnet
-        if application_log_level is not None:
-            self._values["application_log_level"] = application_log_level
-        if application_log_level_v2 is not None:
-            self._values["application_log_level_v2"] = application_log_level_v2
         if architecture is not None:
             self._values["architecture"] = architecture
         if code_signing_config is not None:
@@ -2815,16 +2541,8 @@ class StartStateMachineFunctionProps(_aws_cdk_aws_lambda_ceddda9d.FunctionOption
             self._values["initial_policy"] = initial_policy
         if insights_version is not None:
             self._values["insights_version"] = insights_version
-        if ipv6_allowed_for_dual_stack is not None:
-            self._values["ipv6_allowed_for_dual_stack"] = ipv6_allowed_for_dual_stack
         if layers is not None:
             self._values["layers"] = layers
-        if log_format is not None:
-            self._values["log_format"] = log_format
-        if logging_format is not None:
-            self._values["logging_format"] = logging_format
-        if log_group is not None:
-            self._values["log_group"] = log_group
         if log_retention is not None:
             self._values["log_retention"] = log_retention
         if log_retention_retry_options is not None:
@@ -2847,12 +2565,6 @@ class StartStateMachineFunctionProps(_aws_cdk_aws_lambda_ceddda9d.FunctionOption
             self._values["runtime_management_mode"] = runtime_management_mode
         if security_groups is not None:
             self._values["security_groups"] = security_groups
-        if snap_start is not None:
-            self._values["snap_start"] = snap_start
-        if system_log_level is not None:
-            self._values["system_log_level"] = system_log_level
-        if system_log_level_v2 is not None:
-            self._values["system_log_level_v2"] = system_log_level_v2
         if timeout is not None:
             self._values["timeout"] = timeout
         if tracing is not None:
@@ -2863,7 +2575,7 @@ class StartStateMachineFunctionProps(_aws_cdk_aws_lambda_ceddda9d.FunctionOption
             self._values["vpc_subnets"] = vpc_subnets
 
     @builtins.property
-    def max_event_age(self) -> typing.Optional[_aws_cdk_ceddda9d.Duration]:
+    def max_event_age(self) -> typing.Optional["_aws_cdk_ceddda9d.Duration"]:
         '''The maximum age of a request that Lambda sends to a function for processing.
 
         Minimum: 60 seconds
@@ -2872,25 +2584,29 @@ class StartStateMachineFunctionProps(_aws_cdk_aws_lambda_ceddda9d.FunctionOption
         :default: Duration.hours(6)
         '''
         result = self._values.get("max_event_age")
-        return typing.cast(typing.Optional[_aws_cdk_ceddda9d.Duration], result)
+        return typing.cast(typing.Optional["_aws_cdk_ceddda9d.Duration"], result)
 
     @builtins.property
-    def on_failure(self) -> typing.Optional[_aws_cdk_aws_lambda_ceddda9d.IDestination]:
+    def on_failure(
+        self,
+    ) -> typing.Optional["_aws_cdk_aws_lambda_ceddda9d.IDestination"]:
         '''The destination for failed invocations.
 
         :default: - no destination
         '''
         result = self._values.get("on_failure")
-        return typing.cast(typing.Optional[_aws_cdk_aws_lambda_ceddda9d.IDestination], result)
+        return typing.cast(typing.Optional["_aws_cdk_aws_lambda_ceddda9d.IDestination"], result)
 
     @builtins.property
-    def on_success(self) -> typing.Optional[_aws_cdk_aws_lambda_ceddda9d.IDestination]:
+    def on_success(
+        self,
+    ) -> typing.Optional["_aws_cdk_aws_lambda_ceddda9d.IDestination"]:
         '''The destination for successful invocations.
 
         :default: - no destination
         '''
         result = self._values.get("on_success")
-        return typing.cast(typing.Optional[_aws_cdk_aws_lambda_ceddda9d.IDestination], result)
+        return typing.cast(typing.Optional["_aws_cdk_aws_lambda_ceddda9d.IDestination"], result)
 
     @builtins.property
     def retry_attempts(self) -> typing.Optional[jsii.Number]:
@@ -2907,7 +2623,7 @@ class StartStateMachineFunctionProps(_aws_cdk_aws_lambda_ceddda9d.FunctionOption
     @builtins.property
     def adot_instrumentation(
         self,
-    ) -> typing.Optional[_aws_cdk_aws_lambda_ceddda9d.AdotInstrumentationConfig]:
+    ) -> typing.Optional["_aws_cdk_aws_lambda_ceddda9d.AdotInstrumentationConfig"]:
         '''Specify the configuration of AWS Distro for OpenTelemetry (ADOT) instrumentation.
 
         :default: - No ADOT instrumentation
@@ -2915,7 +2631,7 @@ class StartStateMachineFunctionProps(_aws_cdk_aws_lambda_ceddda9d.FunctionOption
         :see: https://aws-otel.github.io/docs/getting-started/lambda
         '''
         result = self._values.get("adot_instrumentation")
-        return typing.cast(typing.Optional[_aws_cdk_aws_lambda_ceddda9d.AdotInstrumentationConfig], result)
+        return typing.cast(typing.Optional["_aws_cdk_aws_lambda_ceddda9d.AdotInstrumentationConfig"], result)
 
     @builtins.property
     def allow_all_outbound(self) -> typing.Optional[builtins.bool]:
@@ -2924,9 +2640,6 @@ class StartStateMachineFunctionProps(_aws_cdk_aws_lambda_ceddda9d.FunctionOption
         If set to false, you must individually add traffic rules to allow the
         Lambda to connect to network targets.
 
-        Do not specify this property if the ``securityGroups`` or ``securityGroup`` property is set.
-        Instead, configure ``allowAllOutbound`` directly on the security group.
-
         :default: true
         '''
         result = self._values.get("allow_all_outbound")
@@ -2945,65 +2658,41 @@ class StartStateMachineFunctionProps(_aws_cdk_aws_lambda_ceddda9d.FunctionOption
         result = self._values.get("allow_public_subnet")
         return typing.cast(typing.Optional[builtins.bool], result)
 
-    @builtins.property
-    def application_log_level(self) -> typing.Optional[builtins.str]:
-        '''(deprecated) Sets the application log level for the function.
-
-        :default: "INFO"
-
-        :deprecated: Use ``applicationLogLevelV2`` as a property instead.
-
-        :stability: deprecated
-        '''
-        result = self._values.get("application_log_level")
-        return typing.cast(typing.Optional[builtins.str], result)
-
-    @builtins.property
-    def application_log_level_v2(
-        self,
-    ) -> typing.Optional[_aws_cdk_aws_lambda_ceddda9d.ApplicationLogLevel]:
-        '''Sets the application log level for the function.
-
-        :default: ApplicationLogLevel.INFO
-        '''
-        result = self._values.get("application_log_level_v2")
-        return typing.cast(typing.Optional[_aws_cdk_aws_lambda_ceddda9d.ApplicationLogLevel], result)
-
     @builtins.property
     def architecture(
         self,
-    ) -> typing.Optional[_aws_cdk_aws_lambda_ceddda9d.Architecture]:
+    ) -> typing.Optional["_aws_cdk_aws_lambda_ceddda9d.Architecture"]:
         '''The system architectures compatible with this lambda function.
 
         :default: Architecture.X86_64
         '''
         result = self._values.get("architecture")
-        return typing.cast(typing.Optional[_aws_cdk_aws_lambda_ceddda9d.Architecture], result)
+        return typing.cast(typing.Optional["_aws_cdk_aws_lambda_ceddda9d.Architecture"], result)
 
     @builtins.property
     def code_signing_config(
         self,
-    ) -> typing.Optional[_aws_cdk_aws_lambda_ceddda9d.ICodeSigningConfig]:
+    ) -> typing.Optional["_aws_cdk_aws_lambda_ceddda9d.ICodeSigningConfig"]:
         '''Code signing config associated with this function.
 
         :default: - Not Sign the Code
         '''
         result = self._values.get("code_signing_config")
-        return typing.cast(typing.Optional[_aws_cdk_aws_lambda_ceddda9d.ICodeSigningConfig], result)
+        return typing.cast(typing.Optional["_aws_cdk_aws_lambda_ceddda9d.ICodeSigningConfig"], result)
 
     @builtins.property
     def current_version_options(
         self,
-    ) -> typing.Optional[_aws_cdk_aws_lambda_ceddda9d.VersionOptions]:
+    ) -> typing.Optional["_aws_cdk_aws_lambda_ceddda9d.VersionOptions"]:
         '''Options for the ``lambda.Version`` resource automatically created by the ``fn.currentVersion`` method.
 
         :default: - default options as described in ``VersionOptions``
         '''
         result = self._values.get("current_version_options")
-        return typing.cast(typing.Optional[_aws_cdk_aws_lambda_ceddda9d.VersionOptions], result)
+        return typing.cast(typing.Optional["_aws_cdk_aws_lambda_ceddda9d.VersionOptions"], result)
 
     @builtins.property
-    def dead_letter_queue(self) -> typing.Optional[_aws_cdk_aws_sqs_ceddda9d.IQueue]:
+    def dead_letter_queue(self) -> typing.Optional["_aws_cdk_aws_sqs_ceddda9d.IQueue"]:
         '''The SQS queue to use if DLQ is enabled.
 
         If SNS topic is desired, specify ``deadLetterTopic`` property instead.
@@ -3011,7 +2700,7 @@ class StartStateMachineFunctionProps(_aws_cdk_aws_lambda_ceddda9d.FunctionOption
         :default: - SQS queue with 14 day retention period if ``deadLetterQueueEnabled`` is ``true``
         '''
         result = self._values.get("dead_letter_queue")
-        return typing.cast(typing.Optional[_aws_cdk_aws_sqs_ceddda9d.IQueue], result)
+        return typing.cast(typing.Optional["_aws_cdk_aws_sqs_ceddda9d.IQueue"], result)
 
     @builtins.property
     def dead_letter_queue_enabled(self) -> typing.Optional[builtins.bool]:
@@ -3026,7 +2715,7 @@ class StartStateMachineFunctionProps(_aws_cdk_aws_lambda_ceddda9d.FunctionOption
         return typing.cast(typing.Optional[builtins.bool], result)
 
     @builtins.property
-    def dead_letter_topic(self) -> typing.Optional[_aws_cdk_aws_sns_ceddda9d.ITopic]:
+    def dead_letter_topic(self) -> typing.Optional["_aws_cdk_aws_sns_ceddda9d.ITopic"]:
         '''The SNS topic to use as a DLQ.
 
         Note that if ``deadLetterQueueEnabled`` is set to ``true``, an SQS queue will be created
@@ -3035,7 +2724,7 @@ class StartStateMachineFunctionProps(_aws_cdk_aws_lambda_ceddda9d.FunctionOption
         :default: - no SNS topic
         '''
         result = self._values.get("dead_letter_topic")
-        return typing.cast(typing.Optional[_aws_cdk_aws_sns_ceddda9d.ITopic], result)
+        return typing.cast(typing.Optional["_aws_cdk_aws_sns_ceddda9d.ITopic"], result)
 
     @builtins.property
     def description(self) -> typing.Optional[builtins.str]:
@@ -3062,27 +2751,29 @@ class StartStateMachineFunctionProps(_aws_cdk_aws_lambda_ceddda9d.FunctionOption
         return typing.cast(typing.Optional[typing.Mapping[builtins.str, builtins.str]], result)
 
     @builtins.property
-    def environment_encryption(self) -> typing.Optional[_aws_cdk_aws_kms_ceddda9d.IKey]:
+    def environment_encryption(
+        self,
+    ) -> typing.Optional["_aws_cdk_aws_kms_ceddda9d.IKey"]:
         '''The AWS KMS key that's used to encrypt your function's environment variables.
 
         :default: - AWS Lambda creates and uses an AWS managed customer master key (CMK).
         '''
         result = self._values.get("environment_encryption")
-        return typing.cast(typing.Optional[_aws_cdk_aws_kms_ceddda9d.IKey], result)
+        return typing.cast(typing.Optional["_aws_cdk_aws_kms_ceddda9d.IKey"], result)
 
     @builtins.property
-    def ephemeral_storage_size(self) -> typing.Optional[_aws_cdk_ceddda9d.Size]:
+    def ephemeral_storage_size(self) -> typing.Optional["_aws_cdk_ceddda9d.Size"]:
         '''The size of the function’s /tmp directory in MiB.
 
         :default: 512 MiB
         '''
         result = self._values.get("ephemeral_storage_size")
-        return typing.cast(typing.Optional[_aws_cdk_ceddda9d.Size], result)
+        return typing.cast(typing.Optional["_aws_cdk_ceddda9d.Size"], result)
 
     @builtins.property
     def events(
         self,
-    ) -> typing.Optional[typing.List[_aws_cdk_aws_lambda_ceddda9d.IEventSource]]:
+    ) -> typing.Optional[typing.List["_aws_cdk_aws_lambda_ceddda9d.IEventSource"]]:
         '''Event sources for this function.
 
         You can also add event sources using ``addEventSource``.
@@ -3090,16 +2781,16 @@ class StartStateMachineFunctionProps(_aws_cdk_aws_lambda_ceddda9d.FunctionOption
         :default: - No event sources.
         '''
         result = self._values.get("events")
-        return typing.cast(typing.Optional[typing.List[_aws_cdk_aws_lambda_ceddda9d.IEventSource]], result)
+        return typing.cast(typing.Optional[typing.List["_aws_cdk_aws_lambda_ceddda9d.IEventSource"]], result)
 
     @builtins.property
-    def filesystem(self) -> typing.Optional[_aws_cdk_aws_lambda_ceddda9d.FileSystem]:
+    def filesystem(self) -> typing.Optional["_aws_cdk_aws_lambda_ceddda9d.FileSystem"]:
         '''The filesystem configuration for the lambda function.
 
         :default: - will not mount any filesystem
         '''
         result = self._values.get("filesystem")
-        return typing.cast(typing.Optional[_aws_cdk_aws_lambda_ceddda9d.FileSystem], result)
+        return typing.cast(typing.Optional["_aws_cdk_aws_lambda_ceddda9d.FileSystem"], result)
 
     @builtins.property
     def function_name(self) -> typing.Optional[builtins.str]:
@@ -3116,7 +2807,7 @@ class StartStateMachineFunctionProps(_aws_cdk_aws_lambda_ceddda9d.FunctionOption
     @builtins.property
     def initial_policy(
         self,
-    ) -> typing.Optional[typing.List[_aws_cdk_aws_iam_ceddda9d.PolicyStatement]]:
+    ) -> typing.Optional[typing.List["_aws_cdk_aws_iam_ceddda9d.PolicyStatement"]]:
         '''Initial policy statements to add to the created Lambda Role.
 
         You can call ``addToRolePolicy`` to the created lambda to add statements post creation.
@@ -3124,12 +2815,12 @@ class StartStateMachineFunctionProps(_aws_cdk_aws_lambda_ceddda9d.FunctionOption
         :default: - No policy statements are added to the created Lambda role.
         '''
         result = self._values.get("initial_policy")
-        return typing.cast(typing.Optional[typing.List[_aws_cdk_aws_iam_ceddda9d.PolicyStatement]], result)
+        return typing.cast(typing.Optional[typing.List["_aws_cdk_aws_iam_ceddda9d.PolicyStatement"]], result)
 
     @builtins.property
     def insights_version(
         self,
-    ) -> typing.Optional[_aws_cdk_aws_lambda_ceddda9d.LambdaInsightsVersion]:
+    ) -> typing.Optional["_aws_cdk_aws_lambda_ceddda9d.LambdaInsightsVersion"]:
         '''Specify the version of CloudWatch Lambda insights to use for monitoring.
 
         :default: - No Lambda Insights
@@ -3137,23 +2828,12 @@ class StartStateMachineFunctionProps(_aws_cdk_aws_lambda_ceddda9d.FunctionOption
         :see: https://docs.aws.amazon.com/AmazonCloudWatch/latest/monitoring/Lambda-Insights-Getting-Started-docker.html
         '''
         result = self._values.get("insights_version")
-        return typing.cast(typing.Optional[_aws_cdk_aws_lambda_ceddda9d.LambdaInsightsVersion], result)
-
-    @builtins.property
-    def ipv6_allowed_for_dual_stack(self) -> typing.Optional[builtins.bool]:
-        '''Allows outbound IPv6 traffic on VPC functions that are connected to dual-stack subnets.
-
-        Only used if 'vpc' is supplied.
-
-        :default: false
-        '''
-        result = self._values.get("ipv6_allowed_for_dual_stack")
-        return typing.cast(typing.Optional[builtins.bool], result)
+        return typing.cast(typing.Optional["_aws_cdk_aws_lambda_ceddda9d.LambdaInsightsVersion"], result)
 
     @builtins.property
     def layers(
         self,
-    ) -> typing.Optional[typing.List[_aws_cdk_aws_lambda_ceddda9d.ILayerVersion]]:
+    ) -> typing.Optional[typing.List["_aws_cdk_aws_lambda_ceddda9d.ILayerVersion"]]:
         '''A list of layers to add to the function's execution environment.
 
         You can configure your Lambda function to pull in
@@ -3163,104 +2843,44 @@ class StartStateMachineFunctionProps(_aws_cdk_aws_lambda_ceddda9d.FunctionOption
         :default: - No layers.
         '''
         result = self._values.get("layers")
-        return typing.cast(typing.Optional[typing.List[_aws_cdk_aws_lambda_ceddda9d.ILayerVersion]], result)
-
-    @builtins.property
-    def log_format(self) -> typing.Optional[builtins.str]:
-        '''(deprecated) Sets the logFormat for the function.
-
-        :default: "Text"
-
-        :deprecated: Use ``loggingFormat`` as a property instead.
-
-        :stability: deprecated
-        '''
-        result = self._values.get("log_format")
-        return typing.cast(typing.Optional[builtins.str], result)
-
-    @builtins.property
-    def logging_format(
-        self,
-    ) -> typing.Optional[_aws_cdk_aws_lambda_ceddda9d.LoggingFormat]:
-        '''Sets the loggingFormat for the function.
-
-        :default: LoggingFormat.TEXT
-        '''
-        result = self._values.get("logging_format")
-        return typing.cast(typing.Optional[_aws_cdk_aws_lambda_ceddda9d.LoggingFormat], result)
-
-    @builtins.property
-    def log_group(self) -> typing.Optional[_aws_cdk_aws_logs_ceddda9d.ILogGroup]:
-        '''The log group the function sends logs to.
-
-        By default, Lambda functions send logs to an automatically created default log group named /aws/lambda/.
-        However you cannot change the properties of this auto-created log group using the AWS CDK, e.g. you cannot set a different log retention.
-
-        Use the ``logGroup`` property to create a fully customizable LogGroup ahead of time, and instruct the Lambda function to send logs to it.
-
-        Providing a user-controlled log group was rolled out to commercial regions on 2023-11-16.
-        If you are deploying to another type of region, please check regional availability first.
-
-        :default: ``/aws/lambda/${this.functionName}`` - default log group created by Lambda
-        '''
-        result = self._values.get("log_group")
-        return typing.cast(typing.Optional[_aws_cdk_aws_logs_ceddda9d.ILogGroup], result)
+        return typing.cast(typing.Optional[typing.List["_aws_cdk_aws_lambda_ceddda9d.ILayerVersion"]], result)
 
     @builtins.property
     def log_retention(
         self,
-    ) -> typing.Optional[_aws_cdk_aws_logs_ceddda9d.RetentionDays]:
+    ) -> typing.Optional["_aws_cdk_aws_logs_ceddda9d.RetentionDays"]:
         '''The number of days log events are kept in CloudWatch Logs.
 
         When updating
         this property, unsetting it doesn't remove the log retention policy. To
         remove the retention policy, set the value to ``INFINITE``.
 
-        This is a legacy API and we strongly recommend you move away from it if you can.
-        Instead create a fully customizable log group with ``logs.LogGroup`` and use the ``logGroup`` property
-        to instruct the Lambda function to send logs to it.
-        Migrating from ``logRetention`` to ``logGroup`` will cause the name of the log group to change.
-        Users and code and referencing the name verbatim will have to adjust.
-
-        In AWS CDK code, you can access the log group name directly from the LogGroup construct::
-
-           import * as logs from 'aws-cdk-lib/aws-logs';
-
-           declare const myLogGroup: logs.LogGroup;
-           myLogGroup.logGroupName;
-
         :default: logs.RetentionDays.INFINITE
         '''
         result = self._values.get("log_retention")
-        return typing.cast(typing.Optional[_aws_cdk_aws_logs_ceddda9d.RetentionDays], result)
+        return typing.cast(typing.Optional["_aws_cdk_aws_logs_ceddda9d.RetentionDays"], result)
 
     @builtins.property
     def log_retention_retry_options(
         self,
-    ) -> typing.Optional[_aws_cdk_aws_lambda_ceddda9d.LogRetentionRetryOptions]:
+    ) -> typing.Optional["_aws_cdk_aws_lambda_ceddda9d.LogRetentionRetryOptions"]:
         '''When log retention is specified, a custom resource attempts to create the CloudWatch log group.
 
         These options control the retry policy when interacting with CloudWatch APIs.
 
-        This is a legacy API and we strongly recommend you migrate to ``logGroup`` if you can.
-        ``logGroup`` allows you to create a fully customizable log group and instruct the Lambda function to send logs to it.
-
         :default: - Default AWS SDK retry options.
         '''
         result = self._values.get("log_retention_retry_options")
-        return typing.cast(typing.Optional[_aws_cdk_aws_lambda_ceddda9d.LogRetentionRetryOptions], result)
+        return typing.cast(typing.Optional["_aws_cdk_aws_lambda_ceddda9d.LogRetentionRetryOptions"], result)
 
     @builtins.property
-    def log_retention_role(self) -> typing.Optional[_aws_cdk_aws_iam_ceddda9d.IRole]:
+    def log_retention_role(self) -> typing.Optional["_aws_cdk_aws_iam_ceddda9d.IRole"]:
         '''The IAM role for the Lambda function associated with the custom resource that sets the retention policy.
 
-        This is a legacy API and we strongly recommend you migrate to ``logGroup`` if you can.
-        ``logGroup`` allows you to create a fully customizable log group and instruct the Lambda function to send logs to it.
-
         :default: - A new role is created.
         '''
         result = self._values.get("log_retention_role")
-        return typing.cast(typing.Optional[_aws_cdk_aws_iam_ceddda9d.IRole], result)
+        return typing.cast(typing.Optional["_aws_cdk_aws_iam_ceddda9d.IRole"], result)
 
     @builtins.property
     def memory_size(self) -> typing.Optional[jsii.Number]:
@@ -3278,7 +2898,7 @@ class StartStateMachineFunctionProps(_aws_cdk_aws_lambda_ceddda9d.FunctionOption
     @builtins.property
     def params_and_secrets(
         self,
-    ) -> typing.Optional[_aws_cdk_aws_lambda_ceddda9d.ParamsAndSecretsLayerVersion]:
+    ) -> typing.Optional["_aws_cdk_aws_lambda_ceddda9d.ParamsAndSecretsLayerVersion"]:
         '''Specify the configuration of Parameters and Secrets Extension.
 
         :default: - No Parameters and Secrets Extension
@@ -3286,7 +2906,7 @@ class StartStateMachineFunctionProps(_aws_cdk_aws_lambda_ceddda9d.FunctionOption
         :see: https://docs.aws.amazon.com/systems-manager/latest/userguide/ps-integration-lambda-extensions.html
         '''
         result = self._values.get("params_and_secrets")
-        return typing.cast(typing.Optional[_aws_cdk_aws_lambda_ceddda9d.ParamsAndSecretsLayerVersion], result)
+        return typing.cast(typing.Optional["_aws_cdk_aws_lambda_ceddda9d.ParamsAndSecretsLayerVersion"], result)
 
     @builtins.property
     def profiling(self) -> typing.Optional[builtins.bool]:
@@ -3302,7 +2922,7 @@ class StartStateMachineFunctionProps(_aws_cdk_aws_lambda_ceddda9d.FunctionOption
     @builtins.property
     def profiling_group(
         self,
-    ) -> typing.Optional[_aws_cdk_aws_codeguruprofiler_ceddda9d.IProfilingGroup]:
+    ) -> typing.Optional["_aws_cdk_aws_codeguruprofiler_ceddda9d.IProfilingGroup"]:
         '''Profiling Group.
 
         :default: - A new profiling group will be created if ``profiling`` is set.
@@ -3310,7 +2930,7 @@ class StartStateMachineFunctionProps(_aws_cdk_aws_lambda_ceddda9d.FunctionOption
         :see: https://docs.aws.amazon.com/codeguru/latest/profiler-ug/setting-up-lambda.html
         '''
         result = self._values.get("profiling_group")
-        return typing.cast(typing.Optional[_aws_cdk_aws_codeguruprofiler_ceddda9d.IProfilingGroup], result)
+        return typing.cast(typing.Optional["_aws_cdk_aws_codeguruprofiler_ceddda9d.IProfilingGroup"], result)
 
     @builtins.property
     def reserved_concurrent_executions(self) -> typing.Optional[jsii.Number]:
@@ -3324,7 +2944,7 @@ class StartStateMachineFunctionProps(_aws_cdk_aws_lambda_ceddda9d.FunctionOption
         return typing.cast(typing.Optional[jsii.Number], result)
 
     @builtins.property
-    def role(self) -> typing.Optional[_aws_cdk_aws_iam_ceddda9d.IRole]:
+    def role(self) -> typing.Optional["_aws_cdk_aws_iam_ceddda9d.IRole"]:
         '''Lambda execution role.
 
         This is the role that will be assumed by the function upon execution.
@@ -3343,23 +2963,23 @@ class StartStateMachineFunctionProps(_aws_cdk_aws_lambda_ceddda9d.FunctionOption
         Both supplied and generated roles can always be changed by calling ``addToRolePolicy``.
         '''
         result = self._values.get("role")
-        return typing.cast(typing.Optional[_aws_cdk_aws_iam_ceddda9d.IRole], result)
+        return typing.cast(typing.Optional["_aws_cdk_aws_iam_ceddda9d.IRole"], result)
 
     @builtins.property
     def runtime_management_mode(
         self,
-    ) -> typing.Optional[_aws_cdk_aws_lambda_ceddda9d.RuntimeManagementMode]:
+    ) -> typing.Optional["_aws_cdk_aws_lambda_ceddda9d.RuntimeManagementMode"]:
         '''Sets the runtime management configuration for a function's version.
 
         :default: Auto
         '''
         result = self._values.get("runtime_management_mode")
-        return typing.cast(typing.Optional[_aws_cdk_aws_lambda_ceddda9d.RuntimeManagementMode], result)
+        return typing.cast(typing.Optional["_aws_cdk_aws_lambda_ceddda9d.RuntimeManagementMode"], result)
 
     @builtins.property
     def security_groups(
         self,
-    ) -> typing.Optional[typing.List[_aws_cdk_aws_ec2_ceddda9d.ISecurityGroup]]:
+    ) -> typing.Optional[typing.List["_aws_cdk_aws_ec2_ceddda9d.ISecurityGroup"]]:
         '''The list of security groups to associate with the Lambda's network interfaces.
 
         Only used if 'vpc' is supplied.
@@ -3371,45 +2991,10 @@ class StartStateMachineFunctionProps(_aws_cdk_aws_lambda_ceddda9d.FunctionOption
         group will be created for this function.
         '''
         result = self._values.get("security_groups")
-        return typing.cast(typing.Optional[typing.List[_aws_cdk_aws_ec2_ceddda9d.ISecurityGroup]], result)
+        return typing.cast(typing.Optional[typing.List["_aws_cdk_aws_ec2_ceddda9d.ISecurityGroup"]], result)
 
     @builtins.property
-    def snap_start(self) -> typing.Optional[_aws_cdk_aws_lambda_ceddda9d.SnapStartConf]:
-        '''Enable SnapStart for Lambda Function.
-
-        SnapStart is currently supported only for Java 11, 17 runtime
-
-        :default: - No snapstart
-        '''
-        result = self._values.get("snap_start")
-        return typing.cast(typing.Optional[_aws_cdk_aws_lambda_ceddda9d.SnapStartConf], result)
-
-    @builtins.property
-    def system_log_level(self) -> typing.Optional[builtins.str]:
-        '''(deprecated) Sets the system log level for the function.
-
-        :default: "INFO"
-
-        :deprecated: Use ``systemLogLevelV2`` as a property instead.
-
-        :stability: deprecated
-        '''
-        result = self._values.get("system_log_level")
-        return typing.cast(typing.Optional[builtins.str], result)
-
-    @builtins.property
-    def system_log_level_v2(
-        self,
-    ) -> typing.Optional[_aws_cdk_aws_lambda_ceddda9d.SystemLogLevel]:
-        '''Sets the system log level for the function.
-
-        :default: SystemLogLevel.INFO
-        '''
-        result = self._values.get("system_log_level_v2")
-        return typing.cast(typing.Optional[_aws_cdk_aws_lambda_ceddda9d.SystemLogLevel], result)
-
-    @builtins.property
-    def timeout(self) -> typing.Optional[_aws_cdk_ceddda9d.Duration]:
+    def timeout(self) -> typing.Optional["_aws_cdk_ceddda9d.Duration"]:
         '''The function execution time (in seconds) after which Lambda terminates the function.
 
         Because the execution time affects cost, set this value
@@ -3418,19 +3003,19 @@ class StartStateMachineFunctionProps(_aws_cdk_aws_lambda_ceddda9d.FunctionOption
         :default: Duration.seconds(3)
         '''
         result = self._values.get("timeout")
-        return typing.cast(typing.Optional[_aws_cdk_ceddda9d.Duration], result)
+        return typing.cast(typing.Optional["_aws_cdk_ceddda9d.Duration"], result)
 
     @builtins.property
-    def tracing(self) -> typing.Optional[_aws_cdk_aws_lambda_ceddda9d.Tracing]:
+    def tracing(self) -> typing.Optional["_aws_cdk_aws_lambda_ceddda9d.Tracing"]:
         '''Enable AWS X-Ray Tracing for Lambda Function.
 
         :default: Tracing.Disabled
         '''
         result = self._values.get("tracing")
-        return typing.cast(typing.Optional[_aws_cdk_aws_lambda_ceddda9d.Tracing], result)
+        return typing.cast(typing.Optional["_aws_cdk_aws_lambda_ceddda9d.Tracing"], result)
 
     @builtins.property
-    def vpc(self) -> typing.Optional[_aws_cdk_aws_ec2_ceddda9d.IVpc]:
+    def vpc(self) -> typing.Optional["_aws_cdk_aws_ec2_ceddda9d.IVpc"]:
         '''VPC network to place Lambda network interfaces.
 
         Specify this if the Lambda function needs to access resources in a VPC.
@@ -3439,10 +3024,12 @@ class StartStateMachineFunctionProps(_aws_cdk_aws_lambda_ceddda9d.FunctionOption
         :default: - Function is not placed within a VPC.
         '''
         result = self._values.get("vpc")
-        return typing.cast(typing.Optional[_aws_cdk_aws_ec2_ceddda9d.IVpc], result)
+        return typing.cast(typing.Optional["_aws_cdk_aws_ec2_ceddda9d.IVpc"], result)
 
     @builtins.property
-    def vpc_subnets(self) -> typing.Optional[_aws_cdk_aws_ec2_ceddda9d.SubnetSelection]:
+    def vpc_subnets(
+        self,
+    ) -> typing.Optional["_aws_cdk_aws_ec2_ceddda9d.SubnetSelection"]:
         '''Where to place the network interfaces within the VPC.
 
         This requires ``vpc`` to be specified in order for interfaces to actually be
@@ -3454,7 +3041,7 @@ class StartStateMachineFunctionProps(_aws_cdk_aws_lambda_ceddda9d.FunctionOption
         :default: - the Vpc default strategy if not specified
         '''
         result = self._values.get("vpc_subnets")
-        return typing.cast(typing.Optional[_aws_cdk_aws_ec2_ceddda9d.SubnetSelection], result)
+        return typing.cast(typing.Optional["_aws_cdk_aws_ec2_ceddda9d.SubnetSelection"], result)
 
     def __eq__(self, rhs: typing.Any) -> builtins.bool:
         return isinstance(rhs, self.__class__) and rhs._values == self._values
@@ -3474,7 +3061,7 @@ class StartStateMachineFunctionProps(_aws_cdk_aws_lambda_ceddda9d.FunctionOption
     name_mapping={"device_name": "deviceName", "ebs": "ebs"},
 )
 class VolumeProps:
-    def __init__(self, *, device_name: builtins.str, ebs: IEbsParameters) -> None:
+    def __init__(self, *, device_name: builtins.str, ebs: "IEbsParameters") -> None:
         '''
         :param device_name: Name of the volume.
         :param ebs: EBS Block Store Parameters. By default, the 'kmsKeyId' of EBS volume is set to 'amiEncryptionKey.keyId', and 'encrypted' is set to 'true'. If you wish to use a different KMS Key, you may do so. However, please make sure that the necessary permissions and compliance requirements for the KMS Key are already set up.
@@ -3496,7 +3083,7 @@ class VolumeProps:
         return typing.cast(builtins.str, result)
 
     @builtins.property
-    def ebs(self) -> IEbsParameters:
+    def ebs(self) -> "IEbsParameters":
         '''EBS Block Store Parameters.
 
         By default, the 'kmsKeyId' of EBS volume is set to 'amiEncryptionKey.keyId',
@@ -3506,7 +3093,7 @@ class VolumeProps:
         '''
         result = self._values.get("ebs")
         assert result is not None, "Required property 'ebs' is missing"
-        return typing.cast(IEbsParameters, result)
+        return typing.cast("IEbsParameters", result)
 
     def __eq__(self, rhs: typing.Any) -> builtins.bool:
         return isinstance(rhs, self.__class__) and rhs._values == self._values
@@ -3546,8 +3133,6 @@ def _typecheckingstub__80a7e839717caae4ae025b044129f52691774b5a0c3597bea18145046
     adot_instrumentation: typing.Optional[typing.Union[_aws_cdk_aws_lambda_ceddda9d.AdotInstrumentationConfig, typing.Dict[builtins.str, typing.Any]]] = None,
     allow_all_outbound: typing.Optional[builtins.bool] = None,
     allow_public_subnet: typing.Optional[builtins.bool] = None,
-    application_log_level: typing.Optional[builtins.str] = None,
-    application_log_level_v2: typing.Optional[_aws_cdk_aws_lambda_ceddda9d.ApplicationLogLevel] = None,
     architecture: typing.Optional[_aws_cdk_aws_lambda_ceddda9d.Architecture] = None,
     code_signing_config: typing.Optional[_aws_cdk_aws_lambda_ceddda9d.ICodeSigningConfig] = None,
     current_version_options: typing.Optional[typing.Union[_aws_cdk_aws_lambda_ceddda9d.VersionOptions, typing.Dict[builtins.str, typing.Any]]] = None,
@@ -3563,11 +3148,7 @@ def _typecheckingstub__80a7e839717caae4ae025b044129f52691774b5a0c3597bea18145046
     function_name: typing.Optional[builtins.str] = None,
     initial_policy: typing.Optional[typing.Sequence[_aws_cdk_aws_iam_ceddda9d.PolicyStatement]] = None,
     insights_version: typing.Optional[_aws_cdk_aws_lambda_ceddda9d.LambdaInsightsVersion] = None,
-    ipv6_allowed_for_dual_stack: typing.Optional[builtins.bool] = None,
     layers: typing.Optional[typing.Sequence[_aws_cdk_aws_lambda_ceddda9d.ILayerVersion]] = None,
-    log_format: typing.Optional[builtins.str] = None,
-    logging_format: typing.Optional[_aws_cdk_aws_lambda_ceddda9d.LoggingFormat] = None,
-    log_group: typing.Optional[_aws_cdk_aws_logs_ceddda9d.ILogGroup] = None,
     log_retention: typing.Optional[_aws_cdk_aws_logs_ceddda9d.RetentionDays] = None,
     log_retention_retry_options: typing.Optional[typing.Union[_aws_cdk_aws_lambda_ceddda9d.LogRetentionRetryOptions, typing.Dict[builtins.str, typing.Any]]] = None,
     log_retention_role: typing.Optional[_aws_cdk_aws_iam_ceddda9d.IRole] = None,
@@ -3579,9 +3160,6 @@ def _typecheckingstub__80a7e839717caae4ae025b044129f52691774b5a0c3597bea18145046
     role: typing.Optional[_aws_cdk_aws_iam_ceddda9d.IRole] = None,
     runtime_management_mode: typing.Optional[_aws_cdk_aws_lambda_ceddda9d.RuntimeManagementMode] = None,
     security_groups: typing.Optional[typing.Sequence[_aws_cdk_aws_ec2_ceddda9d.ISecurityGroup]] = None,
-    snap_start: typing.Optional[_aws_cdk_aws_lambda_ceddda9d.SnapStartConf] = None,
-    system_log_level: typing.Optional[builtins.str] = None,
-    system_log_level_v2: typing.Optional[_aws_cdk_aws_lambda_ceddda9d.SystemLogLevel] = None,
     timeout: typing.Optional[_aws_cdk_ceddda9d.Duration] = None,
     tracing: typing.Optional[_aws_cdk_aws_lambda_ceddda9d.Tracing] = None,
     vpc: typing.Optional[_aws_cdk_aws_ec2_ceddda9d.IVpc] = None,
@@ -3603,8 +3181,6 @@ def _typecheckingstub__7ad187f6fa75af251088f0d01089ce5af9c6e78ba8a6e1736dfdb9666
     adot_instrumentation: typing.Optional[typing.Union[_aws_cdk_aws_lambda_ceddda9d.AdotInstrumentationConfig, typing.Dict[builtins.str, typing.Any]]] = None,
     allow_all_outbound: typing.Optional[builtins.bool] = None,
     allow_public_subnet: typing.Optional[builtins.bool] = None,
-    application_log_level: typing.Optional[builtins.str] = None,
-    application_log_level_v2: typing.Optional[_aws_cdk_aws_lambda_ceddda9d.ApplicationLogLevel] = None,
     architecture: typing.Optional[_aws_cdk_aws_lambda_ceddda9d.Architecture] = None,
     code_signing_config: typing.Optional[_aws_cdk_aws_lambda_ceddda9d.ICodeSigningConfig] = None,
     current_version_options: typing.Optional[typing.Union[_aws_cdk_aws_lambda_ceddda9d.VersionOptions, typing.Dict[builtins.str, typing.Any]]] = None,
@@ -3620,11 +3196,7 @@ def _typecheckingstub__7ad187f6fa75af251088f0d01089ce5af9c6e78ba8a6e1736dfdb9666
     function_name: typing.Optional[builtins.str] = None,
     initial_policy: typing.Optional[typing.Sequence[_aws_cdk_aws_iam_ceddda9d.PolicyStatement]] = None,
     insights_version: typing.Optional[_aws_cdk_aws_lambda_ceddda9d.LambdaInsightsVersion] = None,
-    ipv6_allowed_for_dual_stack: typing.Optional[builtins.bool] = None,
     layers: typing.Optional[typing.Sequence[_aws_cdk_aws_lambda_ceddda9d.ILayerVersion]] = None,
-    log_format: typing.Optional[builtins.str] = None,
-    logging_format: typing.Optional[_aws_cdk_aws_lambda_ceddda9d.LoggingFormat] = None,
-    log_group: typing.Optional[_aws_cdk_aws_logs_ceddda9d.ILogGroup] = None,
     log_retention: typing.Optional[_aws_cdk_aws_logs_ceddda9d.RetentionDays] = None,
     log_retention_retry_options: typing.Optional[typing.Union[_aws_cdk_aws_lambda_ceddda9d.LogRetentionRetryOptions, typing.Dict[builtins.str, typing.Any]]] = None,
     log_retention_role: typing.Optional[_aws_cdk_aws_iam_ceddda9d.IRole] = None,
@@ -3636,9 +3208,6 @@ def _typecheckingstub__7ad187f6fa75af251088f0d01089ce5af9c6e78ba8a6e1736dfdb9666
     role: typing.Optional[_aws_cdk_aws_iam_ceddda9d.IRole] = None,
     runtime_management_mode: typing.Optional[_aws_cdk_aws_lambda_ceddda9d.RuntimeManagementMode] = None,
     security_groups: typing.Optional[typing.Sequence[_aws_cdk_aws_ec2_ceddda9d.ISecurityGroup]] = None,
-    snap_start: typing.Optional[_aws_cdk_aws_lambda_ceddda9d.SnapStartConf] = None,
-    system_log_level: typing.Optional[builtins.str] = None,
-    system_log_level_v2: typing.Optional[_aws_cdk_aws_lambda_ceddda9d.SystemLogLevel] = None,
     timeout: typing.Optional[_aws_cdk_ceddda9d.Duration] = None,
     tracing: typing.Optional[_aws_cdk_aws_lambda_ceddda9d.Tracing] = None,
     vpc: typing.Optional[_aws_cdk_aws_ec2_ceddda9d.IVpc] = None,
@@ -3878,8 +3447,6 @@ def _typecheckingstub__e2190d2a548e965066a88afc4c9200b01b6ec131b60f821166bf35aed
     adot_instrumentation: typing.Optional[typing.Union[_aws_cdk_aws_lambda_ceddda9d.AdotInstrumentationConfig, typing.Dict[builtins.str, typing.Any]]] = None,
     allow_all_outbound: typing.Optional[builtins.bool] = None,
     allow_public_subnet: typing.Optional[builtins.bool] = None,
-    application_log_level: typing.Optional[builtins.str] = None,
-    application_log_level_v2: typing.Optional[_aws_cdk_aws_lambda_ceddda9d.ApplicationLogLevel] = None,
     architecture: typing.Optional[_aws_cdk_aws_lambda_ceddda9d.Architecture] = None,
     code_signing_config: typing.Optional[_aws_cdk_aws_lambda_ceddda9d.ICodeSigningConfig] = None,
     current_version_options: typing.Optional[typing.Union[_aws_cdk_aws_lambda_ceddda9d.VersionOptions, typing.Dict[builtins.str, typing.Any]]] = None,
@@ -3895,11 +3462,7 @@ def _typecheckingstub__e2190d2a548e965066a88afc4c9200b01b6ec131b60f821166bf35aed
     function_name: typing.Optional[builtins.str] = None,
     initial_policy: typing.Optional[typing.Sequence[_aws_cdk_aws_iam_ceddda9d.PolicyStatement]] = None,
     insights_version: typing.Optional[_aws_cdk_aws_lambda_ceddda9d.LambdaInsightsVersion] = None,
-    ipv6_allowed_for_dual_stack: typing.Optional[builtins.bool] = None,
     layers: typing.Optional[typing.Sequence[_aws_cdk_aws_lambda_ceddda9d.ILayerVersion]] = None,
-    log_format: typing.Optional[builtins.str] = None,
-    logging_format: typing.Optional[_aws_cdk_aws_lambda_ceddda9d.LoggingFormat] = None,
-    log_group: typing.Optional[_aws_cdk_aws_logs_ceddda9d.ILogGroup] = None,
     log_retention: typing.Optional[_aws_cdk_aws_logs_ceddda9d.RetentionDays] = None,
     log_retention_retry_options: typing.Optional[typing.Union[_aws_cdk_aws_lambda_ceddda9d.LogRetentionRetryOptions, typing.Dict[builtins.str, typing.Any]]] = None,
     log_retention_role: typing.Optional[_aws_cdk_aws_iam_ceddda9d.IRole] = None,
@@ -3911,9 +3474,6 @@ def _typecheckingstub__e2190d2a548e965066a88afc4c9200b01b6ec131b60f821166bf35aed
     role: typing.Optional[_aws_cdk_aws_iam_ceddda9d.IRole] = None,
     runtime_management_mode: typing.Optional[_aws_cdk_aws_lambda_ceddda9d.RuntimeManagementMode] = None,
     security_groups: typing.Optional[typing.Sequence[_aws_cdk_aws_ec2_ceddda9d.ISecurityGroup]] = None,
-    snap_start: typing.Optional[_aws_cdk_aws_lambda_ceddda9d.SnapStartConf] = None,
-    system_log_level: typing.Optional[builtins.str] = None,
-    system_log_level_v2: typing.Optional[_aws_cdk_aws_lambda_ceddda9d.SystemLogLevel] = None,
     timeout: typing.Optional[_aws_cdk_ceddda9d.Duration] = None,
     tracing: typing.Optional[_aws_cdk_aws_lambda_ceddda9d.Tracing] = None,
     vpc: typing.Optional[_aws_cdk_aws_ec2_ceddda9d.IVpc] = None,
@@ -3935,8 +3495,6 @@ def _typecheckingstub__eb8aced8ffa672fc77ae37739036b372b4660892fca88a7d548de7d98
     adot_instrumentation: typing.Optional[typing.Union[_aws_cdk_aws_lambda_ceddda9d.AdotInstrumentationConfig, typing.Dict[builtins.str, typing.Any]]] = None,
     allow_all_outbound: typing.Optional[builtins.bool] = None,
     allow_public_subnet: typing.Optional[builtins.bool] = None,
-    application_log_level: typing.Optional[builtins.str] = None,
-    application_log_level_v2: typing.Optional[_aws_cdk_aws_lambda_ceddda9d.ApplicationLogLevel] = None,
     architecture: typing.Optional[_aws_cdk_aws_lambda_ceddda9d.Architecture] = None,
     code_signing_config: typing.Optional[_aws_cdk_aws_lambda_ceddda9d.ICodeSigningConfig] = None,
     current_version_options: typing.Optional[typing.Union[_aws_cdk_aws_lambda_ceddda9d.VersionOptions, typing.Dict[builtins.str, typing.Any]]] = None,
@@ -3952,11 +3510,7 @@ def _typecheckingstub__eb8aced8ffa672fc77ae37739036b372b4660892fca88a7d548de7d98
     function_name: typing.Optional[builtins.str] = None,
     initial_policy: typing.Optional[typing.Sequence[_aws_cdk_aws_iam_ceddda9d.PolicyStatement]] = None,
     insights_version: typing.Optional[_aws_cdk_aws_lambda_ceddda9d.LambdaInsightsVersion] = None,
-    ipv6_allowed_for_dual_stack: typing.Optional[builtins.bool] = None,
     layers: typing.Optional[typing.Sequence[_aws_cdk_aws_lambda_ceddda9d.ILayerVersion]] = None,
-    log_format: typing.Optional[builtins.str] = None,
-    logging_format: typing.Optional[_aws_cdk_aws_lambda_ceddda9d.LoggingFormat] = None,
-    log_group: typing.Optional[_aws_cdk_aws_logs_ceddda9d.ILogGroup] = None,
     log_retention: typing.Optional[_aws_cdk_aws_logs_ceddda9d.RetentionDays] = None,
     log_retention_retry_options: typing.Optional[typing.Union[_aws_cdk_aws_lambda_ceddda9d.LogRetentionRetryOptions, typing.Dict[builtins.str, typing.Any]]] = None,
     log_retention_role: typing.Optional[_aws_cdk_aws_iam_ceddda9d.IRole] = None,
@@ -3968,9 +3522,6 @@ def _typecheckingstub__eb8aced8ffa672fc77ae37739036b372b4660892fca88a7d548de7d98
     role: typing.Optional[_aws_cdk_aws_iam_ceddda9d.IRole] = None,
     runtime_management_mode: typing.Optional[_aws_cdk_aws_lambda_ceddda9d.RuntimeManagementMode] = None,
     security_groups: typing.Optional[typing.Sequence[_aws_cdk_aws_ec2_ceddda9d.ISecurityGroup]] = None,
-    snap_start: typing.Optional[_aws_cdk_aws_lambda_ceddda9d.SnapStartConf] = None,
-    system_log_level: typing.Optional[builtins.str] = None,
-    system_log_level_v2: typing.Optional[_aws_cdk_aws_lambda_ceddda9d.SystemLogLevel] = None,
     timeout: typing.Optional[_aws_cdk_ceddda9d.Duration] = None,
     tracing: typing.Optional[_aws_cdk_aws_lambda_ceddda9d.Tracing] = None,
     vpc: typing.Optional[_aws_cdk_aws_ec2_ceddda9d.IVpc] = None,
@@ -3986,3 +3537,6 @@ def _typecheckingstub__9d1da9ea32dfd5f2b80899e3b65cfd331e8667db730686426f0ff1a17
 ) -> None:
     """Type checking stubs"""
     pass
+
+for cls in [IActionCommands, IComponentDocument, IComponentProps, IEbsParameters, IInputParameter, IPhases, IStepCommands]:
+    typing.cast(typing.Any, cls).__protocol_attrs__ = typing.cast(typing.Any, cls).__protocol_attrs__ - set(['__jsii_proxy_class__', '__jsii_type__'])