fix: Add option to bundle aws sdk as part of code asset

.gitallowed

@@ -30,6 +30,7 @@ account: '924023996002'
 account: '919366029133' #cn-north-1
 account: '919830735681' #cn-northwest-1
 account: '909464085924' #ap-southeast-3
+account: '564877687649' #il-central-1
 
 # The account IDs of password rotation applications of Serverless Application Repository
 # https://docs.aws.amazon.com/secretsmanager/latest/userguide/enable-rotation-rds.html

.gitattributes

@@ -11,3 +11,8 @@
 *.jpg binary
 *.tgz binary
 *.tar.gz binary
+
+# Hide snapshots from GitHub UI, except for the actual templates
+**/*.snapshot/** linguist-generated
+**/*.snapshot/**/*.template.json -linguist-generated
+**/*.snapshot/**/*DeployAssert*.template.json linguist-generated

.github/ISSUE_TEMPLATE/bug-report.yml

@@ -95,7 +95,7 @@ body:
       label: Language
       multiple: true
       options:
-        - Typescript
+        - TypeScript
         - Python
         - .NET
         - Java

.github/PULL_REQUEST_TEMPLATE.md

@@ -1,16 +1,22 @@
-> REPLACE THIS TEXT BLOCK
->
-> Describe the reason for this change, what the solution is, and any
-> important design decisions you made. 
->
-> Remember to follow the [CONTRIBUTING GUIDE] and [DESIGN GUIDELINES] for any
-> code you submit.
->
-> [CONTRIBUTING GUIDE]: https://github.com/aws/aws-cdk/blob/main/CONTRIBUTING.md
-> [DESIGN GUIDELINES]: https://github.com/aws/aws-cdk/blob/main/docs/DESIGN_GUIDELINES.md
+### Issue # (if applicable)
 
 Closes #<issue number here>.
 
+### Reason for this change
+
+<!--What is the bug or use case behind this change?-->
+
+### Description of changes
+
+<!--What code changes did you make? Have you made any important design decisions?-->
+
+### Description of how you validated changes
+
+<!--Have you added any unit tests and/or integration tests?-->
+
+### Checklist
+- [ ] My code adheres to the [CONTRIBUTING GUIDE](https://github.com/aws/aws-cdk/blob/main/CONTRIBUTING.md) and [DESIGN GUIDELINES](https://github.com/aws/aws-cdk/blob/main/docs/DESIGN_GUIDELINES.md)
+
 ----
 
 *By submitting this pull request, I confirm that my contribution is made under the terms of the Apache-2.0 license*

.github/dependabot.yml

@@ -18,24 +18,6 @@ updates:
     labels:
       - "auto-approve"
     open-pull-requests-limit: 5
-
-  # run same dependabot upgrades on v1-main
-  - package-ecosystem: "github-actions"
-    directory: "/"
-    target-branch: "v1-main"
-    schedule:
-      interval: "weekly"
-    labels: 
-      - "auto-approve"
-    open-pull-requests-limit: 5
-  - package-ecosystem: "pip"
-    directory: "/packages/@aws-cdk/lambda-layer-awscli"
-    target-branch: "v1-main"
-    schedule:
-      interval: "weekly"
-    labels: 
-      - "auto-approve"
-    open-pull-requests-limit: 5
 
   # Non-TypeScript init template dependency updates
   - package-ecosystem: "pip"

.github/workflows/README.md

@@ -5,58 +5,101 @@ These workflows and actions are configured in the AWS CDK GitHub repository.
 ## Pull Request Triggered
 
 ### Auto Approve
+
 [auto-approve.yml](auto-approve.yml): Approves merging PRs with the
 `auto-approve` label.
 Owner: Core CDK team
 
+### PR Linter Trigger
+
+[pr-linter-trigger.yml](pr-linter-trigger.yml): A workflow triggered by `pull_request_review`
+that uploads necessary information about the pull request and then triggers the
+[pr-linter](pr-linter.yml). Necessary because the `pull_request_review` trigger runs actions
+on the merge branch not the base branch (with its secrets).
+Owner: Core CDK team
+
 ### PR Linter
+
 [pr-linter.yml](pr-linter.yml): Runs `tools/@aws-cdk-prlint` on each PR to
 check for correctness.
 Owner: Core CDK team
 
 ### v2-main PR automation
+
 [v2-pull-request.yml](v2-pull-request.yml): Runs `pkglint` on merge forward PRs
 and commits the results.
 Owner: Core CDK team
 
 ### Label Assigner
+
 [issue-label-assign.yml](issue-label-assign.yml): Github action for automatically adding labels and/or setting assignees when an Issue or PR is opened or edited based on user-defined Area
 Owner: CDK support team
 
 ### PR Labeler
-[pr-labeler.yml](pr-labeler.yml): GitHub action for automatically porting triage labels from issues 
+
+[pr-labeler.yml](pr-labeler.yml): GitHub action for automatically porting triage labels from issues
 linked in the PR description to the PR.
 Owner: Core CDK team
 
 ### GitHub Merit Badger
+
 [github-merit-badger.yml](github-merit-badger.yml): GitHub action that adds 'merit badges' to pull
 requests based on the users prior contributions to the CDK.
 Owner: Core CDK team
 
+### Request CLI Integ Test
+
+[request-cli-integ-test.yml](request-cli-integ-test.yml):
+Checks for relevant changes to the CLI code and requests a deployment to the `test-pipeline` environment.
+When approved this pushes the PR to the testing pipeline,
+thus starting the cli integ test build.
+Owner: Core CDK team
+
 ## Issue Triggered
 
 ### Closed Issue Message
+
 [closed-issue-message.yml](closed-issue-message.yml): Adds a reminder message
 to issues that are closed.
 Owner: CDK support team
 
 ### Label Assigner
+
 [issue-label-assign.yml](issue-label-assign.yml): Github action for automatically adding labels and/or setting assignees when an Issue or PR is opened or edited based on user-defined Area
 Owner: CDK support team
 
 ## Scheduled Actions
 
 ### Issue Lifecycle Handling
+
 [close-stale-issues.yml](close-stale-issues.yml): Handles labeling issues and
 PRs with `closing-soon`, `response-requested`, etc.
 Owner: CDK support team
 
 ### Yarn Upgrader
+
 [yarn-upgrade.yml](yarn-upgrade.yml): Upgrades yarn dependencies and creates a
 patch file for downloading.
 Owner: Core CDK team
 
+### AWS Service Spec Update
+
+[spec-update.yml](spec-update.yml): Updates AWS Service Spec and related packages to their latest versions
+and submits an auto-approve PR for it.
+Owner: Core CDK team
+
 ### Issue Reprioritizer
+
 [issue-reprioritization.yml](issue-reprioritization.yml): GitHub action that labels `p2`
 issues as `p1` if a certain level of community engagement is met.
-Owner: Core CDK team
+Owner: Core CDK team
+
+### Issue Metrics
+
+[repo-metrics.yml](repo-metrics.yml): GitHub action that runs monthly to report on metrics for issues and PRs created last month.
+Owner: Core CDK team
+
+### Contributors File
+
+[update-contributors.yml](update-contributors.yml): GitHub action that runs monthly to create a pull request for updating a CONTRIBUTORS file with the top contributors.
+Owner: Core CDK team

.github/workflows/auto-approve.yml

@@ -12,6 +12,6 @@ jobs:
     permissions:
       pull-requests: write
     steps:
-    - uses: hmarr/auto-approve-action@v3.2.1
+    - uses: hmarr/auto-approve-action@v4.0.0
       with:
         github-token: "${{ secrets.GITHUB_TOKEN }}"

.github/workflows/close-stale-issues.yml

@@ -8,6 +8,8 @@ on:
 
 jobs:
   cleanup:
+    # this workflow will always fail in forks; bail if this isn't running in the upstream
+    if: github.repository == 'aws/aws-cdk'
     permissions:
       issues: write
       contents: read

.github/workflows/close-stale-prs.yml

@@ -5,6 +5,8 @@ on:
   workflow_dispatch:
 jobs:
   close-stale-prs:
+    # this workflow will always fail in forks; bail if this isn't running in the upstream
+    if: github.repository == 'aws/aws-cdk'
     permissions:
       pull-requests: write
     runs-on: ubuntu-latest
@@ -23,5 +25,5 @@ jobs:
           important-checks-regex: AutoBuildv2Project1C6BFA3F
           warn-message: This PR has been in the STATE state for 3 weeks, and looks abandoned. To keep this PR from being closed, please continue work on it. If not, it will automatically be closed in a week.
           close-message: This PR has been deemed to be abandoned, and will be automatically closed. Please create a new PR for these changes if you think this decision has been made in error.
-          skip-labels: contribution/core, pr-linter/do-not-close
+          skip-labels: contribution/core,pr-linter/do-not-close,pr/needs-maintainer-review
           close-label: closed-for-staleness

.github/workflows/github-merit-badger.yml

@@ -17,4 +17,4 @@ jobs:
           badges: '[beginning-contributor,repeat-contributor,valued-contributor,admired-contributor,star-contributor,distinguished-contributor]'
           thresholds: '[0,3,6,13,25,50]'
           badge-type: 'achievement'
-          ignore-usernames: '[RomainMuller,rix0rrr,MrArnoldPalmer,iliapolo,otaviomacedo,madeline-k,kaizencc,comcalvi,corymhall,peterwoodworth,ryparker,TheRealAmazonKendra,vinayak-kukreja,Naumel,mrgrain,pahud,cgarvis,kellertk,HBobertz,sumupitchayan,pattasai,SankyRed,udaypant,colifran,khushail,aws-cdk-automation,dependabot[bot],mergify[bot]]'
+          ignore-usernames: '[rix0rrr,MrArnoldPalmer,iliapolo,otaviomacedo,madeline-k,kaizencc,comcalvi,TheRealAmazonKendra,vinayak-kukreja,mrgrain,pahud,cgarvis,kellertk,HBobertz,sumupitchayan,SankyRed,udaypant,colifran,khushail,scanlonp,mikewrighton,moelasmar,paulhcsun,awsmjs,evgenyka,GavinZZ,aaythapa,xazhao,ConnorRobertson,ssenchenko,gracelu0,jfuss,SimonCMoore,aws-cdk-automation,dependabot[bot],mergify[bot]]'

.github/workflows/handle-stale-discussions.yml

@@ -0,0 +1,20 @@
+name: HandleStaleDiscussions
+on:
+  schedule:
+    - cron: '0 */4 * * *'
+  discussion_comment:
+    types: [created]
+
+jobs:
+  handle-stale-discussions:
+    # this workflow will always fail in forks; bail if this isn't running in the upstream
+    if: github.repository == 'aws/aws-cdk'
+    name: Handle stale discussions
+    runs-on: ubuntu-latest
+    permissions:
+      discussions: write
+    steps:
+      - name: Stale discussions action
+        uses: aws-github-ops/handle-stale-discussions@v1
+        env:
+          GITHUB_TOKEN:  ${{secrets.GITHUB_TOKEN}}

.github/workflows/issue-label-assign.yml

@@ -58,7 +58,7 @@ jobs:
 env:
  OSDS_DEVS: >
            {
-             "assignees":["NGL321","peterwoodworth"]
+             "assignees":["indrora","khushail","hunhsieh"]
            }
 
  AREA_AFFIXES: >
@@ -239,6 +239,8 @@ env:
             {"area":"@aws-cdk/aws-s3outposts","keywords":["aws-s3outposts","s3outposts"],"labels":["@aws-cdk/aws-s3outposts"]},
             {"area":"@aws-cdk/aws-sagemaker","keywords":["aws-sagemaker","sagemaker"],"labels":["@aws-cdk/aws-sagemaker"]},
             {"area":"@aws-cdk/aws-sam","keywords":["serverless-application-model","aws-sam","sam"],"labels":["@aws-cdk/aws-sam"]},
+            {"area":"@aws-cdk/aws-scheduler","keywords":["aws-scheduler","scheduler"],"labels":["@aws-cdk/aws-scheduler"]},
+            {"area":"@aws-cdk/aws-scheduler-targets","keywords":["aws-scheduler-targets","scheduler-targets"],"labels":["@aws-cdk/aws-scheduler-targets"]},
             {"area":"@aws-cdk/aws-sdb","keywords":["simpledb","aws-sdb","sdb"],"labels":["@aws-cdk/aws-sdb"]},
             {"area":"@aws-cdk/aws-secretsmanager","keywords":["secret","aws-secretsmanager","secrets-manager"],"labels":["@aws-cdk/aws-secretsmanager"]},
             {"area":"@aws-cdk/aws-securityhub","keywords":["aws-securityhub","security-hub"],"labels":["@aws-cdk/aws-securityhub"]},
@@ -263,7 +265,6 @@ env:
             {"area":"@aws-cdk/aws-wafv2","keywords":["wafv2","aws-wafv2"],"labels":["@aws-cdk/aws-wafv2"]},
             {"area":"@aws-cdk/aws-workspaces","keywords":["aws-workspaces","workspaces"],"labels":["@aws-cdk/aws-workspaces"]},
             {"area":"@aws-cdk/aws-xray","keywords":["aws-xray","xray"],"labels":["@aws-cdk/aws-xray"]},
-            {"area":"@aws-cdk/cfnspec","keywords":["cfnspec"],"labels":["@aws-cdk/cfnspec"]},
             {"area":"@aws-cdk/cloud-assembly-schema","keywords":["cloud-assembly-schema","manifest"],"labels":["@aws-cdk/cloud-assembly-schema"]},
             {"area":"@aws-cdk/cloudformation-diff","keywords":["cloudformation-diff","cfn-diff"],"labels":["@aws-cdk/cloudformation-diff"]},
             {"area":"@aws-cdk/cloudformation-include","keywords":["cloudformation-include","cfn-include"],"labels":["@aws-cdk/cloudformation-include"]},
@@ -281,5 +282,6 @@ env:
             {"area":"@aws-cdk/aws-aps","keywords":["aps","aws-aps","prometheus"],"labels":["@aws-cdk/aws-aps"]},
             {"area":"@aws-cdk/triggers","keywords":["trigger","triggers"],"labels":["@aws-cdk/triggers"]},
             {"area":"@aws-cdk/integ-tests","keywords":["integ-tests", "integ"],"labels":["@aws-cdk/integ-tests"]},
-            {"area":"@aws-cdk/integ-runner","keywords":["integ-runner"],"labels":["@aws-cdk/integ-runner"]}
+            {"area":"@aws-cdk/integ-runner","keywords":["integ-runner"],"labels":["@aws-cdk/integ-runner"]},
+            {"area":"@aws-cdk/app-staging-synthesizer-alpha", "keywords":["app-staging-synthesizer", "app-staging-synthesizer-alpha"],"labels":["@aws-cdk/app-staging-synthesizer-alpha"]}
           ]

.github/workflows/pr-linter-trigger.yml

@@ -0,0 +1,23 @@
+name: PR Linter Trigger
+
+on:
+  pull_request_review:
+    types: [submitted, edited, dismissed]
+
+jobs:
+  upload:
+    runs-on: ubuntu-latest
+
+    steps:
+      - name: Save PR number
+        env:
+          PR_NUMBER: ${{ github.event.pull_request.number }}
+          PR_SHA: ${{ github.event.pull_request.head.sha }}
+        run: |
+          mkdir -p ./pr
+          echo $PR_NUMBER > ./pr/pr_number
+          echo $PR_SHA > ./pr/pr_sha
+      - uses: actions/upload-artifact@v4
+        with:
+          name: pr_info
+          path: pr/