[Snyk] Security upgrade aws-cdk-lib from 2.141.0 to 2.240.0

[pushkala-datastax]

Snyk has created this PR to fix 1 vulnerabilities in the npm dependencies of this project.

Snyk changed the following file(s):

• scripts/aws/package.json
• scripts/aws/package-lock.json

Vulnerabilities that will be fixed with an upgrade:

	Issue	Score
	Inefficient Algorithmic Complexity SNYK-JS-BRACEEXPANSION-17706650	721

Breaking Change Risk

Notice: This assessment is enhanced by AI.

---

Important

• Check the changes in this PR to ensure they won't cause issues with your project.
• Max score is 1000. Note that the real score may have changed since the PR was raised.
• This PR was automatically created by Snyk using the credentials of a real user.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report
📜 Customise PR templates
🛠 Adjust project settings
📚 Read about Snyk's upgrade logic

---

Learn how to fix vulnerabilities with free interactive lessons:

🦉 Learn about vulnerability in an interactive lesson of Snyk Learn.

[pushkala-datastax]

This upgrade spans multiple minor versions and includes specific breaking changes for low-level (L1) constructs. While most high-level (L2) constructs remain backward-compatible, action may be required if you use the affected resources.

Breaking Changes:
According to the official changelog, several L1 constructs were updated to more accurately reflect their underlying CloudFormation definitions. These changes could break your deployments if you use these specific resources:

• v2.239.0:
  • aws-licensemanager:AWS::LicenseManager::License: The Beneficiary and ProductSKU properties are now required.
  • aws-sagemaker:AWS::SageMaker::Cluster: The Orchestrator.Eks property is now immutable.
• A separate release introduced this change:
  • aws-ssm:AWS::SSM::MaintenanceWindow: The Id attribute was removed.

Recommendation:
Review your CDK application for usage of these specific L1 constructs (AWS::LicenseManager::License, AWS::SageMaker::Cluster, AWS::SSM::MaintenanceWindow). If they are in use, you must update your code to align with the new, stricter definitions to prevent deployment failures.

Source: AWS CDK GitHub Releases

Notice 🤖: This content was augmented using artificial intelligence. AI-generated content may contain errors and should be reviewed for accuracy before use.